- Izidingo ezithile zehadiwe ezifana namakhadi enethiwekhi ye-PCIe kanye namaprosesa asebenza kahle okusebenza amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto.
- Izindlela ezahlukene zokufaka, kusukela ekufakweni kwendabuko kwihadiwe kuya ekusetshenzisweni kwe-virtualization nge-Proxmox noma i-KVM.
- Amasu okuhlukanisa inethiwekhi kusetshenziswa ama-VLAN kanye nokulungiselela izindawo zokufinyelela ze-Wi-Fi ezizimele.
Ingabe une-tower endala eqoqa uthuli ongasalusebenzisi emidlalweni noma emsebenzini? Ungayilahli! Ungathola okuningi kuma-PC akho amadala ngokuwaguqula abe ubuchopho benethiwekhi yakho yasekhaya . Ukusetha i-firewall yakho nge-OPNSense kuhle kakhulu, njengoba kukuvumela ukuthi ushiye ama-router ayisisekelo abahlinzeki be-inthanethi abasiphoqelela wona, avame ukulayisha ngokweqile uma uwacindezela kancane noma ushisa kakhulu ehlobo, okukushiya ubambekile ngesikhathi esibi kakhulu.
Umqondo lapha ukusebenzisa amandla eprosesa ye-PC, ephakeme kakhulu kuneye-router yezentengiselwano, ukuphatha ithrafikhi, ukuhlunga okuqukethwe, nokuhlukanisa inethiwekhi yakho . Akudingeki ube uchwepheshe wenethiwekhi ukuze uqalise, yize kudingeka ube nekhono elithile lokuhlela futhi uqonde ukuthi ukusetshenziswa kwamandla kuzoba phezulu kancane kunokwedivayisi encane, kodwa ukulawula okutholayo ngokuphepha kwakho kusezingeni elihlukile.
Ihadiwe edingekayo ukwakha i-router yakho yasekhaya
Ukuze lokhu kusebenze kahle, akuyona nje noma iyiphi ikhompyutha ezokwenza kahle. Okungcono kakhulu, udinga umbhoshongo wedeskithophu onezikhala ze-PCI Express zamahhala kubhodi lomama. Khohlwa ngama-laptop noma ama-PC amancane, njengoba sidinga ukuxhuma amakhadi enethiwekhi angokoqobo. Ukuze uthole ukufinyelela ku-inthanethi, ikhadi lenethiwekhi elisheshayo (okungcono kakhulu i-10 Gbps) elisekela ukuxhumeka kwe-fiber optic yamanje linconywa kakhulu.
Iphuzu elibalulekile amachweba e-Ethernet. I-router idinga okungenani ama-interface amabili: eyodwa ye-WAN (leyo exhuma kwimodemu ye-ISP) kanye nenye ye-LAN (leyo esabalalisa i-inthanethi ekhaya lakho). Uma ufuna ukuxhuma amadivayisi amaningana ngekhebula ngaphandle kwezinkinga, kungcono ukufaka ikhadi lenethiwekhi elinamachweba amaningi (isibonelo, ikhadi le-Gigabit elinamachweba amane). Lokhu kuvimbela iprosesa ukuthi ingakwazi ukugcwala kakhulu ekuphatheni iphakethe ngalinye futhi kuqinisekisa ukuthi azikho izithiyo ekuxhumaneni kwakho.
Ngokuphathelene nezingxenye zangaphakathi, awudingi ukuchitha imali eningi. Iprosesa ye-Intel i3, noma endala ene-dual-core, yanele kakhulu. Into ebalulekile ukuthi ukusetshenziswa kwamandla kuphansi (i-TDP emaphakathi) ngoba ikhompyutha izosebenza amahora angama-24 ngosuku, izinsuku eziyi-7 ngesonto. Nge-RAM engu-4 GB kanye ne-SSD encane yesistimu yokusebenza, uzoba nokuningi kakhulu. Icebo lokonga amandla nokunciphisa umsindo ukwehlisa isivinini se-CPU ku-BIOS , futhi uma kungenzeka, ungenzi ngaphandle kwekhadi lehluzo elizinikele bese usebenzisa elihlanganisiwe esikhundleni salokho.
Ukufakwa nokufakwa kwesistimu
I-OPNsense isekelwe ku-FreeBSD, ngakho ngeke sisebenzise i-Windows. Ukuze uyifake, uzodinga idrayivu ye-USB efomethwe ku-FAT32 equkethe isithombe sesistimu (khetha inguqulo ye-VGA ukuze ubone ukuthi wenzani esikrinini). Imininingwane ebalulekile ukukhubaza i-Secure Boot ku-BIOS, njengoba i-FreeBSD ngezinye izikhathi ingasebenzi kahle ngale nketho, futhi uqiniseke ukuthi idrayivu ye-USB iyidivayisi yokuqala yokuqalisa.
Ngesikhathi sokufaka, uhlelo luzokucela ukuthi udale iphasiwedi yomsebenzisi oyinhloko; khetha eqinile ongeke uyikhohlwe. Uma isifakiwe, i-PC izoqala kabusha bese ufaka imenyu yemodi yombhalo. Yilapho udinga khona ukwabela izixhumi zenethiwekhi . Ukuze ugweme ukudideka, xhuma ikhebula ku-port ngayinye bese ubona ukuthi iyiphi esebenzayo esikrinini; lokhu kuzokutshela kahle ukuthi iyiphi i-WAN yakho nokuthi iyiphi i-LAN yakho. Ngokuvamile, i-WAN izothola ngokuzenzakalelayo ikheli le-IP nge-DHCP kusuka ku-router ye-ISP yakho, kuyilapho i-LAN izoba nekheli le-IP elizenzakalelayo, elivame ukuba yi-192.168.1.1.
