Tor relay da uwar garken VPN: me ya sa ba za a musanya su ba

Kana da adireshi, tashar tana amsawa, kuma abokin ciniki yana karɓarsa ba tare da wani gunaguni ba. Babu ɗaya daga cikin waɗannan da ke mai da Tor relay ƙarshen VPN, kuma kuskuren yana da tsada domin an shigar da bayanin martaba cikin tsafta sannan ya kasa daga baya a lokacin musafaha. Ina amfani da dubawa huɗu da ke ƙasa a jere; kowanne yana da sharadi na tsayawa, kuma tsayawa da wuri shine ainihin manufar. Idan dubawa ta farko ta kasa, sauran ba za su iya taimaka muku ba.

Duba abin da tashar take yi da gaske

Buɗaɗɗen tasha tana tabbatar da mai sauraro, ba wani abu ba. ORPort na relay yana magana da ƙwayoyin Tor nasa bayan musafahar TLS, don haka binciken TLS da ya yi nasara kusan ba ya gaya muku komai game da ko ana karɓar ka'idar VPN a can:

nc -vz 203.0.113.20 443
openssl s_client -connect 203.0.113.20:443 -brief < /dev/null

Karanta takardar shaidar maimakon gaskiyar cewa akwai ɗaya. Relay suna gabatar da takardar shaidar da aka sa hannu da kanta da suna marar ban mamaki da gangan, domin cinikin relay ya kamata ya yi kama da HTTPS na yau da kullum; takardar shaidar uwar garken VPN tana ɗauke da sunan da bayanin martabarka ke tsammani. Idan ɓangaren na gaba bai taɓa amsa fakitin farko na ka'idar VPN ba, babu adadin gyaran bayanin martaba da zai canza sakamakon.

Tsaya a nan idan adireshin bai kammala musafahar da abokin cinikinka ke aikawa ba. Amsar ka'ida ce, ba matsalar daidaitawa ba, kuma ita ce dalilin da ya fi zama ruwan dare gama gari da ya sa bayanin martaba da aka shigo da shi ya kasance a 'connecting' har abada.

Duba rawar relay, ba girman cibiyar sadarwa ba

Rawar relay suna yin ayyuka daban-daban. Guard shine tsalle na farko ga abokan ciniki, matsakaicin relay yana tura da'irori tsakanin sauran relay, exit shine wanda ke taɓa wuraren da ake nufi, kuma gada wata hanya ce ta shiga da ba ta jama'a ba da ake rabawa ta BridgeDB. Ƙamus na Tor yana kiyaye waɗannan ma'anoni daban, kuma isa ga kowa ɓangare ne na kowace rawa yayin da izinin yin hidima ga kowane abokin ciniki ba ya cikin kowace ɗaya.

Manufar fita ta cancanci karantawa domin ita ce kawai ɓangaren da ya yi kama da ka'idar turawa, kuma tana sarrafa wuraren da fita za ta ba da izinin fita zuwa, ba abokan cinikin da aka ba da izinin shiga ba. Manufar fita mai tsauri da ke toshe tashar 25 tana faɗi wani abu game da sarrafa cin zarafi na waje, ba game da ko za ka iya tura abokin ciniki na OpenVPN zuwa na'urar ba.

Tsaya idan kana yin tunani daga suna: domin relay suna tura ciniki, adireshin dole ya karɓi naka. Tor yana zaɓar hanyoyi ta hanyar yarjejeniya da ka'idarsa, abokin ciniki na VPN ba ɗan takara ba ne kuma ba shi da da'irar da zai shiga.

Duba ko mai sauraron SOCKS na gida ne ko na jama'a

Abokin ciniki na Tor yana buɗe hanyar SOCKS ga manhajoji a kan na'ura ɗaya, bisa tsohuwar ƙa'ida a loopback. Wannan mai sauraro wani jin daɗi ne na gida, ba sabis da relay ke bayarwa ga intanet ba, kuma ɗaukarsa a matsayin wakili na jama'a shine yadda mutane ke ƙarewa da gudanar da buɗaɗɗen relay da ba su yi niyya ba:

ss -ltnp | grep 9050
curl --socks5-hostname 127.0.0.1:9050 https://check.torproject.org

Adireshin ɗaurewa shine alamar. SocksPort a 127.0.0.1:9050 yana yin aikinsa; wanda ke saurara a 0.0.0.0 kuma ana iya isa gare shi daga waje wakili ne buɗaɗɗe, kuma sarrafa manufofin shiga na Tor da kansa sun wanzu domin wannan fallasa matsala ce ba siffa ba.

Ga manhaja da ke buƙatar Tor, nuna ta zuwa tashar loopback kuma bar Tor ya warware sunaye, abin da siffar socks5h da ke sama take yi. Kada ka maye gurbin adireshin relay da wannan tashar; relay ba ya bayar da hanyar da manhajarka ke nema.

Duba cewa bayanin martabar VPN ya dace da ƙarshen gaske

Bayanin martabar VPN tarin tsammani ne: OpenVPN yana buƙatar takardar shaidar uwar garke ko CA, takardar shaidar abokin ciniki da maɓalli, kuma yawanci maɓallin TLS, yayin da WireGuard yana buƙatar maɓallin jama'a na ɓangaren na gaba, ƙarshe da IP da aka yarda. Babu ɗaya daga cikin waɗannan da za a iya samu daga adireshi da buɗaɗɗen tasha, wanda shine dalilin da ya sa bayanin martabar da aka gina haka ke kasa a musayar farko ba a lokacin haɗi ba.

Lokacin da aka ba ka bayanin martaba, tabbatar da shi a kan ƙarshen da kake sarrafawa ko mai bayarwa da za ka iya ganewa:

wg show
openvpn --config client.ovpn --verb 4

A cikin rajistan OpenVPN, kuskuren tattaunawar TLS yana ambaton rashin daidaituwa kai tsaye; a wg show, ɓangaren da ba shi da layin musafaha bai taɓa kammala ɗaya ba. Dukansu sun fi nuna alama mai juyawa na abokin ciniki bayanai, kuma dukansu suna nuni ga kayan maɓalli ko ka'ida ba ga Tor ba.

Duba wace kariya kake buƙata da gaske

Wannan shine dubawar da ke yanke shawarar gine-gine. Tor Browser yana ba ka keɓewar da'ira da kariya daga sawun yatsa waɗanda VPN ba ya bayarwa; VPN yana canza adireshin da wurin da ake nufi ke gani kuma yana tabbatar da kai ga mai bayarwa. Zaɓi tsakanin su tambaya ce ta samfurin barazana, ba tambayar dacewa ba, kuma haɗa su yana haifar da tsari mai kama da sirri wanda ba haka ba ne.

Sarƙa tana da tsari. VPN da ke ɗaukar cinikin Tor tsari ne da ake goyan bayansa, domin abokin ciniki na Tor yana buƙatar TCP mai fita kawai. Abokin ciniki na VPN da aka sanya a cikin rami a cikin Tor ba iri ɗaya ba ne kuma ba shine abin da abokin ciniki na Tor ke aiwatarwa ba, don haka kada ka yi shiri a kansa.

Kafin ka shigo da wani abu, tabbatar da duka huɗu:

• Tashar tana kammala musafahar ka'idarka, ba kawai haɗin TCP ba.
• Ka san rawar mai watsa shiri kuma ba ka ɗaukar turawa a matsayin izini ba.
• Mai sauraron SOCKS da kake amfani da shi na loopback ne kuma naka ne, ba tashar jama'a a kan relay na wani ba.
• Maɓallan bayanin martaba ko takardun shaida na ƙarshen da kake haɗawa ne.