I-relay yokuphuma ye-Tor ne-server yokuphuma ye-VPN: yini eyaziwa yilowo nalowo
I-relay yokuphuma ye-Tor ne-server yokuphuma ye-VPN zombili zikhombisa ikheli elilodwa lomphakathi, kodwa zihlukanisa ulwazi ngendlela ehlukile. Qhathanisa ukubonakala, ukufakwa nendawo nomgomo wamachweba.
Zombili izindlela zifihla ikheli lakho ngemuva kwe-IP eyodwa yomphakathi, futhi isizindalwazi esiprinta ikheli elisibonayo asikwazi ukuhlukanisa lezi zinto ezimbili. Umehluko ukuthi ubani ufunda ini endleleni, ukuthi yingakanani ingxenye yethrafikhi efakiwe nokuthi yimaphi amachweba avunyelwe ukusebenza. I-relay yokuphuma ye-Tor iwukugxuma kokugcina komjikelezo wamar-reley amathathu; i-server yokuphuma ye-VPN iphetha umhubhe wakho futhi ivule ngokwayo ukuxhumana okuphumayo. Nakhu enginquma ngakho ukuthi yikuphi okudingwa umsebenzi, nokuthi yini engiyihlola ngaphambi kokucabanga ukuthi enye iziphatha njengenye.
Izindlela ezimbili eziphelela ekhelini elilodwa
I-Tor yakha umjikelezo ngonogada, i-relay ephakathi nendawo kanye nokuphuma, futhi ibethela umthwalo ngamazinga ukuze i-reley ngayinye ikhulule kuphela ingqimba yayo. Ukuphuma kwenza ukuxhumana okuvamile kwe-TCP endaweni ekuyiwa kuyo, yingakho indawo ekuyiwa kuyo ibona ikheli lokuphuma. Iklayenti lakho alilokothi likhulume ngokuqondile nendawo ekuyiwa kuyo, futhi nonogada akayiboni.
I-VPN iwumhubhe owodwa oya endaweni eyodwa yokugcina. I-server yomqhubi isusa umhubhe futhi ivule ukuxhumana okuphumayo, ngakho nendawo ekuyiwa kuyo ibona ikheli elilodwa, kulokhu elomqhubi. Umphumela obonakalayo uyafana; ulwazi alunjalo. Ukuhlola okuprynta i-IP kuphendula ukuthi ukusiphi isistimu futhi akusho lutho mayelana nokwahlulelwa kwethemba okuhluke ngempela.
Ubani ekugcineni azi ini
Indawo yokugcina ye-VPN ibona ikheli lomthombo, indawo ekuyiwa kuyo, isikhathi kanye nomthamo endaweni eyodwa. Lokho kugxilisa yikho ukuklama: umqhubi oyedwa, indawo eyodwa yamalogi, indawo eyodwa yokubiza noma yokuhlela okungalungile. Konke okutholayo kuvela ekwethembeni lelo qembu nasekumgomeni wokuphuma wendawo yokugcina.
I-Tor ihlukanisa lolo lwazi. Unogada uyazi ikheli lakho kodwa akayazi indawo ekuyiwa kuyo; ukuphuma kuyazi indawo ekuyiwa kuyo kodwa akulazi ikheli lakho. I-reley akufanele ifunde kokubili. Lesi yisici sesakhiwo, hhayi isithembiso ngokumelene nombheki womhlaba, i-reley ehlanganisa izikhathi noma indawo yokugcina ephuliwe, ngakho kubheka njengokunye ukusatshalaliswa kwengcuphe efanayo, hhayi njengokungaziwa okungeke kwehluleke.
| What is known | Tor exit relay | VPN exit server |
|---|---|---|
| Your public address | Seen by the guard relay, not the exit | Seen at the endpoint |
| Final destination | Seen at the exit | Seen at the endpoint |
| Coverage | Applications configured for Tor, chiefly Tor Browser | Whatever the route policy includes |
| Plain HTTP payload | Readable at the exit | Readable at the endpoint |
Ukufakwa yisinqumo sesiphequluli noma isinqumo somzila
Isiphequluli se-Tor sihamba ngomzila wethrafikhi yaso futhi sengeza izivikelo izingxenye ezingazivamile zeklayenti le-VPN ezingaziphindiseli: ukumelana neminwe, ukuhlukaniswa kweqembu lokuqala, usayizi wewindi ongaguquki kanye nesenzo sobuwena obusha esilahla isimo sesikhathi. Ezinye izinhlelo azisebenzisi lowo mjikelezo ngaphandle uma zilungiselelwe lokho, futhi ukuhlelwa kwe-Tor kuyo yonke isistimu kuwuphrojekthi ohlukile ekufakeni isiphequluli.
