{"id":101359,"date":"2021-09-21T22:22:43","date_gmt":"2021-09-21T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn"},"modified":"2021-09-21T22:22:43","modified_gmt":"2021-09-21T20:22:43","slug":"predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","title":{"rendered":"A fost prezentat un modul kernel capabil s\u0103 accelereze semnificativ OpenVPN","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii pachetului pentru crearea re\u021belelor private virtuale OpenVPN au lansat modulul de nucleu ovpn-dco, care permite accelerarea semnificativ\u0103 a performan\u021bei VPN. Cu toate c\u0103 modulul este \u00eenc\u0103 \u00een dezvoltare \u0219i se concentreaz\u0103 pe ramura linux-next, av\u00e2nd statut experimental, a ajuns deja la un nivel de stabilitate care permite utilizarea sa pentru func\u021bionarea serviciului OpenVPN Cloud. <\/p>\n

Comparativ cu configura\u021bia bazat\u0103 pe interfa\u021ba tun, utilizarea modulului pe partea clientului \u0219i serverului cu criptarea AES-256-GCM a dus la o cre\u0219tere a l\u0103\u021bimii de band\u0103 de 8 ori (de la 370 Mbit\/s la 2950 Mbit\/s). C\u00e2nd modulul este utilizat doar pe partea clientului, l\u0103\u021bimea de band\u0103 pentru traficul de ie\u0219ire a crescut de trei ori, iar pentru traficul de intrare nu s-a schimbat. Atunci c\u00e2nd modulul este utilizat doar pe partea de server<\/a> l\u0103\u021bimea de band\u0103 a crescut de 4 ori pentru traficul de intrare \u0219i cu 35% pentru traficul de ie\u0219ire.

\"A<\/center> <\/p>\n

Accelerarea se realizeaz\u0103 prin mutarea tuturor opera\u021biunilor de criptare, procesarea pachetelor \u0219i gestionarea canalului de comunica\u021bie \u00een nucleul Linux, ceea ce permite eliminarea cheltuielilor asociate cu schimbarea contextului, oferind posibilitatea de a optimiza performan\u021ba prin accesul direct la API-urile interne ale nucleului \u0219i excluz\u00e2nd transferul lent de date \u00eentre nucleu \u0219i spa\u021biul utilizatorului (criptarea, decriptarea \u0219i rutarea sunt realizate de modul f\u0103r\u0103 a trimite traficul \u00een handler-ul din spa\u021biul utilizatorului). <\/p>\n

Se observ\u0103 c\u0103 impactul negativ asupra performan\u021bei VPN<\/a> este cauzat \u00een principal de opera\u021biunile intensive de criptare \u0219i \u00eent\u00e2rzierile generate de schimbarea contextului. Pentru accelerarea cript\u0103rii au fost folosite extensii de procesor, cum ar fi Intel AES-NI, dar schimbarea contextului a r\u0103mas un punct slab p\u00e2n\u0103 la apari\u021bia ovpn-dco. Pe l\u00e2ng\u0103 utilizarea instruc\u021biunilor furnizate de procesor pentru accelerarea cript\u0103rii, modulul ovpn-dco asigur\u0103 de asemenea separarea opera\u021biunilor de criptare \u00een segmente distincte \u0219i procesarea acestora \u00een mod multithread, ceea ce permite utilizarea tuturor nucleelor CPU disponibile. <\/p>\n

Din actualele limit\u0103ri ale implement\u0103rii, care vor fi eliminate \u00een viitor, se remarc\u0103 suportul doar pentru modurile AEAD \u0219i ‘none’ (f\u0103r\u0103 autentificare) \u0219i cript\u0103rile AES-GCM \u0219i CHACHA20POLY1305. Suportul DCO este planificat s\u0103 fie inclus \u00een versiunea OpenVPN 2.6, programat\u0103 pentru trimestrul 4 al acestui an. \u00cen prezent, modulul este sus\u021binut \u00een clientul Linux OpenVPN3, care este \u00een testare beta, precum \u0219i \u00een versiunile experimentale ale serverului OpenVPN pentru Linux. Un modul similar, ovpn-dco-win, este, de asemenea, \u00een dezvoltare pentru nucleul Windows.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u043a\u0430 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0433\u043b\u044f\u0434\u043a\u043e\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0432\u0435\u0442\u043a\u0443 linux-next \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0442\u0430\u0442\u0443\u0441 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e, \u043e\u043d \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0438\u0433 \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0435\u0433\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430 OpenVPN Cloud. \u041f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A fost prezentat modulul de nucleu capabil s\u0103 accelereze OpenVPN de c\u00e2teva ori | ProHoster","description":"Dezvoltatorii pachetului pentru crearea re\u021belelor private virtuale OpenVPN au prezentat modulul de nucleu ovpn-dco, care permite accelerarea semnificativ\u0103 a performan\u021bei VPN.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432 \u0440\u0430\u0437\u044b \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c OpenVPN | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 OpenVPN \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 ovpn-dco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c VPN.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlen-modul-yadra-sposobnyj-v-razy-uskorit-openvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-21T20:22:43+00:00","article:modified_time":"2021-09-21T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101359","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-21 20:24:49","updated":"2026-02-22 15:30:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101359"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101359\/revisions"}],"predecessor-version":[{"id":162281,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101359\/revisions\/162281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/101360"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}