VPN WireGuard nke OpenBSD nakweere

Jason A. Donenfeld, odee nke VPN WireGuard, mara ọkwa о nnabata gụnyere na isi OpenBSD kernel driver "wg" maka WireGuard protocol, mmejuputa iwu kpọmkwem netwọk interface na mgbanwe Toolkit na-arụ ọrụ na ohere onye ọrụ. OpenBSD ghọrọ OS nke abụọ ka emechara Linux na nkwado WireGuard zuru ezu na nke agbakwunyere. A na-atụ anya itinye WireGuard na mwepụta OpenBSD 6.8.

Ihe nkedo ahụ gụnyere onye ọkwọ ụgbọ ala maka kernel OpenBSD, mgbanwe na ifconfig na tcpdump utilities iji kwado ọrụ WireGuard, akwụkwọ, na obere mgbanwe iji jikọta WireGuard na usoro ndị ọzọ. Onye ọkwọ ụgbọ ala na-eji mmejuputa algọridim nke ya Blake2s, hchacha20 и akụkụ 25519, yana mmejuputa SipHash ugbua na OpenBSD kernel.

Mmejuputa a dakọtara na ndị ahịa WireGuard niile maka Linux, Windows, macOS, * BSD, iOS na gam akporo. Nnwale arụmọrụ na laptọọpụ onye nrụpụta (Lenovo x230) gosiri mpụta nke 750mbit/s. Maka ntụnyere, Isakmpd nwere ntọala ike psk bụ isi na-enye ntinye nke 380mbit/s.

Mgbe ị na-emepe onye ọkwọ ụgbọ ala maka kernel OpenBSD, ahọpụtara ụfọdụ ihe nrụpụta ụkpụrụ ụlọ nke yiri onye ọkwọ ụgbọ ala maka Linux, mana emepụtara onye ọkwọ ụgbọ ala maka OpenBSD, na-eburu n'uche nkọwapụta nke sistemu a na-eburu n'uche ahụmịhe enwetara mgbe ị na-eke. ọkwọ ụgbọala maka Linux. Site na nkwenye nke onye mbụ dere WireGuard, a na-ekesa koodu ọkwọ ụgbọ ala ọhụrụ n'okpuru ikikere ISC efu.

Onye ọkwọ ụgbọ ala na-ejikọta nke ọma na nchịkọta ịkparịta ụka n'Ịntanet OpenBSD ma na-eji sistemụ ndị dị adị, nke na-eme ka koodu ahụ nwee nnukwu kọmpat (ihe dị ka ahịrị koodu 3000). N'ime ọdịiche ndị ahụ, nkewa nke ihe ndị ọkwọ ụgbọala dịkwa iche na nke Linux: OpenBSD-kpọmkwem interfaces na-etinye na faịlụ "if_wg.*", koodu nchebe DoS dị na "wg_cookie." *, na mkparịta ụka njikọ na izo ya ezo. mgbagha dị na "wg_noise."

isi: opennet.ru