Madaukin hanyar farko ta WireGuard: nemo hanyar ƙarshen wuri

Fuskantarwa tana tashi, saitin abokin tarayya yana kama da daidai, kuma babu musafaha da ke kammalawa. Ƙara hanyar farko ta cikin ramin shine matakin da yakan haifar da hakan: teburin hanya ɗaya yanzu yana yanke shawarar inda fakitin sirri na ramin za su je, kuma amsar da yake bayarwa tana komawa cikin ramin. Babu abin da zai iya ɗaukar fakitin waje wanda zai ɗauki na ciki, don haka haɗin yana tsayawa kafin ya fara. Gyaran ƙarami ne, amma yana da tsari, kuma tabbatarwa ta fi gyaran muhimmanci.

Tabbatar da madauki kafin ka canza hanya

Karanta adireshin ƙarshen wuri na yanzu na abokin tarayya sannan ka tambayi tarin hanyoyi inda fakitin zuwa wannan adireshin zai je. Idan amsar ta ambaci fuskantarwar ramin, an tabbatar da madauki kuma ba a buƙatar ƙarin bincike. Ajiye duka fitarwa biyu a rikodin canji kafin ka taɓa wani abu, domin kwatancen bayan gyaran shine umarni biyu ɗaya. Madauki ba shi da hankali da zarar an gan shi; wahalar ita ce fuskantarwar tana kama da lafiya yayin da hakan ke faruwa.

sudo wg show wg1 endpoints
ip route get 198.51.100.20
ip rule show

Haɗa ka’idojin manufa a cikin wannan rikodin. Hanyar farko da ta yi kama da daidai a babban teburi na iya yin rashin nasara ga ƙa’ida da ke zaɓar wani teburi don zirga-zirgar da aka yi wa alama ko ba a yi wa alama ba, kuma madaukin zai sake bayyana tare da teburin hanya da ya yi kama da lafiya.

Karanta hanyar ƙarshen wuri, ba hanyar ramin ba

Hanyar ƙarshen wuri ita ce hanyar da fakitin sirri ke bi zuwa adireshin jama’a na abokin tarayya, kuma dole ta kasance a wajen ramin muddin ramin yana nan. Hanyar ramin ita ce duk abin da aka ba abokin tarayya izinin ɗauka. Waɗannan hanyoyi biyu suna raba teburin hanya ɗaya, kuma wannan shine ainihin dalilin da yasa shigarwa ɗaya mai kama komai zata iya rushe su cikin juna. Raba zirga-zirgar ramin da jigilar ramin kanta shine dukan matsalar ƙira, kuma kowace kayan aiki da aka tallafa tana warware ta a wani wuri daban.

Duba duka iyalan adireshi daban idan fuskantarwar tana ɗaukar duka biyu. Keɓancewar IPv4 da ke aiki ba ta faɗi komai game da ko har yanzu ana iya isa ƙarshen wurin IPv6, kuma saitin gauraye na iya kama da aiki har sai an zaɓi adireshin IPv6 na abokin tarayya.

Mayar da hanyar ƙarshen wuri da canji ɗaya mai daidaituwa

Akwai hanyoyi biyu da aka tallafa, kuma haɗa su shine yadda saitin da ke aiki ya zama marar tabbas. Na farko shine barin kayan aikin da ya mallaki fuskantarwar ya kula da dukan ramin: wg-quick yana da kulawa ta musamman ga kewayon abokin tarayya na farko wanda ke girka teburi daban, ka’idojin manufa da alamar soket, wanda ke riƙe fakitin waje a wajen ramin. Bar wannan injin ɗin gaba ɗaya maimakon sake yin rabinsa da hannu. Saitin da ya haɗa hanyar farko da aka ƙara da hannu da mai sarrafawa wanda ya riga ya girka alamu da ka’idoji yakan gaza bayan sake haɗawa, lokacin da mai sarrafawa ya sake rubuta yanayin da matakin hannu ya ɗauka.

Na biyu shine ƙira ta hannu wacce ƙarshen wuri ke samun hanyar mai masauki bayyananna ta hanyar ƙofar jiki. Ƙara wannan hanya kafin ta farko, maye gurbin maimakon ƙarawa domin tsohuwar shigarwa ba zata iya yin nasara ba, kuma tabbatar da binciken bayan haka.

sudo ip route replace 198.51.100.20/32 via 192.0.2.1 dev eth0
ip route get 198.51.100.20
sudo ip route add default dev wg1

Tabbatar, sannan ka riƙe hanyar dawowa

Tambarin lokacin musafaha da ke ci gaba shine hujja ta farko, kuma ya fi ƙarfin fuskantarwa da kawai take wanzuwa. Bi shi da gwajin aikace-aikace ta cikin ramin, sannan ka saukar da fuskantarwa da gangan kuma tabbatar da cewa mai masaukin ya koma yanayin da za a iya amfani da shi maimakon riƙe hanyar farko da ke nuna babu komai. Wannan mataki na ƙarshe shine wanda mutane ke tsallakawa, kuma shine wanda ke yanke shawara ko sake kunnawa zai bar injin ba tare da haɗi ba.

sudo wg show wg1 latest-handshakes
sudo wg-quick down wg1
ip route show default
ip route get 198.51.100.20

Kafin kowane ɗayan waɗannan, ajiye yanayin hanyoyin na yanzu kuma tabbatar akwai hanyar shiga wadda ba ta dogara da ramin ba: na’urar konsoli, adireshin gudanarwa na waje ko abokin aiki a wurin. Injin nesa da ya rasa hanyarsa ta farko ba za a iya dawo da shi ta hanyar haɗin da ya riga ya rasa ba, kuma mafi amintaccen mataki na littafin aiki shine wanda aka ɗauka kafin umarni na farko.