Awekho ama-peer angenayo ku-node yakho ye-Bitcoin ngemuva kwe-VPN?

I-node yakho ivumelanisiwe, i-VPN ithi ixhunyiwe, futhi getpeerinfo ikhombisa ama-peer ayisishiyagalombili noma ayishumi. Akekho kuwo one-inbound ebekwe ku-true. Leyo nhlanganisela ijwayelekile futhi ayilona iphutha: ukuxhumana okuphumayo kufakazela ukuthi i-node ingafinyelela kwabanye, futhi akukho lutho kukho okufakazela ukuthi othile angakufinyelela. Uma umgomo kuyi-node eyamukela ukuxhumana kwe-P2P okungena nge-VPN, kufanele uhlole lowo mkhakha ngokwehlukana.

Landela iphakethe kusukela ku-peer kuya kwisilaleli sakho

I-P2P engenayo iyiketango lezinto ezine, futhi iyaphuka ekuxhumaneni okubuthakathaka kakhulu, hhayi kokuthakazelisa kakhulu.

other peer
  -> provider's public address and assigned port
  -> the permitted VPN mapping
  -> Bitcoin Core's P2P listener

I-P2P eyisisekelo ye-Core kunethiwekhi enkulu ingu-8333, kodwa umhlinzeki angakunika iphothi lomphakathi elihlukile kanye nendawo ehlukile ohlangothini lweklayenti. Bhala ikheli lomphakathi, iphothi langaphandle kanye nendawo lapho umhlinzeki eletha khona ithrafikhi ngempela. Bese uqinisekisa ukuthi uhlelo lwakho ne-akhawunti yakho kuvumela ukuxhumana okungena nhlobo, ngoba ikheli lokuphuma elikhethiwe akusona isivumelwano sokudlulisa iphothi.

Lowo mehluko ubamba abantu abathenga i-IP eqinile belindele ukufinyeleleka. Ukuzinza kwekheli akusho lutho mayelana nokuthi umhlinzeki udlulisela iphothi elingenayo kuseshini yakho.

Hlola isilaleli ngaphambi kokuhlola umhlinzeki

I-Core kufanele ilalele ekhelini nakuphothi lapho ukumepha kuletha khona, futhi i-firewall yomsingathi kufanele ikuvumele. Uma i-node igijima ku-container noma komunye umshini we-LAN, ukugxuma okulandelayo nendlela yako yokuphendula nakho kuyingxenye yeketango.

Umthetho we-firewall wendawo awukwazi ukwakha ukumepha kumhlinzeki olahla amaphakethe angenayo, futhi ukumepha komhlinzeki akukwazi ukufinyelela inqubo eboshelwe ku-loopback kuphela. Womabili amahafa kufanele avumelane nge-tuple efanayo, yingakho isinyathelo sokuqala siwukubhala phansi i-tuple esikhundleni sokuyiqagela.

Gcina i-endpoint emenyezelwe ihambisana nokumepha okusebenzayo. Ikheli eliqinile alenzi iphothi elabiwe noma ukuqashwa kwalo kube ngokunaphakade phakathi kokuxhumana kabusha, ngakho i-endpoint eyashicilelwa ezinyangeni ezedlule ingase ingasakhomba ndawo. Funda kabusha ikhasi lomhlinzeki ngemva kokuxhumana kabusha kwakho konke bese uqhathanisa nalokho okumenyezelayo i-node yakho. Uma iphothi lisukile, i-endpoint endala manje akuseyona eyamuntu noma ingeyomunye umuntu.

Funda ifulegi elingenayo, hhayi inani eliphelele lokuxhumana

Kusukela kumongo we-RPC wendawo ogunyaziwe, lo mbuzo wokufunda kuphela ubalula ama-peer:

bitcoin-cli getpeerinfo

Isikhombo se-RPC sichaza inbound njenge-true kokuxhumana okungena kanye ne-false kokuxhumana okuphumayo. Bheka leyo nkambu. Inani elingaphezu kweshumi alifakazeli lutho ngomkhakha, futhi izibalo kanye nezigaba ziyashintsha ngokucushwa nangenguqulo.

Bese uhlola i-endpoint emephwe ngaphandle ngokuhlolwa okusha kokufinyeleleka okuvunyelwe ukukugijima, futhi ubone ukuthi kuvela yini i-peer engenayo ehambisanayo. Qaphela umphumela owunamathiselayo kuchungechunge losizo: amakheli ama-peer imininingwane yokuxhumana yabanye abantu, futhi akudingeki ashicilelwe ukuze umbuzo wakho uphendulwe.

Ungakuxazululi ngokudalula i-RPC

Imibhalo ye-RPC ye-Bitcoin Core ixwayisa ngokucacile ngokudalula isixhumi esibonakalayo se-RPC ku-inthanethi yomphakathi. Ukuxhumana nama-peer kanye nokuphathwa okuqinisekisiwe kuyizinsizakalo ezihlukene, futhi ukwenza i-P2P ifinyeleleke ngokushicilela i-RPC kushintshanisa inkinga yokuxhumana nengcono kakhulu kabi.

Uma ungathandi ukuncika nhlobo ku-P2P engenayo, enye indlela ebhalwe phansi iyisevisi ye-onion, futhi inezimfuneko zayo: i-Tor iyatholakala, ukuqinisekiswa kokulawula kucushwa kanye nezilungiselelo zokulalela ezivumela ukuthi isevisi yakhiwe. Avezwa nje ngoba kugijima i-VPN ngesikhathi esifanayo.

Ukukhipha i-Core ku-VPN kuwumklamo wesithathu, futhi kusemthethweni kwabanye abasebenzisi, kodwa kubeka ithrafikhi yama-peer kuxhumano lwakho olujwayelekile. Lokho akulona ukufinyelela okungena nge-VPN, futhi i-router noma i-NAT ephezulu ingase isadinga ukungena kwayo okuvunyelwe. Khetha ukuthi ikuphi kokuthathu ohlola ngempela ngaphambi kokushintsha noma yini enye.