WireGuard 5G igatsha: vumela igatsha ukuthi lishayele ihabhu

Lapho igatsha lishayela ihabhu, ihabhu alidingi ukuthola ikheli leselula eliguqukayo. Lungiselela, qinisekisa, bese ubona lokho lokhu okungakuxazululi.

Ukuqondisa igatsha ehabhuni ingxenye elula yalo mklamo lapho igatsha lihlezi ngemuva kwekheli leselula eliguqukayo futhi ihabhu lineregama elizinzile. Khona-ke ihabhu lifunda igatsha kuthrafikhi eqinisekisiwe, hhayi emrekhodini okufanele uyigcine isesikhathini. Isivumelwano silula: igatsha lihlala liqala.

Lungiselela ngamabomu, bese uqinisekisa ingxenye abantu abacabanga ukuthi iyasebenza. Zombili izinyathelo zithatha amaminithi, futhi kulesi sibili yilapho le miklamo ivamise ukuhluleka khona.

Hlangu luluphi oluphethe iphoyinti lokugcina elizinzile

Ukulungiselelwa kwegatsha kubiza iphoyinti lokugcina lehabhu kanye nokhiye womphakathi walo. Ukulungiselelwa kwehabhu kubiza ukhiye womphakathi wegatsha kanye neziqalo zalo zangaphakathi ezivunyelwe, futhi kungenzeka kungabi nayo neze iphoyinti lokugcina, ngoba ubunikazi buvela kukhiye hhayi ekhelini lomthombo lephakethe lokugcina. Lokho kungalingani yiwo wonke umshini, futhi kususa isigaba sonke sezinkinga zokuthola ohlangothini lwehabhu.

Lapho igatsha lithumela iphakethe eliqinisekisiwe, ihabhu libhala umthombo elavela kuwo futhi lisebenzisa lokho kuhlela ngezimpendulo. Ukufaka izinombolo kabusha kuxhumano lweselula khona-ke akubizi lutho ngaphandle kokuxhawula okulandelayo, futhi yonke ingxenye ongayidingi iyona engakwazi ukwehluleka ngesikhathi sokushintsha. Leyo mpawu ifanele ukuhlolwa ngesikhathi soshintsho oluhleliwe hhayi ngesikhathi sehlakalo. Kwenze ngesikhathi othile engabuka zombili iziphetho ngesikhathi esisodwa.

Nika igatsha ukulungiselelwa okumelana nokufakwa kwezinombolo kabusha

Gcina iphoyinti lokugcina kanye ne-keepalive egatsheni, futhi gcina ingeno yozakwenu ehabhuni ingenalo ikheli elifakwe ngamandla. I-keepalive igcina ukuhlela okuhumushiwe kuvulekile isikhathi esanele ukuze ihabhu likwazi ukuthumela ithrafikhi engayicelanga ngemuva kwesikhathi sokungenzi lutho.

[Peer]
PublicKey = HUB_PUBLIC_KEY_BASE64
Endpoint = hub.example.net:51820
AllowedIPs = 10.60.0.0/24, 10.60.10.0/24
PersistentKeepalive = 25

Amasekhondi angamashumi amabili nanhlanu isibonelo esivame ukucashunwa sokugcina ukuhlela kwe-NAT kuphila, hhayi imfuneko kuzo zonke izingxenye. Kusetha ngokusho kwesikhathi sokuphela kokuhlela osibonayo ngempela, futhi khumbula ukuthi kukhiqiza ithrafikhi kuxhumano olunomkhawulo wedatha ngesikhathi isixhumi sisebenza.

Ehabhuni, iziqalo ezivunyelwe zozakwenu begatsha kufanele zihlanganise konke igatsha elizokuthumela. Isiqalo esingekho siziphatha njengokwehluleka komzila esiphethweni esikude futhi asikhiqizi saxwayiso kunhlangothi zombili, ngakho kufanele ukusibuyekeza ngaphambi kwephakethe lokuqala langempela. Qhathanisa iziqalo ezivunyelwe zehabhu namakheli esixhumi segatsha ngaphambi kokuxhumana kokuqala.

Qinisekisa ukuhlela nokushintshwa kokwehluleka

Qinisekisa ukuthi ukuxhawula kuqedwa, ukuthi ihabhu libala iphoyinti lokugcina lamanje legatsha, nokuthi amakheli angaphakathi egatsha ayafinyeleleka ngomhubhe. Leyo yilayini lesisekelo, futhi kufanele ibhalwe ngaphambi kokuthi othile athinte ukuxhumana kweselula. Imigqa emibili yokuphuma yanele. Yigcine kuthikithi kanye nesigxivizo sesikhathi.

wg show wg0
wg show wg0 latest-handshakes
ip route show default
ping -c 3 10.60.10.1

Bese uhlola ukwehluleka okwenzelwe lo mklamo. Donsa i-WAN eyinhloko bese uqinisekisa ukuthi umzila oyisisekelo wegatsha oya ehabhuni manje uphuma ngesixhumi seselula. Umhubhe awukwazi ukulungisa umzila wenyama ophukile, ngakho umzila wangaphandle osakhomba kuxhumano lokuphezulu olufile ukhiqiza ukuphela kwesikhathi kokuxhawula okubonakala njengenkinga yehabhu impela.

Uma umzila wangaphandle uboshiwe ngokusobala noma uhlelwe ngenqubomgomo, ukushintshwa kokwehluleka kufanele ukufake. Leyo gebe phakathi komklamo ofundeka kahle nohlala phansi ekuphazamisekeni ngokuvamile iyiyona kuphela into eshayiwe.

Lokho lo mklamo ongakuxazululi

Akukho lapha okuvumela ukuxhumana okungena egatsheni. Uma okuthile ehhovisi elikhulu kufanele kushayele isiza seselula, isiqondiso somhubhe asilungile kuleyo mfuneko, futhi i-DNS eguqukayo ibuyekeza igama kuphela. Ukuhumusha komhlinzeki, inqubomgomo yokungena kanye nokuvuselela kwiklayenti kwephoyinti lokugcina konke kuhlala endleleni, futhi irekhodi elishintshiwe alikwazi ukuvula i-NAT yezinga lomhlinzeki.

Gcina isiqalo segatsha sehlukile kunayo yonke enye isiza, futhi unciphise lokho ingxenye yayo ezodlulisa. Iphoyinti lokugcina elizinzile lehabhu lenza ukuthola kube lula futhi akwenzi lutho ekuklameni komzila, ekuhleleni amakheli noma embuzweni wokuthi yimiphi imizila yohlelo lokusebenza ehlala phansi ekushintsheni.

Bhala izinto ezine ku-runbook: ubani oqala, yiziphi iziqalo ezivunyelwe, i-keepalive yinde kangakanani, nokuthi kwenzekani lapho ukuxhumana okuyisisekelo kuwa. Leyo migqa iyona edingwa ngempela umqondisi wakusasa ngehora lesithathu ebusuku.

Izihloko ezihlobene