Yimaphi amaphrothokholi alethwa ngempela yilesi sigxobo se-VPN somphakathi?
Ukuthi isofthiwe yeseva isekela iphrothokholi akusho ukuthi lesi sigxobo siyivulile. Hlola iphuzu lokugcina, iphrofayili kanye nesigaba esihluleka ngempela.
Isofthiwe iyisekela, ngakho isigxobo siyayiletha. Leso siphetho sinesiphambeko esivamile ngokwanele ukuba sibe umthetho: ukusetshenziswa kwe-SoftEther kungavula noma iyiphi ingxenye yezindlela zaso zokuxhumana ezihambisanayo, futhi isigxobo somphakathi ukusetshenziswa okunomnini nokuhlelwa. Ongakuxhuma kukho kuncike kuleso sigxobo, hhayi ohlwini lwezici zephrojekthi esiyisebenzisayo. Igebe phakathi kwalokhu kokubili yilapho iningi lamathikithi athi «iphrothokholi iphukile» lihlala khona ngempela.
Yini uhlu lwephrojekthi oluthembisa ngempela
Imisebenzi yephrothokholi yephrojekthi ichaza lokho iseva engakwenza. Isigxobo esithile sivula abanye balabo balaleli hhayi abanye, futhi umqhubi angashintsha lelo qoqo ngaphandle kokuthinta inguqulo yesofthiwe. Ngakho izigxobo ezimbili kukho ukwakhiwa okufanayo ziziphatha ngendlela ehlukile, futhi iphrofayili esebenza ngokumelene nesinye ayifakazi lutho mayelana nomgomo olandelayo. Uhlu lwesigxobo uqobo lunamandla angaphezu kwekhasi lephrojekthi lapho ukhetha ukuthi uzoxhuma kuphi.
Funda uhlu njengezinkambu ezinhlanu, hhayi njengemenyu: iphuzu lokugcina, imbobo, ukuthutha, umndeni wephrothokholi kanye nendlela yokuqinisekisa. Isigxobo somphakathi esikhangisa SSTP sikutshele ngomlaleli embobeni ethile; asikutshelanga ukuthi sethula isitifiketi sini noma ukuthi i-akhawunti yakho iyasebenza yini lapho. Ukuqhathanisa lezo zinkambu ezinhlanu nephrofayili yakho kushesha kunanoma yiliphi inani lokufaka kabusha iklayenti, futhi kwakha ukulindela okubhaliwe ongakuhlola kamuva.
Qondanisa iphrofayili nephuzu lokugcina elilikhonzayo
Ukungena kwe-SoftEther kwendabuko akusikho ngokuzenzakalela ukuhlelwa kwe-OpenVPN, ngisho noma kokubili kuvela ekhasini elilodwa lomhlinzeki ngaphansi kwesihloko esisodwa. Uma isigxobo sishicilela kokubili umlaleli we-TCP nowe-UDP we-OpenVPN, bazithethe njengezindawo zokugcina ezimbili: iphrofayili ehlelwe isuka kwesinye yaya kwesinye ikhomba umlaleli ongekho owayivula. Ilebula yokuthutha efayelini iyingxenye yekheli, hhayi ukuhlelwa kokuhlobisa.
Ukuthi iklayenti lamukele ifayela elingenisiwe kufakazela ukuthi ifayela liyahlaziywa. Akusho lutho mayelana nokuthi kukhona umlaleli okude olindile ngaphesheya, yingakho umzamo wokuqala wokuxhuma uwukuhlola kwangempela. Qhathanisa umugqa we-remote wephrofayili nomphathi nembobo emenyezelwe yesigxobo ngaphambi kokusola iphrothokholi.
Hlola isigaba esihlulekayo
Umphathi ophendula ithrafikhi yewebhu usengase ntubeke isevisi ye-VPN ehlosiwe, futhi umphathi onqaba iphrothokholi eyodwa akusho ukuthi uvaleleke kubo bonke. Lawo maphutha amabili athumela abantu ezinhlangothini eziphambene ntambama eyodwa. Omunye ujahe ucingo lomlilo olulungile; omunye ufaka kabusha iklayenti elalingakaze libe inkinga. Hlola indlela ngayinye ngokwehlukana ukuze impendulo ichaze umlaleli oyedwa hhayi umphathi wonke.
