Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router

Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router

Qee tus ntawm peb tsis siv Is Taws Nem yam tsis muaj VPN rau ib qho laj thawj lossis lwm qhov: ib tus neeg xav tau tus IP siab, thiab nws yooj yim dua thiab pheej yig dua los yuav VPS nrog ob tus IP dua li yuav qhov chaw nyob los ntawm tus kws kho mob, ib tus neeg xav nkag mus rau txhua lub vev xaib. , thiab tsis yog tsuas yog cov uas tau tso cai nyob rau thaj tsam ntawm Lavxias Federation, lwm tus xav tau IPv6, tab sis tus kws kho mob tsis muab nws ...
Feem ntau, kev sib txuas VPN yog tsim los ntawm lub cuab yeej nws tus kheej uas tau siv rau lub sijhawm, uas ua rau kev nkag siab yog tias koj tsuas muaj ib lub computer thiab ib lub xov tooj thiab tsis tshua siv lawv tib lub sijhawm. Yog tias muaj ntau yam khoom siv hauv koj lub tsev network, lossis, piv txwv li, muaj qee qhov uas VPN tsis tuaj yeem teeb tsa, nws yuav yooj yim dua los tsim lub qhov taub ncaj qha ntawm lub tsev router kom tsis txhob xav txog teeb tsa txhua lub cuab yeej sib cais. .

Yog tias koj tau teeb tsa OpenVPN ntawm koj lub router, tej zaum koj yuav xav tsis thoob vim nws ua haujlwm sai npaum li cas. Lub SoCs ntawm cov routers pheej yig dhau los ntawm kev tsheb khiav ntawm gigabit yam tsis muaj teeb meem, vim yog kev hloov pauv ntawm kev sib txuas thiab NAT ua haujlwm rau cov nti sib cais tsim tshwj xeeb rau txoj haujlwm no, thiab cov txheej txheem tseem ceeb ntawm cov routers tsis muaj zog heev, vim tias Muaj yog xyaum tsis muaj load rau lawv. Qhov kev cuam tshuam no tso cai rau koj kom ua tiav kev kub ceev ntawm router thiab txo tus nqi ntawm cov khoom tiav - routers nrog cov txheej txheem muaj zog raug nqi ob peb zaug ntxiv, thiab tsis yog tsuas yog ua lub thawv rau kev faib tawm hauv Is Taws Nem, tab sis kuj yog NAS, torrent. downloader thiab tsev multimedia system.

Kuv lub router, TP-Link TL-WDR4300, tsis tuaj yeem hu ua tshiab - tus qauv tshwm sim nyob rau nruab nrab xyoo 2012, thiab muaj 560 MHz MIPS32 74Kc architecture processor, lub zog ntawm qhov tsuas yog txaus rau 20-23 Mb / s ntawm kev nkag mus nkag. ntawm OpenVPN, uas yog los ntawm cov qauv Kev ceev ntawm lub tsev niaj hnub Internet yog tsawg heev.
Peb tuaj yeem ua kom qhov ceev ntawm qhov encrypted? Kuv lub router ua haujlwm tau zoo, txhawb nqa 3x3 MIMO, thiab feem ntau ua haujlwm zoo, Kuv tsis xav hloov nws.
Txij li tam sim no nws yog kev cai los ua 10-megabyte Internet nplooj ntawv, sau cov ntawv thov desktop hauv node.js thiab ntim lawv rau hauv 100-megabyte cov ntaub ntawv, ua kom suav lub zog es tsis txhob ua kom zoo, peb yuav ua qee yam txaus ntshai - peb yuav hloov qhov kev sib txuas VPN rau ib lub rooj tsavxwm "lub computer" Txiv kab ntxwv Pi Ib, uas peb yuav nruab rau hauv cov ntaub ntawv router yam tsis siv lub network thiab USB chaw nres nkoj uas twb muaj lawm, tsuas yog $ 9.99 *!
* + xa khoom, + se, + rau npias, + MicroSD.

