{"id":76048,"date":"2020-03-30T19:42:06","date_gmt":"2020-03-30T17:42:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-vpn-wireguard-1-0-0"},"modified":"2020-03-30T19:42:06","modified_gmt":"2020-03-30T17:42:06","slug":"dostupen-vpn-wireguard-1-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/dostupen-vpn-wireguard-1-0-0","title":{"rendered":"A WireGuard VPN 1.0.0 el\u00e9rhet\u0151.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bemutatva<\/a><\/noindex> jelent\u0151s VPN kiad\u00e1s WireGuard 1.0.0<\/a><\/noindex>, amely a WireGuard komponenseinek a kernel f\u0151 \u00e1gba t\u00f6rt\u00e9n\u0151 sz\u00e1ll\u00edt\u00e1s\u00e1t jelzi Linux 5.6<\/a><\/noindex> \u00e9s a fejleszt\u00e9s stabiliz\u00e1l\u00e1s\u00e1t. A Linux kernelbe be\u00e9p\u00edtett k\u00f3d \u00e1tment<\/a><\/noindex> tov\u00e1bbi biztons\u00e1gi auditon, amelyet egy, az ilyen ellen\u0151rz\u00e9sekre szakosodott f\u00fcggetlen c\u00e9g v\u00e9gzett. Az audit nem t\u00e1rt fel semmilyen probl\u00e9m\u00e1t.<\/p>\n

Mivel a WireGuard most a Linux kernel f\u0151 \u00e1ga alatt fejl\u0151dik, a disztrib\u00faci\u00f3k \u00e9s a felhaszn\u00e1l\u00f3k, akik az r\u00e9gi kernel verzi\u00f3kat haszn\u00e1lj\u00e1k, egy t\u00e1rol\u00f3t k\u00e9sz\u00edtettek el\u0151 wireguard-linux-compat.git<\/a><\/noindex>. A t\u00e1rol\u00f3 mag\u00e1ban foglalja a WireGuard backportolt k\u00f3dj\u00e1t \u00e9s a compat.h r\u00e9teget az r\u00e9gi kernel verzi\u00f3kkal val\u00f3 kompatibilit\u00e1s biztos\u00edt\u00e1s\u00e1ra. Megjegyzend\u0151, hogy ameddig a fejleszt\u0151knek lehet\u0151s\u00e9ge van \u00e9s a felhaszn\u00e1l\u00f3knak sz\u00fcks\u00e9g\u00fck van r\u00e1, az elk\u00fcl\u00f6n\u00edtett jav\u00edt\u00e1sok v\u00e1ltozata m\u0171k\u00f6d\u0151k\u00e9pes marad. Jelenlegi form\u00e1j\u00e1ban az elk\u00fcl\u00f6n\u00edtett WireGuard verzi\u00f3 haszn\u00e1lhat\u00f3 az Ubuntu 20.04<\/a><\/noindex> \u00e9s Debian 10 «Buster»<\/a><\/noindex>\u00e9s patch form\u00e1j\u00e1ban el\u00e9rhet\u0151 a Linux kernelhez 5.4<\/a><\/noindex> \u00e9s 5.5<\/a><\/noindex>. Az olyan disztrib\u00faci\u00f3k, amelyek a legfrissebb kernelt haszn\u00e1lj\u00e1k, mint p\u00e9ld\u00e1ul az Arch, Gentoo \u00e9s
\nFedora 32, lehet\u0151s\u00e9get kapnak a WireGuard haszn\u00e1lat\u00e1ra a 5.6-os kernel friss\u00edt\u00e9s\u00e9vel.<\/p>\n

A fejleszt\u00e9s f\u0151 folyamata most a t\u00e1rol\u00f3ban zajlik wireguard-linux.git<\/a><\/noindex>, amely tartalmazza a WireGuard projekttel kapcsolatos m\u00f3dos\u00edt\u00e1sokkal egy\u00fctt a teljes Linux kernel f\u00e1jlszerkezet\u00e9t. A t\u00e1rol\u00f3b\u00f3l sz\u00e1rmaz\u00f3 jav\u00edt\u00e1sokat fel\u00fcl fogj\u00e1k vizsg\u00e1lni a f\u0151 kernelbe val\u00f3 beilleszt\u00e9sre \u00e9s rendszeresen \u00e1tviszik az net\/net-next \u00e1gakba. A felhaszn\u00e1l\u00f3t\u00e9rben futtathat\u00f3 seg\u00e9dprogramok \u00e9s szkriptek, mint p\u00e9ld\u00e1ul a wg \u00e9s wg-quick fejleszt\u00e9se a wireguard-tools.git<\/a><\/noindex>, amely haszn\u00e1lhat\u00f3 csomagok l\u00e9trehoz\u00e1s\u00e1ra a disztrib\u00faci\u00f3kban.<\/p>\n

