Relay ɗin fitar Tor da uwar garken fitar VPN: abin da kowanne ya sani
Relay ɗin fitar Tor da uwar garken fitar VPN duk suna nuna adireshin jama'a ɗaya, amma suna raba ilimi daban. Kwatanta ganuwa, ɗaukar hoto da manufar tashoshi.
Dukansu tsare-tsaren suna ɓoye adireshinku a bayan IP ɗaya na jama'a, kuma gidan yanar gizo da ke buga adireshin da yake gani ba zai iya bambanta su ba. Bambancin shi ne wanene ya san me a hanya, nawa ne aka rufe zirga-zirga, da waɗanne tashoshi aka ba su izinin aiki. Relay ɗin fitar Tor shine mataki na ƙarshe na zagaye na relay uku; uwar garken fitar VPN yana ƙare raminku kuma yana buɗe haɗin da ke fita da kansa. Ga yadda nake yanke shawarar wane ne aiki yake buƙata, da abin da nake dubawa kafin in ɗauka ɗaya yana aiki kamar ɗayan.
Hanyoyi biyu da suke ƙare a adireshi ɗaya
Tor yana gina zagaye ta hanyar mai gadi, relay na tsakiya da fitarwa, kuma yana ɓoye kayan aiki cikin yadudduka don kowane relay ya cire nasa kawai. Fitowa tana yin haɗin TCP na yau da kullum zuwa inda ake nufi, shi ya sa inda ake nufi yake ganin adireshin fitowa. Abokin cinikinku ba ya yin magana kai tsaye da inda ake nufi, kuma mai gadi ma ba ya ganinsa.
VPN rami ɗaya ne zuwa wuri ɗaya na ƙarshe. Uwar garken mai aiki tana cire ramin kuma tana buɗe haɗin da ke fita, don haka inda ake nufi ma yana ganin adireshi ɗaya, wannan lokacin na mai aiki. Sakamakon da ake gani ɗaya ne; ilimin ba haka ba. Gwajin da ke buga IP yana amsa wace tsari kuke ciki kuma ba ya faɗin komai game da rabon amana da ya bambanta da gaske.
Wanene a ƙarshe ya san me
Wurin ƙarshe na VPN yana ganin adireshin tushe, inda ake nufi, lokaci da girma a wuri ɗaya. Wannan taro shi ne tsari: mai aiki ɗaya, saman log ɗaya, wuri ɗaya don kira ko don kuskuren saiti. Duk abin da kuka samu ya fito ne daga amincewa da wannan ɓangaren da manufar fitowar wurin ƙarshe.
Tor yana raba wannan ilimin. Mai gadi ya san adireshinku amma ba inda ake nufi ba; fitowa ta san inda ake nufi amma ba adireshinku ba. Bai kamata relay ya koyi duka biyu ba. Wannan dabi'a ce ta tsari, ba alkawari ba ne a kan mai lura na duniya, relay da ke haɗa lokuta, ko wurin ƙarshe da aka lalata, don haka ɗauke shi a matsayin wata rabo ta irin wannan haɗari ba kamar ɓoye suna da ba zai iya gazawa ba.
| What is known | Tor exit relay | VPN exit server |
|---|---|---|
| Your public address | Seen by the guard relay, not the exit | Seen at the endpoint |
| Final destination | Seen at the exit | Seen at the endpoint |
| Coverage | Applications configured for Tor, chiefly Tor Browser | Whatever the route policy includes |
| Plain HTTP payload | Readable at the exit | Readable at the endpoint |
Rufewar shi ne shawarar burauza ko shawarar hanya
Burauzar Tor tana bin hanyar zirga-zirgarta kuma tana ƙara kariya da babban abokin ciniki na VPN ba ya sake haifuwa: juriya ga sawun yatsa, keɓewar ɓangare na farko, ƙayyadadden girman taga da aikin Sabon Shaida da ke jefar da yanayin zaman. Sauran aikace-aikace ba sa amfani da wannan zagaye sai an saita su yin haka, kuma saitin Tor na dukan tsarin wani aiki ne daban daga shigar da burauza.
