Ngaphambi kokushintsha i-IPsec nge-Shadowsocks, bhala imisebenzi elahlekayo
Qhathanisa ukudluliswa, ukufinyeleleka kwangasese, ukugunyazwa kanye nokusebenza ngaphambi kokuthatha i-Shadowsocks njengokungena esikhundleni se-IPsec eqenjini elincane.
Amasevisi amathathu, umhubhe owodwa: uhlelo lwewebhu, isizindalwazi kanye nokwabelwana ngefaYela. Othile uphakamisa ukuthi i-IPsec ishintshwe nge-Shadowsocks ngoba kulula ukuyiqhuba. Ingxoxo yokubethela elandelayo yeqa iphuzu, ngoba umhubhe wenza imisebenzi eminingi ngesikhathi esisodwa futhi munye kuphela kuyo okumayelana namakhodi. Bhala leyo misebenzi phansi ngaphambi kokuqhathanisa imikhiqizo. Uhlu lufushane, futhi noma yisiphi isici singawuqeda umsebenzi wokushintsha.
Qala ngendlela ithrafikhi ebanjwa ngayo
Iphrothokholi inezingxenye ezimbili. Ingxenye yasendaweni yamukela ukuxhumana, ibethela ukuhamba okuqala ngekheli lendawo ekuyiwa kuyo, bese ikuthumela engxenyeni ekude. Ingxenye ekude ivula ukuxhumana naleyo ndawo futhi idlulise amabhayithi. I-UDP ilandela isimo esifanayo ngamadathagramu. Lokhu kuwukudluliswa kwemifudlana eyiyibambayo, futhi akusho lutho ngemifudlana engayibambanga. Uhlelo olukhuluma ngqo ne-proxy lulula; konke okunye kudinga i-adaptha noma imithetho yomzila ukuze kubanjwe.
Bhala indlela yokubamba yohlelo ngalunye ngaphambi kokuqhathanisa noma yini enye. Ithrafikhi engabanjwanga iphuma ngomzila ojwayelekile, futhi akekho oqaphelayo kuze kube yilapho isevisi ethile iziphatha ngendlela ehlukile ngaphandle kwehhovisi.
Qamba yonke indawo ekuyiwa kuyo nayo yonke iphrothokholi
Ingxenye ekude kufanele ifinyelele isevisi ngayinye yangaphakathi. Isikhathi sokuxhumana esibethelwe esisebenza kuleyo hosti asingezi umzila osuka kuyo uya esizindalwazini, futhi asenzi amagama angaphakathi axazululwe kuklayenti. Bhala amakheli, amachweba namaphrothokholi esikhundleni sokubhala ukuthi i-LAN ifakiwe.
Engeza izimo eziphula imiklamo ehlanzekile: i-DNS yangaphakathi, izinhlelo ezingazinaki izilungiselelo ze-proxy, kanye nanoma yikuphi ukuhamba okufanele kuqalwe kusuka kuseva kuye kuklayenti. Ngakunye kudinga isivumelwano esicacile, hhayi umcabango.
Ukubethela akusona isigunyazo
Izindlela ze-AEAD ezibhaliwe ku-Shadowsocks zinikeza ukubethela okuqinisekisiwe, ngakho ukwala wonke umndeni njengongaphephile kuyiphutha. Ukushiya lelo qiniso liphendula umbuzo wokufinyelela nakho kuyiphutha elifanayo. Othile kufanele anqume ukuthi ubani ufinyelela isevisi iphi, ukufinyelela kukhishwa kanjani lapho umuntu ehamba, izimfihlo zigcinwa kuphi nokuthi iyiphi ingxenye eqinisekisa umngcele. Isimfihlo esisodwa esabiwe sinikeza wonke umphathi ububanzi obufanayo, futhi ukuhamba komuntu oyedwa kuba ukushintshwa kwabo bonke.
Linganisa isilungiselelo samanje se-IPsec ngendlela efanayo. Ilebula yaso ayifakazisi ukuthi imithetho yaso ilungile, futhi ukuqhathanisa uhlobo olucwengisisiwe lomklamo owodwa nohlobo olungacacile kolunye akunqumi lutho.
Bhala izilawuli ezikhona namuhla ezinhlangothini zombili, bese uhlulela ukuthi yiziphi izikhala ongaphila nazo.
Bala umsebenzi wokusebenza
Ukushintsha ngakunye kudinga umnikazi wamaphakethe eklayenti, izibuyekezo zeseva, ukushintshwa kobufakazi kanye nokusingathwa kokwehluleka. Qaphela ukuthi uhlelo ngalunye lwenzani lapho umhubhe ungatholakali: luyahluleka, luzama futhi ngomzila wasendaweni, noma lulinda. Lokho kuziphatha kuvela ekusetshenzisweni, hhayi egameni lephrothokholi.
Kuhlelo olulodwa lwewebhu, i-proxy emincane ingase yanele. Ukufinyelela kuyo yonke inethiwekhi ngezimvume zomuntu ngamunye, izingxenye ezengeziwe zivame ukubiza kakhulu kunomhubhe eziwushintshile.
Isinqumo akusona ukuthi yimuphi umkhiqizo ozwakala uphephile kakhulu. Yilowo mklamo oqeda imisebenzi ebhaliwe ngezilawuli iqembu elizozigcina ngempela.