Ukukhutshwa kwe-NNCP 8.8.0, izinto eziluncedo zokudlulisa iifayile/imiyalelo kwimowudi yevenkile nangaphambili

Ukukhutshwa kwe-Node-to-Node CoPy (NNCP), isethi yezixhobo zokudlulisa iifayile ngokukhuselekileyo, i-imeyile, kunye nemiyalelo yokuphunyezwa kwimodi yokugcina kunye nangaphambili. Ixhasa ukusebenza kwiinkqubo zokusebenza ezihambelanayo zePOSIX. Izinto eziluncedo zibhalwe kwi-Go kwaye zisasazwe phantsi kwelayisensi ye-GPLv3.

Izixhobo zijolise ekuncedeni ukwakha amanethiwekhi amancinci oontanga-ku-peer-to-friend (amanani amaninzi) kunye nomzila we-static wokukhuselwa kwefayile yomlilo kunye nokulibala, izicelo zefayile, i-imeyile, kunye nezicelo zomyalelo. Zonke iipakethi ezithunyelwayo zifihliwe (ekupheleni ukuya-ekupheleni) kwaye zingqinisiswe ngokucacileyo kusetyenziswa izitshixo zikawonke-wonke ezaziwayo zabahlobo. Uguqulelo oluntsonkothileyo lwetswele (njengakwiTor) lusetyenziswa kuzo zonke iipakethi eziphakathi. Indawo nganye inokusebenza njengomthengi kunye nomncedisi kwaye isebenzise zombini iimodeli zokuziphatha zokutyhala kunye ne-poll.

Umahluko phakathi kwe-NNCP kunye ne-UUCP kunye ne-FTN (i-FidoNet Technology Network) izisombululo, ukongeza kwi-encryption ekhankanywe ngasentla kunye nokuqinisekiswa, yinkxaso ephuma ngaphandle kwebhokisi ye-floppinet networks kunye neekhompyutheni ezizimeleyo ngokwasemzimbeni (i-air-gapped) ukusuka kwindawo engakhuselekanga kwaye uthungelwano loluntu. I-NNCP ikwabonisa ukudibanisa okulula (ngokuhambelana ne-UUCP) kunye neeseva zeposi zangoku ezifana nePostfix kunye ne-Exim.

Imimandla enokwenzeka yosetyenziso lweNNCP ibandakanya ukulungelelanisa ukuthumela/ukufumana iposi kwizixhobo ngaphandle koqhagamshelo olusisigxina kwi-Intanethi, ukudlulisa iifayile phantsi kweemeko zoqhagamshelo lothungelwano olungazinzanga, ukudlulisela ngokukhuselekileyo izixa ezikhulu kakhulu zedatha kumajelo eendaba eziphathekayo, ukudala uthungelwano lwedatha olulodwa olukhuselweyo ukusuka. Uhlaselo lwe-MitM, ukudlula ukujongwa kwenethiwekhi kunye nokucupha. Ekubeni isitshixo se-decryption sisezandleni zommkeli kuphela, kungakhathaliseki ukuba ipakethe ihanjiswa phezu kwenethiwekhi okanye ngemidiya ebonakalayo, umntu wesithathu akakwazi ukufunda iziqulatho, nokuba iphakheji iyanqanyulwa. Kwelinye icala, uqinisekiso lomsayino wedijithali aluvumeli ukwenza umyalezo oyintsomi phantsi kwegama lomnye umthumeli.

Phakathi kwezinto ezintsha ze-NNCP 8.8.0, xa kuthelekiswa neendaba zangaphambili (uhlobo 5.0.0):

