N\u00eb struktur\u00ebn e kodit t\u00eb FreeBSD jan\u00eb pranuar ndryshime me nj\u00eb realizim t\u00eb ri t\u00eb VPN WireGuard, i bazuar n\u00eb kodin e modulit t\u00eb b\u00ebrtham\u00ebs, i p\u00ebrgatitur s\u00eb bashku nga ekipet kryesore t\u00eb zhvilluesve t\u00eb FreeBSD dhe WireGuard me pjes\u00ebmarrjen e Jason Donenfeld, autorit t\u00eb VPN WireGuard, dhe John Baldwin, nj\u00eb zhvillues i njohur i GDB dhe FreeBSD, i cili n\u00eb fillim t\u00eb viteve 2000 implementoi mb\u00ebshtetje p\u00ebr SMP dhe NUMA n\u00eb b\u00ebrtham\u00ebn e FreeBSD. Pas miratimit t\u00eb driverit n\u00eb p\u00ebrb\u00ebrjen e FreeBSD (sys\/dev\/wg), zhvillimi dhe mb\u00ebshtetje do t\u00eb kryhen tani n\u00eb depot e FreeBSD. <\/p>\n
Para miratimit t\u00eb kodit, n\u00ebn mb\u00ebshtetje t\u00eb organizat\u00ebs FreeBSD Foundation, \u00ebsht\u00eb kryer nj\u00eb rishikim i plot\u00eb i ndryshimeve, gjat\u00eb t\u00eb cilit u analizua gjithashtu bashk\u00ebveprimi i driverit me n\u00ebn-sistemat e tjera t\u00eb b\u00ebrtham\u00ebs dhe u vler\u00ebsua mund\u00ebsia e p\u00ebrdorimit t\u00eb primitiveve kriptografike t\u00eb ofruara nga b\u00ebrthama. <\/p>\n
P\u00ebr t\u00eb p\u00ebrdorur algoritmet kriptografike t\u00eb nevojshme p\u00ebr driverin, \u00ebsht\u00eb b\u00ebr\u00eb zgjerimi i API t\u00eb n\u00ebn-sistemit kriptografik t\u00eb b\u00ebrtham\u00ebs FreeBSD, ku \u00ebsht\u00eb shtuar nj\u00eb mb\u00ebshtetje q\u00eb lejon p\u00ebrdorimin e algoritmeve q\u00eb nuk mb\u00ebshteten n\u00eb FreeBSD p\u00ebrmes API standard t\u00eb kriptografis\u00eb, duke p\u00ebrdorur realizimin e algoritmeve t\u00eb nevojsh\u00ebm nga biblioteka libsodium. Nga algoritmet e nd\u00ebrtuara n\u00eb driver, \u00ebsht\u00eb l\u00ebn\u00eb vet\u00ebm kodi p\u00ebr llogaritjen e hash-\u00ebve Blake2, p\u00ebr shkak se realizimi i ofruar n\u00eb FreeBSD i k\u00ebtij algoritmi \u00ebsht\u00eb lidhur me nj\u00eb madh\u00ebsi t\u00eb fiksuar hash-i. <\/p>\n
P\u00ebr m\u00eb tep\u00ebr, gjat\u00eb procesit t\u00eb rishikimit \u00ebsht\u00eb kryer optimizimi i kodit, q\u00eb ka lejuar rritjen e efikasitetit t\u00eb shp\u00ebrndarjes s\u00eb ngarkes\u00ebs n\u00eb CPU me shum\u00eb b\u00ebrthama (\u00ebsht\u00eb siguruar nj\u00eb balancim i barabart\u00eb i detyrave t\u00eb enkriptimit dhe dekriptimit t\u00eb paketave n\u00eb b\u00ebrthamat e CPU). Si rezultat, kostot e procesimit t\u00eb pakot jan\u00eb afruar me realizimin e driverit p\u00ebr Linux. N\u00eb kod \u00ebsht\u00eb siguruar gjithashtu mund\u00ebsia e p\u00ebrdorimit t\u00eb driverit ossl p\u00ebr t\u00eb p\u00ebrshpejtuar operacionet e enkriptimit. <\/p>\n
