I-peer ye-VPN iphinga ezinye izixhumi ngoba ziyasekhaya
Ithebula lokuhambisa lasekhaya lithumela amaphakethe kukho konke ikheli umsingathi anakho, noma ngabe kusiphi isixhumi. Izilungiselelo zokudlulisa azilokothi zingene kuleyo ndlela.
Iklayenti ye-WireGuard iyaxhuma futhi iphinge ikheli elikwesinye isixhumi ngokuphelele, futhi impendulo iyafika. Ukugcinwa kubonisa ukuthi isicelo sikuthumbu kuphela. Akukho okugcwele, futhi isilungiselelo sokudlulisa esivalwe ngokucophelela asihlobene nalokhu. Lesi siqhathaniso phakathi kwezindlela ezimbili ezibonakala zifana kumdwebo futhi zehluke ngokuphelele kwi-kernel.
Enye indlela idlulisa amaphakethe komunye umuntu; enye iwakhulisa kumsingathi uqobo.
Iphakethe eliqondiswe kumsingathi lihlala kumsingathi
Iklayenti elikude lithumela iphakethe le-IP ekhelini umsingathi anakho. Ukuhambisa kubuzwa umbuzo owodwa ngalelo phakethe: ingabe le ndawo iyasekhaya? Wonke ikheli umsingathi analo uvela kuthebula lokuhambisa lasekhaya, futhi lelo thebula libhekwa ngaphambi kwelikhulu, ngakho iphakethe liya kusitaki somsimgathi uqobo esikhundleni sokuphuma ngolunye uxhumi. Impendulo ikhiqizwa kulelo zwe, futhi ibuyela emuva kuthumbu ngoba umbuzo wawuvela lapho.
Yilokho kuphela indlela yokusebenza. Akukho kudluliswa okwenzekayo, akukho shintsho lwesimo soxhumi oluhilekayo, futhi ikheli okukhulunywa ngalo akudingeki lifinyeleleke kunoma yikuphi okunye.
Kungani i-ip_forward ingasebenzi
Ukudlulisa kulawula amaphakethe okumele aphume ngolunye uxhumi oluhlukile kulelo angena ngalo. Ukupingha umsingathi uqobo akulokothi luthatha leyo ndlela: iphakethe liyasetshenziswa kulelo zwe futhi impendulo ikhiqizwa kulelo zwe. Ngakho ukusetha net.ipv4.ip_forward=0 akushintshi lutho lapha, futhi umthetho ochungechungeni lokudlulisa awulokothi uwubone lowo mgudu. Ukulawula okulungile kusendleleni yokungena, kukhawulelwe uxhumi olungena noma umthombo.
Yingakho ukuvala ukudlulisa nokucabanga ukuthi umsingathi uhlukanisiwe kudala umuzwa wokuphepha ongamanga.
Funda ithebula lasekhaya elanquma
ip rule show ngokuvamile libika umthetho onokubaluleka okunguziro ohambisa konke ukusesha kuthebula lasekhaya kuqala, futhi ip route show table local libala amakheli omsingathi uqobo ngobubanzi basekhaya. Lelo thebula lihlanganisa amakheli kuzixhumi ezivaliwe ngokomthetho kodwa ezisalungisiwe. Amakheli e-IPv4 abelwe ngokungaguquki ngokuvamile ayasinda ekunqamukeni kwesixhumanisi, futhi yingakho ukupingha ibhuloho elivaliwe kusengaphumelela futhi kumangaze umqhubi.
I-IPv6 iyaphikisana kuleli phuzu ngqo. Amakheli ayo ngokuvamile ayahoxiswa lapho isixhumanisi siwa, ngaphandle uma keep_addr_on_down isethiwe. Qhathanisa imindeni esikhundleni sokucabanga ukuthi umthetho owodwa uhlanganisa kokubili.
I-peer ifinyelela ini ngempela
Impendulo evela ekhelini lomhambisi uqobo esigabeni ayisho lutho ngemishini engemuva kwaleso sigaba. I-peer ayikwazi ukufinyelela umsingathi ongemuva kolunye uxhumi ngale ndlela; ifinyelela kuphela amakheli umhambisi uqobo anayo. Ukuhlola isevisi kumsingathi we-LAN ohlukile, esikhundleni sokupingha ikheli lomhambisi, yikho okuqinisekisa ukuthi ukudlulisa kuvunyelwe yini.
Ukukhawulela i-peer kumasevisi aboshelwe ekhelini lethumbu kuwumbuzo wenqubomgomo yokungena. Vumela isevisi oyifunayo kuxhumi lwethumbu futhi ukhawulele imithombo evunyelwe ukuyisebenzisa, ngoba iphakethe lifika lapho ngempela.
Hlola futhi amakheli obuhlela ukuwabeka eceleni. Ukususa ikheli kuxhumi kuthembeke kakhulu kunokugcwalisa imithetho ye-firewall phezu kwekheli elidala.