{"id":55822,"date":"2020-01-29T00:00:00","date_gmt":"2020-01-28T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router"},"modified":"2020-02-18T14:03:58","modified_gmt":"2020-02-18T11:03:58","slug":"uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","title":{"rendered":"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One'i ruuteri sisse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/a5c5330ebe866b5859da6cbc227d057c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nM\u00f5ned meist ei kasuta internetti ilma VPN-ita mitmel p\u00f5hjusel: m\u00f5nel inimesel on vaja eraldi IP-aadressi, ning lihtsam ja odavam on osta VPS kahe IP-ga, kui osta aadress teenusepakkujalt; m\u00f5ned soovivad p\u00e4\u00e4seda juurde k\u00f5ikidele veebisaitidele, mitte ainult Venemaal lubatud neile; kolmandatel on vaja IPv6, kuid teenusepakkuja ei paku seda\u2026<br \/>\nEnamasti luuakse VPN-\u00fchendus otse seadmes, mida hetkel kasutatakse, mis on t\u00e4itsa m\u00f5istlik, kui sul on vaid \u00fcks arvuti ja \u00fcks telefon ning neid harva samal ajal kasutatakse. Kui aga sinu koduv\u00f5rgus on mitmeid seadmeid v\u00f5i n\u00e4iteks on olemas selliseid, kus VPN-i seadistada ei saa, oleks mugavam luua tunnel otse koduses ruuteris, et mitte muretseda iga seadme eraldi seadistamise p\u00e4rast.<\/p>\n<p>\u0415\u0441\u043b\u0438 \u0432\u044b \u0445\u043e\u0442\u044c \u0440\u0430\u0437 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 OpenVPN \u043d\u0430 \u0441\u0432\u043e\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440, \u0432\u044b, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u044b \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u044b. SoC&#8217;\u0438 \u0434\u0430\u0436\u0435 \u0434\u0435\u0448\u0435\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0431\u044f \u043e\u043a\u043e\u043b\u043e\u0433\u0438\u0433\u0430\u0431\u0438\u0442\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u0437\u0430 \u0441\u0447\u0435\u0442 \u0432\u044b\u043d\u043e\u0441\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 NAT \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0447\u0438\u043f, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438, \u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u0442\u0430\u043a\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u043b\u0430\u0431\u044b, \u0442.\u043a. \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043d\u0438\u0445 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u043d\u0435\u0442. \u0422\u0430\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0438\u0441\u0441 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0433\u043d\u0443\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0440\u043e\u0443\u0442\u0435\u0440\u0430 \u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0446\u0435\u043d\u0443 \u0433\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2014 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0441 \u043c\u043e\u0449\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u0441\u0442\u043e\u044f\u0442 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437 \u0434\u043e\u0440\u043e\u0436\u0435, \u0438 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0443\u0436\u0435 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u0430\u043a \u043a\u043e\u0440\u043e\u0431\u043a\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0434\u0430\u0447\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 NAS, \u0442\u043e\u0440\u0440\u0435\u043d\u0442\u043e\u043a\u0430\u0447\u0430\u043b\u043a\u0438 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0439 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430-\u0441\u0438\u0441\u0442\u0435\u043c\u044b.