{"id":92348,"date":"2020-08-25T19:42:57","date_gmt":"2020-08-25T17:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard"},"modified":"2020-08-25T19:42:57","modified_gmt":"2020-08-25T17:42:57","slug":"v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","title":{"rendered":"Il supporto per VPN WireGuard \u00e8 stato aggiunto al kernel di NetBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sviluppatori del progetto NetBSD hanno comunicato<\/a><\/noindex> l'inclusione nel core principale di NetBSD del driver wg con implementazione del protocollo WireGuard. NetBSD \u00e8 diventato il terzo sistema operativo, dopo Linux e OpenBSD, a supportare nativamente WireGuard. Sono anche state proposte comandi ausiliari per la configurazione di VPN \u2014 wg-keygen e wgconfig. Nella configurazione standard del kernel (GENERIC) il driver non \u00e8 ancora attivato e richiede una specifica attivazione nelle impostazioni \"pseudo-device wg\".<\/p>\n

Inoltre, si pu\u00f2 notare pubblicazione<\/a><\/noindex> un aggiornamento correttivo del pacchetto wireguard-tools 1.0.20200820, che include utilit\u00e0 funzionanti nello spazio utente, come wg e wg-quick. Nell'ultimo rilascio \u00e8 stata preparata l'IPC per il futuro supporto di WireGuard nel sistema operativo FreeBSD. \u00c8 stata effettuata la separazione del codice specifico per diverse piattaforme in file distinti. Nel file unit per systemd \u00e8 stato aggiunto il supporto per il comando \"reload\", che consente di eseguire comandi del tipo \"systemctl reload wg-quick at wgnet0\".<\/p>\n

Ricordiamo che il VPN WireGuard \u00e8 implementato utilizzando tecniche di crittografia moderne, garantisce prestazioni molto elevate, \u00e8 facile da usare, privo di complicazioni e ha dimostrato la sua efficacia in vari grandi implementazioni che gestiscono elevate quantit\u00e0 di traffico. Il progetto \u00e8 in sviluppo dal 2015, ha superato un audit e la verifica formale<\/a><\/noindex> metodi di crittografia applicati. Il supporto per WireGuard \u00e8 gi\u00e0 integrato in NetworkManager e systemd, e le patch per il kernel sono incluse nel core delle distribuzioni Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> e ALT<\/a><\/noindex>.<\/p>\n

In WireGuard, the concept of routing by encryption keys is applied, which involves binding a private key to each network interface and using it to link public keys. The exchange of public keys to establish a connection is analogous to SSH. To negotiate keys and connect without launching a separate user-space daemon, the Noise_IK mechanism is used from Noise Protocol Framework<\/a><\/noindex>, similar to maintaining authorized_keys in SSH. Data transmission is carried out through encapsulation in UDP packets. It supports changing the VPN server's IP address (roaming) without breaking the connection, with automatic client reconfiguration.<\/p>\n

Per la crittografia viene utilizzato<\/a><\/noindex> il cifrario a flusso ChaCha20<\/a><\/noindex> e l'algoritmo di autenticazione dei messaggi (MAC) Poly1305<\/a><\/noindex>, sviluppati da Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) and Peter Schwabe. ChaCha20 and Poly1305 are positioned as faster and more secure alternatives to AES-256-CTR and HMAC, with a software implementation that allows achieving fixed execution time without requiring special hardware support. The Diffie-Hellman protocol on elliptic curves is used for generating a shared secret key in the implementation of Curve25519<\/a><\/noindex>, proposta anche da Daniel Bernstein. Per l'hashing viene utilizzato l'algoritmo BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard. NetBSD \u0441\u0442\u0430\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0438 OpenBSD \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN — wg-keygen \u0438 wgconfig. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (GENERIC) \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u044f\u0432\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92348","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aggiunta la supporto VPN WireGuard nel kernel di NetBSD | ProHoster","description":"I sviluppatori del progetto NetBSD hanno annunciato l'inclusione nel kernel principale di NetBSD del driver wg.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u044f\u0434\u0440\u043e NetBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 VPN WireGuard | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T17:42:57+00:00","article:modified_time":"2020-08-25T17:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:10:22","updated":"2022-09-28 01:30:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/92348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=92348"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/92348\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=92348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=92348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=92348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}