I-VPN ixhunyiwe kodwa okuqukethwe okuxubile kusavinjiwe: yini okufanele ilungiswe
Hlela i-URL evinjiwe ngokuthi ngubani oyikhiqizile, lungisa inkomba noma yinike umnikazi womsingathi, bese uqinisekisa ukulungiswa kusukela kukhonco yesiphequluli.
Ingxenye yekhasi iyavezwa, isitayela esisodwa sikhombisa nsundu kuphaneli yeNethiwekhi, futhi iklayenti le-VPN lisabika umhubhe onempilo. Konke lokhu kubonwa kuyiqiniso ngasikhathi sinye, ngoba isiphequluli sahlulela isicelo esenziwe yikhasi futhi umhubhe awuzange ube nezwi kuleso sinqumo. Okwala icala yisinqumo hhayi isilungiselelo: lungisa inkomba, iyise kumnikazi womsingathi, noma yeka ukuncika. Nganye yalezi zinketho inokuhlolwa okushibhile, futhi ukukhetha okungalungile kudla umjikelezo wokusekela owodwa.
Kungani umhubhe ungeke ufakele isisetshenziswa esincane
Okuqukethwe okuxubile kuqala nge idokhumenti ye-HTTPS ecela isisetshenziswa esincane nge-HTTP ejwayelekile. Yonke i-URL ihlulelwa ngesikimu sayo, ngakho isivikelo sedokhumenti elingana naso asikaze sidlulele esicelweni esingaphansi. Ukubethela okungezwe ngaphansi kwesiphequluli kushintsha okuhamba ocingweni, hhayi i-http:// ecelwe umaka.
Izivinjari zamanje zihlukanisa lezi zicelo zibe ngamaqembu amabili futhi zibaphatha ngendlela ehlukile. Ama-skripthi, amasitayela, ama-iframe kanye nezingcingo nge-fetch, i-XMLHttpRequest noma i-WebSocket zenqatshwa ngokuqondile, ngaphandle komzamo wokuthuthukisa kuqala. Izithombe, umsindo nevidiyo kubhalwa kabusha ku-https:// futhi zicelwa futhi, futhi ukulayisha kuyekwa lapho lokho kuthola okuphephile kwehluleka. I-URL yesisetshenziswa esincane esiphethwe umsingathi oyikheli le-IP eluhlaza ayifakwa ekuthuthukisweni, ngakho isithombe se-HTTP kumsingathi we-IP sihlala sivinjwa esikhundleni sokulungiswa buthule. Lokhu kuhlukanisa, kuhlanganise nalokho kukhululwa ohlangothini olungathuthukiswa, kubhalwe ku mhlahlandlela we-Mozilla wokuqukethwe okuxubile. I-Chrome isebenzisa ukwenqaba okufanayo ekulandeni okungaphephile okuqalwe kusukela ekhasini eliphephile, yingakho isixhumanisi se-PDF singafa ngesikhathi ikhasi elizungezile libukeka liphelele.
Ngakho umugqa onsundu uwubufakazi bokuthi ukulawula kuyasebenza, hhayi ubufakazi bokuthi umhubhe ukhiphe umbhalo ocacile. Thatha umugqa njengokutholakele okukhomba inkomba eyodwa, hhayi ikhasi lonke.
Thola ukuthi inkomba engaphephile ingeyani
Hlela i-URL enenkinga ngokuthi ikhiqizwa kuphi ngaphambi kokushintsha noma yini. Leyo mpendulo inquma ukuthi ungakhipha ukulungiswa namuhla yini, ukuthi umhlinzeki kufanele akhiphe okukodwa yini, noma ukuthi ukuncika kufanele kushiye ikhasi yini. Yifunde kukholomu ye-Initiator kuphaneli yeNethiwekhi, ngoba umaka esikrinini uvame ukuhlanganiswa ngesikhathi sokusebenza.
