Ebipụtala ntọhapụ kwụsiri ike nke interface ahụ iji mee ka nhazi nke parampat netwọk dị mfe - NetworkManager 1.56.0. Ngwa mgbakwunye maka nkwado VPN (Libreswan, OpenConnect, Openswan, SSTP, wdg) ka emepụtara dịka akụkụ nke usoro mmepe nke ha.
Isi ihe ọhụrụ nke NetworkManager 1.56:
- Emelitela ngwa nmcli iji nye ohere ikiri na ijikwa ndị ọgbọ maka Okwey WireGuard. nmcli connection modify wg0 wireguard.peers «8W…G1o= preshared-key=16…LQA= allowed-ips=0.0.0.0/0 persistent-keepalive=10» nmcli connection modify wg0 +wireguard.peers «fd2…BCc= allowed-ips=192.168.40.0/24 endpoint=172.25.10.1:8888» $ nmcli -g wireguard.peers connection show wg0 8W…1o= allowed-ips=0.0.0.0/0 persistent-keepalive=10, fd…BCc= allowed-ips=192.168.40.0/24 endpoint=172.25.10.1\:8888 $ nmcli connection modify wg0 -wireguard.peers 8W…eG1o= $ nmcli -g wireguard.peers connection show wg0 fd2…BCc= allowed-ips=192.168.40.0/24 endpoint=172.25.10.1\:8888
- Agbakwunyela paramita ngwaọrụ-uid na ngalaba ntọala "[gsm]" iji jikọọ naanị na ngwaọrụ ndị edepụtara. [gsm] apn=internet2.voicestream.co device-uid=MODEM1
- Maka ndọtị MPTCP (Multipath TCP), nke na-enye ohere ka a na-ebuga ngwugwu n'otu oge n'ọtụtụ ụzọ site na njikọ netwọk dị iche iche, etinyere ụdị njedebe ọhụrụ, "laminar," ma setịpụ ya na ndabara yana ụdị "subflow". Ụdị ọhụrụ a na-ewepụ mkpa ọ dị ịdabere na iwu nhazi mgbe ị na-ahọrọ adreesị IP mpaghara n'ọnọdụ ebe ma onye ahịa ma onye ahịa ihe nkesa A na-eji ọtụtụ adreesị dị iche iche.
- Agbanweela echiche maka itinye ntọala site na ngalaba "[global-dns]", nke mere na ha na-agbanwezi ntọala dị na ndepụta "nchọgharị" na "nhọrọ" enwetara n'oge usoro ntọala njikọ, kama ijikọ ya na ha.
- E tinyela nkwado maka aha ndị ọbịa eweghachiri site na DNS nke karịrị 64 bytes.
- E tinyekwara ihe ndị dị ka "hsr.protocol-version" na "hsr.interlink" iji hazie ụdị na nọmba ọdụ ụgbọ mmiri maka usoro HSR (High-availability Seamless Redundancy).
- Agbakwunyere nkwado maka itinyeghachi ihe onwunwe "sriov.vfs" na "bond-port.vlans".
- Agbakwunyere nhọrọ ọhụrụ rd.net.dhcp.client-id na nm-initrd-generator.
- E tinyela ikike iji nhọrọ "connection.dnssec" iji hazie paramita DNSSEC nke ọma na systemd-resolved.
- Emelitela ọbá akwụkwọ libnm site na ọrụ ndị enwere ike iji na ngwa mgbakwunye VPN iji lelee ma onye ọrụ ahụ nwere ikike ịnweta igodo na asambodo.
isi: opennet.ru
