NetBSD kernel imawonjezera chithandizo cha VPN WireGuard

NetBSD Project Developers adanenanso za kuphatikizidwa kwa woyendetsa wg ndikukhazikitsa protocol ya WireGuard mu kernel yayikulu ya NetBSD. NetBSD idakhala OS yachitatu pambuyo pa Linux ndi OpenBSD yokhala ndi chithandizo chophatikizika cha WireGuard. Malamulo okhudzana ndikusintha VPN amaperekedwanso - wg-keygen ndi wgconfig. Mu kasinthidwe ka kernel (GENERIC), dalaivala sanatsegule ndipo amafuna chisonyezero cha "pseudo-device wg" muzokonda.

Kuphatikiza apo, zitha kuzindikirika kusindikiza kukonzanso kwa phukusi la wireguard-tools 1.0.20200820, lomwe limaphatikizapo zogwiritsira ntchito malo ogwiritsira ntchito monga wg ndi wg-quick. Kutulutsidwa kwatsopano kukonzekeretsa IPC chithandizo chomwe chikubwera cha WireGuard pa pulogalamu ya FreeBSD. Khodi yeniyeni pamapulatifomu osiyanasiyana yagawidwa m'mafayilo osiyanasiyana. Thandizo la lamulo la "reload" lawonjezedwa ku fayilo ya unitd, yomwe imakupatsani mwayi woyendetsa zomanga ngati "systemctl reload wg-quick at wgnet0".

Tiyeni tikukumbutseni kuti VPN WireGuard ikugwiritsidwa ntchito pamaziko a njira zamakono zolembera, zimapereka ntchito zapamwamba kwambiri, ndizosavuta kugwiritsa ntchito, zopanda mavuto ndipo zadziwonetsera yokha m'magulu angapo akuluakulu omwe amayendetsa magalimoto ambiri. Ntchitoyi yakhala ikukula kuyambira 2015, idawunikidwa komanso kutsimikizira kovomerezeka njira zama encryption zomwe zimagwiritsidwa ntchito. Thandizo la WireGuard laphatikizidwa kale mu NetworkManager ndi systemd, ndipo zigamba za kernel zikuphatikizidwa mu magawo oyambira. Debian Wosakhazikika, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Gawo ΠΈ ALT.

WireGuard amagwiritsa ntchito lingaliro la makiyi achinsinsi, omwe amaphatikiza kuyika kiyi yachinsinsi pa intaneti iliyonse ndikuigwiritsa ntchito kumanga makiyi a anthu onse. Makiyi apagulu amasinthidwa kuti akhazikitse kulumikizana mofanana ndi SSH. Kukambilana makiyi ndikulumikizana popanda kugwiritsa ntchito daemon yosiyana m'malo ogwiritsa ntchito, makina a Noise_IK kuchokera Noise Protocol Frameworkzofanana ndi kusunga authorized_keys mu SSH. Kutumiza kwa data kumachitika kudzera mu encapsulation mu mapaketi a UDP. Imathandizira kusintha adilesi ya IP ya seva ya VPN (kuyendayenda) popanda kulumikiza kulumikizana ndikusinthanso kwa kasitomala.

Za kubisa imagwiritsidwa ntchito mtsinje cipher ChaCha20 ndi algorithm yotsimikizira uthenga (MAC) Poly1305, lopangidwa ndi Daniel Bernstein (Daniel J. Bernstein), Tanya Lange
(Tanja Lange) ndi Peter Schwabe. ChaCha20 ndi Poly1305 zili pabwino ngati ma analogue othamanga komanso otetezeka a AES-256-CTR ndi HMAC, kukhazikitsidwa kwa mapulogalamu omwe amalola kukwaniritsa nthawi yokhazikika popanda kugwiritsa ntchito zida zapadera zothandizira. Kuti mupange kiyi yachinsinsi yogawana, elliptic curve Diffie-Hellman protocol imagwiritsidwa ntchito pakukhazikitsa Curve25519, yomwe idaperekedwanso ndi Daniel Bernstein. Algorithm yomwe imagwiritsidwa ntchito pa hashing ndi BLAKE2s (RFC7693).

Source: opennet.ru

Kuwonjezera ndemanga