Wake wazizwa sengathi ukuphequlula ku-Wi-Fi esitolo sekhofi noma ehhotela kuhamba endaweni eneziqhumane? Iqiniso liwukuthi, noma ngabe sizizwa siphephile, ukushiya idatha yethu iveziwe kumanethiwekhi omphakathi kuyingozi. Yilapho i- VPN, noma i-Virtual Private Network , ingena khona. Empeleni idala umhubhe obethelwe phakathi kwedivayisi yakho nenethiwekhi yakho yasekhaya. Kufana nokuba nekhebula elide kakhulu elikuxhumanisa ngqo ne-router yakho, kungakhathaliseki ukuthi ukude kangakanani emhlabeni, okukuvumela ukuthi uphequlule ngobumfihlo nokuphepha okuphelele.
Ukuze usethe lolu hlelo, awudingi ukuchitha imali eningi ekubhaliseni kwanyanga zonke; nge- Raspberry Pi , leyo khompyutha encane esebenzisa amandla amancane kunesibani sokukhanya, ungakha iseva yakho. Ayivikeli nje kuphela ithrafikhi yakho kodwa futhi ikunikeza amandla amakhulu okufinyelela amafayela kunethiwekhi yakho yendawo noma ukudlula imikhawulo yokuqukethwe kwendawo njengokungathi uhleli kusofa lakho legumbi lokuphumula. Ake sibone ukuthi ungayisebenzisa kanjani usebenzisa i-WireGuard , okuyiyona ndlela yesimanje kakhulu, elula, futhi esheshayo etholakalayo okwamanje.
Ukulungisa inhlabathi: Ihadiwe kanye neSistimu
Ngaphambi kokuthi singene kusofthiwe, sidinga ukuba imishini isilungile. Okungcono kakhulu, singasebenzisa i- Raspberry Pi 4 ngenxa yamandla ayo okucubungula kanye ne-RAM, yize noma yimuphi umodeli wakamuva uzokwenza umsebenzi. Sizodinga ikhadi le-microSD okungenani elingu-8 GB elifakwe i-Raspberry Pi OS . Kubalulekile ukuthi ibhodi lixhunywe ngekhebula le-Ethernet ukuqinisekisa ukuzinza, yize i-Wi-Fi nayo izosebenza. Iphuzu elibalulekile ukwabela i-Raspberry Pi ikheli le-IP elingaguquki kuzilungiselelo ze-router ukuze iseva "inganyamalali" njalo lapho i-router iqala kabusha.
Ukufakwa kwe-WireGuard: Izindlela Ezimbili Ezingenzeka
Kunezindlela ezimbili zokubhekana nalokhu: indlela esetshenziswa ngesandla, kulabo abajabulela ukubhala ikhodi, kanye nendlela ezenzakalelayo, kulabo kithi abafuna imiphumela esheshayo. Uma ukhetha indlela esetshenziswa ngesandla, kuzodingeka uthole indlela ezenzakalelayo. indlela yezandlaKuzodingeka ubuyekeze uhlelo nge apt update bese ufaka ama-kernel headers. Njengoba i-WireGuard ngezinye izikhathi ingekho kuma-repository asemthethweni e-Raspbian, kuvamile ukwengeza ama-repository e-Debian nokuphatha okhiye bokuphepha ukuze ufake iphakheji. wireguard ngokusebenzisa apt.
Kubantu abaningi, into ehlakaniphile kakhulu okufanele yenziwe ukusebenzisa izikripthi ezenzakalelayo njenge I-PiVPN noma ukufakwa kwe-wireguardLezi zikripthi zikwenza umsebenzi ongcolile: zilungiselela i-firewall, zikhiqize okhiye, futhi zilungise indlela yokuqondisa. Ukuze usebenzise i-PiVPN, mane usebenzise umyalo. curl ku-terminal. I-wizard izokubuza ukuthi ukhetha i-WireGuard noma i-OpenVPN; Khetha i-WireGuard njalo ngenxa yokusebenza kahle kwamandla kanye nesivinini sayo. Phakathi nenqubo, izokucela i-port (ejwayelekile ingu-51820), okuyiyona ezodinga ukuvulwa ku-router.
Ukuphathwa kokhiye kanye nokucushwa kweseva
Inhliziyo ye-WireGuard yi okhiye basesidlangalaleni nabayimfihloIseva ikhiqiza ipheya, futhi iklayenti ngalinye (eliselula, i-PC) lidinga elalo ukuze lenze "ukuxhawulana" noma isandlaUma ukwenza ngesandla, lawa makhi agcinwa ku- /etc/wireguardIfayela lokucushwa kweseva (wg0.conf) ichaza ikheli le-IP elibonakalayo ye-VPN kanye nemithetho ye- iptables (i-PostUp ne-PostDown) ukuze ithrafikhi igeleze kahle ngokusebenzisa isikhombimsebenzisi senethiwekhi, kungakhathaliseki ukuthi eth0 o wlan0.
