Yadda za a gano tunel ɗin VPN mai aiki daga code a kowace dandamali
Shin tunel ɗin yana nan, shin wannan manufa tana wucewa ta cikinsa, ko ƙarshen nesa yana amsa? Waɗannan gwaje-gwaje uku ne daban-daban da sigina uku daban-daban.
“Shin VPN ɗin yana aiki?” hakika tambayoyi uku ne a cikin jumla ɗaya. Wanne daga cikinsu code ɗinka yake buƙata shine shawara ta farko, kuma ita ce da yawancin aiwatarwa ke wucewa. Shin akwai tunel a wannan na’urar, shin zirga-zirgar zuwa wannan manufa tana fita ta cikinsa, ko ƙarshen nesa yana amsa da asalin da kake tsammani. Zaɓi sifar, sannan zaɓi siginar da take auna ta, sannan faɗa a cikin log wanda ka auna da gaske.
Siffofi uku, sigina uku
An matse kowannensu cikin layi ɗaya, tambayoyin uku suna da amsoshi uku daban-daban. Jadawalin da ke ƙasa shine shawarar kanta, ba taƙaitawa ba.
| Property | Signal that answers it | What it still leaves open |
|---|---|---|
| Existence | The platform's own connection state: RAS on Windows, NetworkManager on D-Bus on Linux, scutil on macOS | Tunnels of a type the platform does not manage, which includes most third-party clients |
| Path | A route lookup for the one destination, or a scoped proxy or interface key that names the tunnel | Whether the far end is the peer you trust |
| Identity | An authenticated response from the far end, or a source-address policy applied on the server | Which local interface carried the packets |
Karanta layin ƙarshe a hankali. Mai masaukin sirri da ke amsa yana tabbatar da cewa wani abu ya amsa, ba cewa amsar ta zo ta cikin tunel ba, kuma ba ya faɗin komai game da wanda ke wancan gefen. Idan sifar da kake buƙata ita ce hanya, auna hanyar.
Kasancewa: yanayin dandamalin kansa
Windows yana amsa wannan ga bayanan asali ta hanyar Remote Access Service API. RasEnumConnections yana lissafa abin da ke haɗe, RasGetConnectStatus yana ba da rahoton yanayin shigarwa ɗaya, kuma RasGetLinkStatistics yana ƙara sauri, ma’aunin byte da shekarun haɗin. Iyakokin su ne ainihin maganar: OpenVPN, WireGuard da abokan cinikin masana’antun ba sa taɓa yin rijistar haɗin RAS, don haka lafiyayyen tunel irin wannan yana nuna jerin fanko kuma code mara hankali yana ba da rahoton cewa a kashe yake.
Kwamfutocin tebur na Linux suna bayyana wannan sifar ta hanyar NetworkManager a kan D-Bus, inda PropertiesChanged a kan abin haɗin VPN ke mai da gwajin ya zama lamari kuma sifar State ke ba da rahoton lokacin da hanyar ta isa yanayin haɗe. Daga harsashi, nmcli connection show --active yana karanta wannan bayanin, kuma shi ne abin da kake so yayin gyara kuskure. macOS yana riƙe da wannan jeri a cikin tsarin System Configuration, tare da scutil a matsayin dubansa na layin umarni. Dukansu uku suna bayanin haɗin da dandamali ke sarrafawa, kuma dukansu uku suna yin shiru game da tunel da ba ya sarrafa.
Hanya: inda faket ɗin ke zuwa da gaske
Daidaita suna ita ce gajeriyar hanyar da kowa ke fara kamawa: lissafa mu’amaloli, gwada igiyar da tun, tap, ppp ko ipsec, kuma ɗauki daidaituwa a matsayin hujja. Wannan hasashe ne, kuma rukunin mu’amala na iya kamanceceniya ko wani abu yana wucewa ta cikinsa ko a’a. Tsofaffin iOS suna amsa haka kuma na baya sun daina, domin mu’amalolin da ake gani ba su ƙara bambanta yanayi biyu ba.
Abin da ya maye gurbinsa a can shi ne ƙamus ɗin wakili na tsarin. Yayin da VPN ke haɗe, kiran saitin wakili yana mayar da maɓallai da aka iyakance ga mu’amalolin da suka shafi tunel, kuma idan babu abin da ke haɗe ƙamus ɗin yana dawowa fanko. Wannan magana ce mafi rauni fiye da yadda ake ji, domin yana rubuta imanin tsarin cewa akwai tunel maimakon wace manufa ke amfani da shi.
Android yana da nasa sigar tarkon: watsa vpn.connectivity yana isa ga masu karɓa da aka bayyana a cikin manifest a wasu gine-gine kuma ga masu karɓa da aka yi rijista a lokacin gudu a wasu. Ɗauke shi a matsayin ƙoƙari mafi kyau, kuma ka riƙe bincike kai tsaye a bayansa.
Lokacin da manufa ita ce abin da ke da muhimmanci, tambayi teburin hanya maimakon jerin adafta. Hasashen ƙofar da aka saba yana karyewa a kan injuna masu cibiyoyin sadarwa da yawa da kuma kan tunel ɗin da ke girka nasu ƙofar.
Asali: bincika ƙarshen nesa
Madauki da ke aika amsar ICMP zuwa ƙarshen nesa kowace ’yan daƙiƙa shine mafi arha irin wannan gwajin, kuma yana kasawa a hanya mai amfani. Nufe shi zuwa adireshin da ke wanzuwa kawai a cikin cibiyar sadarwa ta sirri, domin na jama’a yana amsa ta kowace hanyar sama mai aiki kuma ba ya tabbatar da komai. Inda ake tace ICMP, ɗan gajeren haɗin TCP zuwa tashar sabis yana yin wannan aikin.
Gwajin gefen uwar garke yana da sigina ɗaya kawai: adireshin tushen da ke kan haɗin. Kula da lissafin jeri aiki ne na kulawa, kuma ba zai iya raba tunel da wata cibiyar sadarwa da ta yi daidai da wannan toshe ba.
Manufa mara hankali za ta iya rayuwa da wannan. Asali ba zai iya ba, don haka tabbatar da abokin ciniki maimakon dogara ga inda ake tsammanin faket ɗinsa suke fitowa.
Yi rijistar rukunin, ba hukunci ba
Raba rukunan kasawa a cikin log: babu mu’amala kwata-kwata, akwai mu’amala amma manufar ba za a iya isa ba, ana iya isa manufar amma an ƙi tabbatarwa. Waɗannan masu uku ne daban-daban, kuma kowanne yana buɗe bincike daban.
Haɗa su cikin “VPN a kashe” ɗaya yana aika rahoton zuwa ƙungiyar da ba za ta iya gyara shi ba. Rukuni shine fitarwa mai amfani; hukunci shine abin da ke sa shi kuskure.