Kungani i-wildcard kumyalo we-route we-OpenVPN ingeke isebenze

i-route ifaka ama-prefix wamakheli, ngakho iphethini yegama lomsingathi ayinalutho engaluqhathanisa nalo. Sebenzisa i-prefix kumanethiwekhi kanye ne-proxy noma ifayela le-PAC lapho amadomain kufanele anqume.

Inhloso inengqondo: ukuthumela yonke into yesizinda esisodwa senkampani ngomhubhe futhi ushiye okunye. Umyalo olungiswayo ufaka imizila, futhi umzila awunaso isiqondiso segama lomsingathi ongaqhathaniswa naso. Yonke imizamo yokubhala i-wildcard kuwo ikhiqiza iphutha lokuhlaziya noma, okubi kakhulu, umzila osebenza namuhla ngengozi ngoba igama laxazululwa laba ikheli elilodwa. Amasu amabili ahlukene acelwa ukuba enze umsebenzi womunye nomunye.

Yini umzila ayifakayo, futhi yini angakaze ayifunde

I-entry yomzila ithi i-prefix yendawo ekuyiwa kuyo ingafinyelelwa ngesixhumi esibonakalayo. I-kernel iqhathanisa amaphakethe nalawo ma-prefix, ngakho izihlonzi kuphela ezihilelekile ngamakheli nama-mask. Igama lomsingathi alikaze livele esinqumweni sokudlulisela, yingakho iphethini ayikwazi ukuqhathaniswa lapho.

OpenVPN ingamukela igama elixazululekayo kweminye imingcele yomzila, futhi lokho kubekezelela kuwumthombo wokudideka. Igama lixazululwa ngenkathi ukulungiselela kusetshenziswa, kukhiqiza ikheli elilodwa noma amaningi abe imizila evamile. Ngemuva kwalokho, igama linyamalala ngokuphelele esithombeni.

Ngakho umzila owakhiwe egameni uyisithombe sesikhashana, huwona umthetho. Uhlanganisa lokho igama elaxazululeka kukho ngesikhathi umhubhe uqala, futhi lokho kuyindlela yokuziphatha ongayifuni emndenini wabasingathi oshintshayo. Irekhodi elizothuthuka kusasa lishiya umzila ukhomba izolo.

Lapho indawo ekuyiwa kuyo iyiprefix ngempela

Uma okuhlosiwe kuyinethiwekhi yangasese eyaziwayo, bhala i-prefix. Ngokwesibonelo esivela endaweni yemibhalo, umsingathi oyedwa kanye ne-subnet eyodwa kubukeka kanje:

route 10.60.4.20 255.255.255.255
route 10.60.0.0 255.255.0.0

Kokubili ama-entry asho amakheli nama-mask, futhi kokubili kuyasinda ekushintsheni kwe-DNS ngoba akukho lutho kukho okuncike egameni. Leyo iyinzuzo yonke: umzila uyisitatimende mayelana ne-topology hhayi mayelana nokusesha okwenzeka kanye.

Ungakhiphi i-prefix enkulu kusuka kuphendulo olulodwa lwe-DNS. Igama lomsingathi elilodwa elixazululeka ekhelini elilodwa alikutsheli lutho ngosayizi wenethiwekhi engemuva kwalo, futhi i-prefix eqanjiwe iyona ndlela umhubhe ogcina ngayo ubamba ithrafikhi okungekho muntu owayehlose ukuyidlulisa kuwo. Buza umnikazi wenethiwekhi nge-prefix yangempela esikhundleni sokuyithola ngokucabanga kusuka ekusesheni.

Lapho iyunithi yomsebenzi iyigama lomsingathi

Ukukhetha ngesizinda kudinga okuthile okufunda isizinda, okungukuthi ingxenye yezinga lohlelo lokusebenza. Impendulo evamile i-proxy ye-HTTP ehlala kolunye uhlangothi lomhubhe, kanti iklayenti likhetha ukuthi yikuphi ukucela okuzothunyelwa kuyo.