<\/p>\n<p>Minu ruuter, TP-Link TL-WDR4300, ei ole just uus \u2014 mudel ilmus 2012. aasta keskel ja sellel on 560 MHz MIPS32 74Kc arhitektuuri protsessor, mille v\u00f5imsus on piisav vaid 20-23 Mb\/s kr\u00fcpteeritud liikluse edastamiseks OpenVPN-i kaudu, mis t\u00e4nap\u00e4eva koduse interneti kiirusest on \u00fcsna v\u00e4he.<br \/>\n\u041a\u0430\u043a \u0431\u044b \u043d\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0443\u043d\u043d\u0435\u043b\u044f? \u041c\u043e\u0439 \u0440\u043e\u0443\u0442\u0435\u0440 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 3&#215;3 MIMO, \u0434\u0430 \u0438 \u0432\u043e\u043e\u0431\u0449\u0435, \u0445\u043e\u0440\u043e\u0448\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0435\u0433\u043e \u043c\u0435\u043d\u044f\u0442\u044c.<br \/>\nKuna praegu on kombeks teha 10-megabaidiseid internetilehti, kirjutada t\u00f6\u00f6lauarakendusi node.js-is ja pakendada neid 100-megabaidisesse faili, suurendada arvutusv\u00f5imet optimeerimise asemel, teeme midagi kohutavat \u2014 viime VPN-\u00fchenduse tootlikule \u00fchesirgele \u201earvutile\u201c Orange Pi One, mille paigaldame ruuteri korpusesse, kasutamata olemasolevaid v\u00f5rgu- ja USB-pordi, k\u00f5ik vaid $9.99*!<br \/>\n* + saatmine, + maksud, + \u00f5lle jaoks, + MicroSD.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>OpenVPN<\/h3>\n<p>Ei saa \u00f6elda, et ruuteri protsessor oleks t\u00e4iesti n\u00f5rk \u2014 see suudab \u0161ifreerida ja hajutada andmeid AES-128-CBC-SHA1 algoritmi abil kiirusel 50 Mb\/s, mis on m\u00e4rgatavalt kiirem kui OpenVPN t\u00f6\u00f6tab, ja kaasaegne vooluline \u0161ifris\u00fcsteem CHACHA20 POLY1305 hajutiga arendab lausa 130 megabitit sekundis! Miks on VPN-tunneli kiirus siis nii madal? Asi on konteksti vahetamises kasutaja- ja tuumaruumi vahel: OpenVPN \u0161ifreerib liiklust ja suhtleb v\u00e4limailmaga kasutaja kontekstis, samas kui tuumaruumi kontekstis toimub marsruutimine ise. Operatsioonis\u00fcsteem peab pidevalt vahetama kontekste iga vastuv\u00f5etud v\u00f5i edastatud paketi puhul, ja see operatsioon ei ole kiire. See probleem on iseloomulik k\u00f5igile VPN-rakendustele, mis t\u00f6\u00f6tavad TUN\/TAP draiveri kaudu, ja ei saa \u00f6elda, et madala kiirus problemaatika tuleneb OpenVPN halvast optimeerimisest (kuigi muidugi on seal kohti, mida v\u00f5iks \u00fcle vaadata). \u00dckski userspace VPN-klient ei tooda isegi gigabitist minu s\u00fclearvutis, kui kr\u00fcpteerimine on v\u00e4lja l\u00fclitatud, r\u00e4\u00e4kimata n\u00f5rkade protsessoritega s\u00fcsteemidest.<\/p>\n<h3>Orange Pi One<\/h3>\n<p>Xunlongi Orange Pi One on k\u00f5ige soodsam pakkumine toote ja hinna suhe hetkel. $9.99* eest saad hea neljatuumalise ARM Cortex-A7 protsessori, mis t\u00f6\u00f6tab stabiilselt 1008 MHz sagedusel ja on selgelt v\u00f5imekam kui tema konkurendid Raspberry Pi Zero ja Next Thing C.H.I.P. samas hinnaklassis. Sellele j\u00e4rgneb aga probleem. Xunlongi tarkvara t\u00e4helepanu on null, ning kui One m\u00fc\u00fcgile tuli, ei olnud nad isegi seadme konfiguratsioonifaili esitanud, r\u00e4\u00e4kimata valmiskaubanduse piltidest. Allwinner, SoC tootja, ei paku oma toote kohta ka suurt tuge. Neid huvitab vaid minimaalne toimimine Android 4.4.4-s, seega oleme sunnitud kasutama versiooni 3.4 kerest koos Androidi plaastritega. \u00d5nneks on entusiastid, kes koguvad ja toimetavad distributsioone, muudavad kera ning kirjutavad koodi seadmete toeks mainline-kernes, tehes balay t\u00f6\u00f6 tootja eest, et see kehvem asi korralikult t\u00f6\u00f6taks. Minu eesm\u00e4rkidel valisin distributsiooni Armbian, mis uuendatakse sageli ja mugavalt (uued kerged installitakse otse pakihalduri kaudu, mitte failide kopeerimisega spetsiaalsesse osi, nagu see tavaliselt Allwinneris toimub) ning toetab enamikku perifeeria seadmeid, erinevalt teistest.