Uyenza njani eyakho iseva yeVPN ku-Ubuntu, kwi-Debian nakwi-CentOS

Ngotshintsho oluqhubekayo lwesixeko kunye nelizwe ebendinalo mva nje, kuye kwafuneka ndisebenzise uninzi lweenethiwekhi ze-Wi-Fi zasimahla (nangoku ndixhume kwi-wifi endinombulelo ongundoqo kuyo I-Aircrack-ng, iAirmon-ng, i-airdump-ng, i-aireplay-ng ezazisele zifakiwe kwiKali Linux)Ingxaki kukuba olu nxibelelwano lunokubeka emngciphekweni ulwazi lwam kwaye asazi ukuba ngubani onokuthi aqhagamshelwe kwaye andazise kwinethiwekhi. Isisombululo kule ngxaki sesiphakanyiswe kwakudala ngu Masisebenzise i-linux en Indlela yokujonga ngokukhuselekileyo kwiinethiwekhi ezivulekileyo zeWi-Fi, kodwa kukwakho nethuba lokuyisombulula usebenzisa iVPN, apho zininzi simahla kwaye zihlawulwe ezilula ukuzisebenzisa kunye nokuzifaka, nganye inezinto zayo eziluncedo kunye nezibi, kodwa nathi sinako yenza eyethu iseva yeVPN ku-Ubuntu, Debian nakwiCentos.

Ukujonga isisombululo sale ngxaki kunye nokubeka phambili ukusebenzisa i-VPN eya kundinika ezinye izibonelelo, ndakwazi ukufumana iskripthi esivumela ukuba sakhe iseva yeVPN ngokuzenzekelayo ngaphandle kokunxibelelana nomsebenzisi.

Yintoni iskripthi sokumiselwa kweseva?

Yiyo Iskripthi seShell evumelayo qwalasela ngokuzenzekelayo iseva ye-VPN ngaphezulu kwe-IPsec ku-Ubuntu, kwi-Debian nakwi-CentOS ngokukhawuleza nangokulula, kunye ixhasa IPsec / L2TP kunye neCisco IPsec protocols. Umsebenzisi ufuna nje ukubonelela ngeenkcukacha zakhe zeVPN kwaye uvumele iskripthi senze okunye.

Umncedisi VPN ngaphezulu kwe-IPsec Iyabhala ukugcwala kwenethiwekhi, ukuze idatha ingabanjiswa ngelixa kukho unxibelelwano phakathi komsebenzisi kunye neseva yeVPN. Oku kuluncedo ngakumbi xa usebenzisa iinethiwekhi ezingakhuselekanga, umzekelo kwiivenkile zekofu, kwizikhululo zeenqwelo moya, okanye kumagumbi ehotele.

Iskripthi sisebenzisa freewan okuphumeza IPsec yeLinux y xl2tpd yintoni Umboneleli we-L2TP.

Iskripthi sinokusetyenziswa nakweyiphi na iseva ezinikezelweyo okanye kwi-Virtual Private Server (VPS). Ngapha koko, inokusetyenziswa ngokuthe ngqo njenge "datha yomsebenzisi" ye Amazon EC2 Ukuphehlelelwa kwimeko entsha, eli nqaku liyenza ilunge kuba indivumela ukuba ndibe neVPN kwaye ndisebenze nangaliphi na ixesha kwaye indinceda ukuba ndisebenzise ithuba lokubonelelwa nguAmazon unyaka omnye simahla kwiVPS yabo.

Iimpawu ze-VPN ngaphezulu kweskripthi sokumiselwa kweseva ye-IPsec

• Ukucwangciswa kweVPN ezenzekelayo ngokupheleleyo kwiseva ye-IPsec, ngaphandle kongenelelo lomsebenzisi
• Ixhasa inkqubo ekhawulezayo IPsec/XAuth ("Cisco IPsec")
• Iyafumaneka Umfanekiso weDocker ukusuka kwiseva yeVPN
• Idibanisa yonke i-VPN traffic kwi-UDP-ESP protocol ayifuneki
• Ingasetyenziselwa ngokuthe ngqo njenge "datha yomsebenzisi" yeemeko ezintsha ze-Amazon EC2
• Ukumisela ngokuzenzekelayo i-IP yoLuntu kunye ne-IP yabucala yeseva
• Kubandakanya imigaqo esisiseko ye-IPTables kwaye ikuvumela ukuba uhlengahlengise sysctl.conf
• Uvavanywe ku-Ubuntu 16.04 / 14.04 / 12.04, Debian 8 kunye neCentOS 6 & 7

