{"id":105412,"date":"2022-10-30T15:36:45","date_gmt":"2022-10-30T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard"},"modified":"2022-10-30T15:36:45","modified_gmt":"2022-10-30T13:36:45","slug":"v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","title":{"rendered":"Uma nova implementa\u00e7\u00e3o da VPN WireGuard foi adicionada \u00e0 base de c\u00f3digo do FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na \u00e1rvore de textos fonte do FreeBSD, foram aceitas altera\u00e7\u00f5es com uma nova implementa\u00e7\u00e3o do VPN WireGuard, baseada no c\u00f3digo do m\u00f3dulo do kernel, elaborado em conjunto pelas principais equipes de desenvolvimento do FreeBSD e WireGuard com a participa\u00e7\u00e3o de Jason Donenfeld, autor do VPN WireGuard, e John Baldwin, um conhecido desenvolvedor do GDB e FreeBSD, que, no in\u00edcio dos anos 2000, implementou o suporte a SMP e NUMA no kernel do FreeBSD. Ap\u00f3s a aceita\u00e7\u00e3o do driver no FreeBSD (sys\/dev\/wg), seu desenvolvimento e manuten\u00e7\u00e3o agora ser\u00e3o realizados no reposit\u00f3rio do FreeBSD. <\/p>\n

Antes da aceita\u00e7\u00e3o do c\u00f3digo, com o apoio da FreeBSD Foundation, foi realizada uma an\u00e1lise completa das altera\u00e7\u00f5es, na qual tamb\u00e9m foi analisada a intera\u00e7\u00e3o do driver com os demais subsistemas do kernel e avaliada a possibilidade de utiliza\u00e7\u00e3o dos primitivos criptogr\u00e1ficos fornecidos pelo kernel. <\/p>\n

Para utilizar os algoritmos criptogr\u00e1ficos necess\u00e1rios ao driver, foi realizada uma extens\u00e3o da API da subsistema de criptografia do kernel do FreeBSD, na qual foi adicionada uma camada que permite o uso de algoritmos n\u00e3o suportados no FreeBSD atrav\u00e9s da API criptogr\u00e1fica padr\u00e3o, utilizando a implementa\u00e7\u00e3o necess\u00e1ria dos algoritmos da biblioteca libsodium. Dos algoritmos incorporados no driver, apenas o c\u00f3digo para calcular hashes Blake2 foi mantido, pois a implementa\u00e7\u00e3o fornecida no FreeBSD desse algoritmo est\u00e1 atrelada a um tamanho fixo de hash. <\/p>\n

Al\u00e9m disso, durante o processo de revis\u00e3o, uma otimiza\u00e7\u00e3o do c\u00f3digo foi realizada, permitindo aumentar a efici\u00eancia na distribui\u00e7\u00e3o de carga em CPUs multicore (garantindo uma balanceamento uniforme da aloca\u00e7\u00e3o de tarefas de criptografia e descriptografia de pacotes entre os n\u00facleos da CPU). Como resultado, as sobrecargas ao processar pacotes foram aproximadas \u00e0 implementa\u00e7\u00e3o do driver para Linux. O c\u00f3digo tamb\u00e9m garante a possibilidade de uso do driver ossl para acelerar opera\u00e7\u00f5es de criptografia. <\/p>\n

Ao contr\u00e1rio da tentativa anterior de integrar o WireGuard no FreeBSD, a nova implementa\u00e7\u00e3o utiliza a ferramenta oficial wg, em vez da vers\u00e3o modificada do ifconfig, o que possibilitou padronizar a configura\u00e7\u00e3o entre Linux e FreeBSD. A ferramenta wg, assim como o driver, est\u00e1 inclu\u00edda no c\u00f3digo-fonte do FreeBSD, o que foi viabilizado pela mudan\u00e7a na licen\u00e7a do c\u00f3digo wg (agora dispon\u00edvel sob as licen\u00e7as MIT e GPL). A tentativa anterior de inclus\u00e3o do WireGuard no FreeBSD foi feita em 2020, mas terminou em pol\u00eamica, culminando na remo\u00e7\u00e3o do c\u00f3digo j\u00e1 adicionado devido \u00e0 sua baixa qualidade, manejo descuidado dos buffers, uso de stubs em vez de verifica\u00e7\u00f5es, implementa\u00e7\u00e3o incompleta do protocolo e viola\u00e7\u00e3o da licen\u00e7a GPL. <\/p>\n

