{"id":76048,"date":"2020-03-30T19:42:06","date_gmt":"2020-03-30T17:42:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-vpn-wireguard-1-0-0"},"modified":"2020-03-30T19:42:06","modified_gmt":"2020-03-30T17:42:06","slug":"dostupen-vpn-wireguard-1-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-vpn-wireguard-1-0-0","title":{"rendered":"VPN WireGuard 1.0.0 disponibil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Prezentat<\/a><\/noindex> lansarea emblematic\u0103 a VPN-ului WireGuard 1.0.0<\/a><\/noindex>, care a marcat livrarea componentelor WireGuard \u00een nucleul principal Linux 5.6<\/a><\/noindex> \u0219i stabilizarea dezvolt\u0103rii. Codul inclus \u00een nucleul Linux a trecut<\/a><\/noindex> un audit de securitate suplimentar, efectuat de o firm\u0103 independent\u0103 specializat\u0103 \u00een astfel de verific\u0103ri. Auditul nu a identificat probleme.<\/p>\n

Deoarece WireGuard este acum dezvoltat \u00een nucleul principal al Linux, pentru distribu\u021bii \u0219i utilizatori care continu\u0103 s\u0103 utilizeze versiuni mai vechi ale nucleului, a fost preg\u0103tit un depozit wireguard-linux-compat.git<\/a><\/noindex>. Depozitul include codul WireGuard backportat \u0219i stratul compat.h pentru a asigura compatibilitatea cu nucleele mai vechi. Se men\u021bioneaz\u0103 c\u0103, deocamdat\u0103, av\u00e2nd \u00een vedere posibilit\u0103\u021bile dezvoltatorilor \u0219i nevoia utilizatorilor, o variant\u0103 separat\u0103 a patch-urilor va fi men\u021binut\u0103 \u00een stare func\u021bional\u0103. \u00cen forma actual\u0103, varianta separat\u0103 a WireGuard poate fi utilizat\u0103 cu nuclee din Ubuntu 20.04<\/a><\/noindex> \u0219i Debian 10 \u201eBuster\u201d<\/a><\/noindex>, de asemenea, disponibil\u0103 ca patch-uri pentru nucleele Linux 5.4<\/a><\/noindex> \u0219i 5.5<\/a><\/noindex>. Distribu\u021bii care folosesc cele mai recente nuclee, cum ar fi Arch, Gentoo \u0219i
\nFedora 32, vor avea posibilitatea de a folosi WireGuard odat\u0103 cu actualizarea nucleului 5.6.<\/p>\n

Procesul principal de dezvoltare se desf\u0103\u0219oar\u0103 acum \u00een depozitul wireguard-linux.git<\/a><\/noindex>, care include \u00eentreaga structur\u0103 a nucleului Linux cu modific\u0103rile de la proiectul Wireguard. Patch-urile din acest depozit vor fi revizuite pentru includerea \u00een nucleul principal \u0219i vor fi transferate regulat \u00een ramurile net\/net-next. Dezvoltarea utilitarelor \u0219i scripturilor care ruleaz\u0103 \u00een spa\u021biul utilizatorului, cum ar fi wg \u0219i wg-quick, se desf\u0103\u0219oar\u0103 \u00een depozitul wireguard-tools.git<\/a><\/noindex>, care poate fi utilizat pentru crearea pachetelor \u00een distribu\u021bii.<\/p>\n

Reamintim c\u0103 VPN WireGuard este implementat pe baza unor metode de criptare moderne, ofer\u0103 o performan\u021b\u0103 foarte ridicat\u0103, este simplu de utilizat, lipsit de complica\u021bii \u0219i a demonstrat un istoric de succes \u00een mai multe implement\u0103ri mari, care gestioneaz\u0103 volume mari de trafic. Proiectul este \u00een dezvoltare din 2015, a trecut prin audit \u0219i verificare formal\u0103<\/a><\/noindex> metodele de criptare utilizate. Suportul pentru WireGuard este deja integrat \u00een NetworkManager \u0219i systemd, iar patch-urile pentru nucleu sunt incluse \u00een pachetul de baz\u0103 al distribu\u021biilor Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> \u0219i ALT<\/a><\/noindex>.<\/p>\n

