I-NetworkManager-ssh ikhombisa ukuxhumana kodwa akukho okuhambiswayo
Isikhombisi sifakazela kuphela ukuthi ubudlelwano be-SSH obulawulwayo bukhona. Hlola ukuthi uhlelo lokuxhuma lwakhe idivayisi yethaneli noma iqoqo lokudlulisa, bese uhlola indlela yohlelo lokusebenza.
Imenyu ikhombisa ukuxhumana kwe-SSH njengokusebenzayo, ukhiye womsingathi wamukelwe, futhi isiphequluli asikafinyeleli noma kuphi lapho bekufanele sifinyelele khona. Lokho akukhona ukungqubuzana, ngoba iphrofayela ye-NetworkManager-ssh ingakhiqiza imiphumela emibili ehluke ngokuphelele kumsingathi oyedwa nokhiye oyedwa: idivayisi yethaneli ethwala amaphakethe, noma iqoqo lokudlulisa elingasetshenziswa kuphela izinhlelo ezithile. Isikhombisi sibika ukuthi ubudlelwano be-SSH obulawulwayo bukhona. Asibiki nanini ukuthi yikuphi kwalokhu okubili okutholile.
Imiphumela emibili ngemuva kwento eyodwa yemenyu
Zombili izindlela ziqinisekisa ngendlela efanayo, futhi yikho kanye okubangela ukudideka. Ukukhetha iphrofayela ngendlela efanayo ncamashi, ngemifanekiselo efanayo, kungakushiya nesixhumanisi ongahamba ngaso noma nesokhethi elalelayo okufanele uhlelo olulodwa lwaziswe ngaso.
Qala ngokunquma ukuthi yimuphi umphumela odingwa ngempela umsebenzi. Isidingo sokufinyelela isubneti yonke sidinga idivayisi. Isevisi eyodwa kumsingathi okude idinga ukudlulisa, futhi ukwakha ithaneli yayo ngokuvamile kudala umsebenzi wokuhambisa amaningi kunalokho okwakufanelekile inkinga.
Okumele kube nakho yilolo nalolo hlelo ngaphambi kokuthi lusebenze
Iphrojekthi ibhala zombili izindlela, futhi izimfuneko zangaphambili zihluke kakhulu kangangokuthi okushodayo kubonakala njengokwehluleka kweprotocol hhayi njengokukhethwa komklamo.
| Mode | What must exist | What still has to be true |
|---|---|---|
| Tunnel device | Compatible TUN/TAP arrangement on both ends, permission, addressing | A route policy that actually sends the intended prefixes into it |
| Forwarding only | A chosen SOCKS, local-forward or remote-forward listener | A permitted destination path on the far side |
Funda ikholomu yasesokunene ngokucophelela, ngoba yilapho kugcina khona amathikithi amaningi anjena. Ngisho nedivayisi yethaneli eyakhiwe ngokuphelele ihlanganisa kuphela lokho okuthunyelwa ukuhambisa phakathi kwayo, futhi ngisho nokudlulisa okuphelele kusiza kuphela izinhlelo ezitshelwe ukuthi zikusebenzise.
Isixhumanisi esingelona iqiniso akulona ithaneli
Endleleni yokudlulisa uhlelo lokuxhuma lubhala isixhumanisi esingelona iqiniso esidalelwe ukwanelisa imodeli yokuxhumana. Sikhona ukuze umphathi abe nokuthile angaxhuma isimo kukho. Asithwali amaphakethe ohlelo angahleliwe aya kunethiwekhi ekude, futhi akukho lutho ebukhoneni baso okusikisela ukuthi ukuhambisa kwe-IP kushintshile.
Izibonelo zethaneli ephelele kuphrojekthi ziphathelene nokwesekwa kwedivayisi yethaneli ye-OpenSSH, ngakho igama elithi ithaneli kulebula lichaza ikhono, hhayi inqubomgomo yakho yangempela. Hlola ukuthi i-kernel izokwenzani hhayi ukuthi iphrofayela ibizwa ngani.
nmcli connection show --active
ip -br link
ss -lntp | grep -E "1080|8080"Bese uhlobanisa umphumela nohlelo. Uhlelo oluqonda i-SOCKS kumele lulungiselwe ukusebenzisa i-proxy. Umsebenzisi wokudlulisa kwasekhaya kumele akhonjiswe endaweni yaso yokulalela. Akukho kokubili okuthola ukudlulisa kukodwa, futhi akukho okusizwa isikhombisi sokuxhumana esiphenduke luhlaza.
Lungiselela uhlangothi olukude esikhundleni sokuluphoqa
I-akhawunti evamile ye-SSH ingaqinisekisa ngaphandle kwemvume yokuphakamisa idivayisi yethaneli ekude. Iphrojekthi ibhala indlela engenayo i-root lapho umlawuli edala idivayisi kusengaphambili yilowo msebenzisi, bese iklayenti likhetha inombolo efaneleyo.
Ukuhlelwa okunjalo kudinga ukuxhumanisa nenqubomgomo yethaneli yeseva kanye nalowo onamakheli kunethiwekhi ekude. Ukudala idivayisi ngokwako akunikezi izindlela zezinsiza, izimvume zokudlulisa noma indlela yokubuya, futhi akukho kulokho okuza ngoba ukulungiselelwa kwesibonelo kwabonakala kukholisa.
Ongakufanele ukwenze ukunika amandla ukudlulisa okungenamkhawulo noma ukungena nge-root kude ukuze isibonelo sisebenze. Lapho umqhubi engumnikazi wokulungiselelwa kwenethiwekhi ekude, sebenzisa ukuhlelwa okusekelwayo ukuze ushiye leyo miyalo kumyeba, futhi ugweme umsizi wesibili obuyisela amakheli aphikisanayo lapho kunqanyulwa.
Umongo wokuqinisekisa, nokuthi yini okufanele ifakwe kuthikithi
Ukuqinisekisa kunomongo wako. Uhlelo lokuxhuma lufuna i-ejenti ye-SSH exhunywe nesikhathi somsebenzisi futhi ludinga ukuthi umsingathi wendawo ekuyiwa kuyo waziwe, ngakho ukhiye osebenza kutheminali eyodwa awubonakali ngokuzenzakalela endleleni yokuqinisekisa yomphathi. Vumela ukhiye womsingathi ubhaliswe futhi uhlolwe ngenqubo evunyiwe esikhundleni sokuvala ukuhlola.
Ukusekela, bhala izinto ezine: uhlelo lokuxhuma kanye nenguqulo, indlela ekhethiwe, ubunikazi obude obuhlosiwe, kanye nesixhumanisi noma isilaleli okwakufanele sivele. Bese uhlola ngqo indawo yokungena yohlelo. Isikhombisi esixhunyiwe kanye nokuhlolwa okusebenzayo kuwubufakazi; isikhombisi esixhunyiwe sodwa siyisitatimende mayelana ne-SSH, hhayi mayelana nokuhambisa noma imvume yensiza obuwuzama ukuyithola.