Indlela yokuseka i-VPN yontanga

Itekhnoloji VPN Isetyenziselwe ixesha elide kwindawo yeshishini uqhagamshelwano olude, kwaye nangona isisisombululo esiluncedo kakhulu, sineengxaki ezithile eziye zavezwa ngakumbi ngokuhamba kwexesha. Ngokomzekelo, ukubeka kwindawo yonke i-traffic kwi-server ye-VPN kufuna umsebenzi omningi kubaxhasi be-VPN ababini ukuba banxibelelane, ngoko ke ngokuhamba kwexesha umncedisi unokuba ngumqobo kwaye unciphise ukusebenza kweVPN jikelele.

Ukulungisa oku, umahluko onomdla kakhulu uye wavela kwaye lo we IVPN yoontanga-kuya-ntanga okanye iP2P VPN, imodeli leyo isekwe kwitekhnoloji yeP2P ukuphucula oko kunikelwa ziiVPN zemveli ukwahlula amagunya kuzo zonke iitrafikhi ezidlula kuzo, engasalawulwa ngumncedisi omnye kodwa isasazwe kubo bonke abathengi abaqhagamshela kuyo. Lo nto, Nayiphi na i-node eba yinxalenye yeVPN inokusebenza njengomthengi kunye nomncedisi., inceda ekusasazeni itrafikhi ukuya kunye nokusuka kubo nabaphi na abanye abathengi.

Kwihlabathi leLinux, njengoko unokulindela, sineenketho ezininzi zeP2P VPN, kwaye enye yazo n2n. Yenye indlela yasimahla efumanekayo phantsi kwelayisensi ye-GPLv3, esivumelayo Yakha inethiwekhi yeVPN efihliweyo kunye 'ne-NAT enobuhlobo' yoNtanga-kuya-ntanga, oku kuthetha ukuba ukuba abasebenzisi ababini abayingxenye yale nethiwekhi baxhunyiwe kwii-routers ezahlukeneyo, unxibelelwano lunokwenziwa ngeVPN ngaphandle kwengxaki.

Masibone ngoko, uyifakela njani i-n2n ku-Ubuntu:

$ sudo apt-fumana ukufaka inguqu yokwakha-ibalulekile libssl-dev
$svn co https://svn.ntop.org/svn/ntop/trunk/n2n
$ cd n2n/n2n_v2
$ yenza
$ sudo yenza ukufaka

Ngoku siqwalasela inethiwekhi yeP2P nge n2n, kwaye ukwenza oku kufuneka siqale sahlule phakathi kweendawo eziphezulu kunye neendawo eziqhelekileyo: i-node ephezulu yeyo inikeza idilesi ye-IP yoluntu, oku kuthetha ukuba iya kulungiswa kwaye yaziwe ngabo baqwalasela uthungelwano, ngelixa i-node eqhelekileyo inguye nabani na leyo idibanisa kuyo ngamandla.

I-VPN nganye ye-P2P idinga ubuncinane i-super node enye, eyi-10.0.0.1 kumzekelo esiza kubonisa apha, kwaye kuloo khompyutha siza kwenza oku kulandelayo, ukubonisa ukuba yeyiphi izibuko le P2P VPN eya kusebenza kuyo:

$ supernode -l 5000

Emva koko, ukusuka kwinqanaba ngalinye eliqhelekileyo siza kuqhagamshela kwinethiwekhi ngale ndlela ilandelayo (sinika imizekelo emi-2, kwiinodi ezi-2 ezahlukeneyo):

$ sudo edge -d edge0 -a 10.0.0.10 -c miredvpn -u 1000 -g 1000 -k password -l 10.0.0.1:5000 -m ae:e0:4f:e5:40:5a

$ sudo edge -d edge0 -a 10.0.0.11 -c miredvpn -u 1000 -g 1000 -k password -l 10.0.0.1:5000 -m ae:e0:4f:e5:40:5b

Eminye imiba ekufuneka ithathelwe ingqalelo yile ilandelayo:

Sibeka igama eligqithisiweyo xa siqwalasela i-VPN, kulo mzekelo emva kwe-parameter -k (umzekelo wethu sasebenzisa igama elithi 'password', ngokuqinisekileyo ayisiyiyo into esiyincomayo ukuba siyisebenzise).

I-parameter -d ivumela ukuba sichaze ujongano olubonakalayo oludibanisa kwi-VPN nganye, kwaye into enomdla kukuba sinokuqwalasela ezininzi njengoko sifuna, enye kuthungelwano ngalunye, ukuze ikhomputha efanayo ibe yinxalenye yenani elingenasiphelo. Iinethiwekhi zoNtanga zeVPN -ukuya-kwintanga.

I-parameter ivumela ukuba sichaze umsebenzisi kunye neqela.

I--m iparameter isivumela ukuba sichaze idilesi ye-MAC esiza kuyinika ujongano ngalunye lwenyani, into ecetyiswa kakhulu ukuba yenziwe 'ngesandla' endaweni yokuvumela umsebenzi womnatha ukuba uyabele ngokutshintsha nangokungenamkhethe ukusukela ngale ndlela sithintela itrafikhi ukuya nokubuya. indawo ethile ilityazisiwe ngelixa iitafile zolwazi lwenethiwekhi zihlaziywa.

I--l iparameter ivumela ukuba sichaze idilesi ye-IP kunye ne-port ye-super node esiza kudibanisa kuyo.

Ngoku siza kuvavanya inethiwekhi, sithumela i-ping ukusuka kwenye ikhompyuter ukuya kwenye ngolu hlobo lulandelayo:

i-10.0.0.10

i-10.0.0.11

Ukuba yonke into ihamba kakuhle, kufuneka sibone iipakethi zithunyelwa kwikhompyutheni enye ukuya kwenye, oku kuthetha ukuba silungiselele ngokugqibeleleyo i-Peer-to-peer VPN.