Gwaro reKushandiswa kweSevha yeAmneziaWG

Vanhu vakawanda vari kushandisa VPN yavo pachinzvimbo chekuvimba nemasevhisi anobhadharwa, akagadzirwa kare: zvakachipa, zviri nani pakuchengetedza zvakavanzika, uye zvinokupa kutonga kwakazara kweseva. Imwe yesarudzo dzinoshanda zvikuru dzenzvimbo dzine kuvharirwa kwenetwork kwakanyanya iAmneziaWG, protocol yakagadzirwa neAmnezia project pamusoro peWireGuard.

WireGuard yekare inokurumidza uye yakavimbika, asi ine chimiro chepaketi chakagadzika uye kubatana maoko kunofungidzirwa, izvo masisitimu eDPI (Deep Packet Inspection) anogona kuvharira neminwe uye kuvharira. AmneziaWG inogadzirisa izvi: inowedzera mapaketi asina basa kune yakajairika WireGuard connection, inoronga maheader, uye inochinja saizi yeminda yekubatana maoko - saka siginecha yeWireGuard inonyangarika uye traffic haisisina kusiyanisa neyakajairika UDP traffic.

Watove nekushandisa tunnel yekare uye uchifunga kana zvakakodzera kuchinja? Enzanisa izvi ne OpenVPN/PPTP setup isina chinhu mu VPN server setup paLinux: PPTP kana OpenVPN? , kana ne vanilla WireGuard (hapana obfuscation) mu Maitiro ekuseta Wireguard VPN paserver yako.

Gwaro iri rinogadzira sevha yeAmneziaWG nemaoko, isina Docker kana web panel — nzvimbo diki pane VPS pachayo, yakagadzirirwa zvachose kubva pamutsetse wemirairo. Ndiyo sarudzo iri nyore uye inoshanda zvakanaka paVPS isina mari yakawanda, sezvo isingade GUI, isina database, uye isina reverse proxy. Muenzaniso weseva uri pazasi unoshandisa kero yeIP yenzvimbo — itsive nekero yeVPS yako chero painoonekwa.

Zvauchazoda: VPS inoshandisa Ubuntu 22.04/24.04 kana Debian 11/12, root access, uye kero yeIP yeVPS yako. Zita redhomaini haridiwi — AmneziaWG haishandise zvitupa, saka hapana chekuvandudza uye hapana cheDPI chinganzi TLS handshake.

Hausati wava neserver here? Ona Maitiro ekuraira server

Kubatanidza kuServer

Mahwindo (PuTTY)

Vhura PuTTY, isa kero yako yeIP yeVPS mumunda weHost Name, isa chiteshi pa22, wobva wapinda semudzi uchishandisa password yawakatumirwa neVPS ne email.

Kero ye IP yeseva: kero yako ye IP

pinda se: mudzi

Password: password yako

1. Vhura PuTTY, isa kero yako yeIP yeVPS mumunda weHost Name.  

2. Isa chiteshi pa22. 

3. Pinda mukati semudzi. 

4. Uchishandisa password yawakatumirwa nekambani yako yeVPS.

Mhedzisiro yacho inofanira kunge iri seinotevera:

Kuti uwane rumwe ruzivo rwakadzama rwekubatanidza kuburikidza nePuTTY/SSH, ona Maitiro ekubatanidza kune sevha yeLinux kuburikidza neSSH

Linux / macOS (terminal)

ssh root@YOUR_SERVER_IP

Mirairo yese iri pazasi inoitwa paserver, muchikamu chimwe chete ichi cheSSH — chinofukidza Zvikamu 2 kusvika 5, pamwe nekutarisa kweserver-side muChikamu 9. Zvikamu 6–8 (kuisa nekugadzirisa VPN client) zvinoitika paWindows/macOS/Linux device yako, sezvo iriyo device iyo VPN inoda kushanda pairi; chimwe nechimwe chezvikamu izvozvo chinotaura zvakajeka kuti mitsetse ipi, kana iripo, ichiri kubata server.

