I-hook yeklayenti noma i-hook yeseva? Iskripthi se-OpenVPN sigijima kuphi

Umsebenzi ucacile: lapho ikhompyutha ephathwayo ixhuma, kufanele kushintshe okuthile kuyo. Ukucushwa okuhlelwayo kungokweseva, futhi yilapho umcabango owephukayo. Indlela efayeleni leseva ibiza ifayela elikuleso seva, futhi akukho nani le-push elishintsha ukuthi iyiphi inqubo eyisebenzisayo. Ukukhetha phakathi kwama-hook amabili ikakhulukazi isinqumo sokuthi iyiphi imishini ephethe umsebenzi, kanye nokwamukela imikhawulo elandelayo.

Imishini emibili, imibuzo emibili okufanele iphendulwe kuqala

Buza ukuthi ushintsho lwesimo kufanele lwenzeke kuphi, bese ubuza ukuthi yimuphi umcimbi ohambisana nakho. Uma ushintsho luwugunyazo lomsebenzisi ngamunye noma isinqumo sokucushwa kweklayenti ngalinye, lungeyakho lapho uhlu lwabasebenzisi lwaziwa khona: iseva. Uma ushintsho luwumzila, isilungiselelo se-resolver noma umsizi wasekhaya endaweni yokugcina, lungeyakho endaweni yokugcina, futhi yindawo yokugcina kuphela engakwenza lokho.

Ukuphendula leyo mibuzo emibili ngokulandelana okuphambene yikho okwenza abantu bagcine bezama ukusunduza ifayela le-batch kukhompyutha ephathwayo ye-Windows. Iseva iyazi ukuthi ubani oxhumile; ikhompyutha ephathwayo iyazi ukuthi isitaki sayo senethiwekhi sibukeka kanjani. Akekho onolwazi lomunye, futhi umzamo uvame ukwehluleka buthule esikhundleni somphutha ocacile.

Ngaphambi kwakho kokubili, kufanele kubuzwe umbuzo wesithathu: ingabe inkundla iyayihlinzeka neze i-hook oyifunayo? Idivayisi ezikhiqizela yona ukucushwa kwayo ingase inganikezi amagama afanayo omcimbi, futhi iklayenti ledeskithophu elingenisa ifayela le-.ovpn akusiyo ngempela iklayenti okwalotshelwa lona ifayela. Ukuqinisekisa inkundla kuqala kukusindisa ekuklanyeni ngapha nangapha kwe-hook engekho lapho. Kubuye kukutshele ukuthi yimuphi umbhalo osebenza ngempela emishinini ephambi kwakho.

Inketho yohlangothi lweseva: umcimbi ngokuxhumana ngakunye

Iskripthi se-client-connect sigijima kumongo wenqubo yeseva lapho iklayenti eligunyaziwe lixhuma, futhi sithola imininingwane yokuxhumana ebhaliwe njenge-common name kanye nekheli elinikeziwe. Yindawo efanele yokubhala ucezu lokucushwa kweklayenti ngalinye, ukuphoqelela isinqumo senqubomgomo noma ukuqopha isimo esiphethwe yiseva.

Umehluko abantu abawuphuthelayo umehluko phakathi kwaleyo hook ne-hook ye-up yeseva. I-hook ye-up iqala lapho iseva ivula idivayisi yayo yomhubhe, okwenzeka kanye lapho i-daemon iqala kuseva enamaklayenti amaningi. Akusiwona umcimbi wokungena ngakunye, futhi ikhodi ebekwe lapho igijima lapho insizakalo iqala hhayi lapho abasebenzisi bexhumanisa.

Kudivayisi elinesixhumanisi sewebhu, sebenzisa indlela yokunwetshwa esekelwayo esikhundleni sokuhlela amafayela e-daemon akhiqiziwe. Amafayela akhiqiziwe abhalwa kabusha ekugcineni okulandelayo, futhi lokho kubhala kabusha kususa buthule ushintsho lwakho ngesikhathi esibi kakhulu. Gcina ikhophi yombhalo wokunwetshwa ngaphandle kwedivayisi ukuze isibuyekezo sefirmware singalahlekelwa nayisihloso.

