Ingabe umqhubi we-VPN angabona ukuthi yiziphi izingosi ozivakashelayo?

Buza ukuthi i-VPN ingabona ini, futhi impendulo incike ekutheni umi kuphi endleleni. Kusendlalelo seseshini umqhubi unemicimbi yokuqinisekisa kanye nezibalo zamabhayithi. Kusendlalelo samaphakethe kunezikheli zendawo eziya kuyo nesikhathi. Kusendlalelo se-DNS kungase kube namagama ngokwawo. Isendlalelo ngasinye siphendula umbuzo ohlukile, futhi asikho iswishi eyodwa ekuhambisa phakathi kwazo.

Nquma isendlalelo ngaphambi kokusho okuthile

Ukuxhumana okufanayo kukhiqiza amarekhodi ahlukile endaweni ngayinye, futhi isitatimende mayelana nobumfihlo sinengqondo kuphela lapho sisho leyo ndawo. Funda ithebula ngekhulamu ngayinye: yini ekhona kuleso sendlalelo, yini umqhubi angayibona lapho, futhi yini lawo marekhodi angenakukusho namanje.

Ukufunda isendlalelo esisodwa njengesithombe esiphelele yisiqalo sazo zombili izitatimende ezeqisayo nokukhululeka okungamanga. Umhlinzeki othi akakuqophi ukuphequlula angase aqinisise mayelana nokuloga kwama-URL kodwa agcine amarekhodi amaseshini, futhi ukubanjwa kwamaphakethe okubonisa izikheli kuphela akuphenduki umlando wokuphequlula ngaphandle kokusesha okuphambene nokuqagela.

Uma uhlola inqubomgomo, thola umusho ochaza isendlalelo ngasinye. Uma inqubomgomo ingazihlukanisi, buza ukuthi yimaphi amarekhodi akhona esikhundleni sokwamukela isitatimende esijwayelekile mayelana nokubethela.

Uhlu lwamaseshini: yini iseva ejwayelekile ye-OpenVPN eyigcinayo

Ngokuzenzakalela OpenVPN iseva ayibambi ithrafikhi. Umphumela ojwayelekile uhlu lwamaseshini: i-akhawunti eqinisekisiwe, ikheli lomthombo eyavela kulo, izigxivizo zesikhathi sokuqala nokuphela, ikheli lethuneli elinikeziwe kanye nesamba samabhayithi kuzo zombili izinhlangothi. Lolo uhlu lwamaseshini, hhayi uhlu lwezindawo eziya kuzo.

Izinketho zokuloga zingangeza imininingwane. Izinga eliphezulu lokuningilika libhala okwengeziwe mayelana nokuxhawana izandla, futhi ifayela lesimo lingabala amaklayenti axhunyiwe, kepha akukho kokubili okuguqula iseva ibe iphroksi esobala. Ukukhiqiza ama-URL kudinga ukuqeda i-TLS noma ukusebenzisa iphroksi ecacile, futhi kokubili kushintsha ukuhlelwa kokwethembana esikhundleni sokuvula isici esifihliwe.

Yingakho inguqulo enembile yesitatimende sokuthi akukho kuloga ukuphequlula incane kunalokho okuzwakalayo. Iseva ayilwazi ikhasi, kodwa iyazi ukuthi iseshini yayikhona nokuthi cishe yayingakanani idatha eyadlula kuyo. Ukuthi lolo rekhodi leseshini liyagcinwa yini, futhi isikhathi esingakanani, umbuzo ohlukile wenqubomgomo.

Amaphakethe angaphakathi nangaphandle abufakazi obuhlukile

Ukubanjwa kwamaphakethe yindlela yokubona okudlula ethunelini ngempela. Kuseva, shono isixhumi esibonakalayo sethuneli bese ubhala efayeleni elingahlaziywa ngaphandle kwenethiwekhi:

sudo tcpdump -ni tun0 -w /tmp/tun.pcap
sudo tcpdump -r /tmp/tun.pcap -nn | head

Lelo fayela liqukethe ithrafikhi yangaphakathi ekhululiwe: ikheli lethuneli lekliyenti njengomthombo, ikheli lendawo ekuyiwa kuyo kanye nebhondi, usayizi wamaphakethe kanye nesikhathi. Alinawo umzila we-HTTP noma umzimba wempendulo ngaphandle uma i-TLS yaqedwa kwenye indawo, futhi le yidatha ebucayi okugcinwa kwayo kuyisinqumo senqubomgomo hhayi ukunethezeka kokulungisa amaphutha.