Kugadzirira Server

Dzorerai system

Usati waisa chero chinhu, gadziridza runyorwa rwemapakeji uye simudzira mapakeji akaiswa:

apt update -y && apt upgrade -y

Kana izvi zvikavandudza kernel, tangazve usati wagadzira AmneziaWG kernel module muChikamu 3, zvikasadaro DKMS inogona kuvaka ichipesana nekernel headers dzisiridzo uye module yacho ichakundikana kurodha. (Kuti uwane ruzivo nezve apt uye mashandiro anoita Linux package managers, ona Linux Package Managers .) Tarisa ne:

cat /var/run/reboot-required

Bvumira kutumira IP

Kurongeka uku kunoita kuti sevha itumire mapaketi evatengi pa internet — pasina iyo, mugero uchabuda asi hapana traffic ichapfuura nepakati payo.

echo "net.ipv4.ip_forward = 1" > /etc/sysctl.d/00-amnezia.conf
sysctl --system

Murairo wekutanga unogadzira faira rekugadzirisa rakatsaurirwa; wechipiri unorishandisa pasina kutangazve sevha.

Gadzirisa firewall (UFW)

Kuti uwane rumwe ruzivo nezvemitemo yeUFW, ona Kugadzirisa Firewall paLinux

Vhura maport maviri aunoda: 22/tcp yeSSH (siya mutemo uyu uye unogona kurasikirwa nekushandisa sevha) uye 42666/udp, port AmneziaWG ichateerera.

apt install ufw -y
ufw allow 22/tcp
ufw allow 42666/udp
ufw --force enable
ufw status

Mitemo yese miviri inofanira kuratidzwa sekuti ALLOW mu ufw status output.

Kuisa AmneziaWG

Debian haitsigire maPPA eUbuntu zvakananga, saka nzvimbo yekuchengetera data inofanira kuwedzerwa nemaoko kwete ne add-apt-repository. Izvi zvinoshandawo paUbuntu.

Wedzera repository nemaoko

echo "deb [arch=amd64] https://ppa.launchpadcontent.net/amnezia/ppa/ubuntu jammy main" > /etc/apt/sources.list.d/amnezia.list

apt install -y gnupg2
gpg --keyserver keyserver.ubuntu.com --recv-keys 57290828
gpg --export 57290828 | tee /usr/share/keyrings/amnezia.gpg > /dev/null
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/amnezia.gpg] https://ppa.launchpadcontent.net/amnezia/ppa/ubuntu jammy main" > /etc/apt/sources.list.d/amnezia.list

apt update
apt install -y amneziawg

Simbisa kuti module yaiswa

modprobe amneziawg
lsmod | grep amnezia

Kugadzira Sevha uye Kugadziriswa kweMutengi

Isa zvishandiso zvekubatsira

Isa qrcode dependency, wobva wagadzira dhairekitori rinoshanda rakatsaurirwa uye wodhawunirodha script ye community config-generator mairi:

apt install -y python3-qrcode
mkdir -p ~/awg && cd ~/awg
wget -O awgcfg.py \
  https://gist.githubusercontent.com/remittor/8c3d9ff293b2ba4b13c367cc1a69f9eb/raw/awgcfg.py

Kana python3-qrcode isipo pama repos e distro yako, dzokera ku pip3 install qrcode --break-system-packages (mureza unodiwa paDebian 12+/Ubuntu 24.04, iyo inovhara unmanaged pip installs ne default). Usamhanyisa ma install ese ari maviri — sarudza imwe.

Gadzira magadzirirwo eseva

Gadzira /etc/amnezia/amneziawg/awg0.conf. Unogona kusiya subnet yemukati memugero neUDP port kana zvangoitwa kana kuti sarudza yako:

python3 awgcfg.py --make /etc/amnezia/amneziawg/awg0.conf \
  -i 10.10.8.1/24 -p 42666

Mureza we -i unoisa kero yemukati ye network yemugero uye mask; -p inoisa chiteshi che UDP cheseva (icho chakavhurwa padanho 2.3).

