I-VPN yocingo iya ekhaya: yenza i-firewall ibe yisiphumelelo sakho se-inthanethi

Ukuxhuma ucingo kumhubhe wasekhaya nokuvula ukwabelana ngamafayela e-LAN kufakazela ukuthi umhubhe uyasebenza. Akufakazeli ukuthi izicelo ze-inthanethi zocingo ziphuma ngasekhaya. Umehluko phakathi kwale miphumela emibili inqubomgomo yokudlulisela kanye nomzila, hhayi elinye ibhokisi lokumaka ocingweni. Futhi umehluko abantu abaningi abacabanga ukuthi basebewuhlehlile.

Izinqumo ezintathu zakha umzila wokuphuma: ukuthi ucingo luthumelani kumhubhe, ukuthi isango lasekhaya likudlulisela kuphi, nokuthi kwenzekani uma umhubhe ungekho. Ngakunye kunesimo sokwehluleka esibonakala sicimile kusukela kusikrini socingo njengezinye.

Ukugxuma kabili, izinqubomgomo ezimbili

Uxhumano lwangaphandle luphela kumlaleli we-VPN wasekhaya. Iphakethe langaphakathi liyinto ehlukile okufanele idluliselwe kwenye indawo, futhi ukudlulisela kuyisinqumo se-firewall esihlukile ekwamukeleni umhubhe ekuqaleni.

phone app -> encrypted tunnel -> home listener
          -> decrypted packet -> forward policy -> home uplink -> destination

Kwi-router yasekhaya ejwayelekile lezi zihlala kumasethi emithetho ehlukene. Ukwamukela umhubhe kuyinqubomgomo yokufaka kusixhumi se-VPN; ukuthumela ithrafikhi yocingo ku-inthanethi kuyinqubomgomo yokudlulisela kanye nokuhumusha komthombo okudingwa yi-uplink. I-router eyamukela umhubhe futhi engadlulisi lutho ikhiqiza ucingo olubonisa ukuhlangana futhi olungalayishi ikhasi.

Uma isevisi ye-VPN isebenza kumshini ohlukile ngaphakathi kwekhaya, engeza ukugxuma. Manje i-router isibona ithrafikhi evela kulo mshini, ngakho imithetho yayo isebenza ekhelini leseva hhayi ekhelini lomhubhe wocingo, futhi ukuhumusha komthombo kungenza ucingo ngalunye lubonakale njengomsingathi oyedwa.

Umlaleli akusona isihlungi

Nquma ukuthi ukuphoqelela kwenzeka kuphi ngenkathi ulwazi oluludingayo lusekhona. Ku-router, ikheli lomhubhe wocingo liyabonakala futhi lingaqhathaniswa ngqo. Ngemuva kokuhumusha kwesibili alisekho, futhi imithetho ebhalelwe ikheli locingo ayihambisani nalutho ngokuthula.

Lesi yisizathu esijwayelekile sokuthi inqubomgomo isebenze kwi-laptop hhayi ocingweni. I-laptop ixhuma ngqo ku-router, ucingo luxhuma kuseva edlulisela nge-router, futhi umzila wokuqala kuphela ogcina ikheli elilindelwe umthetho. Umthetho awunaphutha; uqhathanisa inani elingasekho kulelo phuzu.

Bhala umzila kanye nekheli lomthombo njengoba libonakala endaweni ngayinye yokuphoqelela. Lowo mdwebo owodwa uxazulula iningi lalezi zimo ngaphambi kokuthi noma yimuphi umthetho uhlelwe.

Ucingo kufanele luthumele ini ngempela

Ucingo oluthola kuphela umzila oya kunethiwekhi encane yasekhaya luthumela kuphela ithrafikhi yaleyo nethiwekhi encane emhubheni. Konke okunye kuphuma ngenethiwekhi yeselula, yingakho ukwabelana ngamafayela kusebenza futhi izicelo ze-inthanethi azifiki neze ekhaya.

Ukumboza okuphelele komhubhe yisinqumo somzila ohlangothini lwekhasimende, futhi kufanele kusethwe ngendlela esekelwa ipulatifomu, hhayi kuqagelwe kusukela kuphrofayela efakiwe. Uma sekusethiwe, umzila obuyela kuseva ye-VPN uqobo kufanele uhlale ngaphandle komhubhe, kungenjalo ikhasimende ngeke likwazi ukugcina ezokuthutha kwalo.

