I-proxy ye-SOCKS nge-SSH ku-Android: kungani uhhafu wezinhlelo zokusebenza zakho uxhumana

Uyafaka ngemvume nge-SSH, wengeza -D 1080, futhi umyalo uyaphumelela. Manje kunesilaleli se-SOCKS ocingweni, futhi uhhafu wezinhlelo zokusebenza usaphuma ngedatha yeselula. Lona umphumela ojwayelekile, hhayi umhubhe ophukile: i-ssh -D yakha indawo yokugcina ye-proxy, futhi izinhlelo zokusebenza ze-Android zisebenzisa i-proxy kuphela uma kukhona okuziphoqa. Ukuhamba ngochungechunge igxathu negxathu kubonisa ukuthi ingxenye ngayinye yomsebenzi ihlala kuphi ngempela.

Qala lapho ukugcwala kuqala khona

Khetha uhlelo olulodwa lokusebenza okufanele lusebenzise umhubhe futhi uhlole ukuthi lunaso yini isilungiselelo salo se-proxy. Isiphequluli esinensimu ye-SOCKS yisimo esilula: sibhekise ku-127.0.0.1:1080, vula i-DNS ekude uma isilungiselelo sikhona, futhi isicelo siyadlula. Iklayenti lengxoxo, uhlelo lwemephu noma umdlalo ongenayo leyomu yomkhakha awunayo indlela yokusebenzisa isilaleli, futhi akukho okubhalayo kumyalo we-SSH okushintsha lokho.

Ngaphambi kokufaka okunye, khombisa ukuthi isilaleli sisebenza kusukela ku-shell yocingo uqobo ngeklayenti elikhuluma i-SOCKS ngqo:

ssh -N -D 1080 [email protected]
curl --socks5-hostname 127.0.0.1:1080 https://ifconfig.me

Ikheli elibuya kufanele libe leliseva ye-SSH, hhayi lelocingo. Uma kunjalo, uhhafu we-proxy usuphothuliwe futhi umsebenzi osele umayelana nokumboza. Uma kungenjalo, lungisa uhlangothi lwe-SSH kuqala: ukuqinisekiswa kokhiye, ikhono leseva lokufinyelela indawo ekuyiwa kuyo, kanye nokuphuma kweseva ye-SSH uqobo.

Engeza ingxenye edingwa yi-Android

Izinhlelo zokusebenza ezingenaso isilungiselelo se-proxy zidinga into ebamba amaphakethe azo futhi iwaguqule abe ukuxhumana kwe-proxy. Kudivayisi engena-root, lokho yi-adapter yensizakalo ye-VPN: uhlelo oluthatha isixhumi esibonakalayo sobuciko futhi ludlulisele ukugcwala okukhethiwe kusilaleli se-SOCKS sendawo. Uchungechunge luba uhlelo lokusebenza, i-adapter, isilaleli se-SOCKS, ukuxhumana kwe-SSH, indawo ekuyiwa kuyo.

Faka i-adapter, yinikeze imvume ye-VPN futhi ukhethe izinhlelo zokusebenza noma imizila okufanele izibambe. Isithonjana sokhiye kubha yesimo ngaleso sikhathi simele i-adapter, hhayi i-VPN ehlukile yezentengiso. I-Android ivumela ukuxhumana okukodwa kwensizakalo ye-VPN okusebenzayo ngephrofayela yomsebenzisi ngamunye, ngakho ukuqalisa uhlelo lwesibili lwe-VPN akungezi isendlalelo ochungechungeni: luncintisana ngendima efanayo.

Lesi futhi isigaba lapho ukuhlolwa okuphumelelayo kungakukhohlisa khona. Uma i-adapter isilungiselelwe ukubamba kuphela isiphequluli osuvele wasibhekisa ku-proxy, konke kuyasebenza futhi akukho okunye okumboziwe. Funda uhlu lokubamba ngaphambi kokuphetha ngokuthi idivayisi isemhubheni.

Gcina ukuthuthwa kwe-SSH ngaphandle kokubamba

Ukuxhumana kwe-SSH uqobo akufanele kuphindiselwe emhubheni we-SOCKS okugcinayo. Uma i-adapter ibamba ukugcwala kohlelo lwe-SSH, umhubhe uncike ekuxhumaneni okulindele umhubhe, futhi umphumela uyiluphu olumayo noma oluhlulekayo ngokushesha lapho i-adapter iqala.

