Kumapeto kwa Julayi, opanga njira ya WireGuard VPN adakonza , zomwe zipangitsa mapulogalamu awo a VPN kukhala gawo la Linux kernel. Komabe, tsiku lenileni la kukhazikitsidwa kwa "lingaliro" silikudziwika. Pansipa mdulidwe tikambirana za chida ichi mwatsatanetsatane.
/ chithunzi
Mwachidule za polojekitiyi
WireGuard ndi msewu wa VPN wam'badwo wotsatira wopangidwa ndi Jason A. Donenfeld, CEO wa Edge Security. Ntchitoyi idapangidwa ngati ndi njira yachangu ya OpenVPN ndi IPsec. Mtundu woyamba wa mankhwalawa unali ndi mizere 4 yokha ya code. Poyerekeza, OpenVPN ili ndi mizere pafupifupi 120, ndi IPSec - 420 zikwi.
Ndi Madivelopa, WireGuard ndiyosavuta kuyisintha ndipo chitetezo cha protocol chimakwaniritsidwa . : Wi-Fi, LTE kapena Efaneti ayenera kulumikizananso ndi seva ya VPN nthawi zonse. Ma seva a WireGuard samathetsa kulumikizidwa, ngakhale wogwiritsa ntchito alandila adilesi yatsopano ya IP.
Ngakhale kuti WireGuard idapangidwa koyambirira kwa Linux kernel, opanga komanso za mtundu wonyamula wa chida chazida za Android. Ntchitoyi sinapangidwe mokwanira, koma mutha kuyesa pano. Kwa ichi muyenera .
Mwambiri, WireGuard ndiwotchuka kwambiri ndipo wakhalapo angapo opereka VPN, monga Mullvad ndi AzireVPN. Lofalitsidwa pa intaneti chisankho ichi. Mwachitsanzo, , zomwe zimapangidwa ndi ogwiritsa ntchito, ndipo pali malangizo, .
Tsatanetsatane waukadaulo
Π (p. 18) zimadziwika kuti kutulutsa kwa WireGuard ndikokwera kanayi kuposa kwa OpenVPN: 1011 Mbit / s motsutsana ndi 258 Mbit / s, motsatira. WireGuard ilinso patsogolo pa njira yokhazikika ya Linux IPsec - ili ndi 881 Mbit/s. Imadutsanso mosavuta kukhazikitsa.
Pambuyo makiyi asinthidwa (kulumikizana kwa VPN kumayambitsidwa mofanana ndi SSH) ndipo kugwirizana kumakhazikitsidwa, WireGuard imagwira ntchito zina zonse payekha: palibe chifukwa chodera nkhawa za njira, kayendetsedwe ka boma, ndi zina zotero. chofunika ngati mukufuna kugwiritsa ntchito symmetric encryption.
/ chithunzi
Kuti muyike, mudzafunika kugawa ndi Linux kernel yakale kuposa 4.1. Itha kupezeka m'malo osungiramo magawo akuluakulu a Linux.
$ sudo add-apt-repository ppa:hda-me/wireguard
$ sudo apt update
$ sudo apt install wireguard-dkms wireguard-tools
Monga akonzi a xakep.ru note, kudzipanga nokha kuchokera ku zolemba zoyambira ndikosavuta. Ndikokwanira kutsegula mawonekedwe ndikupanga makiyi apagulu ndi achinsinsi:
$ sudo ip link add dev wg0 type wireguard
$ wg genkey | tee privatekey | wg pubkey > publickey
WireGuard mawonekedwe ogwirira ntchito ndi wopereka crypto . M'malo mwake, stream cipher imagwiritsidwa ntchito , zolembalemba Poly1305 ndi ntchito zake za cryptographic hash.
Chinsinsi chachinsinsi chimapangidwa pogwiritsa ntchito kutengera elliptic curve . Pamene hashing, amagwiritsa ntchito ΠΈ . Chifukwa cha masitampu anthawi protocol imataya mapaketi okhala ndi masitampu ocheperako, potero ΠΈ .
Pankhaniyi, WireGuard amagwiritsa ntchito ioctl kuwongolera I/O (yomwe idagwiritsidwa ntchito kale ), zomwe zimapangitsa kuti code ikhale yoyera komanso yosavuta. Mutha kutsimikizira izi poyang'ana .
Mapulani a mapulogalamu
Pakadali pano, WireGuard ndi gawo lakunja kwa mtengo. Koma mlembi wa ntchitoyi ndi Jason Donenfeld , kuti nthawi yakwana yoti ikhazikitsidwe kwathunthu mu Linux kernel. Chifukwa ndi chosavuta komanso chodalirika kuposa mayankho ena. Jason pankhaniyi ngakhale Linus Torvalds mwiniwakeyo adatcha code ya WireGuard "ntchito yaluso."
Koma palibe amene akukamba za masiku enieni a kukhazikitsidwa kwa WireGuard mu kernel. NDI izi zidzachitika ndi kutulutsidwa kwa August Linux kernel 4.18. Komabe, pali kuthekera kuti izi zichitika posachedwa kwambiri: mu mtundu 4.19 kapena 5.0.
WireGuard ikawonjezeredwa ku kernel, opanga malizitsani kugwiritsa ntchito zida za Android ndikuyamba kulemba pulogalamu ya iOS. Palinso mapulani omaliza kukhazikitsa mu Go ndi Rust ndikuwayika ku macOS, Windows ndi BSD. Ikukonzekeranso kukhazikitsa WireGuard pa "machitidwe achilendo": , , komanso zinthu zina zambiri zosangalatsa. Onse alembedwa mu olemba ntchito.
PS Zolemba zina zingapo kuchokera patsamba lathu lamakampani:
Chitsogozo chachikulu cha ntchito yathu ndikupereka ntchito zamtambo:
| | | | | |
Source: www.habr.com