I-VPN IP ekhethekile ayishicileli iwebhusayithi yakho
Ikheli lokuphuma elikhethekile alisho lutho ngokulethwa okungena. Hlola isivumelwano sokudlulisa, qedela uhlangothi lomthombo, bese ushicilela imbobo ephezulu.
Ukuthenga i-IP ekhethekile kumhlinzeki we-VPN kuzwakala njengokuthenga umnyango wangaphambili. Ikheli lizinze, umhubhe uyasebenza, futhi iwebhusayithi ayilayishi muntu ngaphandle. Lokho okuthengile ukwabiwa, hhayi umthetho wokudlulisa okungena. Kokubili kudayiswa esitolo esisodwa futhi kuhlelwa ezindaweni ezihluke ngokuphelele.
Ikheli ukwabiwa, hhayi umthetho wokudlulisa
Bhala ikheli lomphakathi elingena noma igama lomsingathi, ukuthutha okuvunyelwe, imbobo yangaphandle eyabiwe kanye nendawo yokugcina ohlangothini lwek layenti umhlinzeki akuletha kuyo. Bese uqinisekisa ukuthi iseva, iphrothokholi kanye nesici se-akhawunti okukhethile kusekela ngempela ukudlulisa nokuthi umhlinzeki uvumela ukusingathwa kuyo.
Igama elithi elikhethekile lichaza ukwabiwa kwekheli. Akusho ukuthi ukuhamba okungena okungaceliwe kuvunyelwe, futhi izengezo ezihlukene zomsebenzisi oyedwa zingaba namakhono ahlukene. Ikheli elikhethekile kanye nomkhiqizo weseva ekhethekile yizinto ezimbili ezididaniswa kakhulu, futhi amakhasi osizo ngokuvamile achaza ukuthi iyiphi edlulisayo.
| What you have | What it gives you | What it does not |
|---|---|---|
| Dedicated exit address | A stable source address for outbound traffic | Any inbound delivery at all |
| Port-forwarding add-on | A provider-side mapping to your session | Permanence across reconnects |
| Local DNAT rule | Handling for packets that arrive | Making packets arrive |
Isivumelwano esiyisibonelo sibukeka kanje: umhlinzeki uletha i-TCP 203.0.113.60:45000 kuphakathi kusiza i-HTTPS yedivayisi yakho exhunyiwe embotsheni engu-8443. Lokho kuyincazelo yokuxhumanisa okuhlelwe omunye umuntu, hhayi umthetho ongawudala emaphethelweni abo ngokuwubhala ku-firewall yakho.
Qedela uhlangothi lomthombo
Uma uhlelo lokusebenza lwewebhu lusebenza kuklayenti ye-VPN uqobo, ludinga isilaleli embotsheni elethiwe kanye nemvume yokufaka yendawo enomkhawulo yalowo mbolo. Uma iklayenti lidlulisela uxhumano oluxhunyiwe kwenye isingathi, ludinga ukuhumusha kwendawo, inqubomgomo yokudlulisa kanye nendlela yokuphendula ekwazi ukubekezelela ukuya nokubuya.
Dizayina imithetho yokufinyelela ezungeze ikheli lomthombo umzila womhlinzeki okuveza ngempela. Akusilo njalo isivakashi sokuqala, futhi akusilo njalo iseva ye-VPN, okubalulekile uma ubhala umthetho owawuzofanela eyodwa yalezo zindawo.
Ukuhumusha kwembobo nakho akuguquli i-HTTP ibe yi-HTTPS. Imbobo yomphakathi nembobo yohlelo lwendawo zingahluka ngokukhululekile, kodwa isikimu, ubunikazi besitifiketi kanye nokudluliselwa kufanele kuhambisane nesevisi abantu abayifikayo ngempela. Uma isitifiketi sisho isingathi somphakathi, gcina lelo gama kuwo wonke amanyathelo. Ukungafani lapha kuvela njengesixwayiso sesiphequluli hhayi ukwehluleka komzila, okuthumela abantu emarekhodini angafanele ihora lonke.
Shicilela imbobo ephezulu ngokwethembeka
Uma izivakashi zixhuma ngqo futhi umhlinzeki wabele imbobo ephezulu, zinike i-URL egcwele. Irekhodi lekheli le-DNS elijwayelekile alikwazi ukwengeza imbobo esicelweni se-HTTPS esisebenzisa u-443 ngokuzenzakalela, futhi akukho ukulungiswa kwe-TTL okushintsha lokho.
Ingaphambili lewebhu lingakuxazulula lokhu ngokwamukela izivakashi embotsheni ejwayelekile nokwenza uxhumano lwalo oluya embotsheni yomthombo edlulisiwe. Nokho amachweba e-proxy azenzakalelayo e-Cloudflare awuhlu oluchaziwe, futhi imbobo eyabiwe ngokungafanele ayibi imvume yombobo womphetho osekelwayo ngenxa nje yokuthi wengeze irekhodi le-DNS elenziwe nge-proxy.
Ukushintsha imbobo yendawo yomthombo kuwumsebenzi ohlukile kunokushintsha imbobo yesivakashi. Origin Rules ze-Cloudflare zibhala ukushintshwa kwembobo yendawo yoxhumano lwangemuva, okukhawulelwe kumthetho, isikimu negama lomsingathi asekelwayo. Ukushintshwa kwembobo akusilo irele elijwayelekile le-UDP engafanele noma ezinye izimiso.
Uma ingaphambili liqeda i-TLS, qinisekisa zombili izinyathelo: isitifiketi esisuka kusiphequluli siya kwengaphambili kanye noxhumano olusuka kwengaphambili luye emthonjeni. Isinyathelo se-VPN asithathi indawo yokukodwa kwalokhu kuhlola okubili, futhi ikheli langaphakathi eliconsayo kukudluliselwa noma kumakhukhi kuwuphawu olujwayelekile lokuthi kunye kuphela kokubili okuhlelwe kucatshangelwa igama lomphakathi.
Gcina ukuxhumanisa kuphila
Abanye abahlinzeki babela imbobo ehlukile ngemva kokuxhuma kabusha, futhi ukuxhumanisa okuqashiwe kungadinga ukuvuselelwa ngomsebenzi ohlangothini lomhlinzeki. Landela indlela umhlinzeki wakho ayibhalile, futhi ubuyekeze isilaleli, imithetho yendawo, i-DNS noma umthetho wengaphambili kuphela lapho isivumelwano samanje sikhona sidinga khona.
Ikheli lomphakathi elizinzile alenzi ukuqashwa kwembobo kube kuzinzile. Ikheli nembobo okusaboniswa kudashibhodi akusona ubufakazi bokuthi isikhathi esisebenzayo sinakho ukuxhumanisa, yingakho ukuhlolwa kuyisicelo esisha esivela ngaphandle hhayi isithombe sesikrini.
Bese uphinda izimo ozilindele: ukuxhuma kabusha okuvamile, nokulahlekelwa i-VPN. Uma ukulahlekelwa kufanele kwenza umthombo ungafinyeleleki, ungavumeli isibuyekezi sishicilele futhi ngokuthula umzila we-ISP oqondile ngemuva. Futhi uma isivumelwano sokudlulisa singakwazi ukuhlangabezana nezidingo zokuqina zewebhusayithi, khetha elinye ilungiselelo lokushicilela esikhundleni sokuthenga elinye ilebula lekheli bese uthemba ukuthi lizokwenza njengeseva.