NetBSD kernel faʻaopoopoina le lagolago mo VPN WireGuard

NetBSD Project Developers lipotia e uiga i le aofia ai o le avetaʻavale wg ma le faʻatinoga o le WireGuard protocol i le autu autu o le NetBSD kernel. NetBSD na avea ma OS lona tolu ina ua maeʻa Linux ma OpenBSD faʻatasi ai ma le lagolago faʻatasi mo WireGuard. O loʻo ofoina atu foʻi tulafono faʻatatau mo le faʻatulagaina o VPN - wg-keygen ma wgconfig. I le faʻaogaina o le fatu (GENERIC), e leʻi faʻagaoioia le avetaʻavale ma e manaʻomia se faʻamatalaga manino o le "pseudo-device wg" i totonu o tulaga.

E le gata i lea, e mafai ona matauina lolomiina se faʻafouga faʻasaʻo i le wireguard-tools 1.0.20200820 package, lea e aofia ai mea faʻaoga-avanoa e pei ole wg ma wg-vave. O le faʻasalalauga fou e saunia ai le IPC mo le lumanaʻi WireGuard lagolago i le FreeBSD operating system. O le faʻailoga faʻapitoa i tulaga eseese ua vaevaeina i faila eseese. Lagolago mo le "reload" poloaiga ua faʻaopoopoina i le systemd unit file, lea e mafai ai ona e faʻatautaia mea e pei o le "systemctl reload wg-quick at wgnet0".

Sei matou faamanatu atu ia te oe o VPN WireGuard o loʻo faʻatinoina i luga o le faʻavaeina o auala faʻaonaponei faʻaonaponei, e maua ai le maualuga maualuga, e faigofie ona faʻaoga, e leai ni faʻalavelave ma faʻamaonia i le tele o faʻasalalauga tetele e faʻatautaia ai le tele o voluma o fefaʻatauaiga. O le poloketi o loʻo atinaʻe talu mai le 2015, ua uma ona suʻeina ma fa'amaoniga aloa'ia auala fa'ailoga fa'aoga. WireGuard lagolago ua uma ona tuʻufaʻatasia i NetworkManager ma systemd, ma faʻapipiʻi fatu o loʻo aofia i faʻasalalauga faavae Debian Le mautonu, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Vaega faaopoopo и ALT.

O lo'o fa'aogaina e WireGuard le manatu o le fa'auigaina o ki fa'ailoga, lea e aofia ai le fa'apipi'iina o se ki patino i feso'ota'iga feso'ota'iga ta'itasi ma fa'aogaina e fusifusia ai ki lautele. O ki lautele e fesuiai e faʻavae se fesoʻotaʻiga i se auala tutusa ma SSH. Ina ia faʻatalanoa ki ma faʻafesoʻotaʻi e aunoa ma le taʻavaleina o se daemon ese i avanoa faʻaoga, o le Noise_IK masini mai Ta'iala Piosaoe tutusa ma le fa'atumauina authorized_keys ile SSH. O faʻamatalaga faʻamatalaga e faʻatinoina e ala i le faʻapipiʻiina i totonu o pusa UDP. E lagolagoina le suia o le tuatusi IP o le VPN server (roaming) e aunoa ma le motusia o le fesoʻotaʻiga ma le reconfiguration otometi kalani.

Mo fa'amatalaga e faʻaaoga stream cipher ChaCha20 ma le fa'amaoni o fe'au algorithm (MAC) Poly1305, na mamanuina e Daniel Bernstein (Daniel J. Bernstein), Tanya Lange
(Tanja Lange) ma Peter Schwabe. ChaCha20 ma Poly1305 o loʻo faʻatulagaina o ni faʻataʻitaʻiga vave ma saogalemu o le AES-256-CTR ma le HMAC, o le faʻaogaina o le polokalama e mafai ai ona ausia se taimi faʻatulagaina e aunoa ma le faʻaogaina o meafaigaluega faʻapitoa. Mo le fa'atupuina o se ki fa'alilolilo fefa'asoaa'i, o le elliptic curve Diffie-Hellman protocol e fa'aaogaina i le fa'atinoga Curve25519, na faatuina foi e Daniel Bernstein. O le algorithm e faʻaaogaina mo le faʻaogaina o le BLAKE2s (RFC7693).

puna: opennet.ru