Aratohu Whakatakotoranga Tūmau AmneziaWG

He tokomaha ake ngā tāngata e whakamahi ana i ā rātou ake VPN, kaua e whakawhirinaki ki ngā ratonga utu kua oti te hanga: he iti ake te utu, he pai ake mō te tūmataitinga, ā, ka hoatu ki a koe te mana whakahaere katoa o te tūmau. Ko tētahi o ngā kōwhiringa tino whai hua mō ngā rohe e aukati ana i te whatunga ko AmneziaWG, he kawa i whakawhanakehia e te kaupapa Amnezia i runga ake i a WireGuard.

He tere, he pono hoki a Classic WireGuard, engari he hanganga mōkihi pumau tōna, ā, he ringaringa rūrū e taea te matapae, ka taea e ngā pūnaha DPI (Deep Packet Inspection) te hopu i ngā tapumati me te aukati. Ka whakatauhia tēnei e AmneziaWG: ka tāpirihia e ia ngā mōkihi para ki te hononga WireGuard noa, ka whakarōpūtia ngā pane, ka whakarerekē i te rahi o ngā āpure ringaringa rūrū — kia ngaro ai te waitohu āhua o WireGuard, ā, kāore e tū motuhake te waka i te waka UDP noa.

Kei te whakahaere kē koe i tētahi kauhanga tawhito, ā, e whakaaro ana mēnā he pai te whakawhiti? Whakatauritea tēnei ki tētahi tatūnga OpenVPN/PPTP noa i roto i te tatūnga tūmau VPN i runga i te Linux: PPTP, OpenVPN rānei?, ki tētahi atu rānei ki tētahi WireGuard vanilla (kāore he whakapoauau) i roto i te Me pēhea te whakarite i te Wireguard VPN i runga i tō tūmau.

Mā tēnei aratohu ka whakatū ā-ringa i tētahi tūmau AmneziaWG, kāore he Docker, he papa tukutuku rānei — ko te iti rawa o te wāhi mahi i runga i te VPS tonu, ka whirihorahia katoatia mai i te rārangi whakahau. Koinei te kōwhiringa māmā rawa, ā, he pai te mahi i runga i tētahi VPS utu iti, nā te mea kāore e hiahiatia he GUI, kāore he pātengi raraunga, kāore hoki he takawaenga whakamuri. Ka whakamahia e te tauira tūmau i raro nei he wāhitau IP pupuri wāhi — whakakapia ki tō ake wāhitau VPS i ngā wāhi katoa e puta mai ana.

Ngā mea e hiahiatia ana e koe: he VPS e whakahaere ana i te Ubuntu 22.04/24.04, Debian 11/12 rānei, te urunga pakiaka, me te wāhitau IP o tō VPS. Kāore e hiahiatia he ingoa rohe — kāore a AmneziaWG e whakamahi i ngā tiwhikete, nō reira kāore he mea hei whakahou, kāore hoki he mea hei tohu mā te DPI hei ringaringa TLS.

Kāore anō kia whai tūmau? Tirohia Me pēhea te tono tūmau

Te hono atu ki te Tūmau

Matapihi (PuTTY)

Whakatuwheratia a PuTTY, tāuruhia tō wāhitau IP VPS ki te āpure Ingoa Kaihautū, tautuhia te tauranga ki te 22, ka takiuru hei pakiaka mā te whakamahi i te kupuhipa i tukuna atu e tō kaiwhakarato VPS ki a koe i roto i te īmēra.

Wāhitau IP tūmau: tō wāhitau IP

takiuru hei: pakiaka

Kupuhipa: tō kupuhipa

1. Whakatuwheratia a PuTTY, tāuruhia tō wāhitau IP VPS ki te āpure Ingoa Kaihautū.  

2. Tautuhia te tauranga ki te 22. 

3. Tāuruhia te takiuru hei pūtake. 

4. Mā te whakamahi i te kupuhipa i tukuna atu e tō kaiwhakarato VPS ki a koe mā te īmēra.

Me pēnei te hua:

Mō tētahi aratohu taipitopito mō te hono atu mā PuTTY/SSH, tirohia Me pēhea te hono atu ki tētahi tūmau Linux mā SSH

Linux / macOS (pūmanawa)

ssh root@YOUR_SERVER_IP

Ka whakahaerehia ngā whakahau katoa i raro nei i runga i te tūmau, i roto i tēnei wātū SSH anō — e kapi ana i ngā Wāhanga 2 ki te 5, me ngā tirotiro taha-tūmau i te Wāhanga 9. Ko ngā Wāhanga 6–8 (te tāuta me te whirihora i te kiritaki VPN) ka puta i runga i tō ake pūrere Windows/macOS/Linux, nā te mea koinei te pūrere e hiahiatia ana e te VPN hei whakahaere; e kī mārama ana ia o aua wāhanga ko ēhea rārangi, mēnā he rārangi, e pā tonu ana ki te tūmau.