<\/p>\n<h3>Ruuter<\/h3>\n<p>Kuna me ei soovi n\u00f5rgestada ruuteri protsessorit kr\u00fcpteerimisega ja kiirendada meie VPN-\u00fchendust, saame selle \u00fclesande kanda v\u00f5imekamale Orange Pi protsessorile, \u00fchendades selle ruuteriga kuidagi. Meelde tuleb kas Ethernet v\u00f5i USB \u2014 m\u00f5lemad standardid on seadmetes toetatud, kuid ma ei sooviks kasutada juba olemasolevaid porte. \u00d5nneks on lahendus.<\/p>\n<p>USB-hub GL850G, mida kasutatakse ruuteris, toetab 4 USB-porti, millest kaks pole joodetud. Pole selge, miks tootja ei jootnud neid, eeldan, et nad ei soovinud anda kasutajatele v\u00f5imalust \u00fchendada korraga 4 seadmeid, millel on k\u00f5rge voolutarve (n\u00e4iteks k\u00f5vakettad), kuna ruuteri tavaline toiteplokk ei ole selliseks koormuseks m\u00f5eldud. Igatahes on see meile kasuks.<br \/>\n<img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/6e36b9c769ca36945d4b3297459b479c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTeise USB-pordi saamiseks piisab, kui jootada kaks juhtme 8(D-) ja 9(D+) v\u00f5i 11(D-) ja 12(D+) jala k\u00fclge.<\/p>\n<p><img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/023b1cb71b0e297460e4af494b219651.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKuid lihtsalt kaht USB-seadet \u00fchendada ja loota, et k\u00f5ik t\u00f6\u00f6tab iseenesest, nagu juhtuks Ethernetiga, ei piisa. Esiteks peame sundima \u00fchte neist t\u00f6\u00f6tama USB kliendi re\u017eiimis, mitte USB hostina; teiseks peame leidma viisi, kuidas seadmed \u00fcksteist tuvastavad. On olemas palju draivereid nn USB Gadgets (nime p\u00f5hjal Linuxi tuumas\u00fcsteemis), mis v\u00f5imaldavad emuleerida erinevaid t\u00fc\u00fcpe USB-seadmeid: v\u00f5rguadapterit, helikaarti, klaviatuuri ja hiirt, USB-m\u00e4lupulka, kaamerat, konsooli l\u00e4bi seeriaport. Kuna meie seade t\u00f6\u00f6tab v\u00f5rguga, sobib meile k\u00f5ige paremini Ethernet-adapteri emulatsioon.<\/p>\n<p>On olemas kolm Ethernet-over-USB standardit:<\/p>\n<ul>\n<li><b>Remote NDIS (RNDIS)<\/b>. Vananenud standard Microsoftilt, mida kasutati peamiselt Windows XP aegadel.<\/li>\n<li><b>Ethernet Control Model (ECM)<\/b>. Lihtne standard, mis kapseldab Etherneti raame USB-pakettidesse. Sobib suurep\u00e4raselt USB-\u00fchendusega juhtmetele mootoritele, kus raamide edastamine ilma t\u00f6\u00f6tlemiseta on mugav, kuid oma lihtsuse ja USB-bussi piirangute t\u00f5ttu ei t\u00f6\u00f6ta see v\u00e4ga kiiresti.<\/li>\n<li><b>Ethernet Emulation Model (EEM)<\/b>. Nutikam protokoll, mis arvestab USB piiranguid ja optimaalselt kogub mitu raami \u00fcheks, suurendades seel\u00e4bi l\u00e4bilaskev\u00f5imet.<\/li>\n<li><b>Network Control Model (NCM)<\/b>. Uusim protokoll. Omab EEM-i eeliseid ja optimeerib veelgi bussi t\u00f6\u00f6d.<\/li>\n<\/ul>\n<p>\nKuna igal neist protokollidest meie plaadil t\u00f6\u00f6le saamine, nagu alati, toob kaasas teatavad raskused. Kuna Allwinnerit huvitavad ainult Androidi korpuse osad, t\u00f6\u00f6tab normaalselt ainult Android Gadget \u2013 see kood, mis rakendab \u00fchendust adb, seadme eksportimist MTP protokolli kaudu ja USB-m\u00e4lupulga emuleerimist Android-seadmetes. Isegi Android Gadget toetab RNDIS protokolli, kuid Allwinneri tuumas on see rikutud. Kui proovite kompileerida tuuma m\u00f5ne teise USB Gadgetiga, ei ilmu seade s\u00fcsteemi, olenemata sellest, mida teete.