Iminyaka yokuxhawana yesandla ye-WireGuard akusona isikhathi sokuphela seseshini
Izibali zokuvuselela ukhiye zilawula okhiye, hhayi ukufinyelela komsebenzisi. Ukufunda latest-handshakes kutshela ngesimo sephrothokholi yepheya elilodwa, hhayi ukuthi igunya layo liphelile yini.
Ipheya eliyeka ukudlulisa ithrafikhi alilahlekelwa ukhiye walo ngenxa yalokho, futhi ukuxhawana okusha akufakazi ukuthi othile uvuselele imvume yokuyisebenzisa. Izibali ze-WireGuard zigcina okhiye bebe misha futhi amaphakethe ehamba; azilingisi umsebenzisi ophuma ngemva kwenani elithile lemizuzu. Imibuzo emithathu iyahlangana lapha, futhi ngamunye unobufakazi obuhlukile. Lo mehluko unquma ukuthi isiphi isisetshenziswa okufanele sisetshenziswe.
Imibuzo emithathu, umphumela owodwa womyalo
Abasebenzi bayabuza ukuthi ipheya liyafinyeleleka yini, liyasebenza yini, futhi lisagunyaziwe yini. Owokuqala isimo sephrothokholi, owesibili izibali zethrafikhi futhi owesithathu igunya. Yizimbili zokuqala kuphela ezingafundwa kusixhumi sikhombisi se-WireGuard, futhi zivame ukusetshenziswa ukuphendula zombie zontathu.
| Question | Evidence it needs | What does not answer it |
|---|---|---|
| Is the peer reachable now? | A recent handshake and a working return path | An interface that exists |
| Has it been active? | Transfer counters moving over time | A handshake timestamp alone |
| Is access still granted? | The configuration or controller that authorizes it | Any protocol timer |
Funda imigqa njengophenyo oluthathu olwehlukene. Emibili yokuqala ishibhile futhi ingaphendulwa ngezibali zesixhumi sikhombisi uqobo. Eyesithathu idinga ukucushwa okunikeza ukufinyelela, futhi lokho kuhlala kwelinye ifayela noma kolunye uhlelo. Ukukhetha umugqa ongafanele kuwukucela isibali sephrothokholi senze umsebenzi wenqubomgomo.
Izibali zilawula ini ngempela
Iphrothokholi ichaza izingxenye ezingaguquki zokuphinda ukuxhawana, ukuzungeza okhiye bokuthutha kanye nokwenqaba amaphakethe avikelwe ukhiye wakudala. Lezi zisabela kuthrafikhi nasesimweni, hhayi kukhalenda noma kunqubomgomo ethi umuntu angaxhunywana kwaze kube 17:00. Yingakho ipheya elingasebenzi lingabonakala lingasebenzi amahora amaningi kodwa lisagunyaziwe.
PersistentKeepalive ivame ukuthathwa njengesikhathi sokuphela esingekho. Ithumela amaphakethe angenalutho aqinisekisiwe ukuze igcine imephu ye-NAT iphila, futhi ukuyibeka kuqanda kumisa lawo maphakethe ngaphandle kokuhoxisa lutho.
Funda isimo sokusebenza sepheya ngalinye, usebenzisa ukhiye womphakathi esikhundleni sokuphawula:
wg show wg0 latest-handshakes
wg show wg0 transferUkuxhawana kwakamuva kuthi ukuxhawana okukodwa kuqedile. Akuthi isevisi yangasese engemva komhubhe iyafinyeleleka, futhi isigxivizo sesikhathi esidala singaba sepheya elithule nje.
Kungani ipheya elingasebenzi lingelona ipheya eliphumile
I-WireGuard ayinayo into yeseshini enokuqala nokuphela. Ipheya ukhiye womphakathi onezindodo ezigunyaziwe, futhi ukuxhawana okuvikelayo ithrafikhi yalo kuyashintshwa lapho kudingeka ngaphandle kokungena okubonakala kumsebenzisi. Ukuthatha ukungabikho kwethrafikhi yakamuva njengokuphuma kuguqula imodeli.
Uma isikhalazo sangempela siwukuthi uxhumano lwehluleka ngemva kokungasebenzi, imbangela ivame ukuba kwenye indawo: imephu ye-NAT ephelelwe yisikhathi, idivayisi elele, noma i-firewall elahle isimo. Hlola ngokuthumela ithrafikhi kusuka kolunye uhlangothi nangokuqala ukugeleza okusha, bese uqhathanisa okushintshayo.
Beka usuku lokugcina lapho igunya likhona
Uma ukufinyelela kufanele kuphele ngesikhathi esithile, usuku lokugcina lungolwalokho okunikeza ukufinyelela. Isilawuli esikhipha ukucushwa kwepheya singadinga imvume evuselelwe ngaphambi kokunikeza entsha, futhi lokho kuyisici sesilawuli hhayi ipharamitha efihliwe esixhumi sikhombisi.
Kumapheya aphethwe ngesandla, ukususa kufanele kufinyelele izindawo ezimbili: isixhumi sikhombisi esisebenzayo nokucushwa okugciniwe. Ukususa ipheya ngesikhathi sokusebenza kuphela kuhoxiswa ukuqala kabusha noma umjikelezo wokubuyisana, obuyisela ubunikazi obucabanga ukuthi buphelile:
sudo wg set wg0 peer <public-key> remove
sudo wg-quick save wg0Bese uhlola umngcele hhayi ilebula. Qinisekisa ukuthi ipheya liyenqatshwa ngemva kosuku lokugcina, ukuthi indlela yokuvuselela iyasebenza, nokuthi isimo sihlala sikhona ngemva kokulayishwa kabusha komphathi. Iminyaka yokuxhawana iyisiginali ewusizo yokusebenza, futhi akusona irekhodi lokufinyelela.