I-Tor nge-VPN: ubani obona i-IP yakho, futhi ubani obona ukusetshenziswa kwe-Tor?
Ku-Tor nge-VPN, i-relay yokungena ibona ukuphuma kwakho kwe-VPN, futhi umhlinzeki wakho ubona i-relay yokuqapha. Hlanekezela ukulandelana futhi bobabili ababukeli bayashintsha.
Uxhuma iklayenti le-VPN, ulinde umhubhe, bese uvula i-Tor Browser futhi uyivumela ukuthi yakhe umjikelezo. Yilolo kulandelana olujwayelekile olunquma ukuthi ubani ubona ini. Kulolo kulandelana i-relay yokungena ye-Tor ibingelela ikheli lokuphuma kwe-VPN yakho, futhi umhlinzeki wakho we-VPN ubingelela i-relay yokuqapha yomphakathi. Kwenze ngokuphambene futhi bobabili ababukeli bayashintsha. Kokubili ukulandelana kufanele kucutshungulwe, ngoba izilungiselelo zeklayenti zephula buthule ukulandelana abantu ababekholelwa ukuthi kukhona, futhi ukuhlolwa okukubamba kuyafana kuzo zombili izimo.
Qala ngokulandelana, hhayi ngomkhiqizo
Izinhlelo ezimbili zibizwa ngokuthi «i-VPN ene-Tor», futhi eyokuqala kuphela ejwayelekile. Ku-Tor nge-VPN, umhubhe usuvele uphakeme lapho i-Tor iqala, ngakho inqubo ye-tor ithumela ukuxhumana kwayo kokuqapha kungene emhubheni njenganoma yikuphi okunye ukuxhumana okuphumayo. Ku-VPN nge-Tor, i-Tor iqhuma kuqala futhi iseshini ye-VPN ngokwayo ihamba ngomjikelezo, ifike kumhlinzeki isuka ekuphumeni kwe-Tor.
Okushintshayo phakathi kwazo ikheli elime kuqhubeka kokugcina kwesixhumanisi esingaphandle kakhulu. Umhloli ngamunye ubona kuphela igxathu eledlule, akakaze abone indlela yonke: umqaphi ubona ukuthi ubani oxhumene nawo, futhi iseva ye-VPN ibona ukuthi ubani oxhumene nayo. I-Tor ayikuthwali ikheli lomhubhe wendawo yakho liphume, futhi asikho isigaba kuphrothokholi lapho ingakwenza khona.
Kukho kokubili ukulandelana, iwebhusayithi yomgomo ibona okokuphuma kwe-Tor namanje, futhi akukho kulandelana okushintsha lokho leyo sayithi ekufunda kokungena kwakho. Umehluko ukhawulelwe emikhawulweni emibili.
I-relay yokungena ye-Tor ibona ini
Ukungena, noma umqaphi, kwamukela ukuxhumana okuvamile kwe-TCP embobeni ye-relay futhi kuqala ukuxhawulana kwe-TLS neklayenti. Kuhlelo lwe-Tor-nge-VPN, umthombo walokho kuxhumana ukuphuma kwe-VPN yakho. Kuhlelo lwe-Tor-kuqala, yikheli elasetshenziswa umshini wakho ukufinyelela inethiwekhi ye-Tor, ngokuvamile ukuxhumana kwakho kwasekhaya.
Lokho kuphendula ingxenye ye-IP yombuzo, kodwa kuphela uma umhubhe wawuthwala ukuxhumana ngempela. Inqubo ye-Tor ifinyelela kumqaphi ngesokhethi yayo, futhi leso sokhethi asilawulwa yizilungiselelo ze-proxy ze-Tor Browser. Isiphequluli sikhuluma nenqubo ye-tor efakiwe nge-SOCKS ku-9150, bese i-tor ivula ukuxhumana kwayo isebenzisa ithebula lomzila le-kernel. Umugqa we-Socks5Proxy ku-torrc, noma ukuthutha kweklayenti, kushintsha leyo ndlela. Akukho okunye.
Ku-Linux ungafunda impendulo kumsini. Buza i-kernel ukuthi iyiphi i-interface eyayizosebenzisa ekhelini lomphakathi elithile, bese ubheka ikheli lendawo lokuxhumana okusunguliwe:
ip route get 203.0.113.10
sudo ss -tnp | grep -i torUma umzila uthi dev wg0 noma dev tun0, futhi ikheli lendawo ekuxhumaneni okusunguliwe liyikheli lomhubhe, i-Tor ingaphakathi kwe-VPN. Uma umzila usho i-interface yakho yomzimba, ingaphandle, noma isibonisi seklayenti ngokwaso sithini.
Umhlinzeki wakho we-VPN angabona ini
Umhlinzeki uqeda iseshini yakho ye-VPN, ngakho ubona amakheli oxhumana nawo. Amakheli e-relay yokuqapha ayashicilelwa esivumelwaneni somphakathi futhi izimbobo zawo zaziwa, ngakho ukufanisa eyodwa ukusesha kuhlu, hhayi ukuhlolwa okujulile kwamaphakethe. Umhlinzeki akadingi ukuphula i-Tor ukuze azi ukuthi iseshini iyi-Tor.
