- Iphrothokholi ye-SSH isungula isiteshi sokuxhumana esibethelwe sokuphathwa kwezinhlelo zokusebenza kude.
- Ukuqinisekiswa kungaphathwa kusetshenziswa indlela yendabuko yegama lomsebenzisi nephasiwedi noma ngokusebenzisa izinkinobho zomphakathi neziyimfihlo.
- Kunamaklayenti amaningi e-Windows akuvumela ukuthi usebenzise imiyalo ngokuphephile kumaseva e-Linux noma e-Windows.
- Ukubethela okulinganayo, ukubethela okungalingani, kanye ne-hashing kuqinisekisa ukuthi ulwazi alubanjwa noma aluphathwa kabi.
Cishe uke wahlangabezana nesidingo sokuphatha iseva ongenayo ngokoqobo phambi kwakho. Ukuze wenze lokhu ngaphandle kokuba noma yimuphi umgebengu obambe okhiye bakho, i-SSH (i-Secure Shell) iyaqala ukusebenza , inqubo esibe yindinganiso ephelele yokuhamba nge-console yemishini ekude ngaphandle kokwesaba.
Ngokuyisisekelo, kufana nokuvula iwindi lomlingo elikuvumela ukuthi uthayiphe imiyalo kukhompyutha engaba kolunye uhlangothi lomhlaba, uqinisekise ukuthi yonke idatha ibethelwe. Uma une-VPS noma usebenza efwini, ukwazi kahle leli thuluzi kubalulekile ukuze ugweme ukwenza amaphutha.
Yini ngempela equkethwe yi-protocol ye-SSH?
Ukuze sikuqonde kahle lokhu, sidinga ukubheka emuva sikhumbule i-Telnet. I-Telnet yake yasetshenziswa ngenhloso efanayo, kodwa yayinenkinga enkulu: yayithumela konke ngombhalo ocacile. Uma othile evimba uxhumano, angafunda iphasiwedi yakho njengokungathi iyincwadi evulekile. I-SSH yadalelwa ukuxazulula lokhu, isebenzisa uhlelo oluqinile lokubethela olwenza ulwazi lungafundeki kubantu besithathu.
Le protocol isebenza kusakhiwo seklayenti-iseva. Iseva ye-SSH yisofthiwe esebenza emshinini okude futhi "ilalele" izicelo echwebeni elithile (22 ngokuzenzakalelayo). Iklayenti le-SSH , ngakolunye uhlangothi, uhlelo lokusebenza olufaka kwi-PC yakho ukuze uqalise uxhumano futhi uthumele imiyalo.
Izinsika zokuphepha: Ukubethela kanye nokuHasha
Umlingo we-SSH useqinisweni lokuthi ayisebenzisi indlela eyodwa yokuvikela, kodwa inhlanganisela yamasu amathathu ezibalo anamandla kakhulu:
- Ukubethela kwe-Symmetric: Isetshenziselwa ukuxhumana okuqhubekayo. Bobabili iklayenti kanye neseva babelana nge- Iphasiwedi eyimfihlo ukufaka ikhodi nokuhlela idatha. Ukuze bavimbele lo khiye ukuthi ungahambi kunethiwekhi, basebenzisa ama-algorithms afana ne-Diffie-Hellman.
- Ukubethela kwe-Asymmetric: Isetshenziswa kakhulu ekuqinisekiseni ubuqiniso. Nasi isihluthulelo: esisodwa ukhiye womphakathi lokho kungaba noma kuphi futhi ukhiye oyimfihlo okungokwakho kuphela. Uma iseva inokhiye wakho womphakathi, ingakuthumela inselelo ongayisusa ngokhiye wakho wangasese kuphela.
- I-Hashing: Le ndlela isetshenziswa ukuqinisekisa ukuthi akekho othinte idatha phakathi nohambo. inani le-hash eliyingqayizivele (kusetshenziswa i-MD5 noma i-SHA); uma umlayezo ushintshwa ngisho nangengxenye eyodwa, i-hash iyashintsha futhi uxhumano luphawulwa njengolungathembekile.
Indlela yokuxhuma kuseva kusuka ku-Windows
Amafasitela ayeyinkinga kakhulu kulokhu, kodwa kulezi zinsuku kunezinketho zazo zonke izinhlobo zokuthanda, kusukela kulabo abathanda ukuchofoza kuya kulabo abathanda umugqa wemiyalo.
Inketho 1: Ukusebenzisa iTheminali (i-OpenSSH)
Izinguqulo zanamuhla ze-Windows 10 kanye ne-11 sezivele zineklayenti le-OpenSSH elakhelwe ngaphakathi. Vele uvule i-Command Prompt (CMD) noma i-PowerShell bese uthayipha umyalo. umsebenzisi we-ssh@ip-addressIsibonelo, uma ufuna ukungena njengempande kuseva, ungathayipha ssh [email protected]Uhlelo luzokubuza ukuthi uyamethemba yini umphathi; uyathayipha Yebo bese ufaka iphasiwedi (qaphela ukuthi uma uyithayipha ngeke ubone ama-asterisk noma ama-period, lokhu kuvamile ngenxa yokuphepha).
