{"id":101461,"date":"2021-09-30T10:22:42","date_gmt":"2021-09-30T08:22:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard"},"modified":"2021-09-30T10:22:42","modified_gmt":"2021-09-30T08:22:44","slug":"firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","title":{"rendered":"Firezone \u2014 solu\u00e7\u00e3o para a cria\u00e7\u00e3o de servidores VPN baseados em WireGuard.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

O projeto Firezone est\u00e1 desenvolvendo um servidor VPN para organizar o acesso a hosts em uma rede interna isolada a partir de dispositivos de usu\u00e1rios localizados em redes externas. O projeto visa alcan\u00e7ar um alto n\u00edvel de prote\u00e7\u00e3o e simplificar o processo de implementa\u00e7\u00e3o da VPN. O c\u00f3digo do projeto \u00e9 escrito nas linguagens Elixir e Ruby, e \u00e9 distribu\u00eddo sob a licen\u00e7a Apache 2.0. <\/p>\n

O projeto \u00e9 desenvolvido por um engenheiro de automa\u00e7\u00e3o de seguran\u00e7a da Cisco, que tentou criar uma solu\u00e7\u00e3o que automatiza o trabalho com a configura\u00e7\u00e3o de hosts e elimina os problemas enfrentados ao organizar o acesso seguro a VPCs em nuvem. O Firezone pode ser considerado um equivalente aberto ao OpenVPN Access Server, constru\u00eddo sobre o WireGuard em vez do OpenVPN. <\/p>\n

Para instala\u00e7\u00e3o, s\u00e3o oferecidos pacotes rpm e deb para diferentes vers\u00f5es do CentOS, Fedora, Ubuntu e Debian, cuja instala\u00e7\u00e3o n\u00e3o requer depend\u00eancias externas, pois todas as depend\u00eancias necess\u00e1rias j\u00e1 est\u00e3o inclu\u00eddas por meio da ferramenta Chef Omnibus. Para funcionar, basta ter uma distribui\u00e7\u00e3o com kernel Linux n\u00e3o inferior a 4.19 e um m\u00f3dulo de kernel compilado com VPN<\/a> WireGuard. De acordo com o autor, a execu\u00e7\u00e3o e configura\u00e7\u00e3o do servidor VPN podem ser realizadas em apenas alguns minutos. Os componentes da interface web s\u00e3o executados sob um usu\u00e1rio n\u00e3o privilegiado, e o acesso \u00e9 poss\u00edvel apenas atrav\u00e9s de HTTPS.

\"Firezone<\/center> <\/p>\n

Para organizar os canais de comunica\u00e7\u00e3o no Firezone, utiliza-se o WireGuard. O Firezone tamb\u00e9m possui fun\u00e7\u00f5es de firewall, utilizando nftables. Na sua vers\u00e3o atual, o firewall \u00e9 limitado a ferramentas que bloqueiam o tr\u00e1fego de sa\u00edda para hosts ou sub-redes espec\u00edficas em redes internas ou externas. O gerenciamento \u00e9 realizado atrav\u00e9s da interface web ou em modo de linha de comando usando a ferramenta firezone-ctl. A interface web \u00e9 constru\u00edda sobre a plataforma Admin One Bulma.

\"Firezone<\/center> <\/p>\n

Atualmente, todos os componentes do Firezone s\u00e3o executados em um \u00fanico servidor<\/a>, mas o projeto foi inicialmente idealizado com foco na modularidade e no futuro planeja adicionar a possibilidade de distribuir componentes para a interface web, VPN e firewall em diferentes hosts. Tamb\u00e9m est\u00e1 nos planos a integra\u00e7\u00e3o de um bloqueador de an\u00fancios que opera no n\u00edvel DNS, suporte a listas de bloqueio de hosts e sub-redes, possibilidade de autentica\u00e7\u00e3o via LDAP \/ SSO e recursos adicionais de gerenciamento de usu\u00e1rios.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430 \u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f VPN. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0430\u0445 Elixir \u0438 Ruby, \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043e\u043c \u043f\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101461","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firezone \u2014 solu\u00e7\u00e3o para cria\u00e7\u00e3o de servidores VPN com WireGuard | ProHoster","description":"O projeto Firezone desenvolve um servidor VPN para organizar o acesso a hosts em uma rede interna isolada a partir de dispositivos de usu\u00e1rios em redes externas.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firezone \u2014 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 WireGuard | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Firezone \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f VPN-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0430\u043c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/firezone-reshenie-dlya-sozdaniya-vpn-serverov-na-baze-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-30T08:22:44+00:00","article:modified_time":"2021-09-30T08:22:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101461","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-30 08:30:11","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/101461","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=101461"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/101461\/revisions"}],"predecessor-version":[{"id":159959,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/101461\/revisions\/159959"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/101462"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=101461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=101461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=101461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}