{"id":104097,"date":"2022-05-20T15:36:43","date_gmt":"2022-05-20T13:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp"},"modified":"2022-05-20T15:36:43","modified_gmt":"2022-05-20T13:36:45","slug":"google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","title":{"rendered":"Google zbuloi punimet mbi protokollin e sigurt t\u00eb rrjetit PSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Google shpalli hapjen e specifikimeve dhe implementimit referenc\u00eb t\u00eb protokollit PSP (PSP Security Protocol), i cili p\u00ebrdoret p\u00ebr encryptimin e trafik\u00ebt mes qendrave t\u00eb t\u00eb dh\u00ebnave. Protokolli p\u00ebrdor nj\u00eb arkitektur\u00eb t\u00eb ngjashme me IPsec ESP (Encapsulating Security Payloads) p\u00ebr t\u00eb inkapsuluar trafikun mbi IP, duke ofruar encryptim, kontrollin kriptografik t\u00eb integritetit dhe autentikim t\u00eb burimit. Kodi i implementimit t\u00eb PSP \u00ebsht\u00eb i shkruar n\u00eb gjuh\u00ebn C dhe shp\u00ebrndahen n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n

Ve\u00e7oria e PSP \u00ebsht\u00eb optimizimi i protokollit p\u00ebr t\u00eb acceleruar llogaritjet dhe p\u00ebr t\u00eb reduktuar ngarkes\u00ebn mbi procesorin qendror duke transferuar operacionet e encryptimit dhe decryptimit n\u00eb kartat rrjet (offload). P\u00ebr t\u00eb aplikuar p\u00ebrshpejtimin harduerik k\u00ebrkohet q\u00eb t\u00eb ket\u00eb karta rrjeti speciale, t\u00eb pajtueshme me PSP. P\u00ebr sistemet me karta rrjeti q\u00eb nuk mb\u00ebshtesin PSP, \u00ebsht\u00eb propozuar implementimi softuerik SoftPSP. <\/p>\n

P\u00ebr transportin e t\u00eb dh\u00ebnave p\u00ebrdoret protokolli UDP. Paketa PSP fillon me nj\u00eb header IP, pas t\u00eb cilit vjen nj\u00eb header UDP dhe m\u00eb pas vet\u00eb header PSP me t\u00eb dh\u00ebna p\u00ebr encryptimin dhe autentikimin. M\u00eb pas bashkangjitet p\u00ebrmbajtja e paket\u00ebs origjinale TCP\/UDP, e cila p\u00ebrfundon me nj\u00eb blok p\u00ebrfundimtar PSP me nj\u00eb kontroll sum\u00eb p\u00ebr t\u00eb konfirmuar integritetin. Headeri PSP, si dhe headeri dhe t\u00eb dh\u00ebnat e paket\u00ebs s\u00eb inkapsuluar gjithmon\u00eb jan\u00eb autentikuar p\u00ebr t\u00eb konfirmuar autenticitetin e paket\u00ebs. T\u00eb dh\u00ebnat e paket\u00ebs s\u00eb inkapsuluar mund t\u00eb jen\u00eb t\u00eb encryptuara, duke lejuar mund\u00ebsin\u00eb e aplikimit selektiv t\u00eb encryptimit duke l\u00ebn\u00eb disa pjes\u00eb t\u00eb headerit TCP n\u00eb nj\u00eb form\u00eb t\u00eb hapur (duke ruajtur kontrollin e autenticitetit), p\u00ebr shembull, p\u00ebr t\u00eb lejuar inspektimin e paketave n\u00eb pajisjet rrjet transit.

