{"id":104097,"date":"2022-05-20T15:36:43","date_gmt":"2022-05-20T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp"},"modified":"2022-05-20T15:36:43","modified_gmt":"2022-05-20T13:36:45","slug":"google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","title":{"rendered":"Google a deschis lucr\u0103rile legate de protocolul de re\u021bea securizat PSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a anun\u021bat deschiderea specifica\u021biilor \u0219i a implement\u0103rii de referin\u021b\u0103 a protocolului PSP (PSP Security Protocol), utilizat pentru criptarea traficului \u00eentre centrele de date. Protocolul folose\u0219te o arhitectur\u0103 de tip ESP (Encapsulating Security Payloads) similar\u0103 cu IPsec pentru a \u00eenf\u0103\u0219ura traficul deasupra IP, oferind criptare, control criptografic al integrit\u0103\u021bii \u0219i autentificarea sursei. Codul de implementare PSP este scris \u00een limbajul C \u0219i este distribuit sub licen\u021ba Apache 2.0. <\/p>\n

O caracteristic\u0103 a PSP este optimizarea protocolului pentru a accelera calculul \u0219i a reduce \u00eenc\u0103rc\u0103tura procesorului central prin desc\u0103rcarea opera\u021biunilor de criptare \u0219i decriptare c\u0103tre pl\u0103cile de re\u021bea (offload). Pentru utilizarea acceler\u0103rii hardware este necesar\u0103 existen\u021ba unor pl\u0103ci de re\u021bea speciale, compatibile cu PSP. Pentru sistemele cu pl\u0103ci de re\u021bea care nu suport\u0103 PSP, este propus\u0103 o implementare software numit\u0103 SoftPSP. <\/p>\n

Protocolul UDP este utilizat ca transport pentru transmiterea datelor. Pachetul PSP \u00eencepe cu un header IP, urmat de un header UDP \u0219i apoi de headerul propriu-zis PSP cu informa\u021bii despre criptare \u0219i autentificare. Apoi se ata\u0219eaz\u0103 con\u021binutul pachetului original TCP\/UDP, care se finalizeaz\u0103 cu un bloc PSP cu o sum\u0103 de control pentru confirmarea integrit\u0103\u021bii. Headerul PSP, precum \u0219i headerul \u0219i datele pachetului \u00eenf\u0103\u0219urat, sunt \u00eentotdeauna autentificate pentru a confirma autenticitatea pachetului. Datele pachetului \u00eenf\u0103\u0219urat pot fi criptate, permi\u021b\u00e2nd campania selectiv\u0103 de criptare, p\u0103str\u00e2nd o parte din headerul TCP \u00een format deschis (\u00een timp ce se p\u0103streaz\u0103 controlul autentic), de exemplu, pentru a permite inspectarea pachetelor pe echipamentele de re\u021bea de tranzi\u021bie.

\"Google<\/center> <\/p>\n

PSP nu se leag\u0103 de un protocol specific de schimb de chei, oferind mai multe op\u021biuni de format pentru pachete \u0219i sus\u021bine utilizarea diferitelor algoritmi criptografici. De exemplu, se ofer\u0103 suport pentru algoritmul AES-GCM pentru criptarea \u0219i verificarea autenticit\u0103\u021bii (autentificare) \u0219i AES-GMAC pentru autentificarea f\u0103r\u0103 criptarea datelor directe, de exemplu, atunci c\u00e2nd datele nu au valoare, dar trebuie garantat c\u0103 nu au fost modificate \u00een timpul transmiterii \u0219i c\u0103 sunt exact cele care au fost trimise ini\u021bial. <\/p>\n

Spre deosebire de tipice VPN<\/a>-protocole PSP utilizeaz\u0103 criptarea la nivelul conexiunilor de re\u021bea individuale, nu pentru \u00eentreaga band\u0103 de comunicare, adic\u0103 PSP folose\u0219te chei de criptare separate pentru diferitele conexiuni tunelate UDP \u0219i TCP. Aceast\u0103 abordare permite ob\u021binerea unei izola\u021bii mai stricte a traficului \u00eentre aplica\u021bii \u0219i gestion\u0103ri diferite, ceea ce este relevant atunci c\u00e2nd se execut\u0103 pe un singur server<\/a> aplica\u021bii \u0219i servicii ale diferitelor utilizatori. <\/p>\n

