An bayyana hakan David S. Miller, wanda ke da alhakin tsarin sadarwar Linux, ya karba faci da aiwatar da aikin VPN na aikin WireGuard a cikin reshe mai zuwa. Tare da wanene a farkon shekara mai zuwa, canje-canjen da aka tara a cikin reshe mai zuwa za su samar da tushe don fitowar Linux 5.6.
Ga wadanda basu sani ba WireGuard ya kamata su san cewa wannan VPN ne - wanda ake aiwatar dashi bisa tsarin hanyoyin ɓoye zamani, yana ba da babban aiki, yana da sauƙin amfani, Ba shi da rikitarwa kuma ya tabbatar da kansa a cikin yawancin manyan abubuwan da aka tura da ke kula da yawancin zirga-zirga.
Game da WireGuard
An haɓaka aikin tun shekara ta 2015, ya wuce bincikar ƙa'ida da tabbatar da hanyoyin ɓoyewar da aka yi amfani da su. Goyon bayan WireGuard an riga an haɗa shi cikin NetworkManager da tsarin, kuma facin kernel wani bangare ne na ainihin rarrabawar Debian Unstable, Mageia, Alpine, Arch, Gentoo, OpenWrt, NixOS, Subgraph, da ALT.
WireGuard yayi amfani da ma'anar hanyar sarrafa maɓallin ɓoyewa, wanda ya haɗa da ɗaure maɓallin keɓaɓɓe ga kowane mahaɗan hanyar sadarwa da amfani da shi don ɗaura mabuɗan jama'a. Musayar maɓallan jama'a don kafa haɗin haɗi ana yin ta kwatankwacin SSH.
Don tattauna mabuɗan kuma haɗa ba tare da fara daemon daban a sararin mai amfani ba, ana amfani da tsarin Noise_IK na Noise Protocol Framework, kwatankwacin kula da maɓallan izini a cikin SSH. Ana watsa bayanai ta hanyar encapsulation a cikin fakiti na UDP. Tallafi don canza adireshin IP na uwar garken VPN (yawo) ba tare da katse haɗin ba kuma sake saita abokin ciniki ta atomatik
Don ɓoyewa, ana amfani da ɓoye rafin ChaCha20 da Poly1305 (MAC) algorithm na tabbatar da saƙo, wannan an sanya shi azaman kamfani mai sauri da aminci na AES-256-CTR da HMAC, wanda aiwatar da software ya ba da damar cimma tsayayyen lokacin aiwatarwa ba tare da haɗawa da tallafi na kayan aiki na musamman ba.
Bayan dogon lokaci WireGuard daga ƙarshe za a haɗa shi cikin Linux
An yi ƙoƙari iri-iri don ingantawa Lambar na WireGuard a cikin Linux, amma ba su yi nasara ba saboda ɗaurin aiwatar da ayyukansu na ayyukan ɓoye, wanda aka yi amfani da shi don haɓaka ƙimar aiki.
Wadannan ayyukan an fara gabatar dasu ne zuwa ga kwaya a matsayin ƙarin API mai ƙananan matakin, wanda a ƙarshe zai iya maye gurbin API na yau da kullun na Crypto.
Bayan tattaunawa a taron girke-girke na Kernel, mahaliccin WireGuard a watan Satumba sun yanke shawarar sasantawa don canza facinsu don amfani da Crypto core API, wanda masu haɓaka WireGuard ke da gunaguni dangane da aiki da kuma cikakken tsaro.
An yanke shawarar cewa API zai ci gaba da haɓaka, amma azaman aikin daban.
Daga baya a cikin Nuwamba, masu haɓaka kernel sunyi alƙawari kuma sun yarda su canza wasu lambar zuwa babban kwaya. A hakikanin gaskiya, za a sauya wasu abubuwan zuwa kernel, amma ba azaman API daban ba, amma a matsayin ɓangare na tsarin Crypto API.
Misali, Crypto API tuni ya haɗa da aiwatarwar da sauri ta hanyar Wireguard na ChaCha20 da Poly1305 algorithms.
Game da shigarwar WireGuard na gaba a cikin ainihin, wanda ya kafa aikin ya sanar da sake fasalin ma'ajiyar. Don sauƙaƙe ci gaba, wurin ajiyar kuɗi na "WireGuard.git", wanda aka tsara don wanzuwar daban, za a maye gurbinsa da wasu wuraren ajiya guda uku waɗanda suka fi dacewa don tsara aikin lambar a cikin babban kwaya:
- wayaguard-linux.git - Cikakken itacen kernel tare da canje-canje daga aikin Wireguard, faci wanda za'a sake nazarin shi don sanya shi a cikin kwaya kuma a kai a kai zuwa ga net / net-next rassan.
- wayaguard-tools.git- Ma'ajiyar kayan aiki da rubutun da ke gudana a sararin mai amfani, kamar wg da wg-sauri. Ana iya amfani da ma'ajiyar don ƙirƙirar fakiti don rarrabawa.
- wayaguard-Linux-compat.git ma'ajiyar ajiya tare da zabin modulu, wanda aka kawota daban da kwaya kuma ya hada da layer.h. don tabbatar dacewa da tsofaffin kwaya. Babban ci gaba zai faru a cikin ajiyar wayaguard-linux.git, amma har zuwa yanzu masu amfani suna da dama kuma ana buƙatar goyan bayan daban na facin a cikin sigar aiki.