Amarekodi e-router akhombisani uma umthwalo we-VPN ushicilelwe
Ukushicilela kufihla umthwalo, hhayi ukugeleza. Qhathanisa lokho okurekhodwa yisango lasekhaya nalokho okugcinwa umqaphi ongenhla, bese uhlola izibali zakho.
Ukushicilela kunquma ukuthi okuqukethwe kwephakethe kungafundwa yini, futhi akusho lutho mayelana nokuthi ukuba khona kwephakethe, ubukhulu baso kanye nesikhathi kuzobhalwa yini. I-router edlulisa umhubhe oshicilelwe ibona ukugeleza okufanele ikulethise, futhi ingakubala, ikubeke isigxivizo sesikhathi futhi ikuhlobanise. Qhathanisa lokho okurekhodwa yisango lasekhaya nalokho okurekhodwa inethiwekhi engenhla, futhi umehluko uvela ukuthi umayelana nokuthi yiziphi izinkambu umuntu ngamunye anesizathu sokuzigcina.
Leso siqhathaniso yisona esiwusizo, ngoba amarekhodi womabili ahlala ehlanganiswa ezingxoxweni zobumfihlo. Aphendula imibuzo ehlukene futhi agcinwa izikhathi ezehlukene.
Abagcini ababili, amarekhodi amabili ahlukene
Isango elisemkhawulweni wakho liyazi ukuthi ukugeleza kwasebenzisa isixhumi sangaphakathi sini futhi, lapho sisabalalisa amakheli ngokwaso, iyiphi idivayisi eyayinalelo kheli ngaleso sikhathi. Lingabona futhi ukuthi yisiphi isixazululi osibuzile nokuthi iyiphi indawo yokugcina oxhumane nayo. Phezulu, ithrafikhi efanayo ifika ihunyushiwe, ngakho enye inethiwekhi ibona ikheli elilodwa lomphakathi elabiwe yiwo wonke umuzi, okuwumsebenzi ochazwe ku-RFC 3022. Akekho kubaholi abafunda umthwalo, futhi alikho irekhodi eliqukethe elinye.
Isamba samabhayithi naso sisesigabeni salokhu. Isibali somthamo sibhala ukuthi ithrafikhi idlulile ngaphandle kokubhala ukuthi yayiyini.
Yiziphi izinkambu ezishiya umkhondo ngempela
Lokho idivayisi ethile ekugcinayo kuncike kulokho okuvunyelwe, ngakho noma yisiphi isimangalo esijwayelekile sifanele ukungabazwa. Ithebula libala izinkambu ezibalulekile empilweni kanye nokuthi ngayinye isho ukuthini.
| Field | Home gateway | Upstream observer |
|---|---|---|
| VPN endpoint address | Yes, as a destination | Yes |
| Local device mapping | Only where it assigns the address | No |
| Byte and packet counts | If statistics are enabled | Usually |
| Flow start and end | If connection logging is on | Usually |
| DNS queries | If the resolver is local | Only if the resolver is theirs |
| Payload contents | No | No |
Funda ithebula ngemigqa hhayi ngamakholomu, ngoba umugqa ngamunye usekela isiphetho esihlukile. Ikheli lendawo yokugcina likhombisa ukuthi umhubhe ukhona, hhayi ukuthi wathwala ini. Ukumephwa kwedivayisi yasendaweni umugqa ohlanganisa ukugeleza nomuntu, futhi yiwo umugqa ogcinwa isango lasekhaya kuyilapho umqaphi ongenhla ngokuvamile engawugcini.
Umugqa womthwalo uhlala ufana kuwo womabili amakholomu, futhi leyo yingxenye eqinisekiswa ngempela ukushicilela. Konke okunye kuncike ekukhetheni kokuloga.
I-router eqeda umhubhe ibona okuningi
Isango elidlulisa ithrafikhi eshicilelwe yomunye kanye ne-router ezisebenza yona umhubhe kukhona ezindaweni ezihlukene. Eyesibili igcina isimo somhubhe kanye nokhiye bakho, ngakho ingabona amakheli angaphakathi kanye nezindawo ezingaphakathi komhubhe. Uma leyo router ihumusha futhi amakheli enethiwekhi yangaphakathi, amarekhodi ayo angahlanganisa idivayisi nendawo yangaphakathi kurekhodi elilodwa. Lokho kuwukudalulwa okuhlukile kokugeleza kwangaphandle, okukhiqizwa yibhokisi elifanayo.
Qhathanisa lokho neklayenti lelaptop elingemuva kwesango elijwayelekile: isango libhala ukugeleza kwangaphandle, futhi irekhodi leklayenti ngokwalo ligcina imininingwane yangaphakathi. Ukubuza ukuthi ubani ophethe uphi uhhafu wesithombe kuyasebenza kakhulu kunokubuza ukuthi inethiwekhi ingabona yini ngokusebenzisa ukushicilela. Impendulo eqotho embuzweni wesibili ingu-cha, futhi akuwona umbuzo onquma ukuchayeka kwakho.
Hlola ukuthi idivayisi yakho ibhalani
Bheka imishini yakho ngaphambi kokucabanga ngemishini yabanye. Imiyalo engezansi ibala imithetho yodonga lomlilo enezibali, amafayela okuxhumana asaphila kanye nemigqa yerekhodi ekhuluma ngokuxhumana. Isebenza ku-router esekwe ku-Linux, okuvela kuyo iningi le-firmware yabasebenzisi.
nft list ruleset | grep -A2 counter
conntrack -L 2>/dev/null | grep 1194
logread | grep -iE 'vpn|1194' | tail -n 20
cat /proc/net/nf_conntrack | wc -lIqoqo lemithetho elinezibali likutshela ukuthi idivayisi ikulungele ukubalani, futhi ithebula lokuxhumana likhombisa ukugeleza okukhona hhayi umlando. Imigqa yerekhodi iqinisekisa ukuthi i-firmware ibhala noma yini izehlakalo zokuxhumana, futhi lokho kuxazulula ingxenye enkulu yengxabano. Ukuphuma okungenalutho kuyo yonke imiyalo emine kusho ukuthi ibhokisi lidlulisa ngaphandle kokubhala, futhi nalokho kuyimpendulo. Phinda ukuhlola kuklayenti, ngoba irekhodi lalo ligcina enye ingxenye yesithombe.
Bhala izici ezivunyelwe kanye nesilungiselelo sokugcina eceleni kokuphuma. Izingxenyekazi zekhompyutha ezifanayo zingathula namuhla futhi zikhulume kakhulu ngemva kokubuyekezwa kwe-firmware okuvula i-telemetry.