Inketho yohlangothi lweklayenti: umsebenzi okufanele ugijime kule ndawo

Iklayenti lomphakathi lingagijimisa iskripthi sendawo lapho idivayisi yomhubhe inyuka futhi futhi lapho imizila ifakwa. Lezo yizikhathi ezimbili ezahlukene, futhi ukukhetha okungalungile kudala umncintiswano ojwayelekile lapho umsizi eqala ngaphambi kokuba umzila okuncike kuwo ube khona.

Umsizi kufanele abe khona kulelo klayenti, afundeke futhi akwazi ukusetshenziswa yikhompyutha egijimisa iklayenti, futhi avunyelwe yisilungiselelo esicacile se-script-security. Iskripthi esisebenza lapho uqalisa iklayenti njengomlawuli asikutsheli lutho mayelana nensizakalo engaphambi kokungena noma isikhathi somunye umsebenzisi.

Ukuqamba amagama nakho kubalulekile. I-hook ye-up ihambisana nokwakhiwa kwedivayisi kanti i-route-up ihambisana nokufakwa kwemizila, kodwa umsebenzi odinga ukuthi inethiwekhi yangasese ifinyeleleke kufanele uqinisekise ukufinyeleleka esikhundleni sokucabanga ukuthi ukwakhiwa kwedivayisi kusho ukuthi wonke umzila, ingeno ye-resolver nohlelo lokusebenza sekulungile.

Kungani ukusunduza ikhodi egijimekayo kungekho kuzinketho

Izinketho ezisunduzwa nge-push zikhawulelwe ngamabomu, futhi izinketho ezigijimisa amaskripthi ziphakathi kwezigaba iseva engavunyelwe ukuzidlulisa phansi. Lowo mkhawulo ukhona ngoba enye indlela ibizovumela iseva ehlanjiwe noma engacushwanga kahle ukuthi igijimise imiyalo engafanele kukho konke iklayenti elike laxhuma.

Ukuvumela ukusetshenziswa kweskripthi kule ndawo akukushintshi lokho. Isilungiselelo sakho se-script-security sivumela amaskripthi endawo owakhethile; asiniki iseva igunya lokuhlinzeka amasha.

Uma umgomo uwukufaka imizila ye-VPN kuphela, sebenzisa ukucushwa kwemizila okusekelwayo esikhundleni sokusungula uhlelo lokusebenzisa kude. Uma umgomo udinga ngempela ikhodi yendawo, yisabalalise ngamathuluzi okuphatha izindawo zokugcina enhlangano futhi uyihlole njenganoma yiluphi olunye uhlelo lokusebenza olugijima ngamalungelo omsebenzisi.

Yini okufanele uyiqinisekise ngaphambi kokuthemba noma iyiphi i-hook

Bhala izinto ezine ku-hook ngayinye: umshini, igama lomcimbi, ikhompyutha egijima ngaphansi kwayo, kanye noshintsho lwesimo okufanele ilukhiqize. Bese uhlola ukuxhumana, ukuxhumana kabusha nendlela yokuhlanza, ngoba i-hook ephuza isimo lapho ixhumana kabusha imbi kunaleyo engakaze igijime.

Hlola ngaphansi kwekhompyutha ezoyigijimisa ngempela, ngesikhathi ezogijimiswa ngaso ngempela. Incwadi ye-openvpn(8) ibhala zombili izinhlobo zama-hook nemikhawulo ye-push; inkundla osebenzisa kuyo ibhala ukuthi iyazihlinzeka yini noma cha. Iskripthi esiphumelelayo kutheminali yomlawuli esebenzisanayo siwumbono nje, akusona isiqinisekiso.