I-Tor relay ne-VPN server: kungani zingashintshani

Iphothi evuliwe ku-Tor relay akuyona iphoyinti lokugcina le-VPN. Hlola kuqala ukuthi iphothi isebenzela ini, indima ye-relay, ububanzi besilaleli se-SOCKS kanye nephrofayili.

Unalo ikheli, iphothi liyaphendula, futhi iklayenti liyamukela ngaphandle kokukhononda. Akukho kulokhu okwenza i-Tor relay ibe iphoyinti lokugcina le-VPN, futhi iphutha liyabiza ngoba iphrofayili ingenwa ngokuhlanzekile bese yehluleka kamuva ekuxhawuleni. Ngisebenzisa izivivinyo ezine ngezansi ngokulandelana; ngayinye inomkhawulo wokuma, futhi ukuma kusenesikhathi yikhona okuyisihluthulelo. Uma isivivinyo sokuqala sehluleka, ezinye ngeke zikwazi ukukusiza.

Hlola ukuthi iphothi isebenzela ini ngempela

Iphothi evuliwe ifakazela isilaleli, akukho okunye. I-ORPort ye-relay ikhuluma namaseli e-Tor ngokwawo ngemva kokuxhawula kwe-TLS, ngakho ukuhlolwa kwe-TLS okuphumelelayo akusho cishe lutho mayelana nokuthi ingabe iphrothokholi ye-VPN iyamukelwa lapho:

nc -vz 203.0.113.20 443
openssl s_client -connect 203.0.113.20:443 -brief < /dev/null

Funda isitifiketi hhayi iqiniso lokuthi sikhona. Ama-relay ethula isitifiketi esizisayinele ngokwaso esinegama elingaqondile ngamabomu, ngoba ukuhamba kwe-relay kufanele kufane ne-HTTPS evamile; kanti isitifiketi se-VPN server sithwala igama elilindelwe iphrofayili yakho. Uma uhlangothi olulandelayo lungaphenduli neze kuphakethe lokuqala lwephrothokholi ye-VPN, noma yikuphi ukuhlelwa kwephrofayili ngeke kuguqule umphumela.

Ma lapha uma ikheli lingaqedeli ukuxhawula okuthunyelwa iklayenti lakho. Lokho kuyimpendulo yephrothokholi, hhayi inkinga yokumiswa, futhi yisizathu esivame kakhulu sokuthi iphrofayili engenisiwe ihlale ku-'connecting' unomphela.

Hlola indima ye-relay, hhayi ubukhulu benethiwekhi

Izindima ze-relay zenza imisebenzi ehlukene. I-guard iwukugxuma kokuqala kwamaklayenti, i-relay ephakathi idlulisa imijikelezo phakathi kwamanye ama-relay, i-exit iyona ethinta izindawo eziyiwa kuzo, futhi ibhuloho liyindawo yokungena engekho emphakathini esatshalaliswa nge-BridgeDB. I-glosari ye-Tor igcina lezincazelo zihlukene, futhi ukufinyeleleka kuyingxenye yawo wonke amadima kuyilapho imvume yokusebenzela amaklayenti angahleliwe kungeyona ingxenye yalawa.

Inqubomgomo ye-exit ifanele ifundwe ngoba iyona kuphela ingxenye efana nomthetho wokudlulisa, futhi ilawula izindawo eziyiwa kuzo i-exit ezovumela ukuphuma, hhayi amaklayenti avunyelwe ukungena. Inqubomgomo ye-exit eqinile evimba iphothi 25 isho okuthile mayelana nokulawulwa kokusetshenziswa kabi okuphumayo, hhayi mayelana nokuthi ungakhomba iklayenti le-OpenVPN emshinini yini.

Ma uma ubona ngodumo: ngenxa yokuthi ama-relay adlulisa ukuhamba, ikheli akumele lamukele okwakho, kodwa lokho akulona iqiniso. I-Tor ikhetha izindlela ngokuvumelana nangephrothokholi yayo; iklayenti le-VPN akusilo umhlanganyeli futhi alinawo umjikelezo ongajoyina kuwo.

