VPN WireGuard yotengedwa ndi OpenBSD

Jason A. Donenfeld, wolemba VPN WireGuard, adalengeza о kuvomereza kuphatikizidwa mu dalaivala wamkulu wa OpenBSD kernel "wg" pa protocol ya WireGuard, kukhazikitsa mawonekedwe a netiweki enieni ndi kusintha zida zogwirira ntchito pamalo ogwiritsira ntchito. OpenBSD idakhala OS yachiwiri pambuyo pake Linux ndi chithandizo chathunthu komanso chophatikizika cha WireGuard. WireGuard akuyembekezeka kuphatikizidwa mu kutulutsidwa kwa OpenBSD 6.8.

Zigambazo zikuphatikiza dalaivala wa kernel ya OpenBSD, zosintha pazida za ifconfig ndi tcpdump kuti zithandizire magwiridwe antchito a WireGuard, zolemba, ndi zosintha zazing'ono kuti aphatikizire WireGuard ndi dongosolo lonselo. Dalaivala amagwiritsa ntchito yake kukhazikitsa ma algorithms Blake2s, chcha20 и gawo 25519, komanso kukhazikitsa kwa SipHash komwe kulipo kale mu OpenBSD kernel.

Kukhazikitsaku kumagwirizana ndi makasitomala onse ovomerezeka a WireGuard a Linux, Windows, macOS, * BSD, iOS ndi Android. Kuyesa magwiridwe antchito pa laputopu ya wopanga (Lenovo x230) adawonetsa kutulutsa kwa 750mbit/s. Poyerekeza, isakmpd yokhala ndi zoikamo za ike psk imapereka kutulutsa kwa 380mbit/s.

Popanga dalaivala wa kernel ya OpenBSD, mayankho ena omanga adasankhidwa omwe anali ofanana ndi dalaivala wa Linux, koma dalaivala adapangidwira OpenBSD, kukumbukira zomwe zidachitika pano ndikuganizira zomwe zidachitika popanga driver kwa Linux. Ndi chilolezo cha mlembi woyambirira wa WireGuard, nambala yonse ya dalaivala watsopano imagawidwa pansi pa layisensi yaulere ya ISC.

Dalaivala amaphatikizana mwamphamvu ndi malo ochezera a OpenBSD ndipo amagwiritsa ntchito ma subsystems omwe alipo, zomwe zimapangitsa kuti code ikhale yaying'ono (pafupifupi mizere ya 3000). Pakati pa kusiyanako, kulekanitsa kwa zigawo za dalaivala ndizosiyananso ndi za Linux: Mawonekedwe enieni a OpenBSD amaikidwa mu mafayilo a "if_wg.*", code ya chitetezo ya DoS ili mu "wg_cookie.*", ndi kukambirana ndi kubisa. logic ili mu “wg_noise.*” "

Source: opennet.ru