{"id":100995,"date":"2021-08-12T10:22:39","date_gmt":"2021-08-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway"},"modified":"2021-08-12T10:22:39","modified_gmt":"2021-08-12T08:22:39","slug":"kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","title":{"rendered":"Spolo\u010dnos\u0165 ExpressVPN spr\u00edstupnila v\u00fdvojov\u00e9 pr\u00e1ce s\u00favisiace s VPN protokolom Lightway.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spolo\u010dnos\u0165 ExpressVPN ozn\u00e1mila otvorenie zdrojov\u00fdch k\u00f3dov implement\u00e1cie protokolu Lightway, vyvinut\u00e9ho na dosiahnutie minim\u00e1lneho \u010dasu pripojenia pri zachovan\u00ed vysokej \u00farovne bezpe\u010dnosti a spo\u013eahlivosti. K\u00f3d je nap\u00edsan\u00fd v jazyku C a distribuuje sa pod licenciou GPLv2. Implementation je ve\u013emi kompaktn\u00e1 a zmestila sa do dvoch tis\u00edc riadkov k\u00f3du. Je zabezpe\u010den\u00e1 podpora platforiem Linux, Windows, macOS, iOS, Android, routerov (Asus, Netgear, Linksys) a prehliada\u010dov. Na zostavenie je potrebn\u00e1 aplik\u00e1cia build syst\u00e9mov Earthly a Ceedling. Implement\u00e1cia je form\u00e1tovan\u00e1 ako kni\u017enica, ktor\u00fa je mo\u017en\u00e9 vyu\u017ei\u0165 na integr\u00e1ciu funkci\u00ed klienta a servera. VPN<\/a> do svojich aplik\u00e1ci\u00ed. <\/p>\n

V k\u00f3de s\u00fa zapojen\u00e9 overen\u00e9 kryptografick\u00e9 funkcie poskytovan\u00e9 kni\u017enicou wolfSSL, ktor\u00e1 sa u\u017e pou\u017e\u00edva v rie\u0161eniach, ktor\u00e9 z\u00edskali certifik\u00e1t FIPS 140-2. V \u0161tandardnom re\u017eime protokol pou\u017e\u00edva UDP na prenos d\u00e1t a DTLS na vytvorenie \u0161ifrovan\u00e9ho komunika\u010dn\u00e9ho kan\u00e1la. Ako mo\u017enos\u0165 na zabezpe\u010denie funk\u010dnosti v nespo\u013eahliv\u00fdch alebo obmedzuj\u00facich UDP sie\u0165ach, serverom<\/a> sa poskytuje spo\u013eahlivej\u0161\u00ed, ale pomal\u0161\u00ed pr\u00fadov\u00fd re\u017eim, ktor\u00fd umo\u017e\u0148uje pren\u00e1\u0161a\u0165 d\u00e1ta prostredn\u00edctvom TCP a TLSv1.3. <\/p>\n

Testy vykonan\u00e9 spolo\u010dnos\u0165ou ExpressVPN uk\u00e1zali, \u017ee v porovnan\u00ed so star\u00fdmi protokolmi (ExpressVPN podporuje L2TP\/IPSec, OpenVPN, IKEv2, PPTP, WireGuard a SSTP, ale nie je podrobne uveden\u00e9 s \u010d\u00edm presne bolo porovn\u00e1van\u00e9), prechod na Lightway umo\u017enil skr\u00e1ti\u0165 \u010das pripojenia v priemere 2,5-kr\u00e1t (v viac ako polovici pr\u00edpadov je pripojenie vytvoren\u00e9 za menej ako sekundu). Nov\u00fd protokol tie\u017e umo\u017enil zn\u00ed\u017ei\u0165 po\u010det preru\u0161en\u00fdch pripojen\u00ed v nespo\u013eahliv\u00fdch mobiln\u00fdch sie\u0165ach, ktor\u00e9 maj\u00fa probl\u00e9my s kvalitou spojenia, o 40%. <\/p>\n

