Buza iklayenti le-VPN ledeskithophu ukuthi yimaphi amaseva osebenzisile, futhi impendulo eqotho ngokuvamile igama lendawo. Lelo gama liyindawo yokungena oyikhethile, futhi ikheli okwaphuma ngalo ithrafikhi yakho lingase libe umshini ohluke ngokuphelele. Akukho lutho kuhlelo olwenzelwe ukugcina inombolo yesibili, ngakho irekhodi kufanele lakhiwe ngesikhathi sokusetshenziswa. Kunezindlela ezimbili, futhi eyodwa kuphela yazo ehlala itholakala esimweni sosekelo.

Amarekhodi amabili, futhi elilodwa kuphela lawo likhona

Umbono weklayenti ngokwalo, esimweni esihle kakhulu, uhlu lwezindawo ezikhethiwe ezinezimpawu zesikhathi. Lesi yisinqumo somklamo hhayi ukunganaki: amakheli ayimininingwane yokusebenza, ayashintshana phakathi kwezabelo, futhi ukuveza ukuxhumana kwenza kokubili ukusekelwa nokuphathwa kokuhlukunyezwa kube nzima. Abahlinzeki babeka izinto zefu phambi kwamanethiwekhi abo khona kanye ukuze indawo yokugcina ikwazi ukuhamba ngaphandle kokutshela muntu. Lokho uhlelo olukubonisayo ukukhetha okwenzile, hhayi umzila ithrafikhi eyawuthatha.

Irekhodi ongalakha ngokwakho iyifayela lasendaweni elinekheli lomphakathi elilodwa nesigxivizo sesikhathi se-UTC esisodwa ngomugqa ngamunye. Lincane, libi futhi liwusizo kakhulu, ngoba lichaza ngqo lokho umbonisi wangaphandle angakubona futhi.

Inketho A: thwebula ikheli lokuphuma ngokwakho

Isevisi yomsindo ibuyisela ikheli lomthombo isicelo esivela kulo, okushiwo yincazelo yikheli lokuphuma. Gxuma ukuthwebula ngemva kokuba umhubhe ubike ukuxhuma, ngoba iklayenti elithi kuxhunyiwe ngaphambi kokuzinza kwemizila ne-DNS lizoqopha ikheli langaphambi komhubhe futhi longcolise irekhodi kusukela emugqeni wokuqala.

#!/bin/sh
umask 077
log="$HOME/vpn-exit.log"
printf '%s %s\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$(curl -fsS https://api.ipify.org)" >> "$log"

Imininingwane emibili yenza leso siqeshana sisebenze hhayi sibe ngumhlobiso. Isigxivizo sesikhathi nekheli kwabelana ngomugqa owodwa, ngakho ukuhlaziya kwakamuva akudingeki kuhlanganise amarekhodi, futhi umask 077 ligcina ifayela liyimfihlo kusukela lapho lidalwa. Yigxume kanye ngokuxhuma ngakunye hhayi kanye ngokuqalisa ngakunye, futhi gcina ifayela elilodwa ngedivayisi ngayinye.

Irekhodi libhala ukuthi wawusebenzisa nini umhubhe nokuthi wavela kuyiphi inethiwekhi, okuseduze nomlando wokuphequlula kunokubala. Khetha isikhathi sokugcina ongasivikela, gcina ifayela ngaphandle kwamafolda okuxhumanisa abiwelekayo futhi lisuse ngamabomu.

Inketho B: cela umlando kumhlinzeki

Abanye abahlinzeki bagcina amarekhodi okuxhuma futhi bazophendula umbuzo wosekelo ngesigxivizo sesikhathi negama leseva. Lelo rekhodi lichaza ingqalasizinda yabo hhayi ithrafikhi yakho, futhi linenani elifana newindi lokugcina kanye nokuzimisela kwabo ukubheka. Lichaza nomhlangano, hhayi isicelo. Iwindi ngokuvamile lifushane, futhi likalwa kusukela ohlangothini lomhlinzeki womhubhe.

Abahlinzeki abakhangisa ngokungagcini amarekhodi abakwazi ukunikeza lokhu uma beceliwe, futhi uhlu lwezindawo zakamuva ohlangothini lweklayenti aluyona into efanayo. Ukucela ikheli lokuphuma kumhlinzeki ongenawo amarekhodi ngokuvamile kuphetha ngencazelo yokuthi kungani le datha ingekho.

Ukuthi irekhodi ngalinye lingafakazela ini esimweni sosekelo

Amarekhodi amabili aphendula imibuzo ehlukene, futhi kuyithebula lapho ukuqhathanisa kuyeka ukuba ngokwezemfundo.

QuestionYour local logProvider record
Which address did the traffic leave from?Yes, for the moment it was capturedUsually not disclosed
Was the tunnel in use at 14:20?Yes, if the capture ranYes, within the retention window
Why did a location get slower?Yes, by comparing addresses over timeSometimes, as an infrastructure note
Who sent this specific request?NoNo

Ikholomu yokuqala kuphela engaphansi kokulawula kwakho. Irekhodi lomhlinzeki lingaqinisekisa ukuthi i-akhawunti yayixhunyiwe ngesikhathi esithile, kodwa alikwazi ukuqinisekisa ukuthi yiziphi izicelo ezasebenzisa umhubhe, futhi ngeke lisho ikheli umhlinzeki alithatha njengemininingwane yokusebenza. Alikho irekhodi elihlonza umuntu, ngoba ikheli lokuphuma elabiwe lingathwala amakhasimende amaningi ngeminithi efanayo.

Qhathanisa womabili nesisekelo ngaphambi kokuthemba elilodwa

Ikheli lodwa alifakazeli lutho. Thwebula ikheli eliqondile ngaphambi kokuxhuma, ikheli elingena emhubheni ngemva kwalokho, bese uwaqhathanisa. Amanani afanayo asho ukuthi umhubhe awuthwali leso sicelo, kungaba ngenxa yomhubhe ohlukanisiwe, i-proxy enkulu noma iklayenti elabuyela emzileni oqondile.

curl -fsS https://api.ipify.org; echo
curl -fsS https://api64.ipify.org; echo
dig +short TXT o-o.myaddr.l.google.com @1.1.1.1

Phinda ukuqhathanisa kwe-DNS ne-IPv6, ngoba umsindo wekheli ufakazela umzila wesicelo esisodwa se-HTTP futhi awusho lutho ngokuthi yisiphi isixazululi esiphendulile. Idivayisi evuzayo kwesinye ingabonakala iphilile ngokuphelele kwesinye.

Izihloko ezihlobene