Isho ngeqiniso ukuthi isigxivizo sesikhathi sokuxhawulana kwe-WireGuard sikutshela ini
Isikhathi sokuxhawulana akusona umlando wokuphequlula, kodwa sixhumanisa i-akhawunti nomcimbi. Qhathanisa okurekhodwa yi-WireGuard ne-OpenVPN, nokufihlwa ukunemba.
Umugqa owodwa othi «ukuxhawulana kokugcina, emizuzwini emibili edlule» ubukeka njengobufakazi bomsebenzi oqhubekayo futhi ubuthaka kunalokho. Umaka ukushintshana kokugcina kukhiye okuqediwe kwisilingani esisodwa, okwenzeka ngokwesibali sikhathi esingaguquki sokuvuselela ukhiye ngenkathi ithrafikhi ihamba futhi kuma lapho isilingani sithula. Ukuthi leso sikhathi sixhumanisa umuntu nanoma yini kuncike kuzihlonzi ezigcinwe eceleni kwaso kanye namawashi azo zombili izinhlelo. Nakhu ukuthi irekhodi liziphatha kanjani ezinqwabeni ezimbili ezivame kakhulu, nokuthi ukulifunda kuphambana kuphi.
Amarekhodi amabili, izincazelo ezimbili ezihlukene
I-WireGuard igcina isigxivizo sesikhathi sokuxhawulana esisodwa isilingani ngasinye, esishintshwa njalo lapho kuvuselelwa ukhiye, kanye nezibali zamabhayithi ohlangothini ngalunye. OpenVPN ngokuvamile irekhoda ukuqala kwesesheni, ukunqanyulwa koxhumano kanye nakho konke okungezwa izinga lemininingwane elilungisiwe, okwenza uhlobo lwerekhodi lube yisesheni hhayi ukushintshana kukhiye.
Lowo mehluko unquma ukuthi ukungabikho kusho ukuthini:
| Question | WireGuard handshake | OpenVPN session log |
|---|---|---|
| Did the peer send recently? | Strong hint within the rekey window | Not answered by start time alone |
| Did the peer stop? | Weak, because idle peers also stop rekeying | Only if a disconnect was written |
| What was visited? | Nothing | Nothing |
Kungani ukuxhawulana kungekona ukusetshenziswa okuqhubekayo
I-WireGuard ivuselela okhiye cishe njalo ngemizuzu emibili uma kukhona idatha okufanele ivikelwe, futhi isilingani esingenzi lutho simane sima. Ngakho ukuxhawulana okudala kungase kusho ukuthi i-laptop ilele, umsebenzisi wayeka ukusebenza, noma inethiwekhi yawisa amaphakethe okwakuzoqala ukushintshana okulandelayo. Isigxivizo sesikhathi siwumkhawulo ophansi womsebenzi, hhayi umlandeli wokunaka.
Iphutha eliphambene lilula ngokufanayo. Ithrafikhi ye-keepalive eqhubekayo igcina umhubhe ufudumele kudivayisi engenzi lutho, ngakho ukuxhawulana kwakamuva kungavela kumshini okungekho muntu oyithintile ihora lonke. Izibali zamabhayithi ziyasiza lapha, ngoba zihlukanisa isilingani esithumela idatha yangempela kuleso esishintshana kuphela ngama-keepalive, futhi zisho nokuthi yiluphi uhlangothi olwathwala umthamo. Akukho kulokhu okuveza indawo ekuyiwa kuyo, ikhasi noma umbuzo.
Izihlonzi zihamba nesigxivizo sesikhathi
Isikhathi esingenayo i-akhawunti, ukhiye womphakathi noma ikheli lomthombo siyintandane. Hlanganisa isigxivizo sesikhathi nobuwena besilingani futhi ukubhekwa kuba nokuxhumaniseka: ukhiye womphakathi uhlala ukhona naphezu kwezinguquko zamakheli, kanti ikheli lomthombo lingase labelwane ngamakhasimende amaningi ngemuva kokuhunyushwa kwamakheli komhlinzeki.
Lokho kungalingani yikho okushiywa yizingxoxo eziningi zobumfihlo. Ikheli libonakala lingenagama ngoba labelwaniwe, futhi ukhiye ubonakala ungowobuchwepheshe ngoba mude, kodwa ukhiye uyisihlonzi esizinzile. Ukugcina inkambu eyodwa nokulahla enye kushintsha ingozi yokuxhumana ngaphandle kokushintsha ukunemba okubonakalayo.
Ukuxhumana ngokwako ukukhathazeka okurekhodiwe. Ukuhlanganisa isikhathi sokuxhumana nomcimbi wokungena womhlinzeki, ithikithi losekelo noma irekhodi lokukhokha kungase kuxhumanise ubuwena nomsebenzi ngisho nalapho kungekho ndawo ekuyiwa kuyo eyake yabhalwa, futhi yikho ukubhanqa okubaluleke ngaphezu kokuhlela.
Ukuxhumana phakathi kwezinhlelo kudinga ukunakekela amawashi
Izinhlelo ezimbili ezibika isikhathi esifanayo azivamisile ukuvumelana kuze kufike umzuzwana. Esinye singase sisebenzise umehluko wesigaba sesikhathi ekukhipheni kwaso, esinye singase sisebenze ngawashi elingalungile ngamazuzwana ambalwa, futhi umshini obonakalayo ungase uphambuke ngemuva kokumiswa.
Ngaphambi kokuphetha ngokuthi izehlakalo ezimbili zenzeke ndawonye, guqula zombili ziye esigabeni esifanayo futhi uhlole umehluko kurekhodi elingakalungiswa hhayi ekubonisweni. Uma igebe olilinganisayo lincane kunokuphambuka okungenzeka, awunakho ukulandelana nhlobo.
Umthetho osebenzayo uwukugcina ukunemba okudingwa umsebenzi wokuxazulula izinkinga hhayi okungaphezulu. Inani lamasesheni ngehora liphendula umbuzo wokutholakala ngaphandle kokugcina umlando nge-akhawunti ngayinye, futhi ingqikithi ingase igcinwe isikhathi eside kakhulu kunemigqa elingakalungiswa eyavela kuyo.
Funda irekhodi ngemiyalo, hhayi ngomcabango
Printa izinkambu ozocabanga ngazo, kumayunithi agcinwa ithuluzi hhayi lawo akhonjiswa idashibhodi.
Le migqa emibili ikhombisa ubudala bokuxhawulana nezibali zamabhayithi kusilingani ngasinye se-WireGuard, bese kuba yinto efanayo evela kufayela lesimo le-OpenVPN:
wg show all latest-handshakes
wg show wg0 transfer
cat /run/openvpn/server.statusQhathanisa ubudala nesikhawu sokuvuselela ukhiye ngaphambi kokuphetha, futhi ufunde izibali kanye naso. Isilingani esinokuxhawulana kwakamuva nokudluliswa okucishe kube yiqanda sisihintshana ngama-keepalive, kanti isilingani esinokuxhawulana okudala nezibali ezinkulu besimatasa kwaze kwaba yilapho sima. Awukho umugqa osho ukuthi kwenziweni, futhi ukusho lokho ngokucacile kunembe kakhulu kunokusho ukuthi isigxivizo sesikhathi sifakazela ukuvakasha.