Ikhona lapho isilinganiso sedatha sanyanga ngayinye kufanele sibe khona nge-akhawunti ye-OpenVPN

Isilinganiso esisethwa kabusha njalo lapho umhubhe uxhunyanisa kabusha akusona umkhawulo, futhi yilokho kanye okutholakala lapho isibali samabhayithi sinanyathiselwa kuseva ye-VPN ngaphandle kwendawo yokugcina isimo esihlala njalo. Isibali singesesikhathi esisodwa; isilinganiso singesomuntu noma isivumelwano sedivayisi. Zonke izinkinga zalesi sici zivela kulokho kungafani, ngakho ukuhlolwa okungezansi kumayelana nokuthi isimo sihlala kuphi nokuthi yiluphi ungqimba oluvunyelwe ukuthatha isinqumo.

Bophela isilinganiso e-akhawuntini, hhayi emhubheni

Qala ngokuthi usho isihloko sesilinganiso. Umuntu oyedwa angaba nezitifiketi ezintathu zedivayisi, futhi asikho esisodwa sazo okufanele sithole isabelomali sanyanga ngayinye esizimele ngenxa nje yokuthi ziqinisekisa ngokwahlukana. Isihlonzi se-akhawunti esizinzile esimelana nokuxhunyaniswa kabusha, amakheli amasha omhubhe kanye nokuthuthela kugethiweyi yesibili yisona kuphela isisekelo isilinganiso esingasisebenzisa. Igama elijwayelekile lesitifiketi lisebenza njengalokho khiye kuphela lapho inqubomgomo yakho yokukhipha iqinisekisa i-akhawunti eyodwa ngegama ngalinye.

Ikheli lomhubhe elinikeziwe alilona impendulo. Amakheli ayasetshenziswa kabusha, amachibi ayabiwa, futhi i-akhawunti efanayo ingavela kabili kumagethiweyi amabili ngomzuzu ofanayo. Uma ileja isekelwe ekhelini, ukunqamuka nokuxhunyanisa kabusha kwanele ukuze ithangi ligcwaliswe futhi.

Qopha okwanele ngesikhathi ngasinye ukuze izibalo zihlolwe: i-akhawunti, isikhathi sokukhokha, isibonelo segethiweyi, isihlonzi sesikhathi, izibali zokugcina ezibonwe kanye nesamba esigunyaziwe. Faka isizukulwane sokuqala kwe-daemon kusihlonzi sesikhathi, ngoba iseva eqaliswa kabusha isebenzisa kabusha ama-ID wamaklayenti futhi ukufanisa okungalungile kungadla ifa lomugqa oyisisekelo wangaphambili.

Nquma iyunithi, isiqondiso kanye nomkhawulo wokusetha kabusha

Kunqunywe izincazelo ezine ngokubhaliwe ngaphambi kokuthi kuqale noma yikuphi ukuqoqwa. Ingabe isilinganiso sibala amabhayithi akhishwa yiklayenti, lawo ayamukelayo, noma isamba sakho kokubili? Ingabe i-gigabyte iwamabhayithi angu-10^9 noma angu-2^30? Isikhathi siphenduka ngaluphi usuku lwasekhaya futhi kusiphi isifunda sesikhathi? Futhi isibali silinganisa ini ngempela, njengoba izindleko ezengeziwe zomhubhe nokudluliswa kabusha zifakiwe kanti usayizi wefayela lohlelo kanye ne-invoyisi yomhlinzeki akufakiwe?

Azikho kulezi zinqumo eziyiphutha, kodwa ukusetshenziswa kanye nenombolo ebonwa yikhasimende kufanele kuvumelane. Izingxenye ezimbili zohlelo olulodwa ezingavumelani nge-GiB, noma ngokuphenduka okwenzeka phakathi kwamabili nge-UTC esikhundleni sesikhathi sasekhaya, zikhiqiza uhlobo olulodwa lwethikithi elinciphisa ukwethemba isilinganiso sonke.

Phendula isamba samabhayithi sibe umehluko owodwa okhokhisiwe

Isixhumanisi sokuphatha sibika imigqa ye-BYTECOUNT_CLI ngezikhathi ethwala i-ID yeklayenti kanye nesamba esiqongelelwe samabhayithi ohlangothini ngalunye, futhi umyalo we-bytecount unquma ukuthi leyo migqa ifika kangaki. Ngokombono weseva, inombolo eyamukelwe ibala amabhayithi akhishwe yiklayenti kanti inombolo ethunyelwe ibala amabhayithi alethwe kuye. Setha isikhala sibe yinto ileja engayigwinya; isikhala esifushane kakhulu sithenga ukunemba ongakutholi ngempela.

