Xa izandiso ze-MakeCode zisilela ukulayisha okanye uMphathi weeLayibrari we-Arduino (Arduino Library Manager) ema kwiipesenti ezinguziro, i-firewall yesikolo ayidli ngokuba ivala i-makecode.microbit.org okanye i-arduino.cc. Endaweni yoko, isihluzi somxholo seshishini sesikolo siwisa ngokuthe cwaka izicelo zothungelwano eziguqukayo zeenginginya ezininzi ezisebenza ngasemva: ikhowudi ekrwada ethathwa kwii-endpoint ze-API ye-GitHub, ukuphambukiswa kothungelwano lokuhambisa umxholo (CDN) lweendawo ezininzi, okanye ii-akhayivhu zebhinari ezichazwe njengokukhutshelwa kwesoftware.

Ukulungisa oku, umlawuli we-IT wesikolo sakho akufuneki abeke ukhuseleko lothungelwano emngciphekweni ngokuvula yonke i-intanethi. Badinga uluhlu oluvumelekileyo (whitelist) olujolisiweyo oluthathela ingqalelo indlela abahlanganisi abasekelwe kwisikhangeli (compilers) kunye neemeko zophuhliso lwee-microcontroller ezithatha ngayo ikhowudi ngokwenene.

Kutheni Indawo Yokusebenza Ilayisha Kodwa Iilayibrari Zisilele

Ii-firewall zezikolo zoshishino—ezifana ne-Fortinet FortiGate, Sophos, Smoothwall, okanye iigeyithi ze-MikroTik eziqhelekileyo kwizikolo ezizimeleyo nezikarhulumente zaseMzantsi Afrika—zixhomekeke kuhlelo ngokweendidi. Ezi zixhobo zihlela izithuthi zothungelwano ngokusekelwe kudumo lwesizinda (domain reputation) kunye neentlobo ze-MIME. Xa umfundi echwetheza i-URL ye-IDE ye-intanethi kwi-Google Chrome, iphothali ephambili ihlelwa phantsi kwe-Education, nevunyelweyo.

Ukuphazamiseka kwenzeka ngalo mzuzu apho umfundi afaka isandiso sesikrini se-OLED, umqhubi we-injini (motor driver), okanye inzwa ye-ultrasonic. Injini ye-Microsoft MakeCode okanye i-Arduino IDE ayizi nazo zonke iidrayiva zehardware zangaphandle zipakishwe ngaphakathi kwenkqubo esisiseko. Kunoko, zithatha iipakethe zangaphandle ngokuzenzekelayo nge-HTTPS kumaqonga abaphuhlisi. Ezo zicelo zibetha izizinda ezihlelwe phantsi kwe-Software Downloads, Personal Storage, okanye Open Source Code Repositories, apho iiprofayili ezisisiseko ze-firewall yesikolo zizithintela kakhulu ukukhusela i-malware, ukufakelwa kwesoftware engavunywanga, nokuphela kwe-bandwidth.

Uthotho Lokuxhomekeka lwe-MakeCode

I-Microsoft MakeCode (nokuba isebenzela i-BBC micro:bit, Arcade, okanye iibhodi ezenzelwe ngokwesiko) ayiyo webhusayithi enye kuphela; ngumququzeleli odibanisa ikhowudi evela kwii-host ezahlukeneyo ezizimeleyo ngelixa ehlanganisa ngaphakathi komsebenzi wewebhu (web worker) kwisikhangeli.