• Esikhundleni se-BLAKE2b hash, ebizwa ngokuba yi-MTH: I-Merkle Tree-based Hashing, esebenzisa i-BLAKE3 hash, isetyenziselwa ukujonga ukunyaniseka kweefayile. Oku kukuvumela ukubala ingqibelelo yenxalenye efihliweyo yepakethi ekunene ngexesha lokukhuphela, ngaphandle kokuyifuna ukuba ifundwe kwixesha elizayo. Oku kukwavumela ungqamaniso olungenamda lokuhlolwa kwemfezeko.
• Ifomati entsha yepakethe efihliweyo ihambelana ngokupheleleyo xa ubungakanani bedatha bungaziwa kwangaphambili. Umqondiso wokugqitywa kokudluliselwa, kunye nobukhulu obuqinisekisiweyo, uya ngqo ngaphakathi kumjelo ofihliweyo. Ngaphambili, ukufumanisa ubungakanani bedatha edlulisiweyo, kwakuyimfuneko ukuyigcina kwifayile yesikhashana. Ke umyalelo othi "nncp-exec" uphulukene no "-use-tmp" ukhetho njengoko kungafuneki kwaphela.
• Imisebenzi ye-BLAKE2b KDF kunye ne-XOF ithathelwe indawo yi-BLAKE3 ukunciphisa inani le-cryptographic primitives esetyenzisiweyo kunye nokwenza lula ikhowudi.
• Ngoku kunokwenzeka ukufumanisa ezinye iinodi kuthungelwano lwendawo ngokusasaza okuninzi kwidilesi “ff02::4e4e:4350”.
• Amaqela e-Multicast avele (afana neenkomfa ze-FidoNet echo okanye amaqela eendaba e-Usenet), evumela ipakethe enye ukuba ithumele idatha kumalungu eqela amaninzi, apho ngamnye aphinde abuyisele ipakethi kwabanye abasayinileyo. Ukufunda ipakethe ye-multicast kufuna ulwazi lwesibini esiphambili (kufuneka ngokucacileyo ube lilungu leqela), kodwa ukuhanjiswa kungenziwa nayiphi na i-node.
• Ngoku kukho inkxaso yokuqinisekiswa okucacileyo kwerisithi yepakethe. Umthumeli akanakuyicima ipakethi emva kokuyithumela, ilinde de ifumane ipakethi ekhethekileyo ye-ACK kumamkeli.
• Inkxaso eyakhelwe-ngaphakathi yothungelwano lwe-Yggdrasil yolwalekayo: iidaemoni ezikwi-intanethi zinokusebenza njengabathathi-nxaxheba benethiwekhi abazimeleyo, ngaphandle kokusebenzisa umntu wesithathu ukuphunyezwa kweYggdrasil kwaye ngaphandle kokusebenza ngokupheleleyo kunye nesitaki se-IP kwi-interface yenethiwekhi ebonakalayo.
• Endaweni yeentambo ezicwangcisiweyo (RFC 3339), ilog isebenzisa amangeniso e-recfile, anokusetyenziswa kunye ne-GNU Recutils utility.
• Ngokuzikhethela, iiheader zepakethe ezifihliweyo zinokugcinwa kwiifayile ezahlukeneyo kwi-"hdr/" i-subdirectory, ikhawulezisa ngokukhawuleza imisebenzi yokubuyisela uluhlu lwepakethe kwiinkqubo zefayile ezinobungakanani beebhloko ezinkulu, ezifana ne-ZFS. Ngaphambili, ukubuyisela iheader yepakethe kufuna ukuba kufundwe kuphela ibhloko ye-128KiB esuka kwidiski ngokungagqibekanga.
• Ukukhangela iifayile ezintsha kunokusebenzisa ngokukhetha i-kqueue kunye ne- inotify kernel iindlela ezisezantsi, ukwenza iminxeba yendlela embalwa.
• Izinto eziluncedo zigcina iifayile ezivulekileyo ezimbalwa kwaye zivale kwaye ziphinde zizivule kancinci. Ngenani elikhulu leepakethe, ngaphambili kwakunokwenzeka ukuba usebenze kumda kwinani eliphezulu leefayile ezivulekileyo.
• Amaqela amaninzi aqala ukubonisa inkqubela phambili kunye nesantya semisebenzi efana nokukhuphela / ukulayisha, ukukopisha kunye nokucubungula (ukuphosa) iiphakheji.
• Umyalelo "we-nncp-fayile" ungathumela kungekuphela iifayile enye, kodwa kunye nabalawuli, ukudala i-pax yokugcina kunye nemixholo yabo kwi-fly.
• Izinto eziluncedo kwi-Intanethi zinokukhetha ngoko nangoko ukuphoswa kwepakethi emva kokuba ipakethe ikhutshelwe ngempumelelo, ngaphandle kokuqhuba i-daemon ethi "nncp-toss" eyahlukileyo.
• Umnxeba we-intanethi komnye umthathi-nxaxheba unokuzikhethela kuphela xa i-timer iqaliswa, kodwa naxa ipakethe ephumayo ibonakala kwi-directory ye-spool.
• Iqinisekisa ukusebenza phantsi kwe-NetBSD kunye ne-OpenBSD OS, ukongeza kwi-FreeBSD exhaswe ngaphambili kunye ne-GNU/Linux.
• "nncp-daemon" ihambelana ngokupheleleyo ne-UCSPI-TCP interface. Idityaniswe nokukwazi ukungena kwinkcazo yefayile ekhankanyiweyo (umzekelo ngokuseta "NNCPLOG=FD:4"), kubungane ngokupheleleyo ukusebenza phantsi kwezinto eziluncedo ezifana ne-daemontools.
• Indibano yeprojekthi idluliselwe ngokupheleleyo kwisistim yokubuyisela kwakhona.

umthombo: opennet.ru