{"id":373,"date":"2019-06-23T23:49:53","date_gmt":"2019-06-23T15:49:53","guid":{"rendered":"https:\/\/blog.espnlol.com\/?p=373"},"modified":"2022-04-20T18:28:19","modified_gmt":"2022-04-20T10:28:19","slug":"%e6%96%b0%e7%a7%91%e5%ad%a6%e4%b8%8a%e7%bd%91%e5%88%a9%e5%99%a8wireguard","status":"publish","type":"post","link":"https:\/\/blog.espnlol.com\/?p=373","title":{"rendered":"\u65b0\u79d1\u5b66\u4e0a\u7f51\u5229\u5668wireGuard"},"content":{"rendered":"<h2>\u7b80\u4ecb<\/h2>\n<p>2017\u5e74\uff0c\u65b0\u4e00\u4ee3VPN\u6280\u672fwireguard\u8bde\u751f\u3002wireguard\u57fa\u4e8elinux kernel\u5185\u6838\u8fd0\u884c\uff0c\u6548\u7387\u6781\u9ad8\uff0c\u901f\u5ea6\u5f88\u5feb\uff0c\u800c\u4e14\u652f\u6301\u8bbe\u5907IP\u5730\u5740\u6f2b\u6e38\u529f\u80fd\uff0c\u4e0d\u4ec5\u9002\u5408\u670d\u52a1\u5668\u4e4b\u95f4\u7684\u4e92\u8054\uff0c\u8fd8\u9002\u5408\u5728NAT\u73af\u5883\u4e0b\u4f7f\u7528\uff0c\u5305\u62ec\u5bb6\u4e2d\u7684\u667a\u80fd\u8def\u7531\u5668\uff0c\u914d\u5408openwrt\u7b49\u8def\u7531\u5668\uff0c\u53ef\u5b89\u88c5wireguard\uff0c\u5b9e\u73b0\u8def\u7531\u5668\u7ed1\u5b9awireguard\u4ee3\u7406\u529f\u80fd\u3002<\/p>\n<h1>\u5b89\u88c5<\/h1>\n<h5>\u7cfb\u7edf\u73af\u5883,\u5185\u6838\u7248\u672c<\/h5>\n<p>CentOS Linux release 7.6.1810 (Core)<\/p>\n<p>Linux\u00a0 5.1.12-1.el7.elrepo.x86_64 #1 SMP Wed Jun 19 08:49:21 EDT 2019 x86_64 x86_64 x86_64 GNU\/Linux<\/p>\n<h5>\u5347\u7ea7\u7cfb\u7edf\u5185\u6838\u5230\u6700\u65b0\u7248<\/h5>\n<pre class=\"\">yum update -y\nreboot<\/pre>\n<h5>\u5b89\u88c5wireGuard<\/h5>\n<pre class=\"\">sudo curl -Lo \/etc\/yum.repos.d\/wireguard.repo https:\/\/copr.fedorainfracloud.org\/coprs\/jdoss\/wireguard\/repo\/epel-7\/jdoss-wireguard-epel-7.repo\nsudo yum install epel-release -y\nsudo yum install wireguard-dkms wireguard-tools -y<\/pre>\n<h5>\u4f18\u5316\u5185\u6838\uff0c\u5f00\u542f\u8f6c\u53d1<\/h5>\n<pre class=\"\">net.core.default_qdisc=fq<br \/>net.ipv4.tcp_congestion_control=bbr\nnet.ipv4.ip_forward = 1<\/pre>\n<h5>\u521b\u5efa\u8bc1\u4e66<\/h5>\n<pre class=\"\">mkdir \/etc\/wireguard\ncd \/etc\/wireguard\nwg genkey | tee privatekey | wg pubkey &gt; publickey\n<\/pre>\n<h5>\u7f16\u5199\u670d\u52a1\u7aef\u914d\u7f6e\u6587\u4ef6<\/h5>\n<pre class=\"\">vim \/etc\/wireguard\/wg0.conf\n[Interface]\nAddress = 10.200.200.1\/24\nMTU = 1420\nPostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE\nPostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -D FORWARD -o wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE\nListenPort = 36661\nPrivateKey = $\u670d\u52a1\u7aef\u79c1\u94a5\n\n[Peer]\nPublicKey = $\u5ba2\u6237\u7aef\u516c\u94a5\nAllowedIPs = 10.200.200.2\/32\n\n###################################################\n\u914d\u7f6e\u7b80\u4ecb\n[Interface]             \u672c\u5730\u7f51\u7edc\u63a5\u53e3\u914d\u7f6e\nAddress                 \u5730\u5740\nMTU                     \u6700\u5927\u4f20\u8f93\u5355\u5143\uff0c\u4e0d\u8981\u8c03\u6574\nPostUp                  \u542f\u52a8\u4f20\u5165\u7684\u53c2\u6570\nPostDown                \u505c\u6b62\u4f20\u5165\u7684\u53c2\u6570\nListenPort              \u7aef\u53e3\u4fe1\u606f\nPrivateKey              \u670d\u52a1\u7aef\u7684\u79c1\u94a5\n\n[Peer]                  \u5ba2\u6237\u7aef\u8ba4\u8bc1\u914d\u7f6e\nPublicKey               \u5ba2\u6237\u7aef\u7684\u516c\u94a5\nlowedIPs                \u5141\u8bb8\u901a\u4fe1\u7684\u5730\u5740\n<\/pre>\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u7b80\u4ecb 2017\u5e74\uff0c\u65b0\u4e00\u4ee3VPN\u6280\u672fwireguard\u8bde\u751f\u3002wireguard\u57fa\u4e8e &hellip; <a href=\"https:\/\/blog.espnlol.com\/?p=373\">\u7ee7\u7eed\u9605\u8bfb <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-373","post","type-post","status-publish","format-standard","hentry","category-shadowsocks"],"_links":{"self":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=373"}],"version-history":[{"count":3,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/373\/revisions"}],"predecessor-version":[{"id":417,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=\/wp\/v2\/posts\/373\/revisions\/417"}],"wp:attachment":[{"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.espnlol.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}