{"id":55822,"date":"2020-01-29T00:00:00","date_gmt":"2020-01-28T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router"},"modified":"2020-02-18T14:03:58","modified_gmt":"2020-02-18T11:03:58","slug":"uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/uskoryaem-openvpn-za-9-99-ili-vstraivaem-orange-pi-one-v-router","title":{"rendered":"Kemi p\u00ebrshpejtuar OpenVPN p\u00ebr $9.99* ose integrojm\u00eb Orange Pi One n\u00eb router","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Kemi
\n
\nDisa disa nga ne nuk e p\u00ebrdorin internetin pa VPN p\u00ebr arsye t\u00eb ndryshme: disa kan\u00eb nevoj\u00eb p\u00ebr nj\u00eb IP t\u00eb dedikuar, dhe \u00ebsht\u00eb m\u00eb e leht\u00eb dhe m\u00eb lir\u00eb t\u00eb blen\u00eb nj\u00eb VPS me dy IP sesa t\u00eb blihet nj\u00eb adres\u00eb nga ofruesi, dikush d\u00ebshiron t\u00eb ket\u00eb qasje n\u00eb t\u00eb gjitha faqet e internetit dhe jo vet\u00ebm ato t\u00eb lejueshme n\u00eb territorin e Kosov\u00ebs, t\u00eb tjer\u00ebt kan\u00eb nevoj\u00eb p\u00ebr IPv6, nd\u00ebrsa ofruesi nuk e ofron at\u00eb\u2026
\nM\u00eb s\u00eb shpeshti, lidhja VPN vendoset n\u00eb vet\u00eb pajisjen q\u00eb p\u00ebrdoret n\u00eb at\u00eb moment, q\u00eb \u00ebsht\u00eb krejt\u00ebsisht e arsyeshme n\u00ebse keni vet\u00ebm nj\u00eb kompjuter dhe nj\u00eb telefon, dhe i p\u00ebrdorni ato rrall\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb. N\u00ebse megjithat\u00eb, n\u00eb rrjetin tuaj sht\u00ebpiak ka shum\u00eb pajisje, ose, p\u00ebr shembull, ka t\u00eb tilla p\u00ebr t\u00eb cilat nuk mund t\u00eb konfigurohet VPN, do t\u00eb ishte m\u00eb e p\u00ebrshtatshme t\u00eb ngritni tunelin drejtp\u00ebrdrejt n\u00eb routerin tuaj sht\u00ebpiak, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb mos shqet\u00ebsoheni p\u00ebr konfigurimin e \u00e7do pajisjeje ve\u00e7mas.<\/p>\n

N\u00ebse keni instaluar ndonj\u00ebher\u00eb OpenVPN n\u00eb routerin tuaj, ndoshta jeni habitur nga shpejt\u00ebsia e tij t\u00eb funksionimit. SoC-t\u00eb dhe madje edhe router\u00ebt e lir\u00eb kalojn\u00eb pa probleme rreth trafikut af\u00ebr nj\u00eb gigabiti, p\u00ebr shkak t\u00eb delegimit t\u00eb funksioneve t\u00eb ruterizimit dhe NAT n\u00eb nj\u00eb \u00e7ip t\u00eb ve\u00e7ant\u00eb, i cili \u00ebsht\u00eb dizajnuar ekskluzivisht p\u00ebr k\u00ebt\u00eb q\u00ebllim, nd\u00ebrsa procesor\u00ebt kryesor\u00eb t\u00eb k\u00ebtyre router\u00ebve jan\u00eb mjaft t\u00eb dob\u00ebt, pasi ndonj\u00ebher\u00eb nuk kan\u00eb ngarkes\u00eb. Ky kompromis lejon arritjen e shpejt\u00ebsive t\u00eb larta t\u00eb funksionimit t\u00eb routerit dhe ul ndjesh\u00ebm \u00e7mimin e pajisjeve t\u00eb gatshme - routerat me procesor\u00eb t\u00eb fuqish\u00ebm kushtojn\u00eb disa her\u00eb m\u00eb shum\u00eb dhe pozicionohen jo vet\u00ebm si kutia p\u00ebr shp\u00ebrndarjen e internetit, por edhe si NAS, shkarkues torrent dhe sistem multimedia sht\u00ebpiak.<\/p>\n

