Cov neeg tsim tawm ntawm OpenVPN virtual private networking pob tau qhia txog ovpn-dco kernel module, uas tuaj yeem ua kom ceev VPN kev ua tau zoo. Txawm hais tias qhov tseeb tias lub module tseem tab tom tsim nrog lub qhov muag nkaus xwb rau linux-tom ntej ceg thiab muaj cov xwm txheej sim, nws twb tau mus txog theem ntawm kev ruaj ntseg uas tso cai rau nws siv los xyuas kom meej tias kev ua haujlwm ntawm OpenVPN Cloud service.
Piv nrog rau kev teeb tsa raws li tun interface, kev siv lub module ntawm cov neeg siv khoom thiab cov neeg rau zaub mov sab siv AES-256-GCM cipher ua rau nws muaj peev xwm ua tiav 8-fold nce nyob rau hauv throughput (los ntawm 370 Mbit / s rau 2950 Mbit. /s). Thaum siv cov module nkaus xwb ntawm tus neeg siv khoom, qhov kev nkag mus tau nce peb npaug rau cov tsheb khiav tawm thiab tsis hloov pauv rau cov tsheb nkag. Thaum siv cov module tsuas yog nyob rau sab servers, kev xa tawm tau nce los ntawm 4 zaug rau cov tsheb thauj mus los thiab los ntawm 35% rau cov tsheb khiav tawm.
Kev nrawm yog ua tiav los ntawm kev txav txhua qhov kev ua haujlwm encryption, kev ntim khoom thiab kev sib txuas lus kev tswj hwm mus rau Linux ntsiav sab, uas tshem tawm cov nyiaj siv ua haujlwm cuam tshuam nrog cov ntsiab lus hloov pauv, ua rau nws muaj peev xwm txhim kho kev ua haujlwm los ntawm kev nkag mus ncaj qha rau hauv cov ntsiav APIs thiab tshem tawm cov ntaub ntawv qeeb hloov ntawm kernel. thiab tus neeg siv qhov chaw (encryption, decryption thiab routing yog ua los ntawm lub module yam tsis tau xa tsheb mus rau tus tuav hauv qhov chaw neeg siv).
Nws tau raug sau tseg tias qhov cuam tshuam tsis zoo ntawm VPN kev ua haujlwm feem ntau yog tshwm sim los ntawm kev siv peev txheej encryption ntau thiab qeeb los ntawm cov ntsiab lus hloov pauv. Cov txheej txheem txuas ntxiv xws li Intel AES-NI tau siv los txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau txhawm rau nkag mus tau raug siv los ua kom nkag mus rau encryption. Ntxiv nrog rau kev siv cov lus qhia muab los ntawm lub processor kom ceev encryption, ovpn-dco module ntxiv kom ntseeg tau tias kev ua haujlwm encryption tau muab faib ua ntu cais thiab ua tiav hauv ntau txoj xov, uas tso cai rau siv tag nrho cov CPU cores.
Cov kev txwv tam sim no uas yuav raug hais rau yav tom ntej suav nrog kev txhawb nqa rau AEAD thiab 'tsis muaj' hom nkaus xwb, thiab AES-GCM thiab CHACHA20POLY1305 ciphers. Kev txhawb nqa DCO tau npaj yuav suav nrog hauv kev tso tawm ntawm OpenVPN 2.6, tau teem sijhawm rau lub quarter thib 4 ntawm lub xyoo no. Lub module tam sim no tau txais kev txhawb nqa nyob rau hauv beta-testing OpenVPN3 Linux tus neeg siv khoom thiab kev sim tsim ntawm OpenVPN server rau Linux. Ib qho zoo sib xws module, ovpn-dco-win, tseem tab tom tsim rau lub Windows kernel.
Tau qhov twg los: opennet.ru