Angakuboni ukuthi yingxenye esele yomjikelezo. I-relay ephakathi nokuphuma kukhethwa ngaphakathi kwe-Tor, futhi umhlinzeki uphatha kuphela isixhumanisi esiya kumqaphi. Okuqukethwe kwekhasi kuhlala ku-TLS ephela ekuphumeni, futhi ukuxazululwa kwamagama kokuxhumana kwe-Tor kwenzeka futhi ekuphumeni, ngakho akukho mbuzo we-DNS kumhlinzeki ongahlanganiswa nendawo.
Amabhuloho ane-obfs4 ashintsha ukusesha, hhayi ukwakheka. Ikheli lebhuloho alikho ohlwini lwe-relay lomphakathi futhi ukuxhumana kwakhiwa ukuze kungabonakali njenge-Tor, ngakho umqhubi oqhathanisa amakheli kuphela ngeke akumake. Iseshini isavela kuklayenti yakho ye-VPN, futhi umhlinzeki usabona iphuzu elilodwa lokugcina, umthamo owodwa neshejuli eyodwa.
Ikhono akusiyo inqubomgomo yokugcina
Umqhubi ongabuka ukuxhumana akazange athembise ukukugcina. Ukuloga kuyisinqumo esihlukile, kubhalwe kwinqubomgomo, kukhawulwe yigunya, futhi kungaqinisekiswa kuphela ngobufakazi osuvele ubwethemba. Ilebulu elithi akukho kulogi alishintshi indima yenethiwekhi echazwe ngenhla.
Ubunikazi be-akhawunti ngokuvamile bubaluleke kakhulu kunekheli lokuphuma. Uma ungene ngekheli le-imeyili, noma ukhokhe ngekhadi, umhlinzeki angahlobanisa iseshini nawe ngaphandle kokuloga ngisho indawo eyodwa. Ukuzungeza ama-IP okuphuma akwenzi lutho ngalokho.
Hlola ukuxhumana ngaphambi kokuthemba noma iyiphi yezimpendulo ezimbili
Iningi labantu abakholelwa ukuthi basebenzisa i-Tor nge-VPN basebenzisa ingxenye yayo kuphela. Ukuhlukanisa umhubhe okukhipha i-Tor Browser, iswishi yokuvala egubungela isiphequluli kodwa hhayi insizakalo ye-tor, iyunithi yokuqalisa esebenza ngaphambi kokuba umhubhe uphakame, nomzila we-IPv6 ozungeza umhubhe kunezine ezijwayelekile.
Ukufunda isikrini sesimo seklayenti akuhloli noma eyodwa yazo. Ukuhlola okukwenzayo: shiya i-Tor Browser isebenza, yehlisa umhubhe, bese ubheka ukuthi ukuxhumana kokuqapha kuyasinda yini ku-interface yomzimba.
Ukulandelana engikuhlola ngakho, ngima ekwehlulekeni kokuqala:
ip route get 203.0.113.10kubuyisela idivayisi yomhubhe.ss -tnp | grep -i torkukhombisa ukuxhumana kokuqapha ngekheli lendawo lomhubhe.ip -6 routeakinawo umzila ozenzakalelayo ngaphandle komhubhe, noma i-IPv6 icishiwe kuklayenti.- Ukwehlisa i-VPN kuqeda noma kuqondisa kabusha ukuxhumana kwe-tor esikhundleni sokukushiya kusixhumanisi somzimba.
Ukuphi ukulandelana okuhambisana nalokho okukuvikelayo
Kokubili ukulandelana kufihla okuthile futhi kudalule okuthile, ngakho impendulo iwukukhetha mayelana nomhloli okukhathazayo kuwe.
| Observer | Tor over VPN | VPN over Tor |
|---|---|---|
| Your ISP or local network | Sees a VPN connection, not Tor | Sees a Tor guard connection |
| Your VPN provider | Sees Tor use, and your home address | Sees a Tor exit as the client, not your home address |
| Tor entry relay | Sees the VPN exit | Sees your home address |
| Destination website | Sees a Tor exit | Sees a Tor exit |
Kufunde ngekhohlo ngemuva kwelinye kuze kube umugqa ufanisana nalokho ozama ukukuvimbela. Uma ukukhathazeka kuyinethiwekhi yendawo noma i-ISP erekhoda noma evimba i-Tor, i-Tor nge-VPN ikubhekela. Uma ukukhathazeka kungukuthi umqhubi we-VPN ufunda ikheli lakho lasekhaya, i-VPN nge-Tor ikubhekela, futhi ikhokha ngokudalula ukusetshenziswa kwe-Tor kunethiwekhi yakho kanye nekheli lasekhaya kumqaphi.
Asikho isakhiwo esishiya imikhawulo yomibili ingaboni. Ukwengeza umhloli akususi omunye. Inothi le-Tor Project mayelana nokusebenzisa i-VPN ne-Tor lisho into efanayo ngakolunye uhlangothi: umhubhe ushintsha ukuthi ubani othembekile nokuthi imiphi imigwaqo yokwehluleka ekhona, ngakho akusona isithuthukisi esingeziwe ngaphandle kokunquma ukuthi wawufuna ukufihla ini.
Nquma umhloli kuqala, khetha ukulandelana okwesibili, futhi qinisekisa nge-ip route get ne-ss esikhundleni sesibonisi seklayenti. Uma umhloli engumuntu ongaphoqa umhlinzeki we-VPN ngokwakhe, akukho kukhetha kokulandelana okukulungisayo.