{"id":92348,"date":"2020-08-25T19:42:57","date_gmt":"2020-08-25T17:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard"},"modified":"2020-08-25T19:42:57","modified_gmt":"2020-08-25T17:42:57","slug":"v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","title":{"rendered":"NetBSD tuuma on lisatud WireGuard VPN-i tugi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

NetBSD projekti arendajad teatasid<\/a><\/noindex> NetBSD p\u00f5hiydamiku edasi arendamiseks on n\u00fc\u00fcd lisatud WireGuard protokolli teostava wg draiveri tugi. NetBSD on kolmas operatsioonis\u00fcsteem p\u00e4rast Linuxi ja OpenBSD-d, mis toetab WireGuardi. Samuti on pakutud abik\u00e4sud VPN-i seadistamiseks - wg-keygen ja wgconfig. Vaikimisi (GENERIC) v\u00e4\u00e4rtustega asembleeritud tuumas draiver praegu ei ole aktiveeritud ja selle seadistamiseks on vajalik selge m\u00e4\u00e4ramine seadetes 'pseudo-device wg'.<\/p>\n

Lisaks v\u00f5ib m\u00e4rkida avaldamist<\/a><\/noindex> korrektiivne v\u00e4rskendus wireguard-tools paketi versioonile 1.0.20200820, mis sisaldab tavalise kasutaja ruumis t\u00f6\u00f6tavaid utiliite nagu wg ja wg-quick. Uues v\u00e4ljaandes on ettevalmistatud IPC, et toetada WireGuardi FreeBSD operatsioonis\u00fcsteemis. Erinevate platvormide jaoks specific kode eraldati erinevatesse failidesse. Systemd unit-failile on lisatud toe k\u00e4sk 'reload', v\u00f5imaldades k\u00e4ivitada konstruktsioone nagu 'systemctl reload wg-quick at wgnet0'.<\/p>\n

Tuletame meelde, et VPN WireGuard p\u00f5hineb kaasaegsetel kr\u00fcpteerimismeetoditel, pakub v\u00e4ga k\u00f5rget j\u00f5udlust, on lihtne kasutada, puuduvad keerukused ning on end t\u00f5estanud mitmes suures rakenduses, mis t\u00f6\u00f6tlevad suuri andmemahtusid. Projekt on k\u00e4inud alates 2015. aastast, l\u00e4binud audit ja formaalse kontrollimise<\/a><\/noindex> rakendatud kr\u00fcpteerimismeetodite osas. WireGuard'i tugi on juba integreeritud NetworkManagerisse ja systemd-sse, ning tuuma patch'id kuuluvad jaotuste p\u00f5hikoosseisu Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> ja ALT<\/a><\/noindex>.<\/p>\n

WireGuard kasutab kr\u00fcpteerimisv\u00f5tmete p\u00f5hist marsruutimise kontseptsiooni, mis t\u00e4hendab, et iga v\u00f5rgu liidese jaoks seostatakse privaatv\u00f5ti ja avalike v\u00f5tmete sidumine toimub sarnaselt SSH-le. Avalike v\u00f5tmete vahetamine \u00fchenduse loomise jaoks toimub sama printsiibi j\u00e4rgi nagu SSH-s. V\u00f5tmete kokku leppimiseks ja \u00fchenduse loomiseks ilma eraldi kasutajaruumis deemonit k\u00e4ivitamata kasutatakse mehhanismi Noise_IK Noise Protocol Framework<\/a><\/noindex>, mis sarnaneb authorized_keys haldamisega SSH-s. Andmete edastamine toimub UDP-pakettidesse kapseldamise kaudu. VPN-serveri IP-aadressi vahetamine (roaming) on toetatud ilma \u00fchenduse katkemiseta ja kliendi automaatse \u00fcmberkonfigureerimisega.<\/p>\n

Kr\u00fcpteerimiseks kasutatakse<\/a><\/noindex> voosredensus ChaCha20<\/a><\/noindex> ja s\u00f5numite autentimise algoritm (MAC) Poly1305<\/a><\/noindex>, mille on t\u00f6\u00f6tanud v\u00e4lja Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) ja Peter Schwabe (Peter Schwabe). ChaCha20 ja Poly1305 on esitatud kiiremate ja turvalisemate variantidena AES-256-CTR ja HMAC, mille tarkvaraline teostus v\u00f5imaldab saavutada fikseeritud t\u00f6\u00f6tlemisaega ilma spetsiaalse riistvaratoe kaasamiseta. \u00dchise salajase v\u00f5tme genereerimiseks kasutatakse elliptsete k\u00f5verate j\u00e4rgi t\u00f6\u00f6tavat Diffie-Hellmani protokolli, mille teostas Curve25519<\/a><\/noindex>, mille samuti pakkus v\u00e4lja Daniel Bernstein. Hashimise jaoks kasutatakse algoritmi BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard. NetBSD \u0441\u0442\u0430\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0438 OpenBSD \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN — wg-keygen \u0438 wgconfig. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (GENERIC) \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u044f\u0432\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92348","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NetBSD tuuma on lisatud WireGuard VPN-i tugi | ProHoster","description":"NetBSD projekti arendajad teatasid, et NetBSD tuuma p\u00f5hiseos on n\u00fc\u00fcd draiver wg.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u044f\u0434\u0440\u043e NetBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 VPN WireGuard | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T17:42:57+00:00","article:modified_time":"2020-08-25T17:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:10:22","updated":"2022-09-28 01:30:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=92348"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92348\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=92348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=92348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=92348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}