{"id":101359,"date":"2021-09-21T22:22:43","date_gmt":"2021-09-21T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn"},"modified":"2021-09-21T22:22:43","modified_gmt":"2021-09-21T20:22:43","slug":"predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","title":{"rendered":"Esitatud on kernelimoodul, mis suudab OpenVPN-i kiirusel mitu korda kiirusel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenVPN-i virtuaalsete privaatv\u00f5rkude paketi arendajad on esitanud ovpn-dco tuumamooduli, mis v\u00f5imaldab VPN-i j\u00f5udlust m\u00e4rkimisv\u00e4\u00e4rselt kiirendada. Kuigi moodul on praegu veel arendamisel ja keskendub ainult linux-next harule, on see juba saavutanud stabiilsuse taseme, mis v\u00f5imaldab seda kasutada OpenVPN Cloud teenuse toetamiseks. <\/p>\n

TUN-liidese p\u00f5hine konfiguratsioon v\u00f5rreldes kliendi ja serveri poole peal mooduli kasutamisega koos AES-256-GCM kr\u00fcpteerimisega on v\u00f5imaldanud saavutada 8-kordse l\u00e4bilaskev\u00f5ime kasvu (370 Mbit\/s-lt 2950 Mbit\/s-le). Mooduli kasutamine ainult kliendi poolel on suurendanud v\u00e4ljamineva liikluse l\u00e4bilaskev\u00f5imet kolm korda, ilma et see oleks muutunud sissetuleva liikluse jaoks. Mooduli kasutamine ainult kliendi poolel serverid<\/a> on suurendanud sissetuleva liikluse l\u00e4bilaskev\u00f5imet neli korda ja v\u00e4ljamineva liikluse puhul 35%.

\"Esitatud<\/center> <\/p>\n

Kiirus saavutatakse k\u00f5igi kr\u00fcptimise, paketitagumise ja sidekanali haldamise toimingute viimisega Linuxi kerneli poole, mis elimineerib konteksti vahetamisega seotud \u00fclej\u00e4\u00e4nud kulud, v\u00f5imaldab optimeerida t\u00f6\u00f6 efektiivsust, p\u00f6\u00f6rdudes otse kerneli sisemiste API-de poole, ja v\u00e4listab aeglase andmevahetuse kerneli ja kasutajaruumi vahel (kr\u00fcptimine, dekr\u00fcptimine ja suunamine toimub mooduli kaudu, ilma et liiklust saadetaks kasutajaruumi t\u00f6\u00f6tlejasse). <\/p>\n

Tuleb m\u00e4rkida, et see m\u00f5jutab negatiivselt j\u00f5udlust VPN<\/a> peamiselt teevad nad ressursimahukaid kr\u00fcptimisoperatsioone ja konteksti vahetuse t\u00f5ttu tekkivaid viivitusi. Kr\u00fcptimise kiiremaks teostamiseks on kasutatud protsessori laiendusi, nagu Intel AES-NI, kuid konteksti vahetused j\u00e4id ovpn-dco tekkimiseni kitsaskohaks. Lisaks protsessori pakutavate k\u00e4skude kasutamisele kr\u00fcptimise kiirendamiseks tagab ovpn-dco moodul ka kr\u00fcptimisoperatsioonide jagamise eraldi segmentideks ja nende t\u00f6\u00f6tlemise mitme l\u00f5ime re\u017eiimis, mis v\u00f5imaldab rakendada k\u00f5iki saadaolevaid CPU tuumasid. <\/p>\n

Praeguste teostuse piirangute seas on tulevikus plaanis k\u00f5rvaldada ainult AEAD ja 'none' (ilma autentimiseta) re\u017eiimide ja AES-GCM ning CHACHA20POLY1305 kr\u00fcptode tugi. DCO toetust plaanitakse lisada OpenVPN 2.6 v\u00e4ljaande koosseisu, mis on kavandatud k\u00e4esoleva aasta neljandaks kvartaliks. Hetkel toetatakse moodulit OpenVPN3 Linuxi kliendi beetatestis ja eksperimentaalsetes OpenVPN serveri kogumites Linuxile. Sarnast ovpn-dco-win moodulit arendatakse ka Windowsi tuuma jaoks.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u043a\u0430 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0433\u043b\u044f\u0434\u043a\u043e\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0432\u0435\u0442\u043a\u0443 linux-next \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e, \u043e\u043d \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0438\u0433 \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0435\u0433\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430 OpenVPN Cloud. \u041f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Esitatud tuumamoodul, mis suudab mitmekordselt suurendada OpenVPNi j\u00f5udlust | ProHoster","description":"OpenVPNi virtuaalsete erakordsete v\u00f5rkude loomiseks m\u00f5eldud paketi arendajad on tutvustanud ovpn-dco tuumamoodulit, mis v\u00f5imaldab VPN-i j\u00f5udlust m\u00e4rkimisv\u00e4\u00e4rselt parandada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432 \u0440\u0430\u0437\u044b \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c OpenVPN | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-21T20:22:43+00:00","article:modified_time":"2021-09-21T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101359","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-21 20:24:49","updated":"2026-02-22 15:30:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101359"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359\/revisions"}],"predecessor-version":[{"id":162281,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359\/revisions\/162281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101360"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}