Rozvoj referen\u010dnej implement\u00e1cie protokolu bude pokra\u010dova\u0165 na GitHub s poskytnut\u00edm mo\u017enosti \u00fa\u010dasti v v\u00fdvoji z\u00e1stupcov komunitou (na pren\u00e1\u0161anie zmien je potrebn\u00e9 podp\u00edsa\u0165 dohodu CLA o prevode vlastn\u00edckych pr\u00e1v na k\u00f3d). K spolupr\u00e1ci s\u00fa poz\u00fdvan\u00ed aj in\u00ed VPN poskytovatelia, ktor\u00ed m\u00f4\u017eu bez obmedzen\u00ed pou\u017e\u00edva\u0165 navrhovan\u00fd protokol. <\/p>\n

Bezpe\u010dnos\u0165 implement\u00e1cie bola potvrden\u00e1 v\u00fdsledkom nez\u00e1visl\u00e9ho auditu, ktor\u00fd vykonala spolo\u010dnos\u0165 Cure53, ktor\u00e1 v minulosti zrealizovala audit NTPsec, SecureDrop, Cryptocat, F-Droid a Dovecot. Audit sa zameral na overenie zdrojov\u00fdch k\u00f3dov a zah\u0155\u0148al vykonanie testov na odha\u013eovanie mo\u017en\u00fdch zranite\u013enost\u00ed (ot\u00e1zky t\u00fdkaj\u00face sa kryptografie neboli posudzovan\u00e9). Celkovo bola kvalita k\u00f3du ohodnoten\u00e1 ako vysok\u00e1, no napriek tomu audit odhalil tri zranite\u013enosti, ktor\u00e9 m\u00f4\u017eu vies\u0165 k odmietnutiu slu\u017eby, a jednu zranite\u013enos\u0165, ktor\u00e1 umo\u017e\u0148uje vyu\u017ei\u0165 protokol ako zosil\u0148ova\u010d prenosu pri DDoS \u00fatokoch. Uveden\u00e9 probl\u00e9my u\u017e boli odstr\u00e1nen\u00e9 a navrhnut\u00e9 pripomienky na zlep\u0161enie k\u00f3du boli zoh\u013eadnen\u00e9. Po\u010das auditu sa tie\u017e venovala pozornos\u0165 zn\u00e1mym zranite\u013enostiam a probl\u00e9mom v zapojen\u00fdch extern\u00fdch komponentoch, ako s\u00fa libdnet, WolfSSL, Unity, Libuv a lua-crypt. V z\u00e1sade s\u00fa probl\u00e9my nepodstatn\u00e9, okrem MITM v WolfSSL (CVE-2021-3336).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Lightway, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u0430\u044f \u0438 \u0443\u043c\u0435\u0441\u0442\u0438\u043b\u0430\u0441\u044c \u0432 \u0434\u0432\u0435 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430. \u0417\u0430\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux, Windows, macOS, iOS, Android, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 (Asus, Netgear, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spolo\u010dnos\u0165 ExpressVPN spr\u00edstupnila v\u00fdvoj s\u00favisiaci s VPN protokolom Lightway | ProHoster","description":"Spolo\u010dnos\u0165 ExpressVPN ozn\u00e1mila otvorenie zdrojov\u00fdch k\u00f3dov implement\u00e1cie protokolu Lightway, vyvinut\u00e9ho na dosiahnutie minim\u00e1lneho \u010dasu na nadviazanie spojenia pri zachovan\u00ed vysok\u00e9ho stup\u0148a bezpe\u010dnosti.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 VPN-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c Lightway | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Lightway, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-12T08:22:39+00:00","article:modified_time":"2021-08-12T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100995","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-12 08:43:20","updated":"2026-02-09 21:46:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=100995"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100995\/revisions"}],"predecessor-version":[{"id":160297,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/100995\/revisions\/160297"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=100995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=100995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=100995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}