I-DNS ifanelwe isinqumo sayo, ngoba iyingxenye okungenzeka kakhulu ukuthi yehluke kusuka kwenye ithrafikhi. Ikheli lesixazululi kuphrofayela liyisiphakamiso amakhasimende aliphatha ngendlela ehlukile, futhi uhlelo olunesixazululi salo esifihliwe lungathatha umzila ohluke ngokuphelele. Uma inqubomgomo yasekhaya incike ekutheni izicelo zifinyelela isixazululi esithile, yiphoqelele lapho ithrafikhi idlula khona ngempela, noma wamukele ukuthi ezinye izicelo ngeke zenze njalo. Isicelo esedlula isixazululi sakho asifiki neze emthethweni obhalelwe sona.

I-IPv6 isesigabeni esifanayo ne-DNS, hhayi kwisengezo. Umhubhe ogcwele we-IPv4 awusho lutho ngenhla kwethrafikhi ye-AAAA, futhi ucingo olukunethiwekhi yeselula enezendlalelo ezimbili luzosebenzisa ngenjabulo umzila wendabuko kulokho. Khetha ukuthutha noma ukuvimba ngokucacile.

I-firewall ingabona ini futhi ingakwazi ukubona ini

Isango lingenza okuthile mayelana nalokho okuvezwa yiphuzu laso lokuphoqelela: amakheli, izimbobo, iprotocol, isixhumi kanye nemethadatha yoxhumano. Isicelo se-HTTPS esidlulisiwe asinikezi umzimba wekhasi noma iphasiwedi ngoba nje sidlula emhubheni wasekhaya.

Lowo mkhawulo kufanelekile ukuwusho ngoba isisho esithi «sidlulise nge-firewall» sisho ukuhlola okungaphezulu kwalokho okwenziwa i-router yasekhaya. Umthetho wendawo ekuyiwa kuyo, inqubomgomo ye-DNS kanye nommeleli wezinga lohlelo yizilawuli ezintathu ezihlukile ezinezindleko ezintathu ezihlukile zokusetshenziswa.

Ungacabangi ukuthi isici esilungiselelwe amakhasimende e-LAN yasekhaya sisebenza nakusixhumi se-VPN. Ubulungu besifunda ukukhetha kokulungiselela, futhi isixhumi se-VPN esingekho esifundeni esifanele asitholi noma yimuphi umthetho owuzamile kusukela kusofa.

Nquma isimo sokunqanyulwa

Uma umhubhe ungatholakali, ucingo lubuyela kunethiwekhi yeselula noma lwenqaba ukuthumela ithrafikhi. Kokubili kunengqondo, futhi kukodwa kuphela okuhambisana nalokho abantu abaningi abakholelwa ukuthi bakulungiselele.

Ukubuyela emuva kukulungele futhi kuyavuzwa ngokwencazelo: isikhathi umhubhe owa ngaso yisikhathi izicelo eziphuma ngaso ngomzila womhlinzeki. Ukuvimba kunamandla futhi kwenza ucingo luncike ekutheni ikhaya lifinyeleleke, okuyindleko yangempela yokutholakala kumuntu ohambayo. Akukho kuziphatha kokubili okuyiphutha; kokubili kuyimikhiqizo, futhi ukhetha phakathi kwako noma ungakusho noma cha.

Hlola ukukhetha esikhundleni sokucabanga. Misa isevisi yasekhaya, bese uzama isicelo esisodwa kusiphequluli socingo nesinye kusuka kuhlelo olusebenza ngemuva. Ukuxhuma futhi kamuva akubuyiseli emuva izicelo esezivele zaphuma.

Qeda ngokuhlola okubili okulawulwayo kusuka ocingweni uqobo: umsebenzi owodwa ovunyelwe okufanele udlule ekhaya, nokwenqatshwa okukodwa okufanele kuphoqelelwe inqubomgomo yasekhaya. Qinisekisa ukuthi isango larekhoda ukugeleza obukulindele, emndenini wamakheli obukulindele, ngemuva kokuxhuma futhi. Ucingo olubonisa «Kuxhunyiwe» luwukuqala kwalokho kuqinisekisa, hhayi neze ukuphela.