Kungani uhlelo lokusebenza lungakwazi ukuvula iphrofayela ye-VPN egciniwe ku-Android noma ku-iOS

Imisebenzi emibili ehluke kakhulu ifakwa ngaphansi kwegama le-VPN ehleliwe, futhi eyodwa kuphela yazo etholakala kuhlelo lokusebenza olujwayelekile kunoma iyiphi yezinkundla ezimbili zamaselula. Eyokuqala ukuvula iphrofayela umsebenzisi aseyilondolozile; eyesibili ukwakha umhubhe ngaphakathi kwenqubo yakho. I-Android ikunikeza eyesibili nge-VpnService futhi i-iOS ikunikeza eyesibili ngelungelo le-Network Extension, kuyilapho eyokuqala ihlala kusistimu, kumnikazi wedivayisi noma kuseva ye-MDM. Ukuthola ukuthi iyiphi oyidingayo ngempela ngokuvamile kwenza iphrojekthi ibe nencane.

Imisebenzi emibili ehlanganyela igama

Ukwenza kusebenze iphrofayela egciniwe kusho ukutshela umhubhe okhona ukuba unyuke: umsingathi, ubufakazi, iphrothokholi, konke sekulungiselelwe endaweni umsebenzisi angayibona. Ukwakha umhubhe kusho ukuthi ikhodi yakho inomnotho we-interface, umjikelezo wamaphakethe kanye nephrothokholi. Zibukeka zifana kuhlu lomkhiqizo futhi cishe azabelani ngokusetshenziswa.

Ayikho inkundla yamaselula edalula eyokuqala kuhlelo lokusebenza lwe-SDK. Ukuxhumana okuvela ngaphandle kokuthi umsebenzisi enze lutho akukwazi ukuhlukaniswa nesofthiwe enobungozi, ngakho zombili izinhlelo zibeka isango lemvume phambi kwanoma yiluphi uhlelo oluthwala ithrafikhi.

Android: isango lemvume, futhi ayikho i-API yephrofayela

VpnService ikhona kusukela ku-Android 4.0 futhi ivumela uhlelo ukuthi lwakhe i-interface ye-tun, bese lifunda futhi libhala amaphakethe. Isevisi kufanele imenyezelwe nge-BIND_VPN_SERVICE, futhi i-VpnService.prepare() ikhiqiza ingxoxo yesistimu ecela umsebenzisi ukuthi ayivume. Isampula yenkundla, i-ToyVpn, iyisitatimende esicacile kakhulu sesimo esihlosiwe: ikhodi yakho inomnotho we-interface nakho konke okugeleza kuyo.

Lokho engakwenzi ukwengeza umbhalo esikrinini sezilungiselelo ze-VPN zesistimu. Awekho ama-API omphakathi alokho, futhi uhlelo lokusebenza lwezilungiselelo lugcina amaphrofayela alo esitolo uhlelo olujwayelekile olungenakufinyelela. Izingcingo eziya kumakilasi afihliwe kusuka kuhlelo olujwayelekile zikhiqiza amaphrofayela isistimu engakaze iwabale, yingakho ikhodi eyayibonakala isebenza kukwakhiwo owodwa iyeka ukusebenza buthule kolandelayo.

Indlela ephethwe ihlukile. Umnikazi wedivayisi noma wephrofayela angakhetha iphakethe le-VPN elihlala livuliwe nge-API zenqubomgomo yedivayisi, futhi ithuluzi lebhizinisi lingathumela iphrofayela umsebenzisi ayigunyazayo kamuva. Lelo igunya lokuphatha idivayisi, hhayi imvume uhlelo oluyicelayo ngesikhathi sokufakwa. Uma iklayenti lakho liyinhlangano, lena iyindlela okufanele uyihlelele; uma iklayenti lakho umuntu ofaka esitolo, ayitholakali nhlobo.

