Iphuli lokumba nge-VPN: gcina iseshini endleleni efanele
Umtshini wephuli uvula iseshini eyodwa ye-Stratum ephumayo, hhayi imbobo ye-peer. Beka ithuneli ngaphansi kwaleyo nqubo futhi ufunde umzila nesixazululi endaweni yayo yamagama.
Isoftware yokumba igcina isokhethi eyodwa ivuliwe iya ekhelini elilodwa, futhi yonke imibuzo mayelana nethuneli, umzila kanye nomsebenzi okhredithiwe incike kuleyo sokhethi. Leyo sokhethi iyiseshini yeklayenti ephumayo eya endaweni yokugcina yephuli, hhayi isilaleli esamukela ama-peer. Ukuhamba ngezansi kuyilandela kusukela kumanani amane akhishwe yiphuli kuze kufike isabelo iphuli elisibhalile ngempela, futhi kuyeka ezinye izinsizakalo zomsingathi. Isinyathelo ngasinye sikhiqiza impendulo ongayiqhathanisa, hhayi umbono.
Qala endaweni yokugcina eyakhishwa yiphuli ngempela
Iphuli likunikeza amanani amane akha isivumelwano sonke: igama lomsingathi noma ikheli, imbobo, uhlobo lwephrothokholi kanye nentambo ye-akhawunti. Zithathe kudashibhodi yephuli noma kumlayezo wokwamukela, hhayi kusifundo sephuli elinye. Kukhona ama-shard esifunda awolelo sevisi efanayo, ngakho igama lomsingathi elikopishwe kumhlahlandlela omdala lisengaxhuma futhi lisengakhreditha i-akhawunti obungalokothi uhlose ukuyisebenzisa. Kopisha amanani amane njengoba enjalo kusimo sokusetha somtshini, ngoba intambo ye-akhawunti ebhalwe kabusha ilahlekelwa isihlukanisi.
Ukugeleza okukuhambisa yilokho umhlahlandlela wonjiniyela we-Bitcoin okubiza iseshini ye-Stratum: ukuxhumana kwe-TCP okuhlala njalo kwezinhlangothi ezimbili lapho iphuli lisabalalisa umsebenzi futhi umtshini ubuyisela izingxenye. Lokhu akukona ukugeleza okufanayo nokuxhumana kwama-peer kwenodi ephelele noma ukuvumelanisa kochungechunge lwesikhwama, futhi ukuzigoqa ndawonye esigabeni esisodwa sethrafikhi yilapho ukuqonda okukhulu kuqala khona. Eyokuqala kuphela ingaphansi kwale nqubomgomo.
Lapho iphuli linikeza i-TLS, gcina ukuqinisekiswa kweseva okufunwa yimibhalo yalo. Ithuneli libethela i-hop esuka emshinini wakho iya kuseva ye-VPN futhi liphele lapho; alinikezi isiqinisekiso kulowo ophendula ngale kwesinye. Gcina zombili izihlolo, esisodwa ekugcineni ngakunye, uma ufuna iseshini isinde ekuphumeni okuyengisiwe.
Namathisela ithuneli enqubweni, hhayi emndenini
Izindawo ezimbili zokunamathisela ziyasebenza: sebenzisa iklayenti le-VPN ngaphakathi kwendawo yamagama yenethiwekhi esetshenziswa umtshini, noma nikeza leyo ndawo yamagama isango elihambisa ithrafikhi yayo ethunelini. Zombili izinhlelo zibeka iseshini endleleni ngaphambi kokuba iphuli liyibone. Ukwehluleka okuvamile yiklayenti kumsingathi, umtshini kukhonteyina enebhuloho layo kanye nomzila womsingathi okhonteyina engakaze iwubuze. Iwindi leklayenti libonakala liphilile ngenkathi iphuli lirekhoda ikheli lakho lasekhaya.
Hlola ukuthuthwa kwethuneli ngokwalo ngaphambi kokulinganisa noma yini. Iklayenti kufanele lifinyelele iseva yalo ngokusebenzisa ungqimba olungaphansi, ngakho inqubomgomo ebamba yonke iphakethe ibamba futhi amaphakethe abezokwakha ithuneli. Khona-ke ithuneli alikwazi ukuqala futhi akukho okunye okuphumayo futhi. Khetha ngesici sethuneli elihlukanisiwe leklayenti ukuthi yini engena ethunelini; ukuhlela imizila ezenzakalelayo ngesandla yiyo indlela ungqimba olungaphansi onyamalala ngayo.
Njengoba inqubomgomo isendaweni yayo, funda ithebula lesokhethi endaweni yamagama ephethwe umtshini. Ukugeleza okuya embotsheni yephuli kufanele kube kusixhumanisi sethuneli, futhi imiyalo emibili iyaphendula lowo mbuzo. Imbobo engezansi iyisibonelo; shintsha enye eyakhishwa yiphuli.
sudo nsenter -t "$(pidof cgminer)" -n ss -tnp state established 'dport = :3333'
sudo nsenter -t "$(pidof cgminer)" -n ip route get 203.0.113.10Funda umzila nesixazululi kusukela kumongo womtshini uqobo
Ukuhola nokuxazululwa kwamagama kuncike endaweni yamagama, ngakho ukuhlola okugijinywa kushelo evamile kuchaza umshini ongafanele noma nini lapho umtshini usekhonteyina. Ngena endaweni yamagama kuqala bese ubuza ukuthi yisiphi isixhumanisi ebesizothwala iphakethe liya ekhelini lephuli nokuthi yisiphi isixazululi ebesizophendula ngegama lalo lomsingathi. Izimpendulo zomsingathi azidluliswa, futhi igebe phakathi kwazo liwumthombo ovamile wecala elibekwe endaweni engafanele.