VPN ngaphezulu kweemfuno zeskripthi somncedisi we-IPsec

Iseva ezinikezelweyo okanye iServer yangasese yangasese (iVPS) iyafuneka, nangona kuyacetyiswa ukuba kusetyenziswe umzekelo Amazon EC2, usebenzisa enye yezi AMIs:

• Ubuntu 16.04 (Xenial), 14.04 (Trusty) okanye 12.04 (Precise)
• I-Debian 8 (Jessie) Imifanekiso ye-EC2
• CentOS 7 (x86_64) ngoHlaziyo
• CentOS 6 (x86_64) ngoHlaziyo

Ukufaka i-VPN ngaphezulu kweskripthi sokumiselwa kweseva ye-IPsec

Ukufaka iVPN kwiskripthi sokumiselwa kweseva ye-IPsec ku-Ubuntu nakwi-Debian

Into yokuqala ekufuneka uyenzile kukuhlaziya inkqubo yakho, ukulungiselela le miyalelo ilandelayo apt-get update && apt-get dist-upgrade kwaye uqalise kwakhona.

Ukufaka iVPN, nceda ukhethe enye yezi ndlela zilandelayo:

Inketho 1: Yenza iziqinisekiso zeVPN ngokungacwangciswanga, ezinokujongwa xa ukufakela kugqityiwe

wget https://git.io/vpnsetup -O vpnsetup.sh && Isudo sh vpnsetup.sh

Ukhetho 2: Hlela iskripthi kwaye unikezele ngeempawu zakho zeVPN

wget https://git.io/vpnsetup -O vpnsetup.sh nano -w vpnsetup.sh [Faka amaxabiso akho endaweni yakho: YAKHO_IPSEC_PSK, YAKHO_USERNAME KUNYE NE-PASSWORD] Sudo sh vpnsetup.sh

Option 3: Chaza iinkcukacha zeVPN njengezinto eziguquguqukayo kwimeko-bume

# Onke amaxabiso kufuneka afakwe 'kuchaphulo olunye'
# Sukusebenzisa aba bantu ngaphakathi kwamaxabiso: \ "'
wget https://git.io/vpnsetup -O vpnsetup.sh && Isudo \ VPN_IPSEC_PSK ='eyakho_ipsec_pre_shared_key' \ VPN_USER ='igama lakho_vpn_igama' \ VPN_PASSWORD ='lakho_vpn_ igama eligqithisiweyo' sh vpnsetup.sh

Ukufaka iVPN kwiskripthi sokumiselwa kweseva ye-IPsec kwiCentos

Into yokuqala ekufuneka uyenzile kukuhlaziya inkqubo yakho, ukulungiselela le miyalelo ilandelayo yum update  kwaye uqalise kwakhona.

Landela amanyathelo afanayo naku-Ubuntu nakwi-Debian, kodwa endaweni yoko https://git.io/vpnsetup yi https://git.io/vpnsetup-centos.

Iziphelo kwi-VPN ngaphezulu kweskripthi sokumiselwa kweseva ye-IPsec

Ewe, nje ukuba iVPN yethu ifakiwe, kufuneka sinxibelelane nayo ngomthengi weVPN.Ndicebisa ukuba sisebenzise i-OpenVPN, esinokuyifaka nomphathi wephakheji kulwabiwo lwethu. Kwimeko ye-Debian kunye nezinye ezivela kuyo sinokuyenza ngale ndlela ilandelayo:

Sudo apt-fumana ukufaka i-openvpn

Esi sisisombululo esihle kakhulu ukunxibelelana ne-intanethi ngendlela ekhuselekileyo kwaye sinayo eyethu iVPN enokusetyenziselwa yona

• Fikelela kumsebenzi womnatha okanye wasekhaya xa useluhambeni.
• Fihla idatha yokukhangela.
• Ukungena kwiindawo ezivaliweyo ze-geo.
• Kwaye ezinye izinto ezininzi ezisetyenziswayo

Kwaye yiyo yonke loo nto bafo, ndiyathemba ukuba niyonwabela kwaye niqhubeke. Ukuba konke oku kubonakala kunzima kuwe kwaye ukhetha ukuyigcina ilula, unokuhlala uqesha i-VPN efana ne-Hidemyass, eyongezelela ekuphononongweni okuhle, inika izibonelelo ezintle kakhulu kubasebenzisi abatsha.