Okhiye be-WireGuard ku-ESP32: okwabo ngayinye noma ukhiye owodwa ogxunyekwe?

Umdwebo ufaka ukhiye oyimfihlo we-WireGuard kuhlu lwezinhlamvu, futhi umhubhe uyasebenza, yingakho lo mbuzo uphindaphinda. Isinqumo okufanele usithathe ngempela akusona esokuthi «ingabe lokhu kuphephile», kodwa esokuthi «yisiphi sezimo ezintathu esisebenza kulokhu kusetshenziswa». Zizo lezi: ubani angabamba ngokomzimba idivayisi, yini ekhishwa ukufunda i-flash engxenyeni yakho, nokuthi isixuku sabelana ngokhiye oyedwa noma ngayinye iphethe eyayo. Phendula lezo bese umklamo ulandela, ngoba isimo ngasinye sishintsha izindleko zokhiye ophumile, hhayi iqiniso lokuthi ungaphuma.

Ukhiye uvumela ini

I-WireGuard iqinisekisa abalingani ngokhiye womphakathi. Iseva ixhumanisa ukhiye womphakathi womlingani ngamunye nekheli kanye AllowedIPs nohlu, ngakho ukhiye oyimfihlo yiwo ovumela iklayenti ukuthi lithume ithrafikhi kusuka kulelo kheli.

Leyo ntulo efanayo inquma ukuthi yiziphi izindawo idivayisi engafinyelela kuzo, ngakho ukhiye ophumile uveza inethiwekhi engemuva komhubhe kanye nekheli lomhubhe.

Isimo sokuqala: ubani angabamba idivayisi

Uma iyunithi ihlezi kukhabhinedi okhiyiwe futhi kungekho muntu ngaphandle kweqembu lakho oyithintayo, ukuchayeka kuyindaba yokusatshalaliswa kwe-firmware ikakhulukazi. Uma ithunyelwa kumakhasimende, ihlezi emotweni noma ibuya ngaphansi kwesiqinisekiso, ukubamba ngokomzimba kuyisitifiketi futhi ukufihleka kwefayela le-binary kungokwesibili. Umuntu ophethe idivayisi akadingi ukufunda ukhiye, ngoba i-firmware esebenzayo izomvulela umhubhe. Yingakho impendulo ohlangothini lweseva kufanele ihlanganise ukuhoxiswa kanye nokuphila okulinganiselwe, hhayi isithombe esivikelwe kuphela.

Nquma lesi simo ngaphambi kwezinye ezimbili, ngoba sibeka isabelomali sazo zombili.

Isimo sesibili: yini ekhishwa ukufunda i-flash

Noma ubani ongafunda isithombe se-flash ubuyisa ukhiye ogcinwe njengelithaleli, kungaba ngokuxhumana kokulungisa amaphutha, ifayela lokubuyekeza, ikhophi yokulondoloza noma iyunithi ebuyisiwe. Ukubethelwa kwe-flash kwenyusa izindleko zokukhipha okuqondile, futhi imibhalo ye-ESP-IDF ichaza ukuthi isici sikhawulela ini engxenyeni nokucushwa okuthile. Akwenzi ukhiye ungakhipheki ngaphansi kwayo yonke imodeli yokuhlasela, futhi akwenzi lutho esimweni lapho idivayisi isesandleni. Kuyiphatha njengengqimba eyodwa eshintsha izindleko, hhayi njengempendulo.

Funda imibhalo yenkundla yechiphu nokucushwa kwakho okuqondile ngaphambi kokusho isici ekubuyekezweni komklamo.

Isimo sesithathu: ukusetshenziswa kabusha kulo lonke isixuku

Ukhiye oyedwa wochungechunge lokukhiqiza kusho ukuthi iyunithi ngayinye yabelana ngubuwena owodwa. Iseva ayikwazi ukuhlukanisa kumarekhodi, ayikwazi ukuhoxisa eyodwa ngaphandle kokuhoxisa zonke, futhi ayikwazi ukuhlukanisa ikhophi kweyokuqala. Okhiye bedivayisi ngayinye baxazulula zontathu, ngezindleko zesinyathelo sokubhalisa kanye nokuxhumanisa inombolo yochungechunge nokhiye womphakathi. Lokho kuxhumanisa kuyimpahla eguqula ukuhoxiswa kube ushintsho lomugqa owodwa esikhundleni sokuphinda kugxunyekwe lonke isixuku.

Uma isixuku siyiyunithi ezinhlanu ebhentshini, ukwabelana ngokhiye kungaba ukushintshana okunengqondo. Uma kungamakhulu amahlanu ensimini, akukona ukushintshana nhlobo.

Iphethini yokubhalisa eyenza okhiye bedivayisi ngayinye babe nokusebenza

Khiqiza umbhangqwana wokhiye kudivayisi ekuqaleni kokuqala, gcina uhhafu oyimfihlo esigcinweni esivikelwe esingapheli, futhi thumela kuphela ukhiye womphakathi kunsevisi yokubhalisa enikeza ikheli futhi ibhala ingxenye yomlingani. Qinisekisa impendulo yokubhalisa, ngaphandle kwalokho umhlaseli kunethiwekhi yasendaweni angabhalisa ukhiye wakhe kwi-akhawunti yakho. Ungalokothi uphrinte ukhiye oyimfihlo kukhonsoli yochungechunge ngesikhathi sokuhlinzeka. Bhala inombolo yochungechunge yedivayisi eduze kokhiye womphakathi, ukuze iyunithi elahlekile ihambisane ncamashi nengxenye eyodwa yomlingani.

Leyo yisevisi encane, futhi yiyo umehluko phakathi kwesixuku ongasihlola nale esingagxunyekwa kabusha kuphela.

Isikhathi, iziphetho kanye nesinqumo

Isibonelo sivumelanisa isikhathi ngaphambi kokuqala umhubhe, futhi lokho kubalulekile ngale kwe-TLS: ukuxhawulana kwe-WireGuard kuthwala isigxivizo sesikhathi sokuvikela ekuphindeni, ngakho idivayisi eqala ngewashi elingalungile ingathola ukuxhawulana kunqatshiwe. Isiphetho igama lomsingathi, okufaka i-DNS endleleni yokuthembela nakuba ukhiye womphakathi weseva usaqinisekisa umlingani. Ikheli elingalungile limosha imizamo futhi liveza ukuthi idivayisi iku-inthanethi nini. Lungisa kokubili ngaphambi kokuphikisana ngokhiye.

Bese unquma: ukhiye owabiwe kuphela ngenkathi ukubamba kulawulwa futhi isixuku sincane, okhiye bedivayisi ngayinye ngokushesha lapho okukodwa kwalokho kungasekho iqiniso.