Routeri im, TP-Link TL-WDR4300, nuk mund t\u00eb quhet i ri \u2014 modeli u shfaq n\u00eb mes t\u00eb vitit 2012, dhe ka nj\u00eb procesor 560 MHz nga arhitektura MIPS32 74Kc, fuqia e t\u00eb cilit \u00ebsht\u00eb e mjaftueshme vet\u00ebm p\u00ebr 20-23 Mb\/s t\u00eb trafikut t\u00eb enkriptuar p\u00ebrmes OpenVPN, q\u00eb sipas standardeve t\u00eb shpejt\u00ebsis\u00eb s\u00eb internetit modern t\u00eb sht\u00ebpive \u00ebsht\u00eb fare pak.
\nSi mund ta rritim shpejt\u00ebsin\u00eb e tunelit t\u00eb enkriptuar? Routeri im \u00ebsht\u00eb mjaft funksional, mb\u00ebshtet 3\u00d73 MIMO dhe, n\u00eb p\u00ebrgjith\u00ebsi, punon mir\u00eb, nuk do t\u00eb doja ta ndryshoja.
\nDuke se aktualisht pranohet t\u00eb krijohen faqe interneti prej 10 megabajt\u00ebsh, t\u00eb shkruhen aplikacione p\u00ebr desktop me node.js dhe t\u00eb paketohen ato n\u00eb nj\u00eb skedar prej 100 megabajt\u00ebsh, p\u00ebr t\u00eb rritur kapacitetin p\u00ebrpunues n\u00eb vend q\u00eb t\u00eb optimizohet, ne do t\u00eb b\u00ebjm\u00eb di\u00e7ka t\u00eb tmerrshme \u2014 do t\u00eb transferojm\u00eb lidhjen VPN n\u00eb nj\u00eb \"kompjuter\" t\u00eb fuqish\u00ebm me nj\u00eb pllak\u00eb t\u00eb vetme Orange Pi One, t\u00eb cilin do ta vendosim n\u00eb kuti ruter, pa z\u00ebn\u00eb portet ekzistuese rrjet dhe USB, t\u00eb gjitha p\u00ebr $9.99*!
\n* + dor\u00ebzim, + taksa, + p\u00ebr birr\u00eb, + MicroSD.<\/a><\/noindex><\/p>\n

OpenVPN<\/h3>\n

Nuk mund t\u00eb thuhet se procesori i ruterit \u00ebsht\u00eb krejt\u00ebsisht i dob\u00ebt \u2014 ai \u00ebsht\u00eb n\u00eb gjendje t\u00eb enkriptoj\u00eb dhe hashojn\u00eb t\u00eb dh\u00ebnat me algoritmin AES-128-CBC-SHA1 me shpejt\u00ebsi 50 Mb\/s, q\u00eb \u00ebsht\u00eb duksh\u00ebm m\u00eb e shpejt\u00eb se sa funksionon OpenVPN, nd\u00ebrsa algoritmi modern i enkriptimit CHACHA20 me hash POLY1305 arrin madje deri n\u00eb 130 megabit n\u00eb sekond\u00eb! Pse at\u00ebher\u00eb shpejt\u00ebsia e tunelit VPN \u00ebsht\u00eb kaq e ul\u00ebt? E gjith\u00eb \u00e7\u00ebshtja \u00ebsht\u00eb n\u00eb kalimin e kontekstit midis hap\u00ebsir\u00ebs s\u00eb p\u00ebrdoruesit dhe hap\u00ebsir\u00ebs b\u00ebrthamore: OpenVPN enkripton trafikun dhe komunikon me bot\u00ebn e jashtme n\u00eb kontekstin e p\u00ebrdoruesit, nd\u00ebrsa n\u00eb kontekstin b\u00ebrthamor ndodh vet\u00eb ruterizimi. Sistemi operativ duhet t\u00eb kaloj\u00eb vazhdimisht nga k\u00ebtu atje, p\u00ebr \u00e7do paket\u00eb q\u00eb pranohet ose d\u00ebrgohet, dhe kjo operacion \u00ebsht\u00eb jo shum\u00eb i shpejt\u00eb. Kjo problem \u00ebsht\u00eb e pranishme n\u00eb t\u00eb gjitha aplikacionet VPN q\u00eb funksionojn\u00eb p\u00ebrmes drejtuesit TUN\/TAP, dhe nuk mund t\u00eb thuhet se problemi i shpejt\u00ebsis\u00eb s\u00eb ul\u00ebt \u00ebsht\u00eb shkaktuar nga optimizimi i dob\u00ebt i OpenVPN (edhe pse, natyrisht, ka vende q\u00eb duhet t\u00eb rregullohen). Asnj\u00eb klient VPN n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit nuk arrin as nj\u00eb gigabit me enkriptimin e \u00e7aktivizuar n\u00eb laptopin tim, \u00e7far\u00eb mund t\u00eb thuhet p\u00ebr sistemet me procesor t\u00eb dob\u00ebt.<\/p>\n

