I-tunnel yakho ehlukanisiwe ikhipha isiqalisi, hhayi umdlalo
Isiqalisi siqala ifayela elisebenzayo elilodwa lomdlalo, futhi leyo nqubo inama-socket ayo. Thola inqubo yangempela, qhathanisa isihlonzi esifanele, bese uhlola.
Ufaka isiqalisi ohlwini lokukhishwa, ukulanda kugxuma kusuka kokunensayo kuya kokusheshayo, futhi umdlalo usawela kuseva ekude. Akukho okugqekile. Isiqalisi nomdlalo kuyizinqubo ezimbili ezinamasethi amabili ama-socket, futhi ukukhipha okukodwa akusho lutho ngokunye. Ukulanda kwashesha ngoba ukulanda kwakuwuthrafikhi yesiqalisi; umdlalo uxhumo lomunye umuntu, oluvulwe yifayela elisebenzayo umthetho wakho ongakaze ulibone.
Isifaki esisodwa, izinqubo eziningi
Isoftware yomdlalo yesimanje iwumhlaba omncane wezinkanyezi. Kukhona iklayenti elikufaka ngemvume, isibuyekezi esidonsa okuqukethwe, isiqalisi esiqala umdlalo, kanye nefayela elisebenzayo lomdlalo elingakwazi ukuzakhela enye inqubo yokulwa nokukhwabanisa noma yengqimba yokuhlela imidlalo. Ngayinye yazo ingagcina ukuxhumana kwayo ukuya ezindaweni zayo.
Umthetho wokukhishwa uvamise ukusho eyodwa yazo. Ukuthi iyiphi ayishoyo kuncike ngokuphelele kusihlonzi esisekelwa yiklayenti le-VPN, futhi leyo yingxenye abasebenzisi abayihlola ngokungavamile. Amanye amaklayenti aqhathanisa indlela yefayela elisebenzayo, amanye isihlonzi sephakethe noma se-bundle, kanti amanye igama lenqubo elingabelwana ngalo amabhayinari amabili angahlobene. Funda umthetho ngaphambi kohlu lwezinqubo, ngoba umthetho ukhawulela ngisho nalokho ongakusho.
Ngakho uphawu akulona “i-tunnel ehlukanisiwe yephukile”. Ilokhu “umthetho uhlanganisa inqubo engeyona leyo ethwala ithrafikhi engiyikhathazayo”, okuyisitatimende esincane kakhulu futhi esilungiseka kalula. Uma usho kanjalo, isinyathelo esilandelayo asisabi ukuqagela.
Thola inqubo ephethe ukuxhumana komdlalo
Qala umdlalo, ngena emdlalweni, futhi ubheke ukuthi ama-socket ngawabani esikhundleni salokho okusekrinini. Ku-Windows uhlu lwezinqubo kanye nombuzo we-socket ngenqubo ngayinye kuphendula lokho ngemiyalo emibili:
Get-Process | Where-Object { $_.ProcessName -match 'launcher|game|client' } | Select-Object Id,ProcessName,Path
Get-NetTCPConnection -State Established | Select-Object OwningProcess,RemoteAddress,RemotePort | Sort-Object OwningProcess
Umyalo wesibili uprinta i-ID yenqubo, hhayi igama, ngakho hlanganisa imiphumela emibili nge-ID. Umugqa owufunayo yilowo ikheli lakhe elikude lingelesevisi yomdlalo, futhi inqubo eyiphethe yifayela elisebenzayo umthetho wakho okufanele ulisho.
Ku-Linux umbuzo ofanayo udinga umyalo owodwa ngohlobo ngalunye lwe-socket, futhi kufanele kuhlolwe kokubili, ngoba ukuxhumana komdlalo kungaba i-UDP kuyilapho konke okunye kuyi-TCP:
ss -tunp state established | grep -i game
ss -tunp | awk 'NR==1 || /udp/'
Uma umdlalo usebenza ku-container noma kungqimba yokuhambisana, inqubo oyitholayo ingaba yi-shim hhayi ibhayinari oyifakile. Kuleso simo isihlonzi esibalulekile yileso iklayenti elisibonayo, okungaba yindlela ye-shim, futhi akukho ukuhlela kwefayela lokuqala okuzokuthinta.
