Ukwabelana ngokungena okukodwa kwe-VPN nomndeni: okwephukayo kamuva
Iphasiwedi ye-VPN eyabiwe ifihla izinqumo ezine: ubunikazi besilinganiso ngasinye, imingcele yesikhathi, ukususa nokubuyisela. Zinqume ngaphambi kokuxhuma kwedivayisi yesibili.
Ukukopisha igama lomsebenzisi nephasiwedi ye-VPN kudivayisi yesibili kuthatha umzuzu futhi kusebenza kahle, yingakho izinkinga zivela ezinyangeni eziningi kamuva. Izifakazelo ozinikezile ngokuvamile zilawula okungaphezu komhubhe: zingase zibe ngumnikazi wesandiso, ibhokisi leposi lokubuyisela kanye nohlu lwamadivayisi. Ngaphambi kokuxhuma kwethelefoni yesibili, cacisa ukuthi ukungena kugunyaza ini ngempela nokuthi idivayisi eyodwa izosuswa kanjani ngaphandle kokuthinta ezinye.
Iphasiwedi eyodwa, amalungelo amaningi ahlukene
Ama-akhawunti e-VPN ezentengiselwano ngokuvamile ahlanganisa izinto ezintathu ngemuva kokungena okukodwa: izifakazelo zomhubhe, irekhodi lokukhokha noma lohlelo kanye nomzila wokubuyisela i-akhawunti. Ukwabelana ngeyokuqala kuyisinqumo sokuxhumana; ukwabelana ngezinye ezimbili kudlulisela ukulawula kwesandiso. Abahlinzeki abaningi bazigcina kuzifakazelo ezifanayo kuze kube yilapho uzihlukanisa ngamabomu, ngakho umbuzo awukona ukuthi iphasiwedi iyasebenza yini kumadivayisi amabili, kodwa ukuthi ivula ini futhi. Buza umqhubi ukuthi yikuphi kwezintathu okulawulwa ukungena, nokuthi ingabe umnikazi wokukhokha ohlukile noma ikheli lokubuyisela angase aqokwe. Leyo mpendulo eyodwa inquma ukuthi ingakanani i-akhawunti oyidluliselayo ngempela.
Ohlangothini lweseva, i-akhawunti iwumugqa onohlelo nesibali sokuxhumana. Uhlelo lweklayenti luwumbono nje walowo mugqa, futhi aluphoqeleli lutho ongalweqa ngelinye iklayenti. Yingakho uhlelo «lwedivayisi eyodwa» lusaxhuma kusuka kumadivayisi amathathu kuze kube yilapho iseva inquma ukwenqaba isikhathi sesine.
Ukuqinisekisa ngezinyathelo ezimbili kwenza umbuzo wokwabelana ube nokuhlakanipha okwengeziwe. Imfihlo ye-TOTP ebhaliswe emafonini amane iyikhophi ezine zento yesibili efanayo, futhi noma iyiphi yazo ingagcwalisa ukungena. Uma i-akhawunti isekela amaphasiwedi ohlelo ahlukene noma ukubhalisa ngedivayisi ngayinye, zisebenzise; uma ingasekeli, thatha into yesibili eyabiwe njengobuthakathaka obaziwayo hhayi inkinga exazululiwe.
Okhiye bedivayisi ngayinye bashintsha okushiwo ukususa
Ukuhlelwa okuzihostayo kuhluka ngoba ubunikazi buhlala ekuhlelweni hhayi kumugqa we-akhawunti. I-peer ye-WireGuard iwukhiye womphakathi kanye nesethi yamakheli avunyelwe, futhi iseva igunyaza ukuxhawulisana ngokufanisa lowo khiye. Uma ususa irekhodi le-peer, idivayisi ayikwazi ukuqedela ukuxhawulisana, kungakhathaliseki ukuthi iyiphi iphasiwedi esenayo.
Leso sibonelo sikunikeza ukususa okuhlanzekile kodwa akukho kubalwa ngomuntu ngamunye, okuyi-WireGuard eyikubeka njengomkhawulo owaziwayo. Iseva ibona okhiye, hhayi amalungu omndeni.
sudo wg show wg0 peers sudo wg set wg0 peer 5HueCGU8rMjxEXxiPuD5BDku4MkFqeZyd4dZ1jvhTVg= remove sudo wg show wg0 latest-handshakes
Ukusetshenziswa kwe-OpenVPN kufinyelela endaweni efanayo ngezitifiketi kanye nohlu lokuhoxiswa: iklayenti ngalinye lithola isitifiketi saso, futhi ukuhoxisa irekhodi elilodwa kushiya ezinye zisebenza. Kuzo zombili izakhiwo ubunikazi bungokwamadivayisi, ngakho ithelefoni elahlekile ukususwa okukodwa esikhundleni sokusetha kabusha izifakazelo zomuzi wonke.
