{"id":1976,"date":"2026-03-23T06:54:51","date_gmt":"2026-03-23T06:54:51","guid":{"rendered":"https:\/\/cms.dj.jjsz.cn\/?p=1976"},"modified":"2026-03-23T06:54:51","modified_gmt":"2026-03-23T06:54:51","slug":"%e7%9c%81%e4%b8%8b90vpn%e8%b4%b9%e7%94%a8%ef%bc%8c%e8%85%be%e8%ae%af%e4%ba%91%e4%b8%9c%e4%ba%acwireguard%ef%bc%8c%e6%89%93%e9%80%a0%e4%bd%a0%e7%9a%84%e4%b8%93%e5%b1%9e%e9%ab%98%e9%80%9fvpn","status":"publish","type":"post","link":"https:\/\/wp.dj.jjsz.cn\/thread-3-1-1.html","title":{"rendered":"\u7701\u4e0b90%VPN\u8d39\u7528\uff0c\u817e\u8baf\u4e91\u4e1c\u4eac+WireGuard\uff0c\u6253\u9020\u4f60\u7684\u4e13\u5c5e\u9ad8\u901fVPN"},"content":{"rendered":"<p>\u7701\u4e0b90%VPN\u8d39\u7528\uff0c\u817e\u8baf\u4e91\u4e1c\u4eac+WireGuard\uff0c\u6253\u9020\u4f60\u7684\u4e13\u5c5e\u9ad8\u901fVPN<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/mmbiz_png\/cmuthmM0hicsFy3LfWsiaibZOCSJax9Lo4SYwiaJiacKZgjIAZHeHbOwC8DnUibicu6vQbVx27HBsx1w5Q6sFbzp7SZOiaiaJ3ibia2RA3Yrx2x7cQ5LBE\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=0\" alt=\"\" \/>img\u817e\u8baf\u4e91\u4e1c\u4eac2\u68384G\u670d\u52a1\u5668\u7684\u5b8c\u6574WireGuard\u914d\u7f6e\u65b9\u6848\uff0c\u4ece\u670d\u52a1\u7aef\u5230\u5ba2\u6237\u7aef\u4e00\u6b65\u5230\u4f4d\u3002\u524d\u63d0<\/p>\n<ul>\nn<\/p>\n<li>\u2022 \u817e\u8baf\u4e91\u4e1c\u4eac2\u68384G\u670d\u52a1\u5668\uff08\u4e0d\u4e00\u5b9a\u975e\u8981\u662f\u4e1c\u4eac\uff09<br \/>\nn<\/li>\n<li>\u2022 \u624b\u673a\u80fd\u4e0b\u8f7dWireGuard<br \/>\nn<\/ul>\n<p>\u4e00\u3001\u670d\u52a1\u7aef\u914d\u7f6e1. \u5b89\u88c5WireGuard<br \/>\nn<br \/>\nn<br \/>\nn# \u66f4\u65b0\u7cfb\u7edf<br \/>\nnsudo apt update &amp;&amp; sudo apt upgrade -y<br \/>\nn<br \/>\nn# \u5b89\u88c5WireGuard\uff08Ubuntu 20.04+\u5df2\u5185\u7f6e\uff0c\u53ea\u9700\u5b89\u88c5\u5de5\u5177\uff09<br \/>\nnsudo apt install wireguard wireguard-tools -y<br \/>\nn<br \/>\nn# \u9a8c\u8bc1\u5b89\u88c5<br \/>\nnwg &#8211;version<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/mmbiz_png\/cmuthmM0hicuQsLckXoEZZ2ibEyvoTdOHv6OjHBGGibRGbATQlwLJwlrW4CatQDS4hSjZiaCYWmNnamdcw0nibcVichBp95yzrPs2WMF0LmGjUxUE\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=1\" alt=\"\" \/>img2. \u751f\u6210\u5bc6\u94a5\u5bf9<br \/>\nn<br \/>\nn<br \/>\nn# \u8fdb\u5165\u914d\u7f6e\u76ee\u5f55<br \/>\nncd \/etc\/wireguard<br \/>\nn<br \/>\nn# \u751f\u6210\u670d\u52a1\u5668\u79c1\u94a5\u548c\u516c\u94a5<br \/>\nnwg genkey | tee server_privatekey | wg pubkey &gt; server_publickey<br \/>\nn<br \/>\nn# \u67e5\u770b\u5bc6\u94a5\uff08\u8bb0\u4e0b\u6765\uff0c\u540e\u9762\u8981\u7528\uff09<br \/>\nncat server_privatekey  # \u670d\u52a1\u5668\u79c1\u94a5\uff0c\u4fdd\u5bc6<br \/>\nncat server_publickey   # \u670d\u52a1\u5668\u516c\u94a5\uff0c\u7ed9\u5ba2\u6237\u7aef\u7528<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/mmbiz_png\/cmuthmM0hict2eGS5PLlTLfm0vg2wIKmR0GYRkRibnsYvTI7OscBacXaZNYYk2aAblfmK4rLjEFT2ZySv5oIUxHMBQBcP6aRkuCCibIzzhc2n4\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=2\" alt=\"\" \/>img3. \u521b\u5efa\u914d\u7f6e\u6587\u4ef6<br \/>\nn<br \/>\nn<br \/>\nnsudo nano \/etc\/wireguard\/wg0.conf<br \/>\nn<br \/>\nn\u7c98\u8d34\u4ee5\u4e0b\u5185\u5bb9\uff08\u66ff\u6362\u4e3a\u4f60\u7684\u5b9e\u9645\u53c2\u6570\uff09\uff1a<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nn# \u670d\u52a1\u5668\u79c1\u94a5<br \/>\nnPrivateKey =<br \/>\nn# VPN\u5185\u7f51IP\uff0c\u670d\u52a1\u5668\u4f5c\u4e3a\u7f51\u5173<br \/>\nnAddress = 10.200.200.1\/24<br \/>\nn# \u76d1\u542c\u7aef\u53e3\uff0c\u5efa\u8bae\u7528\u9ad8\u4f4d\u7aef\u53e3<br \/>\nnListenPort = 51820<br \/>\nn# \u542f\u7528IP\u8f6c\u53d1\u548cNAT\uff08eth0\u662f\u4f60\u7684\u7f51\u5361\u540d\uff0c\u7528ip addr\u786e\u8ba4\uff09<br \/>\nnPostUp = iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE; ip6tables -A FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br \/>\nnPostDown = iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE; ip6tables -D FORWARD -i wg0 -j ACCEPT; ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE<br \/>\nn# DNS\uff08\u53ef\u9009\uff0c\u7528\u817e\u8baf\u4e91DNS\u6216Google DNS\uff09<br \/>\nnDNS = 119.29.29.29, 8.8.8.8<br \/>\nn# \u4fdd\u6301\u8fde\u63a5\uff08\u5bf9\u79fb\u52a8\u7aef\u5f88\u91cd\u8981\uff09<br \/>\nnPersistentKeepalive = 25<br \/>\nn<br \/>\nn# \u5ba2\u6237\u7aef1\uff08\u624b\u673a\uff09<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnAllowedIPs = 10.200.200.2\/32<br \/>\nn<br \/>\nn# \u5ba2\u6237\u7aef2\uff08\u7535\u8111\uff09<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnAllowedIPs = 10.200.200.3\/32<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/sz_mmbiz_png\/cmuthmM0hicsBIGV7SjIvISAKSSfpWghnL7s7DpSAtDjqDAvQBan5G8TmwuhZ6I1cMcKWQicU5kQ8sqUiaqwRT8QG2rqtpqh3vT8Ftqk3C0OS0\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=3\" alt=\"\" \/>img4. \u542f\u7528IP\u8f6c\u53d1<br \/>\nn<br \/>\nn<br \/>\nn# \u4e34\u65f6\u542f\u7528<br \/>\nnsudo sysctl -w net.ipv4.ip_forward=1<br \/>\nnsudo sysctl -w net.ipv6.conf.all.forwarding=1<br \/>\nn<br \/>\nn# \u6c38\u4e45\u542f\u7528<br \/>\nnecho &#8220;net.ipv4.ip_forward=1&#8221; | sudo tee -a \/etc\/sysctl.conf<br \/>\nnecho &#8220;net.ipv6.conf.all.forwarding=1&#8221; | sudo tee -a \/etc\/sysctl.conf<br \/>\nnsudo sysctl -p<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/mmbiz_png\/cmuthmM0hicuNFjtlgj1IVcnGfJjaicVmoticNUHM2tm8JgAZZS0ADqwrVmCic83iaWia3DpQrjgnB3t1kmfEKqRBKRnqoGpqod3ykOfNdicRMChkA\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=4\" alt=\"\" \/>img5. \u914d\u7f6e\u9632\u706b\u5899\u548c\u817e\u8baf\u4e91\u5b89\u5168\u7ec4\u670d\u52a1\u5668\u672c\u5730\u9632\u706b\u5899\uff08UFW\uff09\uff1a<br \/>\nn<br \/>\nn<br \/>\nn# \u5b89\u88c5UFW\uff08\u5982\u672a\u5b89\u88c5\uff09<br \/>\nnsudo apt install ufw -y<br \/>\nn<br \/>\nn# \u653e\u884cSSH\uff08\u522b\u628a\u81ea\u5df1\u9501\u5916\u9762\uff01\uff09<br \/>\nnsudo ufw allow 22\/tcp<br \/>\nn<br \/>\nn# \u653e\u884cWireGuard UDP\u7aef\u53e3<br \/>\nnsudo ufw allow 51820\/udp<br \/>\nn<br \/>\nn# \u542f\u7528\u9632\u706b\u5899<br \/>\nnsudo ufw enable<br \/>\nn<br \/>\nn# \u68c0\u67e5\u72b6\u6001<br \/>\nnsudo ufw status verbose<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/sz_mmbiz_png\/cmuthmM0hicv39Wia43kvib96HTicIBSibIlAmA0dYHxujichCicZ4tuiaKodVRGDhvbITOK9IwRztNwrQBVsYkXIfuRrYUubqVvgfQoUuFm7Sk963E\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=5\" alt=\"\" \/>img\u817e\u8baf\u4e91\u63a7\u5236\u53f0\u5b89\u5168\u7ec4\u914d\u7f6e\uff1a<br \/>\nn<\/li>\n<li>1. \u767b\u5f55 \u817e\u8baf\u4e91\u63a7\u5236\u53f0 \u2192 \u4e91\u670d\u52a1\u5668 \u2192 \u5b89\u5168\u7ec4<br \/>\nn<\/li>\n<li>2. \u627e\u5230\u4f60\u7684\u4e1c\u4eac\u670d\u52a1\u5668\u7ed1\u5b9a\u7684\u5b89\u5168\u7ec4 \u2192 \u4fee\u6539\u89c4\u5219<br \/>\nn<\/li>\n<li>3. \u5165\u7ad9\u89c4\u5219 \u2192 \u6dfb\u52a0\u89c4\u5219\uff1a<br \/>\nn<br \/>\nn<\/li>\n<li>1. \u534f\u8bae\uff1aUDP<br \/>\nn<\/li>\n<li>2. \u7aef\u53e3\uff1a51820<br \/>\nn<\/li>\n<li>3. \u6e90IP\uff1a0.0.0.0\/0\uff08\u6216\u9650\u5236\u4e3a\u4f60\u7684\u5e38\u7528IP\uff09<br \/>\nn<br \/>\nn6. \u542f\u52a8WireGuard\u670d\u52a1<br \/>\nn<br \/>\nn<br \/>\nn# \u542f\u52a8wg0\u63a5\u53e3<br \/>\nnsudo wg-quick up wg0<br \/>\nn<br \/>\nn# \u9a8c\u8bc1\u8fd0\u884c\u72b6\u6001<br \/>\nnsudo wg show<br \/>\nn<br \/>\nn# \u8bbe\u7f6e\u4e3a\u5f00\u673a\u81ea\u542f<br \/>\nnsudo systemctl enable wg-quick@wg0<br \/>\nn<br \/>\nn# \u67e5\u770b\u670d\u52a1\u72b6\u6001<br \/>\nnsudo systemctl status wg-quick@wg0<br \/>\nn<br \/>\nn<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/sz_mmbiz_png\/cmuthmM0hictjsxwk41zAmwdrUPb1JpUKVBIhCTj1OENSdUntDTJdOLXELTs87k2iaY9NbMwpTm7LiaeZ1LGPvL7Fy2V2MvzFIb1Q9J4CcU1To\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=6\" alt=\"\" \/>img<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/sz_mmbiz_png\/cmuthmM0hicuwORfc4jJad83jias6MW81yurV0BbQBZg734YE0AJQricEaQ2iaCCbrCOocGQV1sQqNGJrZsRWYab3TtRtqib03s4811GDY5NYQvM\/640?wx_fmt=png&amp;from=appmsg&amp;watermark=1#imgIndex=7\" alt=\"\" \/>img\u4e8c\u3001\u5ba2\u6237\u7aef\u914d\u7f6e\u5ba2\u6237\u7aef1\uff1a\u624b\u673a\uff08iOS\/Android\uff09<img decoding=\"async\" src=\"https:\/\/mmbiz.qpic.cn\/sz_mmbiz_jpg\/cmuthmM0hict8nsc4U0cXGW5mKz4SHsb2rHLibicaKEwvWKOB5yb8HJywGm8B7Pw2ctmmR2ia4w52iagGW9bviavic5Aia6TYqroPgMoibicgwjicXND9I\/640?wx_fmt=jpeg&amp;from=appmsg&amp;watermark=1#imgIndex=8\" alt=\"\" \/>img\u751f\u6210\u5ba2\u6237\u7aef\u5bc6\u94a5\u5bf9\uff08\u5728\u670d\u52a1\u5668\u4e0a\u6267\u884c\uff09\uff1a<br \/>\nn<br \/>\nn<br \/>\nn# \u751f\u6210\u624b\u673a\u7aef\u5bc6\u94a5<br \/>\nnwg genkey | tee client1_privatekey | wg pubkey &gt; client1_publickey<br \/>\nn<br \/>\nn# \u67e5\u770b\u516c\u94a5\uff0c\u6dfb\u52a0\u5230\u670d\u52a1\u7aef\u914d\u7f6e<br \/>\nncat client1_publickey<br \/>\nn<br \/>\nn\u6dfb\u52a0\u5230\u670d\u52a1\u7aef\u914d\u7f6e\uff1a<br \/>\nn<br \/>\nn<br \/>\nnsudo nano \/etc\/wireguard\/wg0.conf<br \/>\nn<br \/>\nn\u5728\u672b\u5c3e\u6dfb\u52a0\uff1a<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnAllowedIPs = 10.200.200.2\/32<br \/>\nn<br \/>\nn\u91cd\u8f7d\u670d\u52a1\u7aef\u914d\u7f6e\uff1a<br \/>\nn<br \/>\nn<br \/>\nnsudo wg-quick down wg0 &amp;&amp; sudo wg-quick up wg0<br \/>\nn<br \/>\nn\u624b\u673a\u7aef\u914d\u7f6e\u6587\u4ef6\uff08client1.conf\uff09\uff1a<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nnPrivateKey =<br \/>\nnAddress = 10.200.200.2\/24<br \/>\nnDNS = 119.29.29.29, 8.8.8.8<br \/>\nn<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnEndpoint = :51820<br \/>\nnAllowedIPs = 0.0.0.0\/0, ::\/0  # 0.0.0.0\/0\u8868\u793a\u5168\u5c40\u4ee3\u7406<br \/>\nnPersistentKeepalive = 25<br \/>\nn<br \/>\nn\u624b\u673a\u7aef\u64cd\u4f5c\uff1a<br \/>\nn<\/li>\n<li>1. \u4e0b\u8f7d WireGuard App\uff08App Store \/ Google Play\uff09<br \/>\nn<\/li>\n<li>2. \u521b\u5efa\u96a7\u9053 \u2192 \u626b\u63cf\u4e8c\u7ef4\u7801\u6216\u4ece\u6587\u4ef6\u5bfc\u5165<br \/>\nn<\/li>\n<li>3. \u751f\u6210\u4e8c\u7ef4\u7801\u547d\u4ee4\uff08\u670d\u52a1\u5668\u4e0a\uff09\uff1a<br \/>\nn<br \/>\nn<\/li>\n<li>1.