Shono isixhumanisi ositholayo: ithuneli lisho ukuthi iseshini isendleleni ehlosiwe, kanti isixhumanisi somzimba sisho ukuthi umthetho uhambisana ngaphambi kwalokho obukulindele. Ubude besiqalo bunquma kuqala, bese kuba i-metric, bese kuba imithetho yenqubomgomo, ngakho ithebula elinokufakwa okuningi okuzenzakalelayo aliphindaphindi amaphakethe, lihlulwa nje.
Izixazululi zehluleka ngokwehlukana nemizila. Ithuneli elibhala kabusha i-/etc/resolv.conf lingashiya indawo yamagama ikhomba isixazululi esifinyeleleka kuphela ngaphakathi kwethuneli, lokho okwehluleka ngaphambi kokuba kwenzeke noma yikuphi ukuxhawana kwe-TCP. Xazulula igama lomsingathi lephuli ngaphakathi kwendawo yamagama bese uliqhathanisa nekheli elishicilelwe. Uma ukusesha kuphelelwa yisikhathi noma kubuyisa okunye, lungisa ukuxazululwa ngaphambi kokuthinta imizila.
Hlukanisa iklayenti lephuli nesilaleli senodi
Imbobo 8333 iyimbobo ye-peer ye-Bitcoin Core, lapho inodi ephelele ilalela khona ukuxhumana okungena; umtshini wephuli awukadingi neze ivuliwe, futhi ukuyivula akulungisi ukwehluleka okuphumayo. Izilaleli ezingenayo namaseshini aphumayo ayizindima eziphikisanayo ezinokucatshangelwa kokuthenjwa okuphikisanayo. Akukho lutho ekusetheni komtshini okubopha leyo mbobo, ngakho imbobo evaliwe ayikwazi ukuchaza noma yiliphi iphutha elikubikayo. Iseluleko esibhalelwe ukufinyeleleka kwenodi ngakho singashiya insizakalo yomphakathi isebenza kumsingathi obekufanele ukuvele uthumele izingxenye.
Uma umshini owodwa wenza kokubili ngempela, phatha indima ngayinye njengensizakalo yayo enesinqumo sayo sokufinyelela. Isilaleli senodi singesangemuva kwenqubomgomo oyisebenzisa ezinsizakalweni zomphakathi, futhi iseshini yomtshini ingeyesinqubomgomo ephumayo ekhetha ithuneli. Bhala ukuthi iyiphi indima edlalwa umsingathi futhi ususe imithetho yenye indima uma lokho kushintsha, ngoba umthetho wokuvumela osele uhlala isikhathi eside kunenganqamuli yawo.
Fakazela ukuthi iphuli lamukele umsebenzi
Ifeni ematasa kanye ne-hashrate ekhuphukayo kukhombisa ukuthi umtshini uyabala, hhayi ukuthi kukhona okufike ephulini. Ubufakazi busezibalweni zokuthumela zeklayenti noma kudashibhodi yephuli: izingxenye ezamukelwe, izingxenye ezenqatshiwe kanye nesizathu esinanyathiselwe ekunqatshweni ngakunye. Lezo zinombolo zihlukanisa amaphutha amathathu abonakala efana ngaphandle: asikho iseshini, iseshini engenawo umkhredithi kanye neshini eqhubeka ixhuma kabusha. Zifunde ngaphambi kokushintsha noma yikuphi ukusetha.
Buka umzamo owodwa wokuxhumana ngelogi enemininingwane bese uphawula isigaba sokugcina esiphumelele. Isigaba lapho ukulandelana kuma khona siwusizo kakhulu kunanoma yimuphi umlayezo owodwa ozungezile:
| Last stage reached | What it rules out | Probe to run next |
|---|---|---|
| Name lookup completed | Resolver and namespace reachability | ip route get for the returned address |
| TCP connect completed | Route and egress filtering | ss -tnp on the tunnel interface |
| Subscription returned a job | Endpoint or protocol mismatch | Accepted against rejected counts |
Bese uvumela iklayenti ligijinye iwindi elithile bese ubala zombili iziphumo kusukela kulogi yalo. I-grep eyodwa ngesibali ngasinye yanele, futhi ukuziqhathanisa kulelo winti lilo kuhlukanisa iphuli elinensayo nomzila ophukile. Lungisa umzila ukuya lapho iklayenti lakho libhala khona, ngoba izibalo ezimbili azincikile endaweni:
grep -c Accepted /var/log/miner.log
grep -c Rejected /var/log/miner.logUma umthetho uvimbela ukuxhumana okuqondile nephuli noma nini lapho ithuneli liwa, uveze njengokuvinjelwa okucacile endaweni yokugcina yephuli. Iklayenti elizama futhi ngokuthula ngosizo lwesixhumanisi somzimba lizoqhubeka limba futhi liqhubeke lephula lowo mthetho, futhi isibonisi salo sesimo ngeke sisho lokho. Hlola umthetho ngokuwisa ithuneli ngamabomu nokuqinisekisa ukuthi imbobo yephuli ayifinyeleleki nhlobo.