{"id":124728,"date":"2025-05-15T09:05:09","date_gmt":"2025-05-15T07:05:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij"},"modified":"2025-05-15T09:05:09","modified_gmt":"2025-05-15T07:05:09","slug":"proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","title":{"rendered":"Projekt Tor predstavil Onyux, n\u00e1stroj na sie\u0165ov\u00fa izol\u00e1ciu aplik\u00e1ci\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdvoj\u00e1ri projektu Tor predstavili n\u00e1stroj Oniux, ur\u010den\u00fd na n\u00faten\u00e9 smerovanie prev\u00e1dzky jednotliv\u00fdch aplik\u00e1ci\u00ed cez sie\u0165 Tor. Podobne ako predch\u00e1dzaj\u00faci program torsocks, aj Oniux vyu\u017e\u00edva izol\u00e1cie priestorov n\u00e1zvov (network namespace) poskytovan\u00e9 jadrom Linux, namiesto nar\u00fa\u0161ania funkci\u00ed \u0161tandardnej kni\u017enice cez mechanizmus LD_PRELOAD. K\u00f3d n\u00e1stroja je nap\u00edsan\u00fd v jazyku Rust a je distribuovan\u00fd pod licenciami Apache 2.0 a MIT. <\/p>\n

Oniux umo\u017e\u0148uje vytvori\u0165 pre ak\u00fako\u013evek aplik\u00e1ciu izolovan\u00fd kontajner, z ktor\u00e9ho sa prev\u00e1dzka n\u00fatene presmerov\u00e1va len cez sie\u0165 Tor. Na odosielanie prev\u00e1dzky sa vytv\u00e1ra tunel na b\u00e1ze onionmasq, vo vn\u00fatri kontajnera vyzeraj\u00faci ako virtu\u00e1lne sie\u0165ov\u00e9 rozhranie (TUN). Pr\u00edstup k dostupn\u00fdm sie\u0165ov\u00fdm rozhraniam v z\u00e1kladnom prostred\u00ed sa blokuje na \u00farovni izol\u00e1cie sie\u0165ov\u00e9ho stacku v samostatnom priestore n\u00e1zvov. <\/p>\n

V porovnan\u00ed s torsocks nov\u00e1 utilita neobmedzuje len na v\u00fdmenu kni\u017eni\u010dn\u00fdch funkci\u00ed a blokuje mo\u017en\u00e9 kan\u00e1ly \u00faniku (napr\u00edklad, ob\u00eddenie presmerovania cez torsocks je mo\u017en\u00e9 pomocou priameho volania syst\u00e9mov\u00fdch volan\u00ed jadra). Program tie\u017e chr\u00e1ni pred \u00fanikmi sp\u00f4soben\u00fdmi chybami v konfigur\u00e1cii SOCKS-proxy, ktor\u00e1 smeruje prenos do siete Tor. Cenou za pr\u00edsnej\u0161iu izol\u00e1ciu je strata multiplatformnosti \u2014 Oniux m\u00f4\u017ee fungova\u0165 len v syst\u00e9me Linux. <\/p>\n

N\u00e1stroj Oniux je samostatn\u00fd a nevy\u017eaduje na svoju \u010dinnos\u0165 spustenie samostatn\u00e9ho na pozad\u00ed be\u017eiaceho procesu Tor. Interakcia so sie\u0165ou Tor v Oniux je postaven\u00e1 na kni\u017enici vyv\u00edjanej projektom Arti, zatia\u013e \u010do torsocks je zalo\u017een\u00fd na CTor a vyu\u017e\u00edva SOCKS proxy. N\u00e1stroj Oniux m\u00f4\u017ee by\u0165 u\u017eito\u010dn\u00fd pre sp\u00fa\u0161\u0165anie aplik\u00e1ci\u00ed a slu\u017eieb, ktor\u00e9 s\u00fa kritick\u00e9 z h\u013eadiska ochrany s\u00fakromia. <\/p>\n

Pou\u017eitie sa obmedzuje na pridanie volania utility \u201eoniux\u201c pred spusten\u00edm po\u017eadovan\u00e9ho programu. Napr\u00edklad, pre odoslanie po\u017eiadavky cez curl na Tor m\u00f4\u017eete vykona\u0165 pr\u00edkaz \u201eoniux curl URL\u201c, a pre smerovanie ak\u00fdchko\u013evek po\u017eiadaviek cez Tor v r\u00e1mci rel\u00e1cie s pr\u00edkazov\u00fdm interpretorom \u2014 \u201eoniux bash\u201c. Podporuje sa izol\u00e1cia grafick\u00fdch aplik\u00e1ci\u00ed.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Tor \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 Oniux, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor. \u041f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e Oniux \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 torsocks \u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432 \u0438\u043c\u0451\u043d (network namespace), \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u044f\u0434\u0440\u043e\u043c Linux, \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c LD_PRELOAD. \u041a\u043e\u0434 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044f\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-124728","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt Tor predstavil Oniux, utilitu na sie\u0165ov\u00fa izol\u00e1ciu aplik\u00e1ci\u00ed | ProHoster","description":"V\u00fdvoj\u00e1ri projektu Tor predstavili n\u00e1stroj Oniux, ur\u010den\u00fd na n\u00faten\u00e9 smerovanie prev\u00e1dzky jednotliv\u00fdch aplik\u00e1ci\u00ed cez sie\u0165 Tor.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 Tor \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b Oniux, \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Tor \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 Oniux, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0443\u044e \u0434\u043b\u044f \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tor-predstavil-oniux-utilitu-dlya-setevoj-izolyaczii-prilozhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-15T07:05:09+00:00","article:modified_time":"2025-05-15T07:05:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"124728","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:48:57","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:48:57","updated":"2026-01-23 12:48:57","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/124728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=124728"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/124728\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=124728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=124728"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=124728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}