{"id":76048,"date":"2020-03-30T19:42:06","date_gmt":"2020-03-30T17:42:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-vpn-wireguard-1-0-0"},"modified":"2020-03-30T19:42:06","modified_gmt":"2020-03-30T17:42:06","slug":"dostupen-vpn-wireguard-1-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/dostupen-vpn-wireguard-1-0-0","title":{"rendered":"Na voljo je VPN WireGuard 1.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d<\/a><\/noindex> zna\u010dajni izdanje VPN WireGuard 1.0.0<\/a><\/noindex>, koje je ozna\u010dilo isporuku komponenti WireGuard u glavnom delu jezgra Linux 5.6<\/a><\/noindex> i stabilizaciju razvoja. Uklju\u010den u sastav jezgra Linux kod pro\u0161ao je<\/a><\/noindex> dodatni audit bezbednosti, koji je sprovela nezavisna firma specijalizovana za sli\u010dne provere. Audit nije otkrio nikakve probleme.<\/p>\n

Budu\u0107i da se WireGuard sada razvija u glavnom sastavu jezgra Linux, pripremljen je repozitorijum wireguard-linux-compat.git<\/a><\/noindex>. Repozitorijum uklju\u010duje backportovani kod WireGuard i sloj compat.h za obezbe\u0111ivanje kompatibilnosti sa starim jezgrima. Nagla\u0161ava se da \u0107e dokle god postoji mogu\u0107nost od strane programera i potreba korisnika, odvojena verzija patch-eva biti podr\u017eana u funkcionalnom obliku. U trenutnom obliku odvojena verzija WireGuard mo\u017ee se koristiti sa jezgrima iz Ubuntu 20.04<\/a><\/noindex> in Debian 10 \u00abBuster\u00bb<\/a><\/noindex>, kao i dostupna u obliku patch-eva za jezgra Linux 5.4<\/a><\/noindex> in 5.5<\/a><\/noindex>. Distribucije koje koriste najnovija jezgra, kao \u0161to su Arch, Gentoo i
\nFedora 32, dobijaju mogu\u0107nost kori\u0161\u0107enja WireGuard zajedno sa a\u017euriranjem jezgra 5.6.<\/p>\n

Glavni proces razvoja sada se odvija u repozitorijumu wireguard-linux.git<\/a><\/noindex>, koji uklju\u010duje potpuno drvo jezgra Linux sa izmenama iz projekta Wireguard. Patch-evi iz ovog repozitorijuma \u0107e biti revidirani za uklju\u010divanje u glavno jezgro i redovno preba\u010deni u grane net\/net-next. Razvoj korisni\u010dkih alata i skripti, kao \u0161to su wg i wg-quick, vodi se u repozitorijumu wireguard-tools.git<\/a><\/noindex>, koji se mo\u017ee koristiti za kreiranje paketa u distribucijama.<\/p>\n

Ponovno opozarjamo, da VPN WireGuard temelji na sodobnih metodah \u0161ifriranja, zagotavlja zelo visoko zmogljivost, enostaven je za uporabo, brez zapletov in se je dobro izkazal v \u0161tevilnih velikih vpeljavah, ki obdelujejo velike koli\u010dine prometa. Projekt se razvija od leta 2015, opravil je revizijo in formalno verifikacijo<\/a><\/noindex> uporabljenih metod \u0161ifriranja. Podpora WireGuard je \u017ee integrirana v NetworkManager in systemd, popravki za jedro pa so vklju\u010deni v osnovno sestavo distribucij Debian Unstable<\/a><\/noindex>, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph<\/a><\/noindex> in ALT<\/a><\/noindex>.<\/p>\n

