{"id":101348,"date":"2021-09-20T16:22:35","date_gmt":"2021-09-20T14:22:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale"},"modified":"2021-09-20T16:22:35","modified_gmt":"2021-09-20T14:22:36","slug":"proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","title":{"rendered":"Projekt Headscale rozv\u00edja otvoren\u00fd server pre distribuovan\u00fa VPN sie\u0165 Tailscale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Projekt Headscale vyv\u00edja otvoren\u00fa implement\u00e1ciu serverovej s\u00fa\u010dasti VPN siete Tailscale, ktor\u00e1 umo\u017e\u0148uje vytv\u00e1ra\u0165 VPN siete podobn\u00e9 Tailscale na vlastn\u00fdch zdrojoch, bez viazania sa na extern\u00e9 slu\u017eby. K\u00f3d Headscale je nap\u00edsan\u00fd v Go a je \u0161\u00edren\u00fd pod licenciou BSD. Projekt vedie Juan Font Alonso z Eur\u00f3pskej vesm\u00edrnej agent\u00fary. <\/p>\n

Tailscale umo\u017e\u0148uje spoji\u0165 \u013eubovo\u013en\u00fd po\u010det teritori\u00e1lne rozdelen\u00fdch hostite\u013eov do jednej siete, postavenej na princ\u00edpe mesh siete, v ktorej ka\u017ed\u00fd uzol komunikuje s in\u00fdmi uzlami priamo (P2P) alebo prostredn\u00edctvom susedn\u00fdch uzlov, bez prenosu d\u00e1t cez centralizovan\u00e9 extern\u00e9 servery. VPN<\/a>-poskytovate\u013ea. Podporuje sa spr\u00e1va pr\u00edstupu a tr\u00e1s na z\u00e1klade ACL. Na vytv\u00e1ranie komunika\u010dn\u00fdch kan\u00e1lov v podmienkach pou\u017e\u00edvania prekladate\u013eov adries (NAT) sa poskytuje podpora mechanizmov STUN, ICE a DERP (podobn\u00e9 TURN, ale na b\u00e1ze HTTPS). V pr\u00edpade zablokovania komunika\u010dn\u00e9ho kan\u00e1la medzi ur\u010dit\u00fdmi uzlami m\u00f4\u017ee sie\u0165 prebudova\u0165 smerovanie pre prenos d\u00e1t cez in\u00e9 uzly.

\"Projekt<\/center> <\/p>\n

Od projektu Nebula, ktor\u00fd je tie\u017e ur\u010den\u00fd na vytv\u00e1ranie distribuovan\u00fdch VPN siet\u00ed s mesh smerovan\u00edm, sa Tailscale odli\u0161uje pou\u017eit\u00edm protokolu Wireguard na organizovanie prenosu d\u00e1t medzi uzlami, zatia\u013e \u010do v Nebula sa pou\u017e\u00edvaj\u00fa technol\u00f3gie projektu Tinc, v ktorom sa na \u0161ifrovanie paketov pou\u017e\u00edva algoritmus AES-256-GCM (v Wireguard sa pou\u017e\u00edva \u0161ifrovanie ChaCha20, ktor\u00e9 v testoch ukazuje vy\u0161\u0161iu priepustnos\u0165 a reak\u010dnos\u0165). <\/p>\n

Samostatne sa vyv\u00edja \u010fal\u0161\u00ed podobn\u00fd projekt \u2013 Innernet, v ktorom sa na v\u00fdmenu \u00fadajov medzi uzlami tie\u017e pou\u017e\u00edva protokol Wireguard. Na rozdiel od Tailscale a Nebula sa v Innernet uplat\u0148uje in\u00fd syst\u00e9m delenia pr\u00edstupu, ktor\u00fd nie je zalo\u017een\u00fd na ACL so zav\u00e4zovan\u00edm zna\u010diek k jednotliv\u00fdm uzlom, ale na rozdelen\u00ed podsiet\u00ed a vy\u010dlenen\u00ed r\u00f4znych rozsahov. IP adresy<\/a>, ako v be\u017en\u00fdch internetov\u00fdch sie\u0165ach. Navy\u0161e, namiesto jazyka Go sa v Innernet pou\u017e\u00edva jazyk Rust. Pred tromi d\u0148ami bolo zverejnen\u00e9 aktualizovan\u00e9 vydanie Innernet 1.5 s vylep\u0161enou podporou obch\u00e1dzania NAT. Existuje aj projekt Netmaker, ktor\u00fd umo\u017e\u0148uje sp\u00e1ja\u0165 siete r\u00f4znej topol\u00f3gie pomocou Wireguard, av\u0161ak jeho k\u00f3d je distribuovan\u00fd pod licenciou SSPL (Server Side Public License), ktor\u00e1 nie je otvoren\u00e1 kv\u00f4li diskrimina\u010dn\u00fdm po\u017eiadavk\u00e1m. <\/p>\n

