Amakhophi wokugcina asefwini ehla kancane nge-VPN: thola isigaba sangempela
Ikhophi ehamba kancane ingase ihlole, ibale ama-hash noma izame futhi esikhundleni sokudlulisela. Qhathanisa isigaba, uhlobo lwendawo kanye nokubuyisela ngaphambi kokushintsha imizila.
Ikhophi yokugcina ekhasa nge-VPN ikumema ocwaningweni olusobala lokunqamula umhubhe bese uphinda ukala. Lolo cwaningo luvame ukuphendula omunye umbuzo, ngoba umsebenzi kungenzeka wawubala ama-hash amafayela noma ulinde ukuphinda uzame esikhundleni sokuhambisa amabhayithi. Hlukanisa izigaba kuqala, isikhalazo siba ukuhlolwa okuqondile okunomphumela oqondile olindelwe. Umzila uba ngumfakisicelo kuphela lapho isigaba sokudlulisela siyisona esihamba kancane ngempela.
Umsebenzi ukusigaba sini lapho uzizwa uhamba kancane
Amathuluzi okugcina adlula ezigabeni: ukuthola amafayela, ukuwafunda nokubala ama-hash, ukucindezela, ukubethela, ukulayisha phezulu bese uqinisekisa. Isigaba ngasinye sinomgoqo waso, futhi ambalwa kuphela awo athinta inethiwekhi. Ithuluzi elingakabiki isigaba sizokwazisa ukuthi alikaqedi ukuhlola.
Umsebenzi ochitha amaminithi angamashumi amabili ulungiselela amafayela amancane ayisigidi ngekeusheshe lapho umhubhe usushesha. Umsebenzi ogcwalisa umgudu wokulayisha phezulu uyinkinga yamandla enesixazululo esihlukile. Funda umphumela wenqubekela phambili ngesikhathi sokubambezeleka, bhala phansi isigaba futhi ubhale isikhathi, ngoba isigaba ngesikhathi sesikhalazo siyisona kuphela esibalulekile. Amafayela amancane nawo aziphatha ngendlela ehlukile kunento eyodwa enkulu, ngoba uhambo lokubuyela emuva ngayinye ifayela luyabusa futhi ukudlulisela akukaze kufinyelele izinga elizinzile. Qhathanisa okufanayo nokufanayo ngaphambi kokuphetha mayelana nomhubhe.
Indawo yokugcina yomphakathi kanye ne-NAS yangasese kwehluleka ngendlela ehlukile
Insizakalo yokugcina yomphakathi ithwala ukuxhumana kwayo kohlelo lokusebenza okuqinisekisiwe, futhi umhubhe uyigxathu elilodwa emzileni omude. I-NAS yangasese ivamise ukuncika kulo mhubhe ukuze ifinyelele inethiwekhi yakho. Lowo mehluko unquma ukuthi ukunqamula kuyisisekelo esivumelekile noma ukuhlolwa kokungabikho.
Esimweni somphakathi, umsebenzi ofanayo ngomunye umzila ungaba ukuqhathanisa okulungile uma inqubomgomo ivuma. Esimweni sangasese, ukususa umhubhe akushiyi mzila oya kuseva, ngakho umphumela uchaza indlela oyisusile hhayi leyo oyisebenzisayo.
| Destination | What the tunnel provides | Valid baseline |
|---|---|---|
| Public backup service | One hop among several | The same job over another route |
| Private NAS | The only path to the server | None that removes the tunnel |
| Self-hosted gateway | Path plus split-DNS policy | Only if the policy is unchanged |
Ukuma kuwukwehluleka okuhlukile ekudluliseni okuhamba kancane
Ikholomu yesithathu yalelo thebula inquma ukuthi ukuhlolwa kokuqina kungenziwa noma cha, ngoba isisekelo esisusa umhubhe sinengqondo kuphela lapho kunomunye umzila. Ngesisekelo esisebenzisekayo, bheka ukuma kokwehluleka hhayi izinga elijwayelekile. Ukulayisha phezulu okuphansi kodwa okuzinzile kukhombisa amandla, kuyilapho umsebenzi oma bese uqala kabusha ukhombisa ukuphazamiseka, ukuqinisekisa noma ifayela elilodwa elinzima. Lokhu kukabili kukhiqiza izikhalazo ezicishe zifane kanye nokulungisa okuhluke ngokuphelele.
