{"id":105423,"date":"2022-10-31T09:37:08","date_gmt":"2022-10-31T07:37:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-outline-ss-server-1-4-realizaczii-shadowsocks-proksi-ot-proekta-outline"},"modified":"2022-10-31T09:37:08","modified_gmt":"2022-10-31T07:37:10","slug":"vypusk-outline-ss-server-1-4-realizaczii-shadowsocks-proksi-ot-proekta-outline","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/vypusk-outline-ss-server-1-4-realizaczii-shadowsocks-proksi-ot-proekta-outline","title":{"rendered":"Objava outline-ss-server 1.4, implementacija Shadowsocks proxyja iz projekta Outline","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Objavljen je izdanak proxy poslu\u017eitelja outline-ss-server 1.4, koji koristi protokol Shadowsocks za skrivanje prirode prometa, zaobila\u017eenje vatrozida i prevaru sustava za inspekciju paketa. Poslu\u017eitelj razvija projekt Outline, koji dodatno pru\u017ea vezu klijentskih aplikacija i upravlja\u010dkog su\u010delja, omogu\u0107uju\u0107i brzo postavljanje vi\u0161ekorisni\u010dkih Shadowsocks poslu\u017eitelja temeljenih na outline-ss-serveru u javnim cloud okru\u017eenjima ili na vlastitoj opremi, upravljanje putem web su\u010delja i organizaciju pristupa korisnika putem klju\u010deva. Razvijanjem i odr\u017eavanjem koda bavi se Jigsaw, podru\u017enica u Googleu, osnovana za razvoj alata za zaobila\u017eenje cenzure i organizaciju slobodne razmjene informacija. <\/p>\n

Outline-ss-server napisan je u programskom jeziku Go i distribuira se pod Apache 2.0 licencom. Kao osnova kori\u0161ten je kod proxy-poslu\u017eitelja<\/a> go-shadowsocks2, koji je stvorila zajednica programera Shadowsocks. U posljednje vrijeme, glavna aktivnost projekta Shadowsocks usredoto\u010dena je na razvoj novog poslu\u017eitelja na jeziku Rust, dok je implementacija na jeziku Go vi\u0161e od godinu dana bez a\u017euriranja i znatno zaostaje po funkcionalnosti. <\/p>\n

Razlike outline-ss-servera u odnosu na go-shadowsocks2 svode se na podr\u0161ku za povezivanje vi\u0161e korisnika putem jednog mre\u017enog porta, mogu\u0107nost otvaranja vi\u0161e mre\u017enih portova za prihvat veza, podr\u0161ku za vru\u0107e ponovno pokretanje i a\u017euriranje konfiguracije bez prekida veza, te ugra\u0111ene alate za pra\u0107enje i promjenu prometa na temelju platforme prometheus.io.

\"Objava<\/center> <\/p>\n

U outline-ss-server tako\u0111er je dodana za\u0161tita od napada povezanih s slanjem provjernih zahtjeva i ponovnim reprodukcijom prometa. Napad putem provjernih zahtjeva usmjeren je na odre\u0111ivanje prisutnosti proxyja, na primjer, napada\u010d mo\u017ee slati na ciljano Shadowsocks poslu\u017eitelja skupove podataka razli\u010ditih veli\u010dina i analizirati koji volumen podataka poslu\u017eitelj mo\u017ee pro\u010ditati prije nego \u0161to odredi gre\u0161ku i zatvori vezu. Napad s ponovnim reprodukiranjem prometa temelji se na presretanju sesije izme\u0111u klijenta i serverom<\/a> s naknadnim poku\u0161ajem ponovnog slanja presretnutih podataka kako bi se utvrdila prisutnost proxyja. <\/p>\n

