{"id":101461,"date":"2021-09-30T10:22:42","date_gmt":"2021-09-30T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard"},"modified":"2021-09-30T10:22:42","modified_gmt":"2021-09-30T08:22:44","slug":"firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","title":{"rendered":"Firezone \u2014 soluzione per la creazione di server VPN basati su WireGuard","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Il progetto Firezone sviluppa un server VPN per organizzare l'accesso agli host in una rete isolata interna da dispositivi degli utenti situati in reti esterne. Il progetto \u00e8 mirato a raggiungere un alto livello di protezione e semplificare il processo di distribuzione della VPN. Il codice del progetto \u00e8 scritto nei linguaggi Elixir e Ruby e viene distribuito sotto licenza Apache 2.0. <\/p>\n

Il progetto \u00e8 sviluppato da un ingegnere dell'automazione della sicurezza della Cisco, che ha tentato di creare una soluzione che automatizzi il lavoro con la configurazione degli host ed escluda l'emergere di problemi che si sono presentati nell'organizzazione dell'accesso sicuro a VPC cloud. Firezone pu\u00f2 essere considerato un'alternativa open source al OpenVPN Access Server, costruito sopra WireGuard invece di OpenVPN. <\/p>\n

Per l'installazione sono disponibili pacchetti rpm e deb per diverse versioni di CentOS, Fedora, Ubuntu e Debian, la cui installazione non richiede dipendenze esterne, poich\u00e9 tutte le dipendenze necessarie sono gi\u00e0 incluse tramite lo strumento Chef Omnibus. Per funzionare \u00e8 richiesto solo un distributore con un kernel Linux non inferiore alla versione 4.19 e un modulo del kernel compilato con VPN<\/a> WireGuard. Secondo quanto dichiarato dall'autore, l'avvio e la configurazione del server VPN possono essere effettuati in pochi minuti. I componenti dell'interfaccia web vengono eseguiti sotto un utente non privilegiato e l'accesso \u00e8 possibile solo tramite HTTPS.

\"Firezone<\/center> <\/p>\n

Per organizzare i canali di comunicazione in Firezone si utilizza WireGuard. Firezone dispone anche di funzioni di firewall, che utilizza nftables. Nella sua attuale incarnazione, il firewall \u00e8 limitato agli strumenti per bloccare il traffico in uscita verso determinati host o sotto-reti in reti interne o esterne. La gestione avviene tramite l'interfaccia web o in modalit\u00e0 riga di comando utilizzando lo strumento firezone-ctl. L'interfaccia web \u00e8 costruita sulla base di Admin One Bulma.

\"Firezone<\/center> <\/p>\n

Attualmente, tutti i componenti di Firezone vengono eseguiti su un singolo server<\/a>, ma il progetto \u00e8 inizialmente sviluppato con uno sguardo alla modularit\u00e0 e in futuro si prevede di aggiungere la possibilit\u00e0 di distribuire i componenti per l'interfaccia web, la VPN e il firewall su host diversi. I piani includono anche l'integrazione di un blocco pubblicitario che funziona a livello DNS, il supporto per elenchi di blocco di host e sotto-reti, la possibilit\u00e0 di autenticazione tramite LDAP \/ SSO e ulteriori funzionalit\u00e0 per la gestione degli utenti.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430 \u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f VPN. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0430\u0445 Elixir \u0438 Ruby, \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043e\u043c \u043f\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firezone \u2014 soluzione per la creazione di server VPN basati su WireGuard | ProHoster","description":"Il progetto Firezone sviluppa un server VPN per organizzare l'accesso agli host in una rete interna isolata dai dispositivi degli utenti presenti in reti esterne.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firezone \u2014 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 WireGuard | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-30T08:22:44+00:00","article:modified_time":"2021-09-30T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101461","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-30 08:30:11","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=101461"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101461\/revisions"}],"predecessor-version":[{"id":159959,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/101461\/revisions\/159959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/101462"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=101461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=101461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=101461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}