I-Wi-Fi yomphakathi ne-VPN: lokho umhubhe ongakumbozi

Ibheji eliluhlaza, iphothali eyanelisekile, isiphequluli esisebenzayo: yiwona wonke umlando obonakalayo. Lokho ibheji elikushiya ngaphandle ukuthi uxhumano olubethelwe luthwalwa yisixhumanisi esingenantambo esifanele sikuvikele kuso. Leso sixhumanisi sisahambisa iphakethe ngalinye, sisabona ikheli lomgomo, futhi sisahlulela ukuthi kukhona okufikayo noma cha. Ukuhlola uhlangothi lwekhompyutha ephathekayo koxhumano lwasehhotela kukhombisa ukuthi yiziphi izingxenye umhubhe ozimbozayo futhi yiziphi azishiya kuwe.

Isixhumanisi sokufinyelela sithwala konke

Umhubhe we-IPsec ESP usonga iphakethe langaphakathi elivikelwe ngaphakathi kwekhanda langaphandle inethiwekhi engalihambisa ngalo, futhi RFC 4303 isigaba 3.1.2 sichaza lokho kwehlukanisa. Iphakethe langaphakathi yilokho umhubhe okukuvikelayo. Ikhanda langaphandle yilokho i-hotspot ekufundayo ukuze ilidlulise. Amanye amadizayini ahlanganisa ngendlela ehlukile, kodwa umbuzo wokuhlela uyafana: iyiphi indlela yokufinyelela ethwala lolu xhumano?

Ukwehluleka kwegesi noma isixhumanisi esilahla amaphakethe kumisa ukulethwa ngaphandle kokuveza okuqukethwe. Ukushintshela kubethelo oluqinile akusizi kulokho, ngoba ingxenye engekho ukuthutha, hhayi ubuchwepheshe bokubethela. Ukulethwa okuphumelelayo kufakazela okuncane ngokufanayo kwelinye iceleni, ngoba indlela esebenzayo ayisho lutho mayelana nesimo sanoma yimuphi walemishini emibili.

Ikhompyutha yakho ephathekayo iseneminyango yayo

Ukujoyina isigaba esingathenjwa kushintsha ukuthi ubani angafinyelela kumachweba umshini wakho olalela kuwo. Insizakalo yokwabelana ngamafayela, i-ejenti yokuphatha kude noma iseva yentuthuko eboshelwe kuzo zonke izixhumanisi iyatholakala yinoma ubani kuleso sigaba ngaphandle uma kukhona okumisayo. Ithrafikhi engangeni emhubheni ayivikelwe yiwo. Umamukeli ophendula ngaphambi kokuba umhubhe ukhuphuke uvezwa ngqo kuleyo windi.

Isidingo sincane futhi kufanele sisho ngokunemba: ikhompyutha ephathekayo kufanele ifinyelele iphoyinti lokugcina le-VPN, futhi amadivayisi angenawo umxhumanisi e-hotspot akufanele afinyelele izinsizakalo zasendaweni. Imithetho ye-firewall yomsingathi iveza lowo mkhawulo, futhi nezilungiselelo zokwabelana zaleplatifomu ngokwazo ziveza ingxenye yawo. Iphrinta noma isinyathelo sephothali kuyisikhathi esilinganiselwe osengeza ngamabomu, hhayi ubufakazi bokuthi yonke i-hotspot ifanele ukwethenjwa kwe-LAN yasehhovisi.

Ezinye izinhlangano zibuye zikhawulele ukufinyelela kwasendaweni ngenkathi uxhumano lomsebenzi lusebenza, futhi lokho kuyinqubomgomo hhayi ubunjiniyela. Funda leyo nqubomgomo ngaphambi kokucisha i-firewall ukuze idivayisi yangaphandle isebenze.