• Ukufunyanwa Kwezandiso: Xa umfundi ekhangela iphakethe, i-MakeCode ibuza kwi-api.github.com ukufumana oovimba boluntu abaphawulwe nge-PXT (i-Programming eXperience Toolkit). Ukuba i-API ye-GitHub ivaliwe okanye icuthwe yimithetho yokunciphisa isantya, ukukhangela akubuyisi ziphumo.
• Ukuthathwa Kwekhowudi Engumthombo: Xa sele ikhethiwe, ikhowudi ekrwada yedrayiva ye-JavaScript ne-C++ ikhutshelwa kwi-raw.githubusercontent.com. Izihluzi ezininzi zezikolo ziphatha esi sizinda njengendawo yokugcina iifayile engaqinisekiswanga (efana ne-lokha yokwabelana ngeefayile) zize ziwilise uqhagamshelo, zishiye umfundi enevili elijikelezayo okanye isilumkiso esingacacanga esithi 'Impazamo ekulayisheni iphakethe'.
• I-Simulator kunye Nabahlanganisi Bamafu: Ii-simulator ezijolise kwi-hardware ethile kunye neethagethi zehardware zilayishwa ngokuzenzekelayo zivela kwi-pxt.io kunye nee-endpoint ze-Azure ezilawulwa yi-Microsoft (*.makecode.org). Ukuba ezi zixhobo zivaliwe, indawo yokusebenza yomzobo ingavela, kodwa i-simulator ekwisikrini iya kuhlala ingenanto.

I-Arduino IDE: Ii-akhayivhu, Uphambukiso, kunye Nezixhobo ze-CLI

I-Arduino IDE (ingakumbi i-Arduino IDE 2.x, eyakhelwe kwi-frontend ye-Electron eqhuba i-arduino-cli njengenkqubo engasemva) ijongene nomqobo owahlukileyo wothungelwano: ukukhutshelwa kwee-akhayivhu kunye nothotho lokuphambukisa.

Xa ufakela inkcazo yebhodi (efana ne-ESP32, ESP8266, okanye i-SAMD core) okanye ilayibrari yoluntu, isixhobo silandela olu thotho:

1. Ithatha ifayile yesikhombisi se-JSON kwisizinda sokuqala (umzekelo, downloads.arduino.cc okanye ikhonkco elikrwada le-GitHub elichazwe kwii-URL zoMphathi weBhodi).
2. Ifayile yesikhombisi yalatha kwi-akhayivhu ecinezelweyo—ngokuqhelekileyo ifayile ye-.zip, .tar.bz2, okanye .tar.gz ebekwe kwii-GitHub Releases.
3. I-GitHub Releases ikhupha ngokukhawuleza uphambukiso lwe-HTTP 302 oluya kwi-bhakethi yogcino lwe-Amazon S3 phantsi kwe-objects.githubusercontent.com.

Ukuba uthungelwano lwesikolo luthintela izandiso zeefayile eziphunyezwayo (executable files) okanye ii-akhayivhu ezicinezelweyo ezivela kwizizinda ezingekho kuluhlu oluvunyelweyo, ukukhuphela kuyanqunyulwa ngesiquphe. Ngaphaya koko, ngenxa yokuba i-arduino-cli ijongana nezi ntengiselwano ngee-call zasemva zalapha ekhaya, ayizukubangela ungenelelo oluqhelekileyo lwesikhangeli lwe-captive-portal olusetyenziswa luthungelwano lwe-WiFi lwesikolo ukuqinisekisa abasebenzisi.

Ukuhlolwa kwe-SSL kunye Nengxaki yeSatifikethi

Izikolo ezininzi zaseMzantsi Afrika zihambisa izithuthi zothungelwano kwiiseva zommeleli (proxy servers) ezicacileyo eziqhuba i-Deep Packet Inspection (DPI) ukujonga indlela abafundi abasebenzisa ngayo iwebhu. Ukuze oku kusebenze, isatifikethi seengcambu se-Certificate Authority (CA) esilungiselelwe ngokukhethekileyo kufuneka sifakwe kumatshini ngamnye womxhasi. Nangona iilaptops ze-Windows ezilawulwayo ezabiwa ngenkqubo yolawulo lwesikolo zisenokuba nale CA ifakwe kwangaphambili, iindlela ezintathu eziqhelekileyo zokusilela ziyenzeka kwilabhu yekhowudi:

• Izixhobo ze-BYOD: Abafundi abasebenzisa iilaptops zabo baya kubona ukusilela kwe-SSL handshake kuyo yonke i-endpoint ekhuselekileyo ngenxa yokuba izixhobo zabo azisithembi isatifikethi sokuhlola sesikolo.
• Izixhobo ze-CLI Ezifakelweyo: Izixhobo zomgca womyalelo ezingasemva ezisetyenziswa zizixhobo zerobhothiki zihlala zisebenzisa oovimba bazo bezatifikethi ezipakishwe nazo endaweni yokufunda uvimba wokuthenjwa wenkqubo yokusebenza, nto leyo ekhokelela ekusetweni ngokutsha koqhagamshelo.
• I-WebSockets: Ukuhlanganisa kwexesha langempela kunye namakhonkco okukhupha iibhagi ezenziweyo e-WebUSB/WebSerial anokusilela xa edlula kwii-proxy ezindala zokugcina i-HTTP kuphela.