Inketho 2: I-PuTTY (Ejwayelekile)
I-PuTTY iyithuluzi elidumile le-Windows. Ukuze ulisebenzise, landa i-executable, faka ikheli le-IP leseva ensimini ethi Host Name, bese uqinisekisa ukuthi i-port ingu-22. Ukuchofoza okuthi "Vula" kuzovula ikhonsoli lapho uzocelwa khona igama lakho lomsebenzisi nephasiwedi. Kuhle uma ufuna into elula futhi elula.
Inketho 3: Amathuluzi Athuthukisiwe
Uma uphatha amaseva amaningi, ungase ukhethe i-MobaXterm noma i-Termius . Lezi zinhlelo zokusebenza zikuvumela ukuthi ulondoloze amaseshini, uphathe okhiye be-SSH ngokubonakalayo, futhi zifake ne-SFTP yokudlulisa amafayela ngokuhudula bese uwaphonsa, okukusindisa isikhathi esiningi.
Izindlela Zokuqinisekisa: Amaphasiwedi vs. Izihluthulelo ze-SSH
Nakuba ukungena ngemvume ngegama lomsebenzisi nephasiwedi kuyindlela evame kakhulu, akuyona indlela ephephile kakhulu. Ukuhlasela kwe-Brute-force kuhlala njalo futhi kungaqeda iseva yakho. Ngakho-ke, ukusebenzisa ukhiye we-SSH kunconywa kakhulu.
Ukuze udale la makhiye ku-Windows, ungasebenzisa umyalo ssh-keygenLokhu kuzokhiqiza amafayela amabili: elilodwa eliyimfihlo (id_rsa) kanye nelinye elisesidlangalaleni (id_rsa.pub). Kumelwe layisha ukhiye womphakathi kuseva, ngokuvamile ukuyigcina kufayela ~/.ssh/authorized_keysUma lokhu sekuqediwe, uzokwazi ukufinyelela iseva ngaphandle kokufaka amaphasiwedi, njengoba ukuqinisekiswa kwenziwa nge- ukuxhawulana kwe-cryptographic phakathi kwezihluthulelo zakho ezimbili.
Ukuphathwa kwamafayela kanye nemigudu evikelekile
I-SSH ayikona nje ukukhipha imiyalo. Iphinde ikuvumele ukuthi udlulise amafayela ngokuphephile usebenzisa i-SFTP (Secure FTP) noma i-SCP. Nakuba i-FTP yendabuko ingavikelekile, i-SFTP isebenzisa isiteshi se-SSH ukugcina amafayela akho evikelekile ngesikhathi sokudlulisa.
Esinye isici esinamandla ukudlulisela i-port forwarding . Lokhu kukuvumela ukuthi udale umhubhe obethelwe ukuze ufinyelele izinsizakalo zangaphakathi kunethiwekhi yangasese (njengesizindalwazi se-MySQL) ngaphandle kokudalula lawo ma-port ngqo kuyo yonke i-inthanethi, ngaleyo ndlela ugweme ubuthakathaka obubalulekile engqalasizinda yakho.
Amathiphu okuvikela iseva yakho ye-SSH
Uma usanda kusetha i-VPS yakho, ungayishiyi nezilungiselelo zasefekthri, njengoba lokhu kukushiya usengozini yokuhlaselwa. Nazi izincomo ezimbalwa ezizokusiza ulale kahle:
- Shintsha imbobo 22: Ama-bot ahlala eskena i-port 22. Ukuyishintsha ibe yi-port engahleliwe (njenge-2200) kuzonciphisa kakhulu umsindo kuma-log akho.
- Khubaza ukufinyelela kwezimpande: Kungcono ukungena ngemvume nge-akhawunti yomsebenzisi evamile bese usebenzisa
sudo. Ungakwazi ukumisaPermitRootLogin prohibit-passwordkufayela le-sshd_config, kusetshenziswa amasu e- ukuphathwa kwamalungelo ezimpande. - Sebenzisa i-Timeout: Lungiselela
ClientAliveIntervalukuze amaseshini angasebenzi avalwe ngokuzenzakalelayo futhi angahlali evuliwe iminyango engemuva ngokunganaki.
Ukwazi kahle iphrothokholi ye-Secure Shell kuyisinyathelo sokuqala kunoma ubani ofuna ukulawula ngokugcwele ingqalasizinda yakhe ekude. Kusukela ekufakeni iklayenti elula ku-Windows kuya ekulungiseleleni imigudu kanye nezinkinobho ezingalingani, leli thuluzi liqinisekisa ukuphathwa kweseva okuphumelelayo, futhi ngaphezu kwakho konke, ukufinyelela okungangeneki emehlweni okubuka.