Ukwenziwa kwe-Virtualization: I-OPNsense ku-Proxmox noma i-KVM
Uma uneseva enamandla kakhulu, awudingi ukunikezela i-PC yonke ku-firewall kuphela. Ungasebenzisa i-virtualization nge-Proxmox noma i-KVM. Ku-Proxmox, isibonelo, ungakha izixhumi ezinengqondo namabhuloho ukuphatha ithrafikhi. Lokhu kuwusizo kakhulu uma ufuna ukuhlukanisa inethiwekhi yakho ngaphandle kokudinga amakhadi amaningi enethiwekhi angokoqobo, ngoba ungasebenzisa indinganiso ye-802.1Q ukudala ama-VLAN (amanethiwekhi angokoqobo).
Endaweni ebonakalayo, ungalungiselela inethiwekhi yokuphatha (i-Mgt) ukuze uxhumane ne-firewall ngaphandle kokudlula kunethiwekhi yomsebenzisi. Lokhu kubalulekile ekuphepheni, njengoba kukuvumela ukuthi ukhawulele ukufinyelela kokuphathwa kwesistimu eqenjini lakho elithembekile kuphela, uvimbele noma yimuphi umsebenzisi ongaqaphile ku-Wi-Fi yakho ukuthi afinyelele iphaneli yokulawula ye-router.
Inkinga ye-Wi-Fi kanye nokuhlukaniswa
Nasi isiphetho: I-OPNSense ayisebenzi kahle ngabashayeli bamakhadi e-Wi-Fi atholakala emakethe. Ngakho-ke, ikhambi elingcono kakhulu ukusebenzisa i-Access Point (AP) yangaphandle . Ungayisebenzisa kabusha i-router endala ngokuyilungiselela "kwimodi ye-AP" noma ukhubaze iseva yayo ye-DHCP ukuze isebenze njengebhuloho elingenantambo kuphela. Xhuma le AP kwenye yamachweba e-LAN ku-PC/router yakho, bese usukulungele.
Uma ufuna ukuya phambili, ungasebenzisa iswishi ephethwe ukudala amanethiwekhi ahlukanisiwe. Isibonelo, unganikezela i-VLAN 50 kumadivayisi e-Wi-Fi noma e-IoT kuphela, uyihlukanise ngokuphelele nenethiwekhi yakho yomsebenzi (i-VLAN 10). Ku-OPNSense, kuzodingeka ulungiselele iseva ye-DHCP (njenge-Kea) ye-subnet ngayinye bese udala imithetho ethile ye-firewall evumela ithrafikhi eya ku-WAN kodwa ivimbele ukuxhumana phakathi kwenethiwekhi ye-Wi-Fi namafayela akho omuntu siqu, usebenzisa ukuqina kwe-homelab ngama-VLAN.
Ukucushwa kokugcina kanye nokulungiswa kahle
Uma uhlelo seluqalile, awusadingi isikrini noma ikhibhodi ku-PC yakho. Konke kuphathwa ngesiphequluli sewebhu ngokufaka ikheli le-IP le-LAN. Isinyathelo sokuqala ukumisa i-Outbound NAT (imasking) ukuze amadivayisi kunethiwekhi yakho yangaphakathi akwazi ukufinyelela i-inthanethi esebenzisa ikheli le-IP lomphakathi le-WAN yakho. Uma uqaphela ukuthi amaklayenti anamakheli e-IP kodwa awakwazi ukuphequlula i-inthanethi, hlola ukuthi iseva ye-DNS (Outbound) inohlu lokufinyelela olulungiselelwe ukulalela izicelo ezivela kuwo wonke ama-subnet akho.
Khumbula ukuthi, ngokuzenzakalelayo, i-OPNSense ivimba yonke ithrafikhi kuma-interface amasha. Kuzodingeka uye esigabeni semithetho bese udala umthetho wokudlula ukuvumela ithrafikhi evela ku-LAN yakho ukuthi ifinyelele ku-WAN. Uma i-ISP yakho inemingcele kakhulu futhi isebenzisa ikheli le-MAC le-router yokuqala kwenye into, ungaliguqula ikheli le-MAC ku-OPNSense ukuze ukhohlise uhlelo ukuthi lukwabele uxhumano.
Ukusetha lolu hlelo kukunikeza ukulawula okuphelele kokuthi ubani ongena futhi ophumayo kunethiwekhi yakho, kukuvumela ukuthi uphathe i-bandwidth ukuze kungabikho muntu osebenzisa imidlalo yokulanda uxhumano, futhi, okubaluleke kakhulu, kukusiza ukuthi ufunde ukuthi i-inthanethi isebenza kanjani ngempela ekhaya lakho. Ngenkathi ukusetshenziswa kwamandla kuphakeme kancane kune-router yepulasitiki, amandla okucubungula kanye nokuphepha okunikezwa yihadiwe ezinikele kungaphezu kokukhokhela ukwanda okuncane kwebhili lakho likagesi.