iOS: ilungelo liwumngcele

I-iOS ihlukanisa umsebenzi ofanayo ngendlela ehlukile. Iklayenti le-VPN lisebenzisa umhlinzeki womhubhe wamaphakethe noma ummeli wohlelo ngaphansi kohlaka lwe-Network Extension, futhi ilungelo elihambisanayo kufanele linikezwe i-akhawunti yomthuthukisi. Ukulungiselelwa kwe-VPN komuntu siqu nge-NEVPNManager kukhona esimweni esilula, futhi kusasebenza ngaphakathi kwemodeli efanayo yemvume. I-Apple ibhala yonke indawo ku-incwadi yesandiso ye-Network Extension, okufanele ifundwe ngaphambi kokuthi unqume ububanzi bomsebenzi.

Ayikho indlela esekelwayo yokuvula isikrini sezilungiselelo ze-VPN, ukufunda ukulungiselelwa okugciniwe komsebenzisi noma ukuqala okukodwa kukho. Iklayenti elingakwenza ukuthumela iphrofayela yokulungiselelwa ukuze umsebenzisi ayifake, bese lisebenzisa umhubhe ovelayo ngezingcingo ezijwayelekile zenethiwekhi. Ukuhamba komhubhe kuhlelo ngalunye kunikezwa iseva ye-MDM ngomthetho wokufunwa, hhayi ukukhethwa kuhlelo ngesikhathi sokusebenza.

Iklayenti le-VPN elivela kumthengisi omkhulu akubona ubufakazi bokuthi i-akhawunti yakho ingathumela into efanayo. Lawo malungelo acelwa nge-akhawunti yomthuthukisi ngayinye futhi ayahlolwa, ngakho ingozi yesheduli ise-Apple, hhayi ohlelweni lwakho lwe-sprint.

Ideskithophu ifinyelela kude, kodwa ubunikazi abushintshi

I-Windows iyisimo esivumelayo. I-Add-VpnConnection yakha umbhalo wencwadi yocingo kusuka kuseshini ye-PowerShell ephakanyisiwe, futhi i-rasdial iyayixhuma noma iyayinqamula kusuka kuskripthi. Uhlelo lungashayela neklayenti lomthengisi ngomugqa womyalo walo obhaliwe. Ukwakha iphrofayela kusewumsebenzi wokuphatha, ngoba umbhalo uhlala esitolo sesistimu yonke.

I-macOS iziphatha ngendlela efanayo namanye amathuluzi. I-scutil --nc start ne-stop zisebenza kumasevisi avele akhona, kuyilapho ukwakha elilodwa kuwumsebenzi wokuphatha isistimu. Ukuba nomnotho wenqubo kukhompyutha ephathwayo akukwenzi ube umnikazi wokulungiselelwa.

Yini okufanele uyakhile esikhundleni

Uma isidingo sangempela ukuthi uhlelo lwakho lufinyelele i-API yangaphakathi, umhubhe uhlelo olusetshenziswayo kakade wanele. Thumela izicelo ezijwayelekile ze-HTTPS, vumela isistimu ikhethe indlela, futhi yeka ukuzama ukulawula umhubhe. Uma isidingo ukuthi ithrafikhi yohlelo lwakho kuphela esebenzisa umhubhe, cela i-VPN yohlelo ngalunye ngeshaneli lokuphatha, noma qeda i-TLS ngaphakathi kohlelo kubhekiswe kusevisi efinyelelekayo ngaphandle kwayo.

Ama-API afihliwe akuwona indlela emfushane efanele ukuthathwa. Ayashintsha phakathi kokukhishwa, ahluleka ekubuyekezweni kohlelo, futhi ukwehluleka okuwakhiqizayo kubonakala kumuntu ozuza ikhodi njengokwehluleka kwejwayelekile kwenethiwekhi. Ukuqhathanisa akuyona i-Android ne-iOS; ubunikazi bomhubhe uma kuqhathaniswa nokucela inkundla ukuthi ihambise ithrafikhi, futhi eyokuqala kuphela eyakho ukuba uyakhile.