OpenVPN

Lub router lub processor tsis tuaj yeem hu ua tsis muaj zog kiag li - nws muaj peev xwm encrypting thiab hashing cov ntaub ntawv siv AES-128-CBC-SHA1 algorithm ntawm qhov ceev ntawm 50 Mb / s, uas yog pom sai dua li OpenVPN ua haujlwm li cas, thiab niaj hnub CHACHA20 kwj cipher nrog POLY1305 hash txawm mus txog 130 megabits ib ob! Vim li cas qhov ceev ntawm VPN qhov yog tsawg? Nws yog txhua yam hais txog kev hloov pauv ntawm cov neeg siv qhov chaw thiab cov chaw hauv ntsiav tshuaj: OpenVPN encrypts kev khiav tsheb thiab sib txuas lus nrog lub ntiaj teb sab nraud hauv cov ntsiab lus ntawm cov neeg siv, thiab kev sib txuas nws tus kheej tshwm sim hauv cov ntsiab lus kernel. Lub operating system yuav tsum hloov mus tas li rau txhua pob ntawv tau txais lossis xa mus, thiab qhov haujlwm no qeeb. Qhov teeb meem no muaj nyob rau hauv txhua daim ntawv thov VPN uas khiav los ntawm TUN / TAP tsav tsheb, thiab nws tsis tuaj yeem hais tias qhov teeb meem ntawm kev ceev qis yog tshwm sim los ntawm qhov tsis zoo ntawm OpenVPN optimization (txawm hais tias, tau kawg, muaj qhov chaw uas yuav tsum tau rov ua haujlwm dua). Tsis yog ib tus neeg siv khoom siv VPN tus neeg siv khoom txawm tias muaj gigabit nrog encryption xiam oob qhab ntawm kuv lub laptop, cia nyob ib leeg nrog lub processor tsis muaj zog.

Txiv kab ntxwv Pi Ib

Lub Rooj Tswjhwm Saib Ib Leeg Pi Ib los ntawm Xunlong yog qhov kev tshaj tawm zoo tshaj plaws ntawm kev ua tau zoo / tus nqi piv rau tam sim no. Rau $ 9.99 * koj tau txais quad-core ARM Cortex-A7 processor khiav (ruaj khov) ntawm 1008 MHz, thiab ua kom pom tseeb tshaj nws cov nqi-point cov neeg nyob ze Raspberry Pi Zero thiab Next Thing CHIP. Qhov no yog qhov zoo kawg nkaus. Lub tuam txhab Xunlong them raws nraim xoom rau cov software ntawm nws cov laug cam, thiab thaum lub sij hawm ib tug twb launched rau muag, nws tseem tsis tau muab ib tug board configuration ntaub ntawv, tsis hais txog cov dluab npaj txhij. Allwinner, tus tsim SoC, kuj tsis yog tshwj xeeb rau kev txhawb nqa nws cov khoom. Lawv tsuas yog txaus siab rau kev ua haujlwm tsawg kawg nkaus hauv Android 4.4.4 OS, uas txhais tau tias peb raug yuam kom siv 3.4 ntsiav nrog Android thaj ua rau thaj. Hmoov zoo, muaj cov neeg txhawb siab uas sib sau ua ke kev faib tawm, hloov kho cov ntsiav, sau cov lej los txhawb cov laug cam hauv cov ntsiab lus tseem ceeb, i.e. lawv yeej ua haujlwm rau cov chaw tsim khoom, ua qhov no ua haujlwm tau zoo. Rau kuv lub hom phiaj, kuv xaiv Armbian kev faib khoom; nws nquag thiab yooj yim hloov kho (cov kernels tshiab tau teeb tsa ncaj qha los ntawm tus thawj tswj pob, thiab tsis yog los ntawm kev luam cov ntaub ntawv mus rau qhov tshwj xeeb muab faib, ib yam li feem ntau nrog Allwinner), thiab nws txhawb feem ntau peripherals, tsis zoo li lwm tus.

Router

Txhawm rau kom tsis txhob thauj cov khoom tsis muaj zog ntawm lub router nrog kev nkag mus thiab ua kom peb cov kev sib txuas VPN, peb tuaj yeem hloov txoj haujlwm no mus rau lub xub pwg nyom ntawm Orange Pi processor uas muaj zog dua los ntawm kev txuas rau lub router hauv qee txoj kev. Kev sib txuas ntawm Ethernet lossis USB los ntawm lub siab - ob qho tib si ntawm cov qauv no tau txais kev txhawb nqa los ntawm ob qho khoom siv, tab sis kuv tsis xav nqa cov chaw nres nkoj uas twb muaj lawm. Hmoov zoo, muaj txoj hauv kev tawm.

