| 摘 要: 针对WireGuard中AllowedIPs不能重叠的限制造成WireGuard网络中OSPF邻居无法建立的问题,提出了相应的解决方案。在多个WireGuard节点间建立了全互联的 OSPFoverlay网络;针对WireGuard虚拟专用网(VPN)中TCPMSS的变化对数据传输可靠性的影响,给出了透明修改TCPMSS的方案,保障了数据传输的可靠性。基于以上方案,使用EVE-NG模拟实现了3个站点的WireGuard多点全互联网络,成功测试了内网互联互通以及HTTP服务访问,验证了方案的有效性和正确性。 |
| 关键词: WireGuard VPN OSPF TCPMSS EVE-NG |
|
中图分类号:
文献标识码: A
|
|
| Multi-pointFull-meshVPNNetworkBasedonWireGuard |
|
YANG Yingpeng
|
(Dalian Neusoft University of Information, Dalian 116023, China)
yangyingpeng@neusoft.edu.cn
|
| Abstract: To solve the problem that OSPF neighbor relationships cannot be established in a WireGuard network caused by the non-overlapping constraint of the AllowedIPs field in WireGuard, this paper proposes a targeted solution to construct a ful-l mesh OSPF overlay network across multiple WireGuard nodes. To address the adverse effect of TCP MSS variation inside WireGuard Virtual Private Network (VPN) on data transmission reliability, a transparent TCP MSS adjustment scheme is designed to guarantee stable and reliable data transmission. On the basis of the above schemes, a three-site WireGuard mult-i point ful-l mesh network is simulated and deployed on the EVE-NG platform. Intranet interworking and HTTP service access are tested successfully, which verifies the effectiveness and correctness of the proposed schemes. |
| Keywords: WireGuard VPN OSPF TCP MSS EVE-NG |
