I-SSH, ngaphezulu kweqokobhe elikhuselekileyo

I-SSH (Khusela iShell) Yiprothokholi esinceda ukuba sifikelele ngokukhuselekileyo kwiikhompyuter ezikude, ngokwesiseko njengoko iTelnet isenza, kodwa sisebenzisa ii-encryption algorithms ezisinceda sigcine unxibelelwano lwethu lukhuselekile, ngakumbi ukuba sifuna ukufikelela kwiikhompyuter ezenza umsebenzi obalulekileyo kuthungelwano.

Ngokubanzi, ukufikelela kufuneka sinikeze igama lethu lomsebenzisi kunye nedilesi yekhompyuter, ukuze iseva ye-SSH isicele igama eligqithisiweyo lokufikelela:

ssh usuario@equiporemoto

Ukusukela ukuba umxhasi uqalise uqhagamshelo lokuqala phakathi kwekhompyuter ekude kunye nathi, ulwazi sele luhamba ngokukhuselekileyo, luthintela umntu ekufumaneni iinkcazi zethu zofikelelo kwikhompyutha exeliweyo.Noko, i-SSH yiprothokholi eguquguqukayo kakhulu esinika amathuba amaninzi.

uMcwangcisi wezeKharityhulam oyiNtloko

Eyokuqala yazo kukukwazi ukudlulisa iifayile phakathi komxhasi kunye nekhompyuter ekude, ngaphandle kokuseta i-FTP okanye iseva ye-NFS, ngokulula usebenzisa i-SCP (Secure CoPy) esetyenziswa uninzi lwabancedisi be-SSH:

scp archivo.tar.gz usuario@equiporemoto:/home/usuario
scp usuario@equiporemoto:/var/log/messages messages.txt

I-SSH Tunneling

Lo msebenzi uluncedo kakhulu, kuba usivumela ukuba sithumele kwaye sifumane ulwazi olungeyiyo imiyalelo yeqokobhe phakathi komxhasi kunye nekhompyuter ekude, umzekelo ukukhangela okuqhelekileyo. Ukuba awuyazi ukuba ingaba luncedo kangakanani na oku, cinga malunga noku kulandelayo: kufuneka ufikelele kwiphepha, kodwa indawo okhoyo inodonga lomlilo oluphunyeziweyo oluvala iphepha elichazwe ngokuchanekileyo, ngoko ke, sinokwenza 'itonela' nge ikhompyuter ekude engakhange ithethe iibhloko kwaye idlulise ukukhangela kwiphepha elichaziweyo ngeseshoni yethu ye-SSH:

ssh -D 8888 usuario@equiporemoto

Nje ukuba uqhagamshelwe, umxhasi wethu we-SSH 'uphulaphula' kwizibuko 8888 njengomncedisi wommeli, ngoko ke sinokuqwalasela isikhangeli sethu kwaye zonke iitrafikhi ziya kuhanjiswa ngeseshoni ye-SSH.

Omnye umzekelo oza engqondweni xa, ngenxa yokuthintelwa kwendawo, asikwazi ukufikelela kwinkonzo yewebhu ukusuka apho sikhoyo, xa sisenza itonela, yathi inkonzo yewebhu ibona i-IP ye-server yethu ekude njengemvelaphi yayo, kungekhona i-IP yethu yomthengi. Oku kufana noko kwii-VPNs (iNethiwekhi yaBucala eVirtual).

Buyela umva iSSH

Ukuba ngenxa yesizathu esithile kufuneka sifikelele kwikhompyutheni esemva kwe-firewall kwaye ayisivumeli ukuba siqondise kwakhona i-SSH i-traffic kuyo, sinokwenza 'i-SSH ebuyisela umva', ukuze loo khompyutha idibanise kwenye iseva ye-SSH, apho thina inokudibanisa, ukwenzela ukufikelela kwisixhobo emva kwe-firewall. Umzekelo othi qatha engqondweni kuxa sifuna ukunceda umhlobo ongenalo uluvo lwendlela yokumisela ulwalathiso kwimodem yakhe, kodwa kufuneka sifikelele kwikhompyuter yakhe ekude:

Umhlobo —> IModem —> Iseva ye-SSH <— Malunga nathi

Amanyathelo ekufuneka uwalandele alula kakhulu:

Mhlobo
ssh -R 9999:localhost:22 usuario@servidorssh

Thina
ssh usuario@servidorssh
Nje ukuba singaphakathi kwiseva ye-SSH, sinokuqhagamshela kwikhompyuter yomhlobo wethu sisebenzisa
ssh amigo@localhost -p 9999

Njengoko ubona, yonke imilingo ilele kwi-parameter -R, exelela umncedisi ophakathi ukuba ikhompyuter yomhlobo wethu ngoku imamele kwi-port 9999 njengomncedisi.

La ngamanye amathuba esibonelelwa yi-SSH kodwa ndiyakumema ukuba ulinge ngezinye, umzekelo; singenza izikripthi ezingaqwalaselwanga sisebenzisa izitshixo zeRSA, salathise kwakhona iiseshini ze-X (imo yomzobo) kwindawo yethu yomzobo, ukubalula nje ezimbalwa.