VPN yana da siffar akasin haka. Rufe yana bin teburin hanya, don haka bayanin WireGuard da ke da AllowedIPs = 0.0.0.0/0 yana kama komai kuma jerin rami da aka raba yana kama faifan da ya ambata kawai. A cikin wannan tsarin ne ɓoye-ɓoye ke zaune: tambayoyin DNS, IPv6 da WebRTC kowanne yana iya ɗaukar hanyar da manufar hanya ba ta haɗa ba. Duba daga cikin aikace-aikacen da ya gaza, ba daga shafin burauza wanda zai iya amfani da wata fuska ba.
Manufar tashoshi, abin da aka toshe da HTTPS
Relay ɗin fitowa yana da 'yanci ya ƙi tashoshi masu fita, kuma manufar asali tana ƙin jerin tashoshi masu saurin zagi, ciki har da tashar SMTP 25. Saboda haka abokin cinikin wasiƙa da aka saita ta Tor yana gaza a fitowa, abin da yake kama da lalacewar cibiyar sadarwa kuma ba haka ba ne. Masu aiki da suke tafiyar da relay suna saita wannan a fili:
# torrc — refuse outbound SMTP from this relay
ExitPolicy reject *:25Wuraren da ake nufi ma suna toshewa, kuma suna toshe tsarin biyu daban. Adiresoshin fitowar Tor ana buga su, don haka shafi na iya ƙin dukan jerin; wuraren ƙarshe na VPN suna cikin yankunan cibiyoyin bayanai waɗanda ake ƙin su cikin sauƙi. Idan shafi ya gaza, raba 'yan takara uku kafin canza komai: manufar fitowa ko fita, wurin da ake nufi da ke ƙin tushe, ko ƙofar kama da ke sace roƙon farko.
Babu ɗayan tsarin da ke maye gurbin ɓoyewar jigilar. HTTP bayyananne ana iya karantawa a relay ɗin fitowa da kuma wurin ƙarshe na VPN ɗaya, don haka a bar HTTPS a kunne kuma ku karanta gargaɗin takardar shaida maimakon watsi da shi. Dubawa biyu suna warware tambayar hanya da sauri: curl -s https://check.torproject.org/api/ip yana dawo da IsTor lokacin da roƙon ya bi ta zagaye, kuma curl -s https://ifconfig.me yana nuna adireshin fitowa da VPN zai gabatar. Gudanar da duka biyun yana gaya muku wace hanya harsashi ke amfani da ita a zahiri.
Kada ku yi amfani da ɗaya a matsayin ɗayan
Adireshin relay ɗin fitowa ba bayanin VPN ba ne. Ba da OpenVPN ko WireGuard abokin ciniki zuwa relay a tashar 443 ba ya ƙirƙirar rami, domin babu sabis ɗin VPN da ke saurare a wurin; relay mataki ne a zagayen wani. A wata hanya, wurin ƙarshe na VPN ba ƙofar shiga Tor ba ne, kuma saitin gada na burauzar Tor ba wurin liƙa sunan mai masaukin VPN na kasuwanci ba ne. Idan kuna gudanar da Tor a kan VPN, mai gadi yana ganin adireshin VPN maimakon naku, wanda ke canza rabon ba tare da haɗa ayyukan biyu ba.
Kafin zaɓi, amsa tambayoyi huɗu a jere: wanene ke tafiyar da wurin ƙarshe kuma me yake riƙewa, me kayan aiki ke rufewa a wannan na'urar, waɗanne tashoshi da wurare manufar fita ke ba da izini, da me aikace-aikacen ke ƙarawa bayan hanyar cibiyar sadarwa. Aikin da ke buƙatar shiga cibiyar sadarwa ta yau da kullum ga shirye-shirye da yawa yana son VPN. Aikin da ke buƙatar kariyar matakin burauza da tsarin zagaye yana son burauzar Tor, wanda ake kiyayewa da sabo. Idan amsar ita ce «duka biyu», gudanar da su cikin tsari da gangan kuma rubuta wane adireshi kowane ɓangare yake gani.