Ikheli lomlingani lishintshile phakathi kwesikhathi seseshini: yini eyenziwa yi-float ku-OpenVPN

I-laptop isuka ku-Wi-Fi yasehhovisi iye ku-hotspot yocingo, umhubhe uhlala eminye imizuzwana embalwa, bese ukuhamba kuyama ngenkathi isixhumi sisathi sixhunyiwe. Kuseseva, uhlu lwesimo lusabonisa ikheli lomphakathi elidala. Lesi yisimo i-float ekhona ngaso, futhi futhi yisimo lapho abantu belindele okuningi kakhulu kunalokho ekwenzayo. Ukuqonda umngcele ngendlela efanele kuguqula ukuma okudidayo kube ukushintshwa kokumiswa komugqa owodwa noma uphenyo oluhluke ngokuphelele.

Yini i-float eyixegisayo, futhi yini engayixegisi neze

Ngokuvamile iseshini iqhubeka ikhuluma nekheli langaphandle kanye nechweba eyaqala ngakho, futhi amaphakethe avela kunoma yikuphi okunye ayashaywa indiva. Inketho ye-float isusa lokho kubopha okuqinile lapho umlingani esezibonakalisile, ngakho ukuhlelwa komthombo okushintshile kungaqhubeka nesesishini elifanayo esikhundleni sokulahlwa. Akukho okushintshayo ekuhlolweni kwe-cryptographic: okhiye, izitifiketi kanye nanoma yikuphi ukuvikelwa kwe-HMAC kuhlala njengoba kulungisiwe.

Lesi yisinqumo sephakethe ngalinye, hhayi inqubomgomo yokuthi ubani angaxhuma. Umshini ongaziwa othumela iphakethe elivela kukheli elisha awubonisanga lutho, futhi iphakethe lakhe liyalahlwa njenganoma yikuphi okunye ukuhamba okungagunyaziwe. Ukuhamba kuphela okudlula ubuqiniso beseshini uqobo okungahambisa ikheli lomlingani elirekhodiwe, yingakho kuphephile ukushiya i-float ivuliwe ezindaweni lapho amaklayenti ezulazula khona.

Futhi ayisho lutho ngomhubhe wangaphakathi. Ikheli langaphandle elihanjisiwe alinikezi kabusha ikheli lomhubhe, alishintshi ichibi futhi aliniki umlingani ukufinyelela kokuthile okusha. Ngaphakathi kumhubhe, ubunikazi obufanayo nemizila efanayo ephushiwe kuyasebenza ngaphambi nangemva kokuhanjiswa. Ukuzulazula futhi akuxoxisani kabusha ngesiteshi sedatha, ngakho ukubethela nokhiye okuvunyelwene ngakho kuyaqhubeka.

Iphakethe elihambisa iseshini kumele ligunyazwe

Qala iseshini ngendlela evamile ngokumelene nokude okulungisiwe, futhi i-float ibhekana nokwenzekayo lapho ukuhlelwa kushintsha. Umshamba weselula oshintsha izinombolo phakathi nokugeleza, isango le-NAT elibhala kabusha ukuhlelwa kwechweba lalo, noma i-laptop eshintsha isixhumanisi esiphezulu konke kukhiqiza isimo esifanayo: amaphakethe agunyaziwe avela ku-tuple entsha, afika eseshini esakholelwa kwelidala.

Lapho kubuzwa ukuthi i-float iyasebenza yini, ubufakazi obusizo ukuxhawulana okuqediwe okulandelwa ukushintsha komthombo okwamukelwe, hhayi umugqa wokubhalisa mayelana nekheli kuphela. Xhumanisa ikheli langaphandle elidala nelisha neseshini eyahlala iphila, bese uqinisekisa ukuthi ukuhamba kwaqhubeka ngempela kudlula emhubheni.

Uma iseshini ifa esikhundleni sokuhamba, iphakethe elavela kukheli elisha cishe lehluleka ukuqinisekiswa noma alifikanga nhlobo. Zombili izimo zibukeka zifana kusukela kuklayenti. Kuseseva, ukubanjwa kusixhumi somphakathi kukutshela ukuthi yikuphi okukho ngaphambi kokuthinta noma yikuphi ukumiswa.