Hlola ukuthi isilaleli se-SOCKS sasendaweni noma somphakathi

Iklayenti le-Tor liveza isixhumi esibonakalayo se-SOCKS ezinhlelweni ezikusimina esisodwa, ngokuzenzakalelayo ku-loopback. Leso silaleli siwusizo lwasendaweni, hhayi insizakalo i-relay eyinikezayo ku-inthanethi, futhi ukusithatha njenge-proxy yomphakathi yikho okwenza abantu bagcine beqhuba i-relay evulekile ababengakuhlosile:

ss -ltnp | grep 9050
curl --socks5-hostname 127.0.0.1:9050 https://check.torproject.org

Ikheli lokubopha yilo inkomba. I-SocksPort ku-127.0.0.1:9050 yenza umsebenzi wayo; leyo elalela ku-0.0.0.0 futhi efinyeleleka kusuka ngaphandle iyi-proxy evulekile, futhi izilawuli zenqubomgomo yokufinyelela ze-Tor ngokwayo zikhona ngoba lokho kuchayeka kuyinkinga hhayi isici.

Ohlelweni oludinga i-Tor, yikhombise kuphothi ye-loopback futhi uvumele i-Tor ixazulule amagama, okuyikho okwenziwa yifomu le-socks5h ngenhla. Ungashintshi ikheli le-relay ngaleyo phothi; i-relay ayinikezi isixhumi esibonakalayo esicelwa wuhlelo lwakho.

Hlola ukuthi iphrofayili ye-VPN ihambisana nephoyinti lokugcina langempela

Iphrofayili ye-VPN iqoqo lokulindela: i-OpenVPN idinga isitifiketi se-server noma i-CA, isitifiketi sekilayenti nokhiye, futhi ngokuvamile ukhiye we-TLS, kanti i-WireGuard idinga ukhiye womphakathi wohlangothi olulandelayo, iphoyinti lokugcina kanye nama-IP avunyelwe. Akukho kulokhu okungatholakala ekhelini nasephothini evulekile, yingakho iphrofayili eyakhiwe kanjalo yehluleka ekushintshaneni kokuqala hhayi ekuxhumaneni.

Uma unikezwa iphrofayili, qinisekisa ngayo ngokumelene nephoyinti lokugcina olilawulayo noma umhlinzeki ongambona:

wg show
openvpn --config client.ovpn --verb 4

Kulogi ye-OpenVPN, iphutha lokuxoxisana kwe-TLS lisho ngqo ukungafani; ku-wg show, uhlangothi olungenalo umugqa wokuxhawula alukaze luqede nowodwa. Kokubili kunolwazi olungaphezulu kwesikhombi esijikelezayo sekilayenti, futhi kokubili kukhombisa impahla yokhiye noma iphrothokholi hhayi i-Tor.

Hlola ukuthi yikuphi ukuvikelwa okudingayo ngempela

Lesi yisivivinyo esinquma ukwakheka. Isiphequluli se-Tor sikunikeza ukwehlukaniswa kwemijikelezo nokuvikelwa kwezimpawu zeminwe i-VPN engakunikezi; i-VPN iguqula ikheli elibonwa yindawo eziyiwa kuyo futhi ikuqinisekisa kumhlinzeki. Ukukhetha phakathi kwakho kuwumbuzo wemodeli yezinsongo, hhayi wokuhambisana, futhi ukuzihlanganisa kukhiqiza ukulungiselelwa okubonakala kuyimfihlo futhi kungenjalo.

Ukuxhumanisa kunokulandelana. I-VPN ethwala ukuhamba kwe-Tor iyilungiselelo elisekelwe, ngoba iklayenti le-Tor lidinga kuphela i-TCP ephumayo. Iklayenti le-VPN elifakwe kumhubhe ngaphakathi kwe-Tor akulona into efanayo futhi akulona okwenziwa yiklayenti le-Tor, ngakho ungahleleli kulokho.

Ngaphambi kokungenisa noma yini, qinisekisa konke okune:

  • Iphothi iqedela ukuxhawula kwephrothokholi yakho, hhayi ukuxhumana kwe-TCP kuphela.
  • Uyayazi indima yomsingathi futhi awukuthathi ukudlulisa njengemvume.
  • Isilaleli se-SOCKS osisebenzisayo siyi-loopback futhi ngesakho, hhayi iphothi yomphakathi ku-relay yomunye umuntu.
  • Okhiye noma izitifiketi zephrofayili kungokwephoyinti lokugcina oxhumana nalo.

Izihloko ezihlobene