| I-URL ivela kuphi | Ubani ongayilungisa | Isinyathelo sokuqala |
|---|---|---|
| Kubhalwe ngokuqinile kuthempulethi noma engxenyeni oyisebenzisayo | Wena | Yishintshe ngendlela ye-https:// bese uhlanza inqolobane |
| Kufakwe umphathi wamathegi noma inqwaba yomhlinzeki | Umhlinzeki, nethikithi lakho | Thumela i-URL eqondile, uhlobo lwesicelo nomugqa wekhonco |
| Kuhlinzekwa kuphela kuphothi 80 ngaphandle kwesilaleli se-TLS | Umnikazi womsingathi | Cela i-TLS, beka into oyilawulayo phambi kwayo, noma yiyeke |
Lapho umsingathi usevele uphendula ku-443 futhi inkomba kuphela ethi http, ukulungiswa kungokwasendaweni: shintsha inkomba, hlanza inqolobane yekhasi futhi uqinisekise ukuthi umugqa uba https. Umsingathi olalela kuphela kuphothi 80 awukwazi ukwenziwa uhambisane ngokuhlela, ngakho isisetshenziswa siyathutha, kubekwa into oyilawulayo phambi kwaso, noma siyanyamalala. I-URL efakwe umphathi wamathegi iyaqhubeka nokuvela ngisho lapho ithempulethi yakho ihlanzekile, futhi lelo cala lingelokuthikithi eline-URL eqondile nomugqa wekhonco elinanyathiselwe. Ukutshela abasebenzi ukuthi bavumele okuqukethwe okungaphephile akusona esinye salezi zinketho, ngoba kucisha ukuhlola kuyo yonke isayithi evakashelwa yileyo phrofayela yesiphequluli.
Lungisa inkomba hhayi isilungiselelo sesiphequluli
Layisha kabusha ukugeleza okuhlulekayo ngokugcina ilogi yenethiwekhi futhi uhlunge iphaneli ngomsingathi omsolisayo. Ikhonco isho i-URL nomyalelo, okuthi kuqume ukuthi isicelo senqatshwa noma sathuthukiswa ngaphambi kokuthi uthinte ithempulethi.
curl -sSI https://cdn.example.org/vendor.js | head -n 1
curl -sS -o /dev/null -w '%{http_code} %{url_effective}\n' -L https://cdn.example.org/vendor.jsIzilawuli ezimbili ezesekayo kufanele zaziwe, futhi akukho nokukodwa okushintsha ukulungiswa. Isihloko se-Content-Security-Policy esino upgrade-insecure-requests kwenza isiphequluli sibhale kabusha ama-URL ezisetshenziswa ezincane ze-http ngaphambi kokuba zishiye ikhasi, okubamba izinkomba ezindala ongakazitholi. Isicelo esibhalwe kabusha sisahluleka lapho umsingathi oqondiwe engayihlinzeki i-HTTPS, ngakho isihloko sishintsha kuphela ukuthi iyiphi i-URL isiphequluli esizamayo. I-HSTS isebenza ngomsingathi ngamunye, okusho ukuthi inqubomgomo kusizinda sakho ayenzi lutho nge-CDN yenhlangano yesithathu engakaze ithumele isihloko. Ngemva kokushintsha ithempulethi, hlanza inqolobane yekhasi futhi useshe igama lomsingathi elidala ku-HTML ekhishiwe, ngoba i-URL efanayo ingangena futhi ngesiqeshana, ngomucu wokuhumusha noma ngenkambu yesizindalwazi.
Landela nokuqondisa kabusha, ngoba uchungechunge oluqala nge-https:// lungase lwehlela endaweni ye-http:// futhi isiphequluli sahlulela ukugxuma kokugcina. Indlela ye- -L umyalo wesibili ongenhla iphrinta leyo URL esebenzayo kuwe. Uma ukugxuma kokugcina kuyi-http eluhlaza, inkomba isengalungile noma isixhumanisi osishintshile sasibukeka silungile.
Qinisekisa ikhasi ngekhonco nangephaneli lenethiwekhi
Layisha kabusha kunqolobane ivaliwe futhi uhambe ukugeleza kwakhona, kuhlanganise izinkinobho ezilayisha okuqukethwe ngokucelwa. Ukulayishwa kokuqala kwekhasi kufihla amawijethi avila, amathayela emephu namaskripthi omdlali avela kuphela ngemva kokuchofoza. Ikhonco akufanele ibe nokufakwa kokuqukethwe okuxubile futhi yonke imigqa oyithintile kufanele ibonise i-https. Thwebula ikhonco nomugqa wesicelo ngaphambi kokuvala ithikithi, ngoba leso simo kunzima ukusakha kabusha ngemva kokuthunyelwa okulandelayo.
Uma isisetshenziswa singesomunye umuntu, thumela izinto ezine: i-URL eqondile, uhlobo lwesicelo, umbhalo wekhonco nekhasi lapho ivela khona. Fihla izihlonzi zeseshini kukho konke okunamathiselayo ethikithini. Umbiko othi kuphela izithombe ziphukile awuniki umnikazi lutho azolusebenzisa.
Umhubhe uyaqhubeka nokwenza umsebenzi wawo ngesikhathi ukulungiswa kukulethe inkomba eyakha isicelo. Ngemva kokuthunyelwa, sesha igama lomsingathi futhi kuthempulethi nasenqwabeni yomhlinzeki, futhi vala icala kuphela lapho kungasekho kufakwa kokuqukethwe okuxubile okuvinjiwe ekhonco.