{"id":86204,"date":"2020-06-22T13:42:24","date_gmt":"2020-06-22T11:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vpn-wireguard-prinyat-v-osnovnoj-sostav-openbsd"},"modified":"2020-06-22T13:42:24","modified_gmt":"2020-06-22T11:42:24","slug":"vpn-wireguard-prinyat-v-osnovnoj-sostav-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vpn-wireguard-prinyat-v-osnovnoj-sostav-openbsd","title":{"rendered":"VPN WireGuard has been accepted into the main branch of OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jason A. Donenfeld, the author of VPN WireGuard, announced<\/a><\/noindex> higher level of isolation, as if one controller is broken, the problem is confined to that specific context). inclusion<\/a><\/noindex> in the core OpenBSD kernel driver «wg» for the WireGuard protocol, implementations<\/a><\/noindex> specific network interface and the changes<\/a><\/noindex> user space tooling. OpenBSD became the second OS after Linux<\/a><\/noindex> to have full and integrated support for WireGuard. The inclusion of WireGuard is expected in the OpenBSD 6.8 release.<\/p>\n

The patches include the OpenBSD kernel driver, changes to the ifconfig and tcpdump utilities to support WireGuard functionality, documentation, and minor changes for integrating WireGuard with the rest of the system. The driver uses a custom implementation of the algorithms blake2s<\/a><\/noindex>, hchacha20<\/a><\/noindex> and curve25519<\/a><\/noindex>, as well as the already existing implementation of SipHash in the OpenBSD kernel. <\/p>\n

The implementation is compatible with all official WireGuard clients for Linux, Windows, macOS, *BSD, iOS, and Android. Performance testing on the developer's laptop (Lenovo x230) showed a throughput of up to 750 Mbit\/s. For comparison, isakmpd with default IKE PSK settings provides a throughput of 380 Mbit\/s.<\/p>\n

During the development of the OpenBSD kernel driver, some architectural decisions similar to those for the Linux driver were made, but the driver was primarily developed for OpenBSD, taking into account the specifics of this system and the experience gained while creating the Linux driver. With the original author of WireGuard's agreement, the code for the new driver is fully distributed under the ISC open license. <\/p>\n

The driver is closely integrated with the OpenBSD networking stack and utilizes existing subsystems, which allowed for very compact code (about 3000 lines). Notably, there is a difference from Linux in the separation of driver components: OpenBSD-specific interfaces are placed in «if_wg.*», DoS protection code in «wg_cookie.*», and the connection negotiation and encryption logic in «wg_noise.*».<\/p>\n

<\/a><\/noindex><\/p>\n

Source: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 «wg» \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. OpenBSD \u0441\u0442\u0430\u043b\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0441 \u043f\u043e\u043b\u043d\u043e\u0439 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 WireGuard \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 OpenBSD 6.8. \u041f\u0430\u0442\u0447\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86204","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47VPN WireGuard included in the main body of OpenBSD | ProHoster","description":"Jason Donenfeld (Jason A.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/vpn-wireguard-prinyat-v-osnovnoj-sostav-openbsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47VPN WireGuard \u043f\u0440\u0438\u043d\u044f\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 OpenBSD | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/vpn-wireguard-prinyat-v-osnovnoj-sostav-openbsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-22T11:42:24+00:00","article:modified_time":"2020-06-22T11:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86204","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:21:08","updated":"2022-10-01 13:32:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/86204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=86204"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/86204\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=86204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=86204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=86204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}