NetworkManager-ssh wuxuu muujiyaa isku xirnaan laakiin waxba lama marin
Tilmaamuhu wuxuu caddeeyaa oo keliya in xiriirka SSH ee la maamulo uu jiro. Hubi haddii plugin-ku dhisay aaladda tunnel ama taxane gudbin, kadibna tijaabi wadada abka.
Liiska wuxuu muujiyaa xiriirka SSH mid firfircoon, furaha martigeliyaha waa la aqbalay, oo biraawsaraha weli ma gaaro wax kasta oo ay ahayd inuu gaaro. Taasi maahan iskhilaaf, sababtoo ah borofaylka NetworkManager-ssh wuxuu ka soo saari karaa laba natiijood oo gebi ahaan kala duwan isla martigeliyaha iyo isla furaha: aaladda tunnel oo baakadaha qaada, ama taxane gudbin oo kaliya abka qaarkood isticmaali karaan. Tilmaamuhu wuxuu soo sheegaa in xiriirka SSH ee la maamulo uu jiro. Marnaba ma sheego labada midkaad heshay.
Laba natiijood oo ka dambeeya hal gelitaan liis
Labada habba isku si ayay u xaqiijiyaan aqoonsiga, taasina waa sababta loo khaldo. Doorashada borofaylka si isku mid ah, isla aqoonsiga, waxay kaa reebi kartaa interface aad ku marin karto ama socket dhegeysanaya oo hal ab la sheegayo.
Ku bilow go'aansashada natiijada shaqadu runtii u baahan tahay. Shuruudda gaaritaanka shabakad-hoosaadka oo dhan waxay u baahan tahay aalad. Hal adeeg oo ku yaal martigeliyaha fog waxay u baahan yahay gudbin, dhismaha tunnelkiisa badanaa wuxuu abuuraa shaqo marin ka badan tii dhibaatadu mudnayd.
Waxa ay tahay in hab kastu leeyahay ka hor inta uusan shaqayn
Mashruucu wuxuu diiwaangeliyaa labada hab, shuruudaha horudhacuna aad bay u kala duwan yihiin oo mid maqan wuxuu u ekaanayaa guuldarro borotokool ah halkii uu ahaan lahaa doorasho naqshadeed.
| Mode | What must exist | What still has to be true |
|---|---|---|
| Tunnel device | Compatible TUN/TAP arrangement on both ends, permission, addressing | A route policy that actually sends the intended prefixes into it |
| Forwarding only | A chosen SOCKS, local-forward or remote-forward listener | A permitted destination path on the far side |
Si taxadar leh u akhri tiirka midig, sababtoo ah halkaasay ku dhammaadaan inta badan tikitada noocan ah. Xitaa aaladda tunnel oo si fiican loo dhisay waxay qarinaysaa oo keliya waxa marinku u soo diro, xitaa gudbin fiican waxay caawinaysaa oo keliya abka la sheegay inay isticmaalaan.
Interface-ka dummy maaha tunnel
Habka gudbinta plugin-ku wuxuu diiwaangeliyaa interface dummy oo la abuuray si loo buuxiyo qaabka xidhiidhka. Waxay u jirtaa si maamuluhu u helo wax uu xaaladda ku xidho. Ma qaaddo baakado ab oo aan loo dooran inay u gudbaan shabakadda fog, waxna ku jira jiritaankeeda ma tilmaamayo in marinka IP uu isbeddelay.
Tusaalooyinka tunnel buuxa ee mashruuca waxay khuseeyaan taageerada aaladda tunnel ee OpenSSH, sidaas darteed ereyga tunnel ee sumadda wuxuu qeexayaa awood, ma aha siyaasaddaada dhabta ah. Hubi waxa kernel-ku samayn doono halkii aad eegi lahayd magaca borofaylka.
nmcli connection show --active
ip -br link
ss -lntp | grep -E "1080|8080"Kadib natiijada la jaanqaad abka. Barnaamijka fahma SOCKS waa in loo habeeyaa inuu isticmaalo proxy-ga. Isticmaalaha gudbinta gudaha waa in loo tilmaamaa dhegeysanahiisa. Midkoodna ma helo gudbinta keligiis, midkoodna ma caawiyo tilmaamaha xiriirka oo cagaar noqday.
Diyaari dhinaca fog halkii aad ku qasbi lahayd
Akoon SSH caadi ah wuxuu xaqiijin karaa aqoonsiga isagoo aan haysan wax ogolaansho ah oo uu ku kiciyo aaladda tunnel fog. Mashruucu wuxuu diiwaangeliyaa waddo aan root lahayn oo maamuluhu ka hormariyo aaladda isticmaalahaas, kadibna macmiilku doorto lambarka u dhigma.
Habayntaas waxay u baahan tahay isku-duwid siyaasadda tunnel ee server-ka iyo qofka leh cinwaannada shabakadda fog. Abuurista aaladdu keligeed ma bixiso waddooyinka kheyraadka, ogolaanshaha gudbinta ama waddo dib u noqosho, waxna taas kamid ah ma yimaado sababtoo ah habaynta tusaalaha waxay u muuqatay mid qancin leh.
Waxa aanad samayn waa inaad shid tidhaa gudbin aan xad lahayn ama gelitaanka root fog si tusaale u shaqeeyo. Meesha hawlwadeenku leeyahay habaynta shabakadda fog, isticmaal habaynta la taageeray si aad amarrahaas ugu dhaafto milkiilahaas, kana fogow caawiye labaad oo dib u soo celiya cinwaanno iskhilaafsan marka la gooyo.
Macnaha xaqiijinta aqoonsiga, iyo waxa gelin tikitada
Xaqiijinta aqoonsigu waxay leedahay macne u gaar ah. Plugin-ku wuxuu raadiyaa wakiil SSH oo xiran fadhiga isticmaalaha wuxuuna u baahan yahay in martigeliyaha loo socdo la yaqaan, sidaas darteed fure ka shaqeeya hal terminal si otomaatig ah uma noqdo mid muuqda wadada xaqiijinta ee maamulaha. Diiwaangeli oo hubi furaha martigeliyaha iyada oo loo marayo habka la ansixiyay halkii aad damin lahayd hubinta.
Taageerada, qor afar wax: plugin-ka iyo nooca, habka la doortay, aqoonsiga fog ee loogu talagalay, iyo interface-ka ama dhegeysanaha oo ahayd inuu soo baxo. Kadib si toos ah u tijaabi meesha gelitaanka abka. Tilmaamaha xiriirka oo xiran oo ay la socoto tijaabo shaqaynaysa waa caddayn; tilmaamaha xirnaanshaha oo keliya waa hadal ku saabsan SSH, ma aha marinka ama ogolaanshaha kheyraadka aad isku dayday inaad hesho.