Icebo eliyinhloko: Ukudlulisela i-IP kanye nokufinyelela kwendawo
Uma ufuna nje ukuphequlula ngokuphephile, okungenhla kwanele, kodwa uma ufuna finyelela i-NAS yakho, amakhamera e-IP, noma iseva yefayela Ngaphandle kwesistimu, udinga ukunika amandla ukudluliselwa kwe-IP. Lokhu kwenziwa ngokuhlela ifayela /etc/sysctl.conf kanye nokususa amazwana emgqeni net.ipv4.ip_forward=1Ngaphandle kwalesi sinyathelo, i-Raspberry Pi izothola uxhumano kodwa ngeke yazi ukuthi kanjani. dlulisela amaphakethe kwamanye amadivayisi ekhaya lakho. Kunconywa futhi ukuthi ulungiselele u-masquerade ku-firewall ukuthuthukisa ukuphepha kwenethiwekhi yasekhaya kanye ne-IoT ukuze amadivayisi endawo abone ithrafikhi ye-VPN njengokungathi ingaphakathi.
I-DNS Eguquguqukayo: Khohlwa ngokukhumbula i-IP
Inkinga ngokuxhumeka kwe-inthanethi yasekhaya ukuthi ikheli le-IP lomphakathi livame ukushintsha. Ukuze ugweme ukuvalelwa ngaphandle kwe-VPN yakho, ikhambi elingcono kakhulu ukusebenzisa isevisi ye-DDNS efana ne-DuckDNS . Lokhu kukunikeza igama lesizinda (isibonelo, i-myname.duckdns.org ) elihlala likhomba ikheli lakho le-IP lamanje. Ungafaka iskripthi sokuvuselela okuzenzakalelayo ku-Raspberry Pi yakho esazisa isevisi ye-DNS njalo ngemizuzu embalwa uma ikheli lakho le-IP lishintshile, ukuqinisekisa ukuthi umhubhe uhlala usebenza.
Ukucushwa Kweklayenti Nokuxhumeka Kokugcina
Uma iseva isisebenza ngokugcwele, udinga ukudala amaphrofayili omsebenzisi. Nge-PiVPN, kulula njengokuthayipha pivpn addUhlelo luzokhiqiza ifayela .conf kudivayisi ngayinye. Kumadivayisi eselula, indlela elula kakhulu ukusebenzisa pivpn -qr, okubonisa Ikhodi ye-QR kutheminaliMane nje ulande uhlelo lokusebenza lwe-WireGuard, uskene ikhodi, bese usuqedile. Ku-Windows noma ku-Mac, vele ungenise ifayela lokucushwa elilandiwe.
Isinyathelo esibalulekile: Vula ama-port ku-router
Akukho nokukodwa kokucushwa okungenhla okuzosebenza uma i-router yakho ivimba ithrafikhi engenayo. Udinga ukufinyelela iphaneli yokuphatha ye-router yakho bese udala umthetho wokudlulisela imbobo . Kufanele uvule imbobo ye-UDP 51820 (noma iyiphi imbobo oyikhethile) bese uqondisa yonke leyo thrafikhi ekhelini le-IP lendawo le-Raspberry Pi yakho . Khumbula ukuthi kumele kube yi-UDP , njengoba i-WireGuard ingasebenzisi i-TCP.
Okungeziwe: I-Pi-hole kanye nokuVinjwa kwezikhangiso
Uma ufuna ukukhuphula ukusetha kwakho uye ezingeni elilandelayo, ungafaka i-Pi-hole eceleni kwe-VPN. Ngokuhlanganisa kokubili, ungalungiselela i-VPN ukuthi isebenzise ikheli le-IP le-Pi-hole njengeseva yayo ye-DNS. Umphumela uyamangalisa: uma uphumile futhi usebenzisa idatha yeselula futhi usebenzisa i-VPN, zonke izikhangiso kumawebhusayithi nezinhlelo zokusebenza zizonyamalala , njengoba ithrafikhi ye-DNS izoqala idlule kusihlungi se-Pi-hole ekhaya ngaphambi kokungena ku-inthanethi.
Ukusetha le seva kusinika ukulawula okuphelele kobumfihlo bethu, kususa ukuthembela ezinkampanini zangaphandle kanye nokusebenzisa amandla aphansi kwebhodi lomama le-ARM. Ngokuhlanganisa i-WireGuard ne-DDNS nokuvula kahle amachweba e-UDP, siguqula idivayisi encane ibe yisango eliphephile neliguquguqukayo eliya kunethiwekhi yethu yasekhaya kusuka noma kuphi emhlabeni.
