Kungani ukuxhumana okuningi kwezinhlelo kwabelana ngeseshini eyodwa ye-OpenVPN

Cabanga ngesiphequluli esilayisha ikhasi le-HTTPS ngesikhathi iklayenti le-SSH lifinyelela esinye iseva futhi isixazululi siphendula umbuzo, konke kudlula eseshini eyodwa ye-OpenVPN. Kwi-interface yomzimba ubona ingxoxo eyodwa; ngaphakathi komhubhe ubona ezintathu. Zombili izimo ziqondile, futhi ukwazi ukuthi kungani iyona mehluko phakathi kokubamba okusizayo nokudidayo. Landela umfudlana owodwa wangaphakathi kusukela kusokhethi kuya kucingo, futhi ukwakheka kwezendlalelo akusabi yisithombe-nje.

Ingxoxo eyodwa yangaphandle, imifudlana eminingi yangaphakathi

Uhlelo ngalunye luvula isokhethi yalo, futhi i-kernel ilunikeza i-tuple yezinto ezinhlanu: ikheli lomthombo, ichweba lomthombo, ikheli lendawo, ichweba lendawo nomthetho. Lawo ma-tuple akhona ngaphambi kokuba noma yimuphi umhubhe ubandakanyeke. Bese kuthi ukuhlelwa kwemizila kunqume ukuthi wonke aphuma ngedivayisi yomhubhe, ngakho iphakethe elinikezwa OpenVPN lisathwala izihloko zokuqala ngaphakathi kwalo. I-OpenVPN ibethela leyo phakethe yangaphakathi futhi isonge umphumela engxoxweni eyodwa yangaphandle ye-UDP noma ye-TCP nomlingani. Ngakho ingxoxo yangaphandle yeyodwa, kuyilapho imifudlana engaphakathi ikhona njengoba izinhlelo zivule.

Akukho okubhidlikayo. Ama-tuple angaphakathi ayasinda kusukela ekupheleni kuya ekupheleni, yingakho uhlangothi olukude lusakwazi ukuhlukanisa imifudlana emithathu.

Ichweba elihlala lingaguquki

Okuhlala kungaguquki yi-tuple yangaphandle: ikheli lakho, ichweba lendawo eliboshwe iklayenti, ikheli lomlingani nechweba lesevisi elilungisiwe. Yile-tuple okufanele ukuvumela i-firewall noma i-NAT esendleleni, futhi yiyo ezokhonjiswa ukubamba okusendleleni ephezulu. Futhi yiyo eguqukayo ngemva kokuxhuma kabusha noma ukushintsha kwenethiwekhi, ngoba iklayenti lingabopha elinye ichweba lendawo. Umhubhe owodwa akusho ukuthi kukhona ichweba elilodwa eliqinile lomthombo kuze kube phakade.

Amachweba angaphakathi yiwo abalulekile emaphethelweni. Umfudlana we-HTTPS ugcina ichweba lendawo 443 ngaphakathi komhubhe ngisho noma ukuthuthwa kwangaphandle kuhlezi echwebeni elilungiswe umqhubi. Amaphethelo ohlelo awakaze azi ngalelo langaphandle.

Yini eguqulwa ukukhipha ukusonga ekugcineni okukude

Kumlingani isendlalelo sangaphandle siyasuswa, futhi okusalayo yiphakethe langaphakathi. Kusukela lapho ukudlulisela nenqubomgomo yokufinyelela kusebenza endaweni nangomthetho wangaphakathi. Iseva yewebhu isathola ukuxhumana kwe-HTTPS, i-daemon ye-SSH isathola i-SSH, futhi isixazululi sisathola umbuzo.

Yingakho umthetho ovumela ukuthuthwa kwangaphandle awuwona umthetho wokuvumela isevisi yangaphakathi. Owokuqala uchaza indlela; owesibili uchaza imvume.

I-TCP yangaphandle isho umfudlana owodwa, hhayi ukuxhumana okukodwa

Lapho ukuthuthwa kwangaphandle kuyi-UDP, isiphetho somfudlana ngamunye wangaphakathi sizimele: idathagramu elahlekile lithinta ukudluliswa okukodwa kuze kufike ukuthunyelwa kwayo futhi. Lapho ukuthuthwa kwangaphandle kuyi-TCP, yonke imifudlana yangaphakathi yabelana ngomfudlana owodwa wamabhayithi othembekile.

Lowo mfudlana owabiwe yiyo ingxenye abantu abayiphuthelwayo. Ukululama kwenzeka kanye, kukho konke, ngakho ingxenye eyodwa elahlekile ibambezela ithrafikhi yohlelo ngalunye oluhlanganisiwe ngaphakathi. Kusenezinto eziningi zokuxhumana emaphethelweni nokuxhumana okukodwa ocingweni, futhi ukusebenza kwesithiyo sekhanda somugqa kuhlala ocingweni. Inani lamachweba alalelayo alikutsheli lutho ngalokhu, yingakho ukubala amachweba kuyindlela embi yokucabanga ngokusebenza komhubhe.

Chaza ukuhleleka kwakho ngokunemba

Shono ithrafikhi yangaphakathi ekhethiwe kanye nokuthuthwa kwangaphandle okuyithwalayo, esikhundleni sokuthi umshini uthumela konke ngokudlula echwebeni elilodwa. Amasevisi endawo, omunye umhubhe kanye nomunye umkhakha wamakheli konke kudala imifudlana engalokothi ingene kule ngxoxo. Ukubamba okusendleleni ephezulu kukhombisa i-tuple yangaphandle; ukubamba ngaphakathi komhubhe kukhombisa eyangaphakathi.

Thatha kokubili, futhi ubeke izimpawu zesikhathi ndawana thoko. Uma udinga ukufakazela ukuthi yiluphi uhlelo oludale umuphi umfudlana wangaphakathi, ithebula lamasokhethi kusibungu iyithuluzi elingcono, ngoba ihlanganisa amachweba nezinqubo ngqo. Bese ubhala phansi i-tuple yangaphandle oyibonile kanye nomzuzu oyibone ngawo, ngoba ukubamba okulandelayo ngemva kokuxhuma kabusha kungakhombisa izinombolo ezihlukile ngokufanelekile.