{"id":104097,"date":"2022-05-20T15:36:43","date_gmt":"2022-05-20T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp"},"modified":"2022-05-20T15:36:43","modified_gmt":"2022-05-20T13:36:45","slug":"google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","title":{"rendered":"Google je objavil raziskave, povezane z varnim omre\u017enim protokolom PSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dru\u017eba Google je napovedala odprtje specifikacij in referen\u010dne implementacije protokola PSP (PSP Security Protocol), ki se uporablja za \u0161ifriranje prometa med podatkovnimi centri. Protokol uporablja arhitekturo za encapsulacijo prometa, podobno IPsec ESP (Encapsulating Security Payloads), ki zagotavlja \u0161ifriranje, kriptografsko preverjanje celovitosti in avtentikacijo izvora. Koda za implementacijo PSP je napisana v jeziku C in je na voljo pod licenco Apache 2.0. <\/p>\n

Zna\u010dilnost PSP je optimizacija protokola za pospe\u0161itev izra\u010dunov in zmanj\u0161anje obremenitve centralne enote s prenosom operacij \u0161ifriranja in de\u0161ifriranja na strani omre\u017enih kartic (offload). Za uporabo strojnega pospe\u0161evanja je potrebno imeti specializirane omre\u017ene kartice, zdru\u017eljive s PSP. Za sisteme z omre\u017enimi karticami, ki ne podpirajo PSP, je na voljo programska implementacija SoftPSP. <\/p>\n

Za prenos podatkov se uporablja protokol UDP. Paket PSP se za\u010dne z IP glavo, za katero sledi UDP glava in nato lastna PSP glava z informacijami o \u0161ifriranju in avtentikaciji. Nato se pripne vsebina izvornega TCP\/UDP paketa, ki se kon\u010da s kon\u010dnim blokom PSP s preverjanjem vsote za potrditev celovitosti. PSP glava, kot tudi glava in podatki incapsuliranega paketa so vedno avtentificirani za potrditev avtenti\u010dnosti paketa. Podatki incapsuliranega paketa so lahko \u0161ifrirani, pri \u010demer je dovoljena mo\u017enost izbirne uporabe \u0161ifriranja z pustitvijo dela TCP glave v odprti obliki (ob ohranitvi preverjanja avtenti\u010dnosti), na primer, za omogo\u010danje in\u0161pekcije paketov na tranzitni omre\u017eni opremi.

\"Google<\/center> <\/p>\n

PSP se ne vezuje za odre\u0111eni protokol razmene klju\u010deva, ve\u0107 nudi nekoliko opcija formata paketa i podr\u017eava kori\u0161\u0107enje razli\u010ditih kriptografskih algoritama. Na primer, podr\u017eava algoritam AES-GCM za enkripciju i autentifikaciju, kao i AES-GMAC za autentifikaciju bez enkripcije direktnih podataka, na primer kada podaci nemaju vrednost, ali je potrebna garancija da nisu izmenjeni tokom prenosa i da su zaista oni koji su prvobitno poslati. <\/p>\n

Za razliku od tipi\u010dnih VPN<\/a>-protokola, PSP primenjuje enkripciju na nivou pojedina\u010dnih mre\u017enih konekcija, a ne celog komunikacionog kanala, tj. PSP koristi posebne klju\u010deve enkripcije za razli\u010dite tunelovane UDP i TCP konekcije. Ovakav pristup omogu\u0107ava stro\u017eu izolaciju saobra\u0107aja izme\u0111u razli\u010ditih aplikacija i procesora, \u0161to je relevantno kada se na jednom stre\u017enikom<\/a> aplikacijama i servisima nalaze razli\u010diti korisnici. <\/p>\n

U Google-u, protokol PSP se koristi kako za za\u0161titu sopstvenih internih komunikacija, tako i za za\u0161titu saobra\u0107aja klijenata Google Cloud-a. Protokol je prvobitno dizajniran za efikasan rad u infrastrukturnim uslovima na nivou Google-a i treba da obezbedi hardversko ubrzanje enkripcije u okru\u017eenju sa milionima aktivnih mre\u017enih konekcija i postavljanjem stotina hiljada novih konekcija svake sekunde. <\/p>\n

\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0432\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u044b — «stateful» \u0438 «stateless». \u0412 \u0440\u0435\u0436\u0438\u043c\u0435 «stateless» \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435 \u0432 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u0435 \u043f\u0430\u043a\u0435\u0442\u0430, \u0430 \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u0438\u0437 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 \u043f\u043e\u043b\u044f SPI (Security Parameter Index) \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u0430\u0441\u0442\u0435\u0440-\u043a\u043b\u044e\u0447\u0430 (256-bit AES, \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u044b \u0438 \u0437\u0430\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u0436\u0434\u044b\u0435 24 \u0447\u0430\u0441\u0430), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u044b \u0438 \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u0443\u044e \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u0440\u0435\u0436\u0438\u043c\u0435 «stateful» \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435, \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0442\u0435\u043c \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u0432 IPsec.

\"Google<\/center> <\/p>\n

PSP ponuja edinstveno kombinacijo mo\u017enosti protokolov TLS in IPsec\/VPN. TLS je bil primeren za Google z vidika za\u0161\u010dite na ravni posameznih povezav, a ni zadovoljil zaradi pomanjkanja prilagodljivosti za strojno pospe\u0161evanje in pomanjkanja podpore za UDP. IPsec je zagotavljal neodvisnost od protokolov in dobro podpiral strojno pospe\u0161evanje, vendar ni podpiral vezave klju\u010dev na posamezne povezave, bil je zasnovan le za omejeno \u0161tevilo ustvarjenih tunelov, njegovo skaliranje strojnega pospe\u0161evanja pa je imelo te\u017eave zaradi shranjevanja celotnega stanja \u0161ifriranja v tabelah, ki so gostovale v pomnilniku mre\u017ene kartice (na primer, za obdelavo 10 milijonov povezav je potrebno 5 GB pomnilnika). <\/p>\n

V primeru PSP se informacije o stanju \u0161ifriranja (klju\u010dev, vektorskih inicializacij, zaporednih \u0161tevilk itd.) lahko prena\u0161ajo v TX-deskriptorju paketa ali v obliki kazalca na pomnilnik gostiteljske sistema, ne da bi zasedale pomnilnik mre\u017ene kartice. Po podatkih Googla se je prej za \u0161ifriranje RPC-prometa v infrastrukturi podjetja porabilo pribli\u017eno 0.7% ra\u010dunalni\u0161ke mo\u010di in obse\u017eno koli\u010dino pomnilnika. Uvedba PSP z vklju\u010ditvijo strojnega pospe\u0161evanja je omogo\u010dila zmanj\u0161anje tega dele\u017ea na 0.2%.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 IPsec ESP (Encapsulating Security Payloads) \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 \u0438\u043d\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 IP, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u041a\u043e\u0434 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 PSP \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google je odprl dose\u017eke, povezane z za\u0161\u010ditenim omre\u017enim protokolom PSP | ProHoster","description":"Podjetje Google je napovedalo odpiranje specifikacij in referen\u010dne implementacije protokola PSP (PSP Security Protocol), ki se uporablja za \u0161ifriranje prometa med podatkovnimi centri.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c PSP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-20T13:36:45+00:00","article:modified_time":"2022-05-20T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-20 13:36:51","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/104097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=104097"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/104097\/revisions"}],"predecessor-version":[{"id":159990,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/104097\/revisions\/159990"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/104098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=104097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=104097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=104097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}