Lapho i-TLS ikhona ngaphakathi kwe-OpenVPN, nokuthi yini eshintsha ukuma

OpenVPN isebenzisa i-TLS ngempela, futhi abantu bavame ukwandisa lokho kube isimangalo esingeke sikwazi ukuyithwala: ukuthi umhubhe ngakho-ke ufana nesiphequluli esivakashela isayithi. Ingxenye yokuqala iqinisile. Eyesibili ayiyona. I-TLS lapha ingeyomzila wokulawula ohamba ngaphakathi kwesitsha sakwa-OpenVPN uqobo, eceleni komzila womthwalo one-cryptography ehluke ngokuphelele, ngakho noma ubani ohlola amabhayithi okuqala ubona i-OpenVPN.

Izingxoxo ezimbili esigabeni esisodwa

Cabanga ngesikhathi njengezingxoxo ezimbili ezabelana ngesigaba esisodwa. Enye iqinisekisa izitifiketi futhi ikhipha impahla yokhiye. Enye ibethela lokho okuthumelayo ngempela, isebenzisa lokho okwenziwe ngeyokuqala.

Isigaba siwumthetho wokuxhumana. Yonke iphakethe iqala ngesihloko esincane esisho uhlobo lwayo, futhi leso sihloko sifika ngaphambi kwakho konke okunye.

Yini efika kuqala ngempela

Ngenxa yalokho kuhleleka, into yokuqala ocingweni ayilona irekhodi le-TLS. Isihloko se-OpenVPN, silandelwa okuqukethwe kwalezo zomzila okumemezelwa yisihloko. I-ClientHello ikhona lapho, hhayi kuphela kubhayithi ongunothi. Akukho ukususa kombhalo okudingekayo ukuze uqaphele umehluko, ngoba ukuma uqobo kuyakudalula.

Amavelu okuzenzakalela nawo abalulekile lapha. Ukugeleza kungu-UDP kuya ku-1194 ngaphandle uma iphrofayela ikhetha i-TCP. Kuzo zombili izimo ukubukeka kwangaphandle kuwumhubhe hhayi isicelo sewebhu.

Izindlela ezintathu zobuqotho zokushintsha ukuma

Isiphetho se-TLS esifana ne-stunnel samukela i-TLS embobeni ohlangothini ngalunye futhi sinikeza ukugeleza okususiwe kombhalo ku-OpenVPN endaweni, ngakho inethiwekhi ibona i-TLS iya kuleyo mbobo. Umthetho wokuxhumana oyi-TLS kusukela kubhayithi lokuqala uziphethe ngenye indlela: ukushintshana okuhambisana ne-AnyConnect okusetshenziswa i-ocserv kufana nokufinyelela kude kwebhizinisi okuningi kokuxhumana kakade okukulindele. I-SSTP, eza ne-Windows, inaleso simo kwenye imikhiqizo.

Ku-Linux, inketho -w ye-SSH ithwala isixhumanisi sephuzu-kuya-phuzu ngaphakathi kwesikhathi se-SSH, okusiza lapho i-SSH iwukuphela komthetho wokuxhumana ovunyelwe. Yiyo eshibhile kwezine uma i-SSH isivele isebenza kuleyo nethiwekhi, futhi iwusizo oluncane kakhulu uma ingasebenzi.

Yini okungekho noyedwa wabo ayishintshayo

Akukho kulokhu okushintsha lapho umhubhe ungafinyelela khona. Akwenzi ikheli elivinjwe lifinyeleleke, akuqinisekisi muntu, futhi akunqumi imizila.

Isembozo nawo ukubiza ingxenye eyodwa. Izilaleli ezimbili namafayela amabili wokuhlela kusho izindawo ezimbili zokwehluleka, futhi zombili zibukeka zifana kusukela esihlalweni somsebenzisi. Yenza isabelomali salokho ngaphambi kokwamukela eyodwa. Isikhathi sihlala siwukugeleza okukodwe kube kanye kwesikhathi eside esiya endaweni eyodwa, futhi umthamo waso nesikhathi saso kuhlala kubonakala.

Hlola kuqala, bese ukhetha

Ngakho hlola kuqala. I-UDP elahliwe iphendulwa ngemodi ye-TCP, futhi isiginesha eyaziwayo iphendulwa ngomunye umthetho wokuxhumana noma isembozo. Ukukhetha ithuluzi ngaphambi kokwazi ukuvinjelwa iyona ndlela abantu abagcina ngayo izingqimba ezintathu ezihluleka zonke ngesizathu esisodwa.

Inethiwekhi evumela kuphela izimbobo zewebhu inciphisa ukukhetha kube umthetho wokuxhumana osekelwe ku-TLS ku-443. Ukusebenzisa zontathu ngesikhathi esisodwa kunikeza isitaki okungekho muntu ongasihlunga, ngakho shintsha into eyodwa bese uphinda uhlole ukugeleza okufanayo.

Uma kungenkho okusebenzayo, impendulo enembile iwukuthi le nethiwekhi ngeke ithwale umhubhe wakho. Lokho kuwukutholakala hhayi ukwehluleka komzamo. Ukuzungeza izinketho eziningi akukuhlehlisi isinqumo senqubomgomo esithathwe phezulu.

Umnqamulajuqu owodwa umi phambi kwakho konke lokhu. Imvume yokusebenzisa umhubhe kunethiwekhi yomunye umuntu iwudaba lwenqubomgomo, olunqunywa ngokwehlukile ekutheni umshini uyasebenza yini. Lawa maqiniso achaza lokho umqaphi akubonayo, futhi awanikezi imvume.