Qhathanisa isihlonzi esisekelwa yiklayenti lakho
Funda imibhalo yeklayenti mayelana nomthetho wokukhishwa ngaphambi kokwengeza noma yini. Amamodeli amathathu ajwayelekile aziphatha ngendlela ehlukile, futhi elinye lawo iyisicupho.
| Identifier | How it behaves | Failure mode |
|---|---|---|
| Executable path | Matches exactly the file at that path | Breaks when an update moves the binary |
| Process name | Matches any binary with that name | Too broad; catches unrelated software |
| Package or bundle id | Matches a signed application group | May include services you did not intend |
Imithetho yendlela inembe kakhulu futhi ibuthakathaka kakhulu. Isibuyekezo sesiqalisi esinyakazisa ifayela elisebenzayo sishiya umthetho ukhomba ifayela elingasasebenzi, futhi uphawu luyabuya ngaphandle kokuthi kube noshintsho olusobala. Imithetho yephakethe iyasinda kulokho, futhi ingase futhi ihlanganise buthule izinqubo zosizo ongakaze uzicabange, okuwukusiza noma okuyethusa kuye ngomhlengikazi.
Noma yini esekelwa yiklayenti, ungangezi okufakiwe kuyo yonke ifayela elisebenzayo olitholayo. Uhlu olwakhiwe ngokuzama nokwehlula kwaze kwasebenza isikhathi esisodwa alunakubuyekezwa, futhi luzoqongelela buthule okuhlukile kwesoftware engahlobene. Shono inqubo oyitholile, futhi ubhale ukuthi yayenzelwani.
Hlola emdlalweni, hhayi ekulandeni
Ijubane lokulanda lesiqalisi ukuhlolwa okubi kakhulu okungenzeka, ngoba lisebenzisa ngqo inqubo eseyikhishiwe. Sebenzisa into eyayihluleka, futhi uhlole indlela esikhundleni sokuboniswa kokusebenza komdlalo ngokwawo:
ip route get 203.0.113.55
Get-NetTCPConnection -State Established | Where-Object RemotePort -eq 27015
Umyalo wokuqala udinga ikheli iseva yomdlalo eyaxazulula kulo, okungase kukunikeze ilogi yokuxhumana yomdlalo noma iklayenti lakho. Uma indlela isho isixhumanisi somzimba, umthetho uyasebenza. Eyesibili ibonisa ukuthi isikhathi sikhona yini, okuhlukanisa “kukhishiwe kodwa iseva iphansi” kusuka ku-“akukho okukhishiwe”.
Gcina isifunda nenethiwekhi yokufinyelela kungaguquki ngenkathi uhlola. Umdlalo owela esikhungweni sedatha esihlukile ngakunye ukuzama ukhiqiza amakheli ahlukile, futhi uzogcina ulandela ithagethi enyakazayo esikhundleni sokuqinisekisa umthetho. Ukugijima okubili ngekheli elifanayo kubaluleke kakhulu kunokuyishumi ngamakheli ahlukile.
Hlola futhi ngemuva kwesibuyekezo esilandelayo
Noma yimuphi umthetho osekelwe endleleni unokuphila okulinganiswa ngemijikelezo yamaphakethe. Lapho umdlalo uyeka ukuhlonipha ukukhishwa ngemuva kwenyanga, into yokuqala okufanele uyihlole ukuthi ifayela elisebenzayo linyakazile yini, futhi eyesibili ukuthi inqubo entsha yosizo ivele yini eceleni kwalo.
Imodeli yokukhishwa kwezinhlelo ebhalwe yiklayenti elilodwa iyisihloko esifanelekile sendlela le mithetho echazwa ngayo, nakuba imininingwane ihluka phakathi kwemikhiqizo. Funda eyakho, rekhoda isihlonzi osisebenzisile, futhi ubhale usuku. Lelo rekhodi yilo eliguqula indida ibe ukulungiswa kwemizuzu emihlanu ngokuzayo lapho isiqalisi sikhulula isibuyekezo.
Uma iklayenti lingakwazi nje ukuveza umkhawulo owudingayo, inqubomgomo ebanzi evunyiwe ingcono kunenqwaba yezihlukile ezingabhalwe phansi. Okubanzi nokuqondwayo kunqoba okuncane nokungalungile, ikakhulukazi lapho inguqulo encane iyiyo wonke umuntu akholelwa ukuthi isebenza.