{"id":105412,"date":"2022-10-30T15:36:45","date_gmt":"2022-10-30T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard"},"modified":"2022-10-30T15:36:45","modified_gmt":"2022-10-30T13:36:45","slug":"v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","title":{"rendered":"O nou\u0103 implementare a VPN WireGuard a fost ad\u0103ugat\u0103 \u00een baza de cod FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen arborele surs\u0103 al textelor FreeBSD au fost acceptate modific\u0103ri cu o nou\u0103 implementare a VPN WireGuard, bazat\u0103 pe codul modulului kernel, preg\u0103tit \u00een comun de echipele principale de dezvoltare FreeBSD \u0219i WireGuard, cu participarea lui Jason Donenfeld, autorul VPN WireGuard, \u0219i John Baldwin, un cunoscut dezvoltator GDB \u0219i FreeBSD, care \u00een \u00eenceputul anilor 2000 a implementat suportul SMP \u0219i NUMA \u00een kernelul FreeBSD. Dup\u0103 acceptarea driverului \u00een FreeBSD (sys\/dev\/wg), dezvoltarea \u0219i \u00eentre\u021binerea acestuia vor fi realizate de acum \u00eenainte \u00een repository-ul FreeBSD. <\/p>\n

\u00cenainte de acceptarea codului, cu sprijinul organiza\u021biei FreeBSD Foundation, a fost efectuat\u0103 o revizuire complet\u0103 a modific\u0103rilor, \u00een cadrul c\u0103reia a fost analizat\u0103 \u0219i interac\u021biunea driverului cu celelalte subsisteme ale kernelului, precum \u0219i evaluat\u0103 posibilitatea utiliz\u0103rii primitivlor criptografice furnizate de kernel. <\/p>\n

Pentru utilizarea algoritmilor criptografici necesari driverului, a fost extins API-ul subsistemului criptografic al kernelului FreeBSD, \u00een care a fost ad\u0103ugat\u0103 o interfa\u021b\u0103 care permite utilizarea algoritmilor neaccepta\u021bi \u00een FreeBSD prin intermediul API-ului criptografic standard, folosind implementarea algoritmilor necesari din biblioteca libsodium. Din algoritmii \u00eencorpora\u021bi \u00een driver a r\u0103mas doar codul pentru calcularea hash-urilor Blake2, deoarece implementarea acestui algoritm furnizat\u0103 \u00een FreeBSD este legat\u0103 de m\u0103rimea fix\u0103 a hash-ului. <\/p>\n

\u00cen plus, \u00een timpul revizuirii a fost realizat\u0103 o optimizare a codului care a permis \u00eembun\u0103t\u0103\u021birea eficien\u021bei distribuirii sarcinii pe CPU-uri multicore (asigur\u00e2nd o balansare uniform\u0103 a leg\u0103rii sarcinilor de criptare \u0219i decriptare a pachetelor pe nucleele CPU). Drept urmare, cheltuielile indirecte \u00een procesarea pachetelor au fost apropiate de implementarea driverului pentru Linux. \u00cen cod a fost asigurat\u0103 de asemenea posibilitatea utiliz\u0103rii driverului ossl pentru accelerarea opera\u021biunilor de criptare. <\/p>\n

Spre deosebire de \u00eencercarea anterioar\u0103 de integrare a WireGuard \u00een FreeBSD, noua implementare utilizeaz\u0103 utilitarul standard wg, nu o versiune modificat\u0103 a ifconfig, ceea ce a permis uniformizarea configur\u0103rii \u00eentre Linux \u0219i FreeBSD. Utilitarul wg, la fel ca \u0219i driverul, este inclus \u00een codurile surs\u0103 ale FreeBSD, ceea ce a devenit posibil datorit\u0103 schimb\u0103rii licen\u021bei pentru codul wg (acum disponibil sub licen\u021bele MIT \u0219i GPL). \u00cencercarea anterioar\u0103 de a include WireGuard \u00een FreeBSD a fost realizat\u0103 \u00een 2020, dar a fost \u00eencheiat\u0103 cu un scandal, \u00een urma c\u0103ruia codul deja ad\u0103ugat a fost eliminat din cauza calit\u0103\u021bii sc\u0103zute, a lipsei de rigurozitate \u00een lucrul cu buffer-ele, a utiliz\u0103rii stubs \u00een loc de verific\u0103ri, a implement\u0103rii incomplete a protocolului \u0219i a \u00eenc\u0103lc\u0103rii licen\u021bei GPL. <\/p>\n

