Cusboonaysiinta albaabka VPN way guuldareysatay: akhri marxaladda ka hor furitaanka bixitaanka
Cusboonaysiin guuldareysatay ayaa sheegta marxalad, ma aha deked maqan. U xiriir fariinta milkiileheeda, akhri wadada boroksee, kadibna si ula kac ah u go’aanso siyaasadda dayactirka.
Diidmada in la rakibo cusboonaysiinta amniga waa hal toddobaad xun oo ka fog inaad dhibaato u noqoto qof kale, albaabka oggolaada macaamiisha ayaa ah meesha ugu fudud ee caadadaas lagu kobciyo. Sababta caadiga ah ma aha waddo maqan balse go’aan maqan: qofna ma sheegin sida martigeliyaha laftiisu u gaaro kaydka marka gudbinta macaamiisha si ula kac ah cidhiidhi tahay. Go’aankaas waa in si cad loo qaataa, wuuna ka cidhiidhi yeelnaa in siyaasadda bixitaanka galab la damiyo.
Afar marxaladood, afar milkiile oo kala duwan
Guuldareysiga cusboonaysiintu waa marxalad magac leh, ha sheegto fariintu ama ha sheegin, marxalad kastana waxaa leh milkiile kale. Magac aan la xallin karin waa su’aal xalliyaha. Xiriir waqti dhaafay waa su’aal gaadiidka, boroksee ama dhanka fog. Khalad aqoonsi TLS waa su’aal kalsooni, iyo macluumaadka kaydka ee la diiday waa su’aal saxeex. Afar marxaladood, afar milkiile, qaybna dekeddu waxay waligeed ka jawaabtaa midkood oo keliya.
| The failure text mentions | Which component owns it | What you check first | What you must not change |
|---|---|---|---|
| a name that will not resolve | the resolver policy for this host | which resolver is used, and whether its path is permitted | nothing in the firewall: no repository packet has left yet |
| a connection that times out | routing, proxy or the far end | the destination, port and proxy the manager actually attempts | the egress policy, before you know that destination |
| a TLS identity mismatch | trust configuration and the server's identity | the chain the manager is presented with | verification settings, which only hide the mismatch |
| rejected archive metadata | the repository's signing metadata | whether the source carries valid, trusted metadata | the signature check, which is not a routing question |
Ping iyo xallinta magacyada waa labada tijaabo ee dadku marka hore isticmaalaan, labaduba waxay ka jawaabaan su’aalo aan cidna weydiin. Jawaab echo waxay isticmaashaa borotokool ka duwan xiriirka kaydka, raadinta guulaysatana waxay ku joogsataa xallinta magacyada iyada oo aan tijaabin soo dejinta. Labaduba way gudbi karaan iyada oo macaamilka dhabta ah uu guuldareysto, labadubana way ku guuldareysan karaan sababo aan waddada waxba ka qabin.
Akhri waddada uu maamuluhu dhab ahaan maro
Baadh URI-yada isha ee la habeeyay iyo habaynta boroksee ee dhabta ah halkii aad midkood ka qaadan lahayd. Qaanuun loo qoray HTTP caadi ah ma aha hagaajin marka kaydku ku hadlo HTTPS, hay’adna dalbata boroksee waxay horey u dooratay waddada. Maamulayaasha xidhmaha waxay ixtiraamaan doorsoomayaasha deegaanka iyo habayntooda gaarka ah, habaynta martigeliyaha gaar u ahna waxay ka sarreysan kartaa mid caalami ah. Waxa borowser is-dhexgal sameeyo ma aha inuu ahaado waxa maamuluhu sameeyo.
apt-get update -o Debug::Acquire::http=true
apt-config dump | grep -i proxy
env | grep -i proxyDukumeentiga gaadiidka APT wuxuu sharraxayaa habaynta kee ee khuseysa nidaamka URI kee iyo sida doorashooyinka martigeliyaha gaar u ah loo qoro. Kaydi soo-saarka amarrada tikitka, waayo waxay kala soocdaa dhibaatada boroksee iyo waddo maqan si ka dhaqso badan natiijooyin ping ah oo kasta. Qor goobta, dekedda iyo borotokoolka saxda ah ee maamuluhu isku dayo, ugana dhaaf beddelka firewall inuu ku tiirsanaado diiwaankaas halkii uu ku tiirsanaan lahaa cinwaan muraayad la qiyaasay oo bilo gudahood duugoobay.
Dooro siyaasad dayactir, ma aha wax-ka-reebid
Saddex siyaasad ayaa difaacan kara: dayactirka tunnelka, dayactirka boroksee cusboonaysiin la maamulo, ama dayactirka waddo toos ah oo si cidhiidhi ah loo ogolaaday. Mid kastaa waxay tusinaysaa habayn xalliye u qalanta. Waxa aan difaacan karin waa wax-ka-reebid si qarsoodi ah u noqota meel dheer oo aan xaddidnayn mar kasta oo tunnelku dhaco.
Qor siyaasadda la doortay iyada oo milkiile la socda, waayo hawlwadeenka xiga wuxuu heli doonaa qaanuunka ee ma aha sababta ka dambeysa. Ku dhaqan geli fasaxa firewallka jira iyo milkiilaha shabakadda halkii aad nadiifin lahayd qaanuuno ama ku dari lahayd maamule siyaasad labaad hal martigeliye. Dabool qoysaska cinwaannada iyo barta adeegga ee isha dhabta ahi isticmaasho, dib u eeg liiska marka kaydku guuro.
Xaqiiji iyada oo aan kalsoonida daciifin
Guusha gaadiidku ma aha fasax lagu dabciyo xaqiijinta: xaqiijinta kaydka iyo aqoonsiga serverka TLS waa laba hubin oo kala duwan, midkoodna daminta wuxuu ka dhigaa khalad inuu libdhado iyada oo beddelaysa waxa martigeliyuhu aqbali doono. Boroksee dhex-gal ah waa go’aan kalsooni milkiilaha shabakadda ee ma aha sabab lagu damiyo hubinta gudaha, aqoonsiga kaydkuna ma aha inuu ku jiro ogaal la wadaago, waayo diiwaan faahfaahsan ayaa ah meesha ugu fudud ee lagu daadin karo.
Aqbal beddelka iyada oo la sameeyo soo-qaadasho macluumaad la maamulo kadibna hal macaamil xidhmo oo la ansixiyay, kadib tijaabi waxa dhaca marka tunnelku dhaco. Waddo dayactir si qarsoodi ah u ballaadha inta xannibaaddu socoto ayaa ka xun mid ku guuldareysta iyada oo xiran, natiijaduna waa inay noqotaa waddo cusboonaysiin oo leh milkiile magac leh iyo baaxad xaddidan.