I-ZeroTier iya ku-LAN: imithetho yomzila ye-UFW, hhayi imvume yembobo

Ukufinyelela ishicileli ku-LAN yasehhovisi ngelungu le-ZeroTier kuzwakala njengomthetho owodwa, kodwa empeleni kuyizinqumo ezintathu ezindaweni ezintathu ezihlukene. I-overlay kufanele yazi ukuthi i-LAN ikuphi, isibungu se-Linux kufanele sizimisele ukudlulisela amaphakethe, futhi i-LAN kufanele yazi ukuthi ingayibuyisela kanjani impendulo. Umthetho ongenayo ovula imbobo esangweni awuthinti lutho kulezi. Ithuluzi elingalungile esibungwini esilungile.

Imisebenzi emithathu, abanikazi abathathu

Umzila ophethwe ungowokuhlelwa kwenethiwekhi ye-ZeroTier. Utshela amalungu ukuthi isiqalo esithile sifinyeleleka ngakweli kheli elithile lelungu.

Ukudlulisela kungokwe-kernel ye-Linux nangokwalowo ophethe inqubomgomo yayo yodonga lomlilo. Kuyanquma ukuthi iphakethe elifika ku-overlay liyophuma futhi yini kusixhumi sangempela. Isibungu esingadlulisi sizolahla iphakethe ngokuthula ngemuva kokulihambela. Umthumeli ubona isikhathi siphelile futhi akukho lutho olubonakalayo kungobo yomlando yesevisi.

Indlela yokubuya ingeyase-LAN. Izibungu zayo kanye nomzila wayo kufanele bazi ukuthi isiqalo se-overlay sifinyeleleka ngakheli le-LAN lesango lakho, noma kufanele kube khona okuhumusha ukuhamba ukuze lo mbuzo ungavuki neze.

Ngakunye kwalokhu kungase kube kwasekwakho kuyilapho okunye kwehluleka, futhi yingakho ukuhlolwa okumane kupinge isango kungafakazi lutho ngesevisi esingemuva kwaso.

Qondisa umzila ophethwe elungwini

Engeza umzila wesiqalo se-LAN esihlosiwe ngakheli le-overlay lesango, hhayi ngakheli lalo le-LAN. Ikheli le-overlay yilona elingafinyelelwa amanye amalungu; ikheli le-LAN linencazelo kuphela entanjeni.

Amalungu kufanele amukele imizila ephethwe ukuze umklamo usebenze, futhi amanethiwekhi awo endawo akumele abe esewasebenzisa isiqalo osimemezelayo. Ikhompyutha ephathekayo ekude esekhaya ku-192.168.60.0/24 nayo ayikwazi ukuhambisa i-192.168.60.0/24 ngokusebenzisa i-overlay.

Gcina isiqalo esimemezelwe sincane ngangokunokwenzeka ngomsebenzi. Ukumemezela inqwaba enkulu ukuze kube nomthelela ekuthandweni kungase futhi ifune indawo yamakheli okungeyona eyakho, futhi ukungqubuzana okuvelayo kubonakala emishinini exhunywe kuzo zombili izixhumi. Kungase futhi kwenza ilungu likhethe umzila ongaholeli ndawo. Gcina umzila uthembekile bese uyeka inqubomgomo yenza okunye.

Bhala isiqalo nekheli lelungu embhalweni ofanayo nemithetho yodonga lomlilo, ngoba ukwehluleka okuvame kakhulu umzila okhomba elungwini elingalungile.

Vula ukudluliswa ku-kernel

Funda inani lokudlulisela elisebenzayo ngaphambi kokushintsha noma yini, bese wenza isethingi ihlale njalo ngendlela uhlelo lwakho olusebenzisa kakade, hhayi ngomyalo wesikhathi esisodwa onyamalala lapho kuqaliswa kabusha.

Uma inqubomgomo ingeyakwa-UFW, imithetho yayo yomzila iveza ukudlulisela kwababili bomthombo, indawo nokuxhumana. Le mithetho ihlukile kwimithetho engenayo evula isevisi esangweni uqobo:

sysctl net.ipv4.ip_forward
sudo ufw route allow in on zt3f2a1c9d out on eth0 proto tcp to 192.168.60.20 port 443
sudo ufw status verbose

Igama lokuxhumana iyona nsimbi ye-overlay yangempela kulelo bungu, ongayifunda ku-ip link; akulona ugwadlulelo olugxilile kukho konke ukufaka. Uma isibungu sidlulisela ngokuzenzakalela futhi i-UFW ingekho emzileni, umthetho womzila uzoshaywa indiva futhi izilungiselelo ze-kernel yizo ezibalulekile.

Khetha ukuthi izimpendulo zibuya kanjani

Ngokugcinwa komthombo, isevisi yase-LAN ibona ikheli le-overlay langempela futhi iphendula kulo. Lokho kudinga umzila esibungwini se-LAN noma kumzila waso okhomba isiqalo se-overlay esangweni lakho, futhi lokho kushintsho olungaphandle kwebhokisi le-Linux.

Lapho lowo mzila ungekho ukwengezwa, ukuhumusha komthombo okulinganiselwe kwenza isicelo sibonakale sengathi sivela esangweni elise-LAN. Izimpendulo zibe sezibuya endaweni futhi akudingeki kushintshwe ukuhamba kwe-LAN, kodwa ngezindleko zokulahlekelwa umthombo wangempela kungobo zomlando zesevisi.

Linganisela ukuhumusha kumthombo we-overlay nakwindawo ethile ye-LAN. Ukuhumusha konke okuphuma kusixhumi se-LAN iyona nguqulo ebanzi ehlaba umxhwele noma ubani ofunda imithetho kamuva, futhi futhi ifihla ukuhamba obekufanele kuvinjelwe.

Akukho kokukhetha okubili okunikeza ukufinyelela okungacelwanga kusuka ku-LAN kubuyela kumalungu e-overlay angahleliwe. Uma lokho kufunwa, kungumthetho ohlukile onokubuyekezwa kwawo.

Hlola kusuka elungwini langempela

Xhumana kusuka kwelinye ilungu, hhayi esangweni, futhi ucele isevisi eyodwa evunyelwe. Bese uzama isevisi okufanele ihlale ivaliwe, futhi uphinde zombili izivivinyo ngemuva kokuxhuma kabusha nangemuva kokuqaliswa kabusha kwesango.

Ilungu eli-bika i-ONLINE, noma i-ping ephumelelayo ekhelini le-overlay lesango, akufakazi umzila, umthetho wokudlulisela noma indlela yokubuya:

zerotier-cli listnetworks
ip -4 route get 192.168.60.20
sudo ufw status numbered

Umyalo wesibili ukhombisa ukuthi iphakethe lingasebenzisa isiphi isixhumi esibungwini se-LAN, kanti owesithathu ukhombisa ukuthi umthetho womzila ukhona yini ngendlela obewuyihlose. Uma kokubili kubonakala kulungile futhi isevisi isaphelelwa isikhathi, umsolwa osele yindlela yokubuya.