{"id":105412,"date":"2022-10-30T15:36:45","date_gmt":"2022-10-30T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard"},"modified":"2022-10-30T15:36:45","modified_gmt":"2022-10-30T13:36:45","slug":"v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","title":{"rendered":"FreeBSD koodibaasi on lisatud uus VPN WireGuardi rakendus.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

FreeBSD koodipuu on vastu v\u00f5etud muudatused, mis sisaldavad uut VPN WireGuard'i teostust, mis p\u00f5hineb tuumamooduli koodil, mida on koos t\u00f6\u00f6tanud FreeBSD ja WireGuard peamised arendustiimid, samuti Jason Donenfeld (VPN WireGuard'i looja) ja John Baldwin, tuntud GDB ja FreeBSD arendaja, kes rakendas FreeBSD-s SMP ja NUMA toe 2000. aastate alguses. P\u00e4rast juhi vastuv\u00f5tmist FreeBSD-s (sys\/dev\/wg) j\u00e4tkatakse selle arendamist ja hooldamist FreeBSD arhiivis. <\/p>\n

Enne koodi vastuv\u00f5tmist FreeBSD Foundation'i toe all viidi l\u00e4bi p\u00f5hjalik muudatuste \u00fclevaatus, mille k\u00e4igus anal\u00fc\u00fcsiti ka draiveri koost\u00f6\u00f6d tuuma teiste alam s\u00fcsteemidega ja hinnati v\u00f5imalust kasutada tuuma pakutavaid kr\u00fcptograafilisi primitiive. <\/p>\n

Draiveri jaoks vajalike kr\u00fcptograafiliste algoritmide kasutamiseks viidi l\u00e4bi FreeBSD tuuma kr\u00fcptos\u00fcsteemi API laiendamine, mille raames lisati wrapper, mis v\u00f5imaldab kasutada mitte FreeBSD-s toetatud algoritme standardse kr\u00fcpto-API kaudu, kasutades vajalike algoritmide rakendusi libsodium'i raamatukogust. Draiverisse on j\u00e4etud ainult Blake2 r\u00e4si arvutamise kood, kuna FreeBSD-s pakutud rakendamine on seotud fikseeritud suurusega r\u00e4si. <\/p>\n

Peale selle viidi \u00fclevaatusprotsessis l\u00e4bi koodi optimeerimine, mis t\u00f5stis mitme tuuma CPU koormuse jaotamise t\u00f5husust (tagati v\u00f5rdne kr\u00fcpteerimise ja dekr\u00fcpteerimise \u00fclesannete koormuse jaotamine CPU tuumade vahel). Tulemuseks olid pakettide t\u00f6\u00f6tlemise kulud, mis olid ligikaudsed Linuxi draiveri rakendusele. Kood sisaldab ka v\u00f5imalust kasutada ossl draiverit kr\u00fcpteerimise operatsioonide kiirendamiseks. <\/p>\n

Erinevalt WireGuard'i varasemast integreerimisest FreeBSD-s, on uues teostuses kasutatud standardset t\u00f6\u00f6riista wg, mitte muudetud versiooni ifconfig, mis v\u00f5imaldas \u00fchtlustada seadistamist Linuxi ja FreeBSD vahel. T\u00f6\u00f6riist wg, nagu ka draiver, on lisatud FreeBSD koodipuu, mis sai v\u00f5imalikuks wg koodi litsentsi muutmisega (kood on n\u00fc\u00fcd saadaval MIT ja GPL litsentside all). Eelmine WireGuard'i integreerimise katse FreeBSD-s toimus 2020. aastal, kuid l\u00f5ppes skandaaliga, mille tulemusena eemaldati juba lisatud kood madala kvaliteedi, bufferitega hooletu t\u00f6\u00f6tamise, pistikute kasutamise asemel kontrollide, protokolli mittet\u00e4ieliku rakendamise ja GPL litsentsi rikkumise t\u00f5ttu. <\/p>\n

Tuletame meelde, et VPN<\/a> WireGuard on rakendatud t\u00e4nap\u00e4evaste kr\u00fcptimismeetodite alusel, tagab v\u00e4ga k\u00f5rge j\u00f5udluse, on lihtne kasutada, vaba keerukustest ja on h\u00e4sti t\u00f5estatud mitmetes suurtes rakendustes, mis t\u00f6\u00f6tlevad suuri andmemahtusid. Projekt on arenenud alates 2015. aastast, l\u00e4binud auditi ja ametliku verifitseerimise rakendatud kr\u00fcptimismeetodite osas. WireGuard kasutab kr\u00fcpteerimise v\u00f5tmete p\u00f5hist marsruutimise kontseptsiooni, mille kohaselt seostatakse iga v\u00f5rgu\u00fchenduse jaoks privaatv\u00f5ti ja avatud v\u00f5tmete seostamiseks rakendatakse seda. <\/p>\n

Avauste v\u00f5tmete vahetus seose loomiseks toimub SSH-i sarnasel viisil. V\u00f5tmete koosk\u00f5lastamiseks ja \u00fchendamiseks ilma eraldi demonite k\u00e4ivitamiseta kasutab Noise_IK mehhanismi Noise Protocol Frameworkist, mis on sarnane SSH-s autoriseeritud v\u00f5tmete haldamisega. Andmete edastamine toimub UDP-pakettidesse kapseldamise kaudu. Toetatakse vahetust IP-aadressid<\/a> VPN-serverid (roaming) katkestusteta \u00fchendusega ja automaatse kliendi \u00fcmberseadistamisega. <\/p>\n

Kr\u00fcptimiseks kasutatakse voogkr\u00fcptimist ChaCha20 ja s\u00f5numi autentimise algoritmi (MAC) Poly1305, mis on v\u00e4lja t\u00f6\u00f6tatud Daniel J. Bernstein'i, Tanja Lange'i ja Peter Schwabe'i poolt. ChaCha20 ja Poly1305 positsioneeritakse kui kiirem ja turvalisem alternatiiv AES-256-CTR ja HMAC-le, mille tarkvaraline implementeerimine v\u00f5imaldab saavutada fikseeritud t\u00e4itmise aega, ilma spetsiaalset riistvaratugi kasutamata. \u00dchise salajase v\u00f5tme genereerimiseks kasutatakse Diiffi-Hellmani protokolli elliptiliste k\u00f5verate puhul Curve25519 elluviimises, mille on samuti esitanud Daniel J. Bernstein. Hasherimiseks kasutatakse algoritmi BLAKE2s (RFC7693).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u0430 \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u0430 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u0430 VPN WireGuard, \u0438 \u0414\u0436\u043e\u043d\u0430 \u0411\u043e\u043b\u0434\u0443\u0438\u043d\u0430 (John H. Baldwin), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 GDB \u0438 FreeBSD, \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2000-\u0445 \u0433\u043e\u0434\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SMP \u0438 NUMA […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105412","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47FreeBSD koodibaasi on lisatud uus VPN WireGuard'i teostus | ProHoster","description":"FreeBSD l\u00e4htekoodis on tehtud muudatusi uue WireGuardi VPN-i elluviimisega, mis p\u00f5hineb tuumamooduli koodil, mille on koost\u00f6\u00f6s v\u00e4lja t\u00f6\u00f6tanud FreeBSD ja WireGuardi p\u00f5hiarendustiimid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 FreeBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f VPN WireGuard | ProHoster","og:description":"\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-30T13:36:45+00:00","article:modified_time":"2022-10-30T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105412","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:26","updated":"2026-02-08 20:24:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105412"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412\/revisions"}],"predecessor-version":[{"id":157897,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412\/revisions\/157897"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}