Iphrofayela yokuxhumana ye-SoftEther: hlola izinkambu eziyisithupha ngaphambi kokungenisa
Izinkambu eziyisithupha zinquma ukuthi iphrofayela ye-SoftEther izosebenza yini. Hlola indawo yokugcina, imbobo, iphrothokholi, ihhabhu, umsebenzisi kanye neqhaza ngokulandelana, bese uhlola ukuthi uxhumene nani ngempela.
Ukungenisa kwephrofayela kuphumelela, bese ukuqinisekisa kwehluleka ngoba ifayela likhomba ku-Virtual Hub okungakaze kujoyinwe kulo i-akhawunti. Akukho okonakele efayeleni; ichaza ukuhlelwa okungakakhishwa kukho izitifiketi. Izinkambu eziyisithupha zinquma ukuthi ukungenisa kungasebenza yini: igama lomsingathi, imbobo, iphrothokholi, i-Virtual Hub, ubunikazi bomsebenzisi, nokuthi ngabe ubani ukunikeze isitifiketi somqondisi ngephutha. Ukuhlola kokuqala kuya kwesithathu kuhlinzeka lezo zinkambu ngokulandelana, kanti ezimbili zokugcina zihlinzeka ifayela ngokwalo nalokho okujoyine kukho ngempela.
Ukuhlola 1: igama lomsingathi nembobo
Funda igama lomsingathi, imbobo kanye nendlela yokufinyelela emenyezelwe ngaphambi kokungenisa noma yini. Isilaleli somdabu se-SoftEther ngokuvamile siphendula ku-TCP 443, kanti u-992 no-5555 yizinye izindlela abasebenzi abazivulayo zamaklayenti angemuva kwamanethiwekhi anomkhawulo. Iphrofayela eqondiswe embotsheni esebenzela iwebhusayithi noma enye insizakalo yehluleka ngaphambi kokuqinisekisa futhi ibika ukwehluleka njengenkinga yezitifiketi. Qhathanisa leli bhangqa nalokho okushicilelwa umsebenzi wale ndawo yokugcina, hhayi nohlu lwedirekhthri oluqoqwe othile ngonyaka odlule. Uma igama lomsingathi lixazululeka kukheli umsebenzi angakaze akhulume ngalo, yima lapho, ngoba isinyathelo esilandelayo sizothumela izitifiketi kulelo kheli.
Imbobo 443 iyindawo eyabiwe, ngakho imbobo iyodwa ayifakazeli lutho mayelana nensizakalo engemuva kwayo. Iklayenti le-SoftEther lihlukanisa kokubili ngokuxhawulana kwephrothokholi, yingakho iphrofayela ingakhomba embotsheni efanele futhi iphelele kuseva yewebhu. Lokho kwehluleka kubonakala njengephasiwedi engalungile kulogi yeklayenti nakuba kungekho phasiwedi eyake yahlolwa.
Bhala indawo yokugcina njengegama lomsingathi, imbobo nendlela, ngalokho kulandelana. Lolu thathu luyingxenye ongayiqinisekisa ngaphandle kokuxhuma, futhi iyingxenye oyicaphunayo uma ubuza umsebenzi ukuthi isilaleli sisasebenza yini. Noma yini ongakwazi ukuyigcwalisa emthonjeni oshicilelwe ihlala ingaqinisekisiwe esikhundleni sokucatshangwa.
Ukuhlola 2: iphrothokholi inquma iklayenti
Iseva enikeza izindlela ezimbalwa zokufinyelela ayiguquli ifayela elilodwa elikhishiwe libe iphrofayela ongayivula yonke iklayenti. Each method has its own format, its own client and its own failure mode, futhi ukuzihlanganisa kukhiqiza amaphutha azwakala njengezinkinga zezitifiketi. Nquma ukuthi iyiphi indlela emenyezelwa ifayela ngaphambi kokunquma ukuthi iyiphi iklayenti ezolivula.
Ithebula elingezansi libala izimbobo ezivamile kanye nalokho okudingwa yindlela ngayinye ngempela. Izimbobo ziwukukhetha komsebenzi, ngakho zithathe njengamanani amisiwe hhayi njengamaqiniso ngeseva ethile. Iphrofayela yomdabu ye-SoftEther ingenisa iklayenti le-SoftEther, ibhangele le-ovpn lingelakwa-OpenVPN, futhi amaphrofayela e-SSTP noma e-L2TP acutshungulwa uhlelo lokusebenza ngokwalo. Ukufaka iklayenti lesibili ukuze kuvulwe ifayela elingalwamukelwa yilelo lokuqala ngokuvamile kuguqula iphutha elicacile libe elididayo.
| Access method | Typical port | What the client needs |
|---|---|---|
| SoftEther native | TCP 443, 992 or 5555 | The SoftEther client and a hub name |
| OpenVPN | UDP or TCP 1194 | An ovpn profile and an OpenVPN client |
| SSTP | TCP 443 | Operating system support |
| L2TP over IPsec | UDP 500 and 4500 | Operating system support and the shared key |
Funda isimemezelo esingaphakathi efayeleni, hhayi isandiso. Ifayela eliqanjwe nge-OpenVPN ngokwencazelo liyiphrofayela ye-OpenVPN, kanti iphrofayela ye-SoftEther iwukuhlelwa okuncane okungeniswa iklayenti le-SoftEther, futhi lezi ezimbili azishintshisani. Uma indlela emenyezelwe iyile ongakwazi ukuyisebenzela, lokho kuphendula umbuzo wokungenisa.
