🥇 Waxaa ku shaqeeya ZeroTier. Hage wax ku ool ah oo lagu dhisayo shabakadaha casriga ah. Qaybtii 1aad

Sii wadida sheekada ku saabsan ZeroTier, laga soo bilaabo aragtida lagu qeexay maqaalka "Smart Ethernet Switch for Planet Earth", Waxaan u sii socdaa in aan ku dhaqmo taas oo:

Aan abuurno oo aan habeyno koontaroolaha shabakada gaarka ah
Aan abuurno shabakad toos ah
Aan habaynno oo aan ku xidhno noodhka
Aynu eegno isku xirka shabakadaha dhexdooda
Aynu ka xannibno gelitaanka GUI ee maamulaha shabakadda dibadda

Xakamaynta Shabakadda

Sidii hore loo soo sheegay, si loo abuuro shabakado dalwad ah, maamula, iyo sidoo kale isku xidhka qanjidhada, isticmaaluhu wuxuu u baahan yahay kontaroolaha shabakada, interface garaaf ahaan (GUI) kaas oo u jira laba nooc:

ZeroTier GUI Options

Mid ka socda horumariyaha ZeroTier, oo loo heli karo sidii xalinta daruuraha dadweynaha ee SaaS oo leh afar qorshayaal isdiiwaangelin, oo ay ku jiraan bilaash, laakiin xaddidan tirada aaladaha la maareeyay iyo heerka taageerada
Midda labaad waxay ka socotaa horumariye madax-bannaan, oo xoogaa lagu fududeeyay shaqaynta, laakiin loo heli karo sidii xal il furan oo gaar ah oo loogu isticmaalo goobta ama agabka daruuraha.

Dhaqankayga, waxaan isticmaalay labadaba iyo natiijada, waxaan ugu dambeyntii degay kan labaad. Sababta tani waxay ahayd digniinta horumariyaha.

"Koontaroolayaasha shabakadu waxay u adeegaan sidii maamulka shahaado bixinta shabakadaha casriga ah ee ZeroTier. Faylasha ay ku jiraan furayaasha sirta koontaroolaha waa in si taxadar leh loo ilaaliyo oo si ammaan ah loo kaydiyaa. Tanaasulkoodu wuxuu u oggolaanayaa weeraryahannada aan la fasaxin inay abuuraan isku-xidhka shabakadaha been-abuurka ah, khasaarahooduna waxay keenaysaa inay lumiyaan awoodda lagu xakameeyo laguna maamulo shabakadda, taasoo ka dhigaysa mid aan la isticmaali karin."

→ Isku xirka dukumeenti

Iyo sidoo kale, calaamadaha paranoia amnigaaga internetka :)

Xitaa haddii Cheburnet yimaado, waa inaan weli marin u leeyahay kontoroolka shabakadayda;
Aniga kaliya waa inaan isticmaalo kantaroolaha shabakada. Haddii loo baahdo, siinta gelitaanka wakiiladaada idman;
Waa inay suurtogal tahay in la xaddido gelitaanka koontaroolaha shabakadda ee dibadda.

Maqaalkan, uma arko dhibco badan oo si gaar ah loo deggan yahay sida loo geeyo koontaroolaha shabakadda iyo GUI-ga iyada oo loo marayo agabka muuqaalka ama muuqaalka ah. Waxa kale oo jira 3 sababood oo tan:

waxaa jiri doona waraaqo ka badan inta la qorsheeyay
ku saabsan tan horeba sheegay Ku saabsan horumarinta GUI GitHab
mawduuca maqaalku wuxuu ku saabsan yahay wax kale

Sidaa darteed, doorashada dariiqa iska caabbinta ugu yar, waxaan u isticmaali doonaa sheekadan shabakad kontaroole leh GUI oo ku salaysan VDS, oo ay abuurtay ka template, si naxariis leh ay u horumariyeen asxaabteyda RuVDS.

Habaynta hore

Kadib abuurista server ka qaab-dhismeedka la cayimay, isticmaaluhu wuxuu gelayaa koontaroolaha Web-GUI isagoo adeegsanaya biraawsar isagoo galaya https://:3443

Sida caadiga ah, server-ku waxa uu ka kooban yahay shahaado TLS/SSL oo iskii u saxeexay oo hore loo soo saaray. Tani waa igu filan tahay, mar haddii aan ka xannibo gelitaanka dibadda. Kuwa raba inay isticmaalaan noocyada kale ee shahaadooyinka, waxaa jira tilmaamaha rakibidda Ku saabsan horumarinta GUI GitHab.

