I-kill switch yesicelo ngasinye uma kuqhathaniswa nokukhiya idivayisi yonke: yini eshintshayo
Nquma ngokwesethi evikelwe, hhayi ngelebula: yini ema ezinhlelweni ezikhishiwe, abasizi basemuva kanye nokuxhumana okusha, nokuthi ungahlola kanjani icala ngalinye.
I-kill switch yesicelo ngasinye izwakala njengokukhetha ngokuqapha: lapho umhubhe uwela, iklayenti lomsebenzi kuphela elahlekelwa inethiwekhi yalo, futhi konke okunye kuqhubeka kusebenza. Bese kuthi othile abone ukuthi isiphequluli somuntu kuqhubekile silayishe ikhasi, umsizi wokuvumelanisa ohamba naleso sethi uqhubekile uzama, futhi igama eligcinwe kunqolobane lisaxazululwa likhombisa ikheli elingakaze lihlangane nomhubhe. Ilebula elisesicini kanye nesethi yokuxhumana esivikela ngempela kuyizinto ezimbili ezihlukene. Qala ngokuthola isethi evikelwe, ngoba yiyo le sethi enquma ukuthi ukuphoqelelwa kwesicelo ngasinye noma ukukhiya idivayisi yonke ukuchazwa okuqotho.
Qala ngesethi, hhayi ngelebula
Inqubomgomo yesicelo ngasinye ivikela izinhlelo ezikhethiwe. Ukukhiya idivayisi kubhekisa emngceleni wenethiwekhi obanzi, ngokuvamile okunezihlobo ezibhalwe phansi zokuphrinta kwasendaweni, ithrafikhi yokuphatha noma amasango e-captive. Alikho ilebula eliphelele kuze kube yilapho uphendula imibuzo emithathu: kwenzekani ezinhlelweni ezikhishiwe, kwenzekani kubasizi eziletha lezo zinhlelo, futhi kwenzekani ekuxhumaneni okuvulwa ngesikhathi ukuvikelwa kungatholakali.
Bhala lezo zimpendulo ngaphambi kokuthinta noma yisiphi isilungiselelo sekliyenti. Uma isidingo sithi "leli klayenti lamaholo akufanele lize likhulume ne-intanethi ngaphandle komhubhe, futhi isiphequluli sami singakhuluma", isethi incane futhi ukuphoqelelwa kwesicelo ngasinye kuyafaneleka. Uma isidingo sithi "akukho lutho kule divayisi olufinyelela ku-intanethi ngaphandle kokuvikelwa, ngaphandle kwesevisi yokubuyekeza", asikho isicelo ngasinye inqubomgomo ezingakukhiqiza lokho, ngoba izinhlelo ongazishongo yizo inkinga.
Ukuphoqelelwa kwesicelo ngasinye kuhambisana nezihlonzi, hhayi amagama ezinhlelo
I-Android iveza i-VPN yesicelo ngasinye ngamaphakethe, futhi incwadi ye-VpnService yayo ichaza ukuthi lokho kusebenzisana kanjani nokusebenza okuhlale kuvuliwe nokuvimbela. I-iOS icwangcisa i-VPN yesicelo ngasinye ngephrofayela yokuphatha futhi ihambisana ngohlelo noma ngesizinda. I-Windows ne-Linux azinawo nhlobo umzila wokuhamba ngokwenqubo, ngakho lowo mqondo ulinganiswa ngomthetho we-firewall obekelwe uhlelo noma umthetho ohambisana nomsebenzisi ongumnikazi.
Umngcele yisihlonzi, futhi izihlonzi kulula ukuzidlula. Uhlelo olunikeza i-URL kusiphequluli sohlelo, noma oluvula idokhumenti kusibonisi, ludlulela kunqubo inqubomgomo yakho engakaze iyisho. Inketho yokunqamula lapho kuwela nayo ayisona isihlungi samaphakethe: ibulala uhlelo olulucwangisile, kuyilapho inqubo eyingane, isisebenzi somugqa noma ithebhu yesiphequluli kungagcina isokhethi ekhona iphilile.
