I-VPN ye-Android nama-layisensi ohlelo: isixwayiso sisho ukuthini

Amabhokisi amabili ku-Android ahlale ehlanganiswa: isicelo semvume ye-VPN kanye nezicelo zezimvume ezenziwa wuhlelo lokusebenza mayelana nedatha yakho. Esokuqala sidlulisa indawo kwinethiwekhi, okuyindawo lapho amaphakethe angafundwa futhi abhalwe kabusha khona. Esesibili sidlulisa okuqukethwe okugciniwe okuvikelwa yi-Android uhlelo lokusebenza ngolunye. Ukubhekana nakho kokubili njengento eyodwa kungase kudlulise ngokweqile lokho umhubhe ongakubona, noma kwehlise kakhulu lokho uhlelo lokusebenza oluqinile luzokucela ngokulandelayo.

Ibha yemvume idlulisa ini ngempela

Uhlelo lokusebenza olusebenzisa i-VpnService futhi lumemezele i-BIND_VPN_SERVICE lucela uhlelo ukuba lube yi-VPN yedivayisi. Ngemva kokuvunywa, uhlaka ludala i-interface ye-tun futhi lunikeza uhlelo lokusebenza isichazi sefayela sayo. Konke okwenziwa wuhlelo lokusebenza ngemva kwalokho kugeleza ngaleso sichazi: sifunda amaphakethe e-IP ngaphandle, sinquma ukuthi senzeni ngawo, futhi sibhale amaphakethe abuyele ngaphakathi.

Ubukhulu bale interface bucacile. Imizila inquma ukuthi yiziphi izindawo ezibanjwayo, futhi i-addAllowedApplication noma i-addDisallowedApplication inquma ukuthi yiziphi izinhlelo ezilondolozayo. I-VPN ngohlelo ngalunye edweba izinhlelo ezimbili ayiboni ingxenye esele yedivayisi.

Lokhu kuwukuvunyelwa kwezinga lamaphakethe, hhayi kwezinga ledatha. Insizakalo ibona amabhayithi uhlelo olunikeza isitaki senethiwekhi, aqondiswe endaweni ethile. Ayitholi ukufinyelela endaweni yokugcina yangasese yohlelo oluthumelayo, kumafayela ayo e-database noma kwimemori yayo esetshenzisiwe. Amafayela ahlelo oluwagcine kubhokisi laso lesihlabathi ahlala kunzima ukuwafunda njengakuqala.

Lapho umbono wamaphakethe uphela khona

I-TLS isenza umsebenzi wayo ngaphakathi komhubhe, ngoba ukuxhumana ngesandla kwenzeka phakathi kohlelo nesiphakeli, hhayi phakathi kohlelo ne-VPN. I-VPN idlulisa umbhalo obethelwe engakwazi ukuwuvula ngaphandle kokhiye beseshini. Yingakho umhubhe wodwa ungavezi okuqukethwe kwekhasi le-HTTPS noma iseshini yeposi evikelwe.

Imethadatha ezungeze umbhalo obethelwe iyindaba ehlukile, futhi yilapho ukuqiniseka okuningi kuwa khona. I-IP yendawo eziyiwa kuyo, imbobo, usayizi wamaphakethe kanye nesikhathi kukonke kubonakala, kanye negama lesiphakeli ku-TLS ClientHello, elivame ukuthunyelwa obala ngisho ngaphansi kwe-TLS 1.3. I-Encrypted Client Hello ikushintsha lokho, kodwa ayikho yonke indawo. I-DNS elula nayo iveza amagama kalula lapho imibuzo iphuma ingabethelwe.

Amaphrothokholi amadala noma akahlelwanga kahle adlulisa okwengeziwe. I-HTTP elula, i-IMAP ngaphandle kwe-TLS kanye namaphrothokholi amaningi emidlalo ne-IoT aveza umthwalo wawo kunoma yini ephethe isichazi se-tun.

