Ukudlulisa i-SSH, i-VPN noma i-RD Gateway: iyiphi indlela yedeskithophu eyodwa ye-RDP?

Zontathu izinketho zithwala i-RDP, ngakho iphrothokholi akuyona into enqumayo. Umbuzo wangempela ukuthi umsebenzisi oyedwa kufanele athole ukufinyelela okungakanani, nokuthi ubani osebenzisa into okunikeza lokho. Iphothi le-TCP elidlulisiwe, inethiwekhi eyimfihlo enomzila, kanye nesango ledeskithophu ziphendula lowo mbuzo ngobukhulu obuthathu obuhlukene. Qala ukhethe ubukhulu futhi umkhiqizo uzolandela.

Umbuzo ububanzi, hhayi iphrothokholi

Bhala lokho umsebenzisi okufanele akuthinte ngempela. Uma impendulo iyideskithophu eyodwa, umklamo onikeza i-subnet ubanzi kakhulu. Uma impendulo iyideskithophu kanye nokwabelana ngamafayela kanye nekhonsoli yokuphatha, umklamo odlulisa iphothi elilodwa uzobuya ngenyanga ezayo ngokudluliswa okunye okubili. Uhlu lwezindawo okuyiwa kuzo iyisidingo; konke okunye ukusetshenziswa.

Gcina ubunikazi bokungena buhlukanisiwe ne-akhawunti ye-Windows engena kudeskithophu. Wonke umklamo ngezansi unakho kokubili, futhi ukukuhlanganisa yikho okwenza i-akhawunti yesibungu sokugxuma ithole igunya elingaphezu kwalokho okwakuhlosiwe.

Isevisi eyodwa ye-TCP edlulisiwe

Isibungu sokugxuma se-SSH esigunyaziwe singadlulisa isilaleli sendawo siye kusevisi ye-RDP esingayifinyelela. Bopha leso silaleli ku-loopback uma sikhona kuphela kumshini womsebenzisi uqobo, okuyiyo inhloso evamile yokudluliswa kwendawo. Ukudlulisa kuwusizo kumuntu oyedwa, hhayi isevisi yeqembu.

Ukungena nge-SSH kuqinisekisa ukufinyelela endleleni yokudlulisa, futhi akukho okunye. Ukuqinisekiswa kwe-Windows nogunyazwa lwe-RDP kusenzeka endaweni okuyiwa kuyo, ngakho i-akhawunti yokugxuma esebenzayo ayiyona iseshini yedeskithophu esebenzayo. Lezo zingamasango amabili azimelene futhi womabili kufanele avulwe.

Nciphisa izindawo zokudlulisa ze-akhawunti yokugxuma esikhundleni sokupha i-shell engenamkhawulo. Lo mklamo ulungele iqoqo elincane lamamshini abalwe ngokucacile, futhi unezela umsingathi, ubunikazi kanye nomjikelezo wokuphila okufanele usebenze. Lowo msingathi owengeziwe yiyingxenye abantu abayikhohlwa lapho beqhathanisa nesango: othile kufanele ayilungise, ayiqaphe futhi abe nezikhiye zayo.

Indawo yomsebenzi eyimfihlo enomzila

I-VPN inikeza i-DNS eyimfihlo nokufinyelela kumasevisi amaningi asetshenziswa ndawonye, futhi lokho kuyinani langempela. Ukufihla iphothi ledeskithophu elilodwa kuwumphumela oseceleni, hhayi isizathu sokuyakha. Lowo mehluko ubalulekile lapho othile ebuza ukuthi i-VPN ikhona ngani.

Nciphisa imizila nezimvume zezinsiza ezindaweni okuyiwa kuzo. Umsebenzisi oxhunyiwe akanikezwa ngokuzenzekelayo i-LAN yonke, futhi isivikelo somlilo sendawo okuyiwa kuyo kanye namalungelo okungena e-Windows kuhlala kuyimingcele ehlukene i-VPN engayishintshi.

Lolu hlelo lulula endaweni yomsebenzi esivele isungulwe futhi ilawulwa. Izindleko ukuthi ukungeniswa, izidingo zedivayisi, ukuziphatha kwesixazululi kanye nenqubomgomo yoxhumo kuba yingxenye yendawo yokusebenza yomsebenzisi, futhi othile kufanele abe nazo. Qhathanisa lezo zindleko nemvume yesango ngaphambi kokucabanga ukuthi i-VPN iyinketho eshibhile.

Isango eliqondile le-RDP

I-Remote Desktop Gateway inikeza umngcele oqondile we-RDP hhayi owomrete. Inqubomgomo yayo yokugunyaza ukuxhumana inquma ukuthi ubani angaxhumana, futhi inqubomgomo yayo yokugunyaza izinsiza inquma ukuthi iziphi izinsiza zangaphakathi abangazifinyelela ngayo. Zombili izinqubomgomo ziyingxenye yomkhiqizo, hhayi izengezo ozikhethelayo.

Hlela ndawonye izitifiketi, ukuhlanganiswa kobunikazi kanye nokuthuthwa okudingekayo. Isango akulona irelay ye-TCP engagamenyiwe, futhi ukulisebenzisa kanjalo kweqa izinqubomgomo ezilifanele. Liphinde lithwale izimfuno zelayisensi nokusebenza ezingekho kuphothi elilodwa elidlulisiwe. Bika isabelomali salezo ngaphambi kokubuyekezwa komklamo, hhayi emuva.

Lapho iqembu selivele lisebenza ukufinyelela kudeskithophu okumaphakathi, lezo zindleko ezengeziwe sezikhokhiwe. Lapho umuntu oyedwa edinga umshini owodwa, kuwumshini omkhulu othengelwa umsebenzi omncane.

Lokho kusadingeka kukho kontalo

Gcina izihlolo zobunikazi bomsingathi kuwo wonke umklamo. Isiteketiso sendawo noma ithuneli akukwenzi isitifiketi esingalindelekile sibe yingozi, futhi ukwamukela esingahambisani ukuze kudlulwe nge-proxy kuchitha inhloso yethuneli. Igama elisephaketheni namagama asesitifiketini kufanele kubuyisane ngamabomu.

Sebenzisa i-MFA endaweni yokungena lapho inqubomgomo ikudinga khona, futhi gcina izilawuli ze-akhawunti yendawo okuyiwa kuyo. Zombili ziyagcwalisa: eyokuqala inquma ukuthi ubani angafinyelela emnyango, eyesibili inquma ukuthi ubani angawuvula. Ukushiya enye yazo kushiya umklamo obukeka ugcwele kodwa ungekho njalo.

Khetha umngcele ohambisana nomsebenzi kanye nemodeli yokusebenza onawo ngempela. I- Uhlolojikelele lwezindima ze-RDS ichaza indawo yesango phakathi komsingathi weseshini nezinye izingxenye, futhi yilowo mongo owenza izindleko zayo zifundeke.