Ingabe inethiwekhi ingavimba i-VPN yakho ngaphandle kokuphula ukubethela?
Ukubethela kuvikela okuqukethwe, hhayi ukulethwa. Qhathanisa uhlu lokuvimbela, uhlu lwezimvume kanye nokunqamuka, bese ubuza ukuthi ukubonwa okukodwa kungasekela ini ngempela.
Asikho isiphathimandla esidinga ukhiye wesikhathi ukuze simise umhubhe: lahla amaphakethe endleleni futhi uzohluleka, kuyilapho ukubethela kuhlala kunamandla njengoba ukwakheka kwako kwathembisa. Ukubethela kuvikela lokho okuthwalwa ingxoxo, hhayi ukuzimisela kwanoma iyiphi inethiwekhi ukuyithwala. Ukuhlukanisa lezi zici ezimbili kuguqula impikiswano mayelana nokungavinjwe ibe umbuzo wokuthi iyiphi inqubomgomo esebenzayo nokuthi ifinyelela kude kangakanani. Ukuqhathanisa okungezansi kugcina ukutholakala nobumfihlo kuhlukene, ngoba izitatimende eziningi eziqinile mayelana nokuvinjwa kwe-VPN zizihlanganisa ngokuthula.
Ukufinyeleleka yisinqumo esithathwa yindlela
Konke ukuthutha kuncike endleleni edlulisa amaphakethe, futhi umbuzo ngamunye wenqubomgomo lapha ugcina usewusinqumo salokho kudlulisa. Umthetho olahla amaphakethe ushintsha ukutholakala ngaphandle kokuthinta ubumfihlo, futhi yileyo ndlela umhubhe ongabongeka ngokugcwele futhi ungasebenzi ngokuphelele ngesikhathi esisodwa. Akukho lutho kulo mphumela oludinga ukuphula isibonakaliso noma ukubuyisela ukhiye. Kudinga kuphela ukulawula indlela.
Ukudideka kuvame ukuqala ngokuthi izici ezimbili zabelana ngegama elilodwa. Ukubethela okunamandla kukhuluma ngokuthi ubani angafunda ukugeleza; akusho lutho mayelana nokuthi idivayisi ephakathi izokuyeka yini. Ngakho-ke isitatimende sokuthi i-VPN ayikwazi ukuvinjwa sidinga esinye isitatimende ngaphansi kwaso, okuwukuthi akekho osendleleni ozimisele ukulahla amaphakethe.
Izindlela zokuqinisekisa kanye nenani ngayinye
Izindlela ezintathu zihlanganisa iningi lezinqubomgomo zangempela, futhi ziyahluka kulokho okufanele bakwazi, izindleko zokuzisebenzisa kanye nokuthi ubani omunye ohluphekayo. Ngayinye yazo inganqaba umhubhe ngaphandle kokukhipha nakancane. Umehluko ubalulekile ngoba igama elilodwa, ukuvimbela, lisetshenziselwa zontathu.
| Style | Default | What it must know | Who else is affected |
|---|---|---|---|
| Blocklist | Allow, minus listed destinations | Addresses and ports of known endpoints | Unrelated tenants on a listed address |
| Allowlist | Deny, plus approved destinations | A maintained definition of permitted traffic | Anything outside the approved set |
| Shutdown | Deny broadly for a period | Nothing about the protocol | Ordinary services along the same path |
Lelo thebula liyimephu yezindleko, hhayi ukuhleleka. Uhlu lokuvimbela lushibhile ukuqala futhi ludula ukulugcina lunembile; uhlu lwezimvume lushintsha ukutholakala ngokunakekelwa kwesethi evunyelwe, futhi ukunqamuka akudingi nhlobo ukuhlukanisa. Okuhlukanisayo akukhona ubuhlakani bezobuchwepheshe kodwa ukuthi ngayinye ibeka kuphi umzamo oqhubekayo. Inqubomgomo ebonakala ilula ephepheni ivamise ukuba nomugqa wokunakekela ocashile kwenye indawo.
Uhlu lokuvimbela lunomkhawulo ngokuthi ikheli liyibiza kahle kangakanani insizakalo
Uhlu lokuvimbela lunqaba izindawo ezivele zikhonjiwe futhi lushiya ezinye zitholakala ngokuvamile. Ukuze lusetshenziswe kudingeka amakheli namachweba, hhayi umbhalo ocacile, futhi yikho okulwenza lushibhile ekuqaleni. Izindleko ziza kamuva, ngoba ibanga elake lakhomba umhlinzeki oyedwa lingase ligcine lihlala izikweletu eziyishumi nambili ezingahlobene. Njalo ukushintsha kwekheli kuphoqa ukuhlela uhlu, futhi njalo umbhalo ogugile uthwala ithrafikhi engenacala.
