Ekupheleni kukaJulayi, abaphuhlisi betonela yeWireGuard VPN bacetywayo , eya kwenza isoftware yabo yokuhambisa i-VPN ibe yinxalenye yeLinux kernel. Nangona kunjalo, umhla ochanekileyo wokuphunyezwa "kombono" uhlala ungaziwa. Ngezantsi kokusikwa siza kuthetha ngesi sixhobo ngokubanzi.
/ ifoto
Ngokufutshane malunga neprojekthi
I-WireGuard sisisizukulwana esilandelayo setonela ye-VPN eyenziwe nguJason A. Donenfeld, i-CEO ye-Edge Security. Iprojekthi yaphuhliswa njenge kunye nenye indlela ekhawulezayo ye-OpenVPN kunye ne-IPsec. Inguqulelo yokuqala yemveliso iqulethe kuphela imigca engamawaka angama-4 ekhowudi. Ukuthelekisa, i-OpenVPN inemigca engamawaka angama-120, kunye ne-IPSec - i-420 lamawaka.
Ngu abaphuhlisi, i-WireGuard kulula ukuyiqwalasela kwaye ukhuseleko lweprotocol luphunyeziwe . : I-Wi-Fi, i-LTE okanye i-Ethernet idinga ukuphinda uqhagamshele kwiseva yeVPN rhoqo. Iiseva ze-WireGuard aziluphelisi unxibelelwano, nokuba umsebenzisi ufumene idilesi ye-IP entsha.
Ngaphandle kwenyani yokuba iWireGuard yayiyilelwe iLinux kernel, abaphuhlisi kwaye malunga noguqulelo oluphathwayo lwesixhobo sezixhobo ze-Android. Usetyenziso alukaphuhliswa ngokupheleleyo, kodwa ungaluzama ngoku. Kule nto uyidingayo .
Ngokubanzi, i-WireGuard ithandwa kakhulu kwaye sele ikhona ababoneleli abaninzi beVPN, njengeMullvad kunye neAzireVPN. Ipapashiwe kwi-intanethi esi sigqibo. Umzekelo, , ezenziwe ngabasebenzisi, kwaye kukho izikhokelo, .
Iinkcukacha zobugcisa
Π (iphe. 18) kuphawulwe ukuba i-throughput ye-WireGuard iphindwe kane ngaphezu kwe-OpenVPN: 1011 Mbit / s ngokuchasene ne-258 Mbit / s, ngokulandelanayo. I-WireGuard nayo iphambi kwesisombululo esisemgangathweni se-Linux IPsec - ine-881 Mbit/s. Ikwayigqwesa ngokulula ukuseta.
Emva kokuba izitshixo zitshintshwe (uqhagamshelo lwe-VPN luqaliswe kakhulu njenge-SSH) kwaye uxhulumaniso lusekiwe, i-WireGuard ibamba yonke eminye imisebenzi ngokwayo: akukho mfuneko yokukhathazeka malunga nokuhamba, ulawulo lwelizwe, njl. Kuyafuneka ukuba ufuna ukusebenzisa uguqulelo oluntsonkothileyo.
/ ifoto
Ukufakela, uya kufuna ukuhanjiswa kunye ne-Linux kernel endala kune-4.1. Inokufumaneka kwiindawo zokugcina ezinkulu zeLinux.
$ sudo add-apt-repository ppa:hda-me/wireguard
$ sudo apt update
$ sudo apt install wireguard-dkms wireguard-tools
Njengabahleli benqaku le-xakep.ru, ukuzihlanganisa kwimibhalo yomthombo nako kulula. Kwanele ukuvula ujongano kwaye wenze izitshixo zikawonke-wonke kunye nezabucala:
$ sudo ip link add dev wg0 type wireguard
$ wg genkey | tee privatekey | wg pubkey > publickey
WireGuard ujongano lokusebenza kunye nomboneleli we-crypto . Endaweni yoko, kusetyenziswa i-stream cipher , i-cryptographic Poly1305 kunye nemisebenzi ye-cryptographic hash yobunini.
Isitshixo esiyimfihlo senziwa kusetyenziswa esekwe kwijika elijiko . Xa hashing, basebenzisa ΠΈ . Ngenxa yefomathi yesitampu sexesha Iprothokholi ilahla iipakethi ezinexabiso elincinci lesitampu sexesha, ngokwenza oko ΠΈ .
Kule meko, i-WireGuard isebenzisa umsebenzi we-ioctl ukulawula i-I/O (eyayisetyenziswa ngaphambili ), eyenza ikhowudi icoceke kwaye ilula. Ungaqinisekisa oku ngokujonga .
Izicwangciso zomphuhlisi
Okwangoku, i-WireGuard yimodyuli ye-kernel ephuma emthini. Kodwa umbhali weprojekthi nguJason Donenfeld , ukuba ixesha lifikile lokuphunyezwa ngokupheleleyo kwi-Linux kernel. Ngenxa yokuba ilula kwaye ithembekile kunezinye izisombululo. Jason kule nkalo noLinus Torvalds ngokwakhe wayibiza ikhowudi yeWireGuard βnjengomsebenzi wobugcisa.β
Kodwa akukho mntu uthetha malunga nemihla echanekileyo yokuqaliswa kwe-WireGuard kwi-kernel. KUNYE oku kuya kwenzeka ngokukhululwa kwe-Linux kernel 4.18 ka-Agasti. Nangona kunjalo, kunokwenzeka ukuba oku kuya kwenzeka kwikamva elikufutshane kakhulu: kwinguqulo 4.19 okanye 5.0.
Xa i-WireGuard yongezwa kwi-kernel, abaphuhlisi gqibezela isicelo sezixhobo ze-Android kwaye uqale ukubhala isicelo se-iOS. Kukho nezicwangciso zokugqiba ukuphunyezwa kwi-Go kunye ne-Rust kwaye ifakwe kwi-macOS, Windows kunye ne-BSD. Kukwacwangcisiwe ukuphumeza i-WireGuard yezinye "iinkqubo ezingaqhelekanga": , , kunye nezinye izinto ezininzi ezinomdla. Zonke zidweliswe kwi ababhali beprojekthi.
PS Amanye amanqaku ambalwa avela kwibhlog yethu yeshishini:
Isikhokelo esiphambili somsebenzi wethu kukubonelela ngeenkonzo zefu:
| | | | | |
umthombo: www.habr.com