Dala ipheya lokhiye le-WireGuard endaweni: imiyalo nokucophelela

Imiyalo emibili idala ipheya lokhiye le-WireGuard futhi yomibili iza namathuluzi ajwayelekile, ngakho lo msebenzi awudingi iwebhusayithi ekhombisa ukuthi ikwenzele ukhiye. Okonakalayo akusoze kube ukubala kwejika; amabhithi emvume, indawo okufika kuyo ifayela, nalokho okuthunyelwa kolunye uhlangothi ngemuva kwalokho. Ukulandelana okungezansi kuqala kudirekhithori elingenalutho futhi kuphele kumlingani othwala ithrafikhi. Kufunde kanye ngaphambi kokukusebenzisa, ngoba umugqa wokuqala ubalulekile kuphela uma owulandelayo ugijima ku-shell efanayo.

Ukwakha ipheya ku-shell eyodwa

Ukugeleza komsebenzi okubhaliwe kunciphisa ukwakhiwa kwamafayela ngaphambi kokuba inani langasese libekhona, bese licaphuna kulo inani lomphakathi. Yomithathu imigqa ihamba ndawonye kuseshini eyodwa ye-shell:

umask 077  # applies to files created next, so keep the next line in this shell
wg genkey | tee privatekey | wg pubkey > publickey
wg pubkey < privatekey  # re-derive and compare with publickey

wg genkey ibhala ukhiye wangasese we-Curve25519 wamabhayithi angu-32 nge-base64; wg pubkey iwufunda futhi icaphuna ukhiye womphakathi ohambisanayo, kanti tee igcina inani langasese ngenkathi liwudlulisela phansi ngepayipi. Yilokho kulandelana okuyisizathu sokuthi umugqa wemvume uze kuqala nokuthi ukunamathisela ipayipi kutheminali yesibili kuwulahlekise buthule. Amagama amafayela ayizibonelo, futhi okubalulekile ukuthi womabili amafayela awela endaweni elawulwa idivayisi engumnikazi. Uma ifayela langasese selivele likhona ngezimvume ezingokwakhombo, chmod 600 privatekey ilungisa ifayela lamanje futhi ayenzi lutho ngezikhophi ezenziwe ngaphambili.

Gcina ingxenye yangasese kudivayisi eyodwa

Inani langasese lingelomshini ozoba ngumnikazi wobunikazi, kudirekhithori umshini oyivikelayo futhi ozikhophi zawo eziyisipele ziyithatha njengesiqinisekiso. Akufanele libe kufolda eyabiwe, kumlayezo othunyelwe kuwe, noma kusiqephu esinanyathiselwe kuthikithi losizo, futhi ikhophi efakiwe yenza ifayela lokuhlela libe sengozini efanayo nokhiye. Ukhiye oke wahlala ezindaweni ezintathu awukwazi ukucatshangelwa kamuva, futhi lesi yisizathu esingokoqobo sokuwugcina endaweni eyodwa.

Ukucekela phansi ngenhloso ifayela eliyekile ukusetshenziswa kuyingxenye yomkhuba ofanayo. Ukulishiya kufolda yokulanda kuze kubonwe othile akusiko.

Lokho umqhubi womlingani akudingayo kuwe

Uhlangothi olunye ludinga inani lomphakathi nokuhlelwa kwamakheli umqhubi walo akukhethile, akukho okunye. Thumela lolo chungechunge lomphakathi ngendlela umqhubi ayilindele, bese uqinisekisa ukuthi lwananyathiselwa kuluphi ufakelo lomlingani ngaphambi kokuthi othile aluhlole, ngoba ukhiye olungile esigabeni esingalungile wehluleka ngendlela ebukeka njengenkinga yokhiye. Kuthumele njengomugqa owodwa ongagobekile, ngoba ukhiye ophuke waba imigqa emibili unamathela kufayela lokuhlela ngaphandle kwesikhalo bese kungasaqondani nakancane.

Ukwakha ukhiye akugunyazi lutho ngokwako. Umlingani kufanele ahlelwe ukuze awamukele, futhi isinyathelo sokuhlela singesalowo ophethe lowo mkhawulo.

Hlola ipheya ngokushintshana kwangempela

Ipheya lokhiye likhomba umkhawulo owodwa wethuneli; alikhi nothi umzila, okufakelwe kwisixazululi, umthetho wokudlulisela noma imvume yodonga lomlilo. Ngemuva kokuthi umlingani ulungiselwe, hlola ukushintshana hhayi ifayela: ukuxhawulana okubonakala ku-wg show, ikheli eliphendula ngaphakathi kwethuneli, nesicelo esisodwa sohlelo esincike kumzila. Lolo thathu luhlukanisa ukhiye ongakalungi nokhiye olungile nomzila ongekho.

Gcina ubunikazi obubodwa kudivayisi ngayinye lapho ukusatshalaliswa kuvuma, ukuze iyunithi elahlekile ikhishwe yodwa esikhundleni sokuphoqa wonke umuntu ukuthi akhe kabusha okhiye. Leso sinqumo futhi yisona esenza inqubo yokushintsha engezansi iphephile ukuyigijima.

Shintsha ukhiye ngaphandle kwegebe

Dala okungena esikhundleni kudivayisi, engeza ukhiye omusha womphakathi njengomlingani owengeziwe, qinisekisa ukuthi uthwala ithrafikhi, bese kuthi ngemva kwalokho ususe owakudala. Ukwenza lokho ngalolo kulandelana kusho ukuthi ithuneli alinaso isikhathi esingenabo ubunikazi obusemthethweni, futhi ukuhlehlisa emuva kumane kuwukususa okufakelwe osanda kukwengeza.

Gcina ifayela langasese elishintshiwe kuze kuqinisekiswe umlingani omusha, bese ulicekela phansi ngenhloso. Ukuqala okusheshayo kwe-WireGuard kuyincwadi eyisethenjiswe yona yemiyalo ngokwayo, futhi kufushane ngokwanele ukuba ulifunde lonke ngaphambi kokuthi uqale.