Fail-open noma fail-closed: izinga le-VPN kill switch linquma ini
Womabili amagama achaza okwenzekayo lapho umhubhe ungekho, hhayi ukuthi ukubethela kunamandla kangakanani. Ububanzi obukhethayo bunquma ukuthi ithrafikhi iyavuza ngempela yini.
Inganekwane ukuthi i-fail-closed iyisimo esiphephile kanti i-fail-open iwubudedengu. Zombili zichaza okwenzeka kuthrafikhi ngemva kokunyamalala komhubhe, futhi akukho kuzo okushintsha ukuthi lowo mhubhe ubethela kahle kangakanani. Inqubomgomo ye-fail-closed enohlu olude lwezimvume ingavuza ngaphezu kwenqubomgomo ye-fail-open kudivayisi engashiyi neze inethiwekhi yasehhovisi. Khetha umphumela ongawuchazela umnikazi wethrafikhi.
Ilebuli ichaza umphumela, hhayi amandla
Amagama avela ezinhlelweni zokulawula: i-fail-open ivumela ukusebenza lapho ingxenye yehluleka, i-fail-closed iyenqaba. Uma isetshenziswa ku-VPN, ingxenye ehlulekayo iwumhubhe, futhi umbuzo uwukuthi ithrafikhi ivunyelwa yini ukuqhubeka ngomunye umzila. Ukukhetha kwe-cipher, ubude bokhiye kanye neprotocol kuyizinqumo ezihlukene.
Ukudideka kuyaqhubeka ngoba i-kill switch izwakala njengesici sokuphepha, futhi abathengisi bayikhangisa kanjalo. Ngokomshini iwumthetho wokuhambisa nowodonga lomlilo ovimbela ithrafikhi okwakufanele ithwalwe umhubhe, owenziwa eklayentini, kusistimu yokusebenza noma esangweni. Noma yiliphi izinga eliyisebenzisayo liphinde lichaze nobubanzi bayo, futhi umthetho oseqeleni elilodwa awumbozi elinye. Umthetho osesangweni awukwazi ukuvikela ikhompyutha ephathekayo eseyithuthele kwenye inethiwekhi.
Uhlobo lomphumela ngamunye
Inqubomgomo efanayo ingaziphatha ngendlela ehluke kakhulu kuye ngokuthi ihlangabezana nakuphi ukwehluleka, ngakho qhathanisa izehlakalo hhayi amalebuli.
| Event | Fail-open result | Fail-closed result |
|---|---|---|
| Tunnel drops while a transfer runs | Transfer continues on the direct path | Transfer stalls until the tunnel returns |
| Client exits or crashes | Rules disappear with the process | Rules persist only if the OS owns them |
| Device boots before sign-in | Normal network access | Blocked until the VPN connects |
| Captive portal needed | Portal loads normally | Portal unreachable without an exception |
| IPv6 not carried by the tunnel | IPv6 traffic leaks directly | Leaks too, unless the block covers IPv6 |
Umugqa wokugcina uwona obamba labo abacabanga ukuthi i-kill switch iyiswishi eyodwa. Umthetho obhalelwe ithebula lokuhambisa le-IPv4 ushiya umzila ozenzakalelayo we-IPv6 ungathintekile, futhi uhlelo lungawusebenzisa ngokukhululeka.
Ububanzi bunquma ukuthi iyavuza yini
Buza ukuthi inqubomgomo ihlanganisa ini ngaphambi kokubuza ukuthi iyiphi imodi. Umthetho wohlelo ngalunye uvikela uhlelo olulodwa futhi akukho okunye, umthetho wedivayisi yonke uvikela konke ngaphandle kwezimvume, futhi umthetho wesango uvikela kuphela ithrafikhi efinyelela leso sango. I-DNS idinga isinqumo sayo, ngoba umbuzo othunyelwe kusixazululi sendawo ungaveza amagama ngisho lapho umthwalo uvinjiwe.
Izimvume zenethiwekhi yendawo zikhona zama-printer, ukusakaza kanye namasango okungena, futhi ngayinye iyimbobo ekuvinjeni. Zibhale eduze kwenqubomgomo, ngoba umuntu ozothola ikhophi yokuhlelwa uzofunda i-fail-closed njengento ephelele.
Ukuxhuma kabusha nokuvimbela nakho kuyizilawuli ezihlukene. Iklayenti ingaxhuma kabusha ngokuzenzakalela ngaphandle kokuvimbela nakanye, noma ivimbele ngaphandle kokuxhuma kabusha, futhi inhlanganisela inquma ukuthi umsebenzisi uhlangabezana nani ngesikhathi sokuphazamiseka.
Kufakazele ngesikhathi sokushintsha
Ukuhlola isimo esizinzile akufakazeli lutho. Yehla umhubhe ngamabomu bese uzama uhlelo okufanele luvikelwe, bese uhlola ukuthi lufinyelele yini enethiwekhini. Qhathanisa isikhombisi sekhayenti nomphumela, ngoba isikhombisi esisathi sixhunyiwe yiso kanye isimo inqubomgomo ekhona ngaso. Uma uhlelo oluvikelwe luphumelela, igama lemode alinamsebenzi; unokuvuza.
Phinda kusukela ekuqaliseni okubandayo ngaphambi kokungena, ngesikhathi usuka ku-Wi-Fi uya kunethiwekhi yeselula, nangohlelo oluvikelwe lungemuva. Uma ukuvinjelwa kwenziwa inqubo yekhayenti, hlola futhi okwenzeka lapho leyo nqubo ibulawa esikhundleni sokuvalwa kahle.
Ekugcineni, hlola indlela yokuhlanza. Uma ikhayenti isuswa ngesikhathi imithetho yayo isebenza, sebenzisa indlela yokususa ebhalwe umthengisi esikhundleni sokucisha udonga lomlilo lwesistimu yokusebenza, olususa ukuvikelwa okungahlobene ngaphandle kokuphendula ukuthi umthetho osele ungowakabani.