I-akhawunti ye-VPN eyabiwe: umkhawulo wedivayisi awukona ukwehlukanisa amaklayenti

Izixhumanisi eziyisishiyagalombili ngesikhathi esisodwa ziyinombolo evela ekhasini lelayisense, futhi azisho lutho mayelana nokuthi lawo madivayisi ayisishiyagalombili angenzani elinye kwelinye. Ukungena okwabiwe kungaba khona kanye nokhiye besikhathi ngasinye, futhi kungaba khona kanye nesango elidlulisela ngokukhululekile ithrafikhi yeklayenti elilodwa kwelinye. Iphutha ukuphatha i-akhawunti njengomngcele wokuphepha. Esikhundleni salokho buza imibuzo emine ehlukene: yini eyathengwa, yini evikela umhubhe, yini engadlula phakathi kontanga, futhi yini engawisa isixhumanisi sasendaweni.

Imvume yezixhumanisi ithembisa ini ngempela

Umkhawulo wedivayisi ubala ukuthi umhlinzeki uzokwamukela izingxoxo ezingaki kubhaliso olulodwa. Kuwukulawula kwezentengiselwano nokusebenza, hhayi isitatimende mayelana nobuwena noma ukwehlukanisa. Abanye abahlinzeki bakhipha isitifiketi esihlukile sedivayisi ngayinye ngaphansi kwe-akhawunti eyodwa; abanye baphinda basebenzise ubufakazi obulodwa kusixhumanisi ngasinye. Umehluko uvela ngesikhathi sokuhoxiswa, ngoba ubufakazi obuhlukene bukwenza ukwazi ukunqamula idivayisi eyodwa, kuyilapho obwabiwe bungakushiyeleli lolo khetho.

Funda ukuthi umhlinzeki ukhipha kanjani ubufakazi ngaphambi kokucabanga noma yini mayelana nokuhlukaniswa kokhiye. Igama le-akhawunti ngokwalo alidaluli lutho ngalokho.

Hlola ukuthi isango liyadlulisa yini phakathi kwamaklayenti

Ukufinyeleleka phakathi kontanga isinqumo esiseceleni kweseva. Ku-OpenVPN iswishi efanele ayikho ngaphandle uma ivela ekulungiselelweni, kodwa ukwehliswa kwedatha kwanamuhla kushintsha lapho umthetho ugcinwa khona.

grep -n "client-to-client" /etc/openvpn/server.conf
iptables -A FORWARD -i tun0 -o tun0 -j DROP

Ukulungiselela okungenalo lowo myalelo kushiya ithrafikhi phakathi kontanga kufayela lomlilo lwengingqangi, okungenzeka lisayivumela. Lapho ukwehliswa kusebenza, i-kernel iphatha isixhumi somhubhe esikhundleni senqubo yendawo yomsebenzisi, ngakho hlola izibali zemigomo esikhundleni sokwethemba ifayela. Ukuvimbela ithrafikhi edluliswayo phakathi kwamakheli omhubhe kuhlukanisa amaklayenti ngaphandle kokuthinta ukufinyelela kwawo esangweni. Qinisekisa ngesivivinyo esisuka kuklayenti elilodwa siya enkonzweni kwelinye, ngaphambi nangemuva komthetho.

Vikela isikhathi ngaphambi kontanga

Ukuvikela umhubhe nokufinyelela kontanga kuyizici ezihlukene, futhi ukubethela okuqinile akusho ukwehlukanisa. Kumodi ye-TLS iklayenti ngalinye lithola okhiye baso besikhathi, ngakho iklayenti elilodwa alikwazi ukufunda ithrafikhi yelinye ngisho noma isango liyidlulisa. Ukuhlelwa kwakudala kokhiye oqinile kwabelana ngokhiye oyedwa phakathi kwawo wonke umuntu, yingakho ukusebenzisa kabusha ukungena lapho kunemiphumela emibi kakhulu. Hlola imodi elungiselelwe hhayi ikhasi lokumaketha, bese uhlulela ukuthi ukwabelana nge-akhawunti kuyahambisana yini nedatha ethintekayo.

Ukuqinisekiswa kwenkonzo kuyo yonke ingingqangi kusabalulekile, ngoba umhubhe ufakazela kuphela ukuthi iklayenti lifinyelele inethiwekhi, hhayi ukuthi kufanele lifinyelele idemoni elithile.

Ukwehluleka kwe-Wi-Fi yasendaweni akukona ukwephulwa kwe-VPN

Isixhumanisi esiwohlokile sifakazela ukuthi isixhumanisi sasendaweni sehlulekile, hhayi ukuthi othile waphula umhubhe. Ukuphazamiseka, ukuqashwa kwe-DHCP okulahlekile kanye nokudluliswa ngesikhathi sokuzulazula konke kuqeda isikhathi ngaphandle kokuthinta ubufakazi noma umbhalo obethelwe. Thatha ukunqanyulwa njengokutholakele mayelana nokutholakala futhi ukuhlukanise nokutholakele mayelana nobumfihlo nokufinyelela kontanga. Lapho inethiwekhi yasendaweni ingathembekile, vikela ithrafikhi kusukela ekupheleni kuya ekupheleni esikhundleni sokuncika emhubheni kuphela.

Bhala izimpendulo ezine: imvume, imodeli yokhiye, inqubomgomo yontanga kanye nokuncika kwesixhumanisi sasendaweni. Lowo mbhalo uguqula ukukhathazeka okungacacile nge-akhawunti eyabiwe kube izilawuli eziqondile.