I-WireGuard isebenza kuphela ngemva kokuba iseva ithumele: ulwazi lwephoyinti lokugcina

Ithubhu libonakala lisebenza kuphela ngemva kokuba iseva iqale ithumele okuthile. Qala kumxhumi futhi akwenzeki lutho, linda imizuzwana embalwa, zama futhi futhi kuyaphumelela. Ukuxilongwa okuvamile i-NAT ephukile, futhi ukuxilongwa okuvamile akulungile. Okwashintshayo ukuthi uhlangothi olulodwa lwafunda ukuthi olunye luhlala kuphi.

Ulwazi lwephoyinti lokugcina, hhayi ukufinyeleleka

Uhlangothi lwe-WireGuard ngeke luqale ukuxhawulisana kuze kube yilapho lwazi ukuthi luzothumela kuphi. Ukulungiswa kunikeza lokho njengephoyinti lokugcina lekheli kanye nembobo, futhi isimo esisebenzayo silandela iphoyinti lokugcina elikholelwa kulo njengamanje.

wg show liphrinta izinhlangothi zombili zaleso sithombe, futhi uhlangothi olungenayo iphoyinti lokugcina kokuphumayo alunakuqala lutho, noma ngabe ukhiye womphakathi kanye neziqalo ezivunyelwe kulungile kangakanani. Qhathanisa umbono womxhumi nombono weseva ngaphambi kokushintsha noma yimuphi umthetho, ngoba laba ababili ngokuvamile abavumelani ngokuthi ubani wazi ini.

Uhlangothi lufunda kanjani iphoyinti lokugcina

I-WireGuard ithule ngamabomu. Lapho iphakethe eligunyazwe ngendlela efanele lifika livela ekhelini uhlangothi olwalungalindele, ukusetshenziswa kubuyekeza iphoyinti lokugcina lalolo hlangothi luye emthonjeni omusha, futhi yileyo ndlela ukuzulazula okusebenza ngayo kukhompyutha ephathekayo eshintsha amanethiwekhi. Leyo ndlela yokuziphatha ichaza ukuncika endleleni: uma iseva ithumela kuqala futhi iphakethe layo lifinyelela umxhumi, umxhumi ufunda ikheli lamanje leseva futhi angaphendula. Kuze kube yileso sikhathi akanayo indawo yokuthumela. Indlela iwukuzulazula okugunyaziwe hhayi isinqamuleli sokwethemba ekusetshenzisweni kokuqala, ngoba iphakethe kwakumele livumeleke ngaphambi kokuba iphoyinti lokugcina lihambe.

Imibhalo yamathuluzi ye-wg ichaza lokho kubuyekezwa, futhi kufanelekile ukuyifunda kanye uma uzoklama ngakho.

Ukuhumusha okunesimo kwengeza indlela yako

Lapho i-UDP idlula kusango elihumushayo, isango lenza isimo sephakethe lokuqala elilibonayo. RFC 4787 ichaza leyo ndlela yokuziphatha kanye nezikhathi zokuphela eziqeda ukumephwa ekugcineni. Ukumephwa okungenzi lutho kuphelelwa yisikhathi, futhi iphakethe elingenayo livela ohlangothini olude lilahleka ngesango ngaphambi kokuba lifinyelele kumgcini. Ithubhu elalisebenza isikhathi sasekuseni siyeka ukuphendula ntambama ngenxa yalesi sizathu.

Lena indlela yesibili futhi ezimele ekhiqiza uphawu olufanayo lwendlela. Kokubili ulwazi lwephoyinti lokugcina nesimo sokuhumusha kufanele kulungile, futhi ukulungisa okukodwa akukulungisi okunye.

Lungiselela indlela oyifunayo ngempela

Kumxhumi okufanele aqale ukuxhumana, faka iphoyinti lokugcina leseva esigabeni sezinhlangothi zomxhumi futhi ulishiye lapho. Ukuthembela ekutheni iseva izothumela kuqala wukuthembela emhlanganweni wamagama ekulandelaneni kwethrafikhi okuzoshintsha kunethiwekhi ethule. Ukulungiswa kufanele kumemezele indlela ehlosiwe, hhayi ukuyithola.

Kuhlango lwangemva kokuhumusha okufanele luhlale lifinyeleleka, vula i-keepalive eqhubekayo ngalolo hlangothi. I-keepalive njalo ngemizuzwana engu-25 iyinkinga yokuqala evamile, futhi inhloso yayo wukugcina ukumephwa kuvulekile hhayi ukuhlola ithubhu. Khetha uhlangothi olulodwa oluzoyithwala, ngoba ukuyivula ezinhlangothini zombili kuphinda kabili ithrafikhi nomsindo wamarekhodi ngaphandle kokuthuthukisa umphumela.

Qhathanisa isimo ngaphambi nangemva kwesikhuthazi

Thwebula imibono emibili ngesikhathi sokwehluleka, bese uphinda ngemva kokuba iseva ithumele. Umyalo wokuqala ukhombisa amaphoyinti okugcina kanye nobudala bokuxhawulisana. Owesibili ukhombisa ukuthi ingabe kukhona ukufakwa kokuhumusha kombobo. Ukuthwebula kukhombisa ukuthi iyiphi indlela eyawela ngempela intambo, futhi ukuhlolwa komzila kuqinisekisa ukuthi umxhumi akathumeli leyo thrafikhi kwenye indawo ngokuphelele.

wg show
conntrack -L -p udp 2>/dev/null | grep 51820
tcpdump -ni any -c 20 'udp port 51820'
ip route get 198.51.100.7

Bhala ikholomu yephoyinti lokugcina kanye nokufakwa kokuhumusha ndawonye. Uhlangothi olungenayo iphoyinti lokugcina kanye nesango elingenakho ukumephwa kuyizinkinga ezimbili ezihlukene. Kungenye yazo kuphela okulungiswa yi-keepalive.