Imikhawulo yokwenzeka kanyekanye ihlala kuseva
Abahlinzeki abathengisa «amadivayisi amahlanu» ngokuvamile babala izikhathi ezenzeka kanyekanye, hhayi izinhlelo ezifakiwe. Amakhompyutha aphathekayo amabili nethelefoni kungase kube kahle ngenkathi ikhompyutha yokuphatha yesithathu iqhubekisela i-akhawunti ngaphesheya komkhawulo futhi isikhathi esikhona siwisiwe. Iklayenti alikuchazi lokhu ngokuvamile, ngakho uphawu lubukeka njengoxhumano olungazinzile hhayi umkhawulo wohlelo.
| Model | What removal costs |
|---|---|
| Shared username and password | Password change for everyone, re-enrollment on every device |
| Per-device app password | Revoke one credential, others keep working |
| Per-device key or certificate | Delete one peer or revoke one certificate |
Funda imigomo yohlelo ukuze uthole umthetho wangempela ngaphambi kokuthembisa inani lamadivayisi. Ezinye izinsizakalo zibala ukuxhumana, ezinye zibala amadivayisi ahlukene abonwe esikhathini esithile, kanti ezinye zivumela inani eliphezulu kunetweki yendawo efanayo.
Nquma imithetho yomuzi ngaphambi kwedivayisi yesibili
Bhala izinto ezine: ukuthi ngubani ophethe ibhokisi leposi lokubuyisela, ngubani ongangeza noma asuse idivayisi, ngubani okhokhayo uma uhlelo lushintsha, nokuthi kwenzeka ini uma othile ehamba. Lezi yizinqumo zenqubomgomo okungekho ukuhlelwa kweklayenti okungazithathela wena, futhi kulula kakhulu ukuvumelana ngazo ngaphambi kokuba kudingeke ukususwa okuphuthumayo. Beka izimpendulo endaweni eyodwa umuzi ongayithola, kuhlanganise nokuthi yiliphi igama ledivayisi elika bani. Uhlu lwamagama yilona oluguqula ukhiye we-peer noma iphasiwedi yohlelo lube umuntu ongamshayela ucingo.
Gcina izifakazelo zomhubhe kude namanothi abiwe kanye nomlando wengxoxo. Isilawuli samaphasiwedi esinesigcina esabiwe, noma izifakazelo zedivayisi ngayinye ezikhishwe umqhubi, zigcina imfihlo idluliselwa ngaphandle kokushiya amakhophi emishileni emithathu yemilayezo.
Hlola futhi ukuthi insizakalo ibheka kanjani ama-akhawunti agadiwe kanye nezihlungi zomndeni, ngoba i-VPN ishintsha umzila wenethiwekhi kodwa ayithathi indawo yokulawula kwabazali noma ukuphathwa kwamadivayisi. Bese uhlola umsebenzi owodwa wangempela kumuntu ngamunye: i-imeyili, ucingo lwevidiyo, ingosi yomsebenzi. Umhubhe ophakamayo awuwona ubufakazi bokuthi imizila, i-DNS kanye nemithetho yomhubhe ohlukanisiwe ziziphatha ngendlela efanayo kuzo zonke izinkundla.
Fakazela indlela yokususa ngenkathi iselula
Ukususa yingxenye wonke umuntu ayihlehliselayo, ngakho kuyihlola kudivayisi oyilawulayo. Engeza ithelefoni noma ikhompyutha yokuphatha eyengeziwe, qinisekisa ukuthi iyaxhuma, bese uhoxisa leyodivayisi ngendlela ebhaliwe yomqhubi futhi uqinisekise ukuthi umhubhe wehluleka ngenkathi ezinye zisahamba.
curl -sS -m 8 -o /dev/null -w '%{http_code}\n' https://198.51.100.20/healthIdiphu evisiwe kufanele iyeke ukufinyelela ikheli langaphakathi phakathi nesikhathi esisodwa, hhayi nje ukwehluleka ukuphinda ixhume ngemuva kokuqalisa kabusha. Uma isikhathi esidala siqhubeka sisebenza, ukuhoxiswa akufikanga kuseva, futhi izifakazelo zisasebenza.
Bhala umphumela kunezaziso zomuzi ezivele zibala amadivayisi, futhi uphinde uzibuyekeze lapho ithelefoni ishintshwa. Ukuhlelwa kuhlala kuphethwe kuphela uma ubunikazi, imikhawulo kanye nesinyathelo sokususa konke kubhaliwe.