I-VPN ezindleleni eziningi: iziqiniseko ezine okufanele umthwali azinikeze

Engeza isixhumanisi sesibili se-WAN futhi imigudu iyavuleka, kodwa ukukopisha ifayela kusamile lapho indlela eyodwa inyakaza. Izixhumanisi ziphilile futhi izinqubo ze-VPN ziyasebenza; okukhona okushodayo isivumelwano phakathi komthwali nomgudu. Amasokhethi amaningi awaziphathi ngokuzenzekela njengoxhumano olulodwa, futhi uhlelo olungaphezulu alukwazi ukubona umehluko kuze kube ukuphakelwa kuphuka. Ingxenye ngayinye yesivumelwano ihambisana nokwehluleka ongakuhlola, futhi yikho okusenza kube usizo.

Bhala leso sivumelwano ngaphambi kokukhetha umkhiqizo. Sinezingxenye ezine: ukugeleza okuthola i-VPN, indlela umthwali abuyisela ngayo idatha elahlekile, ubuphi ubunikazi bendawo yokugcina obusinda ekushintsheni kwendlela, nokuthi konke kuziphatha kanjani lapho indlela yehluleka.

Uphawu: izixhumanisi zivuliwe, iseshini isaphuka

Igrafu yokuqapha ebonisa zombili izixhumanisi zivuliwe ifakazela kuphela ukuthi indlela ngayinye ingathwala ithrafikhi. Ayifakazeli ukuthi i-VPN ibona ukugeleza okukodwa okuhleliwe, ukuthi iphakethe elahlekile endleleni eyodwa libuyiselwa kwenye, noma ukuthi uzakwethu usazi ukuthi ukhuluma naseshini iphi. Ingxenye esele yesivumelwano ihlanganisa lokho igrafu engakwazi ukukubonisa.

Lapho ukudluliswa kuma, thola ukuthi umthwali waqhubeka nokuphakela endleleni esindile. Uma iseshini ifa ngesikhathi isixhumanisi sesibili singasebenzi, umthwali akazange asisebenzise. Uma iseshini isinda kodwa idatha ifika ngendlela engafanele noma iphindwe kabili, umthwali uhambisa amaphakethe ngaphandle kwesivumelwano sezinga lokuxhumana. Izitembu zesikhathi ezinhlangothini zombili zivame ukukucacisa.

Lowo mehluko unquma ukulungisa. Inkinga yokuhlela noma yenqubomgomo idinga ushintsho lokukhetha indlela; isendlalelo esingekho sokuhlela nokubuyisela sidinga enye indlela yokuhamba, hhayi ibhafa enkudlwana.

Isiqiniseko sokuqala: ukugeleza kwamabhayithi ezingeni lokuxhumana

Uma i-VPN idinga ukugeleza okuhleliwe okuthembekile, umthwali kufanele abone amabanga amabhayithi ngaphezu kwendlela ngayinye. Uxhumano ngalunye lwe-TCP olungaphansi lubala izingxenye zalo kuphela, ngakho umamukeli akakwazi ukuhlela kabusha phakathi kwezindlela esebenzisa lezo zinombolo kuphela.

I-Multipath TCP iyisibonelo esijwayelekile. Iethula ukugeleza okukodwa kwamabhayithi okuthembekile ngenkathi ixhumanisa ama-subflow amaningi e-TCP, ngokumephisha kokulandelana nokuqinisekisa ezingeni ledatha. Uhlelo lufunda ukugeleza, hhayi i-subflow eyathumela ucezu kuqala.

Ku-Linux, i-MPTCP i-opt-in ngesokhethi ngayinye nge-IPPROTO_MPTCP. Lapho ukuxoxisana kungakwazi ukusebenzisa ukuziphatha kwezindlela eziningi, ukubuyela emuva okubhaliwe i-TCP evamile, okusho ukuthi uhlelo lungaqhubeka endleleni eyodwa ngaphandle kokusebenzisa eyesibili. Hlola ukuziphatha okwaxoxisana ngakho isokhethi esisetshenzisiwe esikhundleni sokucabanga ukuthi isilungiselelo se-kernel sisebenze.

Isiqiniseko sesibili: ukuhlela, ukuphindwa nokubuyisela

Izindlela ezinokubambezeleka namazinga okulahlekelwa ahlukene ziphoqa umthwali ukuba agcine, ahlele kabusha futhi aphinde athumele. Isivumelwano kufanele sisho ukuthi kuvunyelwe ibhafa engakanani, ingcindezi yokubuyela emuva uhlelo oluyibonayo nokuthi iyiphi indlela ethwala ukuthunyelwa kabusha.

Indlela ehlala ixhunyiwe kodwa iyeke ukuphakela inzima kunokuvalwa okumsulwa. Umthwali kufanele ayibone, asuse idatha esele futhi agweme ukulinda unomphela ingxenye engasoze yafika. Ukuhlola okulula kokuthi zombili izixhumanisi zivuliwe akukuhlanganisi lesi simo.

