Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2

Ngexesha lamanyathelo amahlanu okuqala achazwe kwinqaku Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-1 Siqhagamshele iindawo ezintathu ezikude ngokwejografi ngothungelwano olubonakalayo. Enye ifumaneka kuthungelwano lwenyama, ezinye ezimbini zifumaneka kwii-DC ezimbini ezahlukeneyo.  

Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2
Oku akuzange kuthathe ixesha elininzi, nangona nganye kwezi nodi zongezwa kuthungelwano nganye nganye. Kodwa kuthekani ukuba ufuna ukuqhagamshela hayi enye kuphela, kodwa zonke iinodi kwinethiwekhi ebonakalayo kwinethiwekhi yeZeroTier? Lo msebenzi wavela ngenye imini xa ndandididekile ngumba wokulungiselela ukufikelela kwinethiwekhi ebonakalayo ukuya kumshicileli wenethiwekhi kunye nomzila. 

Ndazama ukusebenzisa indlela echazwe ngasentla, kodwa ayizange ikhawuleze kwaye ingabi lula kuyo yonke indawo. Umzekelo, umshicileli wenethiwekhi - awukwazi ukuyidibanisa nje. Mikrotik - ZeroTier ayixhasi. Kwenziwe ntoni? Emva kwe-googling eninzi kunye nokuhlalutya i-hardware, ndafikelela kwisigqibo sokuba kuyimfuneko ukuququzelela ibhuloho yenethiwekhi.

Ibhulorho yenethiwekhi (Kwakhona ibhulorho ukusuka kwisiNgesi ibhulorho) sisixhobo sothungelwano esikwinqanaba lesibini lemodeli yeOSI, eyenzelwe ukudibanisa amacandelo (ii-subnets) zothungelwano lwekhompyuter kwinethiwekhi enye.

Ndifuna ukwabelana ngebali lendlela endenze ngayo kweli nqaku.. 

Kubiza ntoni kuthi ukwakha ibhulorho...

Ukuqala, mna, njengomlawuli, kwafuneka ndithathe isigqibo sokuba yeyiphi i-node kwinethiwekhi eya kusebenza njengebhulorho. Emva kokuba ndifunde iinketho, ndiye ndaqonda ukuba inokuba nasiphi na isixhobo sekhompyuter esikwaziyo ukucwangcisa ibhulorho phakathi konxibelelwano lwenethiwekhi. Inokuba njenge-router - isixhobo iqhuba i-OpenWRT okanye RUT izixhobo series evela Teltonika, kunye nomncedisi oqhelekileyo okanye ikhompyutha. 

Ekuqaleni, ewe, ndiye ndacinga ukusebenzisa i-router ene-OpenWRT ebhodini. Kodwa ngenxa yokuba iMikrotik ekhoyo indifanela ngokupheleleyo, nangona ingakuxhasi ukudityaniswa kunye neZeroTier, kwaye andifuni ukugqwesa kunye "nokudanisa ngentambula," ndagqiba ekubeni ndisebenzise ikhomputha njengebhulorho yenethiwekhi. Oko kukuthi, iRaspberry Pi 3 Model B ihlala iqhagamshelwe kuthungelwano lwenyama eqhuba inguqulelo yamva nje yeRaspbian, i-OS esekwe kwiDebian Buster.

Ukuze ukwazi ukuququzelela ibhulorho, enye i-interface yenethiwekhi engasetyenziswanga zezinye iinkonzo kufuneka ifumaneke kwisixhobo. Kwimeko yam, eyona Ethernet iphambili yayisele isetyenziswa, ndiye ndalungiselela eyesibini. Ukusebenzisa i-adapter ye-USB-Ethernet esekelwe kwi-chipset ye-RTL8152 esuka kwi-Realtek kulo msebenzi.