<br \/>\nn<br \/>\nn<br \/>\nnqrencode -t ansiutf8  client2_publickey<br \/>\nn<br \/>\nn\u7535\u8111\u7aef\u914d\u7f6e\u6587\u4ef6\uff08client2.conf\uff09\uff1a<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nnPrivateKey =<br \/>\nnAddress = 10.200.200.3\/24<br \/>\nnDNS = 119.29.29.29, 8.8.8.8<br \/>\nn<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnEndpoint = :51820<br \/>\nnAllowedIPs = 0.0.0.0\/0<br \/>\nnPersistentKeepalive = 25<br \/>\nn<br \/>\nnWindows\/Mac\uff1a \u4e0b\u8f7dWireGuard\u5b98\u65b9\u5ba2\u6237\u7aef \u2192 \u5bfc\u5165\u914d\u7f6e\u6587\u4ef6Linux\uff1asudo wg-quick up .\/client2.conf\u4e09\u3001\u5e38\u7528\u7ba1\u7406\u547d\u4ee4<br \/>\nn\u547d\u4ee4\u4f5c\u7528<br \/>\nnsudo wg show\u67e5\u770b\u6240\u6709\u8fde\u63a5\u72b6\u6001<br \/>\nnsudo wg show wg0 peer \u67e5\u770b\u7279\u5b9a\u5ba2\u6237\u7aef\u6d41\u91cf<br \/>\nnsudo systemctl restart wg-quick@wg0\u91cd\u542f\u670d\u52a1<br \/>\nnsudo wg-quick down wg0\u505c\u6b62\u63a5\u53e3<br \/>\nnsudo wg set wg0 peer  remove\u79fb\u9664\u5ba2\u6237\u7aef<br \/>\nn\u56db\u3001\u5173\u952e\u68c0\u67e5\u6e05\u5355<\/p>\n<ul>\nn<\/li>\n<li>\u2022 \u817e\u8baf\u4e91\u5b89\u5168\u7ec4\u653e\u884cUDP 51820<br \/>\nn<\/li>\n<li>\u2022 \u670d\u52a1\u5668UFW\u9632\u706b\u5899\u653e\u884c51820<br \/>\nn<\/li>\n<li>\u2022 \/etc\/sysctl.conf\u4e2dnet.ipv4.ip_forward=1<br \/>\nn<\/li>\n<li>\u2022 \u914d\u7f6e\u6587\u4ef6\u4e2d\u7684eth0\u4e0e\u5b9e\u9645\u7f51\u5361\u540d\u4e00\u81f4\uff08\u7528ip addr\u786e\u8ba4\uff09<br \/>\nn<\/li>\n<li>\u2022 \u5ba2\u6237\u7aefAllowedIPs\u5305\u542bPersistentKeepalive = 25\uff08\u9632NAT\u8d85\u65f6\uff09<br \/>\nn<\/li>\n<li>\u2022 \u670d\u52a1\u7aefPostUp\/PostDown\u4e2d\u7684iptables\u89c4\u5219\u6b63\u786e<br \/>\nn<\/ul>\n<p>\u4e94\u3001\u8fdb\u9636\u4f18\u5316\uff08\u53ef\u9009\uff091. \u4fee\u6539MTU\u4f18\u5316\u4f20\u8f93\uff1a\u5728\u6bb5\u6dfb\u52a0\uff1a<br \/>\nn<br \/>\nn<br \/>\nnMTU = 1280  # \u817e\u8baf\u4e91\u5185\u7f51\u901a\u5e38\u75281400\u62161280<br \/>\nn<br \/>\nn2. \u591a\u5ba2\u6237\u7aef\u6279\u91cf\u751f\u6210\u811a\u672c\uff1a<br \/>\nn<br \/>\nn<br \/>\nn#!\/bin\/bash<br \/>\nn# create_client.sh<br \/>\nnCLIENT_NAME=$1<br \/>\nnCLIENT_IP=$2  # \u5982 10.200.200.4<br \/>\nn<br \/>\nnwg genkey | tee ${CLIENT_NAME}_privatekey | wg pubkey &gt; ${CLIENT_NAME}_publickey<br \/>\nn<br \/>\nnecho &#8220;&#8221; &gt;&gt; \/etc\/wireguard\/wg0.conf<br \/>\nnecho &#8220;PublicKey = $(cat ${CLIENT_NAME}_publickey)&#8221; &gt;&gt; \/etc\/wireguard\/wg0.conf<br \/>\nnecho &#8220;AllowedIPs = ${CLIENT_IP}\/32&#8221; &gt;&gt; \/etc\/wireguard\/wg0.conf<br \/>\nn<br \/>\nnecho &#8220;\u5ba2\u6237\u7aef\u914d\u7f6e\u5df2\u751f\u6210\uff0cIP: ${CLIENT_IP}&#8221;<br \/>\nn<br \/>\nn3. \u67e5\u770b\u5b9e\u65f6\u6d41\u91cf\u7edf\u8ba1\uff1a<br \/>\nn<br \/>\nn<br \/>\nnwatch -n 1 &#8216;sudo wg show&#8217;<br \/>\nn<br \/>\nn\u516d\u3001\u5b89\u88c5qrencode DNS\u89e3\u6790\u5931\u8d25DNS\u89e3\u6790\u5931\u8d25\uff0cmirrors.tencentyun.com \u8fd9\u4e2a\u57df\u540d\u89e3\u6790\u4e0d\u4e86\u3002\u8fd9\u662f\u817e\u8baf\u4e91\u5185\u7f51\u6e90\uff0c\u4f46\u4f60\u7684\u670d\u52a1\u5668\u53ef\u80fd\u6ca1\u914d\u7f6e\u5185\u7f51DNS\u3002\u5feb\u901f\u89e3\u51b3\uff08\u6362\u516c\u7f51\u6e90\uff09<br \/>\nn<br \/>\nn<br \/>\nn# 1. \u6062\u590d\u5b98\u65b9\u6e90\uff08\u6216\u6362\u963f\u91cc\u4e91\/\u6e05\u534e\u516c\u7f51\u6e90\uff09<br \/>\nnsudo cp \/etc\/apt\/sources.list.bak \/etc\/apt\/sources.list 2&gt;\/dev\/null || echo &#8220;\u5907\u4efd\u4e0d\u5b58\u5728&#8221;<br \/>\nn<br \/>\nn# \u76f4\u63a5\u5199\u5165\u963f\u91cc\u4e91\u6e90\uff08\u4e1c\u4eac\u670d\u52a1\u5668\u8bbf\u95ee\u5f88\u5feb\uff09<br \/>\nnsudo tee \/etc\/apt\/sources.list &gt; \/dev\/null &lt;&lt; &#039;EOF&#039;<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-updates main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-backports main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-security main restricted universe multiverse<br \/>\nnEOF<br \/>\nn<br \/>\nn# 2. \u66f4\u65b0\u5e76\u5b89\u88c5<br \/>\nnsudo apt update<br \/>\nnsudo apt install qrencode -y<br \/>\nn<br \/>\nn\u5982\u679c\u8fd8\u662f\u89e3\u6790\u5931\u8d25\uff08DNS\u95ee\u9898\uff09<br \/>\nn<br \/>\nn<br \/>\nn# \u68c0\u67e5DNS<br \/>\nncat \/etc\/resolv.conf<br \/>\nn<br \/>\nn# \u4e34\u65f6\u4fee\u590d\uff1a\u7528Google DNS<br \/>\nnecho &#8220;nameserver 8.8.8.8&#8221; | sudo tee \/etc\/resolv.conf<br \/>\nnsudo apt update &amp;&amp; sudo apt install qrencode -y<br \/>\nn<br \/>\nn\u5176\u5b9e qrencode \u4e0d\u662f\u5fc5\u987b\u7684\uff01\u66ff\u4ee3\u65b9\u6848\u2014\u2014\u76f4\u63a5\u663e\u793a\u914d\u7f6e\u6587\u672c\uff0c\u624b\u52a8\u8f93\u5165\u6216\u590d\u5236\uff1a<br \/>\nn<br \/>\nn<br \/>\nn# \u751f\u6210\u5ba2\u6237\u7aef\u914d\u7f6e\u6587\u4ef6\u540e\uff0c\u76f4\u63a5cat\u663e\u793a<br \/>\nncat \/etc\/wireguard\/client1.conf<br \/>\nn<br \/>\nn# \u6216\u8005\u751f\u6210base64\u94fe\u63a5\uff08\u624b\u673a\u6d4f\u89c8\u5668\u8bbf\u95ee\uff09<br \/>\nncat client1.conf | base64<br \/>\nn<br \/>\nn\u624b\u673a\u7aef\u53ef\u4ee5\u624b\u52a8\u521b\u5efa\u914d\u7f6e\uff0c\u6bd4\u88c5qrencode\u5feb\u591a\u4e86\u3002\u73b0\u5728\u6267\u884c\uff1a<br \/>\nn<br \/>\nn<br \/>\nnsudo tee \/etc\/apt\/sources.list &gt; \/dev\/null &lt;&lt; &#039;EOF&#039;<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-updates main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-backports