Ukukhiya kumboza lokho inqubomgomo yesicelo ngasinye engakwazi ukukubona
Ukukhiya idivayisi yonke kususa ukukhetha. Wonke amaphakethe aphumayo angewona owomhubhe ayaphonswa, kuhlanganise nethrafikhi evela ezinqubo inqubomgomo yakho yezinhlelo engakaze izazi. Ku-Android lokho yi-VPN ehlale ivuliwe ehambisana nesilungiselelo sokuvimbela ukuxhumana, futhi ukuphoqelelwa kwenzeka ohlelweni, hhayi efasiteleni lekliyenti. Kudeskithophu umthetho we-firewall ohlala ukhona noma umzila ozenzakalelayo okhombisa isango elingafinyeleleki.
Izindleko zukuthi konke okunye kuyama, ngakho izihlobo ziba yingxenye yomklamo hhayi umcabango wakamuva. Amaphrinta asendaweni, ukutholakala kwesevisi, ukungena emasangweni e-captive, abameleli bokuphatha kanye nokubuyekezwa kwe-OS ngakunye kudinga imbobo ebhalwe phansi, ngoba ngakunye kuyindlela ehlala ivulekile lapho umhubhe uwile. Ukukhiya kunamandla alingana nokungena okufushane kakhulu kulolo hlu.
I-DNS, i-IPv6 kanye nabasizi basemuva kufihla ukuvuza
Ukwehluleka kohlelo oluvikelwe ukuxazulula igama akufakazi ukuthi izimpendulo ezigcinwe kunqolobane noma ithrafikhi ye-IP eqondile ivinjiwe. Uma isixazululi sisafinyeleleka ngaphandle komhubhe, igama liyaxazululwa futhi ukuxhumana kuyahluleka, lokho kubonakala njenge-kill switch esebenzayo futhi akunjalo. Okubi kakhulu, irekhodi eligcinwe kunqolobane lingakhombisa ikheli umhubhe ongaluthwalayo, ngakho ukuxhumana kuphuma ngqo kuyilapho uhlelo lubika iphutha le-VPN.
I-IPv6 idinga umthetho wayo kuyo yonke inkundla eyisebenzisayo, ngoba umthetho wokuwisa we-v4 awumbozi umzila we-v6. Kuselula, isilungiselelo se-DNS esiyimfihlo singahambisa ukuxazulula endleleni ebethelwe inqubomgomo yedivayisi engayihloli. Futhi abasizi basemuva bayisigebengu esivamile kudeskithophu: inqubo yokubuyekeza noma yokuvumelanisa ethreyini iqala ngaphambi kwekliyenti ye-VPN futhi igcina ukuxhumana kwayo, ngakho ayikaze ibone umzila oshintshile.
Hlola izinhlelo ezintathu nezinguculo ezimbili
| Test | What it proves |
|---|---|
| Included app, by name and by direct IP | the policy is applied, not just the resolver |
| Excluded app, same checks | the exclusion is intentional and documented |
| Helper or updater process | nothing inherited an older route |
| Tunnel drop, then Wi-Fi to cellular | the block survives the transition |
Gijima umugqa ngamunye kabili, kanye ngegama lomsingathi futhi kanye ngekheli elingqo, futhi kanye futhi nge-IPv6 uma inethiwekhi ikunikeza. Ukuphumelela kusho ukuthi uhlelo olufakiwe lwama, olukhishiwe lwenze njengoba ubhalile, futhi umsizi akazange ashelele ngaphandle. Bhala ukuziphatha okuqondile okuthathe njengokwamukelekayo, ukuze umphathi olandelayo ahlukanise isihlobo esenziwe ngamabomu nokwehluleka.
Bese uchaza umphumela ngomusho owodwa osho izinhlelo nezimo, isibonelo: iklayenti lamaholo alinawo umzila ngaphandle komhubhe, isiphequluli siqondile ngokomklamo, futhi konke okunye kuyama lapho umhubhe uwile. Uma lowo musho kunzima ukuwubhala, inqubomgomo iseyizinqubomgomo ezimbili ezilwela komunye.