NetworkManager noma wg-quick: ubani ongumnikazi wemizila yakho ye-WireGuard?

Ushintsha i-AllowedIPs efayeleni le-WireGuard, uqale kabusha ithumbu, futhi ithebula lemizila libukeka njengangaphambili. Impendulo evamile ukususa umzila ophazamisayo bese uqhubeka, lokho okusebenza kuze kube ukuxhumana okulandelayo kuwubuyisela. Ifayela olihlelile akusilo ngempela into eyadala isimo osibonayo. Abaphathi ababili bangasebenzisa iphrothokholi efanayo emshinini owodwa, futhi munye kuphela wabo ongumnikazi we-interface ngesikhathi ngasinye.

Inganekwane: kunokucushwa okukodwa kwe-WireGuard emshinini

I-wg-quick ifunda ifayela ku- /etc/wireguard/ futhi yakha i-interface uma uyikhuphula. I-NetworkManager igcina iphrofayili yokuxhumana ngefomethi yayo ye-keyfile futhi iyiveze lapho kuqaliswa, futhi ukungenisa ifayela le-wg-quick kukopisha amanani kuleyo phrofayili esikhundleni sokuxhuma kuyo. Ukuhlela okwangempela ngemuva kwalokho akushintshi lutho, ngoba iphrofayili ayisayifundi. Ngakho uhlu olufanayo lontanga nezinkinobho lungaba khona kabili, kanti ikhophi yesibili iyasebenza.

Uphawu okufanele lukhunjulwe: izinguquko ezisinda ekuqaliseni kabusha kodwa hhayi ekungeniseni kabusha zivela esitolo esisodwa, futhi izinguquko ezinyamalalayo ekuqaliseni kabusha zivela kwesinye.

Isibonelo esisodwa esisebenzayo senza ukwehlukanisa kucace. Qhathanisa nmcli connection show ne- systemctl status wg-quick@wg0, bese uhlola ukuthi imizila ilenga ku-interface iphi ngempela. Uma insizakalo ifile futhi i-interface iphezulu, iphrofayili iyona eyenza umsebenzi, noma ngabe ifayela lithini.

Inganekwane: imithetho yemizila iyingxenye ye-WireGuard

Idivayisi ye-WireGuard ku-kernel yazi ontanga nezinkinobho, futhi ayazi lutho mayelana nokuhamba kwemizila ngenqubomgomo. Noma yikuphi ip rule okufakiwe namathebula engeziwe owabonayo kufakwe ithuluzi elakhuphula i-interface. I-wg-quick ingangeza i-fwmark nethebula elikhethekile kanye nemithetho ekhomba kulo, kuyilapho i-NetworkManager ifaka imizila ngokusebenzisa izilungiselelo zayo ze-ipv4 futhi ishiya i-DNS kubhekhendi yesixazululi esetshenziswa uhlelo. Ithumbu elifanayo, imiphumela ehlukile.

Ngaphambi kokushintsha noma yini, funda ip rule kanye ne- ip route show table all , futhi ubhale ukuthi umzila ngamunye uhlala kuthebula liphi. Inombolo yethebula ongayilungiselelanga iyisikhombisi esiqinile mayelana nethuluzi eliyidalile.

Inganekwane: ukususa umzila kuwukulungisa

Umzila osuswe ngesikhathi sokusebenza umzila ozobuyiselwa umnikazi ekusebenziseni okulandelayo, futhi ukusebenza kungenzeka ngaphandle kwakho: ukuvuka kwe-laptop, ukudlikiza kwesixhumanisi, ukuqala kabusha kwensizakalo noma ukuxhumana okuzenzakalelayo kwe-NetworkManager. Yingakho umzila ofanayo ubuya futhi yingakho isixazululo sesikhashana sibonakala singathembekile hhayi esiphuthile. Khomba umphathi kuqala, bese ushintsha okokufaka akufundayo ngempela lowo mphathi.

Ukuxhuma kabusha nokuqala kabusha insizakalo efanele kuwukuhlolwa okuhlukanisa ukulungisa kwangempela nalokho okubukeka kuhle kuphela.

Khetha umnikazi oyedwa bese ususa omunye

Khetha umphathi osekelwa ukuthunyelwa kwakho, bese ukhubaza ukusebenza okuqhudelanayo ngokulawula kwakho okubhalisiwe esikhundleni sokuthemba ukuthi uzohlala ungenzi lutho. Insizakalo ye-wg-quick efihliwe noma iphrofayili ye-NetworkManager esusiwe icacile; ukushiya kokubili kunikwe amandla nokuvumela ukuthi ziqhudelane akusikho. Gcina ukufinyelela okusebenzayo ngaphambi kokukhubaza noma yini, ngoba i-interface ethwala iseshini yakho ekude kungenzeka ukuthi iyona osezokuyisusa.

Ngemuva koshintsho, qinisekisa ithrafikhi efakiwe nekhishiwe, bese kuba i-DNS, bese uqala kabusha kanye. Uma isimo sisinda ekuqaliseni kabusha ngomphathi oyedwa, unomnikazi hhayi izingqinamba.

Umgomo ojwayelekile ufanele ukhunjulwe nangaphandle kwe-WireGuard: lapho isilungiselelo siqhubeka sibuya, yeka ukususa umphumela futhi thola inqubo eqhubeka nokuwukhiqiza.