Ewebatala modul kernel nke nwere ike ime ngwa ngwa OpenVPN

Ndị mmepe nke ngwungwu ịkparịta ụka n'onwe OpenVPN ewebatala modul ovpn-dco kernel, nke nwere ike ime ka arụmọrụ VPN dị ngwa ngwa. N'agbanyeghị na a ka na-emepụta modul ahụ na anya naanị na ngalaba Linux na-esote ma nwee ọnọdụ nnwale, ọ rutelarị nkwụsi ike nke na-enye ya ohere iji hụ na ọrụ OpenVPN Cloud service.

E jiri ya tụnyere nhazi nke dabere na tun interface, iji modul na ndị ahịa na akụkụ nkesa na-eji AES-256-GCM cipher mere ka o kwe omume iji nweta mmụba okpukpu 8 na ntinye (site na 370 Mbit / s ruo 2950 Mbit). /s). Mgbe ị na-eji modul naanị n'akụkụ ndị ahịa, ntinye aka na-abawanye okpukpu atọ maka okporo ụzọ na-apụ apụ ma gbanwee maka okporo ụzọ na-abata. Mgbe ị na-eji modul naanị n'akụkụ ihe nkesa, ntinye aka na-abawanye site na 4 ugboro maka okporo ụzọ na-abata yana site na 35% maka okporo ụzọ na-apụ apụ.

Ewebatala modul kernel nke nwere ike ime ngwa ngwa OpenVPN

A na-enweta ngwa ngwa site na ịkwaga ọrụ nzuzo niile, nhazi ngwugwu na njikwa ọwa nkwukọrịta n'akụkụ Linux kernel, nke na-ewepụ isi ihe metụtara mgbanwe ọnọdụ, na-eme ka o kwe omume ịkwalite ọrụ site na ịnweta API kernel ozugbo wee wepụ data ngwa ngwa n'etiti kernel. na ohere onye ọrụ (izo ya ezo, decryption na routing na-arụ site na modul na-ezigaghị okporo ụzọ gaa na onye njikwa na ohere ọrụ).

Achọpụtara na mmetụta na-adịghị mma na arụmọrụ VPN bụ isi ihe na-akpata site na ọrụ izo ya ezo na-egbu oge na-akpata site na ntụgharị gburugburu. A na-eji ndọtị ihe nhazi dị ka Intel AES-NI iji mee ka nzuzo dị ngwa, mana mgbanwe ndị gbara ya gburugburu nọgidere bụrụ ihe mgbochi ruo mgbe ovpn-dco bịara. Na mgbakwunye na iji ntuziaka nke onye nrụpụta na-enye iji mee ka nzuzo dị ngwa ngwa, modul ovpn-dco na-ahụkwa na e kewara ọrụ nzuzo n'ime akụkụ dị iche iche ma hazie ya na ụdị eriri multi-threaded, nke na-enye ohere iji cores CPU niile dị.

Oke mmejuputa iwu ugbu a nke a ga-ekwu n'ọdịnihu gụnyere nkwado maka AEAD na 'enweghị' ụdịdị naanị, yana AES-GCM na CACHA20POLY1305 ciphers. A na-eme atụmatụ itinye nkwado DCO na mwepụta nke OpenVPN 2.6, nke akwadoro maka nkeji iri anọ nke afọ a. A na-akwado modul ugbu a na onye ahịa OpenVPN4 Linux na-anwale beta yana wulite ihe nkesa OpenVPN maka Linux. A na-emepụtakwa modul yiri nke ahụ, ovpn-dco-win, maka Windows kernel.

isi: opennet.ru

Tinye a comment