Hlola ukuthi yini ngempela elalelayo

Bheka amasokhethi hhayi ikhasi lezilungiselelo, ngoba ikhasi lichaza inhloso kanti ithebula lamasokhethi lichaza umshini. Izinhlu ezimbili ezingezansi zihlukanisa isokhethi ngasinye elalelayo kulezo umakhelwane angafinyelela kuzo. Bazisebenzise esigabeni esingathenjwa ngaphambi kokuxhuma umhubhe.

ss -lntu
ss -lntup | grep -v 127.0.0.1
resolvectl query vpn.example.net

Umyalo wokuqala ukhombisa wonke amasokhethi, futhi owesibili uhlunga lawo aboshelwe ngaphandle kwe-loopback. Insizakalo ku-0.0.0.0 noma ku-:: iyatholakala kuzo zonke izixhumanisi, kuhlanganise nesingenantambo, kanti leyo nsizakalo efanayo ku-127.0.0.1 ayifinyeleleki nhlobo kusuka esigabeni. Umbuzo wesixazululi uqinisekisa ukuthi igama lihamba ngakuphi uhlangothi ngaphambi kokuba umhubhe ube khona, futhi yilapho iziphothali eziboshiwe ziphazamisa khona. Phinda uhlu ngemva kokuxhuma, ngoba amanye amaklayenti aphakamisa izixhumanisi eziguqula impendulo.

Ichweba elivela kuphela ngenkathi umhubhe ukhuphukile alivulekile kangako, nakuba kusafanele kwaziwe ngalo. Bhala umehluko hhayi uhlu oluphelele, ngoba i-delta yiyo eyengezwe umhubhe.

Ungamukeli ubunikazi obusha phakathi nesikhathi seshoni

Ukushintsha komzila okungalindelekile, ukuxhuma kabusha noma ukuqondiswa kabusha kwephothali akusona isigunyazo sokwamukela ubunikazi besiseva esihlukile. Uma iklayenti libika ukungafani kwesitifiketi noma ukhiye, kuthathe njengokutholakele kobunikazi hhayi njengoxhumano okufanele lugwenywe. Ukufaka isitifiketi sempande esingachazwanga ukuze iphothali isebenze kuguqula inkinga yokulethwa ibe inkinga yokuthembana. Khona-ke inkinga yokuthembana iphila isikhathi eside kunohambo olwayidala.

Sebenzisa ukugeleza kwesiphequluli sephothali ngokwaso, bese uxhuma umhubhe futhi ufunde kuyilogu yeklayenti ukuthi yibuphi ubunikazi elibuqinisekisile. Ukwehluleka kobunikazi kusho ukuthi uhlangothi olulandelayo akusona lowo obulindele, kanti ukwehluleka kokulethwa kusho ukuthi uhlangothi olulandelayo alukaze luphendule. Okokuqala yisizathu sokuma, futhi okwesibili yisizathu sokuzama omunye umzila.

Qala ngokunquma ukuziphatha ngesikhathi sokuphazamiseka

Lapha kuhlanganiswa izici ezimbili ezihlukile. Ukuxhuma kabusha kuzama ukubuyisela insizakalo, kanti inqubomgomo yokuvimba ilawula ukuthi iyiphi ithrafikhi evunyelwe ngenkathi umhubhe uphansi. Akukho kukho okunikeza isixhumanisi esingenantambo esisebenzayo, futhi akukho kukho okufakazela ukuthi iphoyinti lokugcina lihlanzekile. Khetha ngokucacile: ukwehluleka okuvaliwe kwezinhlelo zokusebenza ezingakufanele neze zisebenzise umzila wasendaweni, futhi uvumele ukuphequlula okuvamile ngaphandle komhubhe uma lokho kwamukelekile.

Bhala ukukhetha, ngoba okuzenzakalelayo kumaklayenti amaningi akusikho noma yikuphi kwalokhu, futhi kuyehluka ngenguqulo. Bese uhlela indlela yokufinyelela ehlukile uma ukutholakala kubalulekile, njenge-hotspot yocingo enohlelo lwayo lwedatha. Ukuhlolwa kokwamukela okwamukelekayo kunemiphumela emithathu ehlukene: ithrafikhi ehlosiwe isebenzisa umhubhe oqinisekisiwe, abalaleli basendaweni abangahlobene abafinyeleleki, futhi ukuphazamiseka kukhiqiza ukuziphatha okukhethile.