An fito da uwar garken wakili na 1.4 na shaci-ss-server, ta amfani da ka'idar Shadowsocks don ɓoye yanayin zirga-zirga, ketare shingen wuta da yaudarar tsarin duba fakiti. Ana haɓaka uwar garken ta hanyar aikin Outline, wanda kuma yana ba da tsarin aikace-aikacen abokin ciniki da keɓancewar sarrafawa wanda ke ba ku damar hanzarta tura sabar Shadowsocks masu amfani da yawa dangane da faci-ss-uwar garken a cikin yanayin girgije na jama'a ko kan kayan aikin ku, sarrafa su ta hanyar haɗin yanar gizo kuma tsara damar mai amfani ta maɓalli. Jigsaw ne ya ƙirƙira lambar kuma tana kiyaye shi, wani yanki ne a cikin Google da aka ƙirƙira don haɓaka kayan aikin da za a bi da su tare da tsara musayar bayanai kyauta.
An rubuta Outline-ss-uwar garke a cikin Go kuma an rarraba shi ƙarƙashin lasisin Apache 2.0. Lambar da aka yi amfani da ita azaman tushe ita ce go-shadowsocks2 uwar garken wakili, wanda ƙungiyar masu haɓaka Shadowsocks suka ƙirƙira. Kwanan nan, babban aikin aikin Shadowsocks ya mayar da hankali kan haɓaka sabon uwar garken a cikin harshen Rust, kuma aiwatarwa a cikin harshen Go ba a sabunta shi ba fiye da shekara guda kuma ana lura da shi a baya a cikin aiki.
Bambance-bambance tsakanin shaci-ss-uwar garke da go-shadowsocks2 sun sauko don tallafawa haɗa masu amfani da yawa ta hanyar tashar sadarwa guda ɗaya, ikon buɗe tashoshin sadarwa da yawa don karɓar haɗin gwiwa, tallafi don sake kunnawa mai zafi da sabuntawar daidaitawa ba tare da karya haɗin gwiwa ba, ginannen ciki saka idanu da kayan aikin gyaran zirga-zirga bisa tushen dandamali na prometheus .io.
outline-ss-server kuma yana ƙara kariya daga buƙatar bincike da hare-haren sake kunna wuta. An kai hari ta buƙatun gwaji don tantance kasancewar wakili; alal misali, maharin na iya aika saitin bayanai masu girma dabam zuwa uwar garken Shadowsocks da aka yi niyya kuma ya yi nazarin adadin bayanan uwar garken zai karanta kafin gano kuskure da rufe haɗin. Harin maimaituwar zirga-zirga ya dogara ne akan katse zama tsakanin abokin ciniki da uwar garken sannan kuma ƙoƙarin sake aika bayanan da aka kama don tantance kasancewar wakili.
Don kare kai daga hare-hare ta hanyar buƙatun gwaji, uwar garken shaci-ss-uwar garke, lokacin da bayanan da ba daidai ba suka zo, ba ya katse haɗin kuma baya nuna kuskure, amma yana ci gaba da karɓar bayanai, yana aiki azaman nau'in black hole. Don karewa daga sake kunnawa, ana kuma bincika bayanan da aka karɓa daga abokin ciniki don maimaitawa ta amfani da ƙididdiga da aka adana don jerin musafaha da yawa na ƙarshe (mafi girman 40, ana saita girman lokacin da sabar ta fara kuma tana cinye 20 bytes na ƙwaƙwalwar ajiya a jere). Don toshe maimaita martani daga uwar garken, duk jerin musabaha na uwar garken suna amfani da lambobin tantancewar HMAC tare da alamun 32-bit.
Dangane da matakin ɓoye cunkoson ababen hawa, ƙa'idar Shadowsocks a cikin aiwatar da sabar-ss-uwar garke tana kusa da jigilar plug-in Obfs4 a cikin hanyar sadarwar Tor da ba a sani ba. An ƙirƙiri ka'idar don ketare tsarin ba da izini na zirga-zirgar ababen hawa a China ("Babban Wutar Wutar Lantarki ta China") kuma tana ba ku damar ɓoye zirga-zirgar zirga-zirgar da aka tura ta wata uwar garken (hanyar zirga-zirga yana da wahalar ganowa saboda haɗa nau'in bazuwar iri da kwaikwaiyo) ci gaba da gudana).
Ana amfani da SOCKS5 azaman yarjejeniya don buƙatun wakilci - ana ƙaddamar da wakili tare da tallafin SOCKS5 akan tsarin gida, wanda ke jigilar zirga-zirga zuwa sabar mai nisa daga inda ake aiwatar da buƙatun. Ana sanya zirga-zirga tsakanin abokin ciniki da uwar garken a cikin rami da aka rufaffen (ana goyan bayan ingantacciyar ɓoyayyen ɓoye AEAD_CHACHA20_POLY1305, AEAD_AES_128_GCM da AEAD_AES_256_GCM), ɓoye gaskiyar ƙirƙirar sa shine babban aikin Shadowsocks. Ana tallafawa ƙungiyar TCP da UDP tunnels, da kuma ƙirƙirar ramukan sabani waɗanda SOCKS5 ba su iyakance ba ta hanyar amfani da plugins waɗanda ke tunawa da jigilar toshe a cikin Tor.
source: budenet.ru