Ukuthola kuyindlela ehluke ngokuphelele

I-float ayixazululi amagama ngesikhathi, futhi ayilandeli irekhodi le-DNS eliguqukayo. Uma igama lomsingathi weseseva liqala ukuxazululeka kukheli elisha, iklayenti elingasebenzi alinasizathu sokukuqaphela futhi alinaphakethe elivela esiphethweni esisha elingasiqinisekisa. Leyo nkinga ingeyomqondo wokuxhuma kabusha, ukuziphatha kweklayenti uqobo kokuzama futhi kanye ne-DNS, hhayi eye-float.

Ukungeza inketho futhi akukwazi ukunxephezela ukuntuleka komzila okhombisa ikheli elisha. Futhi akusizi lapho umlingani uthule, ngoba umlingani othule akalokothi athumele iphakethe eliqinisekisiwe elingahambisa okuthile.

Ucingo lomlilo olungaphansi nalo lunephimbo. Umthetho ovumela kuphela isiphetho sangaphandle esidala uvimba ikheli elishintshile ngaphambi kokuba OpenVPN likubone, futhi akukho kumiswa kohlangothi lweklayenti okulungisa lokho. Buyekeza umjikelezo wokuphila wamakheli avunyelwe njengomsebenzi ohlukile; ukwandisa umthetho kuwo wonke umthombo kushintshanisa inkinga encane ngenkulu.

Lapho i-NetworkManager ingumnikazi wephrofayela

Iphrofayela yomugqa womyalo kanye nokuxhumana okungenisiwe kuyizilungiselelo ezihlukile, futhi ukuhlela okukodwa akukuthinti okunye. Ngaphambi kokucabanga ukuthi inketho ayisekelwe, thola ukuthi iphrofayela egciniwe isebenzisa hlobo luni lwe-plugin futhi amanani ayo ahlala kuphi. I-UUID yephrofayela iyisihlonzi esibalulekile lapho uhlola noma ushintsha okuthile.

Hlola ukuxhumana okugciniwe hhayi ifayela lokuqala lokungenisa. Umugqa osele kufayela le-.ovpn awufakazi lutho uma umphathi osebenzayo engazange awusebenzise, futhi isihleli esingenabo ibhokisi lokumaka senketho ethile naso asifakazi lutho mayelana namakhono omthetho wokusebenza.

Ungaxhumanisi i-plugin epakiwe ukuze wengeze ukuziphatha, ikakhulukazi hhayi nge-diff ebhalelwe inguqulo yomlando yengxenye engahlobene. Uma ukuhlanganisa okufakiwe kungakwazi ngempela ukuveza leso silungiselelo, isinyathelo esifanele iphrofayela esekelwayo noma enye indlela yeklayenti egunyazwe umnikazi wokufakwa.

Fakazela ukudlula esikhundleni sokucabanga

Gijimisa ukuhlolwa ngendlela ukwehluleka okwenzeka ngayo. Xhuma, qinisekisa ukuhamba kudlula emhubheni, phoqa ikheli langaphandle ukuthi lishintshe, bese uhlola izinto ezintathu: iseshini isekhona, ikheli lomlingani elirekhodiwe lihambile, futhi isicelo sangempela sisafinyelela lapho siya khona. Noma yini engaphansi kwezintathu iyimpendulo eyingxenye.

Gcina ukufinyelela kokulungisa kutholakala ngenkathi uhlola, ngoba izivivinyo zokuzulazula zivame ukushiya umshini osebenza kuwo ubambekile. Ikhonsoli ye-serial noma umzila ongaphandle kwebhendi kuguqula ukuhlolwa okwehlulekile kube ukulungiswa kwemizuzu emihlanu esikhundleni sokuvakasha endaweni.

Ekugcineni, chaza kuphela isimo osivivinyile. Ukushintsha kwekheli okuphumelelayo phakathi neseshini akubona ubufakazi bokuthi ukufuduka kwe-DNS, okunye ukuqaliswa kweklayenti noma iphrofayela eyakhiwe kabusha kuzoziphatha ngendlela efanayo. Imibhalo ye-link-options isho ubukhulu bale nketho ngokunembile; irekhodi lakho lokuhlola kufanele lisho ukuthi iyiphi ingxenye yalobo bukhulu oyihlanganisile ngempela.