Ubani ongabona ithrafikhi yakho kuseva ye-VPN eqashiwe?
Ukuqasha iseva ye-VPN kudlulisa ukuthembela kumhlinzeki we-hosting. Landela indlela esuka kuklayenti kuya ekuphumeni futhi ubone ukuthi umbuki ngamunye angafunda ini futhi angakwazi ukufunda ini.
Ukuqasha iseva kushintsha ukuthi uthemba ubani, futhi akususi umbuzo. Umhubhe ufihla ithrafikhi yakho kunethiwekhi edlulayo, bese unikeza umbhalo ocacile kumshini ogijinywa i-hypervisor yomunye umuntu. Ukulandela iphakethe ngaphandle kusuka kuklayenti yakho kukhombisa ukuthi umbuki ngamunye umi kuphi nokuthi yini ngamunye wabo angayibona ngempela. Lolo hambo lunenzuzo enkulu kunanoma yisiphi isimangalo mayelana nokungaziwa.
Qala kuklayenti bese ulandela iphakethe ngaphandle
Ngaphambi kokuthi noma yini iphume kukhompyutha ephathekayo, iklayenti lisonga iphakethe futhi liyithumela endaweni yokugcina yomphakathi yesiseva. Inethiwekhi yakho yasendaweni nomhlinzeki wakho babona ukuhamba okukodwa kulelo khelo kanye naleyo chweba, ngosayizi nangesigqi. Abakuboni ukuthi iyiphi isayithi oyivulile, ngoba leyo ndawo yokuphela ingaphakathi komthwalo obethelwe. Umugqa phakathi kwemethadatha nokuqukethwe uwuhambo lonke emshweni owodwa.
Leyo gxuma yokuqala iyindawo lapho izimangalo eziningi zokumaketha ziyeka ukuba mnandi. Umakhelwane onakho kuyo i-Wi-Fi efanayo ubona lokho umhlinzeki akubonayo, futhi akekho kubo bobabili obona ikhasi. Noma kunjalo umthamo nesikhathi kuhlala kubonakala, futhi kuchaza ukuziphatha ngisho nomthwalo ungakwenzi lokho.
Inethiwekhi ye-hosting ibona umhubhe, hhayi ikhasi
Ngaphakathi kwenethiwekhi yomhlinzeki ukuhamba okubethelwe kufika kuswishi, bese kufika ku-interfeysi ebonakalayo, bese kufika ku-VM yakho. Noma ubani ophethe leyo nethiwekhi angabala amabhayithi futhi agcine amarekhodi okuhamba ngaphandle kokubamba ukhiye, futhi akukho khiye odingekayo kulokho. Yiso sona leso sikhundla umhlinzeki we-hosting asithathayo.
Endleleni yokuphuma isithombe siyashintsha. I-VM ivula ukuxhumana okusha endaweni yokuphela, ngakho inethiwekhi ye-hosting ingabona lelo khelo lendawo yokuphela kanye nokuxhawana kwe-TLS okulizungezile. Umthwalo uhlala uvikelekile ngokubethelwa kohlelo lokusebenza uqobo, imethadatha ayinjalo.
| Observer | Visible to it | Hidden from it |
|---|---|---|
| Local network | Tunnel endpoint, volume, timing | Destination and payload |
| Your ISP | The same flow metadata | Destination and payload |
| Hosting network | Tunnel flow, exit destination, TLS handshake | HTTPS payload |
| Hypervisor operator | Guest memory and virtual NIC, in principle | Nothing, if it chooses to look |
Funda imigqa ngokulandelana futhi isimo senkinga siyavela: ngamunye ubona okuningi kunomugqa ongaphezulu, futhi akekho kubo odinga ukuphula i-VPN ukuze enze lokho.
Ngaphakathi kwe-VM umhubhe uyaphela futhi umbhalo ocacile uyaqala
Umhubhe uphela ku-VM yakho, ngakho isivakashi sibona iphakethe langaphakathi ngaphambi kokuba noma yini ilibethele futhi. Lokhu akusona isiphambeko; yilokho okwenziwa ukuphuma okugcinwe nguwe. Kusho ukuthi ukuphepha kokuphuma kuncike ekutheni ubani ophethe isivakashi, futhi kuleyo akhawunti umphathi nguwe.
wg show
ss -tunp | head
nft list ruleset | head -40Zisebenzise kuseva futhi uhlola amasokhethi afanayo umsebenzi onamandla e-root kusivakashi angawahola. Noma yini erekhodwa yizinsizakalo ozisebenzisayo isengaphakathi komngcele wokuthembela ofanayo, yingakho izilungiselelo zamalogi esivakashi kanye namarekhodi engqalasizinda kuyimibuzo emibili ehlukene hhayi isilungiselelo esisodwa.
I-hypervisor ihlezi ngaphansi kwesivakashi
Umshini obonakalayo awunaye umongo owusebenzayo. I-hypervisor imaka imemori yawo kanye nekhadi lenethiwekhi elibonakalayo, ngakho umsebenzi okulelo zinga ungena ngaphandle kwekhono lesivakashi lokuyihlola. Ukwehlukaniswa kwesivakashi kungokoqobo futhi kufanele kuthenjelwe kukho phakathi kwabaqashi, futhi akusona isethembiso sokuthi ukufinyelela okukhethekile akunakwenzeka. Lokho kungalingani kufanele kushiwo ngokucacile esikhundleni sokucashunwa ngemuva kwegama ukwehlukaniswa.
Iseva ebonakalayo ezinikezelwe ishintsha ukuhleleka ngaphandle kokususa inethiwekhi, ukufinyelela komzimba noma isixhumi sokuphatha umhlinzeki asinikezayo. Funda lokho umkhiqizo okubhalile esikhundleni sokuvumela igama elilodwa ukuba linqume umbuzo wokufinyelela.
Guqula lolu hambo lube isinqumo sokuthembela
Bhala umbuki ngamunye kanye nekhono omunikezayo, bese unquma ukuthi lokho kunikeza kuyahambisana yini nethrafikhi ohlela ukuyithumela. Uhlu lufushane: inethiwekhi yakho yasendaweni, umhlinzeki wakho, inethiwekhi ye-hosting, umsebenzi we-hypervisor, nawe. Noma yini enye ingusonkontileka womunye wabo futhi izuza ikhono elifanayo. Ukunquma kusengaphambili kushibhe kunokuthola uhlu ngemuva.
Bese uqinisekisa izingxenye ongaziqinisekisa ngempela: imaphi amalogi akhishwa izinsizakalo zakho, uwagcina isikhathi esingakanani, nokuthi umhlinzeki ushicilela ini mayelana namarekhodi okuhamba nokugcinwa. Izinqubomgomo ongazifunda futhi uzihlole zingcono kunezicabango mayelana nokuthi igama elithi imfihlo lisho ini.