Ithambile

Iphepha lokukopela lokuqonda iiProtocol zeVPN

Zama Isixhobo Sethu Sokuphelisa Iingxaki





Igqityelwe ukuhlaziywa Nge-17 ka-Epreli 2022 I-VPN yeProtocol yokuQhathanisa iPhepha lePhepha 0

Kuya kufuneka ukuba uvile ngeeprothokholi ezahlukeneyo ngelixa usebenzisa iiVPN. Abaninzi banokucebisa i-OpenVPN kuwe ngelixa abanye banokuthi bacebise ukuba uzame i-PPTP okanye i-L2TP. Nangona kunjalo, uninzi lwabasebenzisi beVPN abakaqondi ukuba zithini na ezi protocol, zisebenza njani, kwaye banokwenza ntoni.

Ke, ukwenza izinto zibe lula kuni nonke, silungiselele le VPN protocol cheat sheet apho uya kufumana a ukuthelekiswa kweeprotocol zeVPN kunye neenkcukacha ezibalulekileyo malunga nenye yazo. Siza kubeka izikhokelo ezishwankathelweyo phambi kokuba siqalise, njengoko kuya kunceda abo bafuna iimpendulo ezikhawulezayo.



Isishwankathelo esiKhawulezayo:

  • Soloko ukhetha i-OpenVPN njengoko yeyona VPN inokuthenjwa ngokwesantya kunye nokhuseleko.
  • I-L2TP yeyona ndlela yesibini kwaye isetyenziswa ngokuqhelekileyo ngabasebenzisi abaninzi be-VPN.
  • Emva koko kuza i-SSTP eyaziwa ngokhuseleko lwayo oluhle kodwa awunakulindela isantya esihle kuyo konke konke.
  • I-PPTP yeyona ndlela yokugqibela ngenxa yeziphene zayo zokhuseleko. Nangona kunjalo, yenye yezona ndlela zikhawulezayo kwaye zilula kakhulu kwiiprotocol zeVPN ukuzisebenzisa.

Iphepha lePhepha leProtocol yeVPN

Ngoku siza kuchaza iprotocol nganye yeVPN ngabanye, ukuze ufunde yonke into malunga nayo ngendlela elula ukuyiqonda:



OpenVPN

I-OpenVPN yiprotocol yomthombo ovulekileyo. Ibhetyebhetye kakhulu kwaye iza kuqwalaselo kwiintlobo ngeentlobo zamazibuko kunye neentlobo zofihlo. Ngaphezu koko, ibonakaliswe njengeyona nto ithembekileyo kwaye ikhuselekile ye-VPN protocol ngaphandle.

Sebenzisa: Njengoko ingumthombo ovulekileyo, i-OpenVPN isetyenziswa kakhulu ngabathengi be-VPN yomntu wesithathu. Iprotocol ye-OpenVPN ayakhiwe kwiikhompyuter kunye nezixhobo eziphathwayo. Nangona kunjalo, iya idume kakhulu kwaye ngoku iyiprotocol yeVPN engagqibekanga kwiinkonzo ezininzi zeVPN.



Isantya: I-OpenVPN protocol ayisiyiyo iprotocol yeVPN ekhawulezayo, kodwa ngokuqwalasela inqanaba lokhuseleko elinikezelayo, isantya sayo sihle kakhulu.

Ukhuseleko: Iprotocol ye-OpenVPN yenye yezona nkqubo zikhuselekileyo. Isebenzisa inkqubo yokhuseleko yesiko esekwe kwi-OpenSSL. Ikwalungile kakhulu ngokwemigaqo ye-stealth VPN kuba iqwalaselwe nakweyiphi na izibuko, ngoko inokuguqula ngokulula i-VPN yetrafikhi njengetrafikhi ye-intanethi eqhelekileyo. Uninzi lwe-encryption algorithms luxhaswa yi-OpenVPN equka i-Blowfish kunye ne-AES, ezimbini zezona ziqhelekileyo.



Ubulula boBumbeko: Ukucwangciswa kwencwadana ye-OpenVPN akukho lula konke konke. Nangona kunjalo, awunyanzelekanga ukuba uyiqwalasele ngesandla kuba abathengi abaninzi beVPN sele benayo i-OpenVPN protocol emiselweyo. Ke, kulula ukuyisebenzisa ngomthengi weVPN kwaye uyakhethwa.

I-L2TP

I-Layer 2 Tunnel Protocol okanye i-L2TP yiprothokholi ye-tunneling ehlala idityaniswe nenye iprotocol yokhuseleko ukunika ufihlo kunye nogunyaziso. I-L2TP yenye yezona nkqubo zilula ukuzidibanisa kwaye yaphuhliswa nguMicrosoft kunye neCisco.

Sebenzisa : Inceda ekufumaneni ukufikelela kwi-intanethi ngokukhuselekileyo nangasese nge-VPN ngenxa ye-tunneling yayo kunye nogunyaziso lokhuseleko lomntu wesithathu.

Isantya: Ngokumalunga nesantya, ifanelekile kwaye iphantse yakhawuleza njenge-OpenVPN. Nangona kunjalo, ukuba uyathelekisa, zombini i-OpenVPN kunye ne-L2TP zicotha kune-PPTP.

Ukhuseleko: Iprotocol ye-L2TP ayinikezeli naluphi na uguqulelo oluntsonkothileyo okanye ugunyaziso ngokwayo. Nangona kunjalo, inokudityaniswa neendidi ezahlukeneyo zokufihla kunye nogunyaziso lwe-algorithms. Ngokuqhelekileyo, i-IPSec idityaniswa ne-L2TP ephakamisa iinkxalabo kwabanye njengoko i-NSA incede ekuphuhliseni i-IPSec.

