{"id":105412,"date":"2022-10-30T15:36:45","date_gmt":"2022-10-30T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard"},"modified":"2022-10-30T15:36:45","modified_gmt":"2022-10-30T13:36:45","slug":"v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","title":{"rendered":"FreeBSD koodibaasi on lisatud uus VPN WireGuard rakendus.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

FreeBSD-i algsete tekstidesse on tehtud muudatused, mis sisaldavad uut WireGuardi VPN-i teostust, mis p\u00f5hineb tuumamooduli koodil, mille on koostanud FreeBSD ja WireGuardi peamised arendustiimid koos Jason A. Donenfeldi, WireGuardi autori, ja John H. Baldwini, tuntud GDB ja FreeBSD arendajaga, kes20. sajandi alguses viis l\u00e4bi SMP ja NUMA toe rakendamise FreeBSD tuumas. P\u00e4rast juhi vastuv\u00f5tmist FreeBSD-sse (sys\/dev\/wg) toimub tema arendamine ja hooldus n\u00fc\u00fcd FreeBSD hoidlas. <\/p>\n

Enne koodi vastuv\u00f5tmist FreeBSD Foundation'i toetusel viidi l\u00e4bi t\u00e4ielik muudatuste l\u00e4bivaatamine, mille k\u00e4igus anal\u00fc\u00fcsiti ka juhi suhtlemist \u00fclej\u00e4\u00e4nud s\u00fcdamiku allhoovustega ja hinnati tuumast pakutavate kr\u00fcptograafia primitivate kasutamise v\u00f5imalusi. <\/p>\n

Juhi n\u00f5utavate kr\u00fcptograafiliste algoritmide kasutamiseks laiendati FreeBSD tuuma kr\u00fcptos\u00fcsteemi API-d, kuhu lisati koonus, mis v\u00f5imaldab kasutada FreeBSD-s toetamata algoritme, kasutades vajalikku algoritmi rakendust libsodium raamatukogust. Juhi sisseehitatud algoritmidest j\u00e4i alles vaid Blake2 hash-arvutamise kood, kuna FreeBSD-s pakutud rakendus on seotud kindla hash-suurusega. <\/p>\n

Lisaks viidi l\u00e4bivaatamise k\u00e4igus l\u00e4bi koodi optimeerimine, mis t\u00f5stis koormuse jaotuse efektiivsust mitme tuuma CPU-de peal (tagades v\u00f5rdsed \u00fclesannete kr\u00fcptimise ja dekr\u00fcptimise tasakaalu tuumadele). Tulemuseks oli pakettide t\u00f6\u00f6tlemise kulud, mis olid l\u00e4henenud Linuxi seadme rakendusele. Koodis on samuti tagatud v\u00f5imalus kasutada ossl draiverit kr\u00fcptimise operatsioonide kiirendamiseks. <\/p>\n

Erinevalt WireGuardi eelmise integreerimise katsetusest FreeBSD-s on uues rakenduses kasutusel standardne utiliit wg, mitte muudetud versioon ifconfig, mis v\u00f5imaldas \u00fchtlustada seadistust Linuxis ja FreeBSD-s. Utiliit wg, nagu ka draiver, on integreeritud FreeBSD l\u00e4htekoodidesse, mis sai v\u00f5imalikuks t\u00e4nu wg koodi litsentsi muutusele (kood on n\u00fc\u00fcd litsentside MIT ja GPL all saadaval). Eelmine WireGuardi integreerimise katse FreeBSD-s toimus 2020. aastal, kuid see l\u00f5ppes skandaaliga, mille tulemusena eemaldati juba lisatud kood madala kvaliteedi, bufrite haldamise hooletuse, vale kontrollide kasutamise, protokolli mittet\u00e4ieliku rakendamise ja GPL litsentsi rikkumise t\u00f5ttu. <\/p>\n

peamine VPN<\/a> WireGuard p\u00f5hineb kaasaegsetel kr\u00fcpteerimismeetoditel, tagab v\u00e4ga k\u00f5rge j\u00f5udluse, on lihtne kasutada, on vaba keerukusest ja on end t\u00f5estanud mitmetes suurtes rakendustes, mis t\u00f6\u00f6tlevad suures mahus liiklust. Projekt on arenenud alates 2015. aastast, l\u00e4binud auditi ja ametliku valideerimise kasutatavatele kr\u00fcpteerimismeetoditele. WireGuardis rakendatakse v\u00f5tmete kr\u00fcpteerimise kaudu marsruutimise kontseptsiooni, mis h\u00f5lmab iga v\u00f5rgu liidese kinnise v\u00f5tme sidumist ja avalike v\u00f5tmete seondamise rakendamist. <\/p>\n

\u00dchenduse loomise avatud v\u00f5tmete vahetus toimub SSH-i sarnaselt. V\u00f5tmete kokkuleppimiseks ja \u00fchenduse loomiseks ilma eraldi kasutaja ruumi deemonit k\u00e4itata kasutatakse Noise Protocol Frameworki Noise_IK mehhanismi, mis sarnaneb SSH autoriseeritud v\u00f5tmete haldamisega. Andmed edastatakse UDP-pakettidesse kapseldatuna. Toetatakse vahetust IP-aadressid<\/a> VPN-serverid (roaming) katkestusteta \u00fchenduse hoidmine automaatse kliendi seadistamisega. <\/p>\n

Kr\u00fcptimiseks kasutatakse voogkr\u00fcptereid ChaCha20 ja s\u00f5numi autentimise algoritmi (MAC) Poly1305, mille on v\u00e4lja t\u00f6\u00f6tanud Daniel Bernstein, Tanja Lange ja Peter Schwabe. ChaCha20 ja Poly1305 on turundatud kui kiiremad ja turvalisemad analoogid AES-256-CTR ja HMAC, mille programmiline rakendus v\u00f5imaldab saavutada fikseeritud t\u00e4itmise aega ilma spetsiaalset riistvara tuge kasutamata. \u00dchise salajase v\u00f5tme genereerimiseks kasutatakse elliptsete k\u00e4ivete Difii-Hellmani protokolli Curve25519 rakenduses, mis on samuti ettepaneku Daniel Bernsteinilt. Hashimise jaoks kasutatakse algoritmi BLAKE2s (RFC7693).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u0430 \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u0430 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u0430 VPN WireGuard, \u0438 \u0414\u0436\u043e\u043d\u0430 \u0411\u043e\u043b\u0434\u0443\u0438\u043d\u0430 (John H. Baldwin), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 GDB \u0438 FreeBSD, \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2000-\u0445 \u0433\u043e\u0434\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SMP \u0438 NUMA […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105412","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 FreeBSD koodibaasi on lisatud uus WireGuardi VPN-i rakendus | ProHoster","description":"FreeBSD l\u00e4htekoodipuu on vastu v\u00f5tnud muudatused uue WireGuardi VPN-i rakenduse osas, mis p\u00f5hineb tuumamooduli koodil, mille on \u00fchiselt koostanud FreeBSD ja WireGuardi peamised arendustiimid koost\u00f6\u00f6s.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 FreeBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f VPN WireGuard | ProHoster","og:description":"\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-30T13:36:45+00:00","article:modified_time":"2022-10-30T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105412","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:26","updated":"2026-02-08 20:24:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105412"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412\/revisions"}],"predecessor-version":[{"id":157897,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105412\/revisions\/157897"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}