Lezi zivivinyo ezinhlanu zihlanganisa izindlela ezijwayelekile zezigxobo zomphakathi. Zisebenzise kusuka kunethiwekhi efanayo naleyo esetshenziswa iklayenti, ngoba imbobo ehlungiwe ibonakala ifana ncamashi nomlaleli ongekho uma ubuka kude.
nc -vz node.example 1194
nc -vz node.example 443
openvpn --config client.ovpn --verb 4
nmap -sU -p 500,4500 node.example
openssl s_client -connect node.example:443 -servername node.example| Umphumela | Isigaba | Yini ekushiyayo |
|---|---|---|
| Ukuxhumana kunqatshiwe noma isikhathi siphelile | Ukuthutha | Umlaleli ungekho, uhlungiwe noma imbobo engalungile |
| Iphutha lokuxhawula kwe-TLS noma lobuwena | Isitifiketi | Ukutholakala kwephrothokholi; umlaleli uphendule |
| AUTH_FAILED noma ukunqatshwa kwe-akhawunti | Ukuqinisekisa | Iphuzu lokugcina; inkinga isezimpawini zokungena |
| UDP 500 no-4500 bathule | Izingxoxo ze-IPsec | I-ESP ne-L2TP zivinjiwe ngaphambi kokuqinisekisa |
Hlanganisa iphutha ngalinye elibonakele nomugqa walo ngaphambi kokushintsha noma yini. Ukwehluleka kobuwena kwe-TLS kufakazela ukuthi umlaleli ukhona, ngakho ukubhala kabusha iphrofayili iye kwelinye iphrothokholi kungalahla ubufakazi obusebenzayo. Ukuxhumana okunqatshiwe kufakazela kuphela ukuthi le mbobo ayiphendulanga, okuyisitatimende esincane kakhulu kune-«isigxobo asisekeli i-OpenVPN».
Gcina iphutha ngaphambi kokushintsha noma yini
Bhala umphumela oqondile: ukuphela kwesikhathi, ukwehluleka kobuwena besitifiketi, ukunqatshwa kwe-akhawunti nokwenqatshwa ezingeni lohlelo yimiphumela emine ehlukene. Eyokuqala kuphela ephathelene nephrothokholi engatholakali, futhi eyokugcina kuphela ephathelene nemvume ngemva kokuxhumana okuphumelelayo. Ukusetha kabusha iklayenti noma ukushintsha amaphrothokholi kucekela phansi lowo mehluko, ngoba ukwehluleka okulandelayo kuza nomlando ohlukile futhi ngaphandle komugqa wesisekelo wokuqhathanisa.
Ungayenti buthaka ukuqinisekisa ukuze iphrofayili engahambisani ibonakale isebenza. Ukuhlolwa kwesitifiketi okuvaliwe kuguqula ukwehluleka kobuwena okucacile kube ukuxhumana nento obungahlosile ukuyifinyelela, futhi impumelelo evelayo imbi kakhulu kunephutha lokuqala ngoba ifihla ukuthi yisiphi isigaba esasingalungile.
Hlola futhi isigxobo ngasinye, ngaso sonke isikhathi
Izinketho zendabuko ze-SSL, i-OpenVPN, i-L2TP/IPsec ne-SSTP ohlwini lwesigxobo somphakathi zichaza ukuhlelwa kwalelo sigxobo ngaleso sikhathi. Isofthiwe efanayo kwenye indawo ingethula iqoqo elihlukile, futhi umhlinzeki angahoxisa umlaleli phakathi kwebhukimakhi yakho nomzamo wakho olandelayo. Amanothi amadala achaza ukusetshenziswa okudala.
Bhala iphrofayili eqinisekisiwe kanye nephuzu layo lokugcina nendlela, bese uphinda uphenye lapho isigxobo sishintsha noma ukuxhumana kuqala ukwehluleka. Incazelo yephrothokholi ye-SoftEther iyisikhombisi salokho isofthiwe engakwenza; uhlu lwesigxobo uqobo luyisikhombisi salokho esikwenzayo. Gcina imibhalo emibili ihlukene futhi ukuxilongwa kuba kufushane.