Ukuthi umthetho wokufinyelela ngokwegama lompethi ungasho ukuthini esigabeni ngasinye senethiwekhi
Igama lesevisi lingaphanyiswa ezingeni le-DNS, isiphequluli, umxhumanisi noma udonga lomlilo. Khetha isigaba esibona ubunikazi ofuna ukubulawula.
Abantu abathathu bacela into efanayo ngamazwi afanayo: ukuvimba ukufinyelela egameni elilodwa lesevisi. Omunye usho ukuthi isiphequluli akumele sivule isayithi, omunye usho ukuthi iklayenti lezwi ledeskithophu akumele lifinyelele kuseva yalo, futhi owesithathu usho ukuthi iqembu losonkontileka akumele lisebenzise uhlelo oluthile lwangaphakathi. Umusho uyafana, futhi izindlela zokuphanyisa azicishe zibe nakho okufanayo.
Khetha isigaba ngokwesihlonzi esikwazi ukusibona ngempela, bese kuthi ngemva kwalokho ngamaklayenti esikuhlanganisayo. Ukuqala ngomyalo wodonga lomlilo osewukwazi kakade yiyo indlela imithetho egcina ingavimbi lutho, noma ivimba kakhulu.
Igama akubona ubunikazi isigaba ngasinye esingakuqinisekisa
I-Netfilter nezihlungi zamaphakethe ezifanayo zibona amakheli, amaphrothokholi namachweba. Aziboni amagama abapethi, futhi lapho iphakethe lifinyelela kuzo igama selixazululiwe. Umthetho obhalwe ngokumelene nekheli umthetho mayelana nalelo kheli, noma yiliphi igama umsebenzisi alithayiphile ukuze afinyelele kulo.
Inqubomgomo ye-DNS ihlezi ngaphambili emzileni futhi ibona umbuzo, okuyinto ehlukile kunoxhumano olulandelayo. Ilawula izimpendulo eziyabuyiswa isixazululi esilawulwayo, hhayi ukuxhumana obekuvele kuvuliwe, futhi hhayi amaklayenti ahlelwe ukwedlula leso sixazululi. Ikheli elixazululiwe lingashintsha futhi phakathi kokubuyekezwa kwenqubomgomo nesicelo esilandelayo, yingakho impendulo ye-DNS ingesona isitatimende segunya esihlala njalo.
Izigaba eziphezulu zibona umongo omningi futhi zihlanganisa amaklayenti ambalwa. Lokho kushintshana kuyisihloko sonke, futhi kuchaza ukuthi kungani kungekho mugqa owodwa wetafula oyimpendulo efanele. Khetha umugqa obona isihlonzi inqubomgomo yakho ekhuluma ngaso ngempela. Bese wamukela ukuhlanganisa okushiwo yilowo mugqa.
Yini isigaba ngasinye esingayihlonza
Funda itafula kusukela kukholamu ephakathi ukuya ngaphandle: isihlonzi isigaba esingasibona sinquma inqubomgomo esingayiphanyisa ngobuqotho.
| Layer | Identifier it sees | What it cannot see |
|---|---|---|
| Packet filter | address, protocol, port | the name, or which other services share that address |
| DNS policy | the queried name and the answer handed back | connections made by clients that ignore the resolver |
| Managed browser | supported URL patterns on managed profiles | non-browser clients, or unmanaged devices |
| CONNECT proxy | host and port for tunnelled requests | the path inside an encrypted request |
Isigaba siyingxenye yenqubomgomo kuphela lapho isihlonzi esisibonayo sihambisana nesihlonzi osilawulayo. Itafula lichaza futhi ukuthi kungani umthetho obhalwe esigabeni esisodwa uvamise ukungadluleli kwesinye ngaphandle kokunquma kabusha ukuthi uvikelani.
Lapho umthetho osobala wehluleka khona
Umthetho wekheli ulungile ngqo kusevisi enekheli elikhethekile olilawulayo, futhi lobo bunikazi kufanele kubhalwe enqubomgopweni. Awulungile ngqo kunoma yini engemva kwekheli lokusabalalisa okuqukethwe okwabiwe, lapho umthetho ofanayo uthinta izinsiza ezingahlobene futhi impendulo ye-DNS evuselelwe ingawushintshi umthetho ube igunya legama lompethi.
Inqubomgomo yesiphequluli esilawulwayo iveza umkhawulo wewebhu ngokuqondile kunezinhlu zamakheli ezikopishiwe, kodwa isebenza kuziphequluli namaphrofayili alawulwa uhlelo lokuphatha.
Lowo mthetho wesiphequluli awenzi lutho ngeklayenti lezwi elithumela i-UDP komunye umpethi, futhi amaphethini awo achazwa yilowo mkhiqizo, hhayi imikhuba yezimpawu eziguqukayo eziqashwe kwenye indawo. Umxhumanisi we-CONNECT nawo wamukela umpethi nechweba lesicelo esigqitshiwe, futhi awukwazi ukufunda umzila ongaphakathi kwesikhathi esibethelwe. Dizayina umthetho ngokuzungeza lokho okuvezwa yiphrothokholi. Bese ubhala lokho okukushiya kungamboziwe, ngoba yilelo gebe umsuka wesicelo esilandelayo.
Khetha ngamaklayenti, hhayi ngomyalo
Buza ukuthi inqubomgomo kufanele ihlanganise amaphi amaklayenti nokuthi iwaphi engawashiya. Inqubomgomo yesiphequluli esilawulwayo ihlanganisa lokho uhlelo lokuphatha olufinyelela kukho futhi iyeke emngceleni wesiphequluli. Inqubomgomo yesixazululi ihlanganisa konke okusebenzisa isixazululi sakho, okuyiqoqo elibanzi, futhi yehluleka ngokuvulekile kunoma ubani ongenzi njalo.
Kusevisi oyisebenzisayo, igunya kuhlelo lusinamandla ukwedlula noma yimuphi umngcele wenethiwekhi, ngoba lulandela i-akhawunti hhayi umzila. Umzila we-VPN ukufinyeleleka futhi akukho okunye: ukukwazi ukuthumela iphakethe kusevisi akusona isigunyazo sokusebenzisa yona. Lapho isihlonzi esibalulekile singumsebenzisi noma imvume yesiteshi, siphoqelele lapho futhi ubheke umthetho wenethiwekhi njengesigaba sesibili.
Bhala umthetho ngokwemibandela yensiza
Inqubomgomo evikelekayo isho insiza, ubunikazi, izinhlelo ezingaphakathi kobubanzi kanye nomzila ozithwalayo, kufaka phakathi yomibili imindeni yamakheli esetshenziswayo. Iphinde isho ukuthi kuzokwenzekani kwingqalasizinda eyabiwe umthetho ozoyithinta ngengozi.
Lokho kukhuluma kukhiqiza isinqumo umuntu angasihlola kamuva. Umthetho othethekelwa ngekheli elixazululwe namuhla ukhiqiza isigameko lapho ikheli lishintsha okokuqala, futhi akekho ozokwazi ukuchaza ukuthi kungani ukuvimba kwakulungile.