Peer VPN ah wuxuu ping ku sameeyaa interface-yo kale sababtoo ah waa gudaha

Macmiil WireGuard ah wuu isku xidhaa oo ping ku sameeyaa cinwaan ku yaal interface gabi ahaan ka duwan, jawaabtuna way timaaddaa. Diiwaannada waxay muujinayaan codsiga oo kaliya tunnel-ka. Waxba ma xuma, dejinta gudbinta ee si taxadar leh loo damiyay wax xiriir ah lama laha. Kani waa isbarbardhig laba waddo oo shaxanka u eg oo kernel-ka gabi ahaan u kala duwan.

Hal waddo ayaa baakadaha u gudbisaa qof kale; tan kalena waxay u gaarsiiyaa martigeliyaha laftiisa.

Baakad loo diray martigeliyaha ayaa ku hadha martigeliyaha

Macmiilka fog wuxuu IP baakad u diraa cinwaan uu martigeliyuhu leeyahay. Marin-u-socodku hal su’aal ayuu ka weyddiinayaa baakaddaas: ma gudaha baa bartilmaameedkan? Cinwaan kasta oo martigeliyuhu haysto wuxuu ka muuqdaa shaxda marinka gudaha, iyo shaxdaas ayaa la tixgeliyaa ka hor tan weyn, sidaas darteed baakaddu waxay gashaa isku-duubka martigeliyaha laftiisa halkii ay ka bixi lahayd interface kale. Jawaabtu gudaha ayaa lagu abuuraa, waxayna ku soo noqotaa tunnel-ka sababtoo ah halkaas ayaa su’aashu ka timid.

Taasi waa farsamada oo dhan. Ma jiro gudbin dhacda, ma jiro isbeddel xaalad interface ah oo ku lug leh, cinwaanka la hadlayana uma baahna in laga gaari karo meel kale.

Sababta ip_forward uusan khusayn

Gudbintu waxay maamushaa baakadaha ay tahay inay ka baxaan interface kale oo ka duwan tii ay ku soo galeen. Ping-ka martigeliyaha laftiisa waligiis ma qaato waddadaas: baakadda gudaha ayaa lagu isticmaalaa jawaabtana gudaha ayaa lagu abuuraa. Sidaas darteed dejinta net.ipv4.ip_forward=0 halkan waxba ma beddelo, qaybna ku jirta silsiladda gudbintu waligeed ma arko taraafikadaas. Xakamaynta saxda ah waxay ku taal waddada gelitaanka, oo lagu xaddiday interface-ka soo galaya ama isha.

Taas ayaa sabab u ah in daminta gudbinta iyo u-qadashada in martigeliyuhu go’doonsan yahay ay abuurto dareen amni oo been ah.

Akhri shaxda gudaha ee go’aanka gaadhay

ip rule show badanaa waxay soo sheegtaa qayb leh mudnaan eber oo dhammaan raadinta u dira shaxda gudaha marka hore, ip route show table local waxay taxdaa cinwaannada martigeliyaha laftiisa oo leh baaxad gudaha. Shaxdaas waxay ku daraysaa cinwaanno ku yaal interface-yo maamul ahaan damiyay laakiin weli habaysan. Cinwaannada IPv4 ee si joogto ah loo qoondeeyay badanaa way ka badbaadaan go’itaanka xiriirka, taasina waa sababta ping ku socota buundo damisay uu weli guulaysan karo oo uu la yaabay hawlwadeenka.

IPv6 way ka duwan tahay isla qodobkan. Cinwaannadeeda badanaa waa la laaboqaatayaa marka xiriirku dhaco, haddii aan keep_addr_on_down la dejin. Isbarbardhig qoysaska halkii aad ka qadan lahayd in hal qayb ay labadaba daboolto.

Waxa uu peer dhab ahaan gaaro

Jawaab ka timid cinwaanka router-ka laftiisa oo ku yaal qayb kama sheegto mashiinnada ka dambeeya qaybtaas. Peer-ku ma gaari karo martigeliye ka dambeeya interface-ka kale waddadan; wuxuu kaliya gaaro cinwaannada uu router-ka laftiisu leeyahay. In adeeg lagu tijaabiyo martigeliye LAN gaar ah, halkii ping lagu sameyn lahaa cinwaanka router-ka, ayaa go’aamiya haddii gudbinta haba yaraatee la ogolyahay.

In peer lagu xaddido adeegyada ku xidhan cinwaanka tunnel-ku waa su’aal siyaasad gelitaan. Oggolow adeegga la rabo interface-ka tunnel-ka oo xaddid ishaha isticmaali kara, sababtoo ah baakaddu runtii halkaas bay timaaddaa.

Sidoo kale hubi cinwaannada aad doonayay inaad ka fadhiisiso. In cinwaan laga saaro interface wuu ka lagfiyo badan yahay in xeerar firewall lagu dul raro cinwaan duug ah.