Lub GL850G USB hub nti, uas yog siv nyob rau hauv lub router, txhawb 4 USB ports, ob tug uas tsis yog wired. Nws tsis paub meej tias vim li cas cov chaw tsim khoom tsis tuaj yeem tshem tawm lawv, kuv xav tias, txhawm rau tiv thaiv cov neeg siv los ntawm kev sib txuas ntawm 4 cov khoom siv nrog kev siv siab tam sim no (piv txwv li, hard drives) ib zaug. Tus txheej txheem fais fab mov ntawm lub router tsis yog tsim los rau xws li ib tug load. Txawm li cas los xij, qhov no yog rau peb qhov txiaj ntsig.
Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router
Txhawm rau kom tau txais lwm qhov chaw nres nkoj USB, koj tsuas yog yuav tsum tau muab ob lub xov hlau rau pins 8 (D-) thiab 9 (D +) lossis 11 (D-) thiab 12 (D +).

Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router

Txawm li cas los xij, nws tsis txaus los tsuas yog ntsaws rau hauv ob lub USB li thiab vam tias txhua yam yuav ua haujlwm ntawm nws tus kheej, zoo li nws yuav nrog Ethernet. Ua ntej, peb yuav tsum ua kom ib qho ntawm lawv ua haujlwm hauv USB Client hom, thiab tsis yog USB Host, thiab qhov thib ob, peb yuav tsum txiav txim siab seb cov cuab yeej yuav kuaj tau li cas. Muaj ntau tus tsav tsheb rau lub npe hu ua USB Gadgets (lub npe tom qab Linux ntsiav subsystem), uas tso cai rau koj ua raws li ntau hom USB li: network adapter, audio card, keyboard thiab nas, flash drive, koob yees duab, console ntawm serial. chaw nres nkoj. Txij li thaum peb lub cuab yeej yuav ua haujlwm nrog lub network, emulating Ethernet adapter yog qhov zoo tshaj rau peb.

Muaj peb tus qauv Ethernet-over-USB:

  • Tej thaj chaw deb NDIS (RNDIS). Ib qho qauv dhau los ntawm Microsoft, siv feem ntau thaum Windows XP.
  • Ethernet Control Qauv (ECM). Ib tug qauv yooj yim uas encapsulates Ethernet thav duab hauv USB pob ntawv. Zoo heev rau wired modems nrog USB kev twb kev txuas, qhov twg nws yog qhov yooj yim rau hloov cov thav ntawv yam tsis muaj kev ua haujlwm, tab sis vim nws qhov yooj yim thiab kev txwv ntawm USB tsheb npav, nws tsis nrawm heev.
  • Ethernet Emulation Model (EEM). Cov txheej txheem ntse dua uas yuav siv rau hauv tus account USB txwv thiab ua kom zoo sib sau ntau lub thav duab rau hauv ib qho, yog li ua kom dhau los.
  • Network Control Model (NCM). Cov txheej txheem tshiab tshaj plaws. Muaj cov txiaj ntsig ntawm EEM thiab ntxiv dag zog rau kev caij tsheb npav.

Yuav kom tau txais ib qho ntawm cov txheej txheem no los ua haujlwm ntawm peb lub rooj tsavxwm, ib txwm muaj, peb yuav tau ntsib qee qhov teeb meem. Vim lub fact tias Allwinner tsuas yog txaus siab rau hauv Android qhov chaw ntawm lub ntsiav, tsuas yog Android Gadget ua haujlwm ib txwm - cov cai uas siv kev sib txuas lus nrog adb, xa tawm cov cuab yeej ntawm MTP raws tu qauv thiab ua raws li flash drive ntawm Android khoom siv. Android Gadget nws tus kheej kuj txhawb RNDIS raws tu qauv, tab sis nws tawg nyob rau hauv Allwinner kernel. Yog tias koj sim sau cov ntsiav nrog lwm yam USB Gadget, lub cuab yeej yuav tsis tshwm sim ntawm lub kaw lus, txawm tias koj ua dab tsi.
Txhawm rau daws qhov teeb meem, hauv txoj kev sib haum xeeb, koj yuav tsum nrhiav qhov chaw uas tus tswj hwm USB tau pib ua haujlwm hauv cov cai ntawm Android gadget android.c hloov kho los ntawm cov neeg tsim khoom, tab sis kuj tseem muaj kev daws teeb meem los ua kom tsawg kawg Ethernet emulation dhau. USB ua haujlwm:

--- sun8i/drivers/usb/sunxi_usb/udc/sunxi_udc.c 2016-04-16 15:01:40.427088792 +0300
+++ sun8i/drivers/usb/sunxi_usb/udc/sunxi_udc.c 2016-04-16 15:01:45.339088792 +0300
@@ -57,7 +57,7 @@
 static sunxi_udc_io_t g_sunxi_udc_io;
 static u32 usb_connect = 0;
 static u32 is_controller_alive = 0;
-static u8 is_udc_enable = 0;   /* is udc enable by gadget? */
+static u8 is_udc_enable = 1;   /* is udc enable by gadget? */
 
