Izehlakalo ze-hook ye-OpenVPN: kungani igama nesitembu sesikhathi kungesona ukhiye

Irekhodi lokunqamuka lifika ngemva kokuba ukuxhumana kwesibili ngaphansi kwegama elifanayo sekuqalile, futhi isiphathi esibuyekeza umugqa omusha kakhulu walowo msebenzisi sivale isikhathi esingalungile. Iphutha akusona isiqhathaniso sezitembu zesikhathi. Iphutha isicabango sokuthi igama kanye nesekhondi eliphelele kukhomba isikhathi esisodwa. Izehlakalo ze-hook zichaza ukuxhumana, futhi ukuxhumana kudinga ukhiye ongokwakho kuphela.

Qala ngalokho okushiwo ngempela izinguquko zokunqamuka. Yilapho kuphela ukukhetha kwesikhombi okunengqondo.

I-hook yokunqamuka ikuthwalelani ngempela

Ku-Community OpenVPN 2.6, isithenjwa se-hook time_unix sichaza njengomzuzu lapho iklayenti laxhumana khona; sibekwa ngaphambi kokuba i-hook yokuxhumana isebenze, futhi asichazwa kabusha lapho i-hook yokunqamuka ishaya kamuva. time_duration sinikeza ubude baleso sikhathi ngamasekhondi, ngakho ukuphela cishe isikhathi sokuxhumana kanye nobude. Kokubili amasekhondi aphelele, futhi akukho nokunye okungumzuzu lapho idathabheyisi yakho yacubungula isehlakalo. Ukuhlukanisa lezi zikhathi ezintathu yikho okwenza ukuhlobana kuqhubeke, esikhundleni sokuvele kubonakale kulungile ngesikhathi sokuhlola.

Lezi zibalo kufanele zibhalwe phansi, ngoba yisona sikhathi sokuphela kuphela esinikezwa i-hook ngokwayo. Ukubambezeleka kokucubungula kanye nomehluko wamawashi phakathi kwamahosthi kusengekho ngaphandle.

Kungani umbhangqwana osobala ungeyona owukuphela

Ukuhlanganisa igama nesikhathi sokuxhumana kunciphisa usesho futhi akukakuchazi isikhathi. Iklayenti lingase lixhumane futhi phakathi nesekhondi elifanayo, ngakho izikhathi ezimbili zingabelana ngakho kokubili. Izigaba ezimbili ze-daemon, noma ukushintshwa kweseva okugcina ukucushwa okufanayo, kungakhiqiza lowo mbhangqwana kusuka ezinqubweni ezehlukene. Amakheli ethaneli nawo ayasetshenziswa kabusha ngesizathu esifanayo, okuwenza abe yizimfanelo zesikhathi hhayi izikhombi saso.

Indlela yokwehluleka ithule. Ukunqamuka sekwephuzile kwesikhathi sokuqala kuhambisana nomugqa omusha kakhulu futhi kuphelisa isabelo isikhathi sesibili esisasetshenzisayo, ngakho umsebenzisi uhlangabezana nokulahlekelwa ukufinyelela okungahleliwe angakubangalanga. Inani lemigqa elibonakala lilungile kamuva lenza inkinga ibe nzima ukuyibona.

Ubunikazi obuzinzile buvelaphi

Isixhumanisi sokuphatha sinikeza iklayenti ngalinye isikhombi sesigaba seklayenti, futhi leso sikhombi silinganiselwe esigabeni se-daemon esisikhishile. Ukhiye wangaphandle osebenzayo uhlanganisa isikhombi seseva esizinzile, inkathi eshintsha lapho i-daemon iqala, kanye naleyo ID yeklayenti. Inkathi ibalulekile ngoba izikhombi ziqala kabusha kanye nenqubo, futhi i-ID yenqubo engenalutho ingasetshenziswa kabusha kamuva yinto engahlobene.

Izinguguquko zemvelo ezibekwe ngaphakathi kweskripthi sokuxhumana sengane azihambi ziye kuskripthi sokunqamuka sakamuva se-daemon engumzali, ngoba lezo zikripthi zisebenza njengezinqubo ezihlukene ezinemvelo yazo. Ngakho ukukhiqiza i-UUID ngesikhathi sokuxhumana kuyisigamu sesixazululo. Uhlangothi lokunqamuka kufanele lukwazi ukubiza i-UUID efanayo, okusho ukuthi ubunikazi kufanele buhlale endaweni lapho zombili izehlakalo zingafinyelela khona.

Yenza ukuhoxa kube nombandela futhi kungaguquki

Hoxa ngokomnikazi wesikhathi, hhayi ngokomsebenzisi. Isiphathi esisusa noma yisiphi isabelo esingokwegama ngesikhathi samanje ekugcineni sizosusa okungalungile, futhi ukuzivikela kuphela ukuqinisekisa ukuthi irekhodi elisuswayo yirekhodi elichazwa yilesi sehlakalo.

Isixhumanisi sokuphatha samukela iklayenti lokuphatha elilodwa elixhunyiwe ngesikhathi, ngakho hlanganisa nalowo osevele engumnikazi kwayo esikhundleni sokunamathisela umqaphi wesibili oqhudelana ngesokhethi efanayo.

Phatha izehlakalo eziphindayo ngaphandle kokushintsha umphumela kabili, futhi gcina izehlakalo ezingabhangqwene ukuze zihambisane esikhundleni sokuzilahla. I-callback yokunqamuka inemibandela yomjikelezo wempilo ebhaliwe futhi ingase ingafiki neze ngemva kokuphahlazeka noma ukuma okuqinile, ngakho umklamo udinga indlela yokumela isikhathi okungekho kuso isehlakalo sokuphela.

Hlola izimo ezingakhululekile ngamabomu: ukuxhumana kabusha kabili phakathi nesekhondi elilodwa, izigaba ezimbili ze-daemon, ukuxhumana okucubungula kwaso kwehluleka, kanye nokuqalisa kabusha kwe-daemon phakathi nesikhathi. Ukhiye ophumelela kuzo zozine yiwona ukhiye ofanele ukwethenjwa.