Ifayela lokulungiselela le-proxy lingaveza lokho kukhetha. Imithetho eyisibonelo ngezansi ithumela isizinda esisodwa kanye nezizinda ezingaphansi kwaso ku-proxy futhi konke okunye ngqo:

function FindProxyForURL(url, host) {
    var h = host.toLowerCase();
    if (h === "corp.example" || dnsDomainIs(h, ".corp.example")) {
        return "PROXY 10.60.0.12:3128";
    }
    return "DIRECT";
}

Ukuqhathanisa kwegama eliqondile kuhlanganisa isizinda uqobo, futhi ukuqhathanisa kwesijobelelo kuhlanganisa izingane zaso ngaphandle kokuqhathanisa igama eligcina ngezinhlamvu ezifanayo kuphela. Kokubili kuyadingeka, futhi ukushiya eyodwa kukhiqiza umthetho obonakala ulungile futhi weqa isiqongo noma umkhohlisi.

Le mithetho ikhetha i-proxy; ayiyidali, futhi ayishintshi noma yimuphi umzila wohlelo lokusebenza. Ikheli le-proxy lisadinga indlela yalo ngomhubhe, futhi izicelo ezimakwe njengeziqondile zisalandela inqubomgomo yomzila esivele ikhona kumshini.

Yini inketho ye-proxy engayihlanganisi

Izinhlelo ezinganaki ukulungiselela kwe-proxy kwesiphequluli ngeke zithintwe yilutho kulokhu. Amathuluzi omugqa womyalo, izibuyekezi kanye nezinhlelo ezinokugxilwa kwazo kwenethiwekhi zithatha ithebula lemizila, hhayi ifayela le-PAC, ngakho lezo zimo zidinga indlela yohlelo ngalunye esekelwayo noma enye idizayini. Bhala uhlu lwamaklayenti abalulekile ngaphambi kokuthembisa ukuthi umthetho wesiphequluli uhlanganisa ukuhamba komsebenzi.

Ukubuyela ngqo nakho akuyona indlela yokuphunyuka. Uma inqubomgomo yomzila yomshini isivele ithumela konke emhubheni, isicelo esimakwe njengesiqondile sihlala ngaphakathi kuwo, ngoba ukukhetha kwe-proxy kanye nethebula lemizila yizinqumo ezihlukene ezithathwa ezingeni ezihlukene.

Ukuxazululwa kwamagama umbuzo wesithathu ohlukene. Ukukhetha ukuthi yikuphi ukucela okuya ku-proxy akusho lutho mayelana nokuthi iyiphi isixazululi eyayiphendula, futhi ukuphatha kokubili njengokulungiselela okukodwa kukhiqiza ukuvuza okungabonakali kuze kube umuntu uhlola ngaphandle. Nquma ukuthi umbuzo ngamunye uphendulwa kuphi futhi bhala leso sinqumo eduze komthetho we-proxy. Isixazululi esishintsha ngoba umhubhe ukhuphukile sizohambisa impendulo buthule.

Ukuhlola zombili izindlela, hhayi leyo enenjabulo kuphela

Hlola igama lomsingathi okufanele lihambisane, igama lomsingathi okungafanele, kanye nesiqongo sesizinda, ngoba isiqongo yiso isimo esivame ukweqiwa umthetho wesijobelelo kuphela. Bese uqinisekisa ukuthi yiphi indlela isicelo ngasinye esayithatha ngempela esikhundleni sokukuthola ngokucabanga ukuthi ikhasi lilayishiwe yini.

Ekugcineni, hlola igatsha lokwehluleka. I-proxy engafinyeleleki kufanele yehluleke ngendlela oyinqume ngaphambili, esikhundleni sokuwa buthule ibuyele ekuxhumekeni okuqondile. Inkomba yezinketho zenethiwekhi ibhala imingcele yomzila ngokunemba; ingxenye yesizinda yalo mklamo ihlala ngokuphelele ngaphandle kwayo.

Izihloko ezihlobene