 #ifdef CONFIG_USB_SUNXI_USB0_OTG
 static struct platform_device *g_udc_pdev = NULL;

Qhov no thaj ua rau USB tus neeg siv hom, tso cai rau koj siv USB Gadgets li niaj zaus los ntawm Linux.
Tam sim no koj yuav tsum rov tsim kho lub ntsiav nrog lub thaj no thiab cov khoom tsim nyog. kuv xaiv EEM vim... Raws li cov txiaj ntsig kev xeem, nws tau dhau los ua qhov tsim tau ntau dua li NCM.
Pab pawg Armbian muab yooj yim heev thiab yooj yim los ua ke system rau tag nrho cov pab pawg txhawb nqa hauv kev faib khoom. Tsuas yog download tau nws, muab peb thaj rau hauv userpatches/kernel/sun8i-default/otg.patch, kho me ntsis compile.sh thiab xaiv lub gadget xav tau:

Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router

Lub kernel yuav muab tso ua ke rau hauv ib pob deb, uas yuav tsis yooj yim rau nruab rau ntawm lub rooj tsavxwm dpkg.
Txhua yam uas tseem tshuav yog txuas lub rooj tsavxwm ntawm USB thiab teeb tsa peb lub network adapter tshiab kom tau txais qhov chaw nyob ntawm DHCP. Ua li no koj yuav tsum tau ntxiv ib yam dab tsi zoo li hauv qab no rau /etc/network/interfaces:

auto usb0
        iface usb0 inet dhcp
        hwaddress ether c2:46:98:49:3e:9d
        pre-up /bin/sh -c 'echo 2 > /sys/bus/platform/devices/sunxi_usb_udc/otg_role'

Nws yog qhov zoo dua los teeb tsa MAC chaw nyob manually, vim tias ... nws yuav random txhua txhua lub sij hawm lub ntaus ntawv yog rebooted, uas yog inconvenient thiab teeb meem.
Peb txuas MicroUSB cable mus rau OTG connector, txuas lub hwj chim ntawm lub router (nws tuaj yeem muab rau tus pins 2 thiab 3 ntawm lub zuag, thiab tsis yog rau lub hwj huam txuas).

Txhua yam uas tseem tshuav yog los teeb tsa lub router. Nws yog txaus rau nruab lub pob nrog tus tsav tsheb EEM thiab ntxiv peb cov cuab yeej tshiab USB network rau tus choj ntawm thaj chaw firewall:

opkg install kmod-usb-net-cdc-eem

Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router
Txhawm rau xa tag nrho cov tsheb khiav mus rau VPN qhov, koj yuav tsum tau ntxiv SNAT txoj cai rau lub rooj tsavxwm IP chaw nyob ntawm sab router, lossis faib lub rooj tsavxwm chaw nyob raws li qhov chaw nyob ntawm dnsmasq. Cov tom kawg yog ua los ntawm kev ntxiv cov kab hauv qab no rau /etc/dnsmasq.conf:

dhcp-option = tag:lan, option:router, 192.168.1.100

qhov twg 192.168.1.100 - IP chaw nyob ntawm koj lub rooj tsavxwm. Tsis txhob hnov ​​​​qab nkag mus rau qhov chaw nyob router hauv lub network teeb tsa ntawm lub rooj tsavxwm nws tus kheej!

Ib daim txhuam cev melamine tau siv los cais cov rooj sib tham ntawm lub rooj sib tham ntawm lub router. Nws hloov tawm ib yam dab tsi zoo li no:
Ua kom ceev OpenVPN rau $ 9.99 * lossis ua ke Orange Pi Ib rau hauv koj lub router

xaus

Lub network ntawm USB ua haujlwm sai sai: 100-120 Mb / s, Kuv xav tias tsawg dua. OpenVPN hla dhau li ntawm 70 Mb / s ntawm kev nkag mus nkag, uas kuj tsis ntau, tab sis txaus rau kuv cov kev xav tau. Lub hau router tsis kaw nruj, tawm hauv qhov sib txawv me me. Aesthetes tuaj yeem tshem tawm Ethernet thiab USB Host connectors los ntawm lub rooj tsavxwm, uas yuav cia lub hau kaw kom tiav thiab tseem muaj qee qhov chaw seem.
Nws yog qhov zoo dua tsis txhob koom nrog cov duab liab qab thiab yuav Turis Omnia.

Tau qhov twg los: www.hab.com

Ntxiv ib saib