Da'da gacan-qabsiga WireGuard maaha waqtiga dhammaadka fadhi
Tima-jibaarayaasha cusboonaysiinta furaha waxay maareeyaan furaha, ma aha gelitaanka isticmaalaha. Akhrinta latest-handshakes waxay sheegtaa xaaladda borotokoolka hal peer, ma aha haddii oggolaanshihiisu dhacay.
Peer joojiya marinta taraafikada kama lumo furahiisa sidaas darteed, gacan-qabsiga cusubna ma caddeeyo in qof ku cusboonaysiiyay oggolaanshaha isticmaalkiisa. Tima-jibaarayaasha WireGuard waxay furaha ku hayaan cusub iyo baakadaha socod; ma tusa isticmaale ka baxa ka dib tiro daqiiqado ah. Saddex su'aal ayaa halkan lagu qaldamaa, mid walbana caddayn u gaar ah ayuu leeyahay. Farqigaas ayaa go'aamiya qalabka la isticmaalo.
Saddex su'aal, hal soo-saaris amar
Hawl-wadeennadu waxay weydiiyaan haddii peer la gaari karo, haddii uu firfircoonaa, iyo haddii weli loo oggol yahay. Midda koowaad waa xaaladda borotokoolka, tan labaad waa tirsayaasha taraafikada, tan saddexaadna waa oggolaansho. Kaliya labada hore ayaa laga akhrin karaa interface-ka WireGuard, oo inta badan loo isticmaalo in lagu jawaabo saddexda.
| Question | Evidence it needs | What does not answer it |
|---|---|---|
| Is the peer reachable now? | A recent handshake and a working return path | An interface that exists |
| Has it been active? | Transfer counters moving over time | A handshake timestamp alone |
| Is access still granted? | The configuration or controller that authorizes it | Any protocol timer |
U akhri safafka saddex baaritaan oo kala duwan. Labada hore way jaban yihiin oo waxaa lagu jawaabi karaa tirsayaasha interface-ka laftiisa. Tan saddexaad waxay u baahan tahay habaynta bixisa gelitaanka, oo ku nool fayl kale ama nidaam kale. Doorashada safka khaldan waa in tima-jibaare borotokool laga codsado shaqada siyaasad.
Waxa tima-jibaarayaashu dhab ahaan maareeyaan
Borotokoolku waxay qeexdaa joogtooyin loogu talagalay dib-u-dayashada gacan-qabsiga, wareegga furaha gaadiidka iyo diidmada baakadaha lagu ilaaliyo furaha duugga ah. Waxay ka jawaabaan taraafikada iyo xaaladda, ma aha kalandar ama siyaasad sheegta in qof ku xirmi karo ilaa 17:00. Taasi waa sababta peer aan firfircoonayn uu saacado u muuqan karo mid aan shaqaynayn oo weli oggolaansho haysto.
PersistentKeepalive ayaa badanaa loo qaataa waqtiga dhammaadka maqan. Waxay diraa baakado madhan oo la caddeeyay si ay u hayaan khariidadda NAT nool, oo eber dhigistu waxay joojisaa baakadahaas iyada oo aan waxba la burin.
Akhri xaaladda socodka peer kasta, adigoo isticmaalaya furaha dadweynaha halkii faallo:
wg show wg0 latest-handshakes
wg show wg0 transferGacan-qabis dhawaan dhacay waxay sheegtaa in hal gacan-qabis dhammaaday. Ma sheegto in adeegga gaarka ah ee ka dambeeya tunnel-ka la gaari karo, oo shaabad waqti duug ah waxay noqon kartaa tan peer aamusan.
Sababta peer aan firfircoonayn uusan u ahayn peer baxay
WireGuard ma laha shay fadhi leh bilow iyo dhammaad. Peer waa fure dadweyne leh cinwaanno la oggolaaday, oo gacan-qabsiga ilaaliya taraafikadiisa waa la beddelaa marka loo baahdo iyada oo aan jirin gelitaan isticmaalaha arki karo. U qaadashada maqnaanshaha taraafiko dhaw sida baxitaan waxay rogtaa qaabka.
Haddii cabashada dhabta ah ay tahay in xiriirku guuldareysto ka dib markii uu fadhiistay, sababtu badanaa meel kale ayay ku jirtaa: khariidad NAT dhacday, qalab seexday, ama derbi dab ah oo xaalad ka tagay. Tijaabi adigoo taraafiko ka diraaya dhinaca kale oo bilaabaya qulqul cusub, oo isbarbar dhig waxa isbeddelaya.
Dhig waqtiga dhammaadka meesha oggolaanshuhu ku nool yahay
Haddii gelitaanku waa inuu ku dhammaado waqti go'an, waqtiga dhammaadku waxaa leh waxa bixiya gelitaanka. Maamule soo saara habaynta peer wuxuu codsan karaa ansixin la cusboonaysiiyay ka hor inta uusan bixin mid cusub, taasina waa sifo maamulaha ee ma aha halbeeg qarsoon oo interface-ka ku yaal.
Peer-yada gacanta lagu maareeyo, ka-qadista waa in ay gaadhaa laba meelood: interface-ka shaqaynaya iyo habaynta la kaydiyay. Ka-qadista peer-ka oo kaliya inta shaqada socoto waxaa buriya dib-u-bilaabid ama wareeg isku-dhafan, kaas oo soo celiya aqoonsiga aad u maleeysay inuu dhacay:
sudo wg set wg0 peer <public-key> remove
sudo wg-quick save wg0Kadib tijaabi xadka ee ma aha calaamadda. Xaqiiji in peer-ka la diido waqtiga dhammaadka ka dib, in waddada cusboonaysiintu shaqeyso, iyo in xaaladdu ka badbaaddo dib-u-load maamulaha. Da'da gacan-qabsigu waa calaamad hawleed faa'iido leh, oo ma aha diiwaan gelitaan.