I-OpenVPN ayixhumi ku-Wi-Fi yesithombe sehhotela? Zama i-TCP 443

Vula iklayenti, cindezela Xhuma bese ufunda umugqa wesimo esikhundleni sengxoxo elandelayo. Iphrofayela ema ku-Iyaxhuma noma Ilinde iseva ngemuva kwenethiwekhi yehhotela, yekhampasi noma yeselula ngokuvamile ilahlekelwe ukuthutha kwayo endaweni ethile endleleni, hhayi izifakazelo zayo. Isinyathelo esilandelayo esiwusizo ukuthola ukuthi leyo nethiwekhi ithwala ini ngaphambi kokuthinta iseva. Ungashintshi lutho kuze kusebenze leyo phrofayela kwenye indawo.

Zama kuqala kusuka ku-hotspot yefoni. Uma umhubhe unyuka lapho, iseva, isitifiketi kanye ne-akhawunti kuhle, futhi ukuguquguquka okukodwa okusele iyinethiwekhi ephambi kwakho.

Qala eklayenti: funda umugqa wesimo

Umugqa wesimo ukutshela isiphi isigaba esihlulekile. Iklayenti elibhajwe ku-Iyaxhuma lisaxazulula igama lomsingathi noma livula isokhethi yangaphandle; eliyafinyelela ku-Ilinde iseva linendlela kodwa alinampendulo; eliqinisekisa bese liwa ngemuva kwalokho linenye inkinga ehluke ngokuphelele. Ilogi yeklayenti kanye nezinkambu remote ne-proto zephrofayela uqobo zibonisa ukuthi iklayenti lizama ukwenzani, futhi i---verb 4 kuklayenti lomugqa womyalo iphrinta imininingwane efanayo. Ukuqhathanisa lokho nenethiwekhi ephambi kwakho yikho okuguqula 'i-VPN ivinjiwe' kube isimangalo esithile.

Bese uhlola inethiwekhi ngamathuluzi osuvele unayo. I-nc -vzu 203.0.113.10 1194 ithumela i-datagram ye-UDP, i-curl -v telnet://203.0.113.10:443 ibika ukuthi ukuxhawana kwe-TCP kuyaphela yini, futhi isiphequluli esilayisha ikhasi le-HTTPS sifakazela kuphela ukuthi ukuphuma ku-443 kufinyelela kuleso msingathi owodwa. Ukuhlola okuncane kuphendula lokho iklayenti le-VPN elingakwazi: yiliphi ikhwebo naluphi uhlelo oluphuma kule nethiwekhi.

Izindlela ezintathu zenethiwekhi zibukeka zifana kusukela eklayenti futhi zidinga izimpendulo ezihlukene. Ukuphuma ku-443 kungase kuvuleke, kungase kuvunyelwe iphroksi kuphela, noma u-443 kungase kudluliselwe ngokusobala ebhokisini lokuhlola elingakwazi ukufunda ukuthi ithwala ini. Eyokuqala ilungiswa ushintsho lwephrofayela ngezansi, eyesibili izilungiselelo zephroksi, futhi eyesithathu ingase iqedele ukuxhawana bese ima lapho umhloli enquma ukuthi awuwuthandi umfudlana. Ukwazi ukuthi uhlangabezana nokuphi kokuthathu kuyimehluko phakathi koshintsho lwemizuzu eyishumi nosuku lokufaka kabusha amaklayenti.

Hambisa isilaleli nephrofayela ndawonye

Ngasohlangothini lweseva, setha isilaleli kulokho okuvunyelwa yinethiwekhi: i-port 443 ne-proto tcp ekulungiselelweni kweseva, bese uqala kabusha insiza futhi uqinisekise isokhethi nge-ss -lntp. Ngasohlangothini lweklayenti, iphrofayela kufanele ivume, ngoba ukuthutha kanye nekhwebo kungaphandle komhubhe: i-proto tcp ne-port 443 ku-.ovpn, noma izinkambu ezihambisanayo esikrinini sezilungiselelo zohlelo. Iphrofayela esabhekise ku-UDP 1194 yehluleka ngendlela efanayo nangaphambili, futhi isilingo siwukusola i-firewall esivele yalungiswa. Uma lowo msingathi uphinda uphendule i-HTTPS ku-443, izilaleli ezimbili azikwazi ukwabelana ngalelo kheli nalolo hlelo; nika i-VPN ikheli lesibili noma beka isihlukanisi phambi kwayo.

Landela ukuxhumana kokuqala nge-tcpdump -ni any port 443 kuzo zombili iziphetho. Amaphakethe asuka eklayenti angafiki neze asho ukuthi inethiwekhi isahlunga, noma ukuthi ikheli elisephrofayeleni akulona olucabangayo. Amaphakethe afika ngaphandle kwempendulo akubuyisela kulo ilogi yeseva, lapho ukungafani kohlelo kubonakala khona ngokushesha njengephakethe elahliwe.

Uma kunguphroksi kuphela ophuma enethiwekhi

Ezinye izethameli zivumela lutho ngaphandle kwephroksi ye-HTTP, okuyisithiyo esihlukile kukhwebo elivaliwe futhi esikhipha okuningi kunokwe-OpenVPN. Amaklayenti akhuluma kuphela i-PPTP, i-L2TP/IPsec noma i-IPsec engenalutho awanayo indlela yokudlula kuyo, ngoba leyo zakhiwo zilindele ukuthi uhlelo lwazo lwangaphandle lufinyelele iseva ngqo. I-OpenVPN iyakwazi, nge-http-proxy proxy.example.net 8080 kuphrofayela yeklayenti, inqobo nje uma iphroksi ivumela indlela ye-CONNECT ekhwetsheni lakho. Iphroksi ye-SOCKS ilula nakakhulu, ngoba idlulisela umfudlana ngaphandle kokukhathazeka ngokuthi ngaphakathi kunani.

Lapho iklayenti lingenakho ukusekelwa kwe-phroksi, umhubhe we-SSH ku-443 ngokuvamile yikho okusalayo. Wengeza ungqimba lwesibili, futhi umqhubi wenethiwekhi angase abe nombono ngakho, ngakho kubheke njengebhuloho lohambo olulodwa hhayi njengesakhiwo.

Biza indlela yokubuyela emuva ngaphambi kokuyigcina

I-TCP ngaphakathi kwe-TCP inenani elaziwayo. Uma ukuxhumana kwangaphandle kuyi-TCP futhi umthwalo nawo uyi-TCP, ingxenye elahlekile ibangela ukuthunyelwa kabusha kuzo zombili izingqimba, futhi ukuxhumana kwangaphakathi kuhlehla ekulahlekelweni elingakwazi ukukubona. Ukuphequlula kuyakubekezelela; izikhathi zokusebenzisana kanye nezingcingo kuyakuzwa. Gcina isilaleli se-TCP 443 njengendlela yokubuyela emuva kwezinethiwekhi ezikudingayo, futhi uyeke i-UDP ibe yimizekelo kukho konke okusayivumelayo ukuba idlule.

Rekhoda ukukhetha egameni lephrofayela nasemibhalweni yosekelo: yiliphi ikhwebo, wuluphi uhlelo futhi iyiphi inethiwekhi eyikubangelayo. Bese ubuza umlawuli wenethiwekhi ukuthi ikhwebo lizoqhubeka livulekile yini ngemuva kokushintshwa kwemishini okulandelayo, ngoba indlela yokubuyela emuva enyamalalayo buthule iyimbi kunokungabi nayo nhlobo.