Emva kokudibanisa iadaptha kwizibuko le-USB lasimahla, ukuhlaziya kunye nokuqalisa inkqubo:

sudo apt update && sudo apt upgrade -y
sudo reboot

Ndijonge ukuba inkqubo iyayibona iadaptha ye-USB Ethernet:

sudo lsusb

Emva kokuhlalutya idatha efunyenweyo

Bus 001 Device 004: ID 0bda:8152 Realtek Semiconductor Corp. RTL8152 Fast Ethernet Adapter
Bus 001 Device 003: ID 0424:ec00 Standard Microsystems Corp. SMSC9512/9514 Fast Ethernet Adapter
Bus 001 Device 002: ID 0424:9514 Standard Microsystems Corp. SMC9514 Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

Ndonwabile ukuqaphela ukuba iDevice 004 yiadaptha yam nje.

Okulandelayo, ndacacisa ukuba yeyiphi i-interface yenethiwekhi eyabelwe le adaptha:

dmesg | grep 8152

[    2.400424] usb 1-1.3: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=20.00
[    6.363837] usbcore: registered new interface driver r8152
[    6.669986] r8152 1-1.3:1.0 eth1: v1.09.9
[    8.808282] r8152 1-1.3:1.0 eth1: carrier on

Kwavela I-eth1 🙂 Kwaye ngoku ndiyakwazi ukuyiqwalasela kunye nebhulorho yenethiwekhi. 

Eyona nto ndiyenzileyo kukulandela i-algorithm ingezantsi:

  • Kufakwe iipakethe zolawulo lwebhulorho yenethiwekhi:
    sudo apt-get install bridge-utils
  • Ifakiwe I-ZeroTier ONE:
     

    curl -s https://install.zerotier.com | sudo bash
  • Iqhagamshelwe kwinethiwekhi yeZeroTier ekhoyo:
    sudo zerotier-cli join <Network ID>
  • Uphumeze umyalelo wokuvala idilesi ye-IP ye-ZeroTier kunye nolawulo lwendlela:
    sudo zerotier-cli set <networkID> allowManaged=0

Okulandelayo kwisilawuli senethiwekhi yakho:

В IiNethiwekhi nqakraza kwi nkcukacha, ifunyenwe kwaye ilandele ikhonkco v4YabelaImo kwaye ivaliwe unikezelo oluzenzekelayo lweedilesi ze-IP ngokungakhangeli ibhokisi yokukhangela Ukwabela ngokuzenzekela ukusuka kwiPool yeSabelo ye-IP

Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2
Emva koko, ndigunyazise i-node edibeneyo ngokuseta igama kunye nokujonga iibhokisi zokukhangela Ugunyaziwe и Ibhulorho esebenzayo. Andabelanga dilesi yeIP.

Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2
Emva koko wabuyela ekuseteni ibhulorho yenethiwekhi kwindawo, apho wavula ifayile yoqwalaselo lojongano lwenethiwekhi ukulungiselela ukuhlelwa kwi-terminal:

sudo nano /etc/network/interfaces

Ndidibanise phi le migca ilandelayo?

auto eth1
allow-hotplug eth1
iface eth1 inet manual

auto br0
allow-hotplug br0
iface br0 inet static
        address 192.168.0.10
        netmask 255.255.255.0
        gateway 192.168.0.1
        network 192.168.0.0
        broadcast 192.168.0.255
        dns-nameservers 127.0.0.1
        bridge_ports eth1 ztXXXXXXXX
        bridge_fd 0
        bridge_maxage 0

Kuphi I-eth1 — i-adaptha ye-USB Ethernet edibeneyo engazange yabelwe idilesi ye-IP.
br0 - ibhulorho yothungelwano eyenziwayo enedilesi ye IP esisigxina eyabelwe ukusuka kuluhlu lwedilesi yothungelwano lwam lomzimba.
ztXXXXXXXXX -Igama le-ZeroTier ujongano lwenyani, elaqatshelwa ngumyalelo:

sudo ifconfig

Emva kokufaka ulwazi, ndigcine ifayile yoqwalaselo kwaye ndilayishe kwakhona iinkonzo zenethiwekhi ngomyalelo:

sudo /etc/init.d/networking restart

Ukujonga ukusebenza kwebhulorho, ndibalekise umyalelo:

sudo brctl show   

Ngokutsho kwedatha efunyenweyo, ibhuloho ivukile.

bridge name	bridge id		STP enabled	interfaces
br0		8000.00e04c360769	no		eth1
							ztXXXXXXXX

Emva koko, ndatshintshela kwisilawuli senethiwekhi ukuseta indlela.