WireGuard folose\u0219te conceptul de rutare pe baza cheilor de criptare, care implic\u0103 asocierea unei chei private fiec\u0103rui interval de re\u021bea \u0219i utilizarea acesteia pentru conectarea cheilor publice. Schimbul de chei publice pentru stabilirea conexiunii se realizeaz\u0103 analogic cu SSH. Pentru negocierea cheilor \u0219i conexiunea f\u0103r\u0103 a lansa un demon separat \u00een spa\u021biul utilizatorului se utilizeaz\u0103 mecanismul Noise_IK din Noise Protocol Framework<\/a><\/noindex>, similar cu \u00eentre\u021binerea authorized_keys \u00een SSH. Transferul de date se realizeaz\u0103 prin encapsularea \u00een pachete UDP. Este acceptat\u0103 schimbarea adresei IP a serverului VPN (roaming) f\u0103r\u0103 \u00eentreruperea conexiunii cu reconectare automat\u0103 a clientului.<\/p>\n

Pentru criptare se folose\u0219te<\/a><\/noindex> fluxul de criptare ChaCha20<\/a><\/noindex> \u0219i algoritmul de autentificare a mesajelor (MAC) Poly1305<\/a><\/noindex>, dezvolta\u021bi de Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) \u0219i Peter Schwabe (Peter Schwabe). ChaCha20 \u0219i Poly1305 sunt pozi\u021bionate ca fiind alternative mai rapide \u0219i mai sigure la AES-256-CTR \u0219i HMAC, realizarea software-ului permite ob\u021binerea unui timp de execu\u021bie fix f\u0103r\u0103 utilizarea unui suport hardware special. Pentru generarea cheii secrete comune, se utilizeaz\u0103 protocolul Diffie-Hellman pe curbe eliptice \u00een implementare. Curve25519<\/a><\/noindex>, de asemenea, propus de Daniel Bernstein. Algoritmul utilizat pentru hash-uri este BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

La vechi testare<\/a><\/noindex> performan\u021ba WireGuard a demonstrat o l\u0103\u021bime de band\u0103 cu 3,9 ori mai mare \u0219i o reac\u021bie cu 3,8 ori mai bun\u0103, comparativ cu OpenVPN (AES 256-bit c HMAC-SHA2-256). Comparativ cu IPsec (ChaCha20+Poly1305 256-bit \u0219i AES-256-GCM-128), WireGuard arat\u0103 un u\u0219or avantaj \u00een performan\u021b\u0103 (13-18%) \u0219i o reducere a laten\u021belor (21-23%). Rezultatele test\u0103rii publicate pe site-ul proiectului acoper\u0103 vechea implementare separat\u0103 a WireGuard \u0219i sunt marcate ca fiind de calitate insuficient\u0103. Din momentul \u00een care au fost efectuate testele, codul WireGuard \u0219i IPsec a fost optimizat suplimentar \u0219i acum func\u021bioneaz\u0103 mai repede. Un test mai complet, care s\u0103 acopere implementarea integrat\u0103 \u00een kernel, nu a fost efectuat p\u00e2n\u0103 acum. Cu toate acestea, se observ\u0103 c\u0103 WireGuard \u00een unele situa\u021bii \u00eenc\u0103 dep\u0103\u0219e\u0219te IPsec datorit\u0103 multithreading-ului, \u00een timp ce OpenVPN r\u0103m\u00e2ne foarte lent.<\/p>\n

\"VPN<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard 1.0.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 WireGuard \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux 5.6 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0412\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u043a\u043e\u0434 \u043f\u0440\u043e\u0448\u0451\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u0445. \u0410\u0443\u0434\u0438\u0442 \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0422\u0430\u043a \u043a\u0430\u043a WireGuard \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux, \u0434\u043b\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":76049,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47VPN WireGuard 1.0.0 disponibil | ProHoster","description":"A fost lansat\u0103 versiunea emblematic\u0103 VPN WireGuard.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-vpn-wireguard-1-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d VPN WireGuard 1.0.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-vpn-wireguard-1-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-30T17:42:06+00:00","article:modified_time":"2020-03-30T17:42:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76048","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:44:27","updated":"2022-10-01 21:43:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/76048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=76048"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/76048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/76049"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=76048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=76048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=76048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}