Lembramos que VPN<\/a> O WireGuard \u00e9 implementado com base em m\u00e9todos modernos de criptografia, oferece um desempenho muito alto, \u00e9 f\u00e1cil de usar, desprovido de complica\u00e7\u00f5es e se destacou em v\u00e1rias grandes implementa\u00e7\u00f5es que gerenciam grandes volumes de tr\u00e1fego. O projeto est\u00e1 em evolu\u00e7\u00e3o desde 2015, passou por auditorias e verifica\u00e7\u00f5es formais dos m\u00e9todos de criptografia aplicados. No WireGuard, utiliza-se o conceito de roteamento por chaves de criptografia, que implica a vincula\u00e7\u00e3o de uma chave privada a cada interface de rede e o uso de chaves p\u00fablicas para a conex\u00e3o. <\/p>\n

A troca de chaves p\u00fablicas para estabelecer a conex\u00e3o \u00e9 realizada de maneira semelhante ao SSH. Para o acordo de chaves e conex\u00e3o sem iniciar um daemon separado no espa\u00e7o do usu\u00e1rio, \u00e9 aplicado o mecanismo Noise_IK do Noise Protocol Framework, similar \u00e0 manuten\u00e7\u00e3o de authorized_keys no SSH. A transmiss\u00e3o de dados \u00e9 realizada atrav\u00e9s da encapsula\u00e7\u00e3o em pacotes UDP. Suporta mudan\u00e7a endere\u00e7os IP<\/a> do servidor VPN (roaming) sem interrup\u00e7\u00e3o da conex\u00e3o com reconfigura\u00e7\u00e3o autom\u00e1tica do cliente. <\/p>\n

Para a criptografia, \u00e9 utilizado o cifrador de fluxo ChaCha20 e o algoritmo de autentica\u00e7\u00e3o de mensagens (MAC) Poly1305, desenvolvidos por Daniel Bernstein, Tanja Lange e Peter Schwabe. ChaCha20 e Poly1305 s\u00e3o posicionados como alternativas mais r\u00e1pidas e seguras ao AES-256-CTR e HMAC, cuja implementa\u00e7\u00e3o de software permite alcan\u00e7ar um tempo de execu\u00e7\u00e3o fixo sem a necessidade de suporte de hardware especial. Para gerar uma chave secreta compartilhada, \u00e9 aplicado o protocolo Diffie-Hellman em curvas el\u00edpticas na implementa\u00e7\u00e3o Curve25519, tamb\u00e9m proposta por Daniel Bernstein. O algoritmo BLAKE2s (RFC7693) \u00e9 utilizado para hashing.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u0430 \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u0430 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u0430 VPN WireGuard, \u0438 \u0414\u0436\u043e\u043d\u0430 \u0411\u043e\u043b\u0434\u0443\u0438\u043d\u0430 (John H. Baldwin), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 GDB \u0438 FreeBSD, \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2000-\u0445 \u0433\u043e\u0434\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SMP \u0438 NUMA […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105412","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uma nova implementa\u00e7\u00e3o da VPN WireGuard foi adicionada \u00e0 base de c\u00f3digo do FreeBSD | ProHoster","description":"Mudan\u00e7as com uma nova implementa\u00e7\u00e3o da VPN WireGuard, baseada no c\u00f3digo do m\u00f3dulo do kernel, foram aceitas na \u00e1rvore de textos de origem do FreeBSD, em colabora\u00e7\u00e3o com as principais equipes de desenvolvedores do FreeBSD e WireGuard.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 FreeBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f VPN WireGuard | ProHoster","og:description":"\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-30T13:36:45+00:00","article:modified_time":"2022-10-30T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105412","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:26","updated":"2026-02-08 20:24:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=105412"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105412\/revisions"}],"predecessor-version":[{"id":157897,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105412\/revisions\/157897"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=105412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=105412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=105412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}