I-interface isesikhundleni kodwa i-wg-quick yehlulekile: kwenzenjani manje
I-unit ehlulekile ingashiya i-tunnel elungiswe ngengxenye. Funda isigaba sokuqala esihlulekile, thatha isinqumo sokuhlanza noma ukulungisa, bese ukufakazela ngesicelo.
I-unit ibomvu, i-interface ikhona, futhi i-tunnel isebenza kakhulu, okuyisixhumanisi esidida kakhulu. Ukusethwa kuwukulandelana: kuqala kwakhiwa i-interface, bese kufika amakheli, imizila, izilungiselelo zesixazululi noma yimiphi imiyalo ye-hook. Ukwehluleka esigabeni sesine kushiya ezintathu zokuqala endaweni yazo, ngakho igama le-interface liwubufakazi bokuthi ukuqala kwaqala, hhayi ukuthi kwaphela. Iqiniso elilodwa elengeziwe belizosindisa lokhu kudideka: isigaba esihlulekile.
Isimo sengxenye siwukwehluleka okuvamile
Lowo mkhuba kufanele ulindelwe kunokuba uthathwe njengokonakala. I-interface iyingxenye eshibhile kakhulu yokusetha futhi ilula kakhulu ukuyishiya, futhi iyona engxenye eyenza umshini ubonakale usebenza ngengxenye.
Okungekho okwamanje yikho konke okwafika ngemuva kwesigaba esihlulekile. Uma ukwehluleka kwakusesigabeni sesixazululi, amakheli nemizila ikhona kanti i-DNS ayikho. Uma kwakuwumzila, i-tunnel inekheli futhi ayinayo indlela yokuwunqamula.
Umphumela ngumshini ophendula ezinye izivivinyo futhi wehluleke kwezinye, yingakho abantu baphetha ngokuthi insizakalo iyadlikiza kuyilapho ingakaze iqale ngempumelelo. Insizakalo engakaze iqede ayikwazi ukudlikiza. Ingahluleka kuphela ngokuphindaphindiwe ngesizathu esifanayo.
Thola isigaba sokuqala esihlulekile
Funda i-journal ye-unit hhayi isimo samanje kuphela, futhi uyifunde kusukela ekuqaleni kokugijima okuhlulekile. Umugqa wokugcina ukutshela ikhodi yokuphuma; iphutha lokuqala likutshela okufanele kulungiswe.
Le miyalo iphrinta isimo se-unit, i-journal yokuqalisa yaleyo unit kanye nesimo esibukhoma se-tunnel:
systemctl status wg-quick@wg0
journalctl -u wg-quick@wg0 -b --no-pager | tail -40
wg show
ip -4 addr show dev wg0Iphutha lesixazululi, umzila osekhona kakade, i-hook ephume ngekhodi engeyona uziro kanye nokwehluleka kokuhlaziywa kokusethwa konke kuvela kulelo windi, futhi ngakunye kubiza ingxenye yako. Ukuqagela kusukela esimweni se-interface kuphela kushaya indiva lonke lolo lwazi.
Imibandela emithathu enquma ukulungiswa
Thatha isinqumo sokuthi uyahlanza, ulungisa endaweni noma ususa i-unit emzileni wokuqalisa, futhi thatha leso sinqumo ngaphambi kokuthayipha noma yini.
Uma i-interface iphukile kodwa ukusethwa kulungile, hlanza bese uqala kabusha. Uma ukusethwa kungelungile, kusilungise futhi usahlanza kuqala, ngoba ukuqalisa umphathi wesibili phezu kwesimo sengxenye kwakha abanikazi ababili be-interface eyodwa. Uma ukwehluleka kuyingxenye yesistimu engekho njengomsizi wesixazululi umshini ongenaye, fakela noma susa ukuncika ngamabomu esikhundleni sokuhlela i-unit ize iyeke ukukhononda.
Lezi zimo ezintathu zihlanganisa iningi lalokho okubonakala njenge-unit ebomvu engaqondakali. Umbuzo ohlukanisayo ngukuthi ukwehluleka okufanayo kungase kwenzeke yini emshinini onesimo esihlanzekile, futhi impendulo ivamise ukuvela emugqeni wokuqala wephutha.
Hlanza ngaphambi kokuzama futhi
Ukuzama futhi phezu kwesimo esikhona kungahluleka ngesizathu esisha futhi kufihle esokuqala. Yehlisa i-interface ngethuluzi elifanayo eliyidalile, bese uqinisekisa ukuthi akukho okusalile.
Ungasusi ama-interface angenawo umxhumanisi futhi ungaphindi usethe isitaki senethiwekhi somsingathi. Kokubili kuyizinyathelo ezinkulu zokulungisa into encane, futhi kuguqula i-tunnel eyodwa ehlulekile ibe umshini okufanele kusungulwe kabusha okunye ukuxhumana kwawo. Ububanzi obulungile yi-interface eyodwa kanye ne-unit engumnikazi wayo. Noma yini ebanzi idinga isizathu esibhaliwe ngaphambi kokuba yenzeke.
Fakazela i-tunnel, hhayi i-unit
I-unit eluhlaza isho ukuthi ukulandelana kokuqalisa kuphume ngoziro. Akusho ukuthi iphakethe lafika kolunye uhlangothi, futhi akusho ukuthi isixazululi sasethwa ngendlela obukuhlosile.
Thumela isicelo nge-tunnel bese ufunda isimo esikukhiqizile:
systemctl is-active wg-quick@wg0
wg show wg0 latest-handshakes
ping -c 3 10.63.0.1
resolvectl query internal.example.netUkuxhawula okungenampendulo kusakutshela ukuthi i-tunnel yakheka futhi uhlangothi olukude luthule, okuyinkinga ehlukile kune-unit engakaze iqale. Gcina isimo se-unit, ukuxhawula kanye nomphumela wesicelo kurekhodi elilodwa, ngoba kwehluleka ngokuzimela futhi kuphela inhlanganisela echaza isistimu.