Ukulawula i-ESP8266 ngaphandle kokudluliswa kwembobo: indlela ye-MQTT ephumayo

Idivayisi ingemva kwerutha yasekhaya ngaphandle kokudluliswa kwembobo nangaphandle kwekheli lomphakathi, futhi kusafanele ithole ukulungiselelwa phakathi namasekhondi. Icebo akulona imbobo ku-firewall. Uxhumano idivayisi eluvula ngaphandle luya ku-broker engakwazi ukufinyelela kuyo, bese kuthi i-broker ibuyisele imilayezo ngayo leyo ndlela esivele isungulwe. Zonke izici abantu abazithandayo kulo mklamo, kanye nazo zonke izingibe kuwo, zivela kulokho kuguqulwa.

Yini ngempela edlula ku-NAT

Lapho idivayisi ivula uxhumano lwe-TCP ku-broker, irutha yasekhaya yenza imephu futhi iyigcine iphila isikhathi sonke sokugeleza. Izimpendulo kulokho kugeleza zibuyela kudivayisi ngoba imephu isivele ikhona. I-broker ayiqali lutho ngasendlini, ngakho akukho phakethe elingenayo elingacelwanga okufanele irutha ililahle. Yiyo yonke impikiswano yenethiwekhi, futhi yingakho le ndlela isebenza kunethiwekhi ongazilawuliyo.

Idivayisi kufanele igcine uxhumano luphila noma ilusungule kabusha, futhi lokho kuba umbuzo wokuthembeka lapho isakhiwo sesinqunyiwe.

I-broker ihambisa izihloko, ayenzi i-proxy ye-HTTP

I-MQTT ichaza ukushintshana kokushicilela nokubhalisa: idivayisi ibhalisela isihlungi sezihloko esivunyelwe ukuyifunda, futhi isilawuli esigunyaziwe sishicilela esihlokweni esifanele. I-broker ihlanganisa okushicilelwe nokubhalisiwe futhi ilethe amakhophi. Ayazi ukuthi isicelo sesiphequluli siyini, futhi ngeke idlulisele i-HTTP GET kuseva yewebhu yedivayisi. Uma i-firmware ekhona ikhuluma i-HTTP kuphela, umklamo we-broker udinga ushintsho lohlelo noma ingxenye yokuhumusha eyenziwe ngamabomu.

Amagama ezihloko nawo awagunyazi. Ama-broker amaningi asekela izinhlu zokulawula ukufinyelela kuklayenti ngayinye, futhi amadivayisi kufanele akhawulelwe ezihlahleni zawo zokushicilela nokubhalisa esikhundleni sokwabelana indawo eyodwa yamagama yomhlaba.

Izinsiza zedivayisi zinquma ukuma kwe-TLS

I-ESP8266 inomsakazo we-RAM olinganiselwe, futhi ukuxhawulana kwe-TLS kuyinto ebiza kakhulu eyenzayo. Umnyombo we-Arduino uhlinzeka nge-BearSSL ngenxa yalokhu kulinganiselwa, futhi ukukhetha phakathi kokuqinisekisa i-CA nokugxilisa umkhondo womunwe kushintsha kokubili umkhondo wenkumbulo kanye nalokho umhlaseli onocwecwe olusemthethweni lwelinye igama angakwenza. Ukuqinisekisa i-CA ye-broker kuyindlela eqinile uma inqwaba ivuma. Usayizi womthwalo ubalulekile futhi: iklayenti le-MQTT ligcina ibhafa, futhi imilayezo emikhulu kunayo iyanqunywa buthule ngaphandle uma ibhafa likhushiswa ngamabomu.

I-keepalive nezikhathi zokuphela zesokhethi ziyingxenye yesabelomali esisodwa, ngoba iklayenti engakuboni neze uxhumano olufile iyeka ukuthola imiyalo ngaphandle kokubika iphutha.

Incazelo yomlayezo elumayo

Umlayezo ogciniwe ugcinwa yi-broker futhi ulethwa kubhalisi abafanele bakamuva, okuyinto enhle esimweni samanje futhi eyingozi emiyalweni yesikhathi esisodwa: idivayisi exhumanisa kabusha ingathola umyalo wayizolo sengathi masha. I-QoS 1 iqinisekisa ukulethwa okungenani kanye, ngakho ukuphindwa kuvamile futhi uhlelo kufanele luphephe ukuphindwa, ngokufanelekile ngomhlonzi noma isigxivizo sesikhathi elingakwazi ukulichitha. Incwadi yokugcina ikunikeza isignali yesimo lapho idivayisi iwa, kodwa kuphela uma uxhumano lwehluleka ngempela esikhundleni sokulengela.

Ukuziphatha kweseshini ehlanzekile kunquma ukuthi i-broker igcina ukubhalisa kwakho yini ngesikhathi ungekho, futhi ukwenza iphutha lapho yikho okubangela ukuthi amadivayisi athile alahlekelwe umlayezo wokuqala ngemva kokuxhumana kabusha ngakunye.

I-TLS ivikela ingxenye eya ku-broker. Akukona ukubethelwa komthwalo kusuka ekupheleni kuya ekupheleni ngokumelene nomqhubi we-broker, ongafunda konke okushicilelayo ngayo.

Linganiselani umjikelezo wokuphila futhi kuwuhlole ngemininingwane engenangozi

Hlelelani ukuxhumana kabusha ngokuhlehla esikhundleni somjikelezo wokuzama oqinile, bhalisani kabusha ngokusobala uma iseshini ingahlali, futhi bhukani umphumela woxhumano ukuze idivayisi ethule engekho ku-inthanethi ishiye ubufakazi. Hlolani indlela yokuxhumana kabusha ngemithwalo yesibonelo engenzi lutho, ngoba ukuhlolwa kokuqala kokukhiqiza kwesiteshi semiyalo akufanele kube umyalo wangempela. Bese niqinisekisa ukuthi umlayezo ogciniwe osuphelelwe yisikhathi wenzani ekuxhumaneni kabusha, futhi ninqume ukuthi lokho kuziphatha kwamukelekile yini esihlokweni ngasinye.

Ngokwenziwa ngalolu hlobo, umklamo ususa isidingo esisodwa senethiwekhi esingenayo futhi ushiya isofthiwe yedivayisi, inqubomgomo ye-broker nencazelo yomlayezo njengomsebenzi obonakalayo esikhundleni sezicabango ezifihliwe.