I-loop yomzila ozenzakalelayo we-WireGuard: thola indlela yendawo yokugcina

Isixhumi siyaphakama, ukulungiselelwa kozakwethu kubonakala kulungile, futhi akukho kubambisana kwezandla okuqedwa nakancane. Ukwengeza umzila ozenzakalelayo ngomhubhe yisinyathelo esivame ukubangela lokhu: ithebula lomzila elifanayo manje linquma ukuthi amaphakethe ashifriwe omhubhe kufanele aye kuphi, futhi impendulo eliyikhiqizayo ibuyela emhubheni. Akukho okungathwala iphakethe langaphandle elingathwala elangaphakathi, ngakho ukuxhumana kuyama ngaphambi kokuba kuqale. Ukulungisa kuncane, kodwa kunokulandelana, futhi ukuqinisekisa kubaluleke kakhulu kunokuhlela.

Qinisekisa i-loop ngaphambi kokushintsha umzila

Funda ikheli lamanje lendawo yokugcina kozakwethu bese ubuza isigaxa somzila ukuthi iphakethe eliya kulelo kheli lizoya kuphi. Uma impendulo isho isixhumi somhubhe, i-loop iqinisekisiwe futhi akukho ukuxilongwa okwengeziwe okudingekayo. Gcina kokubili okuphumayo kurekhodi yezinguquko ngaphambi kokuthinta noma yini, ngoba ukuqhathanisa ngemuva kokulungisa imiyalo efanayo emibili. I-loop ayicashile uma isibonakele; ubunzima bokuthi isixhumi sibonakala siphilile ngenkathi lokhu kwenzeka.

sudo wg show wg1 endpoints
ip route get 198.51.100.20
ip rule show

Faka imithetho yenqubomgomo kulokho kuqoshwa. Umzila ozenzakalelayo obonakala ulungile kuthebula eliyinhloko usengahlulwa umthetho okhetha ithebula elihlukile kuthrafikhi emakiwe noma engamakiwe, futhi i-loop izophinda ivele ngethebula lomzila elibonakala lilungile.

Funda indlela yendawo yokugcina, hhayi indlela yomhubhe

Indlela yendawo yokugcina umzila amadathagramu ashifriwe awuthathayo aya ekhelini lomphakathi lozakwethu, futhi kufanele ihlale ingaphandle komhubhe ngesikhathi umhubhe ukhona. Indlela yomhubhe yikho konke ozakwethu avunyelwe ukukuthwala. Lezi zindlela ezimbili zabelana ngethebula elilodwa lomzila, futhi yikho kanye okwenza ukungena okukodwa okubamba konke kungawisa komunye nomunye. Ukuhlukanisa uthrafikhi womhubhe nokuthutha komhubhe ngokwawo yinkinga yonke yokuklama, futhi ithuluzi ngalinye elisekelwayo liyixazulula endaweni ethile ngendlela ehluke kancane.

Hlola yomibili imindeni yamakheli ngokwahlukene uma isixhumi sithwala yomibili. Ukukhishwa kwe-IPv4 okusebenzayo akusho lutho mayelana nokuthi indawo yokugcina ye-IPv6 isafinyeleleka yini, futhi ukulungiselelwa okuxubile kungabonakala kusebenza kuze kukhethwe ikheli le-IPv6 lozakwethu.

Buyisela indlela yendawo yokugcina ngoshintsho olulodwa oluhambisanayo

Kunezindlela ezimbili ezisekelwayo, futhi ukuzixuba yikho okwenza ukulungiselelwa okusebenzayo kungabi nakulindeleka. Eyokuqala ukukhulula ithuluzi eliphethe isixhumi ukuthi liphathe wonke umhubhe: wg-quick linokuphathwa okukhethekile kobubanzi bozakwethu ozenzakalelayo obufaka ithebula elihlukile, imithetho yenqubomgomo kanye nophawu lwesokhethi, okugcina amaphakethe angaphandle ngaphandle komhubhe. Shiya lowo mshini uphelele esikhundleni sokuphinda wakhe ingxenye yawo ngesandla. Ukulungiselelwa okuxuba okuzenzakalelayo okwengezwe ngesandla nomphathi osevele efaka izimpawu nemithetho kuvame ukwehluleka ngemuva kokuxhuma kabusha, lapho umphathi ebhala kabusha isimo okwakucatshangwa yisinyathelo sesandla.

Eyesibili idizayini yesandla lapho indawo yokugcina ithola khona umzila oqondile womsingathi ngesango lomzimba. Engeza lowo mzila ngaphambi kowokuzenzakalelayo, shintsha esikhundleni sokwengeza ukuze ukungena okudala kungakwazi ukunqoba, bese uqinisekisa ukusesha ngemuva kwalokho.

sudo ip route replace 198.51.100.20/32 via 192.0.2.1 dev eth0
ip route get 198.51.100.20
sudo ip route add default dev wg1

Qinisekisa, bese ugcina indlela yokubuyela

Isigxivizo sesikhathi sokubambisana kwezandla esiqhubekayo siwubufakazi bokuqala, futhi sinamandla ukudlula isixhumi esikhona nje. Silandele ngokuhlolwa kohlelo lokusebenza ngomhubhe, bese wehlisa isixhumi ngamabomu futhi uqinisekise ukuthi umsingathi ubuyela esimweni esisebenzisekayo esikhundleni sokugcina umzila ozenzakalelayo okhomba endaweni engekho. Leso sinyathelo sokugcina yisona abantu abasigxumayo, futhi yisona esinquma ukuthi ukuqala kabusha kuzoshiya umshini ungenakuxhumana yini.

sudo wg show wg1 latest-handshakes
sudo wg-quick down wg1
ip route show default
ip route get 198.51.100.20

Ngaphambi kwakho konke lokhu, gcina isimo samanje somzila futhi uqiniseke ukuthi kunendlela yokungena engaxhomekekile emhubheni: ikhonsoli, ikheli lokuphatha elingaphandle kwebhendi noma uzakwethu osesizeni. Umshini okude olahlekelwa umzila wawo ozenzakalelayo awukwazi ukubuyiselwa ngoxhumano olusanda kulahleka, futhi isinyathelo esiphephile kunazo zonke encwadini yokusebenza yileso esithathwa ngaphambi komyalo wokuqala.