Izimvume ezingalokothi zifike nakho

Ukuvuma i-VPN akuyona imvume yoxhumana nabo, ama-SMS, izithombe noma indawo yokugcina imidiya. Lezo ziyizimvume zesikhathi sokusebenza ezihlukile, ngayinye inebha yayo kanye nomzila wayo wokuhoxisa ekhasini lezilungiselelo zohlelo lokusebenza. Iklayenti le-VPN elifuna irekhodi lakho lezingcingo kufanele likucele njenganoma yiluphi olunye uhlelo, futhi ungala ngenkathi ugcina umhubhe.

Ukufakwa kwesitifiketi yikho okufanele uqaphele, ngoba kubonakala njengengxenye yokuhlelwa kwe-VPN kodwa akusiyo. Ukufaka i-CA yomsebenzisi endaweni yokugcina ubufakazi kushintsha ukuthi yiziphi izitifiketi i-Android ezizokwamukela, futhi kusukela ku-Android 7.0 uhlelo oluhlose i-API 24 noma entsha ayizinanzeleli izi-CA ezingezwe umsebenzisi ngaphandle uma ukuhlelwa kwayo kokuphepha kwenethiwekhi kukhetha ngensika yokuthemba yomsebenzisi. Iklayenti eliphikelela ku-CA kungenzeka lenza ukungena kwebhizinisi okusemthethweni, noma licela into ibha le-VPN engakaze liyikhulume.

Ukufinyelela kokufinyeleleka kukude nakakhulu. Insizakalo enokufinyeleleka okunikwe amandla ingafunda okuqukethwe kwesikrini sezinye izinhlelo, into okungekho ndawo yezinga lamaphakethe enikeza yona.

Isihlungi sendawo noma isango elikude

I-API efanayo ihlanganisa imikhiqizo emibili efanele amazinga ahlukene okuthenjwa. Ucingo lomlilo noma isivimbeli sezikhangiso kudivayisi sithatha isichazi se-tun futhi siphendule ukuhamba kwedatha endaweni, singakuthumeli neze kusiphakeli esisisebenzisayo. Umhubhe wangempela udlulisela lawo maphakethe esangweni kwenye indawo, futhi lowo mqhubi ubona imethadatha efanayo kusukela kolunye uhlangothi futhi anqume nokuthi yini ebuyayo.

Indlela esebenzayo yokuhlukanisa yile: hlola ikheli lakho lomphakathi lapho i-VPN ivuliwe futhi icishiwe, bese ubona ukuthi isaziso sisho indawo yokugcina ekude yini. Uma ikheli lingashintshi neze, ukuhamba kwedatha cishe kuyazungeza kudivayisi uqobo.

Zombili izimo ziseyindawo yamaphakethe. Umehluko ukuthi ngubani omunye omile endaweni yokuphuma.

Hlola lokho okukuvumile

Vula Izilungiselelo, bese Kwinethiwekhi ne-inthanethi, bese VPN, futhi ufunde umugqa hhayi isithonjana kubha yesimo. I-Always-on VPN kanye ne-Block connections without VPN yizilungiselelo zedivayisi ezigcina i-interface iphila futhi zinqamule ukuvuza; azikhulisi lutho. Kusukela kusikrini esifanayo ungakhohlwa iphrofayela futhi uhoxise imvume.

Bese uhamba ezinye izimvume. I-App info ibonisa ukuthi iklayenti linazo ziphi izimvume zesikhathi sokusebenza, futhi izilungiselelo ze-Security zibonisa ukuthi isitifiketi somsebenzisi safakwa ngasikhathi sinye yini. Kokubili kungasuswa ngokuzimela.

Umbuzo ofanele ukuphendulwa mncane: yimaphi amaphakethe angena kule nsizakalo, aya kuphi, futhi ukusetshenziswa kugcina ini. Konke okunye ebhokisini kungumsindo. Isibonelo se-VpnService uhlu olugunyaziwe lwalokho okuvezwa yi-interface.