Te Whakarite i te Tūmau

Whakahoutia te pūnaha

I mua i te tāuta i tētahi mea, whakahoutia te rārangi mōkihi ka whakapai ake i ngā mōkihi kua tāutahia:

apt update -y && apt upgrade -y

Ki te whakapai ake tēnei i te kernel, whakaara anō i mua i te hanga i te kōwae kernel AmneziaWG i te Wāhanga 3, ki te kore ka hanga pea a DKMS ki runga i ngā pane kernel hē, ā, ka kore te kōwae e uta. (Mō tētahi whakahoutanga mō te apt me te mahi a ngā kaiwhakahaere mōkihi Linux, tirohia ngā Kaiwhakahaere Mōkihi Linux .) Tirohia ki:

cat /var/run/reboot-required

Whakahohehia te tuku IP

Mā tēnei tautuhinga ka taea e te tūmau te tuku i ngā mōkihi a ngā kiritaki ki te ipurangi — ki te kore, ka puta ake te kauhanga engari kāore he waka e tika ana mā roto.

echo "net.ipv4.ip_forward = 1" > /etc/sysctl.d/00-amnezia.conf
sysctl --system

Ka waihangahia e te whakahau tuatahi tētahi kōnae whirihoranga motuhake; ka whakamahia e te whakahau tuarua me te kore e whakaara anō i te tūmau.

Whirihorahia te pareārai ahi (UFW)

Mō ētahi atu kōrero mō ngā ture UFW, tirohia te Whirihora i te Pātūahi i runga i te Linux

Whakatuwheratia ngā tauranga e rua e hiahiatia ana e koe: 22/tcp mō te SSH (tīpokahia tēnei ture, ā, ka ngaro pea tō urunga ki te tūmau) me te 42666/udp, ka whakarongohia e AmneziaWG.

apt install ufw -y
ufw allow 22/tcp
ufw allow 42666/udp
ufw --force enable
ufw status

Me whakaatu ngā ture e rua hei ALLOW i roto i te putanga ufw status.

Te Tāuta i te AmneziaWG

Kāore a Debian e tautoko tika i ngā PPA āhua Ubuntu, nō reira me tāpiri ā-ringa te putunga raraunga, kaua ki te add-apt-repository. He rite tonu te mahi a tēnei i runga i a Ubuntu.

Tāpirihia te putunga ā-ringa

echo "deb [arch=amd64] https://ppa.launchpadcontent.net/amnezia/ppa/ubuntu jammy main" > /etc/apt/sources.list.d/amnezia.list

apt install -y gnupg2
gpg --keyserver keyserver.ubuntu.com --recv-keys 57290828
gpg --export 57290828 | tee /usr/share/keyrings/amnezia.gpg > /dev/null
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/amnezia.gpg] https://ppa.launchpadcontent.net/amnezia/ppa/ubuntu jammy main" > /etc/apt/sources.list.d/amnezia.list

apt update
apt install -y amneziawg

Manatokohia te kōwae kua utaina

modprobe amneziawg
lsmod | grep amnezia

Te Whakaputa i te Whirihoranga Tūmau me te Kiritaki

Tāutahia ngā taputapu āwhina

Tāutahia te whakawhirinakitanga qrcode, kātahi ka waihangahia he whaiaronga mahi motuhake, ka tikiake i te tuhinga whirihora-hapori ki roto:

apt install -y python3-qrcode
mkdir -p ~/awg && cd ~/awg
wget -O awgcfg.py \
  https://gist.githubusercontent.com/remittor/8c3d9ff293b2ba4b13c367cc1a69f9eb/raw/awgcfg.py

Mena kāore a python3-qrcode e wātea ana i ngā repo o tō tohatoha, hoki atu ki te pip3 install qrcode --break-system-packages (me whakamahi te haki i runga i te Debian 12+/Ubuntu 24.04, e aukati ana i ngā tāutanga pip kāore i te whakahaeretia i te taunoa). Kaua e whakahaere i ngā tāutanga e rua — whiriwhiria tētahi.

Waihangahia te whirihoranga tūmau

Waihangahia /etc/amnezia/amneziawg/awg0.conf. Ka taea e koe te waiho i te whatunga ā-roto o te kauhanga me te tauranga UDP ki ō rātou tautuhinga taunoa, te whakarite rānei i tāu ake:

python3 awgcfg.py --make /etc/amnezia/amneziawg/awg0.conf \
  -i 10.10.8.1/24 -p 42666

Ka whakatakoto te haki -i i te wāhitau whatunga ā-roto me te kopare o te kauhanga; ka whakatakoto te -p i te tauranga UDP o te tūmau (ko taua tauranga anō i whakatuwheratia i te taahiraa 2.3).

