- Ukuqaliswa kwenethiwekhi ye-VPN ye-mesh esekelwe ku-WireGuard eqeda isidingo sokuvula ama-port ku-router.
- Amandla okusebenzisa i-Raspberry Pi njenge-node yokuphuma ukuze uphequlule nge-IP yasekhaya noma kuphi.
- Ukucushwa komzila we-Subnet ukufinyelela amadivayisi endawo angasekeli ukufakwa kweklayenti.
- Ukuhlanganiswa kokuphepha okuthuthukisiwe kusetshenziswa ama-ACL kanye nokuhlunga kwe-DNS okude ngamathuluzi afana ne-Pi-hole.
Uma uke waba nomuzwa wokuthi ukuphatha ukufinyelela kude ekhaya lakho kuyakhathaza, ikakhulukazi uma ungemuva kwe- CG-NAT noma awufuni ukuvula amachweba Ku-router yakho, i-Tailscale iyithuluzi elizosindisa impilo yakho. Ngokuyisisekelo, yi-VPN edala inethiwekhi ye-mesh lapho amadivayisi akho angaxhumana khona sengathi asegumbini elifanayo, noma ngabe elinye lisegumbini lakho lokuphumula kanti elinye lisekhefini eJapane—konke ngaphandle kwezinkinga zobuchwepheshe ezingenangqondo.
Into engcono kakhulu ngayo ukuthi isebenzisa iphrothokholi I-WireGuardLokhu kusho ukuthi kushesha kakhulu futhi kuphephile kakhulu. Kungakhathaliseki ukuthi une-Raspberry Pi, i-Windows PC, noma ifoni ye-Android, i-Tailscale idala umhubhe obethelwe kusukela ekuqaleni kuya ekugcineni, ovimbela idatha yakho ukuthi ingadluli kumaseva aphakathi angadingekile futhi inciphise ukubambezeleka. Empeleni, indlela elula yokudala uhlelo lwakho lwedijithali kuyimfihlo futhi kufinyeleleka kunoma iyiphi ingxenye yomhlaba.
Iyini ngempela i-Tailscale futhi kungani imnandi kangaka?
Ngokungafani nama-VPN ezentengiselwano esiwasebenzisayo ukushintsha ikheli lethu le-IP kanye nokubuka imibukiso evela kwamanye amazwe, i-Tailscale idala i- I-TailnetLena inethiwekhi yangasese ebonakalayo lapho idivayisi ngayinye ithola ikheli le-IP eliqinile nelihlukile. Isici esinamandla kakhulu ukuthi akukho ukucushwa kwembobo okudingekayo (ukudlulisela i-port), okususa ingozi yokudalula inethiwekhi yakho ekuhlaselweni kwangaphandle futhi kuyenze isebenze ngisho nalapho umhlinzeki wakho we-inthanethi ekuvalele ngemuva kwe-NAT, okugwema ukubhekana ne- ukudlulisa imbobo zendabuko
Uhlelo lusekelwe kusakhiwo esihlukaniswe ngokwezigaba. Nakuba usebenzisa i-akhawunti ye-Google, i-Microsoft, noma i-GitHub ukuqinisekisa, ithrafikhi yenethiwekhi iyahamba ngqo phakathi kwamaqembu akhoKuphela ezimweni ezimbi kakhulu, lapho i-firewall inemingcele kakhulu, lapho isebenzisa khona amaseva e-DERP njenge-relay ukuqinisekisa ukuthi uxhumano aluphazanyiswa.
Ukusetha i-Tailscale ku-Raspberry Pi yakho isinyathelo ngesinyathelo
I-Raspberry Pi iyindlela efanele yokuba yinhliziyo yenethiwekhi yakho ngenxa yokusebenzisa kwayo amandla aphansi. Ukuze uqalise, udinga ukuthi ufake Okusajingijolo Pi OSUma uzosebenzisa i-Pi ngaphandle kwemonitha (imodi engenamakhanda), khumbula ukunika amandla i-SSH usebenzisa sudo raspi-config noma ngokudala ifayela elingenalutho elibizwa ngokuthi i-ssh ku-partition ye-boot.
Ukufaka isofthiwe kulula. Mane nje usebenzise iskripthi sokufaka esisemthethweni noma wengeze ama-repository usebenzisa apt-transport-httpsUma iphakheji isifakiwe, umyalo sudo tailscale up uzokunikeza I-URL yokuqinisekisaNgokuyivula kusiphequluli sakho bese ungena ngemvume, i-Raspberry Pi yakho izoxhunyaniswa ne-akhawunti yakho futhi izovela kuphaneli yokulawula yewebhu.
