Isevisi ye-Onion neyase-VPN: amamodeli wokufinyelela ahlukene

Abantu bachaza isevisi ye-Onion nesevisi efinyelelwa nge-VPN kuphela njengezinhlobo ezimbili zomqondo owodwa: fihla umgudu, yabelana ngekheli eliyimfihlo. Zehluka ngalokho ikheli elixhumene nakho, ukuthi ubani angalifinyelela nokuthi yini kumele yenzeke ngaphambi kokuba isicelo sifike. Okunye kuyindawo yokuhlangana ngaphakathi kwe-Tor, okunye kuwumzila ngaphakathi kwenethiwekhi eyimfihlo. Ukukuthatha njengokushintshanayo kukhiqiza imiklamo engeyona eyimfihlo futhi engalondolozeki.

Inganekwane: zombili izindlela ziwumnyango ofihliwe kuphela

Impawu eyabiwe iyiqiniso kodwa incane: asikho isakhiwo esibeka isikhombimsebenzisi sokuphatha emgudwini womphakathi ofinyeleleka ngqo. Konke okunye kuyahlukana. Ikheli le-Onion lisuselwa kukhiye wesevisi uqobo, ngakho igama lixhumene nobuwena; ikheli le-VPN liyikheli nje ngaphakathi kwenethiwekhi ocellwe kuyo. Okunye kufihla isevisi kusendlalelo esiphezulu, okunye kukungena ku-topology eyimfihlo. Ukubuka okwesibili njengencazelo efanayo neyokuqala yikho okuqala ukudideka.

Azikho lezi zimilo ezimbili eziyisilawuli sokuphepha sohlelo lokusebenza uqobo. Indawo efihliwe ayilungisi isofthiwe engemuva kwayo, futhi umzila oyimfihlo awunezi ukuqinisekiswa ekhasini lokungena. Zombili izakhiwo zisadinga izimvume zohlelo lokusebenza uqobo, futhi zombili zisadinga umuntu obhekele ukubuyekezwa nokubuyiselwa.

Ikheli le-Onion likhomba kuphi ngempela

Ikheli le-Onion lenguqulo v3 libhala ngokufihla ukhiye womphakathi wesevisi, ngakho akekho ongakhetha ikheli lesevisi angayilawuli. Iklayenti lixhuma nge-Tor endaweni yokuhlangana, futhi isevisi ifinyelela kuleyo ndawo ngakubo; awekho umfutho wokuphuma ojwayelekile othwala lokho kuxhumana kuze kufinyelele esevisini. Igama luwubuwena, hhayi irekhodi le-DNS.

dig +short example.onion
curl --socks5-hostname 127.0.0.1:9050 http://example.onion/
systemctl status tor

Ngakho ukwengeza umzila noma umugqa we-hosts egameni le-onion akusizi ngalutho. Ukusesha akusona isu; iklayenti le-Tor nemijikelezo yalo yiso isu. Uma isevisi ihloselwe iqembu elincane labantu, imvume yeklayenti le-onion ingadinga ukhiye ngaphambi kokwamukela ukuxhumana, kodwa lokho akukakabi ukungena kuhlelo lokusebenza. Ukushicilela ikheli nakho kuyisenzo esenziwe ngamabomu, ngoba noma ubani olaziyo angazama ukuxhuma ngaphandle uma ulikhawulele.

Misa uma isizathu esisodwa somklamo we-onion kuwukugwema ukusetha ukuqinisekiswa. Isendlalelo esiphezulu asikunikezi lokho, futhi uzokwakha kusenesikhathi.

Umzila we-VPN unikezani ngempela

I-VPN ingenisa idivayisi kunethiwekhi futhi iyinikeza umzila oya ku-gateway noma isubnet. Isevisi engemuva kwaleyo gateway ibona ikheli elivela echibini lethuneli futhi isebenzise imvume enayo. Umzila awusho lutho ngokuthi umsebenzisi ungubani; usho ukuthi amaphakethe angaya kuphi.

ip route get 10.20.30.40
wg show
curl -sv https://files.internal.example/ -o /dev/null

Leyo modeli ifanele iqembu elaziwayo elinamadivayisi aphethwe, ngoba i-gateway ingaphoqa isimo sedivayisi futhi inethiwekhi ingacutshungulwa. Ayifanele izivakashi ezingaziwa noma ezingahleliwe, okufanele zibhaliswe kuqala. Ukungena kohlelo lokusebenza uqobo kusancika ukuthi umsebenzisi oxhunyiwe angafunda ini. Ukuhlanganisa ukufinyeleleka nemvume yikho i-VPN egcina ngokunikeza yonke isubnet kunoma ubani ongaxhuma.

Misa uma izethameli zingaziwa noma zishintsha njalo. Ukubhalisa abantu ongabazi kunethiwekhi eyimfihlo ukuze ubonise ikhasi elilodwa kuyisibopho esikhulu uma kuqhathaniswa nokushicilela isevisi.

Ukukhetha phakathi kwazo, nalokho okuhlala kufana

Khetha imodeli ye-onion uma izethameli ziyizobuchwepheshe, isevisi akumele ibe nekheli lomphakathi nhlobo, futhi ungazamukela izidingo zeklayenti le-Tor. Khetha imodeli ye-VPN uma izethameli ziyiqembu elicacile okuphethe amadivayisi alo futhi ufuna ukurekhoda ukufinyelela kwalo ezingeni lenethiwekhi. Akukho kukhetha okususa isidingo sokuqinisekiswa kohlelo lokusebenza, iziqeshana noma indlela yokubuyisela. Akukho okuzimathisela ngokuzenzakalela ukuba kube yimfihlo ngendlela ebalulekile kubasebenzisi bakho.

Kuzo zombili izakhiwo bhala ukuthi ubani angafinyelela isevisi, baqashelwa kanjani nokuthi kwenzekani uma ubufakazi bulahleka. Impendulo yesevisi ye-onion ihlanganisa okhiye bemvume yeklayenti nekheli uqobo; impendulo ye-VPN ihlanganisa i-akhawunti, idivayisi nenqubomgomo ye-gateway. Lezi zinhlu ezihlukene, futhi eyodwa yazo kuphela ezoba sobala kumphathi olandelayo.

Ukuqhathanisa kuphela lapho uhlelo lokusebenza luqala khona. Ikheli elifihliwe nomzila oyimfihlo kuyizinqumo zokuthutha, futhi uhlelo lokusebenza kusamele lunqume ukuthi isicelo sivunyelwe ukwenzani. Gcina lezo zinqumo emibhalweni ehlukene, bese kuthi asikho isakhiwo esizothatha umsebenzi somunye buthule.