I-SSH iya ku-IP yomphakathi yesiphakeli se-WireGuard iyahluleka ku-Windows

Imihubhe ekhuphukayo ngesikhathi i-SSH iya ekhelini lomphakathi lesiphakeli iyeka ukusebenza ibonakala njengesiphakeli esenqaba ukuxhumana. Ku-Windows imbangela engenzeka kakhulu ingeyasekhaya: i-AllowedIPs yomhubhe ogcwele engu-/0 ivula imithetho ye-firewall evimbayo evumela ukuthuthwa komhubhe ngokwawo kanye nokuncane kakhulu okunye. Amaphakethe abethelwe afinyelela kulelo kheli awasho lutho mayelana nokuthi ukuxhumana kwe-TCP okwehlukile kuleyo kheli kungaphuma yini.

Hlukanisa ikheli lomphakathi lesiphetho ekhelini lomhubhe wangaphakathi ngaphambi kokuthinta uhlu lwama-peer. Cishe wonke umzamo wokulungisa lokhu ngokuhlela i-AllowedIPs wenza inqubomgomo ibe buthakathaka esikhundleni somzila oqondile.

Imvume yokuhambisa kanye nemvume ye-firewall kuhlukile

Umzila unquma ukuthi iphakethe lingathunyelwa kuphi, futhi umthetho we-firewall unquma ukuthi lingathunyelwa nhlobo yini. Ngakho-ke ukwengeza umzila we-IP yomphakathi yesiphetho kwakha indlela isihlungi esingayivimba namanje, futhi yikho kanye lokhu kudideka okubangelwa yilesi sifo. Ku-Windows isihlungi siyingxenye yokuqaliswa hhayi isengezo, ngakho-ke akukho okufakwayo komzila okusishintshayo. Lezi zinqumo ezimbili zihlukene nasezinye izindawo, nakuba amanani okusazimiso ehlukile.

Yingakho i-traceroute eya esiphethweni ingaphumelela ngesikhathi umzamo we-SSH uhluleka. Owokuqala uthwalwa isevisi engumnikazi wokuhlukile, owesibili hhayi.

Yini i-/0 eyenzayo ku-Windows

Lapho i-peer eyodwa inamakheli avunyelwe amboza wonke umkhakha we-IPv4, i-WireGuard for Windows isebenzisa isimo se-firewall esivimbayo esivimba ithrafikhi ebingaphuma ngaphandle komhubhe. Ukuthuthwa kwesevisi yomhubhe ngokwawo kuvunyelwe, ngoba i-VPN ibingenakusebenza ngenye indlela. Olunye uhlelo lokusebenza oluya kulo kanye ikheli lomphakathi alutholi mthetho onjalo, ngoba okuhlukile kungokokuthuthwa hhayi okwekheli. Amanothi enethiwekhi ye-Windows achaza lokhu kuziphatha kanye nokulawula okuhlobene kuhleli.

Le mitherho iyindlela engemuva kwegama elithi kill switch. Isebenza ngokuma kokucushwa hhayi ngebhokisi lokumaka elinegama lelo.

Okuhlukile kushintsha imodeli yokuvikela

Ukufaka i-/0 esikhundleni seziqalo ezimbili zengxenye yokusazimiso kuyindlela ebhaliwe yokugcina ukuhambisa okubanzi ngaphandle kwencazelo evimbayo, futhi kuyimodeli yokuvikela ehlukile, hhayi isipelingi esifushane. Ukususa ikheli lesiphetho kuziqalo ezivunyelwe kungenye indlela evamile, eyandisa uhlu futhi ishintshe nokuthi imiphi imithetho evulwayo. Akukho kukho okubili okuwuhlelo lwendabuko olunomphumela wendabuko. Ngayinye isusa umngcele wakho konke ukugeleza emshinini, hhayi kuphela ukuxhumana obukulungisa.

Lapho i-SSH yomphakathi eqondile idingeka ngempela, umnikazi wephrofayela kufanele aklame umzila wangaphandle kanye nemvume yawo ye-firewall kokubili, futhi anqume ukuthi kwenzekani kuthrafikhi engahlobene lapho umhubhe uwa. Ukubuyekeza i-IPv4 ne-IPv6 ngokwehlukana nakho kuyingxenye yalokho, ngoba imithetho ishiwo ngomndeni. Indlela ebanzi yokweqa eyengezwe ukusindisa isikhathi esisodwa sokuphatha ivamise ukuveza okuningi kunesikhathi.

Hlola indlela yokuphatha oyikhethile

Qala ngokunquma ukuthi ukuphatha kufanele kudlule ngaphakathi komhubhe noma ngaphandle kwawo, bese uhlola leyo nketho hhayi kokubili ngesikhathi esisodwa. Imiyalo engezansi ihlola amakheli eklayenti, isimo se-peer kanye nokuxhumana nayo yonke imigomo. Yiqhube kusuka kuklayenti le-Windows ngesikhathi umhubhe ukhuphukile.

ipconfig | findstr /i "WireGuard IPv4"
wg show
ssh -v [email protected]
Test-NetConnection 203.0.113.9 -Port 22

I-SSH ephumelelayo eya ekhelini langaphakathi ifakazela ukuthi umhubhe uthwala ithrafikhi yokuphatha nokuthi i-firewall yesiphakeli ngokwayo iyamukela kusukela kububanzi bama-peer. Ukwehluleka kuzo zombili izigaba kuyinkinga yohlangothi lwesiphakeli noma yokhiye, hhayi yokuhambisa ye-Windows. Uma ikheli langaphakathi lisebenza futhi elangaphandle lingasebenzi, isimo se-firewall sendabuko sineza ngqo lokho ebesiklanyelwe kona. Funda imiphumela emithathu ngalelo hlelo ngaphambi kokuhlela iphrofayela.

Bhala indlela yokuphatha, ikheli elisetshenzisiwe kanye nokuziphatha lapho umhubhe wehlile. Lelo nothi yilo elivimbela umuntu olandelayo ekwandiseni indlela yokweqa ukuze asindise imizuzu emihlanu.