\"Google<\/center> <\/p>\n

PSP nuk \u00ebsht\u00eb i lidhur me nj\u00eb protokoll t\u00eb caktuar p\u00ebr k\u00ebmbimin e \u00e7el\u00ebsave, ofron disa variante t\u00eb formatit t\u00eb paketave dhe mb\u00ebshtet p\u00ebrdorimin e algoritheve t\u00eb ndryshme kriptografike. P\u00ebr shembull, ofrohet mb\u00ebshtetje p\u00ebr algorin e AES-GCM p\u00ebr encryptim dhe verifikim t\u00eb autenticitetit (autentikim) dhe AES-GMAC p\u00ebr verifikimin e autenticitetit pa encryptimin e t\u00eb dh\u00ebnave t\u00eb drejtp\u00ebrdrejta, p\u00ebr shembull kur t\u00eb dh\u00ebnat nuk p\u00ebrb\u00ebjn\u00eb vler\u00eb, por \u00ebsht\u00eb e nevojshme t\u00eb garantosh q\u00eb ato nuk jan\u00eb manipuluar gjat\u00eb transferimit dhe jan\u00eb ato q\u00eb jan\u00eb d\u00ebrguar fillimisht. <\/p>\n

N\u00eb krahasim me tipiket VPN<\/a>-P\u00ebr protokollet n\u00eb PSP, p\u00ebrdoret enkriptimi n\u00eb nivelin e lidhjeve t\u00eb ve\u00e7anta t\u00eb rrjetit, dhe jo t\u00eb gjith\u00eb kanalit t\u00eb komunikimit; dmth. PSP p\u00ebrdor \u00e7el\u00ebsa enkriptimi t\u00eb ndar\u00eb p\u00ebr lidhje t\u00eb ndryshme UDP dhe TCP t\u00eb tuneluar. Ky qasje ofron mund\u00ebsin\u00eb t\u00eb arrihet nj\u00eb izolim m\u00eb t\u00eb fort\u00eb t\u00eb trafikut nga aplikacione dhe p\u00ebrpunues t\u00eb ndrysh\u00ebm, q\u00eb \u00ebsht\u00eb e r\u00ebnd\u00ebsishme gjat\u00eb ekzekutimit t\u00eb nj\u00eb server<\/a> aplikacionesh dhe sh\u00ebrbimesh t\u00eb p\u00ebrdoruesve t\u00eb ndrysh\u00ebm. <\/p>\n

N\u00eb Google, protokolli PSP p\u00ebrdoret si p\u00ebr mbrojtjen e komunikimeve t\u00eb brendshme, ashtu edhe p\u00ebr mbrojtjen e trafikut t\u00eb klient\u00ebve t\u00eb Google Cloud. Protokolli \u00ebsht\u00eb projektuar fillimisht p\u00ebr t\u00eb punuar n\u00eb m\u00ebnyr\u00eb efikase n\u00eb infrastruktur\u00ebn e nivelit Google dhe duhet t\u00eb siguroj\u00eb p\u00ebrshpejtimin harduerik t\u00eb enkriptimit n\u00eb kushte t\u00eb pranish\u00ebm me miliona lidhje aktive t\u00eb rrjetit dhe krijimin e qindra mij\u00ebra lidhjeve t\u00eb reja n\u00eb sekond\u00eb. <\/p>\n

Dyhet mb\u00ebshtetje p\u00ebr dy modet e pun\u00ebs \u2014 \u00abstateful\u00bb dhe \u00abstateless\u00bb. N\u00eb modin \u00abstateless\u00bb \u00e7el\u00ebsat p\u00ebr enkriptim d\u00ebrgohen p\u00ebr kart\u00ebn rrjet\u00eb n\u00eb descriptorin e paket\u00ebs, nd\u00ebrsa p\u00ebr dekriptimin nxirren nga fusha SPI (Security Parameter Index) e pranishme n\u00eb paket\u00eb duke p\u00ebrdorur \u00e7el\u00ebsin master (256-bit AES, i ruajtur n\u00eb memorie t\u00eb kart\u00ebs rrjet\u00eb dhe i z\u00ebvend\u00ebsuar \u00e7do 24 or\u00eb), q\u00eb lejon ruajtjen e memories s\u00eb kart\u00ebs rrjet\u00eb dhe minimizon informacionin mbi gjendjen e lidhjeve t\u00eb enkriptuara, t\u00eb ruajtur n\u00eb an\u00ebn e pajisjes. N\u00eb modin \u00abstateful\u00bb \u00e7el\u00ebsat p\u00ebr \u00e7do lidhje ruhen n\u00eb kart\u00ebn rrjet\u00eb n\u00eb nj\u00eb tav\u00eb speciale, ashtu si\u00e7 \u00ebsht\u00eb realizuar p\u00ebrshpejtimi harduerik n\u00eb IPsec.