main restricted universe multiverse<br \/>\nndeb <a href=\"http:\/\/mirrors.aliyun.com\/ubuntu\/\">http:\/\/mirrors.aliyun.com\/ubuntu\/<\/a> noble-security main restricted universe multiverse<br \/>\nnEOF<br \/>\nn<br \/>\nnsudo apt update &amp;&amp; sudo apt install qrencode -y<br \/>\nn<br \/>\nn\u4e0d\u884c\u5c31\u76f4\u63a5\u8df3\u8fc7qrencode\uff0c\u624b\u52a8\u914d\u7f6e\u3002\u4e03\u3001\u624b\u52a8\u914d\u7f6e\u6b65\u9aa4\u624b\u52a8\u914d\u7f6e\u5f88\u7b80\u5355\uff0c\u4e0d\u9700\u8981qrencode\u3002\u4ee5\u4e0b\u662f\u5b8c\u6574\u6b65\u9aa4\uff1a\u670d\u52a1\u7aef\uff1a\u751f\u6210\u5ba2\u6237\u7aef\u914d\u7f6e\u5e76\u663e\u793a<br \/>\nn<br \/>\nn<br \/>\nncd \/etc\/wireguard<br \/>\nn<br \/>\nn# 1. \u751f\u6210\u5ba2\u6237\u7aef1\u7684\u5bc6\u94a5\u5bf9\uff08\u624b\u673a\u7528\uff09<br \/>\nnwg genkey | tee client1_privatekey | wg pubkey &gt; client1_publickey<br \/>\nn<br \/>\nn# 2. \u67e5\u770b\u516c\u94a5\uff08\u590d\u5236\u8fd9\u4e32\u5b57\u7b26\uff09<br \/>\nncat client1_publickey<br \/>\nn# \u8f93\u51fa\u793a\u4f8b\uff1aaBcD1234&#8230;\uff08\u5f88\u957f\u7684base64\u5b57\u7b26\u4e32\uff09<br \/>\nn<br \/>\nn# 3. \u6dfb\u52a0\u5230\u670d\u52a1\u7aef\u914d\u7f6e<br \/>\nnsudo nano \/etc\/wireguard\/wg0.conf<br \/>\nn<br \/>\nn\u5728\u672b\u5c3e\u6dfb\u52a0\uff1a<br \/>\nn<br \/>\nn<br \/>\nn<br \/>\nnPublicKey =<br \/>\nnAllowedIPs = 10.200.200.2\/32<br \/>\nnPersistentKeepalive = 25<br \/>\nn<br \/>\nn\u91cd\u542f\u670d\u52a1\uff1a<br \/>\nn<br \/>\nn<br \/>\nnsudo wg-quick down wg0 &amp;&amp; sudo wg-quick up wg0<br \/>\nn<br \/>\nn\u521b\u5efa\u5ba2\u6237\u7aef\u914d\u7f6e\u6587\u4ef6<br \/>\nn<br \/>\nn<br \/>\nn# \u521b\u5efa\u624b\u673a\u7aef\u914d\u7f6e\u6587\u4ef6<br \/>\nnsudo tee \/etc\/wireguard\/client1.conf &gt; \/dev\/null &lt; ${CLIENT_NAME}_publickey<br \/>\nn<br \/>\nn# \u6dfb\u52a0\u5230\u670d\u52a1\u7aef<br \/>\nnecho &#8221;<br \/>\nn<br \/>\nnPublicKey = $(cat ${CLIENT_NAME}_publickey)<br \/>\nnAllowedIPs = ${CLIENT_IP}\/32<br \/>\nnPersistentKeepalive = 25&#8243; | sudo tee -a \/etc\/wireguard\/wg0.conf<br \/>\nn<br \/>\nn# \u751f\u6210\u5ba2\u6237\u7aef\u914d\u7f6e<br \/>\nnSERVER_PUB=$(cat server_publickey)<br \/>\nnSERVER_IP=$(curl -s ifconfig.me)<br \/>\nnCLIENT_PRIV=$(cat ${CLIENT_NAME}_privatekey)<br \/>\nn<br \/>\nnecho &#8221;<br \/>\nn========== \u624b\u673a\u7aef\u914d\u7f6e ==========<br \/>\nn<br \/>\nnPrivateKey = ${CLIENT_PRIV}<br \/>\nnAddress = ${CLIENT_IP}\/24<br \/>\nnDNS = 119.29.29.29, 8.8.8.8<br \/>\nn<br \/>\nn<br \/>\nnPublicKey = ${SERVER_PUB}<br \/>\nnEndpoint = ${SERVER_IP}:51820<br \/>\nnAllowedIPs = 0.0.0.0\/0, ::\/0<br \/>\nnPersistentKeepalive = 25<br \/>\nn================================<br \/>\nn\u590d\u5236\u4ee5\u4e0a\u5185\u5bb9\u5230\u624b\u673aWireGuard App&#8221; | sudo tee ${CLIENT_NAME}.conf<br \/>\nn<br \/>\nn# \u91cd\u542f\u670d\u52a1<br \/>\nnsudo wg-quick down wg0 &amp;&amp; sudo wg-quick up wg0<br \/>\nn<br \/>\nn# \u663e\u793a\u914d\u7f6e<br \/>\nncat ${CLIENT_NAME}.conf<br \/>\nn<br \/>\nn\u4fdd\u5b58\u4e3a\u811a\u672c\u6267\u884c\uff0c\u6216\u76f4\u63a5\u590d\u5236\u4e0a\u9762\u5206\u6bb5\u547d\u4ee4\u3002\u9a8c\u8bc1\u8fde\u63a5\u624b\u673a\u8fde\u63a5\u540e\uff0c\u5728\u670d\u52a1\u7aef\u67e5\u770b\uff1a<br \/>\nn<br \/>\nn<br \/>\nnsudo wg show<br \/>\nn<br \/>\nn\u770b\u5230latest handshake\u6709\u65f6\u95f4\u5c31\u662f\u6210\u529f\u4e86\uff01\u73b0\u5728\u6267\u884c\u751f\u6210\u5bc6\u94a5\u548c\u663e\u793a\u914d\u7f6e\u7684\u547d\u4ee4\uff0c\u628a\u8f93\u51fa\u7684\u5185\u5bb9\u590d\u5236\u5230\u624b\u673a\u5373\u53ef\u3002<br \/>\nn<br \/>\nn<br \/>\nn<\/li>\n","protected":false},"excerpt":{"rendered":"<p>\u7701\u4e0b90%VPN\u8d39\u7528\uff0c\u817e\u8baf\u4e91\u4e1c\u4eac+WireGuard\uff0c\u6253\u9020\u4f60\u7684\u4e13\u5c5e\u9ad8\u901fVPN n n n nimg\u817e\u8baf\u4e91\u4e1c\u4eac2\u68384G\u670d\u52a1\u5668\u7684\u5b8c\u6574WireGuard\u914d\u7f6e\u65b9\u6848\uff0c\u4ece\u670d\u52a1\u7aef\u5230\u5ba2\u6237\u7aef\u4e00\u6b65\u5230\u4f4d\u3002\u524d\u63d0 n \u2022 \u817e\u8baf\u4e91\u4e1c\u4eac2\u68384G\u670d\u52a1\u5668\uff08\u4e0d\u4e00\u5b9a\u975e\u8981\u662f\u4e1c\u4eac\uff09 n \u2022 \u624b\u673a\u80fd\u4e0b\u8f7dWireGuard n \u4e00\u3001\u670d\u52a1\u7aef\u914d\u7f6e1. \u5b89\u88c5WireGuard n n n# \u66f4\u65b0\u7cfb\u7edf nsudo apt update &amp;&amp; sudo apt upgrade -y n n# \u5b89\u88c5WireGuard\uff08Ubuntu 20.04+\u5df2\u5185\u7f6e\uff0c\u53ea\u9700\u5b89\u88c5\u5de5\u5177\uff09 nsudo apt install wireguard wireguard-tools -y n n# \u9a8c\u8bc1\u5b89\u88c5 nwg &#8211;version n nimg2. \u751f\u6210\u5bc6\u94a5\u5bf9 n n n# \u8fdb\u5165\u914d\u7f6e\u76ee\u5f55 ncd \/etc\/wireguard n n# \u751f\u6210\u670d\u52a1\u5668\u79c1\u94a5\u548c\u516c\u94a5 nwg genkey [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1976","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=\/wp\/v2\/posts\/1976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1976"}],"version-history":[{"count":0,"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=\/wp\/v2\/posts\/1976\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.dj.jjsz.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}