I-WireGuard isasebenzisa indawo yokugcina endala ngemva kwezinguquko ze-DNS

Umhubhe wayeka ukudlulisa ithrafikhi ngemva kokuba irekhodi le-DNS leseva lihambile, kanti igama lixazululwa ngendlela efanele kusuka kumshini ofanayo. Lawa maqiniso amabili awaphikisani. Ukuhlelwa kwe-WireGuard kuqukethe indawo yokugcina, futhi ithuluzi lixazulula igama ngesikhathi elisebenzisa ngaso lokho kuhlelwa, ngakho isixhumi esisebenzayo singaqhubeka sisebenzisa ikheli elalilithola emahoreni adlule. Hlola ukuthi isixhumi sisebenzisa ini ngaphambi kokushintsha okhiye noma ukuthinta ububanzi bomhubhe.

Igama lixazululwa kanye, hhayi njalo

Ukuhlelwa okuyisisekelo kwe-WireGuard kuthatha indawo yokugcina njengekheli nechweba, futhi ithuluzi eliphakamisa isixhumi lixazulula igama lomsingathi ngaleso sikhathi. Akukho lutho kumthetho oyisisekelo olubuza i-DNS ngokuhlela, futhi uhlelo lokusebenza lwekhasimende lungangeza ukuziphatha kwalo kokuvuselela phezulu. Ukubhala ikheli elixazululiwe, umndeni nechweba eceleni kwegama kwenza lelo gebe libonakale. Ngaphandle kwalelo rekhodi ukuhlelwa kubonakala kulungile kuyilapho isixhumi sikhuluma nendawo enye.

Kukhona ukuvuselela okukodwa kwangempela okuzenzakalelayo, futhi kufanele kwaziwe ngoba kufana nokuvuselela kwe-DNS ngaphandle kokuba njalo. Indawo yokugcina yozakwethu ingahamba lapho ithrafikhi eqinisekisiwe ngendlela efanele ifika isuka ekhelini elisha, okuyinto yokuzulazula hhayi ukuxazululwa kwegama. Ilandela uzakwethu, ngakho ayikwazi ukuthola iseva entsha engahlobene neyayingakaze ixhumane nayo indawo yokugcina endala.

Qhathanisa irekhodi nekheli elisetshenziswayo

Buza igama elibhaliwe ngokusebenzisa isixazululi esisetshenziswa yikhasimende, bese ubuza isixhumi ukuthi siphethe yiphi indawo yokugcina. Lezi zimpendulo ezimbili ziwukuqhathanisa okunquma ingxenye esele yaleli khasi:

dig +short vpn.example.net
wg show wg0 endpoints
wg show wg0 latest-handshakes

Imiyalo engaphansi ye-show esetshenziswa yilezi zintambo ibhalwe encwadini ye-wg(8). Qhathanisa nomndeni wekheli, hhayi ikheli kuphela, ngoba irekhodi elithole ukufakwa kwe-IPv6 liwukuqhathanisa okuhlukile kunalelo elishintshe ikheli le-IPv4. Uma indawo yokugcina ihlukile kurekhodi, isixhumi sisebenza ngolwazi oluphelelwe yisikhathi futhi igama lalingeyona inkinga. Uma zivumelana futhi umhubhe usahluleka, iya kumlaleli nasemthethweni esikhundleni sephrofayela.

Isigxivizo sesikhathi sokuxhawula sikuleso sigaba ngoba indawo yokugcina iyodwa ayisho ukuthi uzakwethu angafinyeleleka yini. Isigxivizo sesikhathi esiphelelwe yisikhathi eceleni kwendawo yokugcina efanele siyinkinga yomzila, hhayi yokuxazulula, futhi lowo mehluko ushintsha okuzothinta ngokulandelayo.

Qala kabusha ngomphathi wesixhumi

Ngemva kokuqinisekiswa ukuthi indawo yokugcina iphelelwe yisikhathi, yivuselele ngendlela ephethe isixhumi esikhundleni sokuhlela ukuhlelwa okusebenzayo. Esixhumini esiqalwe yi-wg-quick lokho kuwukwehla nokukhuphuka, kuyunithi ye-systemd ukuqala kabusha, futhi esixhumini esiphethwe umphathi kuwushintsho olwenziwe kulowo mphathi, ngoba ukuhlela ngesikhathi sokusebenza kuyasuswa ekusetshenzisweni okulandelayo:

wg-quick down wg0 && wg-quick up wg0
systemctl restart wg-quick@wg0

Bese uqinisekisa ukuthi umlaleli ongena esikhundleni kanye nobuwena bakhe kuwukhonza obukuhlosile. Ukuhamba kwe-DNS akulona ushintsho lobuwena, ngakho akufanele kube yithuba lokuthemba ukhiye ongakakaqinisekisi. Uma isixhumi manje sibika ikheli elisha futhi kungakabi nokuxhawula, iphutha selidlulele emzileni omusha wenethiwekhi noma kumlaleli, lokho kuyinqubekela phambili hhayi iphutha elifanayo kabili.

Ukuxhawula kuqala, bese kuba umzila wedatha

Hlukanisa imiphumela emibili ngaphambi kokukhetha uhlu lokuhlola. Ukuxhawula okuphumelelayo ngaphansi kohlelo oluhlulekayo kuyinkinga yomzila wedatha: imizila, izandulela ezivunyelwe noma i-DNS ngaphakathi komhubhe. Ukuxhawula okungakaze kwenzeke kuyinkinga yokufinyeleleka noma yobuwena endaweni yokugcina. Ukuhlanganisa kokubili kwenza umbiko ongenakulingiswa muntu kanye nerekhodi lezinguquko elinezinguquko ezintathu ezingahlobene.

Bhala igama, ikheli elixazululiwe, indawo yokugcina esetshenziswayo nokuthi ukuxhawula kwaqedwa yini. Lawa maqiniso amane aphendula umbuzo leli phutha eliwubuza njalo, futhi aguqula isigameko esilandelayo sibe ukuhlola kwemizuzu emibili. Ukunakekelwa kwegama nokwamukelwa kwekhasimende kuhlala kuyimisebenzi ehlukene: ukulungisa irekhodi akwenzi ukwamukelwa, futhi ukuqala kabusha isixhumi akulungisi irekhodi elisalungile.