Kungani iyunithi ye-VPN iqala ngaphambi kwenethiwekhi bese ifa

Qalisa umshini, ngena, futhi wazi ukuthi umhubhe wakhuphuka futhi wafa ngemva kwemizuzwana embalwa. Iphrofayela yayilungile, isitifiketi sasilungile, futhi umkhondo oyedwa osele uyijenali yalokho kuqalisa. Okwakuvame ukwenzeka umncintiswano: iyunithi yaqala ngaphambi kokuthi umshini ube nekheli, futhi ukulandelana eyakumemezela kwakungasho lokho okubonakala kukusho. Konke okungezansi kumayelana nokufakazela lowo mncintiswano kusukela ebufakazini nokuwuvala kahle.

Umgomo uyindawo yokuhlangana, hhayi umphathi

network-online.target akazi ukuthi inethiwekhi iyini. Kuyindawo yokuxhumanisa eqoqa leyo nsizakalo okufanele ilibazise ukuqalisa kuze kube yilapho ukuxhumana kusetshenziseka, futhi idlulisela incazelo kulowo mphathi wenethiwekhi ongumnikazi womshini. Kumakhompyutha amaningi asetafuleni nakumaseva lokho kusho insizakalo yokulinda enikezwa i-NetworkManager noma i-systemd-networkd. Uma ungayivuli neyodwa, umgomo awunakho okungalindelwa, ngakho uqedwa ngaso leso sikhathi lapho okuthile kuwudonsela ngaphakathi, futhi lokho kungase kwenzeke kudala ngaphambi kokuthi i-DHCP iphendule. Umugqa wokulandelana kuyunithi yakho wawuthembekile futhi nokho awunasizakalo.

Ngakho umbuzo wokuqala akuwona ukuthi iyunithi yakho imemezela ini. Umbuzo ukuthi ingabe kukhona okuthile kulo mshini okwenza ngempela ukulinda.

Funda ukuqalisa kokugcina esikhundleni sefayela leyunithi

Amafayela eyunithi achaza inhloso, futhi ijenali ichaza okwenzekile. Cela lokho kuqalisa kuphela, ngezimpawu zesikhathi ezingaguquguquki ukuze umyalezo ngamunye uhlale kuwashi elilodwa. Bese uthola imigqa emibili: isikhathi lapho iyunithi yomhubhe yaqala ukuqalisa, nesikhathi lapho ikheli lavela khona noma insizakalo yokulinda yaphela. Hlela lezo zinombolo ezimbili futhi umncintiswano uyaqinisekiswa noma uyakhishwa.

Umbono wokuncika uyakufakazela lokho. Uma uchungechunge olubalulekile lweyunithi yomhubhe lungenayo insizakalo yokulinda, akukho okwalibazisa ukuqalisa kuleyo ndlela, futhi umgomo awenzanga umsebenzi owawucabanga. Imibono emibili, isiphetho esisodwa.

systemctl list-units --type=service --state=running | grep wait-online
journalctl -b -o short-monotonic -u openvpn-client@office

Engeza ukulinda, bese kuba ukuzama futhi

Sebenzisa i-drop-in esikhundleni sokuhlela iyunithi epakishiwe, ukuze isibuyekezo sephakethe singakulahli ushintsho ngasese. Imiyalo emibili ibalulekile: iyunithi kufanele ihlelwe ngemva komgomo, futhi kufanele idonse umgomo kumthetho ofanayo. Ukuhlela kukodwa akubizi umgomo; isifiso yikho okwenza lokho.

Iyunithi epakishiwe yeklayenti le-OpenVPN isivele ithwele kokubili. Amayunithi abhalwe ngesandla ngokuvamile athwala eyodwa noma lutho, okufanele kuhlolwe ngaphambi kokwengeza noma yini.

[Service]
Restart=on-failure
RestartSec=15

Kungani ubuthongo obungashintshi kuwugibe

Ubuthongo ku-ExecStartPre bushaya ngathi ukulungisa ukulandelana futhi buziphatha njengokulibazisa okunezinyathelo ezengeziwe. Bunciphisa ukuqalisa ngakunye, kuhlanganise nalokho obekunempilo, futhi busahlulwa lapho ukuxhumana kuthatha isikhathi eside kunenombolo oyikhethile.

Okubi nakakhulu, bufihla ukuthi insizakalo yokulinda iyasebenza yini, ngakho ukwehluleka okulandelayo kuvela njengenkinga entsha sha isikhundla sokuba yileyo naleyo enesikhathi esihlukile. Ukulibazisa okufushane kokuqalisa kabusha iyithuluzi elingcono: akubizi lutho ekuqaliseni okunempilo futhi kuguqula umncintiswano olahlekile kube omunye umzamo. Gcina isikhawu sisezingeni elifanele futhi vumela iyunithi ukuthi iphumelele. Uma iphinda iqalise ingunaphakade, iphrofayela yephukile futhi akukho inani lokuzama futhi elingakushintsha lokho, ngakho funda ijenerali esikhundleni sokukhuphula isikhawu.

Lapho ukulandelana kulungile kanti amagama asehluleka

Iyunithi esebenzayo enomzila womhubhe isho ukuthi ukulandelana kwenze umsebenzi wakho futhi iphutha elisele lisezingeni eliphezulu ngelinye. Isimo esijwayelekile isilungiselelo somxazululi esisetshenziswa iskripthi se-up yomhubhe ngaphambi kokuthi ukuxhumana noma umxazululi ulungele ukugcina lokho. Qhathanisa isimo somxazululi ngesikhathi sokwehluleka nesimo ngemva kokuqalisa kabusha iyunithi yomhubhe.

Uma ukuqalisa kabusha kulungisa ukusesha, unephutha lokulandelana kokuqalisa hhayi iseva ye-DNS engalungile, futhi lezi ezimbili zidinga izilungiso ezihlukile. Bese ufakazela konke ngokuqalisa okubandayo esikhundleni sokuqalisa kabusha insizakalo, ngoba ukuqalisa kabusha kusebenza kunethiwekhi esivele iphakeme futhi kuzofihla kanye lelo phutha olijaha. Phinda lokho ngokuxhumana okwenziwe ngamabomu ukuthi kube kancane, futhi thatha iyunithi esebenza kuphela lapho inethiwekhi ishesha njengento ephukile namanje.