I-Tor ilungile ngaphambi kwe-VPN: hlela isango lokuqala ngendlela efanele

Ukubheka inqubo ye-tor bese uqala i-VPN yindlela evame kakhulu yokwakha le nqwaba ngendlela engalungile. I-daemon ivela kudala ngaphambi kokuba ikwazi ukuthwala ukugeleza kweklayenti, futhi ukulinda okungaguquki kuwukuqagela okugqokiswe njengokuncika. Isango kufanele kube yisimo isigaba esilandelayo esisidinga ngempela. Hamba ngezinyathelo ezine ezingezansi ngokulandelana, futhi thatha ngayinye njengesimo esihlukile hhayi ukubambezeleka okufanele kulungiswe.

Isinyathelo 1: khetha ukuthutha onakho ngempela

Qala ngephrothokholi, ngoba ukwakheka okusele kuncike kuyo. Isixhumi se-SOCKS se-Tor asisebenzi i-UDP ASSOCIATE, ngakho noma yini ethwalwa ngayo kufanele ibe ukuhamba kwe-TCP. Iphrofayela ye-OpenVPN esebenzisa i-UDP ngeke isebenze ngale ndlela, kungakhathaliseki ukuthi umqaphi ubhalwe kanjani. Shintsha iphrofayela iye ku-TCP futhi uqinisekise ukuthi umlingani okude uyayamukela ngaphambi kokuthinta umqondo wokuqala.

Bese uqinisekisa ukuthi iklayenti lakho liyakwazi ukufinyelela i-proxy ye-SOCKS nhlobo. I-OpenVPN 2.6 ibhala phansi inketho ye-socks-proxy yamaphrofayela e-TCP, futhi amaklayenti ahlukene ahlinzeka ngokusekelwa kwe-proxy okuhlukile. Isiqalisi esingayinaki ngokuthula inketho ye-proxy sizoxhuma ngqo futhi sibonakale sisebenza, okuyinto embi kunokuhluleka.

Bhala ukuthutha okukhethiwe ku-runbook, ngoba ukuhlolwa ngakunye okulandelayo kuncike kukho.

Isinyathelo 2: funda isigaba se-bootstrap, hhayi uhlu lwezinqubo

Iphrothokholi yokulawula ye-Tor iphendula i-GETINFO status/bootstrap-phase ngesimo se-bootstrap sakamuva, kufaka phakathi iphesenti lenqubekela phambili nomaka wesifinyezo. Leyo mpendulo ilusizo khona ngoba isilawuli singaxhuma ngemva kokuba i-daemon isiqedile i-bootstrap. Umqaphi olalela izehlakalo kuphela uzophuthelwa icala lapho i-Tor yayivele ilungile ngaphambi kokuba umqaphi aqale.

Gunyaza ukuxhumana kokulawula ngendlela efanele. Imbobo yokulawula iyisixhumi sokuphatha, futhi noma ubani ongakhuluma nayo angakwazi ukumisa kabusha i-daemon. Yigcine ku-localhost, gcina ukuqinisekiswa kwekhukhi noma iphasiwedi kuvuliwe, futhi ungacishi noma yikuphi kokubili ukuze wenze iskripthi sokuqala sibe lula.

Funda isigaba kanye lapho uqala, bese ubhalisela izehlakalo zenqubekela phambili ukuze uthole umbono obukhoma.

printf 'AUTHENTICATE\r\nGETINFO status/bootstrap-phase\r\nQUIT\r\n' | nc 127.0.0.1 9051
ss -ltn | grep -E '9050|9051'
tor --verify-config -f /etc/tor/torrc

Impendulo enenqubekela phambili engu-100 nomaka done isho ukuthi i-daemon isiqedile ukuqalisa kwayo. Akusho ukuthi isivele ikhona isekethe esisebenzisekayo eya endaweni oya kuyo.

