Kungani i-peer ye-WireGuard esusiwe ibuyela emuva ngemva kokuqalisa kabusha

Ubunikazi bunyamalala ku-interface esebenzayo futhi ushintsho lubonakala luphelile. Ngemva kokuba isevisi iqaliswe kabusha, ibuyile, okufundwa njengokuthi i-WireGuard iyawushaya indiva umyalo. Okwenzeke ngempela kulula: ukulungiselelwa kwesikhathi sokuqalisa kusenalo lelo peer.

Izimo ezimbili zigcina lolo hlu. Ukuhoxiswa kuba ngokoqobo kuphela lapho zombili zilahlekelwa yilo.

Yini i-wg set eyishintshayo ngempela

Umyalo wg set wg0 peer <public-key> remove uhlela i-interface esebenzayo ngaphakathi kwe-kernel. Awubhali lutho kudiski. Ifayela lokulungiselela, iphrofayela ye-NetworkManager noma isimo esigciniwe somzila akuthintwa. Lowo umklamo, hhayi iphutha.

Lokho kwahlukanisa kwenziwe ngamabomu, ngoba ithuluzi alinalo nohlamvu lokuthi ubani umnikazi we-interface. Umyalo wesikhathi sokusebenza kufanele uphephe maqondana ne-interface elawulwa ngenye into. Awukwazi ukuqagela ukuthi ikhophi eqinile ihlala kuphi. Umphumela kulula ukuwusho: ukususa ngesikhathi sokusebenza kungokwesikhashana ngokwakheka kwayo.

Ngakho-ke i-peer iyabuya ekuqalisweni okulandelayo, futhi ibuya nezimiso zayo zokuqala ezivunyelwe. Konke okudluliswa ngayo kuyakhiwa kabusha futhi. Ubunikazi okucatshangwa ukuthi buhoxisiwe bungafinyelela izindawo yabo zangaphambili ngemva kokulayishwa kabusha. Akukho lutho kokuphuma kwesikhathi sokusebenza okwakuxwayisile muntu.

Thola obhalayo ngaphambi kokuhlela ifayela

I-interface inomnikazi. Kungaba yi-wg-quick efunda ifayela, i-NetworkManager esebenzisa iphrofayela, ukulungiselelwa kwe-interface yomzila ngokwayo, noma indawo yokungena ye-container eyakha kabusha i-interface ekuqaliseni. Ukuhlela ifayela umnikazi angakaze alifunde akukhiqizi noma yiluphi ushintsho oluqinile.

Qala kwi-interface esebenzayo futhi ukhombe okhiye abasesidlangalaleni, ngoba amagama namakheli yizikhombi ezibuthakathaka kunele key ngokwayo. Bese uqhathanisa lolo hlu nokulungiselelwa okugciniwe umnikazi akufundayo ngempela.

wg show wg0 peers
wg show wg0 allowed-ips
systemctl status wg-quick@wg0 --no-pager
ls -l /etc/wireguard

I-interface ephilayo ohlu lwayo lwama-peer nokuqukethwe kwefayela kungavumelani kuwukuxilongwa konke. Ukulungiselelwa okugciniwe kuyanqoba ekuqaliseni, futhi isimo sesikhathi sokusebenza siyahlulwa. Qhathanisa kokubili ngaphambi kokushintsha noma yikuphi.

Isicupho se-SaveConfig

I-wg-quick yengeza umgoqo obamba abantu abahlela amafayela ngesandla. Uma i-SaveConfig ivuliwe, ukuziphatha kwayo okubhaliwe ekuvaleni kubhala isimo samanje sesikhathi sokusebenza phezu kwefayela lokulungiselela.

Lokho kuphendula indlela evamile yokuqina. Ususa i-peer efayeleni, bese isevisi ima. Isimo esisebenzayo sibhalwa phezu kokuhlela kwakho futhi sibuyisela i-peer osanda kuyisusa.

Ngakho-ke ukulandelana kubalulekile: hlela ifayela ngesikhathi i-interface iphansi, noma vala i-SaveConfig ngaphambi kokuhlela, bese ukhuphula i-interface futhi uqinisekise ukuthi kwalayishwa ini. Ukuhlela ngesandla ngesikhathi i-interface iphezulu kuwumjaho nokubhalwa kokuhlwa.

Shintsha zombili izimo, bese ulayisha kabusha

Ngesikhathi sokusebenza, susa i-peer ngokhiye. Ekulungiseleleni okugciniwe, susa ibhlokhi efanayo ngokusebenza okusekelwa umnikazi, esikhundleni sokuhlela ngokuzungeza.

Bese ubuyekeza ukuthi i-peer yayithwele ini. Inethiwekhi edluliswayo eyayiyeka ubunikazi obuhoxisiwe kufanele yabelwe kabusha ngamabomu noma isuswe, hhayi ukuthi ifakwe njengefa buthule yinoma yiliphi i-peer ezohlelwa ngokulandelayo.

Gcina indlela yokubuyisela ivulekile uma i-gateway iphethe nokufinyelela kwakho kokuphatha. Ukuqalisa kabusha okususa i-peer okungeyona kuwukuphazamiseka ozibangele wena. Kuyafana nokuqalisa kabusha okususa umzila okungeyona.

Kubukeka kanjani ukuhlolwa okuphumelelayo

Layisha kabusha noma qalisa kabusha isevisi, bese ufunda uhlu lwama-peer futhi. Ukhiye omdala kufanele ungabikho, futhi ama-peer obewufuna ukuwagcina kufanele abe khona futhi asebenze.

wg show wg0 peers
wg show wg0 allowed-ips
sudo wg-quick down wg0 && sudo wg-quick up wg0
wg show wg0 peers

Lapho isimo sikuvumela, qinisekisa ukuthi ubunikazi obudala abusafinyeleli izinsiza zabo zangaphambili. Uhlu lwe-interface oluhlelekile ngaphambi kokuqalisa kabusha luyingxenye yokuhlolwa. Enye ingxenye ukuthi ubunikazi busengenzani ngemva kwalokho.

Uma umphathi othile eqhubeka nokubuyisela i-peer, yeka ukuphinda ukususwa kwezinga eliphansi. Lungisa uhlu olufundwa yilowo obhalayo, ngoba kuze kube yileso sikhathi ukuqalisa kabusha ngakunye kuyisimemo esinye sokuthi ubunikazi buvele futhi.