Beka i-VPN ngemuva kwemojuli ye-Wi-Fi UART, hhayi ngaphakathi kwayo

Isilawuli esincane esinemojuli ye-Wi-Fi UART asidingi ukusebenzisa i-VPN ukuze sifinyelele isevisi engemuva kwayo. Imojuli isivele isebenzisa isitaki se-TCP/IP futhi ihlinzeka ngamasokhethi ngechweba le-serial, futhi isango elikuyo leyo LAN lingadlulisa lowo mgudu ngomhubhe. Lo mklamo usebenza kuphela uma ungaphendula imibuzo emine ngokulandelana, ngakho-ke kuyithathe njengohlu lokuhlola: ikheli, isokhethi, umzila, umngcele. Ma kumasango okuqala ehlulekayo, ngoba lawo alandelayo awakwazi ukukunxephezela.

Nikeza isigaba ngasinye umsebenzi owodwa

Isixhumanisi se-UART sithwala imiyalo ye-AT nomthwalo phakathi kwesilawuli esincane nemojuli. Imojuli ijoyina inethiwekhi ye-Wi-Fi futhi inomnikezo woxhumano lwe-IP, kuhlanganise nekheli lomthombo walo. Isango linomnikezo womhubhe, imininingwane yokungena kanye nenqubomgomo yokudlulisa. Ukuhlukanisa leyo misebenzi yikho okwenza umklamo uhlolwe kalula esigabeni ngasinye.

Ukuhlukanisa kushintsha futhi indlela obhala ngayo inqubomgomo yesango. Umthetho womthombo kufanele usho ikheli le-LAN lemojuli, hhayi ikheli elicatshangelwayo lesilawuli esincane esingemuva kwesixhumanisi se-serial. Isilawuli esincane asinabo ubunikazi be-IP siqu sakho kulo mklamo, futhi ukwenza sengathi sinabo kudala umthetho ongahlangani nakanye.

Nikeza imojuli ikheli eliqinile ngayo yiphi indlela yokubeka eceleni esekelwa yinethiwekhi, noma beka amadivayisi esigabeni sawo bese uvumela isango ukuthi lihambisane ngesixhumanisi. Ikheli elivela echibini elishintsha ngemuva kokuqalisa kabusha ekugcineni lizokwephula inqubomgomo eyayilungile ngesikhathi uyibhala.

Ingabe isango lingasho ikheli lemojuli?

Ngaphambi kokuthi kuvulwe noma yisiphi isokhethi, qinisekisa ukuthi imojuli ixhunyiwe, inekheli futhi isango liyibona kusixhumanisi obekulindelekile. Lesi yisango elihluleka kaningi ngokuthula, ngoba imojuli izobika ngokuzimisela umzamo woxhumano ongakaze uphume ku-LAN.

AT+CWMODE=1
AT+CWJAP="lab-wifi","passphrase"
AT+CIPSTA?
AT+CIPMUX=0

Imodi yoxhumano olulodwa igcina ukulandelana kwemiyalo kulula, futhi iyindawo yokuqala efanele yenzwa eyodwa ekhuluma nesevisi eyodwa. Imodi yoxhumano oluningi ishintsha isakhiwo somyalo ngamunye olandelayo, ngakho-ke nquma ukuthi ukukuphi ngaphambi kokukopisha isibonelo esivela kwenye inguqulo ye-firmware.

Vula isokhethi kusuka kumojuli

Uma ikheli nemodi sekunqunyiwe, imojuli ingavula uxhumano lwe-TCP oluya kusevisi yangasese. Ikheli elingezansi liyisibonelo esivela kububanzi bemibhalo; libeke elakho bese ugcina isimo esifanayo.

AT+CIPSTART="TCP","10.90.0.20",9000
AT+CIPSEND=18
{"t":21.4,"rh":48}

Lowo myalo we-AT uvula isokhethi ye-TCP evamile, futhi isokhethi akusona umhubhe: akukho lutho kuyo okudala i-VPN futhi akukho lutho olubethela umthwalo. Imodi ye-TLS ye-firmware iyisici esihlukile esinomyalo wayo kanye nokuphatha kwayo izitifiketi, futhi imojuli ye-UART engahleliwe ingase ingakusekeli kokubili. Bika ku-mhlahlandlela wemiyalo ye-AT ye-TCP/IP we-firmware yakho esikhundleni sokucabanga ukuthi isakhiwo esingenhla siyasebenza kuyo.

Ubude bomthwalo ku-AT+CIPSEND kufanele buhambisane nalokho okuthumelayo ngempela, ngaphandle kwalokho imojuli izolinda amabhayithi angasoze afike futhi uxhumano luzobonakala lungaxhunyiwe. Lokho kwehluleka kubonakala njengenkinga yenethiwekhi futhi cishe njalo kuyiphutha elilodwa kubude.

Hambisa uxhumano ngasango

Isango lidinga umzila oluya endaweni yangasese, imvume yokudlulisa isuka kunethiwekhi yamadivayisi ingene emhubheni, kanye nendlela yokubuya efinyelela imojuli. Uma uhlangothi olukude lungahambisi emuva ku-subnet yamadivayisi, umklamo udinga umthetho wokuhumusha owenziwe ngamabomu, futhi lowo mthetho ushintsha ubunikazi bomthombo obubonwa yisevisi.

ip route get 10.90.0.20
sudo tcpdump -ni wg0 'host 10.90.0.20 and port 9000'
sudo conntrack -L | grep 9000

Bheka indlela yokubuya kuqala. Iphakethe elidlulisiwe elifinyelela kusevisi futhi lingabuyi neze lidala ukuphela kwesikhathi kumojuli ngaphandle kwephutha kusango, lokho okwenza abantu bagqolozela isixhumanisi se-Wi-Fi amahora. Umugqa we-conntrack ukutshela ukuthi isango layibona yini impendulo.

Nquma ukuthi umhubhe uphela kuphi ngempela

Umhubhe uqala esangweni. Awubethelanga isixhumanisi se-UART, futhi awenzi isigaba se-LAN phakathi kwemojuli nesango sibe yingxenye yomhubhe. Noma yini edinga ukuvikelwa kuleso sigaba idinga indlela yayo, futhi i-TCP evamile kulesi sibonelo akuyona i-TLS.

Nquma futhi ukuthi kwenzeka ini uma umhubhe uwa. Uma ukulethwa kufanele kube kuphela nge-VPN, inqubomgomo yokudlulisa akumele ivumele indawo efanayo ngomzila ohlukile, ngoba umzila wokulondoloza ugcina ucisha imfuneko ngokuthula. Khawulela indlela yokuxhumana kabusha ukuze imojuli ehlukanisiwe ingagcwalisi isixhumanisi se-serial noma isevisi ekude ngemizamo ephindwayo.

Bhala izimpendulo ezine ndawonye: ikheli lemojuli, umgomo wesokhethi, umzila wesango nendawo lapho ukubethela kuqala khona. Umuntu olandelayo ozohlola le divayisi uzodinga zozine, futhi akukho nokukodwa okungacatshangwa kusuka ku-firmware kuphela.