I-peer ye-WireGuard iphuma nge-WAN engafanele: izihlolo ezinhlanu ngokulandelana

Esangweni elinamaxhumanisi amaningi aphezulu, ukuxhawulana nokugeleza okudluliswayo kungathatha izindlela ezihlukene. Landela umthetho, uphawu, ukuhumusha kanye nempendulo ngalolo kulandelana.

Amaxhumanisi amabili aphezulu, isango elilodwa, kanye ne-peer ye-WireGuard okugcwele kuyo ithrafikhi evela njalo emugqeni wokulondoloza. Ukuxhawulana kuhlala kunempilo sonke isikhathi. Yingakho uphawu kulula ukulufunda ngokungalungile njengokonakala kwe-WireGuard esikhundleni sokonakala kokuhambisa.

Yenza izihlolo ezingezansi ngokulandelana. Ngayinye inombandela wokuma, futhi ukweqa phambili ngokuvamile kuveza impendulo engalungile eqinisekile.

Hlukanisa ukuxhawulana nokugeleza okudluliswayo

Ukushintshana kwe-peer okubethelwe kunendlela yephoyinti lokugcina eya ekhelini lomphakathi leseva. Ithrafikhi yeklayenti edluliswayo inenye indawo ekuyiwa kuyo futhi ingase ikhethwe izimpawu noma imithetho yenqubomgomo. Lezi yizinqumo ezimbili zokuhambisa ezihlanganyela isixhumanisi esisodwa. Ukuthatha esisodwa njengobufakazi ngomunye iyiphutha lokuqala.

Yima ngokushesha lapho uzithola ucabanga ngokuxhawulana. Kubufakazi mayelana nendlela yephoyinti lokugcina kuphela.

Funda umthetho wenqubomgomo, hhayi ithebula elizenzakalelayo

Ithebula elizenzakalelayo likhombisa okwenzeka lapho kungekho mthetho wenqubomgomo ohambisanayo. Esangweni elihambisa ngomthombo, uphawu noma indawo ekuyiwa kuyo, umthetho onqumayo uhlala kwenye indawo. Ithebula elijwayelekile lingabonakala linengqondo ngokuphelele kuyilapho ukukhetha kwangempela kwenziwa phezulu kwalo.

ip rule show
ip route show table main
ip -4 route get 203.0.113.9 from 10.30.8.2

Funda imithetho yenqubomgomo namathebula ekhomba kuwo. Bese uqinisekisa ukuthi imuphi umthetho ohambisana nokugeleza kwakho kokuhlola. Umthetho okhomba esixhumanisini esingasalethi isixhumanisi esiphezulu okuhlosiwe uyinto etholakele, hhayi imininingwane. Ukusesha kwendlela ekugcineni kukhombisa impendulo ngokushesha okukhulu kunokufunda ithebula nokuqagela.

Hlola uphawu nokuhumusha ndawonye

Ukuhambisa ngenqubomgomo kuncike kuphawu lwephakethe olubekwe ngaphambili kuketango. Uma umthetho wokumaka weqa ithrafikhi yakho, ukugeleza kuwela kuthebula eliyinhloko futhi kuphume ngakho konke okuyizenzakalelayo lapho. Amaphakethe adluliswayo avame ukweqa amaketango abhalelwe ithrafikhi ekhiqizwa endaweni.

nft list chain inet filter prerouting
conntrack -L -s 10.30.8.2 2>/dev/null | head
ip -s link show dev eth1

Ukuhumusha kufanele kuvumelane nesixhumanisi esiphezulu esithwala ukugeleza. Umthetho ohumusha ekhelini eliyinhloko ngenkathi iphakethe liphuma ngomugqa wokulondoloza udala izimpendulo eziqondiswe esixhumanisini ukugeleza okungakaze kusisebenzise. Hlola umbandela wesixhumanisi womthetho wokuhumusha uqobo. Umthetho ongenambandela usebenza kuze kusetshenziswe isixhumanisi sesibili esiphezulu, bese wehluleka ngendlela ebonakala njengephuma phakathi ngezikhathi.

Bheka ukuthi yisiphi isixhumanisi esithwala impendulo

Thwebula kuzo zombili izixhumanisi eziphezulu ngenkathi isicelo esisodwa sisebenza. Bhala phansi ukuthi yisiphi isixhumanisi esithwala isicelo nesiphi esithwala impendulo. Izindlela ezingalingani kulula kakhulu ukuzibona kunokuzibikezela.

Uma impendulo ifika ngosixhumanisi esingalungile esiphezulu, inkinga isuke isidlule kwi-WireGuard yaya ekulandeleni ukuxhumana noma ekuhumusheni. Akukho shintsho ekucushweni kwe-peer okuzolungisa lokho.

Shintsha into eyodwa ngendlela yokubuyela emuva

Gcina ukufinyelela ngekhonsoli noma ngaphandle kwebhendi ngaphambi kokuhlela imithetho yenqubomgomo esangweni. Yenza ushintsho olulodwa, hlola indawo efanayo egunyaziwe, bese uxhuma futhi uqinisekise ukuthi ukuxhawulana kusasebenzisa indlela yephoyinti lokugcina ehlosiwe. Engeza ukuhlolwa kwamanani emndenini wesibili wamakheli, ngoba inqubomgomo ye-v4 kuphela ishiya iphutha elifanayo livulekile.

Bhala ukuthi yisiphi isixhumanisi esiphezulu esisetshenziswe ukugeleza ngakunye. Lowo mbhalo wenza umbiko olandelayo ube ukuhlolwa kwemizuzu emibili esikhundleni sentambama yonke. amanothi e-WireGuard mayelana nezikhala zamagama nokuhambisa achaza indlela yokuhlukanisa ngamabomu indlela yephoyinti lokugcina kuthrafikhi ehanjiswe emhubheni, okuvame ukuba mhlophe kakhulu kunokukopisha isisombululo sokuzungeza sendlela ezenzakalelayo.

Izihloko ezihlobene