A Mullvad VPN provider, which develops the Mullvad Browser and provides infrastructure for the Mozilla VPN service, introduced the GotaTun project implementing the WireGuard VPN protocol, written in Rust and operating in user space. The project's code is distributed under the BSD license. Mullvad has already utilized GotaTun in the VPN client for the Android platform, and next year it intends to port desktop and iOS applications to it.
GotaTun is a fork of the BoringTun toolkit developed by Cloudflare and used in the WARP application. GotaTun differs from BoringTun by offering full support for the Android platform, performance optimizations, and additional privacy protection features.
GotaTun integrates support for DAITA (Defense Against AI-guided Traffic Analysis) technology to protect against analysis of encrypted transit traffic conducted using machine learning-based tools. DAITA normalizes the size of sent packets, injects random background traffic, and distorts patterns of typical data flows. GotaTun also implements a Multihop mode, allowing connections to servers not directly but through a series of transit nodes, which, for instance, can enable traffic to take more optimal routes. VPN-servers indirectly through a series of transit nodes, which, for instance, allows for traffic to take more optimal routes.
To enhance performance, GotaTun implements multithreaded processing and employs a zero-copy memory handling strategy, without intermediate buffering, using only the initially provided buffer.
Previously, Mullvad's applications used a fork of the WireGuard implementation in Go – wireguard-go, extended with DAITA and Multihop support. According to Google statistics, 85% of all user-reported crashes of the Mullvad Android client were related to the wireguard-go code, prompting Mullvad to replace the WireGuard implementation with a more reliable option.
A Rust nyelvű megvalósítást választottak, mivel a Mullvad VPN alkalmazás is Rust nyelven készült, kivéve a wireguard-go kódot, amelynek interakciója egy komplex, unsafe blokkokat használó FFI (foreign function interface) interfészen keresztül zajlott. A Mullvad Android kliensének november végén megjelent verziójában a wireguard-go megvalósítást GotaTun váltotta fel, ami megoldotta a működés megbízhatóságával kapcsolatos problémákat: a korábbi verziókhoz képest a rendszeres leállások arányát mutató mérőszám 0,40%-ról 0,01%-ra csökkent.
Forrás: opennet.ru