Ukuphindwa kudinga umthetho wakho. Ukuthumela umthwalo ofanayo kuzo zombili izindlela kungathuthukisa ukubambezeleka, kodwa umamukeli kufanele avimbe ikhophi ngaphambi kokuba ifinyelele i-VPN. I-anti-replay ye-IPsec iyashintsheka ngesivumelwano ngasinye sokuphepha futhi ihlola izinombolo zokulandelana; isendlalelo sokuphindwa esihlela kabusha noma esidlala kabusha amaphakethe singayibangela noma sifihle inkinga kuze kuwe umgudu.

Isiqiniseko sesithathu: ubunikazi bendawo yokugcina nokuhlangana kwendlela

Uzakwethu udinga indlela eqinile yokubona iseshini lapho kuvela indlela entsha. Uma indlela ngayinye iqinisekiswa njengomgudu ohlukile, i-VPN ingabona amaseshini amabili esikhundleni sokukodwa. Uma umthwali ehlanganisa izindlela ngaphansi kweseshini eyodwa, kufanele achaze ukuthi indlela entsha iqinisekiswa kanjani nokuthi kwenzeka nini endala.

Rekhoda ukuthi yimaphi amakheli nezihlonzi ezihlala ziqinile: indawo yokugcina yomgudu, isihlonzi seseshini yomthwali nanoma iyiphi i-proxy phakathi. I-proxy yengeza omunye umkhawulo wokutholakala nokwethenjwa ngisho noma ingalokothi ibone umthwalo ovikelwe.

Nakhu futhi lapho inqubomgomo ikhona. Indlela ehlangana isuka kunethiwekhi engalindelekile ingase ibe semthethweni ngokobuchwepheshe futhi isephule imodeli yokwethenjwa ehlosiwe. Nquma ukuthi izindlela ezintsha zamukelwa ngokuzenzekela, zidinga ukuqinisekiswa noma ziyenqatshwa.

Isiqiniseko sesine: ukuziphatha okulinganiselwe ngaphansi kokwehluleka

Hlola ukwehluleka okuphelele kwendlela, hhayi nje indlela enensayo. Indlela esindile kufanele ithwale iseshini ngaphandle kokukhula okungenamkhawulo kwememori, futhi ukubuyisela akufanele kuncike kusibali sesikhathi eside kunalokho uhlelo olungakubekezelela. Lapho indlela ehlulekile ibuya, umthwali kufanele anqume ukuthi alinganise kabusha noma ashiye ukugeleza lapho kukhona.

Beka imikhawulo yokugcina, ukuthunyelwa kabusha nenani lezindlela, bese uqinisekisa ngaphansi kokulahlekelwa, ukuhlela kabusha, ukuphindwa nokungalingani kokubambezeleka. Umkhawulo womkhathi ohlanganisiwe iyinombolo engathandeki kakhulu lapha; ukuqhubeka kokuphakelwa nemikhawulo yememori yisivumelwano.

Gcina isimo sokubuyisela somthwali sehlukile esimweni se-cryptographic se-VPN. Isendlalelo sokwethembeka esifakelwe esikhundleni sokuqinisekisa noma ukubethela okusunguliwe akusona isinqamuleli, futhi ukusebenzisa kabusha izinombolo zokulandelana phakathi kwezendlalelo kwenza ukuvikelwa kwe-replay nokuxilonga kungathembeki.

Yamukela umthwali ngecebo lokuhlola

Bhala iziqiniseko ezine njengezokuhlola zokuphumelela noma ukwehluleka: ukugeleza okukodwa okuhleliwe, ukubuyisela okuchaziwe, ubunikazi beseshini obuqinile, ukuziphatha kokwehluleka okulinganiselwe. Sebenzisa ukuhlola ngakunye ngendlela eyodwa encishisiwe bese kuthi ngendlela eyodwa esusiwe.

Ukudluliswa kwefayela okukodwa okuphumelelayo ngokushintsha kwendlela akufakazeli ukusebenza okuqhubekayo. Phinda ukudluliswa ngenkathi ushintsha indlela ekhethwayo, futhi uhlole kokubili umbono womthwali nezibali ze-VPN ngokwayo. Uma zombili zingavumelani ngokuthi iyiphi indlela ethwele idatha, isivumelwano asikabonakali.

Gcina i-matrix egunyaziwe kanye nokusetshenziswa. Itshela unjiniyela olandelayo ukuthi yikuphi ukuziphatha okwathenjiswa, yikuphi ukuhlanganiswa kwezindlela okwahlolwa nokuthi iyiphi imodi yokwehluleka engakasekelwa, ngaphandle komzuliswano wokucabanga kusuka ezintshweni zesimo sezixhumanisi.