\u00cen Google, protocolul PSP este utilizat at\u00e2t pentru protejarea comunic\u0103rilor interne, c\u00e2t \u0219i pentru protec\u021bia traficului clien\u021bilor Google Cloud. Protocolul a fost ini\u021bial conceput pentru a func\u021biona eficient \u00een infrastructuri la nivel Google \u0219i trebuie s\u0103 asigure accelerarea hardware-ului cript\u0103rii \u00een condi\u021biile existen\u021bei a milioane de conexiuni de re\u021bea active \u0219i stabilirea de sute de mii de noi conexiuni pe secund\u0103. <\/p>\n

Sunt acceptate dou\u0103 moduri de operare \u2014 \u201estateful\u201d \u0219i \u201estateless\u201d. \u00cen modul \u201estateless\u201d, cheile pentru criptare sunt transmise pl\u0103cii de re\u021bea \u00een descriptorul pachetului, iar pentru decriptare sunt extrase din c\u00e2mpul SPI (Security Parameter Index) prezent \u00een pachet, folosind cheia principal\u0103 (AES de 256 bi\u021bi, stocat\u0103 \u00een memoria pl\u0103cii de re\u021bea \u0219i \u00eenlocuit\u0103 la fiecare 24 de ore), ceea ce permite economisirea memoriei pl\u0103cii de re\u021bea \u0219i minimalizarea informa\u021biilor despre starea conexiunilor criptate stocate pe partea de hardware. \u00cen modul \u201estateful\u201d, cheile pentru fiecare conexiune sunt stocate pe placa de re\u021bea \u00eentr-o tabel\u0103 special\u0103, analog cu modul \u00een care se realizeaz\u0103 accelerarea hardware \u00een IPsec.

\"Google<\/center> <\/p>\n

PSP ofer\u0103 o combina\u021bie unic\u0103 de func\u021bionalit\u0103\u021bi ale protocoalelor TLS \u0219i IPsec\/VPN. TLS a fost adecvat pentru Google din punct de vedere al protec\u021biei la nivel de conexiuni individuale, dar nu a fost satisf\u0103c\u0103tor din cauza lipsei de flexibilitate pentru accelerarea hardware-ului \u0219i a absen\u021bei suportului pentru UDP. IPsec asigura independen\u021ba fa\u021b\u0103 de protocoale \u0219i sus\u021binea bine accelerarea hardware-ului, dar nu oferea leg\u0103tura cheilor cu conexiunile individuale, era destinat doar unui num\u0103r mic de tuneluri create \u0219i avea probleme de scalabilitate a acceler\u0103rii hardware din cauza stoc\u0103rii \u00eentregului stadiu de criptare \u00een tabele plasate \u00een memoria pl\u0103cii de re\u021bea (de exemplu, pentru procesarea a 10 milioane de conexiuni sunt necesari 5 GB de memorie). <\/p>\n

\u00cen cazul PSP, informa\u021biile despre starea cript\u0103rii (chei, vectori de ini\u021bializare, numere de ordine etc.) pot fi transmise \u00een descriptorul TX al pachetului sau sub form\u0103 de pointer la memoria sistemului gazd\u0103, f\u0103r\u0103 a ocupa memoria pl\u0103cii de re\u021bea. Conform celor de la Google, anterior, criptarea traficului RPC \u00een infrastructura companiei consuma aproximativ 0,7% din puterea de calcul \u0219i un volum mare de memorie. Implementarea PSP prin atragerea de fonduri de accelerare hardware a permis reducerea acestei valori la 0,2%.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 IPsec ESP (Encapsulating Security Payloads) \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 \u0438\u043d\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 IP, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u041a\u043e\u0434 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 PSP \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a deschis lucr\u0103rile legate de protocolul de re\u021bea securizat PSP | ProHoster","description":"Compania Google a anun\u021bat deschiderea specifica\u021biilor \u0219i a implement\u0103rii standard a protocolului PSP (PSP Security Protocol), utilizat pentru criptarea traficului \u00eentre centrele de date.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c PSP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-20T13:36:45+00:00","article:modified_time":"2022-05-20T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-20 13:36:51","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=104097"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104097\/revisions"}],"predecessor-version":[{"id":159990,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/104097\/revisions\/159990"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/104098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=104097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=104097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=104097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}