OpenVPN remote-random: ukuhleleka okuxubile, umhubhe owodwa

Umcabango uwukuthi ukwengeza i-remote-random kuguqula iphrofayela ibe yiqoqo elizungezayo, ngakho ukuxhumana ngakunye kuphuma ekhelini elihlukile. Empeleni lokhu okwenziwa yilesi siqondiso ukuxuba uhlu lwama-remote kanye, lapho iklayenti liqala ukuxhuma, bese lizama wona ngalokho kuhleleka okusha. Umhubhe oqhamuka ekugcineni usaphelela endaweni eyodwa futhi uhlala lapho isikhathi sonke somhlangano.

Lowo mehluko ubalulekile kukho kokubili ukuhlola kanye nezimangalo zobumfihlo.

Okushintshwa yilokhu kukhetho ngesikhathi sokuxhuma

Iphrofayela yeklayenti ingathwala imigqa eminingi ye-remote, ngayinye inegama layo lomsingathi nechweba layo. Ngaphandle kwesiqondiso izanywa ngokuhleleka kwefayela; naso uhlu luhlelwa kabusha kanye ekuqaleni komhlangano futhi ikheli lokuqala eliphendulayo liyawina. Ezinye zihlala zingezinye izindlela zalo mzamo, hhayi izindlela ezihambisanayo. Iphrofayela ene-remote eyodwa ayinikezi isiqondiso lutho lokuxuba, futhi le yindlela esheshayo yokubona ukuthi kungaba nomqondo yini.

Incwadi ye-OpenVPN ibhala lokhu kukhetho njengokuthinta ukuhleleka kwemizamo yokuxhuma, futhi lokho yikho kanye okufanele kulindelwe ekuziphatheni.

Ukuxhuma kabusha kuqala umjikelezo omusha wokukhetha, ngakho umhlangano wakamuva ungase uhlale kwenye indawo. Umhubhe osebenzayo awushintshi lapho umile.

Inganekwane: isicelo ngasinye sithola iseva entsha

Lapho ususunguliwe, umhubhe uthwala yonke ingqamuzana yalowo mhlangano iye kumlingani okhethiwe. Akukho ukukhetha kabusha ngesicelo ngasinye, futhi lesi siqondiso akusona isilinganisi somthwalo sezixhumo ngazinye: sixuba abazongenela ukhetho, asisabalalisi amaphakethe. Yonke insiza eyabelana ngalowo mhubhe yabelana nomlingani ofanayo. Noma yini ebikwa isiphequluli mayelana nokuphuma kwayo ingeyomhlangano, hhayi eyesicelo esisodwa.

Uma ukuhlola kubonisa izindawo ezimbili zokuphuma ezihlukile, funa imihlangano emibili ehlukene esikhundleni sokukhetho okukodwa okuhlakaniphile. Lowo mehluko futhi uchaza ukuthi kungani ukuhlola kwesiphequluli nokuhlola kokulanda kungase kungavumelani lapho ukuxhuma kabusha kwenzeke phakathi kwazo.

I-remote-random-hostname iyasiza ngani

Isiqondiso sesibili esinegama elifanayo sishintsha igama lomsingathi elisetshenziswa ekuxazululeni, hhayi ukuhleleka kohlu lwama-remote. Sikhona ngenxa yokuthunyelwa lapho igama lixazululeka khona emakhelini amaningi nge-DNS ezungezayo, futhi kufanele sisetshenziswe kuphela lapho insiza yakhiwe ngalokho. Yisinyathelo sokuxazulula kuphela esishintshayo; ukuhleleka kohlu lwabazongenela ukhetho akushintshi.

Ukusivula ngoba amagama abonakala ehlobene kuyiphutha elivamile. Isitifiketi se-wildcard noma ukuhlelwa kwe-DNS okungalindeli igama elishintshiwe kuzomane kwehluleke ukuxazulula noma ukuqinisekisa.

Funda indawo yokugcina ekhethiwe kusuka kungxelo

Bhala ukuthi imuphi umlingani umhlangano owsetshenzisile ngempela ngaphambi kokuphetha. Umgqamulo wesinyathelo ubalula ikheli elizanywayo, futhi iphrofayela ngokwayo ibonisa ukuthi bangaki abazongenela ukhetho. Qhathanisa leso sibalo nekheli elikungxelo ngaphambi kokusola ukuxuba.

grep -c '^remote ' client.ovpn
openvpn --config client.ovpn --verb 4 2>&1 | grep -i -E 'attempting|peer connection'
openvpn --help | grep -A2 remote-random
head -20 client.ovpn

Ukuze uqhathanise ukusebenza, bopha indawo yokugcina ngokufaka ama-remote amanye kumazwana, ukuze okuguquguqukayo okuhlolwayo kube umthetho noma iklayenti hhayi indlela. Embuzweni wobumfihlo, hlola ubunjalo bensiza kanye nokugcinwa kwayo kungxelo njengokuphelele; ukukhetha kokuqala okuxubile akususi amakhukhi, akususi ukungena kwe-akhawunti futhi akwenzi abaqhubi ababili balingane.

Gcina ndawonye izinto zokwethenjwa ezinikeziwe kanye neqoqo lezindawo zokugcina ezisekelwayo. Ukuxuba kabusha kushintsha kuphela ukuhleleka okuzanywa ngakho lelo qoqo.