Ukhiye oqinile noma i-TLS yoxhumano lwe-OpenVPN phakathi kwababili?

Imishini emibili ekhuluma kuphela nomunye nomunye ingagcina leyotopolojia futhi ithole okhiye bokuhamba okuxoxiwe ngabo. Isimo senethiwekhi nemodi yokuvikela kuyizinqumo ezizimele, futhi ukuhlanganisa lezi zinto zombili yikho okwenza abantu bazame ukujikisa imfihlo eqinile ngokushintsha ifayela ngesikhathi zombili izinqubo zisaqhubeka nokusebenza. Ukushintsha ifayela lokhiye ngaphansi kombhangqwana osebenzayo akujikisi lutho. Imodi yokhiye oqinile, leyo i-OpenVPN 2.6 eyimaka njengengasasetshenziswa, igcina ukhiye owodwa kukho konke ukuphila komhubhe, ngakho ifayela elikudiski nokhiye osememorini kuphinda kuhambisane kuphela ngemva kokuqalwa kabusha kweziphetho zombili. Uma ukuvuselelwa okuzenzakalelayo kuyisidingo, imodi yokuvikela kufanele ishintshe.

Okungenziwa imodi yokhiye oqinile

Kumodi eyimfihlo, ababili babelana ngokhiye owabiwe ngaphambilini ohlanganisa futhi uqinisekise umhubhe ngqo. Akukho ukuxhawulana, ngakho akukho ndlela yokuthi noma yiluphi uhlangothi luphakamise impahla yokhiye entsha, lufakazele ubunikazi, noma lusinde ekungafanini ngaphandle kokungenelela komqhubi. Zombili lezi zici zivela ekuntuleni kweshubhu lokulawula hhayi kukho okushodayo okukhethiwe, futhi alikho ifulegi lokumisa elengeza elilodwa kule modi.

Incwadi ye-OpenVPN 2.6 isho ngokucacile ukuthi ukhiye uhlala kuze kube kwenziwe omusha. Lokho kuyamukeleka kuxhumano lwaselabhorethri noma kombhangqwana ogxilile wamadivayisi onenqubo yokujikisa ebhaliwe, futhi akwamukeleki noma kuphi lapho imfihlo ehlala isikhathi eside iyingozi yangempela. Ukushintsha ifayela akudali ukhiye omusha kombhangqwana osebenzayo; kudala ababili abangavumelani. Ngakho ukushintsha ifayela kunezela ukuphazamiseka ngaphandle kokunezela ukujikisa.

Futhi akukho mqondo wobunikazi bomuntu osebenza naye ngaphandle kokuba nomfanekiso wefayela. Noma ubani onokhiye ungumuntu osebenza naye, futhi akukho lutho emhubheni olubhala ukuthi yiluphi uhlangothi oluyiluphi, ngakho ukuhoxiswa kungukho konke noma akukho lutho.

Ukushintshela ku-TLS ngaphandle kokuklama kabusha uxhumano

Imodi ye-TLS yengeza ishubhu lokulawula, kanye nalo amandla okuxoxa ngokhiye beshubhu ledatha. Ekusetshenzisweni kwekhophu-kuya-kwekhophu, uhlangothi olulodwa luthatha indima yeseva kanti olunye luthatha eyeklayenti, kodwa itopolojia ihlala iwuxhumano phakathi kwababili: uhlangothi ngalunye lwazi iphuzu lokugcina lolunye, futhi akukho ichibi noma isevisi yabasebenzisi abaningi evelayo. Izindima ziyimininingwane yokuxhawulana, hhayi isakhiwo esisha.

Nikeza umshini ngamunye ubunikazi bawo. Uhlangothi ngalunye ludinga isitifiketi nokhiye oyimfihlo, i-ankhile yokuthembana eqinisekisa olunye, kanye nomthetho wokuqinisekisa umuntu osebenza naye osho ukuthi ubani olindelekile. Ungaphindi usebenzise ukhiye oyimfihlo womunye kwekunye uhlangothi ukuze wonge isikhathi; lokho kwenza ubunikazi obubili bube okukodwa futhi kususa amandla okuhoxisa noma yiluphi uhlangothi ngokwehlukana. Ukubhalisa yindawo yokwenza lokhu ngendlela efanele, ngoba ukulungisa kamuva kusho ukukhipha kabusha izitifiketi.

Gcina inkontileka yenethiwekhi ingashintshile ngesikhathi ukuvikela kushintsha. Amakheli afanayo omhubhe, imizila kanye nezinsizakalo ezivunyelwe kufanele kusebenze ngaphambi nangemva, ukuze ukwehluleka ngesikhathi sokufuduka kube inkinga yokuvikela hhayi isimangaliso sokuqondisa esifihliwe. Bhala phansi amakheli nemizila ngaphambi koshintsho; ukuwaqhathanisa kamuva kushesha kunokuphinda uwakhe kusuka enkumbulweni.

