Inkampani I-Cloudflare yazisa ithala leencwadi le-mitmengine elisetyenziselwa ukufumana ukufunyanwa kwezithuthi kwi-HTTPSkunye nenkonzo yewebhu kaMalcolm yohlalutyo olubonakalayo lwedatha eqokelelwe eCloudflare.
Ikhowudi ibhaliwe ku-Go ulwimi kwaye ihanjiswa phantsi kwelayisensi ye-BSD. Ukujonga iliso lezithuthi kwi-Cloudflare kusetyenziswa isixhobo esicetywayo kubonise ukuba malunga ne-18% yoqhagamshelo lwe-HTTPS luyabanjwa.
Ukuqhawulwa kwe-HTTPS
Kwiimeko ezininzi, Ukugcwala kwe-HTTPS kuyabanjiswa kwicala lomthengi ngenxa yomsebenzi wezicelo ezahlukeneyo zasekhaya ze-antivirus, ii-firewwall, iinkqubo zolawulo lwabazali, i-malware (ukweba iiphasiwedi, ukubuyisela intengiso okanye ukumilisela ikhowudi yemigodi) okanye iinkqubo zokuhlola izithuthi.
Ezo nkqubo zongeza isatifikethi sakho se-TLS kuluhlu lwezatifikethi kwinkqubo yendawo kwaye bayayisebenzisa ukuthintela ukugcwala kwabasebenzisi.
Izicelo zabaThengi zigqithiselwa kwiseva yokufika endaweni yesoftware yokungena, emva koko umthengi uphendulwa ngaphakathi konxibelelwano olwahlukileyo lwe-HTTPS olusekwe kusetyenziswa isatifikethi se-TLS kwinkqubo yokumkelwa.
Ngamanye amaxesha, ukumiswa kulungelelaniswe kwicala leseva xa umnini weseva ehambisa isitshixo sangasese kwiqela lesithathuUmzekelo, umxhasi osebenzela umva, i-CDN okanye inkqubo ye-DDoS yokukhusela, efumana izicelo zesatifikethi sokuqala se-TLS kwaye uzithumele kwiseva yokuqala.
Ngayiphi na imeko, Ukuqhawulwa kwe-HTTPS kujongela phantsi ikhonkco lokuthembela kwaye kwazisa ikhonkco elongeziweyo lokulalanisa, okukhokelela ekwehleni okukhulu kwinqanaba lokhuseleko uqhagamshelo, ngelixa ushiya imbonakalo yobukho bokhuseleko kwaye ngaphandle kokubangela urhano kubasebenzisi.
Malunga nemimengineengine
Ukuchonga ukunqunyulwa kwe-HTTPS nguCloudflare, iphakheji yemitmengine inikezelwa, ethi ukufakwa kwiseva kwaye kuvumela ukubanjwa kwe-HTTPS, kunye nokumisela ukuba zeziphi iinkqubo ezazisetyenziselwa ukubamba.
Umongo wendlela yokumisela ukukhulelwa ngokuthelekisa iimpawu ezithile zesikhangeli sokulungiswa kwe-TLS kunye nemeko yoqhagamshelo.
Ngokusekwe kwi-header yeArhente yoMsebenzisi, injini imisela isikhangeli kwaye emva koko kuvavanye ukuba ngaba iimpawu zonxibelelwano ze-TLSezinje nge-TLS iparameter emiselweyo, izandiso ezixhasiweyo, ukubhengezwa kwe-cipher suite, inkqubo yokuchazwa kwe-cipher, amaqela, kunye nefomathi ze-elliptic curve zihambelana nesi sikhangeli.
Isiseko sedatha esityikityiweyo esisetyenziselwa ukungqinisisa sinee-TLS ezichongiweyo zesitaki seebrawuza kunye neenkqubo zokungena.
Idatha inokuqokelelwa kwimowudi yokuhamba ngokuhlalutya umxholo wamasimi kumyalezo weClientHello, osasazwa ngokuvulekileyo ngaphambi kokufaka ijelo lonxibelelwano olofihliweyo.
I-TShark evela kwi-Wireshark 3 analyzer yenethiwekhi isetyenziselwa ukufaka izithuthi.
Iprojekthi ye-mitmengine ikwabonelela ngethala leencwadi lokudibanisa imisebenzi yokumisela kwiziphathamandla zeseva.
Kwimeko elula, kwanele ukudlulisa iArhente yoMsebenzisi kunye ne-TLS ClientHello amaxabiso esicelo sangoku kwaye ilayibrari iya kunika ithuba lokuthintelwa kunye nezinto ezisekwe kwisigqibo esinye okanye esinye.
Ngokusekwe kubalo lweendlela kudlula kwinethiwekhi yokuhambisa umxholo yeCloudflare, ethi Iinkqubo ezimalunga ne-10% yazo zonke izithuthi ze-Intanethi, Kwenziwa inkonzo yewebhu ebonisa utshintsho ekumkeleni i-dynamics ngosuku.
Umzekelo, kwinyanga ephelileyo, ukubanjwa kwabhalwa kwi-13.27% yeekhompawundi, nge-19 kaMatshi, inani lalingama-17.53%, kwaye nge-13 kaMatshi lafikelela kwincopho ye-19.02%.
Ukuthelekisa
Eyona injini ithandwayo yokuqhafaza yinkqubo yokuhluza yeSymantec Bluecoat, ebala i-94.53% yazo zonke izicelo ezichongiweyo.
Oku kulandelwa ngummeli we-Akamai (4.57%), i-Forcepoint (0.54%) kunye neBarracuda (0.32%).
Uninzi lwe-anti-virus kunye neenkqubo zolawulo lwabazali azibandakanywanga kwisampulu yabachongi, njengoko kungatyikityi ngokwaneleyo ukutyikitywa kwabo.
Kwi-52,35% yamatyala, ukugcwala kweenguqulelo zebrawuza kwabanjwa kwaye kwi-45,44% yabakhangeli bezixhobo eziphathwayo.
Ngokweenkqubo zokusebenza, amanani-manani ngolu hlobo lulandelayo: Android (35.22%), Windows 10 (22.23%), Windows 7 (13.13%), iOS (11.88%), nezinye iinkqubo zokusebenza (17.54%).
Umthombo: https://blog.cloudflare.com