I-SSH (SHELL Secure) umthetho olandelwayo osisiza ukufinyelela ngokuvikelekile kumakhompyutha akude, ngokuyisisekelo njengoba kwenza iTelnet, kepha sisebenzisa ama-encryption algorithms asisiza ukugcina ukuxhumana kwethu kuphephile, ikakhulukazi uma sifuna ukufinyelela kumakhompyutha enza umsebenzi obalulekile ngaphakathi kwenhlangano.
Ngokuvamile, ukufinyelela lapho kufanele sinikeze igama lethu lomsebenzisi nekheli lekhompyutha, ukuze iseva ye-SSH isibuze iphasiwedi yokufinyelela:
ssh usuario@equiporemoto
Kusukela lapho iklayenti liqala ukuxhumana kokuqala phakathi kwekhompyutha ekude nathi, ulwazi seluvele luhamba ngokuphepha, luvimbela umuntu ekutholeni iziqinisekiso zokufinyelela kuleyo khompyutha, kepha i-SSH umthetho olandelwayo ovumelana nezimo osinikeza amathuba amaningi.
SCP
Owokuqala ukukwazi ukudlulisa amafayela phakathi kweklayenti nekhompyutha ekude, ngaphandle kwesidingo sokufaka i-FTP noma isiphakeli seNFS, usebenzisa i-SCP (Secure CoPy) esetshenziswa kakhulu amaseva we-SSH:
scp archivo.tar.gz usuario@equiporemoto:/home/usuario
scp usuario@equiporemoto:/var/log/messages messages.txt
Umhubhe we-SSH
Lesi sici siwusizo kakhulu, ngoba sisivumela ukuthi sithumele futhi sithole imininingwane engeyona imiyalo yeShell phakathi kweklayenti nekhompyutha ekude, ngokwesibonelo ukuphequlula okuvamile. Uma ungaqageli ukuthi lokhu kungasetshenziswa ngani, cabanga ngalokhu okulandelayo: udinga ukufinyelela ekhasini, kepha indawo lapho ukhona kune-firewall esetshenzisiwe evimba ngqo lelo khasi, ngakho-ke, singakwazi ukuhubha ngekhompyutha ekude eyenza angikaze ngithi ukuvimba nokuphequlula lelo khasi ngeseshini yethu ye-SSH:
ssh -D 8888 usuario@equiporemoto
Uma sekuxhunyiwe, iklayenti lethu le-SSH 'liyalalela' ku-port 8888 njengeseva elibambayo, ukuze sikwazi ukumisa isiphequluli sethu futhi wonke umgwaqo udluliswa ngeseshini ye-SSH
Esinye isibonelo esivelayo kimi lapho, ngenxa yomkhawulo othile wendawo, singakwazi ukufinyelela insiza yewebhu kusuka lapho sikhona, lapho senza umhubhe, insiza yewebhu ithola i-IP yeseva yethu ekude njengomthombo, hhayi iklayenti lethu le-IP. Lokhu kucishe kufane nama-VPNs (i-Virtual Private Network)
Buyisela emuva i-SSH
Uma ngasizathu simbe sidinga ukufinyelela ikhompyutha engemuva kwe-firewall futhi ingasivumeli ukuthi siqondise kabusha ithrafikhi ye-SSH kuyo, singenza 'i-reverse SSH', ngendlela yokuthi leyo khompyutha ixhumeke kwenye iseva ye-SSH, lapho futhi singaxhuma khona, ukuze sikwazi ukufinyelela okokusebenza ngemuva kwe-firewall. Isibonelo esifikayo engqondweni yilapho sifuna ukusiza umngane ongenalo nhlobo ulwazi lokuhlela kabusha ukuqondisa kabusha kwimodemu yakhe, kepha sidinga ukufinyelela kukhompyutha yakhe ukude:
Umngani -> Imodemu -> Iseva ye-SSH <- Mayelana Nathi
Izinyathelo okufanele zilandelwe zilula kakhulu:
Amigo
ssh -R 9999:localhost:22 usuario@servidorssh
Thina
ssh usuario@servidorssh
Lapho sesingaphakathi kweseva ye-SSH, singaxhuma nethimba lomngane wethu sisebenzisa
ssh amigo@localhost -p 9999
Njengoba ukwazi ukubona, yonke imilingo ilele kupharamitha -R, etshela isiphakeli esiphakathi ukuthi ethekwini 9999 ikhompyutha yomngane wethu isilalele manje njengeseva.
Lawa ngamathuba athile i-SSH esinikeza wona kepha ngikumema ukuthi uzame okunye, isibonelo; singenza imibhalo engagadiwe sisebenzisa okhiye be-RSA, siqondise kabusha ama-X sessions (imodi yokuqhafaza) endaweni yethu yokuqhafaza, ukusho nje okumbalwa.