Ingabe izinga eliphansi lokudluliswa kwe-VPN inkinga ye-entropy? Ngokuvamile cha

Ukudluliswa okuncane ngomhubhe kanye nomshini omile ulindele izinombolo ezingahleliwe kuletha okuhlangenwe nakho okuhluke kakhulu, kodwa kusabhalwa ngaphansi kwesikhalo esisodwa. Okunye kubonakala njengokuma ngaphambi kokuthi noma yini isebenze. Okunye kubonakala njengoxhumano olusebenzayo noluhambisa idatha kancane inqobo nje uma ulibuka. Ukunquma ukuthi iyiphi onayo kuthatha imizuzu eyishumi futhi konga iviki lokucabanga.

Izimpawu ezimbili ezibukeka zifana

Isevisi elenga ngemva kokuqala okusha, ngaphambi kokwamukela ngisho uxhumano olulodwa, ilindele okuthile. Umhubhe osungulwa ngokushesha bese udlulisa ngesigaba esincane sejubane elilindelekile ukhawulwa ngenye into. Igama lokubethela livela kuzo zombili izindaba, yingakho zihlanganiswa. Zihlukanise ngaphambi kokuthinta ifayela lokumisa.

Beka izitembu zesikhathi ezizungeze ukuqala, ukuqinisekisa, ukuxoxisana kabusha kwezinkinobho kanye nokudluliswa uqobo. Ukubambezeleka isikhathi eside ngaphambi kokuthi umhubhe usebenze akulona izinga eliphansi elizinzile, futhi ukulinganisa kokubili ngenombolo eyodwa kubhubhisa ubufakazi.

systemd-analyze blame | head -10
journalctl -u [email protected] -o short-precise | head -40
cat /proc/sys/kernel/random/entropy_avail

Imiyalo emibili yokuqala ibeka umsebenzi wokuqala kulayini wesikhathi. Eyesithathu iphrinta inani lokubalwa kwe-entropy ye-kernel, eliwusizo njengephuzu elilodwa ledatha futhi elingenamsebenzi njengesilinganisi se-bandwidth.

Ukulindela izinombolo ezingahleliwe kubukeka kanjani ngempela

Isicelo samabhayithi angahleliwe aphephile singavimba kuze kube yilapho i-kernel iqala umthombo wayo ongahleliwe. Lokhu kubaluleke kakhulu kumashini ongokoqobo namabhodi amancane ashumekiwe ekuqaleni kokuqala, lapho kugcinwe khona umsindo omncane wemvelo. Lokho akusho ukuthi yonke ibhayithi ebethelwe isebenzisa i-entropy entsha.

Izijenerethi zesimanje zihlwanyelwa imbewu kanye bese zikhiqiza umphumela kusukela ekwakhiweni okuqondile, ziphinde zihlwanyele imbewu ngokohlelo lwazo. Ukudluliswa okukhulu akukhiphi ichibi ibhayithi ngebhayithi, ngakho inani eliphansi lechibi ngesikhathi sokudluliswa okuhamba kancane alifakazi lutho mayelana nembangela.

strace -f -e trace=getrandom -p $(pidof openvpn) 2>&1 | head -20
dmesg | grep -i 'random\|crng'

Umyalo wokuqala ubonisa ukuthi inqubo ihlezi yini ekubizeni izinombolo ezingahleliwe ngenkathi ubuka. Owesibili ubonisa imilayezo yokuqala ye-kernel uqobo, futhi yilapho ukuma kokuqala kwasekuqaleni kubonakala khona.

Bhala inguqulo ye-kernel kanye nomtapo wolwazi isevisi exhumana nawo ngempela, ngoba ukuziphatha kuyahluka phakathi kokuqalwa naphakathi kokukhishwa. Ithrekhi ethathwe ngemva kokubuyiswa ngokuvamile iyephuza ukuma ngokuphelele.

Ukunensa okuqhubekayo kubukeka kanjani ngempela

Umhubhe odlulisa kancane sonke isikhathi ukhawulwa indlela yedatha. Intambo eyodwa egcwele, ukulahleka kwamaphakethe angaphandle, ukudluliswa kabusha noma imigqa yamasokhethi egcwele ngakunye kwakha lowo mkhuba, futhi ngakunye kunokulungiswa kwako. Iphesenti le-CPU elihlanganisiwe lifihla intambo eyodwa ematasatasa, futhi lokho kuwukufunda okungalungile okuvame kakhulu. Bheka isikhathi ngentambo ngayinye ngaphambi kokubheka umthwalo uwonke.

Linganisa kuzo zombili izinhlangothi ngesisekelo esifaniswayo, futhi ugade izibali zesixhumanisi esikhundleni sombiko wohlelo lokusebenza uqobo.

ss -tin dst 203.0.113.10
nstat -az | grep -i 'drop\|retrans'
ethtool -S eth0 | grep -i 'drop\|error'

Umyalo wokuqala ubonisa isimo somugqa nokuminyana kumlingani oyedwa. Owesibili nowesithathu babika ukulahleka nokudluliswa kabusha kusitaki nasesixhumanisini, lapho imbangela ivame ukuvela khona kuqala.

Khetha ukulungiswa kombhodovu owulinganisile

Uma ubufakazi bukhomba ekuqalweni kwasekuqaleni, bheka indlela yembewu esekelwa yipulatifomu, okungenzeka ihlanganise idivayisi engahleliwe enikezwe umphathi kumashini ongokoqobo. Isithombe sembewu esikhutshelwe singashintshile kumavakashi amaningi asithathi indawo yokuqala okuzimele.

Uma ubufakazi bukhomba endleleni yedatha, lungisa lokho izibali ezikukhomba. Izilinganiso zamabhafa ziyasiza lapho imigqa igcwele futhi azenzi lutho lapho intambo eyodwa igcwele. Ukufaka i-daemon ye-entropy ukuze kunyuswe isibali akulona ukulungiswa kokudluliswa, futhi ukushintsha imicabango yembewu ukuze igrafu ibukeke kangcono kushintshanisa impawu yokuphepha ngenombolo.

Yamukela ushintsho kuphela lapho isilinganiso esifanayo siba ngcono ngaphansi kwezimo ezifanayo. Isibali esikhulu akusona umphumela; ukulinda okulinganisiwe okufushane noma ukudluliswa okusheshayo okunembangela ekhonjiwe kungumphumela.