Za za\u0161titu od napada putem provjernih zahtjeva, outline-ss-server ne prekida vezu i ne prikazuje gre\u0161ku prilikom primanja neto\u010dnih podataka, ve\u0107 nastavlja primati informacije, djeluju\u0107i poput crne rupe. Kako bi se za\u0161titili od ponovnog kori\u0161tenja, podaci koje klijent \u0161alje dodatno se provjeravaju na ponavljanja prema kontrolnim zbrojevima, koji se pohranjuju za posljednjih nekoliko tisu\u0107a handshake sekvenci (maksimalno 40 tisu\u0107a, veli\u010dina se postavlja pri pokretanju servera i tro\u0161i 20 bajtova memorije po sekvenci). Za blokiranje ponovljenih odgovora s poslu\u017eitelja, u svim server handshake sekvencama koriste se HMAC autentifikacijski kodovi s 32-bitnim oznakama. <\/p>\n

Prema razini skrivenosti prometa, protokol Shadowsocks u implementaciji outline-ss-server blizak je plug-in transportu Obfs4 u anonimnoj mre\u017ei Tor. Protokol je stvoren zaobilazak sustava cenzuriranja prometa u Kini (\"Veliki kineski vatrozid\") i omogu\u0107ava prili\u010dno u\u010dinkovito skrivanje prometa koji se propu\u0161ta kroz drugi poslu\u017eitelj (promet je te\u0161ko identificirati zahvaljuju\u0107i pridodavanju slu\u010dajnog uzorka i simulaciji neprekidnog toka). <\/p>\n

Kao protokol za proksiranje zahtjeva koristi se SOCKS5 \u2014 na lokalnom sustavu pokre\u0107e se posrednik s podr\u0161kom za SOCKS5, koji tunelira promet na udaljeni poslu\u017eitelj, s kojeg se zapravo izvr\u0161avaju zahtjevi. Promet izme\u0111u klijenta i poslu\u017eitelja smje\u0161ten je u \u0161ifrirani tunel (podr\u017eano je autentificirano \u0161ifriranje AEAD_CHACHA20_POLY1305, AEAD_AES_128_GCM i AEAD_AES_256_GCM), a skrivanje \u010dinjenice o njegovom stvaranju primarna je zada\u0107a Shadowsocksa. Podr\u017eano je organiziranje TCP i UDP tunela, kao i izrada proizvoljnih tunela, koji nisu ograni\u010deni na SOCKS5, primjenom dodataka koji podsje\u0107aju na plug-in transporte u Toru.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 outline-ss-server 1.4, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Shadowsocks \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 \u043e\u0431\u043c\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0421\u0435\u0440\u0432\u0435\u0440 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Outline, \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u043e\u0431\u0432\u044f\u0437\u043a\u0443 \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 Shadowsocks-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 outline-ss-server \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u0438\u043b\u0438 \u043d\u0430 \u0441\u0432\u043e\u0451\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105424,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105423","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izdanje outline-ss-server 1.4, implementacije Shadowsocks proxy-a iz projekta Outline | ProHoster","description":"Objavljen je izdanak proxy poslu\u017eitelja outline-ss-server 1.4, koji koristi protokol Shadowsocks za skrivanje prirode prometa, zaobila\u017eenje vatrozida i obmanu sustava za inspekciju paketa.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/vypusk-outline-ss-server-1-4-realizaczii-shadowsocks-proksi-ot-proekta-outline","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a outline-ss-server 1.4, \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Shadowsocks-\u043f\u0440\u043e\u043a\u0441\u0438 \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Outline | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 outline-ss-server 1.4, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Shadowsocks \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 \u043e\u0431\u043c\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/vypusk-outline-ss-server-1-4-realizaczii-shadowsocks-proksi-ot-proekta-outline","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-31T07:37:10+00:00","article:modified_time":"2022-10-31T07:37:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105423","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:51","updated":"2026-02-22 15:31:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/105423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=105423"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/105423\/revisions"}],"predecessor-version":[{"id":162396,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/105423\/revisions\/162396"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/105424"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=105423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=105423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=105423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}