Oorhulumente bamazwe amaninzi, ngandlelβ ithile, banciphisa ukufikelela kwabemi kwinkcazelo nakwiinkonzo ezikwi-Intanethi. Ukulwa novavanyo olunjalo ngumsebenzi obalulekileyo nonzima. Ngokuqhelekileyo, izisombululo ezilula azikwazi ukuqhayisa ukuthembeka okuphezulu okanye ukusebenza kakuhle kwexesha elide. Iindlela eziyinkimbinkimbi zokoyisa ukubhloka zineziphene malunga nokusebenziseka, ukusebenza okuphantsi, okanye ukungavumeli ukugcina umgangatho wokusetyenziswa kwe-Intanethi kwinqanaba elifanelekileyo.
Iqela lezazinzulu zaseMelika ezivela kwiYunivesithi yaseIllinois indlela entsha yokoyisa ibhlokhi, esekelwe ekusebenziseni itekhnoloji ye-proxy, kunye nokwahlula abasebenzisi ngokwenqanaba lokuthembana ukuchonga ngokufanelekileyo ii-arhente ezisebenzela i-censors. Sinikezela ingqalelo yakho iithisisi eziphambili zalo msebenzi.
Inkcazo yendlela
Izazinzulu zenze isixhobo esibizwa ngokuba yiSalmon, inkqubo yeeseva ezisebenza ngommeli eqhutywa ngamavolontiya asuka kumazwe ngaphandle kwemiqathango yokusetyenziswa kwe-Intanethi. Ukuze ukhusele ezi seva ukuba zingavalwa ngabahloli, inkqubo isebenzisa i-algorithm ekhethekileyo yokunika inqanaba lokuthembela kubasebenzisi.
Indlela ibandakanya ukuveza ii-agent ezinokuthi zibe ngabasebenzisi abaqhelekileyo ukuze bafumane idilesi ye-IP ye-server yommeleli kwaye bayivimbe. Ngaphezu koko, inkcaso lwenziwa ngeemfuno zokubonelela, xa ubhalisa kwinkqubo, ikhonkco kwi-akhawunti yenethiwekhi yoluntu esebenzayo okanye ukufumana isincomo kumsebenzisi onomgangatho ophezulu wokuthembela.
ntoni lo msebenzi
I-censor kufuneka ibe ngumbutho olawulwa ngurhulumente onamandla okulawula nayiphi na i-router ngaphakathi kwelizwe. Kwakhona kucingelwa ukuba umsebenzi we-censor ukuthintela ukufikelela kwizibonelelo ezithile, kwaye ungachongi abasebenzisi ukuba babanjwe ngakumbi. Inkqubo ayikwazi ukuthintela uphuhliso olunjalo lweziganeko nangayiphi na indlela - urhulumente unamathuba amaninzi okufumanisa ukuba zeziphi iinkonzo ezisetyenziswa ngabemi. Enye yazo kukusetyenziswa kweeseva ze-honeypot ukuthintela unxibelelwano.
Kukwacingelwa ukuba urhulumente unemithombo yobutyebi ebalulekileyo, kuquka nabasebenzi. I-censor inokusombulula iingxaki ezifuna amakhulu okanye amawaka abasebenzi bexesha elizeleyo.
Namanye amanqaku asisiseko:
- Injongo yenkqubo kukubonelela ngokukwazi ukudlula ukubhloka (oko kukuthi ukubonelela ngedilesi ye-IP ye-proxy) kubo bonke abasebenzisi abahlala kwimimandla ngokuhlolwa kwe-intanethi.
- Iiarhente/abasebenzi bamagunya ovavanyo lwe-Intanethi kunye namasebe banokuzama ukunxibelelana nesistim besebenzisa imbonakalo yabasebenzisi abaqhelekileyo.
- I-censor inokuthintela nayiphi na iseva ye-proxy egama layo liyaziwa kuye.
- Kule meko, abaququzeleli benkqubo ye-Salmon bayaqonda ukuba i-censor ngandlela-thile ifunde idilesi yomncedisi.
Konke oku kusizisa kwinkcazo yamacandelo amathathu aphambili enkqubo yokoyisa iibhlokhi.
- Inkqubo ibala ukuba kunokwenzeka ukuba umsebenzisi yi-arhente yemibutho yokuhlola. Abasebenzisi abafunyaniswa ukuba balindeleke kakhulu ukuba ngabameli abanjalo bathintelwe.
- Wonke umsebenzisi unenqanaba lokuthembana ekufuneka lifunyenwe. Ezona proxies zisebenza ngokukhawuleza zinikezelwe kubasebenzisi abanamanqanaba aphezulu okuthembana. Ukongeza, oku kukuvumela ukuba uhlukanise abasebenzisi abathembekileyo, abavavanywe ixesha elivela kwabasaqalayo, kuba phakathi kwabo kunokwenzeka ukuba babe ngabahloli be-censor.
- Abasebenzisi abanomgangatho ophezulu wokuthembela banokumema abasebenzisi abatsha kwinkqubo. Isiphumo yigrafu yentlalo yabasebenzisi abathembekileyo.
Yonke into inengqiqo: i-censor ihlala ifuna ukuvala iseva ye-proxy apha kwaye ngoku; akayi kulinda ixesha elide ukuzama "ukumpompa" ii-akhawunti zee-arhente zakhe kwinkqubo. Ukongeza, kukwacaca ukuba abasebenzisi abatsha banokuqala bafumane amanqanaba ahlukeneyo okuthembana - umzekelo, abahlobo kunye nezalamane zabadali beprojekthi abanako ukusebenzisana namazwe ogcino.