Uluhlu Lokukhangela Lwezinto Ezivumelekileyo ze-IT

Nika olu luhlu lubambekayo kumlawuli wothungelwano lwesikolo sakho okanye kwisebe le-IT. Cela ukuba ezi zizinda kunye neeprothokholi zifakwe kuluhlu lokutsiba (bypass list) lwesihluzi somxholo kunye nokuhlolwa okunzulu kwe-SSL kwi-VLAN okanye i-subnet ye-IP emiselwe ilabhu yerobhothiki okanye igumbi lokufundela ikhowudi:

Ukongeza ekufakeni izizinda kuluhlu oluvumelekileyo, iqela le-IT kufuneka liqinisekise ukuba ukuhluza izandiso zeefayile akulahli umsinga we-.json, .hex, .zip, .tar.gz, okanye .tar.bz2 ovela kwizizinda ezingasentla.

Iindlela Ezisebenzayo Zokusombulula Kwiimeko Ezinemiqobo

Ukuba isikolo sakho sisebenza nge-proxy esembindini engatshintshiyo—efana noqhagamshelo lothungelwano lwemfundo lwephondo apho abafundisi-ntsapho baselabhu abanako ukucela iinguqulelo ze-firewall yalapha ekhaya—kufuneka ucebe ucebelele umqobo wothungelwano:

• Kwi-MakeCode: Khuphela i-app ye-MakeCode engasebenziyo kwi-intanethi ye-micro:bit apho isifakeli sifumaneka khona, okanye layisha izandiso kwiprojekthi enye 'eyintloko' kuqhagamshelo lwangaphandle (njenge-hotspot yeselula), gcina iprojekthi njengefayile ye-.hex, uze wenze abafundi bavule loo fayile yalapha ekhaya. I-MakeCode ipakisha izandiso esele zingenisiwe ngqo ngaphakathi kwefayile yeprojekthi ye-.hex, ngoko ke nje ukuba zingenisiwe, akukho kufikelela kothungelwano kufunekayo ukusebenzisa ezo bhloko.
• Kwi-Arduino: Lungiselela ufakelo oluyintloko lwe-Arduino IDE nazo zonke iibhodi eziyimfuneko (ezifana ne-ESP32 okanye ii-core ze-AVR) kunye neelayibrari zegumbi lokufundela ezifakwe kwangaphambili kulwakhiwo lwefolda ephathekayo. Yaba lonke olu luhlu lweefayile kwiikhompyutha zaselebhu usebenzisa i-USB flash drive okanye indawo yokwabelana kothungelwano lwasekhaya, utsibe ngokupheleleyo aBaphathi beeBhodi neeLayibrari eklasini.

Kwiziko eziseka iilabhu zehardware ezizinikeleyo ezidinga ulawulo lwezixhobo oluthembekileyo, izixhobo zasekuhlaleni, kunye noqwalaselo oluhambelana ne-firewall kuwo onke amabakala aphambili okanye amabanga aphakamileyo, iqela lethu lixhasa ukuhanjiswa kweziseko zophuhliso ngokuthe ngqo nge-Sheen Robotics School Services.

Igumbi lokufundela ikhowudi lanamhlanje alinakusebenza kumgaqo-nkqubo wokuhluza iwebhu owakhelwe kuphela ukukhangela okungasebenziyo. Xa abalawuli be-IT beqonda ukuba amaqonga ekhowudi aziphatha njengemibhobho yokuhambisa isoftware endaweni yamaphepha ombhalo amileyo, isilungiso sithe ngqo, siyingcaciso, kwaye sesisigxina.