Mwedzi wapera, takataura pano pa blog nezve nhau dzaakaburitsa David S. Miller, anoona nezve Linux network subsystem, yandinotora zvigamba ne kuitwa kweVPN interface yeiyo WireGuard chirongwa mu net-inotevera bazi.
Nayo Linus Torvalds yakatora nzvimbo, iyo inoumba iro ramangwana bazi reLinux 5.6 kernel uye mushure meimwe shanduko dzakatenderedza 1am CET neChitatu, Torvalds yakadhonza mawebhusaiti kubva kuDavid Millers repository, iine WireGuard pamusoro pechinyorwa.
Nayo iyo Linux kernel 5.6 inotarisirwa mukupera kwaKurume kana kutanga kwaKubvumbi inozopedzisira yatsigira tekinoroji yeWireGuard VPN, pamwe nerutsigiro rwekutanga rwekuwedzera kweMPTCP (MultiPath TCP).
Pakutanga, iyo cryptographic primitives inodiwa kuti WireGuard ishande yakaiswa port kubva Zinc raibhurari kuenda kune yakajairwa Crypto API uye yaisanganisira mune kernel 5.5.
Kernel Linux pamwe ingadai yakapa Wireguard rutsigiro kwenguva yakareba, dai pakange pasina kupokana pamusoro peiyo encryption base yakagadzirirwa zvakanyanya yeVPN tekinoroji Zvakatora rinenge gore nehafu kugadzirisa kusawirirana uku.
Maitiro aya akatorwa kuti iyo WireGuard timu ichatora matanho pane iyo nyaya, kubvira mushure mekutaurirana kumusangano weKernel Recipes, mune izvo zvakagadzira iyo WireGuard munaGunyana vakaita sarudzo yekubvumirana yekuchinja zvigamba zvavo kushandisa iyo Crypto yepakati API, yevagadziri veWireGuard vane zvichemo maererano nekuita uye chengetedzo yakajairika.
Kwakatemwa kuti iyo API yaizoenderera ichikudziridza, asi seyakasiyana chirongwa. Gare gare munaNovember, ivo vanogadzira kernel vakaita kuzvipira uye vakatenderana kuendesa imwe yekodhi kune kernel huru. Muchokwadi, zvimwe zvinongedzo zvichaendeswa kune kernel, asi kwete seyakaganhurirwa API, asi sechikamu cheiyo Crypto API subsystem.
Wireguard anovimbisa nekukurumidza kubatana kusimbisa, kuita kwakanaka, pamwe nekubata kwakasimba, nekukurumidza uye kuri pachena kwekubvisa nhumbu. Uye zvakare, iyo tekinoroji iri nyore kwazvo kumisikidza kupfuura mamwe maVPN matekinoroji uye inoshandisa chengetedzo kurwisa evesdropping neazvino encryption algorithms.
Pawebhusaiti yavo, iyo WireGuard timu inotsanangura izvo zvinoisa yavo protocol kure nevamwe uye inoti:
"WireGuard yakagadzirirwa neyakareruka kuendesa uye yakapusa mupfungwa.
Inoitirwa kuitiswa zviri nyore mumitsara mishoma kwazvo yekodhi, uye inonzwisisika kuongororwa kwekuchengetedzeka kwekuchengetedzeka.
Inofananidzwa nehofori senge * Swan / IPsec kana OpenVPN / OpenSSL, uko kuongorora gigantic kodhi mabheseni ibasa rinotyisa kunyangwe kumatimu makuru ezvekuchengetedza nyanzvi, WireGuard inoitirwa kuongororwa kwazvo nevanhu vamwe nevamwe.
Akawanda TCP, pane rimwe divi, ndiko kuwedzerwa kweiyo TCP protocol iyo inobvumidza kuronga mashandiro eiyo TCP yekubatanidza iine panguva imwe chete kurongedza kwepaketi munzira dzakawanda kuburikidza neakasiyana maratidziro eneti akasungirirwa kune akasiyana IP kero (kushandiswa kweakawanda data data kubatana panguva imwe chete)
Akawanda TCP inogona kushandiswa zvese kuwedzera mashandiro uye kuwedzera kuvimbika.
Semuenzaniso, MPTCP inogona kushandiswa kuronga kuendesa dhata pane imwe smartphone uchishandisa maWiFi ne3G zvinongedzo panguva imwe chete, kana kudzikisa mutengo nekubatanidza sevha uchishandisa zvinongedzo zvakachipa zvakati wandei pane imwe inodhura.
Imwe nyaya, semuenzaniso, ndeye nemaseva akakodzera, switch isina musono kubva kuWLAN kuenda kune nhare mbozha inogona kuitika kana iyo WLAN renji yapfuura. Kubatanidza Multipath TCP muLinux zvakare kunobatsira nekuti iri kuuya 5G nhare tekinoroji inoda tekinoroji.
Pakupedzisira, iyo nyowani vhezheni yeLinux Kernel 5.6 inotarisirwa sezvatataura pakutanga ndakasvika pakupera kwaKurume 29 yaKurume) kana kutanga kwaApril (April 6) kunyangwe izvi zvichisiyana zvishoma.
mabviro: https://git.kernel.org