ื‘ื ื™ืžืฆื OpenVPN 2.7.0

ื“ืจื™ื™ ื™ืืจ ื ืืš ื“ืขืจ ืคื•ื‘ืœื™ืงืืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขืจ 2.6 ืฆื•ื•ื™ื™ื’, ืื™ื– ื“ื™ ืžืขืœื“ื•ื ื’ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื’ืขื•ื•ืืจืŸ. OpenVPN 2.7.0, ื ืคึผืขืงืœ ืคึฟืึทืจ ืฉืึทืคึฟืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืคึผืจื™ื•ื•ืึทื˜ืข ื ืขื˜ื•ื•ืึธืจืงืก, ื•ื•ืึธืก ืœืึธื–ื˜ ืืฒึทืš ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืึทืŸ ืขื ืงืจื™ืคึผื˜ืขื“ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืฆื•ื•ื™ืฉืŸ ืฆื•ื•ื™ื™ ืงืœื™ืขื ื˜ ืžืึทืฉื™ื ืขืŸ ืึธื“ืขืจ ืฆื•ืฉื˜ืขืœืŸ ืึท ืฆืขื ื˜ืจืึทืœื™ื–ื™ืจื˜ืŸ VPN ืกืขืจื•ื•ืขืจ ืคึฟืึทืจ ื“ืขืจ ืกื™ื™ืžืึทืœื˜ื™ื™ื ื™ืึทืก ืึธืคึผืขืจืึทืฆื™ืข ืคึฟื•ืŸ ืขื˜ืœืขื›ืข ืงืœื™ืขื ื˜ืŸ. ืงืึธื“ OpenVPN ืคืึทืจืฉืคึผืจื™ื™ื˜ ืื•ื ื˜ืขืจ ื“ืขืจ GPLv2 ืœื™ืฆืขื ืฅ, ื•ื•ืขืจืŸ ืคืึทืจื˜ื™ืงืข ื‘ื™ื™ื ืขืจื™ ืคึผืึทืงืึทื“ื–ืฉืึทื– ื’ืขื ืขืจื™ืจื˜ ืคึฟืึทืจ Debian, Ubuntu, CentOS, RHEL ืื•ืŸ Windows.

ื”ื•ื™ืคึผื˜ ื—ื™ื“ื•ืฉื™ื:

  • VPN ืกืขืจื•ื•ืขืจืก ื”ืื‘ืŸ ืื™ืฆื˜ ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืฆื• ืขืคืขื ืขืŸ ืงื™ื™ืคืœ ืกืืงืขื˜ืก ืฆื• ืื ื ืขืžืขืŸ ืงืื ืขืงืฉืื ืก, ืœืžืฉืœ, ืฆื• ื’ืœื™ื™ื›ืฆื™ื™ื˜ื™ื’ ืื ื ืขืžืขืŸ ืงืื ืขืงืฉืื ืก ื“ื•ืจืš UDP ืื•ืŸ TCP ืื“ืขืจ ืื•ื™ืฃ ืคืืจืฉื™ื“ืขื ืข ื ืขืฅ ืคืืจื˜ืŸ.
  • ื“ืขืจ ืื™ื‘ืขืจื’ืึทื ื’ ืฆื• ื“ืขืจ ื‘ืึทื ื™ืฅ ืคื•ืŸ ืึท ื ื™ื™ึทืขืจ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ื“ื™ DCO ืžืึธื“ื•ืœ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืงืขืจื ืขืœ, ืื™ื– ื’ืขืขื ื“ื™ืงื˜ ื’ืขื•ื•ืึธืจืŸ. Linux 6.16. ื“ืขืจ ืงืขืจืŸ ืžืึธื“ื•ืœ ื”ืื˜ ืึท ืžืึธื“ื™ืคึฟื™ืฆื™ืจื˜ืข API ืื•ืŸ ื•ื•ืขืจื˜ ื’ืขืฉื™ืงื˜ ืื•ื ื˜ืขืจืŸ ื ืึธืžืขืŸ "ovpn." ืฉื˜ื™ืฆืข ืคึฟืึทืจ ื“ืขื ืึทืœื˜ืŸ ovpn-dco ืžืึธื“ื•ืœ ืื™ื– ืฉื•ื™ืŸ ืึธืคึผื’ืขืฉื˜ืขืœื˜ ื’ืขื•ื•ืึธืจืŸ. ื“ืขืจ ืžืึธื“ื•ืœ ื ืขืžื˜ ืึทื•ื•ืขืง ืขื ืงืจื™ืคึผืฉืึทืŸ, ืคึผืึทืงืขื˜ ืคึผืจืึทืกืขืกื™ื ื’, ืื•ืŸ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืฆื•ื ืงืขืจืŸ. Linux ืื•ืŸ ืขืœื™ืžื™ื ื™ืจื˜ ื“ื™ ืึธื•ื•ื•ืขืจื›ืขื“ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื ื’, ืขืจืžืขื’ืœื™ื›ื˜ ืึธืคึผื˜ื™ืžื™ื–ืึทืฆื™ืข ื“ื•ืจืš ื“ื™ืจืขืงื˜ ืึทืงืกืขืก ื“ื™ ืงืขืจื ืขืœ ืก ืื™ื ืขืจืœืขื›ืข APIs, ืื•ืŸ ืขืœื™ืžื™ื ื™ืจื˜ ืคึผืึทืžืขืœืขื›ืข ื“ืึทื˜ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืฆื•ื•ื™ืฉืŸ ื“ื™ ืงืขืจื ืขืœ ืื•ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ (ืขื ืงืจื™ืคึผื˜ื™ืึธืŸ, ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ, ืื•ืŸ ืจืึทื•ื˜ื™ื ื’ ื•ื•ืขืจืŸ ื“ื•ืจื›ื’ืขืคื™ืจื˜ ื“ื•ืจืš ื“ื™ ืžืึธื“ื•ืœ ืึธืŸ ืฉื™ืงืŸ ื˜ืจืึทืคื™ืง ืฆื• ื“ื™ ื‘ืึทื ื™ืฆืขืจ-ืคึผืœืึทืฅ ื”ืึทื ื“ืœืขืจ).
