{"id":92348,"date":"2020-08-25T19:42:57","date_gmt":"2020-08-25T17:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard"},"modified":"2020-08-25T19:42:57","modified_gmt":"2020-08-25T17:42:57","slug":"v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","title":{"rendered":"se ha a\u00f1adido soporte para VPN WireGuard en el n\u00facleo de NetBSD.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Desarrolladores del proyecto NetBSD informaron<\/a><\/noindex> sobre la inclusi\u00f3n en el n\u00facleo principal de NetBSD del controlador wg con la implementaci\u00f3n del protocolo WireGuard. NetBSD se convirti\u00f3 en el tercer sistema operativo despu\u00e9s de Linux y OpenBSD en ofrecer soporte integrado para WireGuard. Tambi\u00e9n se han propuesto comandos auxiliares para configurar VPN \u2014 wg-keygen y wgconfig. En la configuraci\u00f3n del n\u00facleo por defecto (GENERIC), el controlador a\u00fan no est\u00e1 activado y requiere una indicaci\u00f3n expl\u00edcita en la configuraci\u00f3n 'pseudo-device wg'.<\/p>\n

Tambi\u00e9n se puede destacar la publicaci\u00f3n<\/a><\/noindex> actualizaci\u00f3n correctiva del paquete wireguard-tools 1.0.20200820, que incluye utilidades operativas en espacio de usuario, como wg y wg-quick. En esta nueva versi\u00f3n se prepar\u00f3 el IPC para el pr\u00f3ximo soporte de WireGuard en el sistema operativo FreeBSD. Se realiz\u00f3 una separaci\u00f3n del c\u00f3digo espec\u00edfico para diferentes plataformas en diferentes archivos. Se a\u00f1adi\u00f3 soporte para el comando 'reload' en el archivo unit para systemd, lo que permite ejecutar construcciones como 'systemctl reload wg-quick at wgnet0'.<\/p>\n

Recordemos que la VPN WireGuard se basa en m\u00e9todos de cifrado modernos, ofrece un rendimiento muy alto, es f\u00e1cil de usar, carece de complicaciones y ha demostrado ser eficaz en una serie de grandes implementaciones que manejan grandes vol\u00famenes de tr\u00e1fico. El proyecto ha estado en desarrollo desde 2015, ha pasado una auditor\u00eda y verificaci\u00f3n formal<\/a><\/noindex> de los m\u00e9todos de cifrado aplicados. El soporte para WireGuard ya est\u00e1 integrado en NetworkManager y systemd, y los parches para el n\u00facleo est\u00e1n incluidos en la base de las distribuciones Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> y ALT<\/a><\/noindex>.<\/p>\n

En WireGuard se aplica el concepto de enrutamiento por claves de cifrado, que implica la vinculaci\u00f3n de una clave privada a cada interfaz de red y la aplicaci\u00f3n para la uni\u00f3n de claves p\u00fablicas. El intercambio de claves p\u00fablicas para establecer una conexi\u00f3n se realiza de manera similar a SSH. Para el acuerdo de claves y la conexi\u00f3n sin iniciar un daemon separado en el espacio de usuario, se utiliza el mecanismo Noise_IK del Marco del Protocolo Noise<\/a><\/noindex>, similar al mantenimiento de authorized_keys en SSH. La transmisi\u00f3n de datos se lleva a cabo a trav\u00e9s de la encapsulaci\u00f3n en paquetes UDP. Se admite el cambio de direcci\u00f3n IP del servidor VPN (roaming) sin interrumpir la conexi\u00f3n con una reconfiguraci\u00f3n autom\u00e1tica del cliente.<\/p>\n

Para el cifrado se utiliza<\/a><\/noindex> un cifrador de flujo ChaCha20<\/a><\/noindex> y un algoritmo de autenticaci\u00f3n de mensajes (MAC) Poly1305<\/a><\/noindex>, desarrollado por Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) y Peter Schwabe (Peter Schwabe). ChaCha20 y Poly1305 se presentan como alternativas m\u00e1s r\u00e1pidas y seguras a AES-256-CTR y HMAC, cuya implementaci\u00f3n de software permite lograr un tiempo de ejecuci\u00f3n fijo sin la necesidad de soporte hardware especial. Para la generaci\u00f3n de una clave secreta compartida se aplica el protocolo de Diffie-Hellman sobre curvas el\u00edpticas con la implementaci\u00f3n de Curve25519<\/a><\/noindex>, tambi\u00e9n propuesto por Daniel Bernstein. Para el hashing se utiliza el algoritmo BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

<\/a><\/noindex><\/p>\n

Fuente: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard. NetBSD \u0441\u0442\u0430\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0438 OpenBSD \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN — wg-keygen \u0438 wgconfig. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (GENERIC) \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u044f\u0432\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92348","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Se ha a\u00f1adido soporte para la VPN WireGuard en el n\u00facleo de NetBSD | ProHoster","description":"Los desarrolladores del proyecto NetBSD informaron sobre la inclusi\u00f3n en el n\u00facleo principal de NetBSD del controlador wg con.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u044f\u0434\u0440\u043e NetBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 VPN WireGuard | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T17:42:57+00:00","article:modified_time":"2020-08-25T17:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:10:22","updated":"2022-09-28 01:30:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/92348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=92348"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/92348\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=92348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=92348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=92348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}