Izinhlelo ezihlanganisiwe zivikela isokhethi yazo yokuthutha. Ngezinhlelo ezihlukene udinga ukukhishwa okusekelwayo: shiya uhlelo lwe-SSH ngaphandle kokubamba, noma khipha indawo yokugcina ye-SSH ngokwekheli. Kokubili kunenani. Ukukhipha uhlelo lonke lwethemini kususa nomsebenzi wanethiwekhi ongahlobene nawo emhubheni, futhi ukukhishwa kwekheli kuyaphuka lapho ikheli leseva lishintsha noma lapho igama lixazululwa ngendlela ehlukile ekuxhumaneni okulandelayo.

Hlola ukukhishwa ngaphandle: xhuma kabusha i-adapter, bese uqinisekisa ukuthi isikhathi se-SSH siyasinda futhi isicelo esidlule ku-proxy sisabika ikheli leseva. Isikhathi esisebenza kuze kuqale i-adapter bese sibanda, yilo luphu.

Landela i-DNS ne-UDP kuze kube sekupheleni kochungechunge

Ukudlulisela okuguquguqukayo kwe-OpenSSH kuthwala ukuxhumana kwe-TCP. Akusiko ukuthutha kwe-UDP-associate noma i-ICMP, futhi i-adapter ayikwazi ukusungula ukudlulisela kwe-UDP ngokwamukela amaphakethe e-UDP. Noma yini eqinisekisa nge-UDP, kuhlanganise ne-QUIC nemidiya ye-WebRTC, izohluleka noma ibuyele ku-TCP kuye ngohlelo lokusebenza.

I-DNS idinga isinqumo sayo. Uhlelo oluxazulula igama endaweni luthumela umbuzo ngesixazululi esijwayelekile ngaphambi kokuxhuma, ngakho umhubhe uthwala ukuxhumana kodwa hhayi ukusesha. Iklayenti eliqaphela i-proxy elinokukhetha kwe-DNS ekude likugwema lokho; uhlelo olubanjiwe olungenakho akukugwemi. Hlola ukuthi yisiphi isixazululi esiphendulile esikhundleni sokucabanga ukuthi i-adapter ikushintshile.

Gcina isilaleli se-SOCKS siboshelwe ku-loopback, qinisekisa ukhiye womsingathi weseva ye-SSH ekusebenziseni kokuqala, futhi ushiye ukuqinisekiswa okujwayelekile kwe-HTTPS endaweni yako kwisayithi lokugcina. I-SSH ivikela ingxenye yocingo-kuya-kuseva; ayikubethelisi okwenziwa yiseva ngemuva kwalokho.

Hlola imijikelezo emibili yokuphila bese unquma

I-adapter nesikhathi se-SSH kunemijikelezo ehlukene yokuphila. Uma i-SSH iwa ngenkathi i-adapter isabamba, izinhlelo zokusebenza zingalenga ngaphandle kwephutha elicacile, ngoba amaphakethe azo asangena kusixhumi esibonakalayo sobuciko esingasenayo indlela yokuphuma esebenzayo. Uma i-adapter ima, izinhlelo zokusebenza zihamba ngqo noma zivinjelwe, kuye ngenqubomgomo ye-VPN yedivayisi.

Hlola izinhlangothi zombili ngamabomu: bulala isikhathi se-SSH ngenkathi i-adapter isebenza, bese umisa i-adapter ngenkathi i-SSH isahleli phezulu. Lokho ocingo okwenzayo esimweni ngasinye yinqubomgomo oyisebenzisayo ngempela, kungakhathaliseki ukuthi imiyalelo yokufaka ithini.

Uma ukuhamba komsebenzi kudinga ukumboza kwedivayisi yonke ngendlela yokwehluleka ebikezelwayo, i-VPN ye-IP yangempela, noma i-adapter enakekelwayo eklanyelwe lolu chungechunge, iyimpendulo eqotho. Isikhathi se-shell eshiywe sisebenza eceleni kohlelo lokubamba olungahlobene akusona umhubhe wedivayisi onakekelwayo; zingxenye ezimbili ezingenasivumelwano mayelana nokwenzekayo lapho enye yazo iphela.