Ifayela lakho le-.ovpn lingasebenzisa ikhodi, hhayi ukuhambisa ithrafikhi kuphela

Iningi labantu lifunda ifayela le-.ovpn ngendlela efunda ngayo ikhasi lezilungiselelo ze-router: amakheli, imizila, uhlu lwezinhlamvu zokubethela. Ingxenye esebenzisa ikhodi ihlezi eduze nangaphansi, eceleni kwemiyalelo ebukeka njengomsebenzi wamapayipi, futhi isebenza nganoma yiliphi ilungelo iklayenti eselinayo. Leso yisikhala esisetshenziswa iphrofayela enganaki noma enobubi, futhi futhi yisikhala esishintsha umsizi we-DNS owusizo ube inkinga yokusekela emasontweni amathathu kamuva. Umyalelo wesehlakalo, izinga lokuphepha kanye nobunikazi befayela kunquma okungase kwenzeke; okuqukethwe yi-script kunquma okwenzeka ngempela. Funda konke okune ngaphambi kokuxhuma.

Iphrofayela esebenzisa umsizi iwuhlelo, hhayi ifayela lezilungiselelo

Imiyalelo efana ne-route ne-dhcp-option ichaza isimo iklayenti okufanele sisimise, futhi iklayenti iyithatha njengedatha. I-script ye-up ihlukile: iklayenti iyethula njengenqubo futhi iyinikeza indawo egcwele imininingwane yokuxhumana, ngakho konke okwalotshwa umbhali wayo kusebenza ngamalungelo e-akhawunti yakho. Ku-laptop lapho umsebenzisi engumphathi, lokho kuwumnyango obanzi wefayela elafika njengesithasiselo noma lanamathiselwa kusuka emsela wenkundla. Umehluko awona owesitayela, umehluko phakathi kokucushwa nekhodi.

Inganekwane okufanele iyekwe iwukuthi iphrofayela ingaqondisa ithrafikhi kuphela. Umsizi osebenzisa i-ip route add nalowo osebenzisa i-curl kumgcini okude bangumshini ofanayo, futhi iphrofayela ibukeka ifana ngaphandle. Akukho lutho esimweni sefayela olutshela ukuthi yimuphi onawo, ngakho ukubuyekezwa kufanele kufinyelele ku-script uqobo.

Yini ngempela enquma ukusetshenziswa, futhi imigqa evumelayo ibukeka kanjani

Izinto ezintathu zilawula umsizi: umyalelo wesehlakalo omshayayo igama, izinga le-script-security elimvumelayo, kanye nokusetshenziswa kwepulatifomu yeklayenti uqobo. Iphrofayela ingacela ihuku futhi ingaboni lutho lwenzeka, ngoba iklayenti leselula noma ukwakhiwa kwedesikithophu okuncishisiwe kungenzeka kungayisebenzisi leyo sehlakalo nhlobo. Ngokufanayo, iphrofayela ecela imvume eningi kunalokho okudingwa umsebenzi wayo ikutshela okuthile ngemvelaphi yayo. Izinga lemvume yikhono, hhayi imvume yokugcina. Imigqa evumelayo ibukeka kanje, indlela ime esikhundleni sakho.

script-security 2
up /etc/openvpn/update-resolv-conf.sh
down /etc/openvpn/update-resolv-conf.sh

Izinga 0 lenqaba izinhlelo zangaphandle futhi izinga 1, eliyisisekelo, livumela kuphela amafayela okusebenzisa akhelwe ngaphakathi eklayenti, ngakho ihuku lidinga u-2 noma ngaphezulu; izinga 3 likhona ikakhulukazi ukudlulisa amagama ayimfihlo amadala futhi kungcono ukuligwema. Iphrofayela elethwa nehuku idinga kokubili umyalelo nalelo zinga, ngakho umugqa owodwa eduze nangaphansi kwefayela ufanele ukuhlolwa okufanayo nebhulokhi yesitifiketi. Incwadi ye-OpenVPN ibala amazinga emvume, futhi indlela yayo yokubhala ifanele ifundwe eceleni kwalokho iphrofayela ekucela ngempela.

