I-VPN ixhume kabusha, kodwa iseshini yohlelo lokusebenza isahluleka

Umhubhe uyabuya, iklayenti lithi lixhunyiwe, kanti isiphequluli sisazulazula ekhasini elalililayisha ngaphambi kokunqamuka. Ukuxhuma kabusha kwe-VPN kubuyisela indlela, futhi akubuyiseli isimo sokuxhumana izinhlelo kanye nohlangothi olukude ezakuqongelela kuyo endala. Lezi yizinto ezimbili ezihlukene okufanele zilungiswe, futhi ukuzihlanganisa kukubuyisela kuzilungiselelo ze-VPN ngaphandle kwesizathu.

Ucwaningo olulodwa luzihlukanisa ngokucacile, futhi luthatha imizuzwana eyishumi. Thumela isicelo esisha endaweni efanayo ngenkathi esidala sisalenga.

Yini esinda ekuxhumeni kabusha futhi yini engasindi

Umhubhe uyisethi yemizila, okhiye namakheli, futhi ukuxhuma kabusha kungabuyisela zontathu ngenkathi yonke imifudlana esunguliwe ihlala ifile. Uhlelo lokusebenza lugcina i-socket ivuliwe ngoba uhlelo lwayicela, futhi isikhathi sokuphela saleso socket singaba ngemizuzu noma amahora kude. Ngaphansi kwalokho, uzakwethu ukhohliwe umfudlana, okufakiwe kokuhumusha kuphelelwe yisikhathi, noma indlela manje idlula endaweni engakaze ibone ukuxhawulana. Akukho lutho ekulandeleni kokuxhuma kabusha okudlula kuma-socket ohlelo futhi akulungise.

Amanye amaklayenti engeza ihhuku elilahla ukuxhumana okudala lapho kuxhunywana kabusha, futhi iningi alikwenzi. Ukuziphatha lapha kuyahlukahluka ngeklayenti, ipulatifomu nenguqulo.

Uhlangothi olukude lukhohliwe nawe

Umkhawulo okude ugcina isimo saso: iseshini ye-TLS, ibhulokhi yokulawula ye-TCP futhi mhlawumbe okufakiwe kwemephu okubopha ikheli lakho nechweba kumfudlana. Idivayisi yokuhumusha endleleni ingavumela leyo mephu ukuba iphele ngesikhathi sesikhala ngisho nomhubhe usungulwa kabusha ngokushesha. Uma imephu isihambile, amaphakethe afika emfudlaneni ongasawazi iseva, futhi impendulo ingaba ukusethwa kabusha iklayenti elingakubonisi neze. Izinhlelo zibika lokhu njengokuma hhayi njengephutha, ngoba zisalinde i-socket engasoze iphendule.

Isikhathi sokuphela kokungenzi lutho ohlangothini lweseva senza okufanayo ngohlelo lwaso, yingakho iseshini ingafa ngaphandle komcimbi wonethiwekhi. Ukuxhumana okungenzi lutho isikhathi eside kunalokho iseva ekulindele kukhona kakade ngaphambi kokuba ubone ukuthi umhubhe usunyakile.

Isicelo esisha siwucwaningo oluzihlukanisayo

Thumela isicelo esisha kumphathi ofanayo ngenkathi esidala sisalenga, futhi ubheke kokubili. Uma isicelo esisha siphumelela, umhubhe, umzila nokuxazululwa kwamagama kuyasebenza, futhi iphutha ligcwele emfudlaneni wakudala. Uma nesicelo esisha sehluleka, unenkinga yendlela futhi isimo seseshini yohlelo siwuphawu lwamanga.

Shiya noma yikuphi ukuvinjwa kwethrafikhi eqondile endaweni yako ngesikhathi socwaningo. Isicelo esiphumelela ngomzila wokubhaka wengozi asifakazeli lutho ngomhubhe.

Qinisekisa ngokuxhumana okusha, hhayi okudala

Imiyalo engezansi ikhombisa ama-socket asavuliwe, iqale isicelo esisodwa esisha, futhi ihlole ukuthi ithebula lamaseshini lisenokufakiwe yini komfudlana. Gijimisa eyokuqala ngaphambi nangemva kokuxhuma kabusha ukuze umehluko ubonakale. Shintsha umphathi nechweba ngensizakalo yakho.

ss -tanp | grep -E ':(443|8443)'
curl -sS -o /dev/null -w '%{http_code} %{time_connect}\n' --max-time 8 https://intranet.example.com/
conntrack -L 2>/dev/null | grep 8443
dig +short intranet.example.com

I-socket esunguliwe engenathrafikhi ehambayo iyisiginesha okufanele uyifune, futhi isicelo esisha esibuyisa ikhodi yesimo sikhombisa ukuthi indlela iyaphila. Ithebula lokuxhumana liphendula ukuthi kukhona yini okusamema umfudlana, futhi leyo yingxenye iklayenti elingakwazi ukuyibona. Umbuzo womxazululi uhlanganisa enye ingxenye yokulayisha ikhasi, ngoba ukwehluleka kwegama nokuxhumana okumile kubonakala kufana kusiphequluli. Ngokuhlanganyela, leyo miphumela emine ihlukanisa iseshini endala nomhubhe ophukile.

Bhala phansi isikhathi sokuphazamiseka, isikhathi sokuxhuma kabusha kanye nomehluko phakathi kwesicelo esidala nesisha. Lokho kubhalwa kuguqula isikhalazo esingacacile sibe umbiko umuntu angathatha isinyathelo kuwo.