I-WireGuard ithumela idatha kodwa ayitholi lutho olubuyayo: yiluphi uhlangothi?
Isibali sokuthumela esinyukayo siyisiqondiso, akusona isifo esitholakele. Nthola ukuthi isicelo asizange siphume emhubheni noma impendulo ayizange ibuye ngaphambi kokushintsha noma yini.
Izibali zokuthumela ezinyukayo ngenkathi isibali sokwamukela sihala kuziro zichaza isiqondiso, hhayi ukuxilongwa. Ukufundwa okufanayo kuvela lapho umlingani engakaze aqedele ukuxhawulisana, lapho umkhombandlela ukhetha umlingani ongafanele, lapho uhlangothi olukude lungenayo indlela yokubuya, nalapho isihlungi silahla impendulo endleleni eya ekhaya. Ngakunye kwalokhu kulungiswa endaweni ehlukile.
Ukuqhathanisa okufinyeza umsebenzi kuphakathi kwesicelo esingazange siphume emhubheni nempendulo engazange ibuye. Ukuthwebula okukodwa kusixhumi esifanele kunquma phakathi kwakho kokubili.
Izibali zichaza umthamo, hhayi uhlangothi lwephutha
Izibali ze-WireGuard zirekhoda lokho isixhumi esikunikeze umlingani nalokho esikutholile kuye. Azisho ukuthi yimuphi umkhombandlela, yimuphi umlingani noma yiluphi uhhafu lokushintshana olwehlulekile. Ithrafikhi yangemuva yenza izingqikithi zingabi nolwazi oluthe xaxa, ngoba amanye amabhayithi kungase kube yimilayezo yokugcina ukuxhumana noma ukuhamba okungahlobene. Zifunde njengophawu lokuthi isixhumi siyasebenza, bese uyeka ukuzithatha njengobufakazi.
Iqiniso lokuqala eliwusizo ukuthi ukuxhawulisana kusebenza yini okwamanje. Ngaphandle kwakho akukho okubethelwe kulo mlingani futhi isibali sokwamukela asinasizathu sokunyakaza.
Ukukhethwa komlingani noma indlela yempendulo: izincazelo ezimbili
Incazelo yokuqala ukuthi iphakethe alizange lifinyelele kumlingani obekuhloswe kuye, ngoba indlela yayikhomba kwenye indawo noma iziqalo ezivunyelwe zomlingani zazingayibandakanyi indawo eyiwa kuyo. Eyesibili ukuthi iphakethe lafika kodwa impendulo ayikwazanga ukubuya, futhi lokhu kuyinkinga yomzila ekugcineni okude. Ithebula lihlukanisa kokubili ngokwalokho obekuzobonwa endaweni ngayinye.
| Observation | Points to |
|---|---|
| No handshake while transmit climbs | Peer selection or endpoint |
| Handshake current, request visible on the server | Reply path or far-side route |
| Request never visible on the server | Allowed prefixes or local route |
| Both packets visible, nothing reaches the client | Return filter or translation |
Funda ithebula kusukela phezulu. Ukungabikho kokuxhawulisana kukuthumela emakhiye, emaphoyintini okugcina nasendleleni yangaphandle, ngoba akukho okunye okuzohlolwa okwamanje. Ukuxhawulisana okusebenzayo ngesicelo esibonakala kuseva kuhambisa inkinga ohlangothini lokubuya, lapho ithebula lomzila lendawo eyiwa kuyo lona linquma khona. Isicelo esingaveli neze kuseva siyinkinga yokukhetha, futhi iziqalo ezivunyelwe kubo bobabili abalingani yikho okuqala okufanele kuqhathaniswe.
Imigqa emibili kule yomine ilungiswa kuklayenti kanti eminye emibili kuseva. Ukwazi ukuthi usekubhangqeni luni umsebenzi omkhulu.
Izimpendulo zinyamalala kuphi
Impendulo ishiya indawo eyiwa kuyo, ifinyelela isixhumi somhubhe seseva futhi ibethelwa umlingani okufanele amakheli akhe avunyelwe ahambisane nekheli langaphakathi leklayenti. Uma lokho kuhambisana kwehluleka, impendulo ilahlwa buthule, futhi lokho kusuka ohlangothini lweklayenti kubonakala kufana ncamashi nephutha lenethiwekhi. Uma impendulo ibethelwe futhi isihlungi seklayenti uqobo siyayenqaba, uphawu luyafana futhi. Womabili amacala adinga ukuthwebula, hhayi isibali.
Isimo esinamandla kakhulu sale phutha iseva ethumela amaphakethe egameni leklayenti kodwa engenayo indlela yokubuya eya ebangeni langaphakathi leklayenti. Yamukela isicelo, ithumela impendulo ngasemnyango wayo ozenzakalelayo, futhi umhubhe awuyiboni neze. Umthetho wokuhumusha obanzi owengezwa kuseva ufihla leyo phutha esikhundleni sokulungisa umzila.
Hlola indawo eyodwa eyiwa kuyo kusukela ekuqaleni kuze kube sekugcineni
Khetha indawo eyodwa eyiwa kuyo ngaphakathi kwebanga lomlingani, futhi uyihlole ngenkathi ukuxhawulisana kubonakala kusebenza okwamanje. Imiyalo engezansi ifunda isimo somlingani, umzila okhethiwe kanye nezinhlangothi zombili zokushintshana. Gijimisa ukuthwebula kusixhumi esisetshenziswa ngempela amaphakethe abethelwe.
wg show wg0 latest-handshakes
wg show wg0 transfer
ip route get 10.60.9.5
sudo tcpdump -ni wg0 host 10.60.9.5Ukuthwebula okubonisa isicelo kusixhumi somhubhe ngaphandle kokuthi kube nokubuya yimpendulo evela ohlangothini lweseva, futhi ithebula lomzila lendawo eyiwa kuyo iyindawo elandelayo okufanele ibhekwe. Uma kungaveli lutho neze, iphakethe lathatha enye indlela, ngakho umzila wasekhaya uyisola. Ukushintshana okubonakala kukho kokubili ukuthwebula kodwa kungenakho ukuqhubeka ohlelweni kuhambisa umbuzo osukwini lwephakethe noma esihlungini esingeke siboniswe yizibalo zesixhumi. Gcina indawo eyodwa eyiwa kuyo neklayenti elilodwa esivivinyweni, ngoba ukuguquguquka kwesibili kuphendula ubufakazi bube umbono futhi.
Uma amagama ehluleka ngenkathi ikheli elivunyelwe lisebenza, impendulo ise-DNS hhayi emhubheni. Uma kumane kumiswa ukudluliswa okukhulu, hlola usayizi wephakethe ngokwehlukile.