Isinyathelo 3: linda isehlakalo sesekethe yeklayenti

Iphrothokholi yezehlakalo ye-Tor ichaza i-CIRCUIT_ESTABLISHED, ebika ukuthi iklayenti linesekethe elingayisebenzisa. Leso yisignali yokulungela efunwa isango lomthwali, ngoba iseduze namandla owadingayo kunephesenti. Bhalisela isehlakalo futhi urekhode ukudlula, ukuze ilogi ibonise ukuthi umthwali waqala nini ukusebenziseka, hhayi ukuthi inqubo yavela nini.

Thatha isehlakalo njengemvume yokuzama, hhayi njengesiqinisekiso mayelana nendawo ethile oya kuyo. Inqubomgomo yokuphuma ingasenqaba umlingani okude, futhi ukuxhawulana kwe-VPN ngokwayo kungase kuhluleke ngezizathu ezingahlobene ne-Tor.

Gcina imibandela emibili ihlukene kukhodi. Inani elilodwa le-boolean elibizwa nge-ready lizozihlanganisa futhi lenze isehlakalo esilandelayo singafundeki.

Isinyathelo 4: vala i-VPN ngokuxhawulana kwayo

I-VPN inombandela wayo wokulungela, futhi yiwo kuphela oqinisekisa ukuthi umhubhe ukhuphukile. Linda ize iklayenti libike isimo esixhunyiwe nesihloko esabelwe, bese uhlola ukuthi imfuneko ye-proxy yahlala isebenza. I-loop yokuzama kabusha elahla inketho ye-socks-proxy ngemva kokuhluleka kanye izoxhuma ngqo futhi yehlule umklamo wonke ngokuthula.

Nquma ukuthi kwenzekani lapho umlingani engafinyeleleki ngaphambi kokuba udinge ukukwazi. Ukuzama kabusha okulinganiselwe nokuhluleka okubonakalayo kulula ukuphatha kune-loop engapheli, futhi kunikeza uhlelo lokuqapha okuthile okufanele lixwayise ngakho. Isinqumo esifanayo sisebenza kumthwali: uma i-Tor iqala kabusha, i-VPN kufanele ihlinzekwe kabusha futhi ivalwe kabusha esikhundleni sokuyeka isebenza kusekethe efile.

Ekugcineni, gcina inqubomgomo yohlelo lokusebenza ngokwayo isebenza ngenkathi i-VPN icishiwe. Umqaphi olinda ngendlela efanele akenzi lutho ukuvimbela inqubo engahlobene ukuthi ithumele ithrafikhi ngqo.

Hlola izinguquko ezine okufanele udlule kuzo

Amacala amane ahlanganisa umklamo: ukuqala okubandayo lapho i-Tor ikhuphuka kuqala, umqaphi oxhuma ne-Tor esivele ilungile, umlingani we-VPN ongatholakali, kanye nokulahleka komthwali ngenkathi umhubhe ukhuphukile. Ngakunye kunenguquko elindelekile ehlukile, futhi ngakunye kukhiqiza umugqa welogi ohlukile uma isango libhalwe ngendlela efanele.

Ziqhube ngamabomu, ngayinye ngayinye, futhi ufunde izinguquko zesimo esikhundleni sohlu lwezinqubo.

journalctl -u tor@default -n 30 --no-pager
systemctl status [email protected]
curl -sS --socks5-hostname 127.0.0.1:9050 https://check.torproject.org/api/ip

Lapho umthwali uwa, i-VPN kufanele yehle nayo phansi phakathi nesikhathi esisodwa sokuzama kabusha esikhundleni sokulenga ngomhubhe ogugile. Lapho i-Tor ibuya, isango kufanele livulwe kabusha kuphela ngemva kwesehlakalo sesekethe, hhayi ngemva kokuqala kwenqubo. Bhala ukuthi yimuphi umbandela owawungekho ekuhlulekeni ngakunye, futhi umuntu olandelayo emsebenzini ngeke adinge ukwakha kabusha ukulandelana kusukela kuzimpawu zesikhathi.