Ukuhlola 3: ihhabhu, umsebenzisi kanye neqhaza lomqondisi
Ukuze kufinyelelwe ngomdabu, iphrofayela isho i-Virtual Hub kanye nomsebenzisi ngaphakathi kwayo. A hub is a logical VPN server instance with its own users and its own settings, futhi umsebenzisi uyilungu lalelo hhabhu ngokuqinisekisa kwakhe. Akukho kulokhu okuwukuphatha iseva, okuphatha izilaleli, amahhabhu kanye nawo wonke umsebenzisi ekusetshenzisweni. Iphrofayela yeklayenti akufanele neze ifike nalokho kuphatha kunamathiselwe. Uma othile ekuthumelela isitifiketi somqondisi ukuze iklayenti lisebenze, ukuhlelwa akulungile, noma ngabe kuxhuma noma cha.
Hlukanisa lokhu kuthathu uma ubhala ngokuxhumana, ngoba kukhishwa ngezindlela ezahlukene. Ukususa umsebenzisi wehhabhu kuqeda ukufinyelela komuntu oyedwa futhi kushiye ukusetshenziswa okusele kungathintekile, kanti ukushintsha isitifiketi somqondisi kuthinta konke. Lowo mehluko futhi uyisizathu sokuphikisa umsebenzisi oyedwa wehhabhu owabiwe weqembu, ngoba isitifiketi esisodwa sisho umcimbi owodwa wokukhishwa kuwo wonke umuntu.
Ukuhlola 4: ifayela libucayi njengalokho elikuthwalayo
Kuye ngefomethi, iphrofayela ingathwala iphasiwedi egciniwe, isitifiketi noma ukhiye owabiwe ngaphambili. Thatha ukukhishwa njengemfihlo uma kukhona, ngoba ikhophi oyifakayo ethikithini iyikhophi umuntu ongayingenisa. Susa isitifiketi ngaphambi kokwabelana, noma yabelana ngephrofayela eyakhiwe kabusha ngemfihlo entsha. Ukubucayi kwefayela kuvela kokuqukethwe kwalo, hhayi esandisweni noma ebukhulu.
Qinisekisa indawo yokugcina ngesiteshi esishicilelwa umsebenzi, futhi thatha ilebula yedirekhthri njengengaqinisekisiwe. Ifulegi lezwe negama lomsingathi kuhlu lwamaphuzu lomphakathi kukhethwa yilowo othumele ukufakwa, ngakho akukho kulokhu okuthola ukuthi ubani ophethe iseva. Uma iphrofayela ivela kudirekhthri lomphakathi, lokho kuyisizathu sokuhlola okwengeziwe, hhayi okuncane.
Bhala ukuthi ifayela lavelaphi nokuthi walithola nini. Uma ukuxhumana kuziphatha ngendlela ehlukile kamuva, umsuka uyinto yokuqala oyiqhathanisayo nendawo yokugcina eqinisekisiwe. Iphrofayela engenamsuka iyiphrofayela ongakwazi ukuyihlola.
Gcina ikhophi oyqinisekisile, hhayi leyo oyithole kamuva. Amafayela amabili anegama elifanayo nezindawo zokugcina ezahlukene yiyo indlela ukungenisa okusebenzayo okuba yicala lokusekelwa. Gcina ikhophi eqinisekisiwe eduze kombhalo womsuka wayo.
Ukuhlola 5: hlola uhlelo lokusebenza, hhayi isibani sesimo
Ngemuva kokungenisa, hlola uhlelo lokusebenza oludinga ngempela esikhundleni sesikhombisi sokuxhumana. Ukuqinisekisa okuphumelelayo kufakazela ukuthi izitifiketi ziyasebenza, hhayi ukuthi imizila noma i-DNS obukulindele yeza nesikhathi. Xhuma, bese usebenzisa insizakalo okwakufanele iphrofayela iyifinyelele.
Hlola imizila eyabelwe kanye namaseva e-DNS, futhi uphawule ukuthi yiziphi izindawo ezidlula umhubhe uma umklamo unokwehlukaniswa. Bese uphinda ngesizinda esisodwa okwakufanele singafakwa, ngoba umhubhe ohlukanisiwe othumela konke ngomhubhe uyaphumelela ukuhlolwa kwesizinda esisodwa noma kunjalo. Uma insiza yangasese yehluleka, umzila uyisola ngaphambi kwesitifiketi. Bhala imiphumela emine: kuqinisekisiwe, insizakalo iyafinyeleleka, imizila njengoba bekulindelekile, isizinda esingafakiwe asifakiwe.
Qhathanisa yonke imiphumela emine nalokho okwathenjiswa umsebenzi ngaleli hhabhu. Isikhathi esiqinisekisiwe kuyilapho isizinda esingafakiwe naso sifinyeleleka kusho ukuthi ukwehlukaniswa akusebenzi, futhi iphrofayela akuyona inkinga. Lungisa okulindelekile noma inqubomgomo yehhabhu, bese uphinda ukuhlola okune ngokulandelana okufanayo.