Wareegga waddada caadiga ah ee WireGuard: hel waddada barta ugu dambeysa

Is-dhexgalku wuu soo baxaa, qaabeynta lammaanuhu waxay u muuqataa mid saxan, mana jiro gacan-qabasho waligeed dhammaata. Ku darista waddo caadi ah iyada oo loo marayo tunnel-ka waa tallaabada inta badan taas keenta: isla shaxda waddooyinka ayaa hadda go'aamisa halka baakadaha sirta ah ee tunnel-ku ay tahay inay tagaan, jawaabta ay soo saartana waxay dib ugu noqotaa tunnel-ka. Ma jiro wax qaadi kara baakadda dibadda oo qaadi lahaa tan gudaha, sidaas darteed xiriirku wuu istaagaa ka hor inta uusan bilaaban. Dayactirku wuu yar yahay, laakiin wuxuu leeyahay nidaam, xaqiijintuna way ka muhiimsan tahay wax ka beddelka.

Xaqiiji wareegga ka hor inta aadan beddelin waddo

Akhri ciwaanka barta ugu dambeysa ee lammaanaha hadda, ka dibna weydii lakabka waddooyinka halka baakad ku tagto ciwaankaas. Haddii jawaabtu sheegto is-dhexgalka tunnel-ka, wareegga waa la xaqiijiyay oo baaritaan dheeraad ah looma baahna. Kaydi labada natiijooyin diiwaanka isbeddelka ka hor inta aadan taaban wax, sababtoo ah isbarbardhigga dayactirka ka dib waa isla labada amarrood. Wareeg ma aha mid qarsoon marka la arko; dhibaatadu waxay tahay is-dhexgalku wuxuu u muuqdaa mid caafimaad qaba inta ay taas dhacayso.

sudo wg show wg1 endpoints
ip route get 198.51.100.20
ip rule show

Ku dar xeerarka siyaasadda diiwaankaas. Waddo caadi ah oo shaxda ugu weyn ka muuqata mid saxan weli way ka guul-darraysan kartaa xeer dooranaya shax kale oo loogu talagalay taraafikada calaamadeysan ama aan calaamadeysneyn, wareegguna wuu soo muuqan doonaa isagoo wata shax waddooyin u muuqata mid hagaagsan.

Akhri waddada barta ugu dambeysa, ma aha waddada tunnel-ka

Waddada barta ugu dambeysa waa waddada ay datagrammada sirta ah maraan ilaa ciwaanka guud ee lammaanaha, waana inay ka baxsan tahay tunnel-ka inta uu tunnel-ku jiro. Waddada tunnel-ku waa wax kasta oo lammaanaha loo oggol yahay inuu qaado. Labadan waddo waxay wadaagaan hal shax waddooyin, taasina waa sababta ay hal gelin wax walba qabata ay isugu burburin karto midba midka kale. Kala soocidda taraafikada tunnel-ka iyo gaadiidka tunnel-ka laftiisa waa dhibaatada naqshadeynta oo dhan, qalab kasta oo la taageerayna meel bay wax yar ka duwan u xalliyaa.

Baar labada qoys ee ciwaanka si gooni gooni ah haddii is-dhexgalku qaado labadaba. Ka-reexidda IPv4 ee shaqeysa waxba kama sheegto haddii barta IPv6 weli la gaari karo, qaabeynta isku dhafanna waxay u muuqan kartaa mid shaqeysa ilaa ciwaanka IPv6 ee lammaanaha la doorto.

Dib u soo celi waddada barta ugu dambeysa hal isbeddel isku duuban

Waxaa jira laba hab oo la taageeray, isku darkooduna waa sida qaabeyn shaqeysa ay u noqoto mid aan la saadaalin karin. Tan ugu horreysa waa in qalabka is-dhexgalka leh loo daayo inuu maareeyo tunnel-ka oo dhan: wg-quick waxay leedahay maarayn gaar ah oo loogu talagalay xadka lammaanaha caadiga ah kaas oo rakibaya shax gaar ah, xeerar siyaasadeed iyo calaamad socket, taas oo baakadaha dibadda ka ilaalinaysa tunnel-ka. Ka tag mashiinkaas isagoo aan taaban, halkii aad badhkiisa gacan ku dib u soo saari lahayd. Qaabeyn isku daraya caadiga gacan lagu daray iyo maareeye horey u rakibaya calaamado iyo xeerar ayaa inta badan ku guul-darraysta dib u xirka ka dib, marka maareeyuhu dib u qoro xaaladda uu tallaabada gacantu u qaatay.

Tan labaad waa naqshad gacan ah oo barta ugu dambeysa ay ku hesho waddo martigeliye cad iyada oo loo marayo iridda jireed. Ku dar waddadaas ka hor caadiga, beddel halkii aad ku dari lahayd si gelin duugoobay uusan u guulaysan karin, ka dibna xaqiiji raadinta.

sudo ip route replace 198.51.100.20/32 via 192.0.2.1 dev eth0
ip route get 198.51.100.20
sudo ip route add default dev wg1

Xaqiiji, ka dibna hayso waddo dib u noqosho

Summada waqtiga gacan-qabashada ee horay u socota waa caddaynta ugu horreysa, wayna ka xoog badan tahay is-dhexgal kaliya jira. La soco tijaabo barnaamij oo tunnel-ka mara, ka dib si ula kac ah hoos u dhig is-dhexgalka oo xaqiiji in martigeliyuhu ku noqdo xaalad la isticmaali karo halkii uu hayn lahaa waddo caadi ah oo waxba tilmaamaysa. Tallaabadaas ugu dambeysa ayaa dadku seegaan, waana tan go'aamisa haddii dib u bilaabashada mashiinka ku reebi doonto mid xiriir la'aan ah.

sudo wg show wg1 latest-handshakes
sudo wg-quick down wg1
ip route show default
ip route get 198.51.100.20

Ka hor wax kasta oo kuwan, kaydi xaaladda waddooyinka ee hadda oo hubi inuu jiro waddo gelitaan oo aan tunnel-ka ku tiirsaneyn: konsol, ciwaan maarayn bannaanka ama saaxiib goobta jooga. Mashiinka fog ee lumiya waddadiisa caadiga ah laguma soo celin karo xiriirka uu hadda lumiyay, tallaabada ugu ammaansan buugga hawlgalkuna waa tan la qaado ka hor amarka ugu horreeya.