Igama lomsingathi we-VPN yomphakathi lingafakazela ini futhi lingakwazi ukufakazela ini

Igama lomsingathi likhomba endaweni yokugcina futhi okuncane okungaphezulu. Alifakazeli iphrothokholi, indawo yokuphuma noma inqubomgomo yokugcina yomqhubi, nganoma yiluphi usuku.

Amagama emisingathi namafulegi ezwe abukeka njengamaqiniso ngeseva, futhi akukho kukabili okuyilo. Igama likhomba kumakheli angashintsha, futhi amagama angaphakathi kulo akhethwa yilowo owalibhalisa. Iphrothokholi, indawo yokuphuma nokuziphatha kokuloga ngakunye kudinga ubufakazi bakho. Qala ngalokho igama elixazulula kukho ngempela, bese unquma ukuthi yini engakaziwa.

Igama liyaxazululwa, futhi akukho okunye okuqunyiwe

Igama lomsingathi yisikhombi ku-DNS, futhi amarekhodi angemuva kwalo angahluka ngokwesixazululi, ngokwesikhathi sosuku nangokomndeni wamakheli okhethwa iklayenti. Abantu ababili abafunda ingeno efanayo yohlu bangafinyelela emishinini ehlukene ngokusemthethweni. Igama likutshela ukuthi uzocela ini, hhayi ukuthi uzophendula ini.

Imiphumela yokusesha nayo iyashintsha ngaphandle sesaziso, okubalulekile lapho iphrofayela ibophela ikheli esikhundleni segama. Iphrofayela efaka ikheli elidala ngokuqinile iyaqhubeka nokwehluleka ngemva kokuba umqhubi esusa insizakalo, futhi lokho kwehluleka kubukeka njengembobo evaliwe. Gcina amakheli axazululiwe eceleni kwephrofayela ukuze ukuqhathanisa kwakamuva kube nesisekelo. Akukho kulokhu okusho ukuthi ubani oqhuba uhlangothi olunye.

dig +short vpn.example.net A
dig +short vpn.example.net AAAA
dig +short vpn.example.net A @1.1.1.1

Ukuthutha nobunikazi kuyimibuzo ehlukene

Ikhasi lewebhu elivuliwe egameni lomsingathi lihlola isilaleli esisodwa embotsheni eyodwa. I-OpenVPN, i-IPsec ne-SSTP zilalela kwenye indawo, emigodini nasezinhlelweni zazo, ngakho iseva yewebhu efinyelelekayo ayisho lutho ngazo.

Ingeno yohlu nephrofayela kufanele zivumelane ngokuthutha, imbobo nemininingwane yokungena. Ubunikazi buqinisekiswa nguchungechunge lwesitifiketi noma ngesigxivizo somunwe wokhiye wozakwethu okwakulungiswe ngawo iklayenti, hhayi ngokupela kwegama lomsingathi. Igama eliqukethe igama lephrojekthi elijwayelekile lifakazela kuphela ukuthi othile walibhalisa. Funda isitifiketi esethulwa yinsizakalo bese uqhathanisa umkhiphi nesihloko nalokho okulindelwe iphrofayela.

openssl s_client -connect vpn.example.net:443 -servername vpn.example.net </dev/null 2>/dev/null |
  openssl x509 -noout -subject -issuer -dates

Amagama ezwe awakona ukucwaninga kwendawo

Ilebula ethi jp noma de ohliwini ingumbhaliso, futhi izisekelo zedatha zendawo ye-IP azivumelani kaningi ngokwanele ukuthi akukho kuzo okufanele kuthathwe njengeqiniso eliphelele. Ukusingatha okwabiwe, i-anycast nokumiswa okungalungile okulula konke kususa indawo ebonwayo kude nelebula.

Uhlolo olusebenzayo luyindlela yohlelo lokusebenza ngokwalo: iyiphi ikheli eliyifinyelelayo, nokuthi uhlolo lwekheli lokuphuma ngaphakathi kwesikhathi lubonisa ini. Ikheli lokuphuma elibonwayo liyisici somzila ngaleso sikhathi, hhayi isiqinisekiso esixhunywe egameni. Izinhlobonhlobo zohlu lwamavolontiya zengeza olunye ungqimba, ngoba umuntu obhalise uhlu akudingeki abe ngumuntu oqhuba umshini. Bhala okulinganisile nokuthi nini, hhayi lokho okwathenjiswa uhlu.

Hlola insizakalo enikezwayo, bese uhlola umqhubi

Lapho ukuthutha nobunikazi sekuqunyiwe, umbuzo osele ukuziphatha komqhubi, futhi lokho kudinga ubufakazi bemibhalo hhayi ukuqagela. Inqubomgomo yobumfihlo, othintwayo oshicilelwe nesaziso sokucaca kuyizinkomba zenhloso; akukho kuzo okufakazela umkhuba, futhi ukungabi khona kwakho konke kuthathu nakho kuwulwazi.

Enqabeni yomphakathi noma eqhutshwa amavolontiya, cabanga ukuthi ukuphuma kwabiwe nokuthi okuqhuba uyabona okudlulayo. Hhayi igama lomsingathi, kodwa lokho kucabanga kufanele kunqume ukuthi uthumela ini ngomhubhe.

curl -sSI https://vpn.example.net/ | head -n 5
whois 203.0.113.25 | grep -i -E 'orgname|netname'

Gcina igama kulokho elikuhle kukho: ukuthola indawo yokugcina nokuxhuma kuyo. Konke okungaphezulu kwalokho kufanele kuhlolwe ngokwehlukana, ngosuku lapho kubalulekile.

Izihloko ezihlobene