V WireGuard se uporablja koncept usmerjanja po \u0161ifrirnih klju\u010dih, ki predvideva vezavo zaklenjenega klju\u010da na vsak omre\u017eni vmesnik in uporabo za povezovanje odprtih klju\u010dev. Izmenjava odprtih klju\u010dev za vzpostavitev povezave poteka po analogiji z SSH. Za usklajevanje klju\u010dev in povezovanje brez zagonitve lo\u010denega demona v uporabni\u0161kem prostoru se uporablja mehanizem Noise_IK iz Noise Protocol Framework<\/a><\/noindex>, podobno kot vzdr\u017eevanje authorized_keys v SSH. Prenos podatkov poteka prek inkapsulacije v UDP pakete. Podprta je menjava IP-naslova VPN stre\u017enika (roaming) brez prekinitev povezave s samodejnim ponastavitvijo odjemalca.<\/p>\n

Za \u0161ifriranje koristi se<\/a><\/noindex> tokovni \u0161ifrirnik ChaCha20<\/a><\/noindex> in algoritem za avtorizacijo sporo\u010dil (MAC) Poly1305<\/a><\/noindex>, razvit s strani Daniela Bernstein-a (Daniel J. Bernstein<\/a><\/noindex>), Tanje Lange
\n(Tanja Lange) in Peterja Schwabe-a (Peter Schwabe). ChaCha20 in Poly1305 sta pozicionirana kot hitrej\u0161a in varnej\u0161a alternativa AES-256-CTR in HMAC, programska izvedba katerih omogo\u010da dosego fiksnega \u010dasa izvajanja brez posebne strojne podpore. Za generiranje skupnega tajnega klju\u010da se uporablja protokol Diffie-Hellman na elipti\u010dnih krivuljah v izvedbi Curve25519<\/a><\/noindex>, kot ga je predlagal Daniel Bernstein. Za hashanje se uporablja algoritem BLAKE2s (RFC7693)<\/a><\/noindex>. <\/p>\n

Sa starom testiranja<\/a><\/noindex> WireGuard je pokazal 3,9-krat vi\u0161jo propustnost in 3,8-krat vi\u0161jo odzivnost v primerjavi z OpenVPN (256-bit AES s HMAC-SHA2-256). V primerjavi z IPsec (256-bit ChaCha20+Poly1305 in AES-256-GCM-128) WireGuard bele\u017ei rahlo prednost v zmogljivosti (13-18%) in zni\u017eanje zakasnitve (21-23%). Rezultati testiranja, objavljeni na spletnem mestu projekta, zajemajo staro lo\u010deno razli\u010dico WireGuard in so ozna\u010deni kot nezadostno kakovostni. Od takrat so bili koda WireGuard in IPsec dodatno optimizirani in trenutno delujeta hitreje. Obse\u017enej\u0161e testiranje, ki bi pokrivalo integrirano razli\u010dico jedra, \u0161e ni bilo izvedeno. Kljub temu se opa\u017ea, da WireGuard v nekaterih situacijah \u0161e vedno premaguje IPsec zahvaljujo\u010d ve\u010dnadr\u017enosti, medtem ko OpenVPN ostaja zelo po\u010dasen.<\/p>\n

\"Na<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard 1.0.0, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0441\u043e\u0431\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 WireGuard \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux 5.6 \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u0412\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u044f\u0434\u0440\u0430 Linux \u043a\u043e\u0434 \u043f\u0440\u043e\u0448\u0451\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u0445. \u0410\u0443\u0434\u0438\u0442 \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c. \u0422\u0430\u043a \u043a\u0430\u043a WireGuard \u0442\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u044f\u0434\u0440\u0430 Linux, \u0434\u043b\u044f \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":76049,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Na voljo je VPN WireGuard 1.0.0 | ProHoster","description":"Predstavljen je ikoni\u010dni izdaj VPN WireGuard.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/dostupen-vpn-wireguard-1-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d VPN WireGuard 1.0.0 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u043d\u0430\u043a\u043e\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a VPN WireGuard.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/dostupen-vpn-wireguard-1-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-30T17:42:06+00:00","article:modified_time":"2020-03-30T17:42:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76048","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:44:27","updated":"2022-10-01 21:43:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/76048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=76048"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/76048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/76049"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=76048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=76048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=76048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}