<br \/>\nProbleemi lahendamiseks oleks m\u00f5istlik leida USB-kontrolleri initsialiseerimise koht Android-gadget android.c modifitseeritud arendajate koodis, kuid on ka ringtee, et k\u00e4ivitada v\u00e4hemalt Etherneti emulatsioon USB kaudu:<\/p>\n<pre><code>--- sun8i\/drivers\/usb\/sunxi_usb\/udc\/sunxi_udc.c 2016-04-16 15:01:40.427088792 +0300\n+++ sun8i\/drivers\/usb\/sunxi_usb\/udc\/sunxi_udc.c 2016-04-16 15:01:45.339088792 +0300\n@@ -57,7 +57,7 @@\n static sunxi_udc_io_t g_sunxi_udc_io;\n static u32 usb_connect = 0;\n static u32 is_controller_alive = 0;\n-static u8 is_udc_enable = 0;   \n+static u8 is_udc_enable = 1;   \n \n #ifdef CONFIG_USB_SUNXI_USB0_OTG\n static struct platform_device *g_udc_pdev = NULL;<\/code><\/pre>\n<p>See patch forcedly enables USB client mode, allowing the use of regular USB Gadgets from Linux.<br \/>\nNow, you should rebuild the kernel with this patch and the required gadget. I chose EEM, as it proved to be more efficient than NCM in tests.<br \/>\nThe Armbian team provides <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/igorpecovnik\/lib\">a very simple and convenient build system<\/a><\/noindex> for all supported boards in the distribution. Just download it, place our patch in <code>userpatches\/kernel\/sun8i-default\/otg.patch<\/code>, edit <code>compile.sh<\/code> and select the necessary gadget:<\/p>\n<p><img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/aa0dca97410e3064ead605f3c4ff68ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nThe kernel will compile into a deb package, which can be easily installed on the board via <code>dpkg<\/code>.<br \/>\nAll that is left is to connect the board via USB and configure our new network adapter to receive an address via DHCP. To do this, you need to add something like the following to <code>\/etc\/network\/interfaces<\/code>:<\/p>\n<pre><code>auto usb0\n        iface usb0 inet dhcp\n        hwaddress ether c2:46:98:49:3e:9d\n        pre-up \/bin\/sh -c 'echo 2 &gt; \/sys\/bus\/platform\/devices\/sunxi_usb_udc\/otg_role'<\/code><\/pre>\n<p>It's better to set the MAC address manually, as it will be random on each reboot of the device, which is inconvenient and troublesome.<br \/>\nConnect the Micro USB cable to the OTG port, connect the power from the router (it can be applied to pins 2 and 3 of the header, not just to the power jack).<\/p>\n<p>Now, configure the router. Simply install the package with the EEM driver and add our new network USB device to the local firewall zone bridge:<\/p>\n<pre><code>opkg install kmod-usb-net-cdc-eem<\/code><\/pre>\n<p><img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/c3ea2b182c9cc5af19a47c5b5dca7ff1.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nTo route all traffic into the VPN tunnel, you need either to add a SNAT rule for the board's IP address on the router side or to provide the board's address as the gateway address via dnsmasq. The latter is done by adding the following line to <code>\/etc\/dnsmasq.conf<\/code>:<\/p>\n<pre><code>dhcp-option = tag:lan, option:router, 192.168.1.100<\/code><\/pre>\n<p>kus <code>192.168.1.100<\/code> \u2014 the IP address of your board. Don't forget to specify the router's address in the network settings on the board itself!