{"id":101461,"date":"2021-09-30T10:22:42","date_gmt":"2021-09-30T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard"},"modified":"2021-09-30T10:22:42","modified_gmt":"2021-09-30T08:22:44","slug":"firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","title":{"rendered":"Firezone \u2014 une solution pour cr\u00e9er des serveurs VPN bas\u00e9s sur WireGuard.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Le projet Firezone d\u00e9veloppe un serveur VPN pour permettre l'acc\u00e8s aux h\u00f4tes dans un r\u00e9seau isol\u00e9 interne depuis des dispositifs utilisateurs se trouvant dans des r\u00e9seaux externes. Le projet vise \u00e0 atteindre un haut niveau de s\u00e9curit\u00e9 et \u00e0 simplifier le processus de d\u00e9ploiement du VPN. Le code du projet est \u00e9crit en Elixir et en Ruby, et est distribu\u00e9 sous la licence Apache 2.0. <\/p>\n

Le projet est d\u00e9velopp\u00e9 par un ing\u00e9nieur en automatisation de la s\u00e9curit\u00e9 de Cisco, qui a tent\u00e9 de cr\u00e9er une solution automatisant le travail avec la configuration des h\u00f4tes et \u00e9vitant les probl\u00e8mes rencontr\u00e9s lors de la mise en place d'un acc\u00e8s s\u00e9curis\u00e9 aux VPC dans le cloud. Firezone peut \u00eatre consid\u00e9r\u00e9 comme une alternative open source \u00e0 l'OpenVPN Access Server, construit sur WireGuard au lieu d'OpenVPN. <\/p>\n

Pour l'installation, des paquets rpm et deb sont propos\u00e9s pour diff\u00e9rentes versions de CentOS, Fedora, Ubuntu et Debian, dont l'installation ne n\u00e9cessite pas de d\u00e9pendances externes, car toutes les d\u00e9pendances n\u00e9cessaires sont d\u00e9j\u00e0 incluses gr\u00e2ce \u00e0 l'outil Chef Omnibus. Un syst\u00e8me avec un noyau Linux de version 4.19 ou sup\u00e9rieure et un module de noyau compil\u00e9 avec VPN<\/a> WireGuard. Selon l'auteur, le d\u00e9marrage et la configuration d'un serveur VPN peuvent \u00eatre r\u00e9alis\u00e9s en quelques minutes. Les composants de l'interface web s'ex\u00e9cutent sous un utilisateur non privil\u00e9gi\u00e9, et l'acc\u00e8s est uniquement possible via HTTPS.

\"Firezone<\/center> <\/p>\n

Pour \u00e9tablir des canaux de communication dans Firezone, WireGuard est utilis\u00e9. Firezone int\u00e8gre \u00e9galement des fonctions de pare-feu utilisant nftables. \u00c0 l'heure actuelle, le pare-feu est limit\u00e9 aux moyens de bloquer le trafic sortant vers des h\u00f4tes ou des sous-r\u00e9seaux sp\u00e9cifiques dans les r\u00e9seaux internes ou externes. La gestion se fait via l'interface web ou en mode ligne de commande \u00e0 l'aide de l'outil firezone-ctl. L'interface web est construite sur la base de Admin One Bulma.

\"Firezone<\/center> <\/p>\n

Actuellement, tous les composants de Firezone s'ex\u00e9cutent sur une seule le serveur<\/a>, mais le projet est initialement d\u00e9velopp\u00e9 avec un souci de modularit\u00e9 et il est pr\u00e9vu d'ajouter la possibilit\u00e9 de s\u00e9parer les composants pour l'interface web, le VPN et le pare-feu sur diff\u00e9rents h\u00f4tes dans le futur. Les plans mentionnent \u00e9galement l'int\u00e9gration d'un bloqueur de publicit\u00e9s fonctionnant au niveau DNS, le support de listes de blocage d'h\u00f4tes et de sous-r\u00e9seaux, la possibilit\u00e9 d'authentification via LDAP \/ SSO et des fonctionnalit\u00e9s suppl\u00e9mentaires de gestion des utilisateurs.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430 \u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f VPN. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0430\u0445 Elixir \u0438 Ruby, \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043e\u043c \u043f\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firezone \u2014 solution de cr\u00e9ation de serveurs VPN bas\u00e9s sur WireGuard | ProHoster","description":"Le projet Firezone d\u00e9veloppe un serveur VPN pour organiser l'acc\u00e8s aux h\u00f4tes dans un r\u00e9seau isol\u00e9 interne depuis des dispositifs utilisateurs situ\u00e9s dans des r\u00e9seaux externes.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firezone \u2014 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 WireGuard | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-30T08:22:44+00:00","article:modified_time":"2021-09-30T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101461","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-30 08:30:11","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/101461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=101461"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/101461\/revisions"}],"predecessor-version":[{"id":159959,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/101461\/revisions\/159959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/101462"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=101461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=101461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=101461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}