Orange Pi One<\/h3>\n

Pana Orange Pi One nga kompania Xunlong \u00ebsht\u00eb oferta m\u00eb e favorshme n\u00eb raportin performanc\u00eb\/cmim deri m\u00eb tani. P\u00ebr $9.99* ju merrni nj\u00eb procesor t\u00eb mir\u00eb kat\u00ebrb\u00ebrthamor ARM Cortex-A7, q\u00eb punon n\u00eb m\u00ebnyr\u00eb t\u00eb q\u00ebndrueshme n\u00eb frekuenc\u00ebn 1008 MHz, dhe \u00ebsht\u00eb duksh\u00ebm m\u00eb i fuqish\u00ebm se konkurrenca Raspberry Pi Zero dhe Next Thing C.H.I.P. n\u00eb k\u00ebt\u00eb kategori \u00e7mimi. K\u00ebtu p\u00ebrfundojn\u00eb avantazhet. Kompania Xunlong i kushton zero v\u00ebmendje softuerit t\u00eb bordit t\u00eb saj, dhe n\u00eb momentin e lansimit t\u00eb One n\u00eb shitje, nuk ofronte as nj\u00eb skedar t\u00eb konfigurimit t\u00eb bordit, e l\u00ebre m\u00eb imazhe t\u00eb gatshme. Allwinner \u2014 prodhuesi i SoC \u2014 gjithashtu nuk i kushton shum\u00eb r\u00ebnd\u00ebsi mb\u00ebshtetjes s\u00eb produktit t\u00eb tij. Ata jan\u00eb t\u00eb interesuar vet\u00ebm p\u00ebr funksionimin minimal n\u00eb OS Android 4.4.4, dhe p\u00ebr k\u00ebt\u00eb arsye jemi t\u00eb detyruar t\u00eb p\u00ebrdorim nj\u00eb b\u00ebrtham\u00eb versioni 3.4 me patches p\u00ebr Android. Fatmir\u00ebsisht, ka entuziast\u00eb q\u00eb krijojn\u00eb distribucione, modifikojn\u00eb b\u00ebrtham\u00ebn, shkruajn\u00eb kod p\u00ebr t\u00eb mb\u00ebshtetur bordet n\u00eb b\u00ebrtham\u00ebn mainline, pra n\u00eb fakt b\u00ebjn\u00eb pun\u00ebn p\u00ebr prodhuesin, duke b\u00ebr\u00eb q\u00eb ky produkt t\u00eb funksionoj\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb pranueshme. P\u00ebr q\u00ebllimet e mia, kam zgjedhur distribucionin Armbian, i cili p\u00ebrdit\u00ebsohet shpesh dhe leht\u00ebsisht (b\u00ebrthamat e reja instalohen direkt p\u00ebrmes menaxherit t\u00eb paketave, dhe jo me kopjimin e skedareve n\u00eb nj\u00eb seksion t\u00eb ve\u00e7ant\u00eb, si\u00e7 ndodh zakonisht me Allwinner), dhe gjithashtu mb\u00ebshtet shumic\u00ebn e periferik\u00ebve, n\u00eb kund\u00ebrshtim me t\u00eb tjer\u00ebt.<\/p>\n