Marka isticmaaluhu uu galo markii ugu horeysay login oo leh login default iyo password - admin и password:

Waxay soo jeedinaysaa in furaha sirta ah loo beddelo mid caado ah

Waxaan u sameeyaa wax yar si ka duwan - ma beddelo erayga sirta ah ee isticmaale jira, laakiin abuur mid cusub - Isticmaal User.

Waxaan dejiyay magaca isticmaalaha cusub - username:
Waxaan dhigay furaha sirta ah ee cusub - Geli erayga sirta ah ee cusub:
Waxaan xaqiijinayaa erayga sirta ah ee cusub - Mar kale gali eraygaaga sir ta ah:

Jilayaasha aad geliso waa kuwa xasaasi ah - taxaddar!

Sanduuqa calaamadee si loo xaqiijiyo beddelka erayga sirta ah gelitaanka xiga - Beddel erayga sirta ah soo gelida xigta: Ma dabaal dago.

Si loo xaqiijiyo xogta la galiyay, taabo Sameeyaan sirta:

Kadib: dib ayaan u soo galay Ka bax / login, mar horeba hoos imanaysa aqoonsiga isticmaalaha cusub:

Marka xigta, waxaan aadayaa tab isticmaalayaasha - Users oo tirtir isticmaalaha adminadigoo gujinaya astaanta qashinka ee ku taal bidixda magaciisa.

Mustaqbalka, waxaad bedeli kartaa erayga sirta ah ee isticmaalaha adigoo gujinaya midkood magaciisa ama lambarka sirta ah.

Abuuritaanka shabakad toos ah

Si loo abuuro shabakad toos ah, isticmaaluhu wuxuu u baahan yahay inuu aado tab Ku dar shabakad. Laga soo bilaabo barta User tan waxaa lagu samayn karaa bogga Bogga Hore - bogga ugu weyn ee Web-GUI, kaas oo muujinaya ciwaanka ZeroTier ee kantaroolaha shabakadda oo ka kooban xiriiriyaha bogga liiska shabakadaha lagu abuuray iyada.

Bogga Ku dar shabakad isticmaaluhu waxa uu magaca u dhiibaa shabakada cusub ee la abuuray.

Marka la adeegsanayo xogta gelinta - Samee Shabakad isticmaalaha waxa loo qaadayaa bog leh liis shabakado, kaas oo ka kooban:

Magaca shabakadda - magaca shabakada oo ah qaab iskuxir ah, markaad gujiso waxaad bedeli kartaa
Aqoonsiga Shabakadda - aqoonsiga shabakadda
faahfaahsan - ku xidhid bog leh xuduudo shabakadeed oo faahfaahsan
habayn fudud - ku xidhidhka bogga si fudud loo dejiyo
xubnaha - isku xirka bogga maamulka noodhka

Si aad u habayn dheeraad ah raac linkiga habayn fudud. Bogga furmaya, isticmaaluhu wuxuu qeexayaa cinwaanno kala duwan oo IPv4 ah shabakadda la abuurayo. Tan waxaa si toos ah loo samayn karaa adigoo riixaya badhan Samee ciwaanka shabakada ama gacanta adiga oo gelaya maaskarada shabakadaha goobta ku habboon CID.

Markaad xaqiijinayso gelitaanka xogta guusha leh, waa inaad ku noqotaa bogga liiska shabakadaha adoo isticmaalaya badhanka Back. Halkaa marka ay marayso, dejinta shabakadda aasaasiga ah waxaa loo tixgelin karaa mid dhammaystiran.

Isku xirka qanjidhada shabakada

Marka hore, adeegga ZeroTier One waa in lagu rakibaa marinka uu isticmaaluhu rabo inuu ku xidho shabakadda.
Waa maxay ZeroTier One?ZeroTier One waa adeeg ku shaqeeya laptops, desktop-yada, server-yada, mashiinada farsamada iyo weelasha bixiya isku xirka shabakada farsamada iyada oo loo marayo shabakad shabakadeed, oo la mid ah macmiilka VPN.

Marka adeegga la rakibo oo la bilaabo, waxaad ku xidhi kartaa shabakadaha casriga ah adoo isticmaalaya ciwaanadooda 16-god ah. Shabakad kastaa waxay u muuqataa sida deked shabakadeed oo toos ah nidaamka, taas oo u dhaqanta sida deked Ethernet oo kale ah.
Xiriirinta qaybinta, iyo sidoo kale amarrada rakibidda, ayaa la heli karaa bogga soo saaraha.