Icebo Lokuphuma Kwe-Node
Ake sithi uxhumeke kunethiwekhi ye-Wi-Fi yomphakathi esikhumulweni sezindiza futhi awubethembi onogada. Uma uhlela i-Raspberry Pi yakho njenge phuma ku-nodeUngaphoqa yonke ithrafikhi yakho yeselula ukuthi idlule kunethiwekhi yakho yasekhaya kuqala ngaphambi kokuthi ungene ku-inthanethi. Ngale ndlela, uzophequlula nge Ikheli le-IP lekhaya lakho kanye nayo yonke ithrafikhi ebethelwe.
Ukuze ufeze lokhu, kufanele uqale unike amandla i- Ukudlulisela i-IP ku-Linux ngokuhlela ifayela /etc/sysctl.conf nokungeza net.ipv4.ip_forward = 1Bese, qala kabusha i-Tailscale ngomyalo sudo tailscale up --advertise-exit-nodeUngakhohlwa ukungena kuphaneli yokuphatha iwebhu bese vumela umzila ekucushweni kwedivayisi ukuze i-node isebenze.
Ukufinyelela yonke i-LAN yakho nge-Subnet Router
Yilapho abantu abaningi bebhajwa khona. I-Subnet Router Ivumela amadivayisi angenayo i-Tailscale efakiwe (njengephrinta endala, i- I-NAS noma amakhamera e-IP) afinyeleleka ngaphandle. Esikhundleni sokufaka iklayenti kudivayisi ngayinye, i-Raspberry Pi isebenza njenge Isango yenethiwekhi yakho yonke yendawo.
Uma inethiwekhi yakho yasekhaya isebenzisa ububanzi be-192.168.1.0/24, kufanele uyisebenzise sudo tailscale up --advertise-routes=192.168.1.0/24Kodwa-ke, uma uthola ukuthi inethiwekhi yangaphandle oxhumeke kuyo isebenzisa ububanzi bekheli le-IP elifanayo (ingxabano ejwayelekile ye-IP), ikhambi liwukuthi memezela ababungazi abathile kusetshenziswa imaski engu-/32 (isibonelo, 192.168.1.5/32), ngaleyo ndlela kuvinjelwe uhlelo ukuthi lungadideki futhi i-VPN ingaphuki, into ebalulekile ku- ukuphathwa kwekheli le-IP elingaguquki.
Ukuphathwa Okuthuthukisiwe: I-DNS, Ukuphepha, kanye Nezinhlelo
I-Tailscale inikeza isici esibizwa ngokuthi I-MagicDNS okukuvumela ukuthi ukhohlwe ngama-IP futhi ufinyelele imishini yakho ngamagama. Ungahlanganisa futhi amaseva afana nalawa I-Pi-hole noma i-AdGuard Home Ngokulungiselela ama-nameservers kuphaneli yokulawula nokuvumela inketho yokushintsha i-DNS yendawo, uzoba nayo ukuvimbela izikhangiso kuselula yakho noma ngabe usebenzisa idatha yeselula ukude nekhaya.
Ngokuphathelene nokuphepha, uhlelo lusebenzisa ukuzungezisa okuzenzakalelayo kokhiye futhi ikuvumela ukuthi udale ama-ACL (Uhlu Lokulawula Ukufinyelela) usebenzisa amafayela e-JSON. Ngale mithetho, unganquma, isibonelo, ukuthi ifoni yakho ephathekayo ingafinyelela i-NAS kodwa i-laptop yesivakashi ingafinyelela umshini othize kuphela, igcine i- ukulawulwa okuhlanganisiwe kwezimvume.
Kwabaningi babasebenzisi, Uhlelo lomuntu siqu lumahhala Ikuvumela ukuthi uxhume amadivayisi afinyelela ku-100, okwanele indawo yasekhaya. Kunezinhlelo ezikhokhelwayo zamabhizinisi ezengeza ukwesekwa okubalulekile kanye nokuphathwa komsebenzisi okuyinkimbinkimbi, kodwa inguqulo yamahhala inomusa ngokumangazayo.
Ukuba nenethiwekhi ye-mesh esekelwe ku-WireGuard kuguqula i-Raspberry Pi yakho ibe ithuluzi eliguquguqukayo elisusa izithiyo ze-CG-NAT, okukuvumela ukuthi uphathe izinsizakalo zasendaweni futhi uphequlule ngokuphepha okuphelele. Ngokuhlanganisa ikhono layo lokusebenza njenge-exit node kanye ne-subnet router, ufinyelela ukufinyelela okukude okusobala futhi ochwepheshe ngaphandle kwesidingo sokudalula amachweba ezweni langaphandle.
