Lapho ukuvikelwa kwe-VPN kuphela khona endleleni eya kuseva ye-FTP

I-VPN ivikela indlela, futhi yonke indlela inesiphetho. Lapho umhubhe uphela kugeyithiweyi wenkampani, ukudluliswa kwamafayela kuqhubeka kusukela lapho ngaphansi kokuvikelwa okuhlinzekwa wuphrothokholi yayo. Lowo mehluko unquma ukuthi ukudluliswa kuvikelwe kusukela ekuqaleni kuze kube sekupheleni noma kuze kufike kugeyithiweyi kuphela. Isikhombisi se-Connected asisho lutho ngakho kokubili.

Izindawo ezimbili, izindlela ezimbili ezisele

Thatha ikhompyutha ephathekayo ehlangana ne-VPN yenkampani bese ivula isikhathi se-FTP iya kuseva yangaphakathi ehlukile. Umhubhe uyama kugeyithiweyi, futhi ingxenye esuka kugeyithiweyi iya kuleyo seva ingaphandle kwawo.

I-FTP evamile ayitholi ukubethelwa ngenxa nje yokuthi amaphakethe ayo afika ngomhubhe. Kuleyo ngxenye esele, imiyalo, ubufakazi kanye nokuqukethwe kwefayela kuhamba ngqo njengoba uphrothokholi kuchaza, okungukuthi obala. Ukuthi lokho kubalulekile yini kuncike ekuhlelweni kwenethiwekhi nasekutheni okunye okuvikela leyo ngxenye, futhi ukubiza ikheli ngokuthi liyimfihlo akuphenduli umbuzo. Umqondo ofanayo usebenza ngokugxila kwelinye iceleni lapho iseva isekunethiwekhi yamafu i-geyithiweyi efinyelela kuyo ngokugxuma okunye.

Beka iphoyinti lokugcina le-VPN kanye nensiza ye-FTP emshinini owodwa, futhi akukho ngxenye elandelayo okufanele ukhathazeke ngayo. Leyo yindawo ehlukile, hhayi ubufakazi bokuthi izinqubo, amafayela kanye nobufakazi be-host kuphephile.

I-FTP evamile, i-FTPS ne-SFTP izinqumo ezintathu

I-FTP evamile ayibethelanga lutho, ngisho nephasiwedi. I-FTPS yengeza i-TLS ku-FTP, ngakho isiteshi sokulawula kanye, uma kuxoxiwe, isiteshi sedatha kuyavikelwa. I-SFTP iwuphrothokholi olunye oluthwalwa ngaphakathi kwe-SSH, futhi akulona olunye upelo lwe-FTPS.

Iseva kufanele isekele lokho kukhetha, ngoba iklayenti ayikwazi ukwakha isilaleli esingekho. Ukukhetha i-SFTP akuguquli insiza esebenza nge-FTP kuphela ibe iphoyinti lokugcina le-SSH, futhi ukuqamba kabusha ibhukhimakhi noma ukushintsha iphothi akufakazi lutho mayelana nalokho okuvunyelwene ngakho. Qinisekisa uphrothokholi ohlangothini lweseva kanye nohlangothini lweklayenti. Ukhiye kusiphathi samafayela isitatimende mayelana nesikhathi, hhayi mayelana nesilaleli esingemuva kwaso.

Funda ikholomu yokugcina lapho ukudluliswa kubalulekile, ngoba yilapho kuvela khona ushintsho lobuwena olungalindelekile.

Ukuxhumana kwedatha ukuxhumana kwesibili

I-FTP ivula ukuxhumana kokulawula bese ivula ukuxhumana kwedatha okuhlukile kwezinhlu nokudluliswa. Ukungena okuvikelwe akusho lutho mayelana nalokho kuxhumana kwakamuva, ngaphandle uma ukusetshenziswa kudinga ukuvikelwa nakho.

Ku-FTPS, iklayenti icela isiteshi sedatha esivikelwe ngomyalo othile, futhi inqubomgomo yeseva inganqaba enye indlela ebalayo. Qinisekisa ukuthi inqubomgomo iyakudinga esikhundleni sokucabanga ukuthi okumisiwe kweklayenti kwanele. Imodi yokungenzi lutho yengeza ubunzima besibili, ngoba iseva imemezela ikheli nechweba lokuxhumana kwedatha. Umthombo womlilo noma idivayisi ye-NAT ephinda ibhale noma evimba leso simemezelo idala isikhathi esiqinisekisayo bese silenga ohlwini lokuqala.

curl -vk ftps://files.corp.example/ --user alice --ftp-ssl-control
openssl s_client -connect files.corp.example:21 -starttls ftp
ss -tnp | grep -E ':21|:990'

Umyalo wesibili ukhombisa lokho iseva ekuveza kusiteshi sokulawula ngaphambi kokuthinta noma yiliphi ifayela. Owesithathu ukhombisa ukuthi ukuxhumana kwedatha kwake kwasungulwa yini, okuwumehluko phakathi kokuhluleka kokuqinisekisa nokuhluleka kwemodi yokungenzi lutho.

Ukuhlolwa kobuwena kuyasinda emhubheni

Iklayenti le-FTPS liqinisekisa ubuwena beseva ye-TLS, futhi iklayenti le-SFTP liqinisekisa ukhiye we-host ye-SSH. Kokubili ukuhlolwa kungokwephrothokholi yokudluliswa kwamafayela, futhi akukho okwenziwa yi-VPN.

Lokho kwahlukanisa kubalulekile lapho okuthile phakathi kufuna ukuhlola isikhathi. Ukucisha i-TLS ukuze idivayisi yenethiwekhi ikwazi ukufunda imiyalo kushintsha imodeli yokuvikelwa esikhundleni sokuyiqedela, futhi kuyafana nokwamukela ukhiye we-host ongachazwanga ngenxa yokuthi umhubhe unyuke. Gcina ukuhlelwa kokwethemba obekuhlosiwe futhi uthole izinto ezifanele kumqhubi. Umhubhe oqinisekisayo awusho lutho mayelana neseva ekugcineni kwawo okude.

Izinto zokhiye wangasese nesitifiketi zalezi phrothokholi zingenye imfihlo yesithathu, ehlukile kobufakazi be-VPN.

Bhala lokho okuqinisekisile ngempela

Khetha ifayela elingenabungozi olinikezwe imvume yokulihambisa, futhi bhala amaqiniso amane mayelana nomzamo: iyiphi iphrothokholi eyasebenza, ubuwena bamuphi umhlangothi obuqinisekisiwe, iyiphi indlela eyayihlosiwe, nokuthi ukudluliswa kwaqedwa yini.

lftp -u alice -e "set ftp:ssl-protect-data true; ls; bye" ftps://files.corp.example
sftp -v [email protected]

Uhlu lwemikhombandlela, ukungena emhubheni kanye nokudluliswa okuqediwe kuyimibono emithathu ehlukile, futhi ukuphela kuphela okusho ukuthi indlela iyasebenza kumafayela. Uma umklamo uncike ku-VPN kuphela mayelana nobumfihlo ekugxumeni okusele, bhala lokho njengesinqumo esiyikho. Inothi lokwamukela elisho ukugxuma kanye nokucabanga kwalo kokwethemba linevelu elingaphezulu kwesithombe sesikrini seklayenti elixhunyiwe.