\"Google<\/center> <\/p>\n

PSP ofron nj\u00eb kombinim t\u00eb ve\u00e7antive t\u00eb protokolleve TLS dhe IPsec\/VPN. TLS i p\u00ebrshtatet Google nga ana e mbrojtjes n\u00eb nivelin e lidhjeve t\u00eb ve\u00e7anta, por nuk i ofronte fleksibilitetin e nevojsh\u00ebm p\u00ebr p\u00ebrshpejtim harduerik dhe mb\u00ebshtetje p\u00ebr UDP. IPsec siguronte pavar\u00ebsi nga protokollet dhe mb\u00ebshteste mir\u00eb p\u00ebrshpejtimin harduerik, por nuk mb\u00ebshteste lidhjen e \u00e7el\u00ebsave me lidhje t\u00eb ve\u00e7anta, ishte i p\u00ebrshtatur vet\u00ebm p\u00ebr nj\u00eb num\u00ebr t\u00eb vog\u00ebl tunelesh t\u00eb krijuara dhe kishte probleme me p\u00ebrmasimin e p\u00ebrshpejtimit harduerik p\u00ebr shkak t\u00eb ruajtjes s\u00eb gjendjes s\u00eb plot\u00eb t\u00eb enkriptimit n\u00eb tabela q\u00eb jan\u00eb ruajtur n\u00eb memorien e kart\u00ebs s\u00eb rrjetit (p.sh. p\u00ebr p\u00ebrpunimin e 10 milion lidhjeve k\u00ebrkohen 5 GB memorje). <\/p>\n

N\u00eb rastin e PSP, informacioni mbi gjendjen e enkriptimit (\u00e7el\u00ebsat, vektor\u00ebt e inicializimit, numrat rendor\u00eb, etj.) mund t\u00eb transmetohet n\u00eb deshifruesin TX t\u00eb paket\u00ebs ose n\u00eb form\u00ebn e nj\u00eb treguesi n\u00eb memorien e sistemit host, pa z\u00ebn\u00eb memorien e kart\u00ebs rrjet\u00eb. Sipas t\u00eb dh\u00ebnave t\u00eb Google, m\u00eb par\u00eb, enkriptimi i trafik\u00ebve RPC n\u00eb infrastruktur\u00ebn e kompanis\u00eb konsumonte rreth 0.7% t\u00eb kapacitetit t\u00eb llogaritjes dhe nj\u00eb volum t\u00eb madh memorien. Zbatimi i PSP-s\u00eb p\u00ebrmes t\u00ebrheqjes s\u00eb mjeteve t\u00eb p\u00ebrshpejtimit harduerik ka lejuar uljen e k\u00ebtij treguesi n\u00eb 0.2%.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 IPsec ESP (Encapsulating Security Payloads) \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 \u0438\u043d\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u043e\u0432\u0435\u0440\u0445 IP, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430. \u041a\u043e\u0434 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 PSP \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104098,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104097","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google hapi punimet q\u00eb lidhen me protokollin e sigurt t\u00eb rrjetit PSP | ProHoster","description":"Kompania Google shpalli hapjen e specifikimeve dhe implementimit referues t\u00eb protokollit PSP (Protokolli i Siguris\u00eb PSP), i aplikuar p\u00ebr enkriptimin e trafik\u00ebve midis qendrave t\u00eb t\u00eb dh\u00ebnave.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u0442\u043a\u0440\u044b\u043b \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c PSP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 PSP (PSP Security Protocol), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-otkryl-narabotki-svyazannye-s-zashhishhyonnym-setevym-protokolom-psp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-20T13:36:45+00:00","article:modified_time":"2022-05-20T13:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:25:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-20 13:36:51","updated":"2026-02-09 22:25:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=104097"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104097\/revisions"}],"predecessor-version":[{"id":159990,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/104097\/revisions\/159990"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/104098"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=104097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=104097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=104097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}