Ukuphinda uzame kuhlanekezela noma yikuphi ukulinganisa, ngoba amabhayithi asentanjeni angaba ngaphezu kwenani elashintsha ngempela. Funda ukuziphatha kokuqhubeka ngaphambi kokunqamula umsebenzi futhi ukuze ubone ukuthi kwenzekani, ngoba ukulayisha phezulu okuhlukanisiwe okuqhubekayo kululama ngokushibhile futhi ukuqala kabusha kwefayela lonke akwenzi. Umhubhe oxhuma futhi njalo ngemizuzu embalwa nawo ubonakala njengenkinga yomkhawulo womgudu lapho empeleni kuyinkinga yokuqina. I-MTU yomzila ikhulisa lokhu, ngoba umhubhe onciphisa umthwalo owusizo umisa izingxenye ezinkulu kuyilapho ezincane zidlula.
journalctl -u wg-quick@wg0 -n 50 --no-pager
ss -tin dst :443
ping -M do -s 1400 -c 3 backup.example.comUkulayisha phezulu okukodwa kungabulala ngendlala yonke eminye imifudlana
Ukulayisha phezulu okugcwalisa umgudu wokulayisha phezulu kwenza izingcingo nokuphequlula kungaphenduli, futhi ikhophi yokugcina ayivamisile ukuba yiyo kuphela eqhudelana ngayo. Iklayenti lesibili lokuvumelanisa lizakhela yona kanye uphawu olufanayo. Ngaphambi kokusola umhubhe, bheka okunye okulayishwa phezulu.
Sebenzisa uhlelo lwezikhathi noma umkhawulo womgudu ohlolwe yithuluzi esikhundleni sokulwela izinga eliphezulu lokudlulisa; ukushiya isikhala somsebenzi wokuxhumana ngokuvamile kunenani elingaphezu kwamaphesenti okugcina. Bese uhlola ukuthi umkhawulo uthinta ini ngempela, ngoba amanye amathuluzi akhawulela ifayela ngalinye, amanye ukugijima konke, futhi amanye awanaki neze izindleko zamafayela amancane. Umkhawulo ongahambisani nomthwalo awushintshi lutho. Ukuhubha okuhlukanisiwe nakho kufanele kusolwe lapha, ngoba ukukhipha isiqalisi emhubheni akukhiphi insizakalo yosizo eyenza ukulayisha phezulu. Isibonelo, i-Rclone ishicilela kokubili imikhawulo yokudlulisa nokuziphatha kokuphinda uzame ku-mibhalo yayo, okukwenza kube yireferensi ewusizo mayelana nokuthi umkhawulo kufanele ulawule ini.
Qeda ngokubuyisela, hhayi ngokuhlola ijubane
Ukulayisha phezulu okuqediwe akulona ikhophi yokugcina kuze kube khona okubuyiselwe kuyo. Qinisekisa ukuthi inguqulo elindelekile ikhona, bese ubuyisela ifayela elimelela ngendlela ebhalwe yithuluzi. Gcina ulwazi lokubuyisela kwenye indawo hhayi emshinini noma kuphrofayela ongase ulahlekelwe yiyo, futhi ungalahli neze ikhophi yokugcina esebenzayo ukuze nje ugcine ucwaningo luhlelekile.
restic snapshots --latest 3
restic restore latest --target /tmp/restore-check --include /etc/hostsPhinda kokubili ukudlulisa nokubuyisela ngemva koshintsho lwenethiwekhi, ukuze kuthi ukuthuthuka kukhonjiswe ukuthi kusiza ikhophi yokugcina hhayi nje ukuhambisa idatha ngokushesha. Ukugijima kwesibili yikho okuvala ithikithi. Ukudlulisa okusheshayo ngokubuyisela okungahloliwe kuyindlela ehamba kancane yokuhlala ngaphandle kokuvikelwa.