{"id":56025,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/v-yadro-linux-5-6-vklyuchili-vpn-wireguard"},"modified":"2020-02-18T14:04:11","modified_gmt":"2020-02-18T11:04:11","slug":"v-yadro-linux-5-6-vklyuchili-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/v-yadro-linux-5-6-vklyuchili-vpn-wireguard","title":{"rendered":"Do j\u00e1dra Linux 5.6 byl p\u0159id\u00e1n VPN WireGuard","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dnes Linus p\u0159enesl do sv\u00e9ho repozit\u00e1\u0159e v\u011btev net-next s VPN rozhran\u00edmi WireGuard<\/a><\/noindex>. O t\u00e9to ud\u00e1losti ozn\u00e1mili<\/a><\/noindex> v mailing listu WireGuard.<\/p>\n

\"Do
\n
\nV tuto chv\u00edli prob\u00edh\u00e1 sb\u011br k\u00f3du pro nov\u00e9 j\u00e1dro Linux 5.6. WireGuard je rychl\u00e1 VPN nov\u00e9 generace, kter\u00e1 implementuje modern\u00ed kryptografii. Byla p\u016fvodn\u011b vyv\u00edjena jako jednodu\u0161\u0161\u00ed a pohodln\u011bj\u0161\u00ed alternativa k existuj\u00edc\u00edm VPN. Autorem je kanadsk\u00fd odborn\u00edk na informa\u010dn\u00ed bezpe\u010dnost Jason Donenfeld. V srpnu 2018 byl WireGuard ocen\u011bn<\/a><\/noindex> Linusem Torvalds. P\u0159ibli\u017en\u011b v t\u00e9 dob\u011b za\u010dala pr\u00e1ce na zahrnut\u00ed VPN do j\u00e1dra Linux. Proces se m\u00edrn\u011b prot\u00e1hl.
\n<\/a><\/noindex>
\n\u201eVid\u00edm, \u017ee Jason ud\u011blal pull request na zahrnut\u00ed WireGuard do j\u00e1dra,\u201c psal Linus 2. srpna 2018. \u201eMohu je\u0161t\u011b jednou vyj\u00e1d\u0159it svou l\u00e1sku k t\u00e9to VPN a doufat v brzk\u00e9 slou\u010den\u00ed? Mo\u017en\u00e1, \u017ee k\u00f3d nen\u00ed ide\u00e1ln\u00ed, ale prohl\u00e9dl jsem si ho a ve srovn\u00e1n\u00ed s hr\u016fzami OpenVPN a IPSec je to skute\u010dn\u00e9 um\u011bleck\u00e9 d\u00edlo.\u201c<\/p>\n

Nesplnilo se Linusovo p\u0159\u00e1n\u00ed, slou\u010den\u00ed se prodlou\u017eilo o jeden a p\u016fl roku. Hlavn\u00edm probl\u00e9mem byla vazba na vlastn\u00ed implementace kryptografick\u00fdch funkc\u00ed, kter\u00e9 byly pou\u017e\u00edv\u00e1ny pro zv\u00fd\u0161en\u00ed v\u00fdkonu. Po dlouh\u00fdch jedn\u00e1n\u00edch v z\u00e1\u0159\u00ed 2019 bylo p\u0159ijato kompromisn\u00ed \u0159e\u0161en\u00ed<\/a><\/noindex> p\u0159ev\u00e9st patche na existuj\u00edc\u00ed funkce v j\u00e1d\u0159e Crypto API, na kter\u00e9 maj\u00ed v\u00fdvoj\u00e1\u0159i WireGuard v\u00fdhrady z hlediska v\u00fdkonu a celkov\u00e9 bezpe\u010dnosti. Rozhodli se v\u0161ak vy\u010dlenit nativn\u00ed kryptofunkce WireGuard do samostatn\u00e9ho n\u00edzko\u00farov\u0148ov\u00e9ho Zinc API a postupem \u010dasu je portovat do j\u00e1dra. V listopadu v\u00fdvoj\u00e1\u0159i j\u00e1dra dodr\u017eeli sv\u016fj slib a souhlasili<\/a><\/noindex> p\u0159ev\u00e9st do hlavn\u00edho j\u00e1dra \u010d\u00e1st k\u00f3du ze Zinc. Nap\u0159\u00edklad v Crypto API byly zahrnuty<\/a><\/noindex> p\u0159ipravili v WireGuard rychl\u00e9 implementace algoritm\u016f ChaCha20 a Poly1305.<\/p>\n

Nakonec, 9. prosince 2019, David Miller, zodpov\u011bdn\u00fd za s\u00ed\u0165ov\u00fd subsystem j\u00e1dra Linux, p\u0159ijal<\/a><\/noindex> p\u0159idal do v\u011btve net-next patche<\/a><\/noindex> implementaci VPN rozhran\u00ed z projektu WireGuard.<\/p>\n

A dnes 29. ledna 2020 byly zm\u011bny zasl\u00e1ny Linusovi k zahrnut\u00ed do j\u00e1dra.<\/p>\n

\"Do
\n
\nUveden\u00e9 v\u00fdhody WireGuard oproti jin\u00fdm VPN \u0159e\u0161en\u00edm:<\/p>\n