  • ืื™ืŸ ื“ืขืจ ื•ื•ืขืจืกื™ืข ืคึฟืึทืจ Windowsื“ืขืจ ื‘ืœืึธืง-ืœืึธืงืึทืœืขืจ ืคืึธืŸ ืื™ื– ืึทืงื˜ื™ื•ื•ื™ื–ื™ืจื˜ ืื™ืŸ WFP ืคื™ืœื˜ืขืจืก; ื ืึธืš ื ืขืฅ ืื™ื ื˜ืขืจืคื™ื™ืกื™ื– ื•ื•ืขืจืŸ ื“ื–ืฉืขื ืขืจื™ืจื˜ ื•ื•ื™ ื ื•ื™ื˜ื™ืง; ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉืข ืกืขืจื•ื•ื™ืกืขืก ืงืขื ืขืŸ ืœืึธื ื˜ืฉื˜ ื•ื•ืขืจืŸ ืื•ื ื˜ืขืจ ืึทืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœืขื’ื™ืจื˜ืŸ ื‘ืึทื ื™ืฆืขืจ; ื“ื™ NRPT (ื ืึธืžืขืŸ ืจืขื–ืึธืœื•ืฆื™ืข ืคึผืึธืœื™ื˜ื™ืง ื˜ื™ืฉ) ืื™ื– ืึทืงื˜ื™ื•ื•ื™ื–ื™ืจื˜ ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ DNS ืกืขื˜ื˜ื™ื ื’ืก; ื ื•ืฆืŸ ืคื•ืŸ ื“ืขื win-dco ื“ืจื™ื™ื•ื•ืขืจ ืคึฟืึทืจ ืึทืงืกืขืœืขืจื™ืจืŸ VPN ืกืขืจื•ื•ืขืจืก ืื™ื– ืขืจืœื•ื™ื‘ื˜.
  • ื ื ื™ื™ืขืจ ืฉืœื™ืกืœ ืื•ืŸ ืคึผืึทืงืขื˜ ืคึฟืึธืจืžืึทื˜, "ืขืคึผืึธืง", ืื™ื– ืื™ื™ื ื’ืขืคื™ืจื˜ ื’ืขื•ื•ืึธืจืŸ, ื•ื•ืึธืก, ื ื™ืฉื˜ ื•ื•ื™ ื“ืขืจ ื ืึธืจืžืึทืœืขืจ "DATA_V2" ืคึฟืึธืจืžืึทื˜, ืœื™ื™ื’ื˜ ืฆื• ื“ืขื AEAD ื˜ืึทื’ ืฆื•ื ืกื•ืฃ ืคึฟื•ื ืขื ืคึผืึทืงืขื˜, ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืฉืœื™ืกืœืขืŸ ื•ื•ืขืŸ ื–ื™ื™ืขืจ ื‘ืึทื ื™ืฅ ืœื™ืžื™ื˜ ื•ื•ืขืจื˜ ื“ืขืจื’ืจื™ื™ื›ื˜, ื”ืื˜ 64-ื‘ื™ื˜ ืคึผืึทืงืขื˜ ืื™ื“ืขื ื˜ื™ืคึฟื™ืงืึทื˜ืึธืจืŸ, ืื•ืŸ ื ื™ืฆื˜ ื“ื™ XOR ืึธืคึผืขืจืึทืฆื™ืข ื•ื•ืขืŸ ืžืขืŸ ื“ื–ืฉืขื ืขืจื™ืจื˜ ื“ืขื ืื™ื ื™ืฆื™ืึทืœื™ื–ืึทืฆื™ืข ื•ื•ืขืงื˜ืึธืจ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืข ืคึฟืึทืจ lwipovpn, ืึท ื‘ืึทื ื™ืฆืขืจ-ืคึผืœืึทืฅ ื˜ื•ืŸ/ื˜ืึทืคึผ ื ืขืฅ ืฆื•ื‘ื™ื ื“ ืขืžื•ืœืึทื˜ืึธืจ ื‘ืึทื–ื™ืจื˜ ืื•ื™ืฃ TCP/IP lwIP ืกื˜ืขืง. ื ื™ืฆื ื“ื™ืง ื“ื™ "--dev-node unix:/path/to/lwipovpn" ืืคืฆื™ืข, ืงืขื ื˜ ืื™ืจ ื ืื›ืžืื›ืŸ ื ืคื•ืœืฉื˜ืขื ื“ื™ื’ืŸ VPN ืงืœื™ืขื ื˜ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ืขืจ ืกื™ืกื˜ืขื ืคืืจ ื˜ืขืกื˜ืŸ ืื•ืŸ ื“ื™ื‘ืื’ืŸ. OpenVPN.