Tailscale sa \u0161\u00edri pomocou modelu Freemium, ktor\u00fd umo\u017e\u0148uje bezplatn\u00e9 pou\u017e\u00edvanie pre jednotlivcov a platen\u00fd pr\u00edstup pre podniky a t\u00edmy. Klientske komponenty Tailscale, s v\u00fdnimkou grafick\u00fdch aplik\u00e1ci\u00ed pre Windows a macOS, sa vyv\u00edjaj\u00fa vo forme otvoren\u00fdch projektov pod licenciou BSD. Serverov\u00fd softv\u00e9r Tailscale, ktor\u00fd zais\u0165uje autentifik\u00e1ciu pri pripojen\u00ed nov\u00fdch klientov, koordinuje spr\u00e1vu k\u013e\u00fa\u010dov a organizuje interakciu medzi uzlami, je proprietary. Projekt Headscale tento nedostatok odstra\u0148uje a pon\u00faka nez\u00e1visl\u00fa otvoren\u00fa implement\u00e1ciu serverov\u00fdch komponentov Tailscale.

\"Projekt<\/center> <\/p>\n

Headscale prev\u00e1dza funkcie v\u00fdmeny otvoren\u00fdch k\u013e\u00fa\u010dov uzlov, ako aj vykon\u00e1va oper\u00e1cie pride\u013eovania IP adries a distrib\u00facie smerovac\u00edch tabuliek medzi uzlami. V s\u00fa\u010dasnej podobe s\u00fa v Headscale implementovan\u00e9 v\u0161etky z\u00e1kladn\u00e9 mo\u017enosti riadiaceho servera, s v\u00fdnimkou podpory MagicDNS a Smart DNS. Konkr\u00e9tne s\u00fa podporovan\u00e9 funkcie registr\u00e1cie uzlov (vr\u00e1tane cez web), prisp\u00f4sobenie siete na prid\u00e1vanie alebo odstra\u0148ovanie uzlov, rozdelenie podsiet\u00ed pomocou priestorov n\u00e1zvov (jedna VPN sie\u0165 m\u00f4\u017ee by\u0165 vytvoren\u00e1 pre viacer\u00fdch pou\u017e\u00edvate\u013eov), organizovanie zdie\u013eania uzlov k podsietiam v r\u00f4znych priestoroch n\u00e1zvov, spr\u00e1va smerovania (vr\u00e1tane priradenia v\u00fdstupn\u00fdch uzlov na pr\u00edstup k vonkaj\u0161iemu svetu), rozdelenie pr\u00edstupu cez ACL a prev\u00e1dzka DNS slu\u017eby.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041a\u043e\u0434 Headscale \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 BSD. \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u0425\u0443\u0430\u043d \u0424\u043e\u043d\u0442 \u0410\u043b\u043e\u043d\u0441\u043e (Juan Font) \u0438\u0437 \u0415\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430. Tailscale \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043d\u0435\u0441\u0451\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u043e\u0434\u043d\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt Headscale vyv\u00edja otvoren\u00fd server pre distribuovan\u00fa VPN sie\u0165 Tailscale | ProHoster","description":"Projekt Headscale vyv\u00edja otvoren\u00fa implement\u00e1ciu serverovej s\u00fa\u010dasti VPN siete Tailscale, ktor\u00e1 umo\u017e\u0148uje vytv\u00e1ra\u0165 podobn\u00e9 VPN siete ako Tailscale na vlastn\u00fdch zdrojoch, bez z\u00e1vislosti na extern\u00fdch slu\u017eb\u00e1ch.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 VPN-\u0441\u0435\u0442\u0438 Tailscale | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Headscale \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VPN-\u0441\u0435\u0442\u0438 Tailscale, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0445\u043e\u0436\u0438\u0435 \u043d\u0430 Tailscale VPN-\u0441\u0435\u0442\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u043d\u0435 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-headscale-razvivaet-otkrytyj-server-dlya-raspredelyonnoj-vpn-seti-tailscale","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-20T14:22:36+00:00","article:modified_time":"2021-09-20T14:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-20 14:23:05","updated":"2026-02-08 20:40:16","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=101348"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101348\/revisions"}],"predecessor-version":[{"id":158033,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101348\/revisions\/158033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/101349"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=101348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=101348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=101348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}