WireGuard peer-ka ayaa lumay dib u bilaabista ka dib: hel configuration-ka dhabta ah

Peer-ka aad ku dartay wg set wuxuu ka jawaabaa ping-ga galabta oo dhan wuuna lumayaa dib u bilaabista ka dib. Waxba ma xumaan: kernel-ku weligiis meel kale kuma kaydin peer-kaas marka laga reebo interface-ka nool, iyo wax kasta oo interface-ka dib u abuura boot-ka waxay ka dhiseen fayl aadan taaban. Hagaajintu ma aha wg set kale. Waa in la ogaado qaybtee leh interface-ka, la tafatiiro xaaladda qaybtaas, ka dibna la caddeeyo in peer-ku ka badbaado isla dhacdada wareegga nolosha ee ka saartay.

Hal mar si ula kac ah u soo saar

Ha hagaajin dhibaatada dib u bilaabista ilaa aad arko iyada oo dhacaysa. Haddii console ama marin ka baxsan bando la heli karo, qor liiska peer-yada, dib u bilow adigoo maraya adeegga leh interface-ka, oo isbarbardhig. Haddii peer-ku weli jiro, isbeddelkaagu horey ayuu u gaadhay xaaladda joogtada ah oo waxaad baaraysaa dhacdo khaldan.

Intaad taas samaynayso qor saddex xaqiiqo: magaca interface-ka, unit ama profile-ka bilaabay, iyo in kounterka gacan-qaadista peer-ka badbaaday dib loo dejiyay iyo in kale. Kounter dib loo dejiyay waxay ka dhigan tahay interface-ka waa la burburiyay oo dib ayaa loo abuuray; kounter aan isbeddelin oo peer maqan waxay ka dhigan tahay in qof ku tafatiiray configuration-ka cagahaaga hoostooda.

Yaa leh interface-ka?

WireGuard laftiisu ma laha daemon iyo fayl configuration. Wax ka sarreeya ayaa boot-ka u yeera wg, oo waxaas ayaa ah isha runta. Musharrixiinta caadiga ah waa [email protected], profile xiriirka NetworkManager, unit shabakadeed gaar u ah qaybinta, ama panel maarayn oo qora database-keeda.

Weydii nidaamka, ha weydiin dukumeentiga qaybintaada. systemctl status wg-quick@wg0 iyo nmcli connection show badanaa waxay ku xalliyaan hal amar mid kastaa. Haddii labaduba sheegtaan interface-ka, waad heshay bug-ga ka hor intaadan wax tafatirin: laba milkiile ayaa dib u qora qalabka isla markaas bilow kasta, oo kan ugu dambeeya socda ayaa guuleysta.

systemctl status wg-quick@wg0 --no-pager
grep -R "Address\|SaveConfig\|PostUp" /etc/wireguard/wg0.conf
nmcli -g NAME,TYPE connection show
wg show wg0 peers

Xaaladda socodka iyo xaaladda bilowga ma aha isla fayl

wg set wuxuu ku maamulaa qalabka nool netlink. Ma qoro /etc/wireguard/wg0.conf, profile NetworkManager ama database-ka panel. wg show guuleysta kadib wuxuu caddeeyaa in kernel-ku aqbalay peer-ka, ma aha in wax dib u soo celin doono.

Waxaa jira dabin labaad oo jihada ka soo horjeeda. Ikhtiyaarka SaveConfig ee wg-quick wuxuu xaaladda interface-ka ee hadda dib ugu qoraa faylka configuration marka interface-ka la dejiyo. Marka uu shidan yahay, tafatir faylka lagu sameeyay inta interface-ku sarreeyo waxaa dib u qori kara daminta xigta, waxaadna ku dhaaran doontaa in safkaas uu halkaas ahaa. Haddii peer-ku si joogto ah u soo noqdo, faylka akhri joojinta kadib, horeyn ma aha.

NetworkManager si kale ayuu u dhaqmaa: isaga ayaa leh profile-ka oo ku dabaqaa firfircoonida, sidaas darteed .conf gacan lagu tafatiiray oo ku xiga xiriirka NetworkManager firfircoon waa qurxin uun. Dooro hal milkiile interface-ka oo u oggolow maamulaha kale inuu isaga daayo.

Hubi in isbeddelku labada meel gaadho

Marka hore tafatir xaaladda joogtada ah, ka dib u oggolow milkiilaha inuu dabaqo, ugu dambayntiina xaqiiji xaaladda nool. Nidaamkaas macneheedu waa guuldarro tallaabo kasta wuxuu tilmaamayaa hal shay halkii saddex.

# 1. persistent state (wg-quick owner)
sudo vi /etc/wireguard/wg0.conf

# 2. apply through the owner, not by hand
sudo systemctl restart wg-quick@wg0

# 3. verify runtime matches the file
sudo wg show wg0
sudo wg showconf wg0

wg showconf wuxuu daabacaa configuration-ka nool isla qaabka uu faylku isticmaalo, taas oo labadaba si toos ah isu barbardhigi karo. U qaado soo-saaristaas sir ahaan: waxay ka kooban tahay furayaal gaar ah, sidaas darteed ha ku dhejinin ticket ama kanaal sheekaysi. Isbarbardhig furayaasha dadweynaha ee peer-yada iyo IP-yada la ogolaaday, oo hubi in peer-ka si ula kac ah loo saaray uusan soo noqon.

Caddee inuu ka badbaado dhacdada wareegga nolosha

Dib u bilow milkiilaha mar labaad, ka dib xaqiiji saddex shay oo kala duwan: peer-ku wuxuu ka muuqdaa wg show, kounterka gacan-qaadista wuu kordhaa taraafikada kadib, iyo barnaamijka ku tiirsan tunnel-ka dhab ahaan wuu ka jawaabaa. Peer lagu taxay gacan-qaadis duug ah waa dhibaato marin ama fure, ma aha dhibaato joogteyn, oo kala duwanaantaas waxay badbaadisaa tafatir configuration aan faa'iido lahayn.

Ugu dambayntii, hubi waxa dib u bilaabistu soo celisay. Dib u bilaabis soo nooleeya peer aad si ula kac ah u saartay waa isla bug-ga calaamad ka soo horjeeda, oo badanaa waxay ka dhigan tahay in nuqul duug ah oo configuration-ka ah weli meel laga rarayo. Qor milkiilaha, wadada faylka, furaha dadweynaha ee peer-ka iyo amarrada xaqiijinta agagaarka configuration-ka, si qofka xiga uusan mar labaad u helin isagoo dib u bilaabaya host wax soo saar.