Gadzira template ye client-config

python3 awgcfg.py --create

Izvi zvinochengetedza template muforodha imwecheteyo iyo magadzirirwo emunhu wega wega akavakirwa kubva mairi - inotove nekiyi yeruzhinji yeseva, kero yayo yeIP, uye maparamita e obfuscation (Jc, Jmin, Jmax, S1, S2, H1–H4) anosiyanisa AmneziaWG kubva kune WireGuard.

Wedzera vatengi

Gadzira chinhu chimwe chete pamudziyo wega wega — zita racho rinogona kuva chero chinhu, semuenzaniso zita remudziyo:

python3 awgcfg.py -a "laptop"
python3 awgcfg.py -a "phone"

Gadzira mafaira evatengi uye maQR code

python3 awgcfg.py -c -q

Folda re~/awg rava nefaira rakaita selaptop.conf nephone.conf, pamwe chete nemakodhi ePNG QR anoenderana aunogona kuskena zvakananga muapp yefoni.

Folda re~/awg rava nefaira rakaita selaptop.conf nephone.conf, pamwe chete nemakodhi ePNG QR anoenderana aunogona kuskena zvakananga muapp yefoni.

Kutanga Basa uye Kugonesa Autostart

Uya ne awg0 interface uye igonese kutanga otomatiki panotangazve:

systemctl enable --now awg-quick@awg0
systemctl restart [email protected]
systemctl status [email protected]

Status inofanira kuratidza kuti inoshanda (yabuda) kana unit yavhurwa paboot. Kana console ikaita seyaka "reng" ichiratidza magwaro, tinya Q kuti ubude.

Tarisa runyorwa rwevanhu vanoshanda pamwe chete nevanhu vanodarika traffic yemunhu mumwe nemumwe uchishandisa:

awg show

Kubatanidza kubva kuWindows

Zvese zviri muchikamu chino zvinoitika paWindows PC yako, kwete pamusoro peSSH - VPN client inofanira kuiswa pamudziyo uchashandisa mugero wacho. Danho rega rinobata sevha kurodha scp mu6.2, uye kunyange murairo iwoyo unonyorwa paPC yako, uchidhonza faira rakatogadzirwa nesevha muChikamu 4.

Isa mutengi

AmneziaWG ine Windows app yakatsaurirwa — interface yayo inofanana neWireGuard client yakajairika asi inonzwisisa ma "obfuscation parameters". Dhawunirodha installer kubva kunzvimbo yepamutemo yepurojekiti:

https://github.com/amnezia-vpn/amneziawg-windows-client/releases

Chinongedzo chiri pamusoro apa ipeji reWindows client's releases rinochengetwa — dhawunirodha .msi/.exe asset yazvino kubva ipapo. Iri ipeji rekuvhura mubrowser yako, kwete murairo wekunamira muterminal.

Mhanyai installer mobva mapinda mu setup wizard; defaults hadzidi kuchinjwa.

Tumira magadzirirwo acho

Kopa faira remutengi kubva kuseva kuenda kukombiyuta yako - nzira iri nyore ndeye scp, mhanyisa muPowerShell pakombiyuta yako, kwete sevha:

scp root@YOUR_SERVER_IP:~/awg/laptop.conf .

MuAmneziaWG app, tinya "Import tunnel(s) kubva kufaira", sarudza laptop.conf, wobva wabatidza toggle iri padivi petunnel itsva.

Kubatana kubva ku macOS

Pane sarudzo mbiri dzinotsigirwa:

• AmneziaWG (Mac App Store): mutengi akareruka, anoshanda pa macOS 12 zvichikwira. Tsvaga "AmneziaWG" muApp Store, isa, wobva washandisa "Import tunnel(s) kubva kufaira" wosarudza faira rako re.conf — mashandiro akafanana neWindows client.
• AmneziaVPN (app yakazara, macOS 14+): dhawunirodha .pkg kubva ku github.com/amnezia-vpn/amnezia-client/releases/latest kana uchida kushandisa Amnezia app yakazara pane kushandisa AmneziaWG-client isina kureruka chete.

Kopa config yemutengi kutanga kana zvichidikanwa, zvakafanana nezviri padanho 6.2:

scp root@YOUR_SERVER_IP:~/awg/laptop.conf .

