{"id":101348,"date":"2021-09-20T16:22:35","date_gmt":"2021-09-20T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale"},"modified":"2021-09-20T16:22:35","modified_gmt":"2021-09-20T14:22:36","slug":"proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","title":{"rendered":"Projekt Headscale vyv\u00edj\u00ed otev\u0159en\u00fd server pro distribuovanou VPN s\u00ed\u0165 Tailscale.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekt Headscale rozv\u00edj\u00ed otev\u0159enou implementaci serverov\u00e9 komponenty VPN s\u00edt\u011b Tailscale, co\u017e umo\u017e\u0148uje vytv\u00e1\u0159et podobn\u00e9 VPN s\u00edt\u011b jako Tailscale na vlastn\u00edch zdroj\u00edch bez z\u00e1vislosti na t\u0159et\u00edch stran\u00e1ch. K\u00f3d Headscale je naps\u00e1n v jazyce Go a je licencov\u00e1n pod licenc\u00ed BSD. Projekt vede Juan Font Alonso z Evropsk\u00e9 vesm\u00edrn\u00e9 agentury. <\/p>\n

Tailscale umo\u017e\u0148uje spojit libovoln\u00fd po\u010det geograficky rozpt\u00fdlen\u00fdch hostitel\u016f do jedn\u00e9 s\u00edt\u011b, kter\u00e1 je postavena na principu mesh s\u00edt\u011b, kde ka\u017ed\u00fd uzel interaguje s ostatn\u00edmi uzly p\u0159\u00edmo (P2P) nebo p\u0159es sousedn\u00ed uzly, ani\u017e by doch\u00e1zelo k p\u0159enosu provozu p\u0159es centralizovan\u00e9 extern\u00ed servery. VPN<\/a>-poskytovatele. Podporuje se spr\u00e1va p\u0159\u00edstupu a trasov\u00e1n\u00ed na z\u00e1klad\u011b ACL. Pro nastaven\u00ed komunika\u010dn\u00edch kan\u00e1l\u016f v podm\u00ednk\u00e1ch pou\u017eit\u00ed p\u0159ekladatel\u016f adres (NAT) je k dispozici podpora mechanism\u016f STUN, ICE a DERP (analog TURN, ale na b\u00e1zi HTTPS). V p\u0159\u00edpad\u011b blokace komunika\u010dn\u00edho kan\u00e1lu mezi ur\u010dit\u00fdmi uzly se s\u00ed\u0165 m\u016f\u017ee p\u0159eorientovat trasov\u00e1n\u00ed tak, aby sm\u011b\u0159ovala provoz p\u0159es jin\u00e9 uzly.

\"Projekt<\/center> <\/p>\n

Projekt Tailscale se od projektu Nebula, kter\u00fd je tak\u00e9 ur\u010den pro tvorbu distribuovan\u00fdch VPN s\u00edt\u00ed s mesh trasov\u00e1n\u00edm, li\u0161\u00ed pou\u017eit\u00edm protokolu Wireguard pro organizaci p\u0159enosu dat mezi uzly, zat\u00edmco Nebula vyu\u017e\u00edv\u00e1 p\u0159\u00edstupy projektu Tinc, ve kter\u00e9m se pro \u0161ifrov\u00e1n\u00ed paket\u016f pou\u017e\u00edv\u00e1 algoritmus AES-256-GCM (v Wireguard se pou\u017e\u00edv\u00e1 \u0161ifrovac\u00ed algoritmus ChaCha20, kter\u00fd ve srovn\u00e1n\u00ed prokazuje vy\u0161\u0161\u00ed propustnost a odezvu). <\/p>\n

Samostatn\u011b se vyv\u00edj\u00ed je\u0161t\u011b jeden podobn\u00fd projekt \u2014 Innernet, ve kter\u00e9m se pro v\u00fdm\u011bnu dat mezi uzly tak\u00e9 pou\u017e\u00edv\u00e1 protokol Wireguard. Na rozd\u00edl od Tailscale a Nebula, v Innernet se pou\u017e\u00edv\u00e1 jin\u00fd syst\u00e9m \u0159\u00edzen\u00ed p\u0159\u00edstupu, kter\u00fd nen\u00ed zalo\u017een na ACL s p\u0159i\u0159azen\u00edm tag\u016f jednotliv\u00fdm uzl\u016fm, ale na d\u011blen\u00ed pods\u00edt\u00ed a vy\u010dle\u0148ov\u00e1n\u00ed r\u016fzn\u00fdch rozsah\u016f. IP adress<\/a>, jako v b\u011b\u017en\u00fdch internetov\u00fdch s\u00edt\u00edch. Krom\u011b toho se v Innernet pou\u017e\u00edv\u00e1 jazyk Rust m\u00edsto jazyka Go. P\u0159ed t\u0159emi dny bylo zve\u0159ejn\u011bno aktualizace Innernet 1.5 s vylep\u0161enou podporou obch\u00e1zen\u00ed NAT. Existuje tak\u00e9 projekt Netmaker, kter\u00fd umo\u017e\u0148uje spojovat s\u00edt\u011b s r\u016fzn\u00fdmi topologiemi pomoc\u00ed Wireguard, ale jeho k\u00f3d je vyd\u00e1v\u00e1n pod licenc\u00ed SSPL (Server Side Public License), kter\u00e1 nen\u00ed otev\u0159en\u00e1 kv\u016fli diskrimina\u010dn\u00edm po\u017eadavk\u016fm. <\/p>\n

