I-VPN ku-UDP iyathula lapho kuskenwa iphothi? Kungani kwenzeka lokhu
I-WireGuard ne-OpenVPN eqinisiwe zilahla amadathagramu ahluleka ukuqinisekisa ngaphandle kokuphendula. Ukuthula okuvela kusikena kungukuziphatha okulindelekile, hhayi iphothi elivaliwe.
Uhlola iphothi le-VPN, awutholi mpendulo bese uphetha ngokuthi isevisi imile noma ifirewall ivaliwe. Ku-WireGuard, naseziteshini zokuphatha ze-OpenVPN ezithwala ukuqinisekisa kwazo, leso siphetho asilandi. Idathagramu elingenazo izinto zokuqinisekisa ezivumelekile lilahlwa ngaphandle kwempendulo, ngakho ukuthula yikho okubonakala kusevisi enempilo uma ibhekwa ngaphandle. Ukuhlola sekungalungile ngaphambi kokuba umhubhe ube kabi.
Ukuthula wuphrotokholi uqobo, hhayi iphutha
I-UDP ayinakho ukusungulwa koxhumano, ngakho akukho SYN futhi akukho siqinisekiso esingavumela isikena ukuba sihlukanise iphothi elivuliwe nelihlungiwe. Ukuhlola kufika njengedathagramu elizimele, futhi isevisi ihlola ukuthi liyahambisana yini nephrotokholi eliyilindele. Uma lingahambisani, iphakethe liyalahlwa, futhi ukulahla kungukuziphatha okubhaliwe, hhayi ukungalungi.
I-WireGuard iqinisekisa imilayezo yayo ye-handshake ngendlela ye-cryptography futhi ayinaki konke okwehlulayo. OpenVPN ne-tls-auth noma i-tls-crypt yenza okufanayo esiteshini sayo sokuphatha. Kuzo zombili izimo umthwalo ongakahleleki awufinyeleli ngisho nasesigabeni esibheke kumsebenzisi, ngakho akukho okungaphendulwa futhi akukho phutha elingabuyiselwa.
I-TCP ibingakunikeza ukusethwa kabusha okuvela kuphothi elivaliwe. I-UDP ikushiya ekungacacini, okuyinto izikena ezixazulula ngokubhala ukuthi kuvuliwe noma kuhlungiwe esikhundleni sokuqagula.
Isikena singaphetha ini futhi singakwazi ukuyini
Umiphumela yokuhlola inolwazi olulingana nokulingana komthwalo owuthunyelwe. Hlela okubonwa okungenzeka ngokusho kwalokho ngakunye okusekelwayo ngempela:
| Probe | Observed result | What it supports |
|---|---|---|
| Empty datagram | No reply | Nothing beyond the fact that UDP was used |
| Random payload | No reply | Consistent with an authenticated service |
| Valid handshake from a real client | A protocol reply | The service is alive and reachable |
| ICMP port unreachable | Unreachable message | The host answered, usually because nothing listens |
Funda umugqa wesithathu njengokuhlola okukodwa okuhle ohlwini. Kudinga iphrofayili yangempela, ukhiye wangempela nendawo yokugcina efanele, futhi yikho kanye isikena esijwayelekile esingenakho.
Bheka iziphetho zombili zomzila
Kuseva oyiphathayo, thatha kusixhumi esibonakalayo ngaphambi kokuphetha noma yini, bese ubuza isevisi ukuthi yabona ini. Yomibili imiyalo idinga i-root kugethiweyi:
tcpdump -ni any udp port 51820
tcpdump -ni any udp port 1194
wg showUma kungekho phakethe elivela kusixhumi esibonakalayo, umzila ulilahle ngaphambi kokuba isevisi ibone noma yini, futhi isigaba esilandelayo ukuhlela nokuhlunga. Uma amaphakethe efika kodwa kungapheleli handshake, isevisi iyafinyeleleka futhi umehluko usekhiyeni, ekulungiselelweni kwendawo yokugcina noma kunguqulo yephrotokholi. Lokho kuqhathanisa kuphendula umbuzo isikena esingakwazanga ukuwuphendula. Kuyisebenzise ngenkathi iklayenti langempela lizama ukuxhuma, hhayi ngenkathi isikena siziphinda.
Shintsha ukuhlola, hhayi ukuvikelwa
Indlela emfushane ekhangayo ukuvala ukuvikelwa kwesiteshi sokuphatha ukuze ukuxilongwa kuthole impendulo. Lokho kushintshanisa impahla yangempela yezokuphepha ngomphumela wokuhlola omuhle, futhi yinkomba engalungile. Esikhundleni salokho sebenzisa iphrofayili evumelekile evela kunethiwekhi evunyiwe, futhi bhala indawo yokugcina nesikhathi ukuze ukuqhathanisa kuphindwe.
Ukuhlola okusiza kakhulu ukuhlola okwehlukile: iphrofayili efanayo emzileni osebenzayo nasemzileni ongasebenzi. Uma umzila osebenzayo ukhiqiza i-handshake kanti umzila ohlulekile awukhiqizi lutho kusixhumi esibonakalayo, uthole indawo yokugqashuka ngaphandle kokwenza buthaka.
Ngakho iphakethe le-UDP elingaphendulwanga alifakazisi ukuthi iseva ayikho ku-inthanethi noma ukuthi iphephile. Lifakazisa kuphela ukuthi lokhu kuhlola, kulo mzila, ngalesi sikhathi, akwamukelwanga.