Kubatanidza kubva kuLinux

apt install -y amneziawg
cp laptop.conf /etc/amnezia/amneziawg/awg0.conf
awg-quick up awg0

Mhanya kodhi iyi kuti ubvise.

awg-quick down awg0 

Kuti uunze mugero otomatiki paunopinda, ita kuti ushande sebasa:

systemctl enable --now awg-quick@awg0

Kuongorora Kubatana

Uchishandisa tunnel iri kushanda kubva muChikamu 6, 7, kana 8, dzokera kumudziyo wako (kwete SSH session) wovhura chero cheki ye "what's my IP" mubrowser - kero iri kuratidzwa inofanira kuenderana nekero ye IP yeVPS yako. Kuti uone kubva mukati meSSH session, mhanyisa awg show on the server uye simbisa kuti peer yemutengi inoratidza kubatana maoko munguva pfupi yapfuura uye traffic isiri zero.

Dheuteronomio:

S1/S2 neH1–H4 chete ndizvo zvinofanirwa kunge zvakafanana kumativi ese emugero; Jc, Jmin, neJmax ndezvekuti divi rega rega rinochengetedza sei traffic yaro yejunk, saka kukosha kwemutengi neserver kunogona kusiyana zviri pamutemo, sezvazvakaita mumuenzaniso uri pamusoro.

mhedziso

Kutevera gwara iri kunoita kuti VPS yako ishandise sevha yayo yeAmneziaWG: protocol inoenderana neWireGuard ine traffic obfuscation iyo inoomera maDPI systems kusiyanisa traffic yakajairika yeUDP pane WireGuard. Sevhisi iyi inoshanda se systemd unit awg-quick@awg0 uye inopona kana sevha yatangazve pasina chiito chauri kuita.

Mafaira e .conf nemaQR codes ari mu ~/awg anoshanda kwete chete neWindows client asiwo anogona kupinzwa mumapurogiramu eAmneziaWG kana Amnezia eAndroid, iOS, macOS, neLinux, pamwe nemarouters eKeenetic neOpenWrt.

Wedzera vatengi vatsva chero nguva nekudzokorora matanho 4.4–4.5 (python3 awgcfg.py -a "zita", wobva waisa awgcfg.py -c -q) wotangazve interface ne systemctl restart [email protected].

Maitiro mashoma akakodzera kuchengetwa kana sevha yave kushanda:

• Chengeta sisitimu yakagadziriswa. Dzokorora apt update -y && apt upgrade -y nguva nenguva, wotangazve mushure mekuvandudza kernel kuitira kuti DKMS ivakezve amneziawg module ichipesana nekernel itsva.
• Backup up ~/awg. Inobata kiyi yega yega yemutengi uye kiyi yeseva pachayo mu awg0.conf; kurasikirwa nayo zvinoreva kugadzirisa ma configs emudziyo wega wega.
• Bvisa zvishandiso zvakarasika nekukasika. Bvisa block ye[Peer] inoenderana kubva pa /etc/amnezia/amneziawg/awg0.conf wobva watanga systemctl restart [email inodzivirirwa].

Kana kubatana kwacho kukasauya, tarisa zvinotevera:

• mamiriro ebasa (systemctl mamiriro [email inodzivirirwa])
• mitemo yefirewall (ufw status — port 42666/udp inofanira kunge yakavhurika)
• mamiriro eDKMS/module kana interface isingatombotangi (dkms status, lsmod | grep amnezia)
• runyorwa rwevanhu vanoshanda paserver (awg show)
• kuti config yemutengi inonongedzera kune kero chaiyo yekunze ye IP server

Kuenzanisa AmneziaWG nedzimwe sarudzo usati waita chibvumirano? Ona VPN server setup paLinux: PPTP kana OpenVPN? uye Maitiro ekuisa Wireguard VPN paserver yako . Kana uchingoda proxy iri nyore pane VPN tunnel yakazara, 3proxy configuration paCentOS/ArchLinux inzira yakareruka. Kuti server iome kana VPN yave kushanda, ona Linux Users: Management and Permissions.