Router<\/h3>\n

P\u00ebr t\u00eb mos ngarkuar procesorin e dob\u00ebt t\u00eb routerit me enkriptimin dhe p\u00ebr t\u00eb p\u00ebrshpejtuar lidhjen ton\u00eb VPN, mund ta kalojm\u00eb k\u00ebt\u00eb detyr\u00eb te nj\u00eb procesor m\u00eb t\u00eb fuqish\u00ebm Orange Pi, duke e lidhur at\u00eb me routerin n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb caktuar. M\u00eb vjen n\u00eb mend t\u00eb lidhem ose p\u00ebrmes Ethernet, ose p\u00ebrmes USB \u2014 t\u00eb dy k\u00ebto standarde mb\u00ebshteten nga t\u00eb dy pajisjet, por nuk doja t\u00eb z\u00eb p\u00ebr portet ekzistuese. Fatmir\u00ebsisht, ka nj\u00eb zgjidhje.<\/p>\n

\u00c7ipi i hub-it USB GL850G, i cili p\u00ebrdoret n\u00eb router, mb\u00ebshtet funksionimin e 4 porteve USB, dy nga t\u00eb cilat nuk jan\u00eb t\u00eb salduara. Nuk \u00ebsht\u00eb e qart\u00eb pse prodhuesi nuk i ka salduar ato, supozoj p\u00ebr t\u00eb mos lejuar p\u00ebrdoruesit t\u00eb lidhin menj\u00ebher\u00eb 4 pajisje me konsum t\u00eb lart\u00eb energie (p\u00ebr shembull, disqe t\u00eb forta), pasi blloku i furnizimit t\u00eb routerit nuk \u00ebsht\u00eb projektuar p\u00ebr nj\u00eb ngarkes\u00eb t\u00eb till\u00eb. N\u00eb \u00e7do rast, kjo \u00ebsht\u00eb n\u00eb favorin ton\u00eb.
\n\"Kemi
\nP\u00ebr t\u00eb marr\u00eb nj\u00eb port tjet\u00ebr USB, \u00ebsht\u00eb mjaft t\u00eb bashkangjitni dy tela n\u00eb pinin 8(D-) dhe 9(D+) ose 11(D-) dhe 12(D+) .<\/p>\n

\"Kemi
\n
\nMegjithat\u00eb, \u00ebsht\u00eb e pamjaftueshme t\u00eb lidhni thjesht dy pajisje USB dhe t\u00eb shpresoni q\u00eb gjith\u00e7ka do t\u00eb funksionoj\u00eb vet\u00eb, si\u00e7 do t\u00eb ndodhte me Ethernet. S\u00eb pari, na nevojitet t\u00eb b\u00ebjm\u00eb q\u00eb nj\u00ebr\u00ebn nga to t\u00eb punoj\u00eb n\u00eb m\u00ebnyr\u00ebn USB Client, dhe jo USB Host, dhe s\u00eb dyti, na nevojitet t\u00eb p\u00ebrcaktojm\u00eb se si pajisjet do t\u00eb identifikojn\u00eb nj\u00ebra-tjetr\u00ebn. Ekzistojn\u00eb shum\u00eb shofer\u00eb t\u00eb ashtuquajtur\u00ebve USB Gadgets (sip\u00ebr emrit t\u00eb n\u00ebn sistemin Linux-\u00e7ek) q\u00eb lejojn\u00eb t\u00eb imitojn\u00eb lloje t\u00eb ndryshme pajisjesh USB: adapteur rrjeti, kart\u00eb audio, tastier\u00eb dhe maus, memorje USB, kamer\u00eb, konsol\u00eb p\u00ebrmes port\u00ebs serial. Duke pasur parasysh se pajisja jon\u00eb do t\u00eb punoj\u00eb me rrjet, imitim i adapteur Ethernet do t\u00eb jet\u00eb m\u00eb i p\u00ebrshtat\u00ebshmi p\u00ebr ne.<\/p>\n

Ka tre standarde Ethernet-over-USB:<\/p>\n