Waxaad ku maareyn kartaa adeegga lagu rakibay Terminal-ka khadka taliska (CLI) oo leh xuquuqda maamulka/xididdada. On Windows/MacOS sidoo kale isticmaalaya interface garaaf ah. Gudaha Android/iOS adiga oo isticmaalaya GUI kaliya.
Hubinta guusha rakibidda adeegga:
CLI:
```
zerotier-cli status
```
Natiijada:

200 info ebf416fac1 1.4.6 ONLINE
GUI:

Xaqiiqda ah in codsigu uu socdo iyo joogitaanka xariiqa aqoonsiga node oo leh ciwaanka noodhka.
Ku xidhida noodhka shabakada:
CLI:
```
zerotier-cli join <Network ID>
```
Natiijada:

200 join OK

GUI:

Windows: midig-guji astaanta ZeroTier One gudaha saxanka nidaamka iyo xulashada shayga - Ku Soo Biir Shabakadda.

MacOS: Bilaw codsiga ZeroTier One menu bar, haddaan hore loo bilaabin. Guji astaanta oo dooro Ku Soo Biir Shabakadda.

Android/iOS: + (oo lagu daray sawirka) abka

Goobta soo muuqata, geli koontaroolaha shabakadda ee lagu qeexay GUI Aqoonsiga Shabakadda, oo riix Ku biir/ku dar Shabakadda.
U qoondaynta cinwaanka IP-ga martigeliyaha
Hadda waxaan ku laabaneynaa kantaroolka shabakada iyo bogga leh liiska shabakadaha raac xiriirka xubnaha. Haddii aad ku aragto sawir la mid ah kan shaashadda, waxay la macno tahay kontoroolka shabakadaada ayaa helay codsi lagu xaqiijinayo isku xirka shabakadda qanjidhada ku xiran.

Boggan waxaan uga tagnay wax walba sida ay hadda yihiin oo raac xiriirka IP meelaynta u tag bogga si aad ugu qoondayso ciwaanka IP-ga ee noodhka:

Ka dib marka aad meelayso cinwaanka, guji badhanka Back ku soo celi bogga liiska qanjidhada ku xiran oo deji magaca - Magaca xubinta oo calaamadi sanduuqa jeeg-bixinta si aad u oggolaato noodhka shabakada - La oggol yahay. Jid ahaan, sanduuqa hubinta ayaa ah shay aad ugu habboon in laga gooyo / isku xidhka shabakada martida loo yahay mustaqbalka.

Keydi isbeddelada addoo isticmaalaya badhanka Refresh.
Hubinta heerka isku xidhka noodhka ee shabakada:
Si aad u hubiso heerka isku xidhka qandaarka laftiisa, orod:
CLI:
```
zerotier-cli listnetworks
```
Natiijada:

200 listnetworks <nwid> <name> <mac> <status> <type> <dev> <ZT assigned ips> 200 listnetworks 2da06088d9f863be My_1st_VLAN be:88:0c:cf:72:a1 OK PRIVATE ethernet_32774 10.10.10.2/24
GUI:

Xaaladda shabakadu waa inay OK

Si aad isugu xidho qanjidhada hadhay, ku celi hawlgalada 1-5 mid kasta oo iyaga ka mid ah.

Hubinta isku xidhka shabakada qanjidhada

Tan waxaan ku sameeyaa anigoo ordaya amarka ping Qalabka ku xidhan shabakada aan hadda maamulo.

Shaashada shaashadda ee koontaroolaha Web-GUI waxaad ku arki kartaa saddex nood oo ku xiran shabakadda:

ZTNCUI - 10.10.10.1 - maamulaha shabakadayda GUI - VDS mid ka mid ah RuVDS DC-yada. Shaqada caadiga ah looma baahna in lagu daro shabakada, laakiin waxaan sameeyay tan sababtoo ah waxaan rabaa in aan xannibo gelitaanka shabakada internetka ee dibadda. Wax badan oo arrintan ku saabsan gadaal.
MyComp - 10.10.10.2 - Kumbiyuutarka shaqadaygu waa PC-ga jirka ah
Kaabta - 10.10.10.3 - VDS ee DC kale.

