Ugunyaziwe ku-ZeroTier kodwa awukho ikheli? Izilungiselelo ezimbili ezihlukene
Ukuvuma ilungu nokulinika ikheli yizilungiselelo ezimbili. Funda iphuli, imodi yokwabiwa kanye nesimo esisetshenzisiwe siklayenti ngaphambi kokusungula i-IP.
I-ZeroTier ibonisa ilungu njenge-OK, inethiwekhi isixhunyiwe, futhi awukho ikheli lokupinga. Le nhlanganisela izwakala njengephutha futhi ngokuvamile iwukuhlelwa okuhlukanisiwe: ukuvuma ilungu kungiswishi eyodwa, ukulinika ikheli kungenye. Inethiwekhi ingamukela idivayisi futhi ingaliniki lutho, ngoba iphuli yamakheli noma imodi yokwabiwa ayikaze isethwe.
Funda izinhlangothi zombili ngaphambi kokushintsha noma iyiphi. Impendulo ibonakala ezindaweni ezimbili, futhi eyodwa kuphela yazo isesilawulini.
Ugunyaziso nokwabiwa kuyiziswishi ezihlukene
Ugunyaziso luphendula ukuthi le node ingaba yingxenye yenethiwekhi yini. Ukwabiwa kwekheli kuphendula ukuthi inethiwekhi ikunika ini uma sesiyingxenye, futhi leyo mpendulo ivela kuphuli yamakheli kanye nemodi yokwabiwa. Asikho isilungiselelo esisho esinye. Esinye yimvume, esinye ukwabiwa.
Ukuhlelwa kwesilawuli ngokuvamile kuhamba nomzila ophethwe, ibanga lamakheli kanye nemodi enquma ukuthi ukwabiwa okuzenzakalelayo kuyasetshenziswa yini. Ukukopisha i-ID yenethiwekhi kwesinye isimo kuletha ubulungu futhi akulethi lutho kulolo hlelo.
Yingakho idivayisi ingabonakala iphilile ohlwini lwamalungu kuyilapho ikholomu yekheli elabiwe ihlala ingenalutho. Isilawuli siyivumile futhi asinalutho esingalinika lona. Zombili izitatimende ziyiqiniso ngasikhathi sinye.
| Layer | What it decides | Where it is configured |
|---|---|---|
| Membership | Whether the node may join | Member authorization on the network |
| Pool | Which addresses exist to hand out | Network address range |
| Assignment mode | Whether they are handed out automatically | Network v4/v6 assignment settings |
Ukufunda isimo sangempela selungu
Buza iklayenti ukuthi yathola ini ngempela hhayi ukuthi isilawuli sasihlose ini. Uhlu olulula lubonisa amakholomu esimo nekheli, futhi ifomu le-JSON libonisa ukuhlelwa kwenethiwekhi iklayenti elikusebenzisile, kuhlanganise namakheli nemizila ephethwe.
zerotier-cli listnetworks
zerotier-cli -j listnetworks | jq '.networks[] | {nwid, status, assignedAddresses}'Qhathanisa imiphumela emibili nge-ID yenethiwekhi efanayo, hhayi ngama-adaptha abonakalayo ohlwini lwesistimu yokusebenza uqobo. Umugqa obika i-OK ngesethi yamakheli engenalutho uqinisekisa igebe lokwabiwa hhayi ukwehluleka kokuxhumana. Ukufunda umugqa ongafanele yingxenye yesibili yaleli phutha.
Isimo se-ACCESS_DENIED sikhomba emuva egunyazisweni, futhi lokho kungolunye ukulungisa. Uma umyalo ungakwazi ukufunda ithokheni yokuqinisekisa yasekhaya nhlobo, inkinga yizimvume zasekhaya hhayi ukwenqatshwa yisilawuli, futhi ukulungisa kusemshinini ohlezi kuwo.
Uma iklayenti lingakunaki okuthunyelwa yisilawuli
Iklayenti linezilungiselelo zalo ezinquma ukuthi ukuhlelwa okuphethwe kuyasetshenziswa yini. Iphrofayela evala amakheli aphethwe, imizila ephethwe noma ukuphathwa komzila ozenzakalelayo izolahla okuthunyelwa yinethiwekhi, futhi uhlu lwamalungu luzoqhubeka lubonakala lulungile ohlangothini lwesilawuli.
Lawa mafulegi athinta kuphela inodi yasekhaya. Ukuwashintsha akushintshi okutholwa amanye amalungu, futhi akululami iphuli elingakaze lichazwe.
Ngakho ukuxilonga kunamagatsha amabili: mhlawumbe isilawuli asinalo ikheli elingalinika, noma iklayenti lenqabile elalinikwe lona. Lokhu kuholela ekulungiseni okuhlukene emishinini ehlukene. Umphumela we-JSON uyahlukanisa, ngoba ikheli alikho ekuhlelweni kwenethiwekhi noma likhona futhi alikho esimweni esisetshenziswe iklayenti.
Yini okufanele ilungiswe esikhundleni sokusungula ikheli
Ukuthayipha ikheli eliqinile elingahleliwe kuyindlela yesithathu ekhangayo futhi embi kunazo zonke. Ikheli elingahleliwe lingashayisana nenye inodi, lihlale ngaphandle kwemizila esakazwa yinethiwekhi, noma liwele ebangeni eliphathwa ngendlela ehlukile yimithetho ye-firewall. Futhi lifihla iphuli elingekho kubo bonke ababheka inethiwekhi ngemuva kwalokho. Lungisa ukwabiwa esikhundleni salokho, futhi uvumele isilawuli neklayenti ukuthi zivumelane ngomphumela.
Buza umphathi ukuthi inethiwekhi kufanele inike ini, bese uqinisekisa ukuthi iphuli ihlanganisa ibanga elihlosiwe nokuthi imodi yokwabiwa ivuliwe. Joyina futhi ngemuva koshintsho esikhundleni sokulindela ukuthi iklayenti ngokwalo lizofinyelela ukuhlelwa okusha ngokushesha.
Uma ikheli selivela, hlola lokho obukudinga ngempela: i-peer, isevisi noma isub-nethi engemuva kwesango. Ukufinyelela i-LAN engemuva kwelungu kudinga ukuhamba kwemizila nokudluliswa okungaphezu kobulungu, futhi ukufinyelela kwe-inthanethi okuvamile kudinga inodi yokuphuma, ngakho ikheli elisebenzayo liwukuqala kwalolo hlolo hhayi ukuphela kwalo.