Ukubanjwa kwesixhumi esibonakalayo somzimba kubonisa okunye. Lapho ubona amaphakethe angaphandle aqondiswe endaweni yokugcina ye-VPN, ngaphakathi kukhona umthwalo obethelwe. Izikheli ezingahlobene ezivela kulelo fayela zivamile uma ikhona i-adaptha ebonakalayo, ngoba idivayisi yethuneli ithwala imifudlana yangaphakathi kuyilapho ukuthutha okubethelwe kuthwala eyangaphandle.

Buza ukuthi ukubanjwa kumele kuphendule muphi umbuzo. Ukusetshenziswa kwethuneli uhlelo lokusebenza kubonakala ku-adaptha ebonakalayo; ukufinyeleleka kwethuneli endaweni yokugcina kubonakala kulelo lomzimba. Ukusebenzisa noma yiliphi ifayela njengesithombe esiphelele kuveza iziphetho idatha engangenakuzisekela.

I-DNS iyindawo lapho amagama eba sobala khona

I-DNS ihlala iyisihlengelo esisebenzayo. Isixazululi sibona amagama esicelwa ukuwasxazulula, ngakho-ke osisebenzisayo ufunda ukuthi yiziphi izingosi ikliyenti ezifunayo ngisho noma ukuxhumana kwakamuva kubethelwe. Ukubanjwa kwethuneli kubonisa izikheli; isixazululi sibonisa amagama.

Hlola ukuthi isixazululi sisebenzise liphi ikheli ukufinyelela isevisi yangaphandle. Impendulo ikheli lokuphuma lesixazululi, futhi ukuqhathanisa nokuphuma kwe-VPN kukutshela ukuthi umbuzo udlule ethunelini yini:

dig +short myip.opendns.com @resolver1.opendns.com
dig example.com
sudo tcpdump -ni any udp port 53

Uma lelo kheli lihambisana nokuxhumana kwasekhaya hhayi nokuphuma kwethuneli, ukusesha kweqe i-VPN futhi igama lalibonakala endleleni yasekhaya. Phinda ukuhlolwa ngemva kokubuyekezwa kwekliyenti, ngoba inguqulo entsha ingashintsha ukuthi yisiphi isixazululi esifakwa yiphrofayela.

I-DNS ebethelwe ihambisa ukubonakala esikhundleni kokukususa. Inethiwekhi ayisawuboni umbuzo, kepha isixazululi sisawubona, futhi umbuzo wokwethemba ushintsha izandla kuphela. Igama leseva ye-TLS ekuxhaweni izandla kokuxhumana liyisibonakaliso esisodwa esiyingxenye: livame ukusinda ngisho noma umthwalo ungacaci, ngakho-ke izikheli zendawo ekuyiwa kuyo akuzona kuphela imethadatha iseva yokudlulisela engayibona.

Izinhlobo ezintathu zamarekhodi nokuthi ubani angawafunda

Ukubalwa kweseshini, amarekhodi ngokwegama kanye nobufakazi bokuphuma kuyimikhiqizo emithathu ehlukile enezibopho ezintathu ezihlukile. Amalogo eseshini ashibhile futhi awanakho ukuzwela okukhulu, futhi aphendula ukuthi ubani oxhumile nanini. Amarekhodi ngokwegama adinga isixazululi esiloga noma iphroksi ecacile, futhi adala isibopho sokudalula kubantu abathintekile. Ubufakazi bokuphuma ukuhlolwa ohlangothini lwekliyenti okuqhathanisa lokho okudalulwa yisixazululi nokuphuma kwethuneli.

Bhala phansi ukuthi yikuphi kwalokhu kuthathu okusebenzisayo, ubani angakufunda futhi kuhlala isikhathi esingakanani. Izitatimende zokuthi isevisi ayigcini amalogo zichaza isendlalelo esisodwa, futhi zihlala ziyiqiniso kuphela kuleso sikhala. Umhlinzeki ofanayo angaba nembile ngamaseshini kodwa abe nephutha nge-DNS.

Gcina ukuhlolwa kukwazi ukuphindwa: umbuzo ofanayo wesixazululi, isixhumi esibonakalayo sokubanjwa esifanayo kanye nokuqhathanisa okufanayo. Isitatimende sobumfihlo esingahlolwa esendlalelweni esishiwo isiqubulo, hhayi iqiniso lokusebenza.