It should be noted that the WireGuard VPN is based on modern encryption methods, providing very high performance, ease of use, and has proven itself well in several large implementations handling significant traffic volumes. The project has been developing since 2015, passed an audit and formal verification<\/a><\/noindex> of the applied encryption methods. Support for WireGuard is already integrated into NetworkManager and systemd, and the kernel patches are included in the core distributions Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> \u00e9s ALT<\/a><\/noindex>.<\/p>\n

WireGuard employs a key routing concept that ties a private key to each network interface and uses it to connect with public keys. The exchange of public keys for connection establishment occurs similarly to SSH. For key agreement and connection without launching a separate user-space daemon, the Noise_IK mechanism from Noise Protocol Framework<\/a><\/noindex>, similar to maintaining authorized_keys in SSH, is applied. Data transmission is done through encapsulation in UDP packets. The VPN server IP address can change (roaming) without interrupting the connection, with automatic client reconfiguration.<\/p>\n

For encryption haszn\u00e1lj\u00e1k<\/a><\/noindex> a stream cipher ChaCha20<\/a><\/noindex> and a message authentication algorithm (MAC) AES-256-CTR \u00e9s<\/a><\/noindex>, developed by Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) \u00e9s Peter Schwabe. A ChaCha20 \u00e9s a Poly1305 gyorsabb \u00e9s biztons\u00e1gosabb alternat\u00edv\u00e1i az AES-256-CTR-nek \u00e9s a HMAC-nek, amelyek szoftveres megval\u00f3s\u00edt\u00e1sa lehet\u0151v\u00e9 teszi az \u00e1lland\u00f3 v\u00e9grehajt\u00e1si id\u0151 el\u00e9r\u00e9s\u00e9t, an\u00e9lk\u00fcl hogy k\u00fcl\u00f6n hardvert ig\u00e9nyelne. A k\u00f6z\u00f6s titkos kulcs gener\u00e1l\u00e1s\u00e1hoz elliptikus g\u00f6rb\u00e9ken alapul\u00f3 Diffie-Hellman protokollt alkalmaznak. Curve25519<\/a><\/noindex>, amelyet Daniel Bernstein is javasolt. A hash-el\u00e9shez a k\u00f6vetkez\u0151 algoritmust haszn\u00e1lj\u00e1k: BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

R\u00e9gi testing<\/a><\/noindex> A WireGuard teljes\u00edtm\u00e9nye 3,9-szer nagyobb \u00e1tviteli sebess\u00e9get \u00e9s 3,8-szor jobb v\u00e1laszid\u0151t mutatott az OpenVPN-nel (256-bit AES HMAC-SHA2-256) \u00f6sszehasonl\u00edtva. Az IPsec-hez (256-bit ChaCha20+Poly1305 \u00e9s AES-256-GCM-128) viszony\u00edtva a WireGuard teljes\u00edtm\u00e9nyben enyhe el\u0151nyt mutat (13-18%) \u00e9s cs\u00f6kkentett k\u00e9sleltet\u00e9st (21-23%). A projekt weboldal\u00e1n k\u00f6zz\u00e9tett teszteredm\u00e9nyek az WireGuard r\u00e9gi, elk\u00fcl\u00f6n\u00edtett megval\u00f3s\u00edt\u00e1s\u00e1ra vonatkoznak, \u00e9s nem megfelel\u0151 min\u0151s\u00e9g\u0171nek min\u0151s\u00fclnek. A tesztel\u00e9s \u00f3ta a WireGuard \u00e9s az IPsec k\u00f3dja tov\u00e1bb lett optimaliz\u00e1lva, \u00e9s most gyorsabban m\u0171k\u00f6dik. A teljes k\u00f6r\u0171 tesztel\u00e9s, amely a kernelbe integr\u00e1lt megval\u00f3s\u00edt\u00e1st fedi le, eddig m\u00e9g nem t\u00f6rt\u00e9nt meg. Ennek ellen\u00e9re megjegyzik, hogy a WireGuard bizonyos helyzetekben tov\u00e1bbra is megel\u0151zi az IPsec-et a t\u00f6bb sz\u00e1lon val\u00f3 fut\u00e1s miatt, m\u00edg az OpenVPN tov\u00e1bbra is nagyon lass\u00fa.<\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard 1.0.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 WireGuard \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux 5.6 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0412\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u043a\u043e\u0434 \u043f\u0440\u043e\u0448\u0451\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u0445. \u0410\u0443\u0434\u0438\u0442 \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0422\u0430\u043a \u043a\u0430\u043a WireGuard \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux, \u0434\u043b\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":76049,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47El\u00e9rhet\u0151 a WireGuard VPN 1.0.0 | ProHoster","description":"Bemutat\u00e1sra ker\u00fclt a WireGuard VPN neves kiad\u00e1sa.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/dostupen-vpn-wireguard-1-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d VPN WireGuard 1.0.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/dostupen-vpn-wireguard-1-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-30T17:42:06+00:00","article:modified_time":"2020-03-30T17:42:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76048","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:44:27","updated":"2022-10-01 21:43:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/76048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=76048"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/76048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/76049"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=76048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=76048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=76048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}