Ukuqaliswa kwe-in-kernel kwe-WireGuard ye-OpenBSD kumenyezelwe

Ku-Twitter yenkampani I-EdgeSecurity, eyasungulwa umbhali we-WireGuard, kubikiwe mayelana nokudala ukuqaliswa kwe-VPN yomdabu futhi esekelwe ngokugcwele I-WireGuard ngaphansi kwe-OpenBSD. Ukuqinisekisa amagama, kushicilelwe isithombe-skrini esibonisa umsebenzi. Ukutholakala kwamapheshana e-OpenBSD kernel kuphinde kwaqinisekiswa nguJason A. Donenfeld, umbhali we-WireGuard, ku. isimemezelo wireguard-amathuluzi utility updates.

Okwamanje itholakala kuphela amapheshana angaphandleKodwa-ke, ababhali bathembisa ukuthumela inguqulo yabo yokugcina ohlwini lwama-imeyili kanjiniyela we-OpenBSD maduze nje. Ikhodi ye-WireGuard ye-OpenBSD kernel iqukethe imigqa engu-3322, engaphansi kokuqaliswa kwe-Linux kernel. Uma ikhodi esebenzisa i-WireGuard ekugcineni yamukelwe esihlahleni somthombo we-OpenBSD, izoba i-OS yesibili (ngemuva kwe-Linux) enokusekelwa okugcwele nokuhlanganisiwe kwe-WireGuard ngaphandle kwebhokisi. Ukusekelwa okubanzi kwe-WireGuard kulindeleke ekukhishweni kwe-OpenBSD 6.8 (ekukhishweni kwe-OpenBSD 6.7, obekukhona. ethuthile kusukela ngoMeyi 1 kuya kuMeyi 19, ama-patches awatholakali). Okwamanje, labo abafisa ukusebenzisa i-WireGuard ku-OpenBSD kufanele basebenzise ichweba net/wireguard-go noma ufake mathupha amapheshana anikeziwe.

Ukwengeza, ungakwazi ukuqaphela ukushicilelwa kwezibuyekezo zephakheji zokulungisa wireguard-amathuluzi v1.0.20200510 и i-wireguard-linux-compat v1.0.20200506, kuhlanganise izinsiza zesikhala somsebenzisi ezifana ne-wg ne-wg-quick, kanye nesendlalelo sokuhlinzeka ngokuhambisana nama-Linux kernels amadala (3.10 kufika futhi afaka 5.5) anganakho ukusekelwa okwakhelwe ngaphakathi kwe-WireGuard. Ukukhishwa okusha kwezinsiza ze-wg kanye ne-wg-quick kungeza ukusekelwa kokusebenzisana nokuqaliswa kwe-OpenBSD kernel ye-WireGuard. Kubikwa ukuthi ama-patches e-OpenBSD kernel ahlelelwe ukuthi asatshalaliswe kungakapheli isonto elizayo. Ukuze ulungiselele umhubhe ku-OpenBSD, isixhumi esibonakalayo se-wg esijwayelekile kanye nokuthi “ifconfig wg0 create” kuzosetshenziswa.

Phakathi kwezinguquko ezingahlobene nosekelo lwe-OpenBSD, okuphawuleka kakhulu ukwengezwa kwensiza esheshayo ye-wg yezizinda eziwela ngaphansi kwemaski "yosesho lwe-dns" ku-resolv.conf. Ku-Android, kungezwe usekelo lokugunyazwa kohlelo lokusebenza ngaphezu kokuvinjwa. Kwengezwe isevisi ye-wg-quick.target ukuze i-systemd iqale kabusha futhi ilawule i-wg-quick. Ushintsho oluphawuleka kakhulu kuphakeji ye-wireguard-linux-compat ukuqinisekisa ukuhambisana nezibuyekezo zesikhathi esizayo kumaphakheji e-kernel ye-Ubuntu 19.10 kanye ne-18.04-hwe, okumanje asesigabeni "esihlongozwayo" futhi esingakadluliswa ekubuyekezweni.

Source: opennet.ru