Ubunikazi, indlela kanye nalokho okondliwa umsizi

Iphrofayela oyethembayo kodwa ekhomba ku-script engabhalwa kabusha enye i-akhawunti ayisiso isivumelwano esithembekile, ngoba ukubuyekezwa izolo akusakuchazi okusebenzayo namuhla. Hlola umnikazi nemodi yomsizi, futhi uqinisekise ukuthi indlela ecushwe iholela efayelini oyihlolile hhayi egameni okunye okungase kulisithe. Izimpikiswano nendawo nakho kufanele kubhekwe ngendlela efanayo: iklayenti lidlulisela imininingwane yokuxhumana kuhuku, futhi umsizi obhala yonke indawo yakhe kungenzeka ubhala ubufakazi kuthikithi lokusekela. Khetha ukuhlanganiswa okubhalisiwe okuvela kumqhubi noma kupulatifomu esikhundleni se-script ye-DNS ekopishwe kusuka kokuthunyelwe okungahlobene, ngoba abaphathi ababili bezixazululi abalwela ifayela elilodwa bakhiqiza ukwehluleka okubukeka njenge-VPN ephukile.

Uma ubika ihuku elihlulekayo, cima indawo ngaphambi kokuyinamathisela noma kuphi. I-dump ekusiza ekulungiseni iphutha ingase futhi ithwale ithokheni ekufakazelayo.

Ukwehluleka kokuhlanza kuvela ngemva kokuba umhubhe unyamalele

Umsizi we-up wengeza imizila nezilungiselelo zesixazululi, futhi umsizi we-down kufanele azisuse futhi. Uma ihuku le-down lingekho, lihluleka buthule noma lingakaze lisebenze ngoba iklayenti labulawa, izinsalela ziphila isikhathi eside kunesikhathi somhlangano. Khona-ke ithrafikhi ithatha indlela okungekho owayihlela futhi amagama axazululwa ngesixazululi obekufanele sisusiwe, kuyilapho umhubhe uqobo ubonakala uphilile. Lezo zimpawu ziza ngemva kokunqamuka, ngakho kusolwa inethiwekhi hhayi iphrofayela.

Hlola ukuhlakazwa njengesinyathelo saso: phakamisa umhubhe, bhala imizila nesixazululi, wehlise, bese uqinisekisa ukuthi kokubili kuhambile. Iphrofayela exhuma ngokuhlanzekile ingase ishiye isimo, futhi ikhodi yokuphuma engu-zero yomsizi ayifakazeli ukuthi isixazululi saphelela lapho ocabanga khona.

Ukubuyekeza umsizi nokugcina indlela yokuphuma

Funda i-script kusukela ekuqaleni kuze kube sekupheleni ufuna izinto ezintathu: imiyalelo edinga ilungelo, izindlela ezibhalwe ngokuqinile okungenzeka zingekho kusistimu yakho, kanye nanoma yikuphi ukushaya kwenethiwekhi okukwenzayo. Bese ubheka ukuthi yehluleka kanjani, ngoba umsizi ogwinya amaphutha uguqula iphutha lokucushwa libe yimfihlakalo. Uma ungakwazi ukusho ngomusho owodwa ukuthi i-script yenzani nokuthi ubani angayishintsha, awukakalungi ukuyivula. Iphrofayela ecela ilungelo elingaphezu kwalokho okudingwa yilowo musho iyisibonakaliso sokuma.

Gcina iphrofayela yokugcina esebenzayo kanye nomsizi eyayikhomba kuwo endaweni yokugcina evikelwe, kokubili okubhaliwe, ukuze ukubuyisela kube ikhophi hhayi ukwakhiwa kabusha ngesikhathi esibi kakhulu. Uma umsizi ukhona kuphela kokusabalalisa noma inguqulo yeklayenti engasayidingi, mhlalise phansi ekucushweni okungumnikazi wesilungiselelo esikhundleni sokuphakamisa amalungelo kuze kume amaphutha. Leyo yindlela yokuphuma: izingxenye ezimbalwa ezinyakazayo, hhayi imvume eningi.