Reamintim c\u0103 VPN<\/a> WireGuard este implementat pe baza metodologiilor moderne de criptare, ofer\u0103 performan\u021be foarte ridicate, este u\u0219or de utilizat, f\u0103r\u0103 complica\u021bii \u0219i s-a dovedit fiabil \u00een numeroase implement\u0103ri majore care proceseaz\u0103 volume mari de trafic. Proiectul este \u00een dezvoltare din 2015, a trecut auditul \u0219i verificarea formal\u0103 a metodelor de criptare aplicate. WireGuard utilizeaz\u0103 conceptul de rutare pe baza cheilor de criptare, ceea ce implic\u0103 legarea unui cheie privat\u0103 la fiecare interfa\u021b\u0103 de re\u021bea \u0219i utilizarea acesteia pentru asociarea cheilor publice. <\/p>\n

Schimbul de chei publice pentru stabilirea conexiunii se realizeaz\u0103 similar cu SSH. Pentru negocierea cheilor \u0219i conectarea f\u0103r\u0103 a lansa un daemon separat \u00een spa\u021biul utilizatorului, se aplic\u0103 mecanismul Noise_IK din Noise Protocol Framework, similar cu men\u021binerea authorized_keys \u00een SSH. Transferul de date se face prin encapsularea \u00een pachete UDP. Se suport\u0103 schimbarea adrese IP<\/a> Servere VPN (roaming) f\u0103r\u0103 \u00eentreruperea conexiunii cu reconfigurarea automat\u0103 a clientului. <\/p>\n

Pentru criptare se utilizeaz\u0103 cifra pe flux ChaCha20 \u0219i algoritmul de autentificare a mesajelor (MAC) Poly1305, dezvolta\u021bi de Daniel Bernstein, Tanja Lange \u0219i Peter Schwabe. ChaCha20 \u0219i Poly1305 sunt considerate analogi mai rapizi \u0219i mai siguri ai AES-256-CTR \u0219i HMAC, a c\u0103ror implementare software permite ob\u021binerea unui timp de execu\u021bie fix f\u0103r\u0103 a necesita suport hardware specializat. Pentru generarea cheii secrete comune, se folose\u0219te protocolul Diffie-Hellman pe curbe eliptice \u00een implementarea Curve25519, de asemenea propus\u0103 de Daniel Bernstein. Algoritmul BLAKE2s (RFC7693) este utilizat pentru hashing.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u0430 \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u0430 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u0430 VPN WireGuard, \u0438 \u0414\u0436\u043e\u043d\u0430 \u0411\u043e\u043b\u0434\u0443\u0438\u043d\u0430 (John H. Baldwin), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 GDB \u0438 FreeBSD, \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2000-\u0445 \u0433\u043e\u0434\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SMP \u0438 NUMA […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105412","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47O nou\u0103 implementare VPN WireGuard a fost ad\u0103ugat\u0103 \u00een baza de cod FreeBSD | ProHoster","description":"\u00cen arhiva codului surs\u0103 FreeBSD au fost acceptate modific\u0103rile cu noua implementare VPN WireGuard, bazat\u0103 pe codul modulului kernel, preg\u0103tit \u00een comun de echipele principale de dezvoltatori FreeBSD \u0219i WireGuard.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 FreeBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f VPN WireGuard | ProHoster","og:description":"\u0412 \u0434\u0435\u0440\u0435\u0432\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 FreeBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 \u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 VPN WireGuard, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u0434\u0435 \u043c\u043e\u0434\u0443\u043b\u044f \u044f\u0434\u0440\u0430, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeBSD \u0438 WireGuard \u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kodovuyu-bazu-freebsd-dobavlena-novaya-realizacziya-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-30T13:36:45+00:00","article:modified_time":"2022-10-30T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105412","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:26","updated":"2026-02-08 20:24:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105412","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105412"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105412\/revisions"}],"predecessor-version":[{"id":157897,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105412\/revisions\/157897"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}