Ukhiye wangasese lapha, ukhiye womphakathi laphaya: okhiye be-WireGuard
Ukhiye wakho wangasese uhlala kudivayisi yakho; umbhalo wozakwabo ugcina ukhiye womphakathi wangakolunye uhlangothi. Yabelana ngengxenye yomphakathi kuphela, futhi unikeze idivayisi ngayinye ubunikazi bayo.
Iningi lokwehluleka kwe-WireGuard elakhiwe ngesandla lihlala ekutheni yikuphi ukhiye okwahamba kuphi. Ingxenye ye-interface iphethe ukhiye wangasese wedivayisi oyilungisayo, kuyilapho ingxenye yozakwabo iphethe ukhiye womphakathi womshini ongakolunye uhlangothi. Ukushintsha lezo zingxenye, noma ukunamathisela okungalungile, kukhiqiza ukuxhawula okungaqedi ne-log engalokothi isho ukhiye. Yenza izivivinyo ezine ngezansi ngokulandelana ngaphambi kokuthinta i-AllowedIPs noma i-DNS.
Okhiye ababili, izinhlangothi ezimbili
Ukhiye wangasese ungowokwedivayisi eyodwa ngqo futhi uhlala engxenyeni ye-interface yaleyo divayisi. Ingxenye yawo yomphakathi iyona edingwa yizo zonke ezinye izingcweti ukuze zibone idivayisi, futhi amathuluzi ayikhipha esikhundleni sokuyiqamba. Kusiphakamiso, ukhiye womphakathi wedivayisi yakho uvela njengombhalo wozakwabo; kudivayisi yakho, ukhiye womphakathi wesiphakamiso uthatha leyo ndima. Ukufunda ikhonsoli ngokuzwakalayo ngalawa magama kubamba iningi lokudideka ngaphambi kokuba kufinyelele ekuxhawuleni.
Umyalo wg uphrinta lokho i-interface yasendaweni ekusebenzisayo ngempela, kuhlangene nakho kokubili okhiye bomphakathi. Yingakho kuyindlela esheshayo yokuhlukanisa iphutha lokulungisa kanye nenkinga yokuxhumana:
wg show
wg show interfacesUmphumela wokuqala ubala umzakwabo ngamunye nokhiye wakhe womphakathi, iphoyinti lokugcina alisebenzisile kanye nobudala bokuxhawula kwakhe kokugcina. Ubudala bokuxhawula obuthi «akukaze» kolunye uhlangothi futhi bube butsha kolunye kukhombisa ukhiye owamukelwa uhlamvu olulodwa. Umyalo wesibili usho amagama ezingxenye zokuxhumana ongazihlola kabanzi.
Okufanele kwabiwe nokungafanele kwabiwe neze
Ukhiye womphakathi wenzelwe ukudluliselwa, nakuba usabonisa ubudlelwano bedivayisi, yingakho ukuwuthumela kumlawuli oyiwelele kuhlukile ekukushicileleni. Ukhiye wangasese awusoze washiya idivayisi eyawukhiqizayo. Iphrofayela ekhishiwe noma ikhodi ye-QR igcina ikhonsoli yonke kuhlangene nalowo khiye wangasese, ngakho akukho kokubili okuphephile ukudluliselwa, futhi ukufihla umbhalo esithombeni akushintshi lutho. Okhiye ababiwe ngaphambili bangokuzikhethela futhi bayimfihlo efanayo, futhi izinhlangothi zombili kufanele ziphathe inani elifanayo, ngaphandle kwalokho ukuxhawula kuma kuleso sigaba.
Omunye umehluko kufanele ushiwo ngqo: iphoyinti lokugcina iyikheli kanye nechweba, hhayi ukhiye neze. Ukunamathisela ukhiye womphakathi enkambeni yephoyinti lokugcina, noma ikheli enkambeni yokhiye, kukhiqiza iphrofayela ehlaziywayo bese ingenzi lutho. Amathuluzi ngeke akubambe lokho, ngoba zombili izinkambo ziyizintambo nje. Ukuqala okusheshayo kwe-WireGuard kukhombisa uchungechunge lokukhiqiza nokukhipha emugqeni owodwa.
Idivayisi eyodwa, umbhalo wozakwabo owodwa
Lapho insizakalo ikuvumela khona, idivayisi ngayinye kufanele iphathe ubunikazi bayo bozakwabo. Ukunamathisela iphrofayela ephelele yekhompyutha ephathekayo ocingweni kufiphalisa ukuthi iyiphi idivayisi ephethe lobo bunikazi kusiphakamiso futhi kwenza kube nzima ukuhoxisa ucingo olulodwa olulahlekile. Uma ukhiye wangasese uvuzela, susa imvume yozakwabo endala kusiphakamiso bese uhlinzeka okunye esikhundleni. Ukususa ifayela lasendaweni akususi umbhalo wesiphakamiso, futhi ukhiye omusha weklayenti awusizi muntu uze usiphakamiso wazi ingxenye yawo yomphakathi.
Gcina ukuhlotshaniswa kwedivayisi nokhiye womphakathi eduze kohlu lwamakheli. Lolo hlu yilona olwenza ukuhoxisa kube umsebenzi wemizuzu emibili esikhundleni sentambama yonke.
Okusahluleka ngemuva kokuxhawula
Amapheya okhiye abona izingcweti; awanqumi ukuziphatha kwenethiwekhi. I-AllowedIPs ihlobanisa ububanzi bamakheli nomzakwabo, futhi imizila ezungezile ilawulwa yiklayenti noma ithuluzi lokusetha. Isibonakaliso ngokuvamile sisho ukuthi iyiphi ingqimba okufanele ivulwe ngokulandelayo:
| What you see | Which key problem it usually means | Where to look first |
|---|---|---|
| Handshake age stays at never on both ends | Peer public key missing, or an endpoint pointing at nothing | wg show, then the endpoint value |
| Handshake completes on one side only | The two ends hold different public keys for each other | wg show on both hosts |
| Handshake works, then no traffic | AllowedIPs or routes rather than keys | wg show and the route table |
| Worked until a key was regenerated | The peer entry still holds the old public key | Compare both public keys, then update the peer |
I-DNS ingahluleka ngemuva kokuba izinhlangothi zombili ziqinisekisile ngendlela efanele, futhi uhlelo lokusebenza lungahluleka ngenkathi ithaneli ngokwalo linempilo, ngakho ukuxhawula okusebenzayo akusona isiphetho sokuxilonga. Okhiye futhi abasho lutho mayelana nomkhuba wokuloga womsebenzisi noma ukuthi iwebhusayiti iyabona yini i-akhawunti yakho, futhi leyo mibuzo ingeyenye indawo. Dlulela ezingqimbeni zenethiwekhi uma izivivinyo ezine sezidlulile, ngoba ukhiye ongekho akusona inkinga yomzila ecashile.