Waihangatia te tauira whirihoranga-kiritaki

python3 awgcfg.py --create

Ka tiakina e tēnei he tauira ki roto i te kōpaki kotahi i hangaia ai ngā whirihoranga kiritaki takitahi — kei roto kē te kī tūmatanui o te tūmau, tōna wāhitau IP, me ngā tawhā huna (Jc, Jmin, Jmax, S1, S2, H1–H4) e wehewehe ana i a AmneziaWG mai i a WireGuard noa.

Tāpirihia ngā kiritaki

Waihangahia tētahi tāurunga mō ia pūrere — ka taea te ingoa te whakamahi i tētahi mea, hei tauira, te ingoa o te pūrere:

python3 awgcfg.py -a "laptop"
python3 awgcfg.py -a "phone"

Waihangahia ngā kōnae kiritaki me ngā waehere QR

python3 awgcfg.py -c -q

Ka kitea i roto i te kōpaki ~/awg ngā kōnae pēnei i te laptop.conf me te phone.conf, me ngā waehere QR PNG e ōrite ana ka taea te matawai tika ki roto i te taupānga pūkoro.

Ka kitea i roto i te kōpaki ~/awg ngā kōnae pēnei i te laptop.conf me te phone.conf, me ngā waehere QR PNG e ōrite ana ka taea te matawai tika ki roto i te taupānga pūkoro.

Te Tīmata i te Ratonga me te Whakahohe i te Tīmatanga Aunoa

Whakaarahia te atanga awg0 ka whakahohe kia tīmata aunoa ina whakaara anō:

systemctl enable --now awg-quick@awg0
systemctl restart [email protected]
systemctl status [email protected]

Me whakaatu te tūnga o te pūmanawa (kua puta) me te whakahohenga o te waeine i te tīmatanga. Ki te puta te papatohu me te whakaatu i ngā rangitaki, pēhia te Q hei puta.

Tirohia te rārangi o ngā hoa mahi hohe me te hokohoko mō ia hoa mā te whakamahi i:

awg show

Te hono atu mai i Windows

Ka tū ngā mea katoa o tēnei wāhanga i runga i tō rorohiko Windows, kaua mā te SSH — me tāuta te kiritaki VPN ki te taputapu ka whakamahi i te kauhanga. Ko te taahiraa anake e pā ana ki te tūmau ko te tango scp i te putanga 6.2, ā, ka patohia taua whakahau ki tō rorohiko, ka kukume i tētahi kōnae kua hangaia e te tūmau i te Wāhanga 4.

Tāutahia te kiritaki

He taupānga Windows motuhake tā AmneziaWG — he rite tōna atanga ki te kiritaki WireGuard paerewa engari e mārama ana ki ngā tawhā whakapōrearea. Tikiake i te tāuta mai i te putunga mana o te kaupapa:

https://github.com/amnezia-vpn/amneziawg-windows-client/releases

Ko te hononga i runga ake nei ko te whārangi tuku o te kiritaki Windows e tiakina ana — tikiake i te rawa .msi/.exe hou mai i reira. He whārangi tēnei hei whakatuwhera i roto i tō pūtirotiro, ehara i te whakahau hei whakapiri ki roto i te pūwhakamutunga.

Whakahaerehia te tāutanga ka takahia te ruānuku tatūnga; kāore e hiahiatia kia whakarerekētia ngā taunoa.

Kawemai i te whirihoranga

Tāruatia te kōnae whirihoranga kiritaki mai i te tūmau ki tō rorohiko — ko te huarahi māmā ko te scp, whakahaerehia i roto i te PowerShell i runga i tō rorohiko, kaua i te tūmau:

scp root@YOUR_SERVER_IP:~/awg/laptop.conf .

I roto i te taupānga AmneziaWG, pāwhiritia "Kawemai i te kauhanga mai i te kōnae", tīpakohia te laptop.conf, kātahi ka tahuri te pātene whakawhiti i te taha o te kauhanga hou.

Te hono atu mai i te macOS

E rua ngā kōwhiringa e tautokona ana:

• AmneziaWG (Mac App Store): he kiritaki māmā, e mahi ana i runga i te macOS 12 me ngā putanga hou ake. Rapua "AmneziaWG" i roto i te App Store, tāutahia, kātahi ka whakamahia "Kawemai te(ngā) tūhono mai i te kōnae" ka tīpako i tō kōnae .conf — he rite tonu te tukanga mahi ki te kiritaki Windows.
• AmneziaVPN (taupānga katoa, macOS 14+): tikiake i te .pkg mai i github.com/amnezia-vpn/amnezia-client/releases/latest mēnā he pai ake ki a koe te whakamahi i te taupānga Amnezia katoa-āhuatanga hei utu mō te kiritaki māmā AmneziaWG-anake.