Ubulula boBumbeko: I-L2TP iyahambelana nezixhobo ezininzi njengoko uninzi ngoku lunenkxaso eyakhelweyo ye-L2TP protocol. Inkqubo yokuseta i-L2TP nayo ilula kakhulu. Nangona kunjalo, izibuko esetyenziswa yile ndlela yomthetho ivalwa ngokulula ngamadonga amaninzi omlilo. Ke, ukuze ujikeleze kuzo, umsebenzisi kufuneka asebenzise ugqithiso lwezibuko olufuna ukuseta oluntsonkothileyo.

PPTP

I-Point-to-Point tunneling okanye eyaziwa ngokuba yiPPTP yeyona indala kwaye yenye yezona nkqubo zidumileyo zeVPN. Yayiveliswe ekuqaleni nguMicrosoft.

Sebenzisa: Iprotocol yePPTP yeVPN isetyenziselwa zombini i-intanethi kunye neenethiwekhi ze-intranet. Kuthetha ukuba ungasebenzisa iprotocol yokufikelela kwinethiwekhi yenkampani kwindawo ekude.

Isantya: Ekubeni i-PPTP isebenzisa umgangatho ophantsi woguqulelo oluntsonkothileyo ibonelela ngesantya esimangalisayo. Esi sesona sizathu siphambili sokuba ibe yeyona ndlela ikhawulezayo yeVPN protocol phakathi kwabo bonke.

Ukhuseleko: Ngokubhekiselele kukhuseleko, i-PPTP yeyona nto ithembekileyo ye-VPN protocol njengoko inikezela ngelona nqanaba lisezantsi lokufihla. Ukongeza, kukho ubuthathaka obahlukeneyo kule VPN protocol eyenza ukuba ibe yeyona ikhuseleke kancinci ukuba isetyenziswe. Ngapha koko, ukuba uyakhathalela ubumfihlo bakho kunye nokhuseleko kancinci, akufanele usebenzise le VPN protocol.

Ubulula boBumbeko: Njengoko iyeyona ndlela indala kwaye ixhaphake kakhulu yeVPN, yeyona ilula ukuSeta kwaye phantse zonke izixhobo kunye neenkqubo zibonelela ngenkxaso eyakhelwe-ngaphakathi yePPTP. Yenye yeendlela ezilula zeVPN malunga noqwalaselo lwezixhobo ezahlukeneyo.

I-SSTP

STP okanye UKhuseleko lweProtocol yokuTyula iSocket yitekhnoloji yobunini eyaphuhliswa nguMicrosoft. Yakhiwa okokuqala kwiWindows Vista. I-SSTP ikwasebenza kwiinkqubo ezisekiweyo zeLinux, kodwa yayakhelwe ukuba ibe yitekhnoloji yeWindows kuphela.

Sebenzisa: I-SSTP ayisiyonkqubo yomthetho eluncedo kakhulu. Ngokuqinisekileyo ikhuseleke kakhulu kwaye inokujikeleza iifirewall ngaphandle kobunzima okanye ubunzima. Okwangoku, isetyenziswa kakhulu ngabalandeli beWindows abanzima kwaye ayinanzuzo ngaphezulu kwe-OpenVPN, yiyo loo nto i-OpenVPN inconywa.

Isantya: Ngokubhekiselele kwisantya, ayikhawulezi kakhulu njengoko inika ukhuseleko oluluqilima kunye ne-encryption.

Ukhuseleko: I-SSTP isebenzisa uguqulelo oluntsonkothileyo lwe-AES. Ukongeza, ukuba usebenzisa iWindows, ke iSSTP yeyona ndlela ikhuselekileyo onokuthi uyisebenzise.

Ubulula boBumbeko: Kulula kakhulu ukuseta i-SSTP koomatshini beWindows, kodwa kunzima kwiinkqubo ezisekwe kwiLinux. I-Mac OSx ayixhasi i-SSTP kwaye mhlawumbi ayinakuze.

IKEv2

Inguqulo yesi-2 ye-Intanethi ye-Intanethi yi-IPSec esekwe kwi-tunnel protocol eyaphuhliswa yiCisco kunye noMicrosoft kunye.

Sebenzisa: Isetyenziswa kakhulu kwizixhobo eziphathwayo ngenxa yobuchule bayo obuqaqambileyo bokunxibelelana kwakhona. Uthungelwano lwedatha yeselula luhlala luwisa uqhagamshelo apho i-IKEv2 iza iluncedo ngokwenene. Inkxaso yeprotocol ye-IKEv2 iyafumaneka kwizixhobo zeBlackberry.

Isantya: I-IKEv2 ikhawuleza kakhulu.

Ukhuseleko: I-IKEv2 ixhasa amanqanaba ahlukeneyo e-AES encryption. Kukho ezinye iinguqulelo zomthombo ovulekileyo we-IKEv2 ezikhoyo ngokunjalo, ukuze abasebenzisi baphephe inguqulelo yobunini beMicrosoft.

Ubulula boBumbeko: Ayisiyo iprotocol ehambelana kakhulu yeVPN njengoko kukho izixhobo ezinyiniweyo eziyixhasayo. Nangona kunjalo, kwizixhobo ezihambelanayo, kulula kakhulu ukuyiqwalasela.

Amazwi Okugqibela

Ke le yinto yonke ekufuneka uyazi malunga neeprotocol zeVPN eziqhelekileyo. Siyathemba ukuba iphepha lethu lokuthelekisa iiprothokholi zeVPN linolwazi kwaye liluncedo kuwe. Sazise ukuba unemibuzo eyongezelelekileyo malunga naziphi na iiprothokholi kwicandelo lamagqabaza angezantsi.