Siideynta xasilloon ee is-dhexgalka ayaa la daabacay si loo fududeeyo qaabeynta cabbirrada shabakadda - NetworkManager 1.56.0. Plugins ee taageerada VPN (Libreswan, OpenConnect, Openswan, SSTP, iwm.) waxa loo horumariyey iyada oo qayb ka ah wareegyada horumarineed ee iyaga u gaar ah.
Hal-abuurka ugu muhiimsan ee maamulaha shabakada 1.56:
- Adeegga nmcli waa la cusbooneysiiyay si loogu oggolaado daawashada iyo maaraynta asxaabta inay la shaqeeyaan VPN WireGuard. wax ka beddel xiriirka nmcli wg0 wireguard.peers "8W…G1o= pre-shared-key=16…LQA= allowed-ips=0.0.0.0/0 continuous-keepalive=10" nmcli connection modify wg0 +wireguard.fanaaniinta "fd2...BCc= allowed-ips=192.168.40.0/24 dhammaadka dhibicda=172.25.10.1:8888" $ nmcli -g wireguard.isku xirka asxaabta muuji wg0 8W…1o= ogol-ips=0.0.0.0/0 joogto ah-keepalive=10, fd…BCc= ogol-ips=192.168.40.0/24 dhamaadka dhibic=172.25.10.1\:8888 $ nmcli connection modify wg0 -wireguard.peers 8W…eG1o= $ nmcli -g wireguard.isku xirka asxaabta muuji wg0 fd2…BCc= allowed-ips=192.168.40.0/24 dhamaadka dhibic=172.25.10.1\:8888
- Halbeegga qalabka-uid ayaa lagu daray qaybta dejinta "[gsm]" si loogu xiro oo keliya aaladaha liiska ku jira. [gsm] apn=internet2.voicestream.co device-uid=MODEM1
- Kordhinta MPTCP (Multipath TCP), taas oo u oggolaanaysa baakadaha in isku mar la geeyo waddooyin badan iyada oo loo marayo is-dhexgalka shabakadaha kala duwan, nooc cusub oo dhammaadka ah, "laminar," ayaa la hirgeliyey waxaana loo dejiyay si caadi ah oo ay weheliso nooca "subflow". Noocan cusub wuxuu meesha ka saarayaa baahida loo qabo in lagu tiirsanaado xeerarka marin-haweedka marka la dooranayo cinwaanka IP-ga maxalliga ah xaaladaha ay labadaba macmiilka iyo server Cinwaano kala duwan ayaa la isticmaalaa.
- Macquulka lagu dabaqayo dejimaha qaybta "[global-dns]" ayaa la beddelay, si ay hadda uga gudbaan dejimaha liisaska "raadinta" iyo "xulashooyinka" ee la helay intii lagu jiray habka dejinta isku xirka, halkii laga midayn lahaa iyaga.
- Taageerada magacyada martida loo yahay ee lagu soo celiyo DNS-ka oo ka weyn 64 bayt ayaa la hirgeliyay.
- Waxaa lagu daray sifooyinka "hsr.protocol-version" iyo "hsr.interlink" si loo habeeyo nooca iyo lambarka dekedda ee hab-maamuuska HSR (Helitaan Sare oo aan Lahayn oo Bilaa-Celin ah).
- Waxaa lagu daray taageero dib loogu codsanayo sifooyinka "sriov.vfs" iyo "bond-port.vlans".
- Waxaa lagu daray ikhtiyaar cusub rd.net.dhcp.client-id oo loogu talagalay nm-initrd-generator.
- Awoodda loo leeyahay in la isticmaalo ikhtiyaarka "connection.dnssec" si loo habeeyo xuduudaha DNSSEC ee nidaamka systemd-resolved ayaa la hirgeliyay.
- Maktabadda libnm waxaa lagu cusbooneysiiyay shaqooyin loo isticmaali karo plugins-ka VPN si loo hubiyo in isticmaaluhu uu haysto ogolaansho uu ku galo furayaasha iyo shahaadooyinka.
Source: opennet.ru
