Amawashi amathathu kungxelo eyodwa ye-VPN: iklayenti, isango, umqoqi

Umugqa wesikhathi wesigameko se-VPN uvamise ukuqala ngezimpawu ezimbili zesikhathi ezihluka ngemizuzu embalwa kanye nesibonisi esikhombisa ihora elihlukile. Isilingo siwukukhetha esisodwa njengesiso esifanele bese ubhala kabusha esinye. Kokubili kungase kube ngcono, ngoba amawashi ahlukene azibhalile mayelana nezigameko ezihlukene. Inkolelo engamanga iwukuthi i-VPN inewashi elilodwa; umsebenzi uwukuthola ukuthi iyiphi ingxenye eyabhala yiphi inkambu.

Inkolelo engamanga: i-VPN inewashi elilodwa

Iklayenti libhala isigameko lapho lizama ukuxhumana. Isango libhala isigameko lapho lamukela noma livuma lowo mzamo. Umqoqi ubhala isikhathi sokufika lapho wamukela umyalezo wesango. Lezi yizigameko ezintathu, futhi ngasinye sifakwe uphawu lwewashi ingxenye ebhalayo eyayethemba lona. Ukuzihlanganisa zibe umugqa wesikhathi owodwa kuwukukhululeka okufihla ukungavumelani ozama ukukuchaza.

Izinombolo zivamise ukuhluka kusukela kumasekhondi kuya emizuzwini, futhi lokho kujwayelekile. Okubalulekile ukuthi umehluko uyisikhathi sokulibaziseka kokulethwa, ukushintsha kwewashi noma isigameko esihluke ngempela. Ukuze unqume ukuthi ubheke ini kudingeka umsuka wenkambu ngayinye, hhayi umbono oqinile wokuthi iyiphi imshini elungile.

Funda umsuka ngaphambi kwenani

Ngaphambi kokuqhathanisa amanani, khomba ukuthi ngubani owenze ngalinye nokuthi iyiphi inkambu. Umyalezo we-syslog uthwala uphawu lwesikhathi olusuka kumsuka, njengoba RFC 5424 ichaza, futhi ifomethi ingase futhi ithwale ulwazi lwekhwalithi yesikhathi oluchaza ukuvumelanisa nokunemba. Leyo fomethi efanayo ivumela umsuka ukuthi ungathumeli nhlobo uphawu lwesikhathi lapho ingakwazi ukufunda isikhathi sesistimu, futhi lokho ngokwako kuwuphawu olusizayo.

journalctl -o short-iso --utc -n 20
logger -t vpn-check "test event"

Iklayenti lingase futhi lithumele inani lesikhathi njengemethadatha yohlelo, futhi insizakalo eyigcinayo kufanele iyimake njengokubikwe yiklayenti esikhundleni sokuyithatha njengokuqinisekiswe ngokuzimela. Lowo maki umehluko phakathi kobufakazi nesimangalo. Lapho uthumela ingxelo ngaphandle kwicala, gcina ndawonye igama lenkambu, umsuka nokushintsha. Ukuzinciphisa zibe isikhathi sendawo esilula kubhubhisa khona kanye ulwazi oludingayo.

Yima uma ungakwazi ukusho ukuthi iyiphi ingxenye eyabhala inkambu. Ukuyiqhathanisa nanoma yini enye ukuqagela.

Ukuboniswa kwesizinda sesikhathi akusona isikhathi esihlukile

Isikhathi esifanayo esiboniswe njengo-10:00Z nanjengo-18:00+08:00 akusona ukungavumelani, futhi ukusithatha kanjalo kudla isigamu sosuku. Guqula kokubili kube yi-UTC ngaphambi kokuqhathanisa, futhi gcina umbhalo wangempela eduze kokuguqulwa. Ingxenyana yedesimali kolunye uhlangothi namasekhondi aphelele kolunye akusona ukungqubuzana futhi. Ukunemba akusona ubuqiniso: inani elinama-millisecond lingase lisavela kuwashi eliyiphutha ngemizuzu.

date -u +%FT%TZ
timedatectl

Ukulibaziseka kokulethwa kungenye incazelo ejwayelekile. Isango lirekhoda lapho lamukela ukuxhumana, umqoqi urekhoda lapho umyalezo wafika kuwona, ngakho igebe phakathi kwabo yisikhathi sokuthutha. Lelo gebe likhuluma okuthile ngomzila wengxelo, hhayi ngesikhathi se-VPN. Yimake njengesikhathi sokufika futhi iyeke ukuncintisana nesikhathi sesigameko.

Xhumanisa ngaphandle kokubhala kabusha ubufakazi

Gcina izimpawu zangempela zesikhathi futhi wengeze ikholomu esuselwe kuyo uma udinga umbono ovamile. Chaza ukuguqulwa kumanothi esikhundleni sokuhlela amarekhodi omsuka, ngoba umsuka yiwona ozohlolwa umhloli wakamuva. Gcina isikhathi sokufika somqoqi ngokwehlukana noma kuphi lapho sikhona.

chronyc tracking
journalctl --utc -u openvpn-client@work -n 50 --no-pager

Ukushintsha iwashi ledivayisi akusona ukulawula kobumfihlo futhi akubhali kabusha amarekhodi umunye uhlelo osuvele unayo. Kubuye kwenzise ukuthi kube nzima ukuqhathanisa ubufakazi bokusekela, futhi kungase kwephule izihlolo zesitifiketi nekhodi ezincike esikhathini. Gcina amawashi evumelanisiwe emsebenzini ojwayelekile, futhi thatha noma yikuphi ukuphambuka ngamabomu njengephutha okufanele liphenyiwe. Uma amarekhodi amabili ebonakala engahambisani nokulandelana, bheka ukuvumelanisa kwewashi nokulethwa ngaphambi kokwakha umlando omusha.

Inkolelo engamanga okufanele ishiywe iwukuthi kunesikhathi esisodwa se-VPN. Buza ukuthi yini eyabhala inkambu ngayinye nokuthi kwenzeka ini lapho ikwenza lokho, futhi umugqa wesikhathi uba iqoqo lokubonwa okumakiwe esikhundleni sokuphikisana.