Okunye ukusetshenziswa kuvikela neshubhu lokulawula ngokhiye walo oqinile, ongajiki kanye neshubhu ledatha. Leyokhiye igada ukuxhawulana hhayi umthwalo, ngakho ukuvezwa kwayo kuveza ukuxoxa hhayi ukuhamba. Yigcine yehlukile empahleni yeshubhu ledatha, futhi uyinikeze usuku lokushintsha oluphethwe ngumuntu oshiwo ngegama. Ukuyijikisa kusho ukuqalisa kabusha ababili ngasikhathi esilungiselelwe, yingakho ifanele ukuba nokubhalwa kwekhalenda hhayi inkumbulo.

Ubani avuselela ini, futhi nini

Kumodi ye-TLS, ukuvuselelwa kuqhutshwa imikhawulo emisiwe: isikhathi esiphakathi, inani lamabhayithi noma inani lamaphakethe. Ukulawula isikhathi okubhaliwe yikho okuthembwa yiningi lokusetshenziswa, futhi inani eliphansi elisebenzayo phakathi kwababili lingaqala ukushintshwa, ngakho ukulinyusa ohlangothini olulodwa kuphela ngeke kubambe isigameko. Imikhawulo esekelwe kumthamo ikhona ngoba uxhumano olumatasa lungaqeda ukhiye kude ngaphambi kokuba iwashi lenze lokho. Akukho mkhawulo oyisihlolo sezempilo futhi akukho okutshela ukuthi ukuvuselelwa kuphumelele.

Yingakho ukuxilonga ukuxoxa kabusha okuphindaphindayo kusuka kufayela elilodwa lokumisa kudukisa. Funda izilungiselelo kubo bobabili, bese ubheka ukudlula kukulogu esikhundleni sokucabanga ukuthi kunesiphambeko. Ukuvuselelwa okuqedwa ngokuhlanzekile kubonakala njengokuqhuma okufushane kokuhamba kweshubhu lokulawula, hhayi njengokunqanyulwa.

Gcina izinto zihlukile emqondweni wakho. Isitifiketi sifakazela ubunikazi besikhathi eside futhi sishintshwa ngohlelo olulawulwa nguwe. Ukhiye weshubhu ledatha uvuselelwa ngokuzenzakalelayo, futhi ukushintshana kokuqinisekisa okuhlukile, uma ukusetshenziswa kukudinga, kulandela inqubomgomo ye-akhawunti futhi kungase kudingeko izilungiselelo zako zokushintshana kwamuva.

Ukucisha ukuvuselelwa ngokuphelele ngokubeka isikhathi sibe uziro akuyona isisombululo sekulogu enomsindo. Kuguqula isigameko somjikelezo wokuphila onempilo sibe ukhiye unomphela, lokho okukubuyisela esimweni obuzama ukusishiya.

Ukwamukela ushintsho

Akha ukuhlelwa okusha kusuka kusibonelo esisekelwe senguqulo efakiwe, hhayi esiqeshini esidala esincane esinama-algorithms nemigwaqo yefayela ethathwe kwenye indawo. Hlanganisa ukushintsha ukuze ababili bashintshe kanye, futhi gcina indlela yokubuyisa evunyelwe uma uhlangothi olulodwa lungavuki. Yehlisa uxhumano ngamabomu esikhundleni sokulinda ukuphazamiseka ukuze uhlole ukubuyela emuva. Ukubuyela emuva okuwufundisisiwe kunenani elikhulu kunalokho okuchaziwe.

Hlola izinto ezintathu: ukuqinisekiswa kobunikazi kokuqala kuyaphumelela, ukugeleza kohlelo lokusebenza okuhlosiwe kuyasebenza, futhi ukuvuselelwa okulawulwayo kwenzeka ngaphandle kokulahlekelwa ukuhamba. Bese ufunda ukudlula kukulogu ngalokho okufakazela ngempela: isihlonzi esisha sokhiye sisho ukuthi ababili baqeda ukushintshwa, hhayi ukuthi umhubhe uxhumeke kabusha. Kuthatha njengobufakazi besinyathelo esisodwa, futhi uhlole izibali zokuhamba ngaphambi kokumemezela ukufuduka kuphelile.

Lokho isethembiso sokungaphazamiseki okuzokufihla ukwehluleka ongakaboni. Ukuvuselelwa okwehlulekayo, isitifiketi esiphelelwa yisikhathi noma iphutha lomzila kusengaphazamisa uxhumano, futhi akukho kukho okukhishwa ukuhlolwa okuhlanzekile. Isimo esifanele ukuklanyelwa simincane futhi siwusizo: ukushintshwa kokhiye okujwayelekile kuyeka ukuba ukushintshwa kwefayela ngesandla.