Shintsha i-ISP ngaphandle kokuphinda unombola amakheli e-VPN yesayithi

I-VPN yesayithi ehambisa amaphakethe igcina amakheli angasese lapho kushintsha uxhaxha lokuxhumana, kodwa ikheli lomlingani, ubunikazi kanye nendlela yokubuyela kusadinga umsebenzi. Nansi ingxenye.

Igatsha lishintsha umhlinzeki we-inthanethi, futhi iseva yamafayela igcina ikheli layo. Lo mphumela ujwayelekile ku-VPN yesayithi ehambisa amaphakethe futhi uyamangaza kunoma ubani ocabanga ukuthi ikheli lokugcina letheneli iyikheli lohlelo lokusebenza. Zombili zihlala ezingxenyeni ezahlukene zomklamo, futhi kube yinye kuphela eshukumile. Ukuziphatha njengento eyodwa yikho okwenza ukufuduka komhlinzeki kuphenduke iphrojekthi yokunombola kabusha.

Izinhlelo ezimbili zamakheli ezihamba ngokuzimela

Uhlelo lwangaphakathi luchaza amakheli angasese asetshenziswa izinhlelo: iseva yegatsha ku-10.55.8.20, isiqalo sendlunkulu esihambisa amaphakethe kuyo, kanye nendlela yokubuyela emuva. Uhlelo lwangaphandle luchaza ukuthi amasango amabili afinyelela kanjani kwelinye: amakheli omlíngani, amachweba okulalela kanye nendlela enqamula i-inthanethi.

Ushintsho lomhlinzeki luthinta uhlelo lwangaphandle. Ngokwalo ngokwalo, akudingi ukuthi uhlelo lwangaphakathi lushintshe.

Ukugcina izinhlu ezimbili zihlukene yisizathu esingokoqobo sokusebenzisa i-overlay ngisho lapho uhlelo lokusebenza seluvele lushifra ugudlu lwalo. I-overlay ikunikeza isakhiwo sangaphakathi esizinzile esimelana nokushintsha kwangaphandle. Uhlelo lokusebenza lugcina ikheli lalo, imithetho yalo ye-firewall kanye namarekhodi alo e-DNS. Yizinto zokuthutha kuphela ezishintshayo, futhi lokho kuwukubuyekezwa okuncane kakhulu.

Itheleni langaphandle lithwala ingxoxo yangaphakathi

Kutheleni elisuka esangweni liya esangweni, isihloko se-IP sangaphandle sikhuluma namasango amabili. Isihloko sangaphakathi sisabiza iziphetho zangempela zohlelo lokusebenza. Incazelo ye-RFC 7296 yesango-kuya-esangweni ikuthatha njengokuhambisa okuvamile okuletha ugudlu ngokusebenzisa iziphetho zetheleni.

Yingakho iseva yegatsha ingagcina u-10.55.8.20 ngesikhathi ikheli lomphakathi lesango lishintsha. Iphakethe langaphakathi alinawo nhlobo ikheli lomhlinzeki.

Ukuhlukanisa kuyisici somklamo, hhayi isiqinisekiso esizenzakalelayo. Uma uxhaxha olungena esikhundleni lungeke lusungule itheleni elisekelwayo, noma imizila yangaphakathi ingafakwa kabusha, uhlelo lokusebenza lulahlekelwa indlela yalo nakuba ikheli lalo lingashintshanga.

Ukufuduka komhlinzeki kusenohlu lokuhlola

Uhlu lokuhlola lwangaphandle lunezinto ezinhlanu: ikheli lomlingani noma igama eligcinwayo, isilaleli nanoma yikuphi ukuhlunga okuphezulu, ukuhumusha endleleni, ubunikazi bomlingani obulindelekile, kanye nezilungiselelo ezivunyelwe zesinye isango. Ngayinye ingehluleka ngokwayo. Gcina indlela ehlukile yokubuyisela ngesikhathi ushintsha uxhaxha oluthwala ukuphathwa. Ukunqamula ukufinyelela kude ngesikhathi sokushintsha koxhaxha kuwukuphazamiseka ozibangele wena.

Ngemva kwalokho, hlola isiqalo segatsha, umzila kuzo zombili izinhlangothi, inqubomgomo yokuvikela kanye nokugeleza okukodwa kwangempela kohlelo lokusebenza. Itheleni elisanda kuqinisekiswa alilungisi umzila okhomba esubneti yangasese endala.

Ukuhlangana kwamakheli nesinye isayithi elixhunyiwe kuyinkinga ehlukile yokuhlela. Ushintsho lomhlinzeki akulidali, kodwa ukufuduka ngokuvamile yisikhathi lapho kuvela khona.

Okungasindi: umthombo womphakathi namaseshini

Ikheli leseva yangasese elizinzile akulona umthombo womphakathi ozinzile. Uma ukuphequlula kuphuma ngqo ngomhlinzeki omusha, amasayithi abona ikheli elisha elibheke kumhlinzeki.

Ukugcina lelo kheli lizinze kudinga umklamo wokuphuma oqondile, onokutholakala nendlela yawo. Awuzi mahhala netheleni.

Amaseshini asevele asunguliwe nawo awasindi ekushintsheni komzila. Itheleni lingasusungulwa kabusha phakathi nemizuzwana futhi lisagqekeza ukuxhumana okude okuboshelwe emzileni wakudala. Hlela ukushintsha ngesikhathi lapho ukuxhumana kabusha kwamukelekile. Ungasho ukuthi ukufuduka ngeke kubonakale ngaphandle uma amaklayenti athile kanye nezikhathi zawo zokulinda kuhloliwe.

Qinisekisa ukufuduka ngezindlela ezine zokuhlola

Ngemva koshintsho, qinisekisa izinto ezine ngokulandelana: itheleni lasungulwa nomlingani obekiwe, umzila wangaphakathi oya esiqalweni segatsha ukhona, inqubomgomo ivumela ukugeleza kohlelo lokusebenza futhi uhlelo lokusebenza luyaphendula. Ngakunye kunomyalo wakho.

Esangweni le-Linux, lezi zintathu zihlanganisa ingxenye emaphakathi yalolo hlu:

ip route get 10.55.8.20
ip xfrm policy list
curl -sS -o /dev/null -w "%{http_code}" --max-time 8 http://10.55.8.20/health

Gcina amakheli okuthutha kuhlu olulodwa namakheli ezinhlelo kuhlu olunye. Buyekeza kuphela izinto ezishukumile ngempela. Ukunombola kabusha ukuncika kwangaphakathi ngenxa yokuthi ikheli langaphandle letheleni lishintshile kuwumsebenzi ongagwemeka.

Izihloko ezihlobene