I-VPN inesimo esiphambene. Ukufakwa kulandela ithebula lemizila, ngakho iphrofayili ye-WireGuard ene-AllowedIPs = 0.0.0.0/0 ibamba konke futhi uhlu lomhubhe ohlukanisiwe lubamba kuphela iziqalo ezizibizayo. Kuyilo mshini wona lowo lapho nokuvuza kuhlala khona: imibuzo ye-DNS, i-IPv6 ne-WebRTC ngakunye kungathatha umzila ongafakwanga kumgomo womzila. Hlola ngaphakathi kohlelo olwehlulekile, hhayi kusethebhu yesiphequluli okungenzeka sisebenzisa enye indlela yokuxhumana.
Umgomo wamachweba, izindawo ezivinjiwe ne-HTTPS
I-relay yokuphuma ikhululekile ukwenqaba amachweba aphumayo, futhi umgomo wokuzenzakalela wenqaba uhlu lwamachweba asengozini yokusetshenziswa kabi, kuhlanganise nechweba le-SMTP 25. Ngakho iklayenti le-imeyili elilungiselelwe nge-Tor lihluleka lapho kuphuma, okubonakala njengokonakala kwenethiwekhi futhi akunjalo. Abaqhubi abagcina i-relay bakubeka lokhu ngokusobala:
# torrc — refuse outbound SMTP from this relay
ExitPolicy reject *:25Izindawo ekuyiwa kuzo nazo ziyavimba, futhi zivimba izistimu ezimbili ngendlela ehlukile. Amakheli okuphuma e-Tor ayashicilelwa, ngakho isizindalwazi singenqaba lonke uhlu; izindawo zokugcina ze-VPN zisezikhawulweni zezikhungo zedatha ezenqatshwa kalula ngendlela efanayo. Uma ikhasi lihluleka, hlukanisa abantu abathathu abangaba imbangela ngaphambi kokushintsha noma yini: umgomo wokuphuma noma wangaphandle, indawo ekuyiwa kuyo enqaba umthombo, noma isango elithumba isicelo sokuqala.
Asikho isistimu esithatha indawo yokubethelwa kokuthuthwa. I-HTTP elula iyafundeka kukho kokubili i-relay yokuphuma nendawo yokugcina ye-VPN, ngakho gcina i-HTTPS ivuliwe futhi ufunde isexwayiso sesitifiketi esikhundleni sokusilahla. Ukuhlola okubili kunquma ngokushesha umbuzo womzila: i-curl -s https://check.torproject.org/api/ip ibuyisela i-IsTor uma isicelo sidlule emjikelezweni, futhi i-curl -s https://ifconfig.me ikhombisa ikheli lokuphuma i-VPN engaletha lona. Ukusebenzisa kokubili kukutshela ukuthi i-shell isebenzisa muphi umzila ngempela.
Ungasebenzisi okunye njengokunye
Ikheli le-relay yokuphuma akuyona iphrofayili ye-VPN. Ukuqondisa iklayenti le-OpenVPN noma le-WireGuard ku-reley echwebeni 443 akudali mhubhe, ngoba akukho sevisi ye-VPN elalela lapho; i-reley iwukugxuma emjikelezweni womunye umuntu. Ngakolunye uhlangothi, indawo yokugcina ye-VPN akuyona indawo yokungena ye-Tor, futhi izilungiselelo zamabhuloho zesiphequluli se-Tor akuyona indawo yokunamathisela igama lomsingathi we-VPN yezentengiselwano. Uma usebenzisa i-Tor phezu kwe-VPN, unogada ubona ikheli le-VPN esikhundleni sakho, okushintsha ukwahlulelwa ngaphandle kokuhlanganisa izindima ezimbili.
Ngaphambi kokukhetha, phendula imibuzo emine ngokulandelana: ubani oqhuba indawo yokugcina nokuthi yini ayigcinayo, ithuluzi lifaka ini kule divayisi, umgomo wokuphuma uvumela amaphi amachweba nezindawo, futhi uhlelo lwengeza ini ngaphezu komzila wenethiwekhi. Umsebenzi odinga ukufinyelela kwenethiwekhi okuvamile kwezinhlelo eziningi ufuna i-VPN. Umsebenzi odinga izivikelo zezinga lesiphequluli nemodeli yomjikelezo ufuna isiphequluli se-Tor, esigcinwa sisesikhathini. Uma impendulo ithi «kokubili», zisebenzise ngokulandelana okuhlosiwe futhi ubhale ukuthi uhlangothi ngalunye lubona liphi ikheli.