Iphothi le-VPN limakwe i-benchmark? Hlola ububanzi bokulawula

Isihloli sakho simaka iphothi le-VPN, ithikithi lichaza lokho njengomlaleli womphakathi, futhi impikiswano elandelayo imayelana nokuthi ukuchayeka kungokoqobo yini. Okutholakele akuvamisile ukusho lokho umfundi akucabangayo. Kucaphuna ukulawula kwe-benchmark okunobubanzi obugxilile, futhi inombolo yephothi ingenye yezokufaka kulobo bubanzi.

Funda ukulawula ngaphambi kokuvikela iphothi. Okutholakele okufundwa njengesigwebo ngokuvamile i-predicate esetshenziswe kumthombo owodwa.

Umgqa wokutholakele ucaphuna ini ngempela

Ukutholakele kwe-benchmark ngakunye kuthwala izinto ezine okufanele zihlukaniswe: idokhumenti nokubuyekezwa okuvela kukho, umthombo ohloliwe, i-predicate eyaqala umphumela, kanye nokumboza okwatholwa ukucwaninga ngempela. Amaqembu ngokuvamile acaphuna umthombo kuphela — iqembu lokuphepha noma i-ACL yenethiwekhi noma umhambi — bese aphikisana ngephothi. I-predicate yiyo enquma ukuthi umlaleli wakho wawusobubanzini noma cha. Ngaphandle kwayo uxoxa ngenombolo esikhundleni somthetho.

Imibhalo ye-Amazon Security Hub igcina lokho kwehlukaniswa kubonakala ngaphandle kwe-PDF engemva kodonga lokukhokha:ikhasi lokulawula le-EC2 libala ukuhlolwa kweqembu lokuphepha kokufinyelela okungavinjelwe emaphothini 22 kanye no-3389, futhi lithatha ama-ACL enethiwekhi njengomunye umthombo onezimo zawo. Amaphothi okulawula afanayo, into ehlukile, ukuhlolwa okuhlukile. Yilokho okuningiliziwe okutholakele okuzuzayo.

aws ec2 describe-security-groups --group-ids sg-0d1f8a2c4b6e9f3a1 --output json
aws ec2 describe-network-acls --filters Name=entry.port-range.from,Values=22 --output table

Hlukanisa umlaleli womphakathi nokufinyelela kokulawula

Umlaleli we-VPN owamukela i-UDP 1194 evela ku-inthanethi kanye nensizakalo ye-SSH efinyeleleka kuphela ngemva kokuvunyelwa yizindlela ezihlukile zokuchayeka. Ukuhlolwa okumboza okokuqala kungenzeka kungasho lutho ngokwesibili, futhi ukuhlolwa okumboza okwesibili kungenzeka kushaye indiva okokuqala. Umphumela ophume kwenye awusona isitatimende ngenye, noma ngabe zombili zizwakala zifana kangakanani emhlanganweni wesimo.

Thatha indlela ngayinye njengomugqa wayo ekubuyekezweni.

Bese uqinisekisa ukuthi isango ngokwalo livumela ini. Ukwamukela ithuneli akufani nokunikeza amalungelo okulawula esangweni, futhi akukho kukho kokubili okulingana nokufinyelela iseva engemva kwalo. Hlukanisa umbuzo ku: ubani angaxhuma, ubani angalawula, futhi ithuneli lingafinyelela ini. Lezi zimpendulo ezintathu zivela kumasistimu ahlukile futhi ngokujwayelekile zihlanganiswa zibe umusho owodwa okungekho muntu ongathatha isinyathelo ngawo.

Umthombo unquma ukuthi iphothi lisenobubanzi noma cha

Umthetho weqembu lokuphepha, ukufakwa kwe-ACL yesevi esincane kanye nomthetho wothango lomhambi kungavumela ukugcwala, kodwa owodwa wabo kuphela ongaba yinto ehlolwa ukulawula. Imvume esebenzayo isho ukuhlanganisa amaqembu ahambisanayo, imindeni yamakheli womabili kanye nanoma yimuphi umthetho wokwenqaba ophambi kwawo. Iphothi elihlulekayo ekuhlolweni kwezinga leqembu lingase lingafinyeleleki, futhi iphothi elidlulayo lingase livinjelwe ngaphakathi kakhulu.

Yilapho ukufakelwa kwemithetho yezinye izindawo kuhamba kabi khona. Ama-ACL enethiwekhi awanazimo futhi ahlolwa ngokulandelana; amaqembu okuphepha anezimo futhi avumela kuphela. Imodeli yemithetho ebolekwe kwelinye ayichazi elinye, futhi ukuyihumusha kuveza impendulo eqinile ngento engalungile.

Rekhoda isinqumo ukuze ukucwaninga okulandelayo kusisebenzise futhi

Lapho ububanzi bungaqondakali ngempela, bhala ukubuyekezwa kokulawula, isihlonzi somthombo, i-predicate njengoba icashuniwe kanye nobufakazi obuxazululile. Fakela lokho okukukhiphile nokuthi kungani. Lolo rekhodi yilona oluvumela umbuyekezi wesibili ukufinyelela isiphetho esifanayo ngaphandle kokufunda kabusha yonke i-benchmark, futhi yilona kuphela oluphila ekushintshweni kwabasebenzi.

Inothi elithi «iphothi le-VPN libuyekezwe» liqinisekisa ukuthi impikiswano iyobuya ngekota ezayo. Esikhundleni salokho, shono umhloli, ukubuyekezwa kanye nobufakazi.