{"id":101359,"date":"2021-09-21T22:22:43","date_gmt":"2021-09-21T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn"},"modified":"2021-09-21T22:22:43","modified_gmt":"2021-09-21T20:22:43","slug":"predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","title":{"rendered":"Esitletud on kernelimoodul, mis suudab avastavalt kiirendada OpenVPN-i","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenVPN-i virtuaalsete privaatv\u00f5rkude loomise paketi arendajad on tutvustanud ovpn-dco kernelimoodulit, mis v\u00f5imaldab VPN-i j\u00f5udlust m\u00e4rkimisv\u00e4\u00e4rselt kiirendada. Kuigi moodul on praegu veel arendusetapis ja keskendub ainult linux-next harule ning selle staatus on eksperimentaalne, on see j\u00f5udnud stabiilsuse tasemeni, mis v\u00f5imaldab selle kasutamist OpenVPN Cloud teenuse toetamiseks. <\/p>\n

Erinevalt tun-p\u00f5hisest konfiguratsioonist on kliendi- ja serveripoole mooduli kasutamine AES-256-GCM kr\u00fcptimisega v\u00f5imaldanud saavutada 8-kordse l\u00e4bilaskev\u00f5ime kasvu (370 Mbit\/s-lt 2950 Mbit\/s-eni). Mooduli kasutamisel ainult kliendi poolel t\u00f5usis l\u00e4bilaskev\u00f5ime l\u00e4htevoolu jaoks kolm korda ja sisenev j\u00e4\u00e4b muutumatuks. Mooduli kasutamine ainult \u00fches suunas serverilt<\/a> t\u00f5i sissevoolu l\u00e4bilaskev\u00f5ime 4-kordseks ja t\u00f5usis 35% v\u00f5rra v\u00e4ljaminevast voolust.

\"Esitletud<\/center> <\/p>\n

Kiirus muutub v\u00f5imalikuks, kui k\u00f5ik \u0161ifreerimise, pakettide t\u00f6\u00f6tlemise ja sidekanali haldamise toimingud kantakse Linuxi kernelisse, mis v\u00e4hendab konteksti vahetamisega seotud kulusid, v\u00f5imaldab otse t\u00f6\u00f6tada sisemiste kernel API-dega ja k\u00f5rvaldab aeglasest andmete edastamist kernelist kasutajaruumi (\u0161ifreerimine, de\u0161ifreerimine ja marsruutimine toimub mooduli kaudu ilma liikluse saatmiseta kasutajaruumi t\u00f6\u00f6tlejatele). <\/p>\n

T\u00f5detakse, et negatiivne m\u00f5ju j\u00f5udlusele VPN<\/a> tuleb peamiselt ressursimahukatest \u0161ifreerimisoperatsioonidest ja konteksti vahetamise p\u00f5hjustatud viivitustest. \u0160ifreerimise kiirendamiseks on kasutatud protsessori laiendusi nagu Intel AES-NI, kuid konteksti vahetus enne ovpn-dco-d j\u00e4i kitsaskohaks. Peale protsessori poolt pakutud juhiste kasutamise \u0161ifreerimise kiirendamiseks on ovpn-dco moodulis t\u00e4iendavalt tagatud \u0161ifreerimisoperatsioonide jagamine eraldi segmentideks ja nende t\u00f6\u00f6tlemine mitme l\u00f5ime re\u017eiimis, mis v\u00f5imaldab kasutada k\u00f5iki olemasolevaid CPU tuumasid. <\/p>\n

Praegustest rakenduse piirangutest, mis tulevikus k\u00f5rvaldada, on v\u00e4lja toodud ainult AEAD ja ‘none’ (ilma autentimiseta) re\u017eiimide ja AES-GCM ning CHACHA20POLY1305 kr\u00fcpteerimise tugi. DCO toetust plaanitakse lisada OpenVPN 2.6 versiooni koosseisu, mille v\u00e4ljalaskmine on planeeritud selle aasta neljandaks kvartaliks. Hetkel toetab moodul k\u00e4imasolevat beetatestimist Linuxi kliendiversioonis OpenVPN3 ja eksperimentaalsetes OpenVPN serveri kogudes Linuxile. Sarnane ovpn-dco-win moodul areneb ka Windowsi s\u00fcdamiku jaoks.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u043a\u0430 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0433\u043b\u044f\u0434\u043a\u043e\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0432\u0435\u0442\u043a\u0443 linux-next \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e, \u043e\u043d \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0438\u0433 \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0435\u0433\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430 OpenVPN Cloud. \u041f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esitatud tuuma moodul, mis suudab OpenVPN-i kiirusel kasvada | ProHoster","description":"Virtuaalsete privaatv\u00f5rkude OpenVPN paketi arendajad on esitanud \u00fcldiselt DCO tuuma mooduli, mis kiirendab VPN-i m\u00e4rkimisv\u00e4\u00e4rselt.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432 \u0440\u0430\u0437\u044b \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c OpenVPN | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-21T20:22:43+00:00","article:modified_time":"2021-09-21T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101359","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-21 20:24:49","updated":"2026-02-22 15:30:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101359"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359\/revisions"}],"predecessor-version":[{"id":162281,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101359\/revisions\/162281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/101360"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}