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืฆื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืขื˜ืœืขื›ืข ืงืœื™ืขื ื˜ ืกืขื˜ื˜ื™ื ื’ืก (IP, ืจื•ื˜ื™ื ื’, MTU, DNS) ื“ื•ืจืš ืฉื™ืงืŸ ืกืขืจื•ื•ืขืจ PUSH_UPDATE ืงืึธื ื˜ืจืึธืœ ืžืขืกืขื“ื–ืฉืขืก.
  • ืื™ืŸ openVPN ืงืœื™ืขื ื˜ ืคึฟืึทืจ Linux, ื‘ื™.ืขืก.ื“ื™. ืื•ืŸ macOS ื“ื™ "--dns-updown" ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ื’ืขื•ื•ืึธืจืŸ ืฆื• ืœื•ื™ืคืŸ ืึท ืกืงืจื™ืคึผื˜ ื•ื•ืึธืก ืึทืคึผืœื™ืงื™ืจื˜ DNS ืกืขื˜ื˜ื™ื ื’ืก ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ืขื ืกืขืจื•ื•ืขืจ. ื“ืขืจ ืกืงืจื™ืคึผื˜ ืฉื˜ื™ืฆื˜ ืงืึธื ืคื™ื’ื•ืจืึทืฆื™ืข ื“ื•ืจืš /etc/resolv.conf, systemd, ืื“ืขืจ resolveconf.
  • ืคึฟืึทืจ ืคึผืœืึทื˜ืคืึธืจืžืข Linux ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ "--route-table" ืึธืคึผืฆื™ืข ืฆื• ื ื•ืฆืŸ ื‘ืึทื ื™ืฆืขืจ-ื“ืขืคื™ื ื™ืจื˜ืข ืจืึทื•ื˜ื™ื ื’ ื˜ื™ืฉืŸ.
  • ืฉื˜ื™ืฆืข ืคืืจืŸ mbedTLS 4 ืฆื•ื•ื™ื™ื’ ืื™ื– ืื™ืžืคืœืขืžืขื ื˜ื™ืจื˜ ื’ืขื•ื•ืืจืŸ. ืฉื˜ื™ืฆืข ืคืืจ TLS 1.3 ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ื’ืขื•ื•ืืจืŸ ืื™ืŸ ืงืื ืคื™ื’ื•ืจืืฆื™ืขืก ืžื™ื˜ ื“ืขืจ mbedTLS ืงืจื™ืคื˜ืื’ืจืืคื™ืฉืขืจ ื‘ื™ื‘ืœื™ืื˜ืขืง.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ Haiku ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื.
  • ืฉื˜ื™ืฆืข ืคืืจ ืกื˜ืื˜ื™ืฉืŸ ืฉืœื™ืกืœ ืžืึธื“ืข ืื™ื– ืืคื’ืขืฉื˜ืขืœื˜ ื’ืขื•ื•ืืจืŸ (TLS ืžืึธื“ืข ื–ืึธืœ ื’ืขื ื•ืฆื˜ ื•ื•ืขืจืŸ), NTLMv1, Windows- ื•ื•ื™ื ื˜ื•ืŸ ื“ืจื™ื™ื•ื•ืขืจืก, OpenSSL 1.0.2, mbedTLS 2.x, ื“ืื˜ืŸ ืงืืžืคืจืขืฉืืŸ ืคืืจืŸ ืฉื™ืงืŸ, ืืคืฆื™ืขืก "--memstats" ืื•ืŸ "--opt-verify".

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster