Isikhathi sokusebenza kweseva ye-VPN: le nombolo ayikutsheli ini

Uhlu lomphakathi lwezindawo zokuxhumana lukhombisa iseva enesikhathi sokusebenza esikalwa ngamaviki, ngakho uyayikhetha, futhi ukuxhumana kwehluleka emzamweni wokuqala. Lokhu akusona isikhangiso esingamanga; umbuzo ongafanele odedelwe enombolweni ekala enye into. Isikhathi sokusebenza ngokuvamile sikhombisa ukuthi inqubo, isiqukathi noma umshini ubesebenza isikhathi esingakanani kusukela ekuqaleni kwaso kokugcina, futhi lokho kuyisici sengqalasizinda yomshicileli, hhayi sendlela yakho eya kuyo. Ukusithatha njengokuthembeka kuyiphutha lesigaba elifanayo nokuthatha isilinganisi samakhilomitha emoto njengombiko womgwaqo.

Inombolo ikala ini

Kumsingathi onomphathi wesevisi wesimanjemanje, isibali siboshelwe emcimbini ongawufunda ngempela: isigxivizo sesikhathi lapho iyunithi yangena esimweni esisebenzayo, noma isikhathi sokuqalisa komshini. Konke okunye yizibalo phezu kwaleyo ngxenye, futhi incazelo yengxenye iyahluka phakathi kwabashicileli. Uhlu olulodwa lungase lusethe kabusha lapho i-daemon iqalwa kabusha, olunye lapho umshini uqalwa kabusha, futhi olwesithathu lapho kwenziwa ukusetha kabusha ngesandla ngumqhubi owayefuna igrafu ehlanzekile.

systemctl show -p ActiveEnterTimestamp --value openvpn-server@server
uptime -s
systemctl is-active openvpn-server@server

Lemiyalo emithathu iphendula imibuzo emithathu ehlukene, futhi uhla lwemibhalo olukhombisa inombolo eyodwa alunakukutshela ukuthi iyiphi kuyo esetshenzisiwe. Ngakho ukuqhathanisa isibali esingahluziwe eluhlu olubili akusona isiqhathaniso nhlobo kuze kube uyazi ukuthi ngakunye kusethwa kabusha kusiphi.

Inqubo ingase isebenze ngenkathi indlela ivaliwe

I-daemon iyalalela. Isitifiketi sivumelekile. Inqubo isiphile izinsuku ezingamashumi amabili nantathu. Akukho kulokhu okuqinisekisa ukuthi amaphakethe avela kunethiwekhi yakho azofika kuyo, ngoba ukufinyeleleka kuyisici sayo yonke indlela: ukuxhumana okuphezulu komhlinzeki, ukuxhumanisa phakathi kwenethiwekhi yakhe neyokho, ukuminyana emgudwini wokudlula owabiwe, kanye nodonga lomlilo phambi kokuxhumana kwakho.

Iseva ingase futhi isebenze kodwa ingabi namsizi ngesinye isizathu. Inodi eye yamukela amaklayenti amaningi kakhulu kunalokho umkhathi wayo wokudlulisa ongakwazi ukusekela izobonisa isikhathi eside sokusebenza kanye nesipiliyoni esibi, ngoba isibali asikali umthamo noma ukuncintisana. Le yindlela evamile kakhulu yokuthi inodi enesikhathi eside sokusebenza idumaze: akukho okugqekile, konke kumatasa.

Isimo esiphambene naso sifanele sikhunjulwe. Inodi eqalwe kabusha ehoreni eledlule ingase ibe nempilo ephelele manje, futhi ukuhlunga ngenombolo enkulu kakhulu kuyikhipha ngokuthula. Isikhathi sokusebenza akusona iphuzu lekhwalithi, futhi ukusithatha njengelinye iphuzu kukhetha ngobudala esikhundleni sokufaneleka.

Ubusha: umbiko mdala kunomzamo wakho

Imibhalo yomphakathi ingamakhasi akhiqizwa yizivivinyo zezikhathi, hhayi i-telemetry ebukhoma. Isikhathi sokusebenza osifundayo sibalwe ekugcineni kokuvuselelwa, futhi ukuxhumana okuzamayo kwenzeka ngemuva kwalokho. Phakathi kwalokho umhlinzeki angase ehlehlise umgudu, ashintshe isitifiketi, athuthe ikheli noma akhiphe inodi kusevisi, futhi ikhasi lizoqhubeka likhombisa isimo esihle sokugcina esaziwayo kuze kufike ukuskena okulandelayo.

Leyo geqe isebenza nangakwelinye icele. Inodi ebikwe njengevaliwe ingase isale isilulame ngemizuzu embalwa ngemuva kokukhiqizwa kombiko, ngakho ukuzama kabusha ngokushesha kunodi enye akusona njalo ukukhetha okungcono.

Umthetho osebenzayo wukuthi yonke inkambu ebikiwe iyisimangalo esimayelana nesikhathi esedlule. Yisebenzisele ukwakha uhlu olufushane, bese uqinisekisa ngokulinganisa okuzenzela kona ngasikhathi esibalulekile kuwe.

Yini okufanele uyihlole esikhundleni salokho

Nquma ukuthi udinga ini kunodi bese uyihlola. Uma udinga ukufinyeleleka, umzamo wokuxhumana we-TCP embobeni yokulalela ukutshela ngomzuzwana owodwa okuningi kunanoma yisiphi isibali. Uma udinga umhubhe osebenzayo, xoxisana ngowolunye. Uma udinga ukudlula okusebenzisekayo, dlulisa into yangempela bese uyikala, ngoba isikhathi sokuxhumana nokudlula kuyizici ezihlukene futhi ukuxhawula okusheshayo akusho lutho mayelana nesibili.

nc -vz -w 5 vpn.example.net 1194
curl -sS -o /dev/null -w '%{time_connect} %{time_appconnect} %{time_total}\n' https://vpn.example.net/
mtr -rwc 20 vpn.example.net

Phinda isivivinyo esikhundleni sokuthemba umzamo owodwa. Ukuthembeka kuwukusatshalaliswa esikhathini nasezimweni, futhi ukuxhumana okukodwa okuphumelelayo kuyisampula elingana noyedwa. Imizamo embalwa phakathi namahora lapho usebenzisa ngempela ukuxhumana izohlula noma yisiphi isikhathi sokusebenza esishicilelwe ngegebe elikhulu.

Ukufunda uhlu lomphakathi lwezindawo zokuxhumana ngaphandle kokuphambukiswa

Isikhathi sokusebenza asiphethe lwazi mayelana nezinto abantu abajwayele ukuzifuna ku-VPN: ukuvumeleka kwesitifiketi, ukuthi ngubani ophethe indlela yokuphuma, iyiphi inqubomgomo ye-DNS esebenzayo, nokuthi umqhubi ugcina yini amarekhodi okuxhumana. Lezi ziyizimangalo ezihlukene ezidinga ubufakazi obuhlukene, futhi isibali eside akusona ubufakazi bakunye kuzo. Inodi ingase izinze izinyanga futhi iseyikhetho elibi emfunekweni yobumfihlo.

Lapho uhlu lusiza ngempela khona ukwenza uhlu olufushane. Hlela ngokwalokho owaziyo ukuthi ukudinga, susa amanodi asezifundeni ezingahlobene nomsebenzi, bese uhlola amathathu noma amane asele. Gcina isigaba sokwehluleka somzamo ngamunye esikhundleni sokuthi uthi yebo noma cha, ngoba «ukuxhawula kwe-TLS kwehlulekile» kanye «kuxhunyiwe kodwa akukho ukudlula» kuholela eziphethweni ezihluke ngokuphelele.

Uhlaka lokulinganisa ukusebenza kwendlela lwethula iphuzu elifanayo ngendlela eqinile: chaza isikali, izimo kanye nendlela ngaphambi kokuqoqa izinombolo. Uma lusetshenziswa ohlwini lwamanodi, lokho kusho ukuthi inkambu yesikhathi sokusebenza ingumongo. Ukulinganisa okwenzayo ngokwakho yisinqumo.