Shekarun musafaha na WireGuard ba lokacin ƙarewar zama ba ne
Masu ƙididdige lokacin sabunta maɓalli suna sarrafa maɓallai, ba damar mai amfani ba. Karanta latest-handshakes yana faɗin yanayin yarjejeniya na peer ɗaya, ba ko izininsa ya ƙare ba.
Peer da ya daina wucewa da zirga-zirga ba ya rasa maɓallinsa saboda haka, kuma sabon musafaha ba ya tabbatar da cewa wani ya sabunta izinin amfani da shi. Masu ƙididdige lokaci na WireGuard suna kiyaye maɓallai sabo da fakiti suna gudana; ba sa yin kwatancin mai amfani da ke fita bayan takamaiman adadin mintuna. Tambayoyi uku suna rikicewa a nan, kowanne yana da shaida daban. Wannan bambanci ne ke ƙayyade wace kayan aiki za a yi amfani da ita.
Tambayoyi uku, fitowar umarni ɗaya
Masu gudanarwa suna tambaya ko ana iya isa ga peer, ko ya taɓa aiki, kuma ko har yanzu an yarda da shi. Na farko yanayin yarjejeniya ne, na biyu ƙididdigar zirga-zirga kuma na uku izini. Na farko biyu ne kawai za a iya karantawa daga interface ɗin WireGuard, kuma ana amfani da su akai-akai don amsa duka uku.
| Question | Evidence it needs | What does not answer it |
|---|---|---|
| Is the peer reachable now? | A recent handshake and a working return path | An interface that exists |
| Has it been active? | Transfer counters moving over time | A handshake timestamp alone |
| Is access still granted? | The configuration or controller that authorizes it | Any protocol timer |
Karanta layukan a matsayin bincike uku daban-daban. Na farko biyu ba su da tsada kuma ana iya amsa su da ƙididdigar interface ɗin kanta. Na uku yana buƙatar saitin da ke ba da dama, kuma yana zaune a wani fayil ko wani tsari. Zaɓin layin da ba daidai ba shine neman mai ƙididdige lokacin yarjejeniya ya yi aikin manufa.
Abin da masu ƙididdige lokaci suke sarrafawa a zahiri
Yarjejeniyar tana bayyana ƙayyadaddun abubuwa don sake gwada musafaha, juya maɓallan jigila da ƙin fakiti da aka kiyaye da tsohon maɓalli. Suna amsa zirga-zirga da yanayi, ba kalanda ba ko manufar da ke cewa mutum na iya haɗawa har 17:00. Shi ya sa peer marar aiki zai iya zama kamar ba ya aiki na sa'o'i kuma har yanzu an ba shi izini.
PersistentKeepalive ana yawan rikicewa da lokacin ƙarewar da ya ɓace. Yana aika fakitin fanko da aka tabbatar don kiyaye taswirar NAT a raye, kuma saita shi zuwa sifili yana dakatar da waɗannan fakiti ba tare da soke komai ba.
Karanta yanayin aiki ga kowane peer, ta amfani da maɓallin jama'a maimakon sharhi:
wg show wg0 latest-handshakes
wg show wg0 transferKwanan nan musafaha yana cewa musafaha ɗaya ya kammala. Ba ya cewa sabis ɗin sirri da ke bayan rami yana iya isa, kuma tsohon tambarin lokaci na iya kasancewa na peer da ya yi shiru kawai.
Me ya sa peer marar aiki ba peer da ya fita ba
WireGuard ba shi da abin zama mai farko da ƙarshe. Peer maɓallin jama'a ne da adireshin da aka yarda, kuma musafahar da ke kare zirga-zirgarsa ana maye gurbinsa yayin da ake buƙata ba tare da wani shiga da mai amfani zai gani ba. Ɗaukar rashin sabon zirga-zirga a matsayin fita yana juya tsarin.
Idan ainihin ƙarar ita ce haɗin yana kasawa bayan ya zauna babu aiki, sanadin yawanci yana wani wuri: taswirar NAT da ta ƙare, na'urar da ta yi barci, ko katangar wuta da ta bar yanayi. Gwada ta hanyar aika zirga-zirga daga wancan gefen da fara sabon kwarara, sannan kwatanta abin da ke canzawa.
Sanya wa'adin a inda izinin yake
Idan dole ne dama ta ƙare a takamaiman lokaci, wa'adin na abin da ke ba da damar ne. Mai sarrafawa da ke fitar da saitin peer na iya buƙatar sabon amincewa kafin ya ba da sabo, kuma wannan sifa ce ta mai sarrafawa ba sigar da ke ɓoye a interface ba.
Ga peer ɗin da ake sarrafa da hannu, cirewar dole ta isa wurare biyu: interface ɗin da ke aiki da saitin da aka adana. Cire peer ɗin a lokacin aiki kawai sake farawa ko madauki na daidaitawa yana soke shi, wanda ke mayar da asalin da kuke tsammanin ya ƙare:
sudo wg set wg0 peer <public-key> remove
sudo wg-quick save wg0Sannan gwada iyaka ba lakabi ba. Tabbatar an ƙi peer bayan wa'adin, hanyar sabuntawa tana aiki, kuma yanayin yana tsira da sake lodin mai gudanarwa. Shekarun musafaha siga ce mai amfani ta aiki, kuma ba rikodin dama ba ne.