proto udp noma tcp-client: iyiphi iseva yakho eyizwayo?

Iphrofayela eyayisebenza ngenyanga edlule manje isiphelelwa yisikhathi, futhi othile uphakamisa ukushintsha proto udp ibe proto tcp-client. Ngezinye izikhathi leso yisinyathelo esifanele, ngezinye izikhathi kudala iklayenti elixhuma embundwini okungekho okulalelayo, ngoba iseva ayikaze ilungiselelwe olunye uhlobo lokuthutha. Lo myalelo uchaza ukuthi uhlangothi lwakho lukhuluma kanjani; awukwazi ukudala isilaleli kolunye uhlangothi. Funda iphrofayela neseva ndawonye ngaphambi kokushintsha noma yikuphi kukho.

Funda uhlobo lokuthutha olusetshenziswa ukuxhumana okukhethiwe

Iphrofayela ingaqukatha imibhalo eminingi ye-remote, futhi ngamunye ungasho uhlobo lwakho lokuthutha. Iklayenti iyidlula ngokulandelana, ngakho umugqa owubona kuqala awuyona ngempela esebenzayo.

Thola umbhalo ozanywa ngempela, bese ufunda uhlobo lwawo lokuthutha. Ukulandelana kubalulekile, ngoba iklayenti ayidluli ngokuthula iye kolandelayo. Amanye amabhilidi azama umbhalo olandelayo kuphela ngemva kokuphela kwesikhathi, ngakho enye indlela esebenzayo engaphansi kwefayela ifinyelelwa ngemva kwemizuzwana embalwa kunalokho obukulindele. Bheka kulogi ukuthi iyiphi indawo yokugcina ezanywayo esikhundleni sokucabanga ukuthi umugqa wokuqala uwine.

Uma ifayela linomugqa owodwa we-proto eduze kwaphezulu nemibhalo eminingi ye-remote ngaphansi kwawo, lowo mugqa uyisisekelo kunoma iyiphi i-remote engayidluli. Ukuhlela kwasekhaya kwesisekelo akwenzi lutho kumbhalo we-remote osho uhlobo lwawo lokuthutha.

grep -nE '^(remote|proto)\b' client.ovpn

I-UDP ne-TCP akusona isethingi sesivinini

I-UDP ithumela amadathagramu ngaphandle kokwakha ukugeleza okuhleliwe, ngakho ithrafikhi yethaneli uqobo ayigoqwa kolunye uhlobo lokuthutha olwethenjwayo. I-TCP ikunikeza indlela enqamula amanethiwekhi alahla noma avimba i-UDP, ngezindleko zokudlulisela kabusha okugxilile okungase kwenze isixhumanisi esilahlekelayo sizwakale sibi kakhulu.

Lokhu ukushintshana kokufinyeleleka, hhayi ukuhlelwa komhlaba wonke. Ukukhetha okulungile yilokho amanethiwekhi angaphambi kweklayenti akwamukelayo. Indlela elahla i-UDP embundwini we-VPN ayisoze yaxoxisana, noma ngabe iphrofayela ibhalwe kahle kangakanani. Hlola indlela, bese ukhetha uhlobo lokuthutha.

Ukukhetha phakathi kwazo ngokusekelwe kuphela esilinganisweni kuyiphutha, ngoba impendulo incike kulokho amanethiwekhi angaphambi kwakho akwamukelayo. Ihhotela noma i-proxy yenkampani ingase ivumele i-TCP ephumayo kokungu-443 futhi akukho okunye, yingakho abahlinzeki banikela lolo hlobo. Kuhlala kuwukuxhumana kwe-OpenVPN kuleyo mbundu, hhayi iseshini ye-HTTPS, noma ngabe inombolo yombundu ijwayelekile.

I-tcp-client isho ukuthini ngempela

Umyalelo ohlangothini lweklayenti usho uhlangothi oluqala ukuxhumana kwe-TCP. Uhlangothi lweseva lusebenzisa indlela yalo yokulalela, futhi ukukopisha igama leklayenti kusilungiselelo seseva kudala isilaleli esilindele ukushaywa ucingo, hhayi leso esamukelayo.

Ukufana kusho ukuthi izinhlangothi zombili ziyavumelana ngohlobo lokuthutha, hhayi ukuthi zabelana ngentambo efanayo.

grep -nE '^proto\b' /etc/openvpn/server/server.conf
ss -lntp | grep openvpn

Buza iseva ukuthi ilalelani ngaphambi kokucabanga ukuthi iphrofayela ayilungile. Isilaleli se-UDP asiveli ohlwini lwamasokhethi e-TCP, futhi okuphambene nakho kuyiqiniso, ngakho bheka umbono oqondene neprotocol esikhundleni sowonke.

Lapho iphrofayela ingenisiwe kodwa ingaxhumani nakanye

Iphrofayela engenisiwe ephelelwa yisikhathi ngokushesha ivamise ukwehluleka ngaphambi kokuhlolwa kokusebenza. Iphakethe liya embundwini ongenasilaleli, noma inethiwekhi ililahla ngokuthula.

Hlola indlela ngendlela elula kakhulu: xhuma kumphathi nambundu ofanayo ngohlobo lokuthutha olusho iphrofayela, kusuka kunethiwekhi efanayo neklayenti ehlulekayo.

Uma ukuhlolwa kwe-UDP kungatholi lutho kanti ukuhlolwa kwe-TCP kuyaxhuma, iseva inikela olunye uhlobo lokuthutha futhi iphrofayela isiphelelwe yisikhathi nje. Uma kungukho okuphendulayo, inkinga ingaphezu kokukhetha uhlobo lokuthutha futhi akukho ukuhlela kwephrofayela okuzoyilungisa. Ukuhlukanisa lezi zimo ezimbili kuthatha umzuzu futhi konga ihora lokulungisa amasertifikhethi okwakungakaze kuhlobane.

Bhala phansi uhlobo lokuthutha olusebenzayo

Lapho inhlanganisela isisebenza, bhala phansi kanye neseva, umbundu neprotocol, futhi uphawule ukuthi ihlolwe kusuka kunethiwekhi iphi.

Uma kungenjalo umuntu olandelayo ozohlangabezana nokuphela kwesikhathi uzophinda umhlolo ofanayo kolunye uhlangothi, futhi mhlawumbe ashintshe iseva eyayilungile.

Uma umhlinzeki eshicilela zombili izinhlobo, gcina womabili amafayela futhi uwamake ngokwenethiwekhi ekufanele. Amaphrofayela amabili anamagama acacile avimbela ukuhlangana ngengozi kohlobo lokuthutha lweklayenti nesilaleli seseva esingakaze silungiselelwe lokho.