Ukunemba kule modeli kunomkhawulo ngokuthi indawo iyikhomba kahle kangakanani insizakalo, futhi iphuzu lokugcina elabelwana futhi elimatasa lingumkhombi omubi. Lona umkhawulo wesakhiwo, hhayi iphutha lokusetshenziswa, ngakho-ke amathuluzi angcono awawususi. Lokhu futhi kuchaza ukuthi kungani uhlu lokuvimbela luvame ukukhula: iphuzu lokugcina elisha ngalinye libonakala njengokwengezwa okuncane, futhi umonakalo oseceleni ukhula nohlu.
Uhlu lwezimvume ludlulisela umthwalo wokunakekela
Uhlu lwezimvume luphendukela ekusizeni okuzenzakalelayo ukuze kuphela izindawo noma izinhlobo zethrafikhi ezikhethwe kusengaphambili zingadlula. Akudingi ukubala yonke indawo yokugcina enqatshiwe, okuyinto esiza lapho isethi enqatshiwe inkulu noma ishintsha ngokushesha. Esikhundleni salokho idinga incazelo egciniwe yalokho okuvunyelwe, kanye nokuqinisekisa okuhambisana naleyo ncazelo.
Izinombolo zamachweba yindawo ebuthakathaka evamile encazelweni enjalo. Ukuvumela ichweba akufani nokukhomba yonke inhlelo yokusebenza engalisebenzisa, ngakho-ke uhlu lwezimvume olusekelwe kumachweba luvame ukwamukela okungaphezu kwalokho obekuhloswe ngumbhali walo. Izigxivizo zobuchwepheshe zine nkinga efanayo ngakolunye uhlangothi, ngoba zikhomba ukuma kwethrafikhi hhayi inhloso. Ngakho-ke uhlu lwezimvume alunembi ngokuzenzakalela kunohlu lokuvimbela; lunemba ngokunye.
Ukubonwa okukodwa kungasekela ini futhi kungasekeli ini
Noma yisiphi isitatimende mayelana nokuvimbela kufanele sifundwe nemibuzo emine ezandleni: yimiphi inethiwekhi yokungena, yiziphi izindawo, yimiphi imithethonqubo kanye nasiphi isikhathi sokubona. Ukuhluleka okubonwe namuhla kunethiwekhi eyodwa yeselula akusho lutho mayelana naleyo ndawo yokugcina kusasa isuka kwenye inethiwekhi. Umhubhe owake wasebenza kanye nawo akusho lutho mayelana nokutholakala okuhlala njalo.
Isimo sokuhluleka singabonwa ngaphambi kokuthi wenze ithiyori ngembangela yaso. Ukuma buthule, ukunqaba ngokushesha kanye nokusetha kabusha ngemva kokuxhuma kukhombisa izindlela ezahlukene zokuqinisekisa, futhi imiyalo emibili iyahlukanisa:
curl -sS -m 8 https://vpn.example.com/ -o /dev/null -w "%{http_code}\n"
traceroute -n -m 8 vpn.example.comUkuma okugcina ngesikhathi esiphelile kukhombisa ukulahlwa buthule, ukunqaba okusheshayo kukhombisa idivayisi enqabayo endleleni, futhi ukusetha kabusha ngemva kokuxhuma kukhombisa ukugxambukela okunesimo hhayi umzila ongekho. Ucwaningo lwe-RFC 9505 ngezindlela zokuvimbela ulwazi luchaza izindawo zokulawula kanye namaphethini okugxambukela ngemuva kwalezo zimo. Nokho akekho kubo othi inqubomgomo isebenza kabanzi kangakanani. Ukuqhubeka kuyisitatimende esinamandla ukudlula ukufinyeleleka: izindawo zokugcina, isofthiwe, izinqubomgomo kanye nezinsizakalo ezivunyelwe konke kuyashintsha, ngakho-ke ukusebenza okungenasiphetho kudinga imicabango mayelana nokuqhubeka kokuqinisekisa, hhayi uhlu lwamakheli abonwe ngesikhathi esisodwa.