<\/p>\n<p>To isolate the board's contacts from the router's contacts, a melamine sponge was used. It turned out something like this:<br \/>\n<img decoding=\"async\" alt=\"Kiirendame OpenVPN-i $9.99* v\u00f5i integreerime Orange Pi One&#039;i ruuteri sisse\" src=\"\/wp-content\/uploads\/2020\/01\/72d0a2dd667e47e31057d9e79da884fc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Kokkuv\u00f5te<\/h3>\n<p>USB kaudu t\u00f6\u00f6tav v\u00f5rk \u00fcllatab kiiruselt: 100-120 Mb\/s, ootasime v\u00e4hem. OpenVPN edastab umbes 70 Mb\/s kr\u00fcpteeritud liiklust, mis ei ole ka v\u00e4ga palju, kuid minu vajaduste jaoks piisab. Ruuteri kaas sulgub halvasti, j\u00e4ttes v\u00e4ikese vahe. Esteetikud v\u00f5ivad emaplaadilt eemaldada Etherneti ja USB Host-pesad, mis v\u00f5imaldab kaanel t\u00e4ielikult sulguda, ja veel j\u00e4\u00e4b ruumi.<br \/>\nV\u00f5i on parem mitte tegeleda sellise poriga ja osta. <noindex><a rel=\"nofollow\" href=\"https:\/\/omnia.turris.cz\/en\/\">Turris Omnia<\/a><\/noindex>.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/368735\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0441 \u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u043e\u043c \u0431\u0435\u0437 VPN \u043f\u043e \u0442\u0435\u043c \u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c: \u043a\u043e\u043c\u0443-\u0442\u043e \u043d\u0443\u0436\u0435\u043d \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 IP, \u0438 \u043f\u0440\u043e\u0449\u0435 \u0438 \u0434\u0435\u0448\u0435\u0432\u043b\u0435 \u043a\u0443\u043f\u0438\u0442\u044c VPS \u0441 \u0434\u0432\u0443\u043c\u044f IP, \u0447\u0435\u043c \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441 \u0443 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430, \u043a\u0442\u043e-\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u0424, \u0442\u0440\u0435\u0442\u044c\u0438\u043c \u043d\u0443\u0436\u0435\u043d IPv6, \u0430 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u2026 \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55822","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0441 \u043d\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0441\u043a\u043e\u0440\u044f\u0435\u043c OpenVPN \u0437\u0430 $9.99* \u0438\u043b\u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c Orange Pi One \u0432 \u0440\u043e\u0443\u0442\u0435\u0440 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0441 \u043d\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-28T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kiirendame OpenVPN-i $9.99* eest v\u00f5i integreetige Orange Pi One ruuteri | ProHoster","description":"M\u00f5ned meist ei.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0441\u043a\u043e\u0440\u044f\u0435\u043c OpenVPN \u0437\u0430 $9.99* \u0438\u043b\u0438 \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c Orange Pi One \u0432 \u0440\u043e\u0443\u0442\u0435\u0440 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0441 \u043d\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-28T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55822","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:36:29","updated":"2022-10-02 13:17:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55822","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55822"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55822\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55822"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55822"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55822"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}