Tailscale se distribuuje pomoc\u00ed modelu Freemium, kter\u00fd umo\u017e\u0148uje bezplatn\u00e9 pou\u017e\u00edv\u00e1n\u00ed pro jednotlivce a placen\u00fd p\u0159\u00edstup pro podniky a t\u00fdmy. Klientsk\u00e9 komponenty Tailscale, krom\u011b grafick\u00fdch aplikac\u00ed pro Windows a macOS, se vyv\u00edjej\u00ed jako otev\u0159en\u00e9 projekty pod licenc\u00ed BSD. Syst\u00e9mov\u00e9 software spole\u010dnosti Tailscale, kter\u00e9 zaji\u0161\u0165uje autentizaci p\u0159i p\u0159ipojov\u00e1n\u00ed nov\u00fdch klient\u016f, koordinuje spr\u00e1vu kl\u00ed\u010d\u016f a organizuje komunikaci mezi uzly, je propriet\u00e1rn\u00ed. Projekt Headscale tento nedostatek odstra\u0148uje a nab\u00edz\u00ed nez\u00e1vislou otev\u0159enou implementaci serverov\u00fdch komponent Tailscale.

\"Projekt<\/center> <\/p>\n

Headscale se uj\u00edm\u00e1 funkc\u00ed v\u00fdm\u011bny otev\u0159en\u00fdch kl\u00ed\u010d\u016f uzl\u016f a tak\u00e9 prov\u00e1d\u00ed operace p\u0159i\u0159azov\u00e1n\u00ed IP adres a roz\u0161i\u0159ov\u00e1n\u00ed sm\u011brovac\u00edch tabulek mezi uzly. V aktu\u00e1ln\u00ed verzi implementuje Headscale v\u0161echny z\u00e1kladn\u00ed funkce \u0159\u00edd\u00edc\u00edho serveru, krom\u011b podpory MagicDNS a Smart DNS. Konkr\u00e9tn\u011b jsou podporov\u00e1ny funkce registrace uzl\u016f (v\u010detn\u011b prost\u0159ednictv\u00edm webu), p\u0159izp\u016fsoben\u00ed s\u00edt\u011b podle p\u0159id\u00e1v\u00e1n\u00ed nebo odstra\u0148ov\u00e1n\u00ed uzl\u016f, rozd\u011blen\u00ed subnet\u016f pomoc\u00ed jmenov\u00fdch prostor\u016f (jedna VPN s\u00ed\u0165 m\u016f\u017ee b\u00fdt vytvo\u0159ena pro n\u011bkolik u\u017eivatel\u016f), organizace sd\u00edlen\u00ed uzl\u016f k subnet\u016fm v r\u016fzn\u00fdch jmenov\u00fdch prostorech, spr\u00e1vy sm\u011brov\u00e1n\u00ed (v\u010detn\u011b p\u0159i\u0159azen\u00ed v\u00fdstupn\u00edch uzl\u016f pro komunikaci se ze sv\u011btem), rozd\u011blen\u00ed p\u0159\u00edstupu p\u0159es ACL a fungov\u00e1n\u00ed slu\u017eby DNS.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041a\u043e\u0434 Headscale \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0425\u0443\u0430\u043d \u0424\u043e\u043d\u0442 \u0410\u043b\u043e\u043d\u0441\u043e (Juan Font) \u0438\u0437 \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430. Tailscale \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043e\u0434\u043d\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt Headscale rozv\u00edj\u00ed otev\u0159en\u00fd server pro distribuovanou VPN s\u00ed\u0165 Tailscale | ProHoster","description":"Projekt Headscale rozv\u00edj\u00ed otev\u0159enou implementaci serverov\u00e9 komponenty VPN s\u00edt\u011b Tailscale, kter\u00e1 umo\u017e\u0148uje vytv\u00e1\u0159et podobn\u00e9 VPN s\u00edt\u011b jako Tailscale na vlastn\u00edch zdroj\u00edch, ani\u017e byste byli v\u00e1z\u00e1ni na extern\u00ed slu\u017eby.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 VPN-\u0441\u0435\u0442\u0438 Tailscale | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-20T14:22:36+00:00","article:modified_time":"2021-09-20T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-20 14:23:05","updated":"2026-02-08 20:40:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=101348"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101348\/revisions"}],"predecessor-version":[{"id":158033,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101348\/revisions\/158033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/101349"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=101348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=101348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=101348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}