Ingabe isixhumanisi se-OpenVPN esinokhiye ongaguquki singasebenzela amaklayenti amaningi?

Imodi yokhiye ongaguquki ixhumanisa izingxenye ezimbili ngqo, futhi lowo umklamo wayo, hhayi umkhawulo umuntu akhohlwa ukuwususa. I-client-to-client iyinketho yokudlulisa kumodi yesiphoqo, ngakho ukuyengeza kukho ukuhlelelwa kwe---secret akushintshi lutho mayelana nokuthi mangaki amaklayenti angaxhuma. Isinqumo akukhona ukuthi yiluphi uphawu oluzokwengezwa, kodwa ukuthi ukusatshalaliswa kudinga isixhumanisi samaphoyinti amabili noma insizakalo yamaklayenti amaningi. Uma amadivayisi amaningi kufanele axhumane ngokuzimela, imodi yokuvikela iyashintsha futhi idivayisi ngayinye ithola ubuwena.

Izingxenye ezimbili, ukhiye owodwa futhi asikho isimo saklayenti ngamunye: leso simo yindaba yonke yale modi.

Imodi yokhiye ongaguquki ingenelani

Kumodi eyimfihlo izingxenye zombili zabelana ngefayela lokhiye elilodwa, futhi lowo khiye uvikela uhambo ngqo. Akukho ukuxhawulana, akukho ukushintshana kwezitifiketi futhi akukho seshini yaklayenti ngamunye, ngoba awekho amaklayenti ngomqondo wesiphoqo, kukhona amaphoyinti amabili okugcina kuphela.

Le modi isewusizo kubhangqana lwemishini elingaguquki olunenqubo ebhaliwe yokushintsha ukhiye, futhi i-OpenVPN 2.6 iyimaka njengendala ngoba imodi ye-TLS ihlanganisa lezo zimo ngezici ezingcono. Engakwazi ukukwenza ukuhlukanisa idivayisi eyodwa exhumayo kwelinye, ngoba ukuba nakho kwefayela yikho konke ukulandisa kokuqinisekisa. Ukwengeza idivayisi yesithathu kusho ukwabelana ngalowo khiye nayo, ngemva kwalokho ezimbili zokuqala azisakwazi ukuyihlukanisa kuzo.

Yingakho umkhawulo wezingxenye ezimbili ungowesakhiwo hhayi isilungiselelo esingashintshwa.

Kungani i-client-to-client ingeyona ingxenye engekho

I-client-to-client ilawula ukuthi amaklayenti axhunyiwe angashintshana ngohambo ngokusebenzisa isiphoqo yini. Ayivumeli amaklayenti, ayinikezi ubuwena futhi ayidali imodi yesiphoqo engakalungiselelwa, futhi ekuhlelweni kokhiye ongaguquki akukho uhlu lwamaklayenti eyayingaluphatha.

Enye inkinga evamile iphathelene nempahla ye-tls-crypt noma ye-tls-auth. Isiphoqo se-TLS singabelana ngelinye lalabo bakhiye phakathi kwamaklayenti wonke, ngoba sivikela umzila wokulawula esikhundleni sokuqinisekisa ukuthi ngubani iklayenti ngayinye. Ukhiye womzila wokulawula owabiwe kumodi ye-TLS uyinto ehlukile kukhiye wedatha ongaguquki owabiwe, nakuba kokubili kufika njengamafayela abukeka efana.

Ukukhetha phakathi kwezimodi kugcina kumibuzo emibili. Ingabe idivayisi engaphezu kweyodwa kufanele ixhumane ngokuzimela, futhi ingabe ukusatshalaliswa kudinga ukukhanselwa kwedivayisi ngayinye? Cha kukho kokubili kugcina imodi yokhiye ongaguquki isebenza; yebo kunoma yikuphi kwalokho kukhombisa i-TLS. Ayikho enye indlela lapho iklayenti lesibili lamukelwa khona ngaphandle kobuwena bayo.

Ukwakha isiphoqo samaklayenti amaningi

Isiphoqo samaklayenti amaningi sidinga imodi ye-TLS, isitifiketi sohlangothi lwesiphoqo kanye nobuwena baklayenti ngayinye. Umsizi wesiphoqo uhlela ichibi lamakheli nemodi yamaklayenti amaningi, kodwa awunikezi ukuhlelwa kwe-TLS, i-ankile yokwethemba noma izitifiketi zamaklayenti ezenza ukwamukelwa kube nencazelo.

Bhalisa idivayisi ngayinye ngokusebenzisa isiphathimandla sezitifiketi esivele sikhona esikhundleni sokukopisha imininingwane yokungena yeklayenti eyodwa. Ubuwena obuhlukene yikho okwenza kube nokwenzeka ukukhansela, ukuhlela umzila kuklayenti ngayinye kanye namalogi awusizo, futhi isitifiketi sekhayenti esisodwa esabiwe siwisa zontathu.

Uma ukusatshalaliswa kuqinisekisa abasebenzisi ngokusebenzisa uhla lwangaphandle noma isici sesibili, lowo mklamo uhlala njengoba unjalo. Ukuthuthela kumodi yesiphoqo ye-TLS kunquma ukuthi izingxenye zizibonakalisa kanjani kusendlalelo somhubhe, futhi akunqumi ingemuva lama-akhawunti. Gcina izinqumo ezimbili zihlukene ukuze ushintsho kolunye lungashintshi ngokuthula kolunye.

Bese unquma inqubomgomo yokudlulisa ngamabomu. I-client-to-client ivula uhambo phakathi kwamaklayenti emzileni wesiphoqo endaweni yomsebenzisi, okuyinto ukusatshalaliswa okuningi okukufunayo kanti okunye akumele kube nakho. Kuyiswishi yenqubomgomo, hhayi indlela yobuwena, futhi kufanele kuvulwe ngoba umklamo uyakudinga, hhayi ngoba isifundo sasifaka lokho.

Ukuqinisekisa ukuthi amaklayenti azimele ngempela

Xhumanisa amaklayenti amabili futhi uqinisekise ukuthi athola amakheli ahlukene futhi avela nobuwena obuhlukene kulogi yesiphoqo. Bese ukhansela elilodwa futhi uqinisekise ukuthi elinye liyaqhubeka nokusebenza, lokhu kuyisivivinyo esingokoqobo sokuthi ubuwena abuzange kwabiwe.

Hlola insizakalo evunyelwe phakathi kwezingxenye kanye naleyo okufanele ihlale ivinjiwe. Ukungena ngempumelelo kabili kuqinisekisa ukwamukelwa, hhayi ukuhlukaniswa, futhi umehluko ubalulekile lapho ukusatshalaliswa kufanele kuhlukanise amaqembu abasebenzisi.

Ekugcineni, funda imodi yesiphoqo ekuhlelweni okusebenzayo hhayi enkumbulweni. Ukuhlelwa kokhiye ongaguquki okunezinketho ezengeziwe kuseyisixhumanisi samaphoyinti amabili, futhi isiphoqo se-TLS esifanele siyilo kuphela ilungiselelo lapho amaklayenti amaningi eyizingxenye ezihlukene ngempela.

Uma ilogi ibonisa igama elilodwa elivamile ledivayisi ngayinye, inkinga ayiyona imodi. Inkinga inqubo yokubhalisa.