{"id":92348,"date":"2020-08-25T19:42:57","date_gmt":"2020-08-25T17:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard"},"modified":"2020-08-25T19:42:57","modified_gmt":"2020-08-25T17:42:57","slug":"v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","title":{"rendered":"A fost ad\u0103ugat suport VPN WireGuard \u00een nucleul NetBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii proiectului NetBSD au raportat<\/a><\/noindex> despre includerea \u00een nucleul principal al NetBSD a driverului wg, care implementeaz\u0103 protocolul WireGuard. NetBSD a devenit a treia sistem de operare, dup\u0103 Linux \u0219i OpenBSD, cu suport integrat pentru WireGuard. De asemenea, sunt oferite comenzi suplimentare pentru configurarea VPN - wg-keygen \u0219i wgconfig. \u00cen configura\u021bia implicit\u0103 a nucleului (GENERIC), driverul nu este activat \u0219i necesit\u0103 o specificare explicit\u0103 \u00een set\u0103rile \u201epseudo-device wg\u201d.<\/p>\n

apari\u021bia publicarea<\/a><\/noindex> actualiz\u0103rii corective a pachetului wireguard-tools 1.0.20200820, care include utilitare func\u021bion\u00e2nd \u00een spa\u021biul utilizatorului, cum ar fi wg \u0219i wg-quick. \u00cen aceast\u0103 nou\u0103 versiune s-a realizat preg\u0103tirea IPC pentru viitorul suport WireGuard \u00een sistemul de operare FreeBSD. S-a realizat separarea codului specific pentru diferite platforme \u00een fi\u0219iere distincte. \u00cen fi\u0219ierul unit\u0103\u021bii pentru systemd a fost ad\u0103ugat\u0103 suportul pentru comanda \u201ereload\u201d, ceea ce permite lansarea construc\u021biilor de tipul \u201esystemctl reload wg-quick at wgnet0.\u201d<\/p>\n

Reamintim c\u0103 VPN WireGuard este implementat pe baza unor metode de criptare moderne, ofer\u0103 o performan\u021b\u0103 foarte ridicat\u0103, este simplu de utilizat, lipsit de complica\u021bii \u0219i a demonstrat un istoric de succes \u00een mai multe implement\u0103ri mari, care gestioneaz\u0103 volume mari de trafic. Proiectul este \u00een dezvoltare din 2015, a trecut prin audit \u0219i verificare formal\u0103<\/a><\/noindex> metodele de criptare utilizate. Suportul pentru WireGuard este deja integrat \u00een NetworkManager \u0219i systemd, iar patch-urile pentru nucleu sunt incluse \u00een pachetul de baz\u0103 al distribu\u021biilor Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> \u0219i ALT<\/a><\/noindex>.<\/p>\n

WireGuard folose\u0219te conceptul de rutare pe baza cheilor de criptare, care implic\u0103 asocierea unei chei private fiec\u0103rui interval de re\u021bea \u0219i utilizarea acesteia pentru conectarea cheilor publice. Schimbul de chei publice pentru stabilirea conexiunii se realizeaz\u0103 analogic cu SSH. Pentru negocierea cheilor \u0219i conexiunea f\u0103r\u0103 a lansa un demon separat \u00een spa\u021biul utilizatorului se utilizeaz\u0103 mecanismul Noise_IK din Noise Protocol Framework<\/a><\/noindex>, similar cu \u00eentre\u021binerea authorized_keys \u00een SSH. Transferul de date se realizeaz\u0103 prin encapsularea \u00een pachete UDP. Este acceptat\u0103 schimbarea adresei IP a serverului VPN (roaming) f\u0103r\u0103 \u00eentreruperea conexiunii cu reconectare automat\u0103 a clientului.<\/p>\n

Pentru criptare se folose\u0219te<\/a><\/noindex> fluxul de criptare ChaCha20<\/a><\/noindex> \u0219i algoritmul de autentificare a mesajelor (MAC) Poly1305<\/a><\/noindex>, dezvolta\u021bi de Daniel Bernstein (Daniel J. Bernstein<\/a><\/noindex>), Tanja Lange
\n(Tanja Lange) \u0219i Peter Schwabe (Peter Schwabe). ChaCha20 \u0219i Poly1305 sunt pozi\u021bionate ca fiind alternative mai rapide \u0219i mai sigure la AES-256-CTR \u0219i HMAC, realizarea software-ului permite ob\u021binerea unui timp de execu\u021bie fix f\u0103r\u0103 utilizarea unui suport hardware special. Pentru generarea cheii secrete comune, se utilizeaz\u0103 protocolul Diffie-Hellman pe curbe eliptice \u00een implementare. Curve25519<\/a><\/noindex>, de asemenea, propus de Daniel Bernstein. Algoritmul utilizat pentru hash-uri este BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard. NetBSD \u0441\u0442\u0430\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0438 OpenBSD \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN — wg-keygen \u0438 wgconfig. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (GENERIC) \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u044f\u0432\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92348","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Suportul VPN WireGuard a fost ad\u0103ugat \u00een nucleul NetBSD | ProHoster","description":"Dezvoltatorii proiectului NetBSD au anun\u021bat includerea \u00een nucleul de baz\u0103 NetBSD a driverului wg cu.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u044f\u0434\u0440\u043e NetBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 VPN WireGuard | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T17:42:57+00:00","article:modified_time":"2020-08-25T17:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:10:22","updated":"2022-09-28 01:30:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=92348"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/92348\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=92348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=92348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=92348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}