{"id":101348,"date":"2021-09-20T16:22:35","date_gmt":"2021-09-20T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale"},"modified":"2021-09-20T16:22:35","modified_gmt":"2021-09-20T14:22:36","slug":"proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","title":{"rendered":"Proiectul Headscale dezvolt\u0103 un server deschis pentru re\u021bele VPN distribuite Tailscale.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Proiectul Headscale dezvolt\u0103 o implementare deschis\u0103 a componentei server VPN a re\u021belei Tailscale, permi\u021b\u00e2nd crearea de re\u021bele VPN similare Tailscale pe propriile resurse, f\u0103r\u0103 a depinde de servicii externe. Codul Headscale este scris \u00een limbajul Go \u0219i este distribuit sub licen\u021ba BSD. Proiectul este dezvoltat de Juan Font de la Agen\u021bia Spa\u021bial\u0103 European\u0103. <\/p>\n

Tailscale permite conectarea unui num\u0103r arbitrar de gazde dispersate geografic \u00eentr-o re\u021bea construit\u0103 pe modelul unei re\u021bele mesh, \u00een care fiecare nod interac\u021bioneaz\u0103 direct cu celelalte noduri (P2P) sau prin noduri vecine, f\u0103r\u0103 a transmite traficul prin servere externe centralizate. VPN<\/a>-provider. Este suportat\u0103 gestionarea accesului \u0219i a rutelor bazate pe ACL. Pentru stabilirea canalelor de comunicare \u00een condi\u021bii de utilizare a translatorilor de adrese (NAT), este oferit suport pentru mecanismele STUN, ICE \u0219i DERP (analog TURN, dar pe baz\u0103 de HTTPS). \u00cen cazul bloc\u0103rii canalului de comunicare \u00eentre anumite noduri, re\u021beaua poate reconstrui rutarea pentru a direc\u021biona traficul prin alte noduri.

\"Proiectul<\/center> <\/p>\n

Proiectul Nebula, de asemenea destinat cre\u0103rii de re\u021bele VPN distribuite cu rutare mesh, se deosebe\u0219te de Tailscale prin utilizarea protocolului Wireguard pentru organizarea transferului de date \u00eentre noduri, \u00een timp ce \u00een Nebula sunt folosite solu\u021biile proiectului Tinc, care utilizeaz\u0103 algoritmul AES-256-GSM pentru criptarea pachetelor (\u00een Wireguard se folose\u0219te criptograficul ChaCha20, care \u00een teste demonstreaz\u0103 o capacitate de transmitere \u0219i o reac\u021bie mai bun\u0103). <\/p>\n

Se dezvolt\u0103 separat un alt proiect similar \u2014 Innernet, \u00een care pentru schimbul de date \u00eentre noduri se utilizeaz\u0103 de asemenea protocolul Wireguard. Spre deosebire de Tailscale \u0219i Nebula, \u00een Innernet se aplic\u0103 un alt sistem de separare a accesului, bazat nu pe ACL-uri cu leg\u0103tura etichetelor la noduri individuale, ci pe separarea subre\u021belelor \u0219i alocarea unor intervale diferite. adreselor IP<\/a>, ca \u00een re\u021belele obi\u0219nuite de internet. \u00cen plus, spre deosebire de limbajul Go, Innernet folose\u0219te limbajul Rust. Acum trei zile a fost publicat\u0103 actualizarea Innernet 1.5 cu suport \u00eembun\u0103t\u0103\u021bit pentru ocolirea NAT. Exist\u0103, de asemenea, proiectul Netmaker, care permite conectarea re\u021belelor cu topologii diferite folosind Wireguard, dar codul s\u0103u este livrat sub licen\u021ba SSPL (Server Side Public License), care nu este deschis\u0103 datorit\u0103 cerin\u021belor discriminatorii. <\/p>\n

Tailscale este distribuit sub un model Freemium, ceea ce \u00eenseamn\u0103 c\u0103 utilizatorii individuali pot beneficia de utilizare gratuit\u0103, \u00een timp ce organiza\u021biile \u0219i echipele au acces platit. Componentele client Tailscale, cu excep\u021bia aplica\u021biilor grafice pentru Windows \u0219i macOS, sunt dezvoltate sub form\u0103 de proiecte deschise cu licen\u021ba BSD. Software-ul serverului Tailscale, care asigur\u0103 autentificarea la conectarea noilor clien\u021bi, coordoneaz\u0103 gestionarea cheilor \u0219i organizeaz\u0103 interac\u021biunea \u00eentre noduri, este proprietar. Proiectul Headscale remediaz\u0103 aceast\u0103 problem\u0103 \u0219i ofer\u0103 o implementare deschis\u0103 a componentelor serverului Tailscale.

\"Proiectul<\/center> <\/p>\n

Headscale preia func\u021biile de schimb de chei publice \u00eentre noduri, precum \u0219i execut\u0103 opera\u021biuni de asignare a adreselor IP \u0219i distribu\u021bie a tabelelor de rutare \u00eentre noduri. \u00cen forma sa actual\u0103, Headscale implementeaz\u0103 toate func\u021bionalit\u0103\u021bile de baz\u0103 ale serverului de gestionare, cu excep\u021bia suportului pentru MagicDNS \u0219i Smart DNS. \u00cen special, func\u021biile de \u00eenregistrare a nodurilor (inclusiv prin web), adaptarea re\u021belei la ad\u0103ugarea sau eliminarea nodurilor, divizarea subre\u021belelor prin intermediul spa\u021biilor de nume (o re\u021bea VPN poate fi creat\u0103 pentru mai mul\u021bi utilizatori), organizarea accesului comun al nodurilor la subre\u021bele din diferite spa\u021bii de nume, gestionarea rut\u0103rii (inclusiv asignarea nodurilor de ie\u0219ire pentru accesarea lumii externe), divizarea accesului prin ACL \u0219i func\u021bionarea serviciului DNS sunt toate suportate.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041a\u043e\u0434 Headscale \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0425\u0443\u0430\u043d \u0424\u043e\u043d\u0442 \u0410\u043b\u043e\u043d\u0441\u043e (Juan Font) \u0438\u0437 \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430. Tailscale \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043e\u0434\u043d\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Proiectul Headscale dezvolt\u0103 un server deschis pentru re\u021beaua VPN distribuit\u0103 Tailscale | ProHoster","description":"Proiectul Headscale dezvolt\u0103 o implementare deschis\u0103 a componentei serverului re\u021belei VPN Tailscale, permi\u021b\u00e2nd crearea de re\u021bele VPN similare Tailscale pe propriile resurse, f\u0103r\u0103 a depinde de servicii externe.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 VPN-\u0441\u0435\u0442\u0438 Tailscale | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-20T14:22:36+00:00","article:modified_time":"2021-09-20T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-20 14:23:05","updated":"2026-02-08 20:40:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101348"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101348\/revisions"}],"predecessor-version":[{"id":158033,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101348\/revisions\/158033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/101349"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}