Umhubhe ogcwele we-WireGuard: i-AllowedIPs 0.0.0.0/0 ayanele

Ukufaka 0.0.0.0/0, ::/0 ku-AllowedIPs yozakwethu yisinyathelo esikhumbulwa yiwo wonke umuntu, futhi sinquma kuphela ukuthi uthini umsebenzi wokuxhumana ozakwethu avunyelwe ukuwuthwala. Lezi ziqalo azidali mzila, azidluliseli lutho kolunye uhlangothi, futhi zishiya isixazululi sohlelo ngalunye kanye lapho esasikhona. Izinto ezine ezihlukene kufanele zibe yiqiniso ngesikhathi esisodwa ukuze umhubhe ogcwele ube ngumhubhe ogcwele ngempela, futhi kungcono ukuzihlola ngokulandelana okungezansi, ngoba ukuhlola kwakamuva angeke kusindise okwangaphambili. Ukuhlola ngakunye okungezansi kuyiqiniso elingafundwa kumsakazo, hhayi isilungiselelo othemba ukuthi sisetshenzisiwe.

Isiqalo sozakwethu sikhetha ini, futhi asikhethi ini

I-AllowedIPs iyisikhethi futhi iyimvume ngesikhathi esisodwa. Itshela uhlangothi lwasekhaya ukuthi yiziphi izindawo ezingathunyelwa kulo zakwethu, futhi itshela uhlangothi olwamukelayo ukuthi yimaphi amakheli omthombo lo zakwethu angawethula. Lowo umsebenzi wonke. Akukho lutho kuleyo ncazelo olwakha umzila kumsakazi, oluvula ukudlulisela ohlangothini olukude, noma oluthinta ukuxazululwa kwamagama.

Yingakho ukuhlelwa kungabonakala kuphelele futhi kuziphathe njengomhubhe ohlukanisiwe. Isiqalo sithi uzakwethu uzokwamukela konke; ithebula lemizila yomsakazi linquma okufika lapho ngempela, futhi isango linquma ukuthi kukhona okuphumayo yini. Asikho ngesinye salezi zincomo ezintathu esihlala esigabeni sikazakwethu.

Ukuhambisa iklayenti emzileni, hhayi uhlu lozakwethu kuphela

Abaphathi abafana no-wg-quick bahlela ithebula lemizila yomsakazi esikhundleni sakho, yingakho amafayela amabili afanayo okuhlelwa eziphatha ngendlela ehlukile kuye ngokuthi isixhumi esibonakalayo senyuke kanjani. Iphrofayela encane yanele ukufundwa ngomoya owodwa:

[Interface]
Address = 10.8.0.2/32
DNS = 10.8.0.1

[Peer]
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn.example.net:51820

Imininingwane emibili ithwala umsebenzi. Inkambu Address yi isiqalo somsakazi esisodwa hhayi isethi engaphansi iklayenti elicabanga ukuthi ingeyakhe, futhi umphathi yiwona oguqula i-AllowedIPs ezenzakalelayo ibe umzila ozenzakalelayo wangempela. Phakamisa lifanayo lelo fayela nge ip link kanye ne wg setconf futhi awekho umzila ozovela nhlobo, okubonakala njengomhubhe ophukile kodwa empeleni umhubhe ophilile odlule isinyathelo somzila. Incwadi ka-wg-quick ichaza ukuhambisa emzileni kanye Table nokuziphatha okwengezwa yilabo baphathi.

Funda umphumela hhayi ifayela: ip route get 1.1.1.1 kufanele isho isixhumi somhubhe, futhi wg show kufanele ibike ukuxhawula kwakamuva ngesibali sokudlulisa esinyakazayo. Ukuxhawula okungenamzila kusho ukuthi umphathi akazange asebenze, futhi ukuhlela iphrofayela futhi ngeke kulungise lokho. Qala isixhumi ngendlela umsebenzisi azosiqala ngayo, kungenjalo ukuhlola kukala i-shell yakho esikhundleni sokuthunyelwa.

Ukugcina iphoyinti lokugcina ngaphandle komhubhe

Umhubhe ogcwele ubamba yonke indawo, kuhlanganise naleyo okufanele akhulume nayo ukuze abekhona. Abaphathi bakhulisa lokhu ngokwengeza umzila womsakazi waphoyinti lokugcina ngesango lokuqala, yingakho ukuhlelwa okulungile cishe njalo kuqukethe ukukhululwa okukodwa okwenziwe ngamabomu. Ukusebenzisa uhhafu wokuhlelwa ngomphathi kanye nohhafu wesibili ngesandla kuyindlela evamile okulahleka ngayo lokhu kukhululwa.

