WireGuard yana aika bayanai amma bai karɓi komai ba: wane gefe?
Ƙididdigar aikawa da ke tashi alama ce ta alkibla, ba ganewar asali ba. Yanke shawara ko buƙatar ba ta taɓa barin tunnel ɗin ba ko amsar ba ta taɓa dawowa ba kafin ka canza wani abu.
Ƙididdigar aikawa da ke tashi yayin da ƙididdigar karɓa ta tsaya a sifili tana bayyana alkibla, ba ganewar asali ba. Irin wannan karatu yana bayyana lokacin da abokin haɗin gwiwa bai taɓa kammala musafaha ba, lokacin da manufa ta zaɓi abokin haɗin gwiwa mara kyau, lokacin da gefen nesa ba shi da hanyar dawowa, da lokacin da wani matattara ya jefar da amsar a hanyar gida. Kowanne daga cikinsu ana gyara shi a wani wuri daban.
Kwatancen da ke rage aikin shi ne tsakanin buƙatar da ba ta taɓa barin tunnel ɗin ba da amsar da ba ta taɓa dawowa ba. Ɗaukar hoto ɗaya a kan madaidaicin mu’amala yana yanke hukunci tsakaninsu.
Ƙididdiga suna bayyana yawa, ba alkiblar kuskure ba
Ƙididdigar WireGuard suna rubuta abin da mu’amalar ta ba abokin haɗin gwiwa da abin da ta karɓa daga gare shi. Ba su faɗi wace manufa, wane abokin haɗin gwiwa ko wane rabin musayar ya gaza ba. Hanyoyin da ke bayan fage suna ƙara rage bayanin jimillar, domin wasu baiti na iya zama saƙonnin kiyaye haɗi ko magudanar da ba su da alaƙa. Karanta su a matsayin alamar cewa mu’amalar tana aiki, sannan ka daina ɗaukar su a matsayin hujja.
Gaskiyar farko mai amfani ita ce ko musafaha na yanzu ne. Ba tare da shi ba, babu abin da aka ɓoye wa wannan abokin haɗin gwiwa kuma ƙididdigar karɓa ba ta da dalilin motsi.
Zaɓin abokin haɗin gwiwa ko hanyar amsa: bayani biyu
Bayanin farko shi ne cewa fakitin bai taɓa isa ga abokin haɗin gwiwar da aka nufa ba, domin hanyar tana nuni zuwa wani wuri ko kuma gabanin da aka yarda da shi na abokin haɗin gwiwa bai rufe manufar ba. Na biyu shi ne cewa fakitin ya iso kuma amsar ba ta iya dawowa ba, wanda matsalar turawa ce a ƙarshen nesa. Tebur yana raba su bisa abin da za ka gani a kowane mataki.
| Observation | Points to |
|---|---|
| No handshake while transmit climbs | Peer selection or endpoint |
| Handshake current, request visible on the server | Reply path or far-side route |
| Request never visible on the server | Allowed prefixes or local route |
| Both packets visible, nothing reaches the client | Return filter or translation |
Karanta tebur daga sama. Rashin musafaha yana kai ka ga maɓallai, wuraren ƙarshe da hanyar waje, domin babu wani abu da za a bincika tukuna. Musafahar yanzu tare da buƙatar da ake gani a uwar garke tana motsa matsalar zuwa alkiblar dawowa, inda teburin turawa na manufar kanta ke yanke hukunci. Buƙatar da ba ta taɓa bayyana a uwar garke matsalar zaɓi ce, kuma gabanin da aka yarda da shi a kan duka abokan haɗin gwiwa su ne abu na farko da za a kwatanta.
Biyu daga cikin waɗannan layuka huɗu ana gyara su a kan abokin ciniki, sauran biyu kuma a kan uwar garke. Sanin wane biyu kake ciki shi ne mafi yawan aikin.
Inda amsoshi suke ɓacewa
Amsa tana barin manufar, ta isa mu’amalar tunnel ta uwar garke kuma ana ɓoye ta ga abokin haɗin gwiwar da adiresoshin da aka yarda da su suka dace da adireshin ciki na abokin ciniki. Idan wannan daidaito ya gaza, ana watsar da amsar a shiru, wanda daga gefen abokin ciniki yake kama da kuskuren cibiyar sadarwa daidai. Idan an ɓoye amsar kuma matattarar abokin ciniki da kansa ya ƙi ta, alamar ta sake zama ɗaya. Dukansu biyun suna buƙatar ɗaukar hoto maimakon ƙididdiga.
Mafi ƙarfin siffa ta wannan kuskure ita ce uwar garke da ke tura fakiti domin abokin ciniki amma ba ta da hanyar dawowa zuwa rukunin ciki na abokin ciniki. Tana karɓar buƙatar, tana aika amsar zuwa ga ƙofarta ta asali, kuma tunnel ɗin ba ya ganin ta. Babbar ƙa’idar fassarar da aka ƙara a uwar garke tana ɓoye wannan kuskure maimakon gyara hanyar.
Gwada manufa ɗaya daga farko zuwa ƙarshe
Zaɓi manufa ɗaya a cikin rukunin abokin haɗin gwiwa, kuma gwada ta yayin da musafaha ke bayyane cewa na yanzu ne. Umarnin da ke ƙasa suna karanta yanayin abokin haɗin gwiwa, hanyar da aka zaɓa da kuma duka ɓangarori na musayar. Gudanar da ɗaukar hoton a kan mu’amalar da fakiti ɓoyayyun ke amfani da ita a zahiri.
wg show wg0 latest-handshakes
wg show wg0 transfer
ip route get 10.60.9.5
sudo tcpdump -ni wg0 host 10.60.9.5Ɗaukar hoton da ke nuna buƙatar a kan mu’amalar tunnel ba tare da wani abu ya dawo ba amsa ce daga gefen uwar garke, kuma teburin turawa na manufar shi ne wuri na gaba da za a duba. Idan babu abin da ya bayyana kwata-kwata, fakitin ya bi wata hanya, don haka hanyar gida ita ce wanda ake zargi. Musayar da ake gani a duka ɗaukar hotuna ba tare da ci gaba a aikace-aikace ba tana motsa tambayar zuwa girman fakiti ko zuwa matattara da ƙididdigar mu’amala ba ta taɓa nunawa. Riƙe manufa ɗaya da abokin ciniki ɗaya a cikin gwajin, domin mai canzawa na biyu yana mai da hujja zuwa ra’ayi kuma.
Idan sunaye suka gaza yayin da adireshin da aka yarda da shi ke aiki, amsar tana cikin DNS ba cikin tunnel ɗin ba. Idan manyan jigilar kaya ne kawai ke tsayawa, bincika girman fakiti daban.