Umkhawulo owodwa wakha ukuklanywa konke: isokhethi yokuphatha yamukela uxhumano olulodwa lokulawula. Umkhiphi wokuqapha, i-GUI kanye nesilawuli sakho akukwazi ngamunye ukuvula esakhe. Nquma ukuthi iyiphi inqubo ephethe itshaneli bese uvumela ezinye ukuthi zifunde isimo kuyo, ngoba lesi sixhumanisi sinikeza izenzo zokuphatha futhi bekungafanele sidalulwe ngaphandle komsingathi.

rx_delta = sample.rx_now - session.prev_rx
tx_delta = sample.tx_now - session.prev_tx
charge  = rx_delta + tx_delta
# same transaction:
ledger.total += charge
session.prev_rx, session.prev_tx = sample.rx_now, sample.tx_now

Gunyaza imigqa emisha eyisisekelo kanye nokwanda kokusetshenziswa ndawonye, ukuze ukudlala kabusha isampula kungakhokhisi lutho esikhundleni sokukhokhisa kabili. Isibali esihamba emuva siyisiginali, hhayi isikweletu: sisho ukuthi isikhathi sathathelwa indawo noma i-daemon yaqalwa kabusha, futhi impendulo efanele ukuhlanganisa isihlonzi sesikhathi hhayi ukufaka inani elingesilo.

Indlela yokunqamuka idinga ukunakekela okufanayo. Uma umcimbi wokugcina uthwala isamba sokuphela kwesikhathi, khokhisa kuphela umehluko kusampula yokugcina egunyaziwe. Ukwengeza isamba esigcwele ngemuva kokuthi isampula yezikhathi isikhokhisiwe kakade ukubalwa kabili okuvame kakhulu ezinhlelweni zesilinganiso ezakhiwe ekhaya. Izikhathi eziwela umkhawulo wesikhathi nazo zidinga umthetho, ngoba isamba esisodwa sokugcina asithwali ulwazi lokuthi amabhayithi awela nini phakathi kwamabili.

Ukuqeda kufanele kunqabe ukungena, hhayi nje ukubulala umhubhe

Lapho i-akhawunti ifinyelela umkhawulo wayo, kufanele kwenzeke izinto ezimbili: izikhathi ezikhona ziyaphela futhi ezintsha ziyanqatshwa. Iphrothokholi yokuphatha inikeza i-client-kill nge-ID yeklayenti, esingatha ingxenye yokuqala inqobo nje uma ubala zonke izikhathi eziphilayo ze-akhawunti esikhundleni sokubulala ikheli elilodwa okuvele waliqaphela.

Ingxenye yesibili yilapho ukuklanywa kwesilinganiso kwehluleka khona. Ukubulala kuphela kuwumjaho nomjikelezo wokuxhunyanisa kabusha weklayenti, ozobuya ngokuzimisela ngemva kwamasekhodi ambalwa. Ukungena kufanele kudinge ileja eyabiwe, futhi ekusetshenzisweni kwamagethiweyi amaningi lokho kuhlola akukwazi ukuba yifayela lemishini ngayinye. Isibonelo ngasinye esingamukela ukungena kufanele sibone isimo esifanayo sokuqeda.

Ukuxhunyanisa kabusha okusekelwe kuthokheni kufanele ukuhlolwa kwako. I-OpenVPN 2.6 ingaqinisekisa ithokheni yesikhathi ngaphakathi nge-auth-gen-token, yeqe ucingo lokuqinisekisa lwangaphandle isilawuli sakho ebesilusebenzisa ukusebenzisa umkhawulo. Ngakho ithokheni esasebenza isho ubunikazi, hhayi isilinganiso esisele, futhi isibonelo ngasinye esisha sekhayenti kufanele sisadinge ileja. Uma kunesikhathi uvula i-management-client-auth, isilawuli siba umqinisekisi futhi sidla ifa lomsebenzi wokuhlaziya isimo sesikhathi nokunqaba amathokheni aphelelwe yisikhathi noma angavumelekile ngokwaso.

Yamukela ukweqa okudalwa yisampula

Ukuqapha kwezikhathi kanye nokunqamuka kukunikeza isilinganiso esisampulisiwe esinokubekezelela okwaziwayo. Iklayenti lingeqa cishe isikhala esisodwa sokubika kanye nesikhathi isilawuli esidinga ukuthi senze okuthile, futhi izikhathi ezikhona ngasikhathi sinye ku-akhawunti eyodwa zandisa lelo windi. Shono lokho kusixhumanisi esikhundleni sokukhanga ukusikwa okunembile kubhayithi lokugcina ongakwazi ukukunikeza.

Uphahla oluqinile lwangempela lwenye inkinga yobunjiniyela: ukuphoqelela ngaphakathi kwendlela yokudlulisa, kuboshelwe ku-akhawunti efanayo kuzo zonke izikhathi. Ukufunda izibali ngokushesha akulona into efanayo, futhi akumelani neklayenti elivele livule imihubhe eminingi.

Ngaphambi kokusetshenziswa, gijimisa izimo zokwamukela eziphula ukusetshenziswa okungalungile: ukuxhunyanisa kabusha okuphindaphindiwe, amadivayisi amabili ngasikhathi sinye, ukuqalwa kabusha kwesilawuli negethiweyi, umcimbi wokunqamuka olahlekile, ukuphenduka phakathi nesikhathi, kanye nomzamo wokuxhunyanisa kabusha ngethokheni ngemuva nje kokuqeda. Bese unquma indlela yokwehluleka yokuphazamiseka kokubalwa. Ileja ehlala njalo ivikela ukusetshenziswa okukugcinile; ayikwazi ukuvusa ukubonwa okungakaze kufike, futhi ikhasimende kufanele lazi ukuthi likuphi kulezi zimo ezimbili.