N\u00eb kund\u00ebrshtim me p\u00ebrpjekjen e kaluar p\u00ebr integrimin e WireGuard n\u00eb FreeBSD, n\u00eb realizimin e ri \u00ebsht\u00eb p\u00ebrdorur mjeti standard wg, e jo versioni i modifikuar ifconfig, \u00e7ka ka lejuar unifikimin e konfigurimit n\u00eb Linux dhe FreeBSD. Mjeti wg, si edhe driveri, \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb struktur\u00ebn e kodit t\u00eb FreeBSD, \u00e7ka u b\u00eb e mundur fal\u00eb ndryshimit t\u00eb licenc\u00ebs s\u00eb kodit wg (kode tani \u00ebsht\u00eb n\u00eb dispozicion n\u00ebn licencat MIT dhe GPL). P\u00ebrpjekja e kaluar p\u00ebr t\u00eb p\u00ebrfshir\u00eb WireGuard n\u00eb FreeBSD u b\u00eb n\u00eb vitin 2020, por p\u00ebrfundoi me nj\u00eb skandal, n\u00eb rezultatin e t\u00eb cilit kodi i shtuar u hoq p\u00ebr shkak t\u00eb cil\u00ebsis\u00eb s\u00eb ul\u00ebt, pun\u00ebs s\u00eb pakujdesshme me bufferat, p\u00ebrdorimit t\u00eb pllakave n\u00eb vend t\u00eb kontrolleve, implementimit t\u00eb paplot\u00eb t\u00eb protokollit dhe shkeljes s\u00eb licenc\u00ebs GPL. <\/p>\n
Kujtojm\u00eb se VPN<\/a> WireGuard \u00ebsht\u00eb realizuar mbi baza t\u00eb metodave moderne t\u00eb enkriptimit, ofron nj\u00eb performanc\u00eb shum\u00eb t\u00eb lart\u00eb, \u00ebsht\u00eb i leht\u00eb p\u00ebr t\u2019u p\u00ebrdorur, i thjeshtuar dhe ka treguar rezultate t\u00eb mira n\u00eb disa implementime t\u00eb m\u00ebdha q\u00eb p\u00ebrpunojn\u00eb sasi t\u00eb m\u00ebdha t\u00eb trafikut. Projekti ka filluar zhvillimin n\u00eb vitin 2015, ka kaluar nj\u00eb audit dhe nj\u00eb verifikim formal t\u00eb metodave t\u00eb enkriptimit q\u00eb p\u00ebrdoren. N\u00eb WireGuard zbatohet koncepti i ruterit n\u00ebp\u00ebrmjet \u00e7el\u00ebsit t\u00eb enkriptimit, i cili parashikon lidhjen e \u00e7do interfeci rrjeti me nj\u00eb \u00e7el\u00ebs t\u00eb mbyllur dhe p\u00ebrdorimin e tij p\u00ebr lidhjen e \u00e7el\u00ebsave t\u00eb hapur. <\/p>\n Arsimi i \u00e7el\u00ebsve t\u00eb hapur p\u00ebr vendosjen e lidhjes kryhet n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me SSH. P\u00ebr pajtimin e \u00e7el\u00ebsave dhe lidhjen pa nisjen e nj\u00eb demoni t\u00eb ve\u00e7ant\u00eb n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit p\u00ebrdoret mekanizmi Noise_IK nga Noise Protocol Framework, e ngjashme me mbajtjen e authorized_keys n\u00eb SSH. Transferimi i t\u00eb dh\u00ebnave b\u00ebhet p\u00ebrmes inkapsulimit n\u00eb paketa UDP. Ndryshimi i mb\u00ebshtetet. adresat IP<\/a> VPN-server (roaming) pa nd\u00ebrprerje t\u00eb lidhjes me rikonfigurim automatik t\u00eb klientit. <\/p>\n