Amanqanaba eTrasti: Iinkcukacha zokuphunyezwa
Kukho inqanaba lokuthembela kungekuphela nje phakathi kwabasebenzisi, kodwa naphakathi kweeseva zeproxy. Inkqubo inika umsebenzisi kumgangatho othile umncedisi onenqanaba elifanayo lokuthembana. Ngexesha elifanayo, umgangatho wokuthembela komsebenzisi unokunyusa okanye unciphise, kwaye kwimeko yeeseva ikhula kuphela.
Ngalo lonke ixesha i-censors ivala iseva eyayisetyenziswa ngumsebenzisi othile, inqanaba labo lokuthembela liyancipha. Ukuthembela kuyanda ukuba umncedisi akavaliwe ixesha elide - kwinqanaba elitsha ngalinye ixesha elifunekayo liphindwe kabini: ukusuka kwinqanaba le-n ukuya kwi-n + 1, udinga iintsuku ze-2n + ze-1 zokusebenza okungaphazanyiswa kweseva yommeleli. Indlela eya kwinqanaba eliphezulu, lesithandathu, inqanaba lokuthembela lithatha ngaphezu kweenyanga ezimbini.
Ukulinda ixesha elide kangako ukufumana iidilesi zezona zincedisi zommeli linyathelo elisebenza ngokugqithisileyo ngokuchasene nabahloli.
Inqanaba lokuthemba lomncedisi linqanaba elisezantsi lokuthemba elinikezelwe kulo ngabasebenzisi. Ngokomzekelo, ukuba iseva entsha kwinkqubo inikezelwe kubasebenzisi, phakathi kwabo ubuncinci bokulinganisa i-2, ngoko ummeleli uya kufumana okufanayo. Ukuba ke umntu onomlinganiselo we-3 uqala ukusebenzisa umncedisi, kodwa abasebenzisi abasuka kwinqanaba lesibini nabo bahlala, ngoko umlinganiselo womncedisi uya kuba ngu-2. Ukuba bonke abasebenzisi bomncedisi baye bandisa inqanaba, ngoko kwandisa kwi-proxy. Kwangaxeshanye, iseva ayinakuphulukana nenqanaba layo lokuthembela; ngokuchaseneyo, ukuba ivaliwe, abasebenzisi baya kuhlawuliswa.
Abasebenzisi abanomgangatho ophezulu wokuthembela bafumana iindidi ezimbini zemivuzo. Okokuqala, iiseva azifani. Kukho ubuncinci beemfuno ze-bandwidth (100 Kbps), kodwa umnini-server wevolontiya unokubonelela ngakumbi - akukho mda uphezulu. Inkqubo yeSalmon ikhetha awona maseva anemveliso kakhulu kubasebenzisi abanemilinganiselo ephezulu.
Ukongeza, abasebenzisi abanenqanaba eliphezulu lokuthembela bakhuselekile ekuhlaselweni ngabahloli, ekubeni i-censor kufuneka ilinde iinyanga ukuze ifumane idilesi yommeleli. Ngenxa yoko, ukubakho kweeseva ezivaliweyo kubantu abanomngcipheko omkhulu kungaphantsi ngokuphindwe kaninzi kunabo banethemba eliphantsi.
Ukuze uqhagamshelane nabasebenzisi abaninzi abafanelekileyo ngangokunokwenzeka kwiiproxies ezilungileyo, abadali beSalmon baye baphuhlisa inkqubo yokucebisa. Abasebenzisi abanomlinganiselo ophezulu (L) banokumema abahlobo babo ukuba bajoyine iqonga. Abantu abamenyiweyo banikwe umlinganiselo we-L-1.
Inkqubo yokuncoma isebenza kumaza. Igagasi lokuqala labasebenzisi abamenyiweyo lifumana kuphela ithuba lokumema abahlobo babo emva kweenyanga ezine. Abasebenzisi abavela kumaza esibini kunye nalandelayo kufuneka balinde iinyanga ezi-2.
Iimodyuli zenkqubo
Inkqubo inamacandelo amathathu:
- Umxhasi weSalmon kwiiWindows;
- inkqubo yedaemon yomncedisi efakwe ngamavolontiya (iinguqulelo zeWindows kunye neLinux);
- Umncedisi kavimba weefayili ogcina idatabase yazo zonke iiseva zommeli kwaye usasaze iidilesi ze-IP phakathi kwabasebenzisi.
Ujongano lwesicelo somthengi wenkqubo
Ukuze usebenzise inkqubo, umntu kufuneka enze i-akhawunti esebenzisa i-akhawunti ye-Facebook.
isiphelo
Okwangoku, indlela ye-Salmon ayisetyenziswanga ngokubanzi, kunye neeprojekthi zokulinga ezincinci ezaziwa kubasebenzisi base-Iran nase-China. Ngaphandle kwento yokuba le projekthi inomdla, ayinikezeli ngokupheleleyo ukungaziwa okanye ukukhuselwa kwamavolontiya, kwaye abadali ngokwabo bayavuma ukuba kuthinteka ekuhlaselweni ngokusebenzisa iinkonzo ze-honeypot. Nangona kunjalo, ukuphunyezwa kwenkqubo enamanqanaba okuthembana kubonakala njengovavanyo olunomdla olunokuthi luqhubeke.
Kuphelele apho namhlanje, enkosi ngengqalelo yakho!
Amakhonkco aluncedo kunye nemathiriyeli evela :
umthombo: www.habr.com