Qapha abalingani be-VPN ngaphandle kokurekhoda lapho bephequlula

Ukuqapha umlingani we-VPN kudinga amaqiniso amane, futhi alikho nelilodwa lawo eliyindawo. Ukuthi umhubhe uyasebenza yini, wagcina nini ukushintshana ngethrafikhi, yimaphi amakhiya ahilelekile nokuthi kungakanani okuhambile kwanele ukutholakala. Noma yini engaphezu kwalokho iyirekhodi ngomuntu, futhi kufanele kube yisinqumo esenziwe ngamabomu hhayi umphumela oseceleni wokuvula ikhasi lesimo. Qala ngombuzo okufanele uwuphendule, bese ukhetha umphumela omncane kunawo wonke oyiphendulayo.

Nquma umbuzo ngaphambi kwethuluzi

Qala ngokubhala umbuzo wokusebenza: ingabe lo mlingani uxhumekile, futhi ingabe uhambisa ithrafikhi? Lowo mbuzo udinga umbono obukhoma, futhi umbono obukhoma awunankinga yokugcina. Umbuzo wesibili, ukuthi umlingani wayexhumekile ngo-02:00 ngoLwesibili olwedlule, udinga uchungechunge olugciniwe futhi ngalokho isinqumo sokugcina. Ukuhlukanisa lezi zimbili wukho konke ukuklama, ngoba umbono obukhoma ushibhile kuyilapho uchungechunge olugciniwe luphenduka ingxoxo mayelana nokuvikelwa kwedatha.

Gcina ukuhlolwa kwezempilo kuhlukile kumphumela wesimo. I-handshake yakamuva ikhombisa ukuthi umhubhe uxoxisene, hhayi ukuthi uhlelo lokusebenza langasese ngemuva kwawo luyasebenza, ngakho hlola uhlelo lokusebenza ngokuhlolwa okugunyaziwe esikhundleni sokukucabanga kusukela kumakhawunta. Lapho ukuhlolwa kwehluleka futhi i-handshake isanda kwenzeka, inkinga ingale kwoMhubhe.

Funda izinkambu ezintathu eziyiphendulayo

Umphumela wesimo ojwayelekile we-WireGuard uthwala i-interface, ukhiye womphakathi, iphoyinti lokugcina, i-handshake yakamuva namakhawunta okudlulisela. Ukuba khona kudinga ukhiye womphakathi ne-handshake yakamuva; uma kudingeka, engeza amakhawunta amabhayithi ukuze ubone ukunyakaza. Iphoyinti lokugcina alidingeki ekubeni khona futhi iyinkambu yokuqala okufanele isuswe, ngoba ikhomba lapho idivayisi ixhumana khona. Ikhasi lemanyuwali lichaza yonke inkambu ephrintwa ithuluzi, futhi lifushane ngokwanele ukuba lifundwe kanye:

wg show
wg show wg0 latest-handshakes

Funda lezo zinombolo njengeminyaka hhayi njengama-boolean. I-handshake isebenza kuphela uma iqhathaniswa nesikhathi sokuvuselela ukhiye somthetho ngokwawo, futhi ikhawunta enganyakazanga ingase isho umlingani ongenzi lutho esikhundleni sokuthi ugobile. Gcina kokubili embonweni ofanayo ukuze iminyaka nokunyakaza kufundwe ndawonye.

Khetha isikhathi ongayivikela

Isampula ngayinye yesimo iyirekhodi, ngakho isikhathi yisinqumo sokugcina esigqoke ilebula lokuqapha. Isampula yemizuzwana eyishumi inikeza imininingwane emihle futhi iphindaphinda imigqa egciniwe, kuyilapho isampula yomzuzu ngamunye ngokuvamile yanele ekutholakaleni ngesithupha sezindleko. Khetha isikhathi kusukela esikhathini sokuphendula osithembisile hhayi kulokho ithuluzi elingakwenza. Bese ubhala inombolo eceleni kwedashibhodi.

Ku-OpenVPN, insiza yesimo ibhala ifayela ngesikhathi esilungisiwe. Kukho ukulungiselelwa kweseva lokhu kubukeka kanje status /var/log/openvpn-status.log 60, lapho inombolo yokugcina iyimizuzwana phakathi kokubhala kabusha, futhi ifayela liyashintshwa hhayi ukwengezwa. Leyo mininingwane ibalulekile: ifayela elishintshiwe alinawo umlando, kuyilapho umqoqi owengezayo edala umlando.

Qinisekisa ukuthi umqoqi nawo uhlonipha isikhathi. Ithuluzi elithatha isampula njalo ngomzuzwana futhi ligcina umugqa owodwa ngomzuzu lisafunda njalo ngomzuzwana.

Gcina amalebula ezinzile nomhlahlandlela ulinganiselwe

Ukhiye womphakathi ukhomba ubuhlobo bedivayisi ngisho noma kungekho gama elixhunyiwe, ngakho phatha ukhiye njengedatha yomuntu siqu hhayi njengesihlonzi esingacacile. Faka amalebula kubalingani ngezihlonzi zangaphakathi ezizinzile ezimelana nokuxhumana kabusha, futhi gcina umhlahlandlela osuka kwisihlonzi uya kumuntu endaweni elinganiselwe. Idashibhodi elibhala uchungechunge lwesikhathi liyirekhodi egciniwe ngisho noma i-VPN ingagcini ifayela layo. Lapho idashibhodi iyisitoreji kuphela, umthetho wokugcina usebenza lapho.

Buyekeza indlela yokuthumela ngaphandle, ngoba i-CSV ekhoshiwe iphila isikhathi eside kunesistimu eyikhiqizile. Ukutholakala okuhlanganisiwe ngokuvamile kwanele umbiko: ingxenye yabalingani abane-handshake ngaphakathi kwewindi iphendula umbuzo wokusebenza ngaphandle kokubala ukuthi ubani owayexhumekile nini.

Bhala phansi ukuthi uqoqa ini nokuthi cha

Bhala incazelo yokuqoqa ngolimi olulula: iziphi izinkambu, kusuka ku-interface iphi, ngesikhathi esingakanani, kugcinwa kuphi, kugcinwa isikhathi esingakanani futhi ubani angayifunda. Yibeke eceleni kwe-runbook hhayi esitoreji semininingwane yomgomo okungekho muntu oyivulayo ngesikhathi sezehlakalo. Incazelo kufanele futhi isho lokho ukuqapha okungeke kukubone, ngoba yikho okugcina umuntu ekucabangeni ukuthi ukungabikho kwedatha yokuphequlula kusho ukungabikho kwamarekhodi.

Buyekeza iwindi lokugcina njalo lapho ukuqapha kushintsha, ngoba inkambu entsha yandisa buthule lokho okugciniwe. Bese ususa lokho incazelo ethi uyakususa, futhi uqinisekise ukuthi ukususa kwenzeka ngempela.