I-VPN ngaphambi kwe-Tor: ukulandelana kushintsha ini ngempela

Ukuxhuma i-VPN kuqala kukhiqiza uchungechunge oluthile: idivayisi, iphoyinti lokugcina le-VPN, umnyango we-Tor, isekethe ye-Tor, indawo ekuyiwa kuyo. Inethiwekhi yakho yasendaweni ibona ukuxhumana okukodwa okubethelwe kuyi-VPN, futhi inodi yomnyango we-Tor ibona ukuphuma kwe-VPN njengomthombo oqondile esikhundleni sekheli lomhlinzeki wakho. Umsebenzi we-VPN yena ubona ukuxhumana okuya engqalasizindeni yomnyango we-Tor futhi angacabanga ukusetshenziswa kwe-Tor kusukela ezindaweni ekuyiwa kuzo. Wonke umqaphi ulahlekelwa okuthile futhi azuze okuthile, yingakho ukulandelana kuwukushintshana hhayi ukuthuthukiswa.

Akukho lutho kulolo chungechunge olushintsha lokho iwebhusayithi ekufundayo ku-akhawunti yakho, kumakhukhi noma emininingwaneni oyibhalile.

Ukulandelana kushintsha ini

Inethiwekhi yasendaweni kanye ne-ISP balahlekelwa umbono oqondile wethrafikhi yakho ye-Tor, ngoba ukugxuma kokuqala manje kuwumhubhe obethelwe oya kumhlinzeki. Unogada womnyango we-Tor ulahlekelwa ikheli lakho lasekhaya futhi ubona ukuphuma kwe-VPN. Umhlinzeki we-VPN uthola imethadatha eyayiphethwe i-ISP yakho ngaphambili: yimaphi amakheli oxhumana nawo, ngasiphi isikhathi nokuthi yingakanani idatha ehambayo.

Ngale konogada womnyango, isekethe iziphatha njengakuqala. Ama-relay asahlukanisa izindima zomnyango, maphakathi nokuphuma, futhi i-VPN ayiboni okuqukethwe kokugcina ngaphezu kwe-ISP yakho.

Qinisekisa indlela esetshenziswa ngempela

Ukuhlukaniswa kwemihubhe yisizathu esivamile sokuthi uchungechunge oluhleliwe lungeyona eyangempela.Uma i-Tor Browser ikhishiwe kumhubhe, noma iphrofayili yesibili ihamba ngendlela ehlukile, unogada womnyango ubona futhi ikheli lomhlinzeki ngenkathi isixhumi sibonakala sixhunyiwe. Hlola indlela nokuphuma okubonwe, hhayi isithonjana.

ip route get 1.1.1.1
ss -tunp | grep -E 'tor|9150|9050'
curl --socks5-hostname 127.0.0.1:9150 https://check.torproject.org/api/ip
resolvectl status | grep -A3 'DNS Servers'

Isicelo se-SOCKS ngekomkhawulo u-9150 siphendulwa yiklayenti le-Tor Browser ngokwalo, ngakho impendulo ethi IsTor true iqinisekisa isekethe yesiphequluli, hhayi ukuthi yonke enye uhlelo iyisebenzisa. Kufanelekile ukuqopha okukhishwa yisixazululi ngoba i-DNS ingaphuma ngendlela engambozi mhubhe. Gcina kokubili okukhishiwe ngophawu lwesikhathi. Kuyisisekelo sokuqhathanisa okulandelayo.

Qhathanisa nesicelo esiqondile esivela kutheminali evamile: uma nakho kubika i-Tor, kukhona okunye okuqondisa kabusha ithrafikhi futhi uchungechunge alusilo olwalucatshangwa umklamo.

Bheka okwenzeka lapho umhubhe uwa

Iklayenti elibuyela buthule kusixhumi sasendaweni lishintsha umthombo obonwa unogada womnyango, futhi umsebenzisi ngokuvamile akazi ngoba ikhasi lisalayisha. Ukwehluleka yikho okufanele kuvivinywe, hhayi indlela ebabazekayo. Nqamula umhubhe ngamabomu futhi ubheke ukuthi ithrafikhi ye-Tor iyama noma iqhubeka ngaphandle kokuvikelwa.

nft list ruleset | grep -i -E 'vpn|tun|drop'
iptables -S | grep -i tun
ip link show | grep -E 'tun|wg'

Imithetho yewall yomlilo evimbela ithrafikhi ephumayo ngaphandle komhubhe iwukuphela kokulawula okuyisipele okuthembekile, futhi kufanele ihlanganise iklayenti le-SOCKS lesiphequluli nanoma yiluphi olunye uhlelo olubalulekile kuwe. Isengezo sesiphequluli akulona i-VPN yedivayisi futhi asithinti ezinye izinhlelo noma ababukeli bangaphandle.

Nquma ukuthi ingabe isendlalelo esengeziwe sifanelwe ukuthembana kwaso

Iphrojekthi ye-Tor ayikhuthazi ukufaka i-VPN ngaphansi kwe-Tor ngaphandle uma ungakwazi ukuhlola ukucushwa ngokwakho. Isizathu abasishoyo ukuncika okungeziwe: olunye uhlangothi, enye i-akhawunti kanye nenye indlela yokwehluleka. Uma umgomo kuwukuvimbela i-ISP yakho ukuthi ibone ukuthi usebenzisa i-Tor, i-VPN ibhekisela kulo mqaphi. Uma umgomo kuwukufihla okunamandla kakhulu emqaphini womhlaba, i-VPN ayikunikezi.

Ukulandelana okuphambene nakho kukhona, futhi amagama awashintsheki:I-Tor over VPN ne-VPN over Tor ichaza ubudlelwano bokuthembana obuhlukile nokuziphatha kokwehluleka okuhlukile. Funda ukuqhathanisa ngaphambi kokuzihlanganisa.

Bhala ukuthi imuphi umqaphi ozama ukumhambisa, bese uqinisekisa ukuthi indlela yangempela ihambisana nomklamo, bese uqinisekisa ukuziphatha kokwehluleka. Uma lezo zimpendulo ezintathu zingakuthetheleli i-akhawunti nokucushwa okungeziwe, ukucushwa kwe-Tor Browser okubhaliwe kunezingxenye ezimbalwa ongazenza iphutha.