Uma iphoyinti lokugcina liyigama lomsakazi elixazulula kumakheli amaningi, noma emndenini ongawuthwali, ukukhululwa kuguga kabi futhi umhubhe ungahluleka ngemva kokuxhuma kabusha okwakubonakala kujwayelekile. Namathisela iphoyinti lokugcina ekhelini olilawulayo, noma qinisekisa ukuthi umphathi ulihlola kabusha, futhi ufunde kabusha umzila womsakazi ngemva kwakho konke ukushintsha kwenethiwekhi.

Indlela efanayo ichaza ukuthi kungani umhubhe ogcwele nesango lokubamba kulwa. Isango lilindele ukuvimba umsebenzi wokuxhumana osewubanjwe umhubhe wakho manje, ngakho ezintanjeni zamahhotela nesikhumulo sezindiza uphakamisa umhubhe ngemva kokungena esangweni, hhayi ngaphambili.

Ukudlulisela kanye nomzila wokubuya esangweni

Esangweni, vula ukudlulisela emndenini oyithwalayo, vumela uchungechunge lwe-forward kuzo zombili izinhlangothi lapho uhumusha, futhi uqinisekise umzila wokubuya ngokusesha okuqondene nomthombo. Akukho kwalokhu okuvela ekuxhawuleni okuphumelelayo, ngoba ukuxhawula kufakazela kuphela ukuthi ozakwethu ababili bangashintshana nge-UDP. Akusho lutho ngokwenzeka kuphakethe elikhishwe ku-capsule ngemva kwalokho.

sysctl net.ipv4.ip_forward net.ipv6.conf.all.forwarding
ip route get 1.1.1.1 from 10.8.0.2

Ukusesha kusebenza esangweni hhayi kuklayenti, kungenjalo uzofunda elinye ithebula lemizila. Uma sisho isixhumi esingalungile, noma sibika ukuthi awukho umzila, khona-ke akukho kushintsha ohlangothini lweklayenti okuzokhiqiza indawo yokuphuma ku-inthanethi. Lapho isango lihumusha amakheli eklayenti lapho liphuma, impendulo incike kuleso simo sokuhumusha, ngakho umthetho kufanele ube khona kuzo zombili izinhlangothi zokugeleza hhayi ohlangothini oluphumayo kuphela.

I-DNS kanye nesimo sokwehluleka, kuhlolwe ngokwehlukana

Iphrothokholi ngokwayo ayilungiseleli isixazululi sanoma yiluphi uhlelo. wg-quick isebenzisa umugqa DNS ngokuhlanganiswa kwesixazululi sokwabiwa, iziqukathi kanye neziphequluli ezinama-stack azo zingakushaya indiva, ngakho igama lingahluleka kuyilapho umhubhe uthwala amaphakethe ngokuphelele. Hlola ngegama lomsakazi hhayi ngekheli, futhi ubhale ukuthi iyiphi iseva ephendulile esikhundleni sokucabanga ukuthi yileyo esekuhlelweni ephendulile.

Imindeni yamakheli iwukuhlola okuhlukile okunempendulo ehlukile. Umzila ozenzakalelayo we-v4 awusho lutho ngokuzokwenziwa ukuxhumana kwe-v6 kohlelo oluthile, futhi umhubhe odonsa umndeni wesibili ngokuthula mubi kunalowo ohluleka ngomsindo. Buza igama kuwo wonke umndeni, funda isixhumi esisetshenziswe yisicelo ngasinye, futhi uhlole izibali zokuhumusha ngaphambi nangemva, ngoba umthetho ongafani nanoma yini ubonakala ufaniswa nomthetho ongekho.

Ekugcineni, hlola isimo osifunayo lapho umhubhe uma. Umhubhe ogcwele kufanele wehluleke uvalekile emsebenzini wokuxhumana oyishoyo: uma isixhumi sehla futhi izinhlelo ziqhubeka ngokuthula ngoxhumano lomzimba, umklamo uwumhubhe ohlukanisiwe onezinyathelo ezengeziwe. Bhala indlela yokwehluleka ehlosiwe, yihlole ngamabomu, futhi qeda ngokubhala izimpendulo ezine — ukuphi umphathi ophakamisa isixhumi, ukuphi umzila othwala ozenzakalelayo, ubani odluliselayo futhi ohumushayo esangweni, futhi yisiphi isixazululi esiphendulayo.