Kutheni ndilandele ikhonkco kuluhlu lweendawo zenethiwekhi? Isabelo se-IP ibhulorho yenethiwekhi. Okulandelayo, kwifestile evulayo, cofa Iindlela ezilawulwayo. Ndaya kwiphepha elitsha, apho njengoko target wakhomba 0.0.0.0 / 0, kwaye njengoko Gateway - Idilesi ye-IP yebhulorho yenethiwekhi ukusuka kuluhlu lwedilesi yenethiwekhi yombutho, echazwe ngaphambili. Kwimeko yam 192.168.0.10

Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2
Uqinisekisile idatha engenisiweyo kwaye waqala ukukhangela uxhulumaniso lwenethiwekhi yee-nodes, e-pinging i-node kwi-network ye-virtual network evela kwi-node yenethiwekhi yomzimba kunye nokwelinye icala.

Kuko konke!

Nangona kunjalo, ngokungafaniyo neprototype apho izikrini zithathwe khona, iidilesi ze-IP ze-network network nodes zisuka kuluhlu olufanayo kunye needilesi ze-IP zeendawo kwinethiwekhi ebonakalayo. Xa amanethiwekhi e-bridging, le modeli inokwenzeka, into ephambili kukuba ayidibanisi kunye needilesi ezihanjiswa ngumncedisi we-DHCP.

Andiyi kuthetha ngokwahlukileyo malunga nokuseka ibhuloho yenethiwekhi kwicala lomninimzi eliqhuba i-MS Windows kunye nezinye izabelo ze-Linux kweli nqaku - i-Intanethi igcwele izinto eziphathekayo kwesi sihloko. Ngokubhekiselele kwiisetingi kwicala lomlawuli wenethiwekhi, ziyafana nezo zichazwe ngasentla.

Ndifuna nje ukuqaphela ukuba i-Raspberry PI yibhajethi kunye nesixhobo esifanelekileyo sokudibanisa amanethiwekhi kunye neZeroTier, kwaye kungekhona nje isisombululo esimileyo. Ngokomzekelo, abangaphandle banokusebenzisa ibhuloho yenethiwekhi elungiselelwe kwangaphambili esekelwe kwi-Raspberry PI ukudibanisa ngokukhawuleza uthungelwano olubonakalayo lomxhasi onikezelwa kunye neenyani ezisekelwe kwiZeroTier.

Mandiqukumbele le nxalenye yebali. Ndijonge phambili kwimibuzo, iimpendulo kunye namazwana - kuba kwisiseko sabo ndiya kwakha umxholo wenqaku elilandelayo. Okwangoku, ndicebisa ukuba uzame ukucwangcisa eyakho inethwekhi enenyani usebenzisa isilawuli somsebenzi womnatha wabucala one-GUI esekwe kwiVDS evela kwindawo yentengiso kwi. indawo I-RUVDS. Ngaphezu koko, bonke abathengi abatsha banexesha lelingo lasimahla leentsuku ezi-3!

-> Intshayelelo. Icandelo lethiyori. Ukutshintshela i-Smart Ethernet yePlanethi yoMhlaba
-> Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo loku-1
-> Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo loku-2

Ixhaswe nguZeroTier. Isikhokelo esisebenzayo sokwakha uthungelwano lwenyani. Icandelo lesi-2

umthombo: www.habr.com

Yongeza izimvo