ื ืงืขืจืŸ ืžืึธื“ื•ืœืข ืื™ื– ื‘ืึทืงืขื ืขื  ื•ื•ืึธืก ืงืขื ืขืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึทืจื’ื™ื›ืขืจืŸ OpenVPN

ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืคื•ืŸ ื“ื™ OpenVPN ื•ื•ื™ืจื˜ื•ืึทืœ ืคึผืจื™ื•ื•ืึทื˜ ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืคึผืขืงืœ ื”ืึธื‘ืŸ ื‘ืึทืงืขื ืขื  ื“ื™ ovpn-dco ืงืขืจืŸ ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ืงืขื ืขืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึทืจื’ื™ื›ืขืจืŸ VPN ืคืึธืจืฉื˜ืขืœื•ื ื’. ื˜ืจืึธืฅ ื“ืขืจ ืคืึทืงื˜ ืึทื– ื“ืขืจ ืžืึธื“ื•ืœืข ืื™ื– ื ืึธืš ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืžื™ื˜ ืึทืŸ ืื•ื™ื’ ื‘ืœื•ื™ื– ืฆื• ื“ื™ ืœื™ื ื•ืงืก-ื•ื•ื™ื™ึทื˜ืขืจ ืฆื•ื•ื™ื™ึทื’ ืื•ืŸ ื”ืื˜ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ืกื˜ืึทื˜ื•ืก, ืขืก ื”ืื˜ ืฉื•ื™ืŸ ืจื™ื˜ืฉื˜ ืึท ืžื“ืจื’ื” ืคื•ืŸ ืคืขืกื˜ืงื™ื™ึทื˜ ื•ื•ืึธืก ืึทืœืึทื•ื– ืขืก ืฆื• ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืขื ืฉื•ืจ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ OpenVPN ืงืœืึธื•ื“ ื“ื™ื ืกื˜.

ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ื˜ื•ืŸ ืฆื•ื‘ื™ื ื“, ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืึท ืžืึธื“ื•ืœืข ืื•ื™ืฃ ื“ื™ ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ ื–ื™ื™ื˜ืŸ ืžื™ื˜ ื“ื™ AES-256-GCM ืกื™ื™ืคืขืจ ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ืึท 8-ืคืึทืจืœื™ื™ื’ืŸ ืคืึทืจื’ืจืขืกืขืจืŸ ืื™ืŸ ื˜ืจื•ืคึผื•ื˜ (ืคื•ืŸ 370 Mbit/s ืฆื• 2950 Mbit) /s). ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ ืžืึธื“ื•ืœืข ื‘ืœื•ื™ื– ืื•ื™ืฃ ื“ื™ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜, ื“ื™ ื˜ืจื•ืคึผื•ื˜ ื’ืขื•ื•ืืงืกืŸ ื“ืจื™ื™ืคืึธื•ืœื“ ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืคืึทืจืงืขืจ ืื•ืŸ ื”ืื˜ ื ื™ืฉื˜ ื˜ื•ื™ืฉืŸ ืคึฟืึทืจ ื™ื ืงืึทืžื™ื ื’ ืคืึทืจืงืขืจ. ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ ืžืึธื“ื•ืœืข ื‘ืœื•ื™ื– ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื–ื™ื™ึทื˜, ื“ื™ ื˜ืจื•ืคึผื•ื˜ ื’ืขื•ื•ืืงืกืŸ ืžื™ื˜ 4 ืžืืœ ืคึฟืึทืจ ื™ื ืงืึทืžื™ื ื’ ืคืึทืจืงืขืจ ืื•ืŸ ืžื™ื˜ 35% ืคึฟืึทืจ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืคืึทืจืงืขืจ.

ื ืงืขืจืŸ ืžืึธื“ื•ืœืข ืื™ื– ื‘ืึทืงืขื ืขื  ื•ื•ืึธืก ืงืขื ืขืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึทืจื’ื™ื›ืขืจืŸ OpenVPN

