I-SSH ekude nge-VPN: into umhubhe ongayenziyo
I-VPN yenza iseva ye-SSH ifinyeleleke futhi akukho okunye. Izimo ezintathu zinquma ukuthi iyafaneleka yini, futhi isigaba sokwehluleka sikhomba ukuthi yiluphi ungqimba olunephutha.
I-VPN inikeza iseva ye-SSH indlela yangasese futhi isusa isidingo somlaleli womphakathi kupothi 22. Ayiqinisekisi umsingathi, ayigunyazi umsebenzisi, futhi ayinqumi ukuthi yimaphi ama-akhawunti angangena. Lokho kusewumsebenzi we-SSH. Ukuthi i-VPN iyindlela efanele yokufinyelela iseva kuncike ezimweni ezintathu, futhi umhubhe ungenye yezimpendulo ezingaba khona.
Umhubhe ushintshani futhi i-SSH isanquma ini
Umhubhe ushintsha ukufinyeleleka: yimaphi amakheli angafinyelelwa, nokuthi kuphi kusuka. Akushintshi okwenzeka ngemva kokuba ukuxhumana kwe-TCP kusungulwe, lapho iseva iveza ukhiye womsingathi futhi icela ubunikazi bomsebenzisi.
Gcina izingqimba ezimbili zihlukene ekhanda lakho nasezincwadini zakho. Ukungena nge-VPN kufakazela ukuthi ubani ovunyelwe ukusebenzisa inethiwekhi. Akusho lutho mayelana nokuthi yimaphi ama-akhawunti akhona kumgomo, futhi akusona isigunyaziso sokungena kuwo wonke umshini ofinyelelekayo.
Izindlela zokwehluleka nazo zihlukene, futhi yikho lokho okwenza ukwehlukanisa kube usizo phakathi kwesigameko.
Izimo ezintathu ezinquma imodeli yokufinyelela
Okokuqala, ingabe iseva idinga ukufinyelelwa ngabantu abangaphandle kwenethiwekhi yakho? Uma kungenjalo, indlela yangasese kanye ne-bastion noma i-mesh iwumklamo omncane. Okwesibili, ingabe iqembu lamaklayenti lingakwazi ukusebenzisa iklayenti le-VPN, kuhlanganise nalabo abakumadivayisi aphethwe anemingcele?
Okwesithathu, ingabe udinga ukulawula ngokwesevisi noma ngokomsebenzisi? I-VPN inikeza ukufinyelela kwenethiwekhi; i-SSH inikeza ukufinyelela kwe-akhawunti. Uma isidingo siwukuthi usonkontileka afinyelele iseva eyodwa hhayi enye into, lokho kuyisidingo sogunyaziso futhi umhubhe wodwa awukwazi ukukubeka.
Phendula lezo zintathu futhi imodeli izikhethela yona. Uma uzidlula, ugcina ngokudalula i-SSH esidlangalaleni ukuze ugweme ukusatshalaliswa kweklayenti.
Qinisekisa indlela yangasese ngaphambi kokusola i-SSH
Xhumana ne-VPN egunyaziwe futhi usebenzise igama noma ikheli langasese elibhalwe emibhalweni yomgomo. Bese uhlola indlela ekhethiwe, imvume yesango kanye nendlela yokubuyela ekliyentini. Igama elixazululwa ngendlela efanele akusona ubufakazi bokuthi ikheli lihamba ngomhubhe ohlosiwe, ngoba iziqalo zasekhaya nezasekudeni ezigqaggelelana zingathumela isicelo kwenye indawo ngokuphelele. Lowo mehluko kufanele ubhalwe ku-runbook.
Uma ukuxhumana kungakheki, qinisekisa ukuthi iseva ilalela kubuso obulindele futhi ukuthi i-firewall yomsingathi ivumela umthombo ewubonayo ngempela. I-NAT yesango ingabhala kabusha lowo mthombo, ngakho uhlu lwemvume olubhalelwe ikheli lomhubhe weklayenti lungase lungafani nanini.
Lowo mehluko wokungafani yikhona kwehluleka kwe-SSH okuvamile okuzibangelayo nge-VPN.
Funda isigaba sokwehluleka, hhayi iphutha elihlanganisiwe
Izigaba ezintathu zikhiqiza imiyalezo emithathu ehlukene, futhi eyodwa yazo kuphela imayelana nobufakazi bokungena.
| Stage | What you see | What it points at |
|---|---|---|
| Before the connection | Timeout, no route | Tunnel, route or gateway permission |
| Connection refused | Immediate reset | Nothing listening, or a host firewall rejecting |
| Authentication | Permission denied after a prompt | User, key or server policy |
Sebenzisa iphutha eliqondile kanye nelogi yeseva uqobo esikhundleni sokusetha kabusha izifakaziso ze-VPN ne-SSH ndawonye. Ukusetha kabusha kokubili yikho okwenza ukuxilongwa kwemizuzu emihlanu kube isigameko sobunikazi sezinsuku ezimbili.
Umphumela onemininingwane ukhombisa isigaba osifinyelele:
ssh -vv [email protected]Gcina okhiye bomsingathi kanye nogunyaziso kunjalo
Qinisekisa ukhiye womsingathi ngenqubo ethembekile ehlosiwe, ikakhulukazi ngemva kokushintshwa kweseva. Isixwayiso esingalindelekile sokhiye oshintshile yiwona myalezo okufanele ungawushayi indiva ngenxa nje yokuthi i-VPN ixhumekile, ngoba umhubhe wangasese awenzi umgomo ube umshini ocabanga ukuthi unguwo. Qhathanisa isigxivizo somunwe nomthombo othemba kuwo ngaphandle kokuxhumana.
Ngakweseseva, qinisekisa ukuthi i-akhawunti igunyaziwe nokuthi indlela yokuqinisekisa oyilungisile yiyona enikezwayo. Ukhiye okhona kodwa ongashaywa ndiva ngokuvamile uyinkinga yemvume noma yokulungiselela, hhayi yenethiwekhi.
Khakisa ukufinyelela kwesevisi kubunikazi obudingekayo futhi gcina indlela yokululama egunyaziwe yezinguquko zenethiwekhi.