Tāruatia te whirihoranga kiritaki ki runga i te tuatahi mēnā e tika ana, pērā i te taahiraa 6.2:

scp root@YOUR_SERVER_IP:~/awg/laptop.conf .

Te hono atu mai i Linux

apt install -y amneziawg
cp laptop.conf /etc/amnezia/amneziawg/awg0.conf
awg-quick up awg0

Whakahaerehia tēnei waehere hei momotu.

awg-quick down awg0 

Hei whakaara aunoa i te kauhanga i te wā e takiuru ana, whakahohea hei ratonga:

systemctl enable --now awg-quick@awg0

Manatoko i te Hononga

I te mea kei te whakahohehia te kauhanga mai i te Wāhanga 6, 7, 8 rānei, hoki atu ki tō ake pūrere (kaua ki te wātū SSH) ka whakatuwhera i tētahi tirotiro "he aha taku IP" i roto i te pūtirotiro — me ōrite te wāhitau e whakaaturia ana ki te wāhitau IP o tō VPS. Hei manatoko mai i roto i te wātū SSH, whakahaerehia te awg show i runga i te tūmau, ka whakaū kei te whakaatu te hoa o te kiritaki i tētahi rūrū ringa tata nei me te hokohoko kore-kore.

tohutoro:

Ko S1/S2 me H1–H4 anake me ōrite i ngā pito e rua o te kauhanga; ko Jc, Jmin, me Jmax te kaupapa matua o te whakakī i ngā raraunga para e tukuna ana e ia taha, nō reira ka rerekē pea ngā uara o te kiritaki me te tūmau, pērā i te tauira i runga ake nei.

Opaniraa

Mā te whai i tēnei aratohu ka taea e tō VPS te whakahaere i tana ake tūmau AmneziaWG: he kawa hototahi ki a WireGuard me te ārai i te rere o te waka e tino uaua ake ana mō ngā pūnaha DPI ki te wehewehe i te rere o te waka UDP noa i te WireGuard noa. Ka rere te ratonga hei wae pūnaha awg-quick@awg0, ā, ka ora tonu i te whakaara anō i te tūmau me te kore he mahi āu.

Ko ngā kōnae .conf me ngā waehere QR i roto i te ~/awg e mahi ana ehara i te mea me te kiritaki Windows anake engari ka taea hoki te kawemai ki ngā taupānga AmneziaWG, Amnezia rānei mō te Android, iOS, macOS, me Linux, tae atu ki ngā pouara Keenetic me OpenWrt.

Tāpirihia he kiritaki hou i ngā wā katoa mā te whakahoki i ngā taahiraa 4.4–4.5 (python3 awgcfg.py -a "name", kātahi ka awgcfg.py -c -q) me te tīmata anō i te atanga mā te whakamahi i te systemctl restart [email protected].

Anei ētahi tikanga hei pupuri māu ina tīmata te tūmau:

• Me whakapai tonu te pūnaha. Whakahaerehia anō te apt update -y && apt upgrade -y i ia wā, ka whakaara anō i muri i ngā whakahoutanga kernel kia hanga anō ai e DKMS te kōwae amneziawg ki te kernel hou.
• Tāruatia te ~/awg. Kei roto i te awg0.conf te kī tūmataiti o ia kiritaki me te takirua kī o te tūmau; ki te ngaro, ka hangaia anō ngā whirihoranga mō ia pūrere.
• Whakakorea wawetia ngā pūrere ngaro. Tangohia te poraka [Peer] e rite ana mai i /etc/amnezia/amneziawg/awg0.conf ka whakahaere i te systemctl restart [email tiakina].

Ki te kore e puta te hononga, tirohia te raupapa:

• te tūnga ratonga (tūnga systemctl [email tiakina])
• ngā ture pareārai ahi (tūnga ufw — me tuwhera te tauranga 42666/udp)
• te tūnga DKMS/kōwae mēnā kāore te atanga e tīmata (tūnga dkms, lsmod | grep amnezia)
• te rārangi o ngā hoa mahi hohe i runga i te tūmau (awg show)
• e tohu ana te whirihoranga kiritaki ki te wāhitau IP tūmau o waho tika

Te whakatairite i a AmneziaWG ki ētahi atu kōwhiringa i mua i te whakaae? Tirohia te tatūnga tūmau VPN i runga i te Linux: PPTP, OpenVPN rānei? me Me pēhea te whakarite i te Wireguard VPN i runga i tō tūmau . Mena he takawaenga māmā noa iho tāu e hiahia ana, kaua ki te kauhanga VPN katoa, he māmā ake te whirihoranga 3proxy i runga i te CentOS/ArchLinux . Mō te whakapakeketanga whānui o te tūmau ina ora te VPN, tirohia ngā Kaiwhakamahi Linux: Whakahaere me ngā Whakaaetanga.