ืึทืงืกืขืœืขืจื™ื™ืฉืึทืŸ ืื™ื– ืึทื˜ืฉื™ื•ื•ื“ ื“ื•ืจืš ืžืึธื•ื•ื™ื ื’ ืึทืœืข ืขื ืงืจื™ืคึผืฉืึทืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื–, ืคึผืึทืงืึทื˜ ืคึผืจืึทืกืขืกื™ื ื’ ืื•ืŸ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืฆื• ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ื–ื™ื™ึทื˜, ื•ื•ืึธืก ื™ืœื™ืžืึทื ื™ื™ืฅ ื“ื™ ืึธื•ื•ื•ืขืจื›ืขื“ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื ื’, ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืึทืคึผื˜ืึทืžื™ื™ื– ืึทืจื‘ืขื˜ ื“ื•ืจืš ื’ืœื™ื™ึทืš ืึทืงืกืขืก ื“ื™ ื™ื ืขืจืœืขืš ืงืขืจืŸ ืึทืคึผื™ืก ืื•ืŸ ื™ืœื™ืžืึทื ื™ื™ืฅ ืคึผืึทืžืขืœืขืš ื“ืึทื˜ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืฆื•ื•ื™ืฉืŸ ืงืขืจืŸ. ืื•ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ (ืขื ืงืจื™ืคึผืฉืึทืŸ, ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ ืื•ืŸ ืจื•ื˜ื™ื ื’ ื–ืขื ืขืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื“ื•ืจืš ื“ื™ ืžืึธื“ื•ืœืข ืึธืŸ ืฉื™ืงื˜ ืคืึทืจืงืขืจ ืฆื• ืึท ื”ืึทื ื“ืœืขืจ ืื™ืŸ ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ).

ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ื™ ื ืขื’ืึทื˜ื™ื•ื• ืคึผืจืึทืœ ืื•ื™ืฃ VPN ืคืึธืจืฉื˜ืขืœื•ื ื’ ืื™ื– ื“ืขืจ ื”ื•ื™ืคึผื˜ ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืžื™ื˜ืœ-ืื™ื ื˜ืขื ืกื™ื•ื•ืข ืขื ืงืจื™ืคึผืฉืึทืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืื•ืŸ ื“ื™ืœื™ื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื ื’. ืคึผืจืึทืกืขืกืขืจ ื™ืงืกื˜ืขื ืฉืึทื ื– ืึทื–ืึท ื•ื•ื™ Intel AES-NI ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ืฆื• ืคืึทืจื’ื™ื›ืขืจืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ, ืึธื‘ืขืจ ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื– ืคืืจื‘ืœื™ื‘ืŸ ืึท ื‘ืึทื˜ืึทืœื ืขืง ื‘ื™ื– ื“ื™ ืึทื“ื•ื•ืขื ื˜ ืคื•ืŸ ovpn-dco. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื ื•ืฆืŸ ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืฆื• ืคืึทืจื’ื™ื›ืขืจืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ, ื“ื™ ovpn-dco ืžืึธื“ื•ืœืข ืึทื“ื™ืฉื ืึทืœื™ ื™ื ืฉื•ืจื– ืึทื– ืขื ืงืจื™ืคึผืฉืึทืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื–ืขื ืขืŸ ืฆืขื˜ื™ื™ืœื˜ ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ ืกืขื’ืžืึทื ืฅ ืื•ืŸ ืคึผืจืึทืกืขืกื˜ ืื™ืŸ ืžืึทืœื˜ื™-ื˜ืจืขื“ื™ื“ ืžืึธื“ืข, ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืึทืœืข ื‘ื ื™ืžืฆื ืงืคึผื• ืงืึธืจืขืก.

ืงืจืึทื ื˜ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืœื™ืžื™ื˜ื™ื™ืฉืึทื ื– ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทื“ืจืขืกื“ ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืฉื˜ื™ืฆืŸ ื‘ืœื•ื™ื– ืคึฟืึทืจ AEAD ืื•ืŸ 'ืงื™ื™ื ืขืจ' ืžืึธื“ืขืก, ืื•ืŸ AES-GCM ืื•ืŸ CHACHA20POLY1305 ืกื™ืคืขืจืก. DCO ืฉื˜ื™ืฆืŸ ืื™ื– ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ OpenVPN 2.6, ืกืงืขื“ื–ืฉื•ืœื“ ืคึฟืึทืจ ื“ื™ 4 ืคืขืจื˜ืœ ืคื•ืŸ ื“ืขื ื™ืึธืจ. ื“ืขืจ ืžืึธื“ื•ืœืข ืื™ื– ื“ืขืจื•ื•ื™ื™ึทืœ ื’ืขืฉื˜ื™ืฆื˜ ืื™ืŸ ื“ื™ ื‘ื™ืชื-ื˜ืขืกื˜ื™ื ื’ OpenVPN3 ืœื™ื ื•ืงืก ืงืœื™ืขื ื˜ ืื•ืŸ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ื‘ื•ื™ืขืŸ ืคื•ืŸ ื“ื™ OpenVPN ืกืขืจื•ื•ืขืจ ืคึฟืึทืจ ืœื™ื ื•ืงืก. ื ืขื ืœืขืš ืžืึธื“ื•ืœืข, ovpn-dco-win, ืื™ื– ืื•ื™ืš ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืคึฟืึทืจ ื“ื™ Windows ืงืขืจืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’