Sidaa darteed, kombuyuutarkayga shaqada waxaan ka hubinayaa helitaanka qanjidhada kale ee amarrada:

ping 10.10.10.1

Pinging 10.10.10.1 with 32 bytes of data: Reply from 10.10.10.1: bytes=32 time=14ms TTL=64 Reply from 10.10.10.1: bytes=32 time=4ms TTL=64 Reply from 10.10.10.1: bytes=32 time=7ms TTL=64 Reply from 10.10.10.1: bytes=32 time=2ms TTL=64

Ping statistics for 10.10.10.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 2ms, Maximum = 14ms, Average = 6ms

ping 10.10.10.3

Pinging 10.10.10.3 with 32 bytes of data: Reply from 10.10.10.3: bytes=32 time=15ms TTL=64 Reply from 10.10.10.3: bytes=32 time=4ms TTL=64 Reply from 10.10.10.3: bytes=32 time=8ms TTL=64 Reply from 10.10.10.3: bytes=32 time=4ms TTL=64

Ping statistics for 10.10.10.3: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 4ms, Maximum = 15ms, Average = 7ms

Isticmaaluhu waxa uu xaq u leeyahay in uu isticmaalo qalabyo kale si uu u hubiyo helitaanka noodhka shabakada,labadaba lagu dhex dhisay OS iyo sida NMAP, Advanced IP Scanner, iwm.

Waxaan ka qarinaa gelitaanka GUI kantaroolka shabakada dibadda.

Guud ahaan, waxaan yarayn karaa suurtogalnimada gelitaanka aan la ogalayn ee VDS-ka kaas oo kantaroolahayga shabakadu ku yaalo aniga oo isticmaalaya firewall-ka koontada gaarka ah ee RuVDS. Mawduucan waxay u badan tahay maqaal gaar ah. Sidaa darteed, halkan waxaan ku tusi doonaa sida loo bixiyo marin u helka GUI kantaroolka kaliya ee shabakada aan ku abuuray maqaalkan.

Si tan loo sameeyo, waxaad u baahan tahay inaad ku xirto SSH VDS oo uu ku yaal koontaroolaha oo furo faylka qaabeynta adoo adeegsanaya amarka:

nano /opt/key-networks/ztncui/.env

Faylka la furay, ka dib xariiqda "HTTPS_PORT=3443" oo ka kooban ciwaanka dekedda uu GUI ka furmayo, waxaad u baahan tahay inaad ku darto xariiq dheeri ah oo ciwaanka GUI ku furmi doono - kiiskeyga waa HTTPS_HOST=10.10.10.1 .XNUMX.

Marka xigta waxaan kaydin doonaa faylka

Сtrl+C Y Enter

oo socodsii amarka:

systemctl restart ztncui

Taasina waa, hadda GUI ee kantaroolaha shabakadayda ayaa diyaar u ah oo kaliya shabakadaha shabakada 10.10.10.0.24.

Halkii gabagabo

Tani waa meesha aan rabo in aan ku dhameeyo qaybta koowaad ee hagaha la taaban karo ee abuurista shabakadaha farsamada ee ku salaysan ZeroTier. Waxaan rajeynayaa faallooyinkaaga.

Dhanka kale, si aad waqtiga uga gudubto ilaa daabacaadda qaybta soo socota, kaas oo aan kuu sheegi doono sida loo isku daro shabakad muuqaal ah oo muuqaal ah, sida loo habeeyo habka "dagaalyahanka" iyo wax kale, waxaan kuu soo jeedinayaa inaad isku daydo Abaabulida shabakadaada casriga ah adoo isticmaalaya koontaroolaha shabakada gaarka ah ee GUI oo ku salaysan VDS ee suuqa goobta RUVDS Intaa waxaa dheer, dhammaan macaamiisha cusub waxay leeyihiin muddo tijaabo bilaash ah oo ah 3 maalmood!

PS Haa! Waxaan ku dhawaaday inaan ilaawo! Waxaad ka saari kartaa noodhka shabakada adoo isticmaalaya amar ku jira CLI ee noodhkan.

zerotier-cli leave <Network ID>

200 leave OK

ama amarka Delete ee ku jira GUI-ga macmiilka ee noodhka.

-> Hordhac. Qayb aragtiyeed. Beddelka Smart Ethernet ee Meeraha Dhulka
-> Hage wax ku ool ah oo lagu dhisayo shabakadaha casriga ah. Qaybta 1
-> Hage wax ku ool ah oo lagu dhisayo shabakadaha casriga ah. Qaybta 2

Source: www.habr.com

Waxaa ku shaqeeya ZeroTier Hage wax ku ool ah oo lagu dhisayo shabakadaha casriga ah. Qaybta 1