Ukutholwa kwe-VPN kuncike lapho ubuka khona
Umqaphi wenethiwekhi ubona umhubhe; iwebhusayithi ibona iseshini ye-TLS yesiphequluli. Ubufakazi obuvela endaweni eyodwa yokugqama abudluli kwenye.
Abatholi ababili bangabheka umsebenzisi oyedwa bese behluka, bobabili banembile. Umqaphi oseduze kwesixhumanisi sokufinyelela ubona ingxoxo yangaphandle ye-VPN; iwebhusayithi ibona uxhumano lohlelo lokusebenza oluvela ekuphumeni. Lena imifanekiso ehlukene enezigxivizo zeminwe ehlukene, futhi ubufakazi besinye abudluli kwesinye. Ukusho indawo yokugqama ngaphambi kokuxoxa noma yiluphi ucwaningo lwe-TLS noma lwe-TCP yikho okwenza isimangalo sibe nomqondo.
Umtholi ongasho indawo yokugqama uchaza umbono, hhayi isilinganiso.
Izindawo ezimbili zokugqama, ukuxhumana okubili okuhlukene
Ingxoxo yangaphandle ingeyephrothokholi yomhubhe: izinhlobo zayo zemiyalezo, umshini wayo wesimo, isikhathi sayo. Uxhumano lwangaphakathi yisiphequluli esivula i-TLS kuwebhusayithi, luthwalwa ngomhubhe bese ludluliselwa lusuka ekuphumeni. Kokubili kukhona ngasikhathi sinye futhi akusiyo ukugeleza okukodwa. Okunye yilokho inethiwekhi yokufinyelela engakubona, okunye yilokho indawo ekuyiwa kuyo engakubona, futhi ibhokisi eliphakathi eliqeda noma ikuphi kukho kushintsha izithombe zombili.
Lowo mehluko uchaza iningi lokudideka ezingxoxweni zokutholwa. Ucwaningo olubika into eyodwa ngokugeleza luvame ukuphendula umbuzo ngesendlalelo esihlukile kuleyo umqhubi ayecabanga ngayo.
Umqaphi osendleleni yokufinyelela ubona ini
Eceleni kwesixhumanisi sokufinyelela, impahla ebonakalayo iyiphrothokholi yomhubhe ngokwayo: izinhlobo zamaphakethe okulawula nedatha ze-OpenVPN, amaphethini anobukhulu obungaguquki bokuxhawula nedatha e-WireGuard, noma noma yikuphi ukugoqa okungezwa ukusatshalaliswa. Ukuthi isihlukanisi singazibona yini kuncike kulokho okubonakalayo, ukuthi yikuphi ukuthutha okuzithwalayo nokuthi kukhona yini ukufihlakala okungeziwe. Iphethini ebonakalayo iwubufakazi ngokugeleza, hhayi ubufakazi ngobunikazi noma inhloso yomuntu ongemuva kwayo.
Iphothi engu-443 iwumkhuba wokufinyelela insiza. Ayikwenzi konke ukuthutha komhubhe kube yi-HTTPS.
Iwebhusayithi ibona ini ngempela
Ngomhubhe ohlelwe ngendlela, isiphequluli sisasebenza iseshini yaso ye-TLS nesayithi. Ukuhumusha ekuphumeni akwenzi isango le-VPN libe yindawo yokugcina ye-TLS yesiphequluli, ngakho i-ClientHello etholwa isayithi ichaza isiphequluli noma umtapo walo we-TLS. Ngakho isigxivizo seminwe esifana ne-JA3 sibonisa uxhumano lohlelo lokusebenza, hhayi isofthiwe ye-VPN eluthwalayo. Kuphela iphroksi eqeda ngamabomu ishintsha lokho kuhlelwa, futhi kumelwe ikhonjwe ngokwehlukana.
Ukuqapha kwe-TCP kudinga ukunakekela okufanayo. Ukudlulisela, ukuhumusha kanye nephroksi evula uxhumano olusha kuyimiklamo emithathu ehlukene, futhi munye kuphela kuyo obhala kabusha isitaki sokuthutha. Isici esisodwa esingajwayelekile asisho ngokukhethekile umhubhe.
Gcina isimangalo ngaphakathi kobufakazi
Ukuhlukanisa inethiwekhi, ukuqapha iphrothokholi, izigxivizo zeminwe zohlelo lokusebenza kanye nezimpawu zekhasi kuyizinto zokufaka zesinqumo sobungozi, ngakunye kunamaphutha okuthola okungekho kanye nokweqiwa kanye nobufakazi obungekho. Ikheli elisemkhakheni we-hosting alifakazi lutho nge-VPN yezentengiselwano, futhi isigxivizo seminwe esivamile sesiphequluli asifakazi lutho nge-VPN eqondile. Uma uhlola umtholi, sebenzisa isethi yedatha egunyaziwe enemizila eyaziwayo futhi urekhode ukuthi yikuphi ukuqapha okukhiqize umphumela ngamunye.
Hlukanisa ukuhlukanisa iphrothokholi esinqumweni sokufinyelela esinemiphumela. Impendulo yangokwezifiso noma iqhinga lephakethe elonakele akufakazeli isiphetho esingemuva kwayo; kumane kwakha ingcindezi esicabangweni.
Umbiko owusizo usho ukuqapha, indawo yokugqama kanye nokuzethemba. Umugqa ongenalutho othi «i-VPN itholakele» ufihla ngqo ingxenye ebingavumela umuntu ukuyiqinisekisa.