{"id":92348,"date":"2020-08-25T19:42:57","date_gmt":"2020-08-25T17:42:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard"},"modified":"2020-08-25T19:42:57","modified_gmt":"2020-08-25T17:42:57","slug":"v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","title":{"rendered":"Do jadra NetBSD bola pridan\u00e1 podpora VPN WireGuard","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00fdvoj\u00e1ri projektu NetBSD ozn\u00e1mili<\/a><\/noindex> o zaraden\u00ed ovl\u00e1da\u010da wg, ktor\u00fd implementuje protokol WireGuard, do hlavn\u00e9ho jadra NetBSD. NetBSD sa stala tre\u0165ou opera\u010dnou s\u00fastavou po Linuxe a OpenBSD s integrovanou podporou WireGuard. Rovnako s\u00fa uveden\u00e9 sprievodn\u00e9 pr\u00edkazy na nastavenie VPN \u2014 wg-keygen a wgconfig. V predvolenej konfigur\u00e1cii jadra (GENERIC) zatia\u013e nie je ovl\u00e1da\u010d aktivovan\u00fd a vy\u017eaduje jasn\u00e9 uvedenie v nastaveniach \u201epseudo-device wg\u201c.<\/p>\n

Navy\u0161e m\u00f4\u017eeme spomen\u00fa\u0165 publik\u00e1ciu<\/a><\/noindex> opravy aktualiz\u00e1cie bal\u00edka wireguard-tools 1.0.20200820, ktor\u00e1 obsahuje u\u017eito\u010dn\u00e9 n\u00e1stroje pracuj\u00face v u\u017e\u00edvate\u013eskom priestore, ako s\u00fa wg a wg-quick. V novej verzii bola pripraven\u00e1 IPC na nadch\u00e1dzaj\u00facu podporu WireGuard v opera\u010dnej s\u00fastave FreeBSD. Bol uskuto\u010dnen\u00fd rozdelenie k\u00f3du \u0161pecifick\u00e9ho pre r\u00f4zne platformy do r\u00f4znych s\u00faborov. Do jednotkov\u00e9ho s\u00faboru pre systemd bola pridan\u00e1 podpora pr\u00edkazu \u201ereload\u201c, \u010do umo\u017e\u0148uje sp\u00fa\u0161\u0165anie kon\u0161trukci\u00ed typu \u201esystemctl reload wg-quick at wgnet0\u201c.<\/p>\n

Pripom\u00edname, \u017ee VPN WireGuard je implementovan\u00fd na z\u00e1klade modern\u00fdch \u0161ifrovac\u00edch met\u00f3d, zabezpe\u010duje ve\u013emi vysok\u00fd v\u00fdkon, je jednoduch\u00fd na pou\u017e\u00edvanie, zbaven\u00fd komplik\u00e1ci\u00ed a dobre sa osved\u010dil v niektor\u00fdch ve\u013ek\u00fdch nasadeniach spracov\u00e1vaj\u00facich ve\u013ek\u00e9 objemy prev\u00e1dzky. Projekt sa vyv\u00edja od roku 2015, pre\u0161iel auditom a form\u00e1lnou verifik\u00e1ciou<\/a><\/noindex> pou\u017e\u00edvan\u00fdch \u0161ifrovac\u00edch met\u00f3d. Podpora WireGuard je u\u017e integrovan\u00e1 do NetworkManager a systemd, a patche pre jadro s\u00fa s\u00fa\u010das\u0165ou z\u00e1kladn\u00fdch distrib\u00faci\u00ed Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> a ALT<\/a><\/noindex>.<\/p>\n

V WireGuard sa uplat\u0148uje koncepcia smerovania na z\u00e1klade \u0161ifrovac\u00edch k\u013e\u00fa\u010dov, ktor\u00e1 predpoklad\u00e1 priradenie s\u00fakromn\u00e9ho k\u013e\u00fa\u010da k ka\u017ed\u00e9mu sie\u0165ov\u00e9mu rozhraniu a pou\u017eitie na prepojenie verejn\u00fdch k\u013e\u00fa\u010dov. V\u00fdmena verejn\u00fdch k\u013e\u00fa\u010dov na nadviazanie pripojenia sa vykon\u00e1va analogicky k SSH. Na dohodu k\u013e\u00fa\u010dov a pripojenie bez spustenia samostatn\u00e9ho d\u00e9mona v pou\u017e\u00edvate\u013eskom priestore sa pou\u017e\u00edva mechanizmus Noise_IK z Noise Protocol Framework<\/a><\/noindex>, podobn\u00fd udr\u017eiavaniu authorized_keys v SSH. Prenos d\u00e1t sa uskuto\u010d\u0148uje prostredn\u00edctvom enkapsul\u00e1cie do UDP paketov. Podporuje sa zmena IP adresy VPN servera (roaming) bez preru\u0161enia pripojenia s automatickou rekonfigur\u00e1ciou klienta.<\/p>\n

Na \u0161ifrovanie sa pou\u017e\u00edva<\/a><\/noindex> stream cipher ChaCha20<\/a><\/noindex> a algoritmus overovania spr\u00e1v (MAC) Poly1305<\/a><\/noindex>, vyvinut\u00fd Danielom Bernsteinom (Daniel J. Bernstein<\/a><\/noindex>), Tanyou Lange
\n(Tanja Lange) a Peter Schwabe. ChaCha20 a Poly1305 sa prezentuj\u00fa ako r\u00fdchlej\u0161ie a bezpe\u010dnej\u0161ie alternat\u00edvy ku AES-256-CTR a HMAC, pri\u010dom implement\u00e1cia softv\u00e9ru umo\u017e\u0148uje dosiahnu\u0165 st\u00e1ly \u010das vykon\u00e1vania bez potreby \u0161peci\u00e1lnej hardv\u00e9rovej podpory. Na generovanie zdie\u013ean\u00e9ho tajn\u00e9ho k\u013e\u00fa\u010da sa vyu\u017e\u00edva protokol Diffie-Hellman na eliptick\u00fdch krivk\u00e1ch v realiz\u00e1cii Curve25519<\/a><\/noindex>, taktie\u017e navrhnut\u00fd Danielom Bernsteinom. Na hashovanie sa pou\u017e\u00edva algoritmus BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard. NetBSD \u0441\u0442\u0430\u043b\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u041e\u0421 \u043f\u043e\u0441\u043b\u0435 Linux \u0438 OpenBSD \u0441 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 WireGuard. \u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN — wg-keygen \u0438 wgconfig. \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (GENERIC) \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u044f\u0432\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92348","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Podpora VPN WireGuard bola pridan\u00e1 do jadra NetBSD | ProHoster","description":"V\u00fdvoj\u00e1ri projektu NetBSD ozn\u00e1mili, \u017ee do hlavn\u00e9ho jadra NetBSD bol pridan\u00fd ovl\u00e1da\u010d wg.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u044f\u0434\u0440\u043e NetBSD \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 VPN WireGuard | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NetBSD \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 NetBSD \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 wg \u0441.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-yadro-netbsd-dobavlena-podderzhka-vpn-wireguard","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-25T17:42:57+00:00","article:modified_time":"2020-08-25T17:42:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:10:22","updated":"2022-09-28 01:30:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=92348"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/92348\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=92348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=92348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=92348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}