Kwinyanga ephelileyo, besithetha apha kwibhlog malunga neendaba azikhuphileyo UDavid S. Miller, onoxanduva lwenkqubo esezantsi yenethiwekhi yeLinux, endithatha kuyo iziqwenga kunye ukumiliselwa konxibelelwano lweVPN lweprojekthi yeWigeGuard kwisebe elilandelayo.
Ngaloo nto ILinus Torvalds yathatha indawo yokugcina, eyenza isebe elizayo leLinux 5.6 kernel kwaye emva kotshintsho malunga ne-1am CET ngolwesiThathu, iTorvalds itsale uhlaziyo lothungelwano kwindawo yogcino lukaDavid Millers, kunye neWireGuard ephezulu kuluhlu.
Ngaloo nto ilindelwe i-kernel 5.6 Ekupheleni kuka-Matshi okanye ekuqaleni kuka-Epreli Ekugqibeleni izakuxhasa i-WireGuard VPN itonelaji yetekhnolojikunye nenkxaso yokuqala yolwandiso lwe-MPTCP (MultiPath TCP).
Ngaphambili, i-cryptographic primitives eyayifuneka ukuba i-WireGuard isebenze yayihanjisiwe ukusuka kwilayibrari yeZinc ukuya kwi-Crypto API esemgangathweni kwaye yafakwa kwi-kernel 5.5.
IKernel I-Linux mhlawumbi ngebonelele ngenkxaso ye-Wireguard ixesha elide, ukuba bekungekho mbambano malunga nesiseko sokubethela esenzelwe ngokukodwa itekhnoloji yeVPN. Kuthathe malunga nonyaka onesiqingatha ukusombulula ezi ngxaki.
Le nkqubo yafunyanwa Iqela le-WireGuard liza kuthatha amanyathelo ngalo mbandela, okoko emva kothethathethwano kwinkomfa yeKernel Recipes, apho abadali beWiFiGuard ngoSeptemba bathathe isigqibo sokuyekisa ukutshintsha amabala abo ukusebenzisa i-API engundoqo ye-Crypto, apho abaphuhlisi be-WireGuard banezikhalazo malunga nokusebenza kunye nokhuseleko ngokubanzi.
Kwagqitywa ekubeni i-API iya kuqhubeka nokukhula, kodwa njengeprojekthi eyahlukileyo. Kamva ngo-Novemba, abaphuhlisi be-kernel bazibophelela Kwaye bavuma ukuhambisa enye yekhowudi kwi-kernel ephambili. Ngapha koko, ezinye izinto ziya kugqithiselwa kwikernel, kodwa hayi njenge-API eyahlukileyo, kodwa njengenxalenye yenkqubo esezantsi yeCrypto API.
U-Wireguard uthembisa ukusekwa koqhagamshelo olukhawulezayo, ukusebenza kakuhle, kunye nolawulo olomeleleyo, olukhawulezayo noluselubala lokukhutshwa kwesisu. Ukongeza, itekhnoloji ilula kakhulu ukuyilungisa kunezinye iitekhnoloji zeVPN kunye nokusebenzisa ukhuseleko ngokuchasene ne-eavesdropping kunye ne-encryption algorithms yamva nje.
Kwiwebhusayithi yabo, iqela le-WireGuard licacisa ukuba yintoni emisela umthetho olandelwayo ngaphandle kwabanye kwaye uthi:
“I-WireGuard yenzelwe ukuhanjiswa ngokulula kunye nokulula kwengqondo.
Yenzelwe ukuba iphunyezwe ngokulula kwimigca embalwa kakhulu yekhowudi, kwaye iphicothwe ngokulula ukuba semngciphekweni wokhuselo.
Xa kuthelekiswa nezigebenga ezinje nge * Swan / IPsec okanye iOpenVPN / i-OpenSSL, apho ukuphicothwa kweekhowudi ezinkulu kungumsebenzi otyhafisayo nakumaqela amakhulu eengcali zokhuseleko, iWireGuard yenzelwe ukuba ihlolwe kakuhle ngabantu abathile.
I-TCP ezininzi, kwelinye icala, lulwandiso lwenkqubo yeTCP evumela ukuba uququzelele ukusebenza konxibelelwano lweTCP ukuhanjiswa kwepakethi ngaxeshanye kwiindlela ezininzi ngeendlela ezahlukeneyo zenethiwekhi eziboshwe kwiidilesi ezahlukeneyo ze-IP (ukusetyenziswa konxibelelwano lwedatha ezininzi ngaxeshanye)
I-TCP ezininzi Ingasetyenziselwa ukwandisa ukusebenza kunye nokwandisa ukuthembeka.
Umzekelo, iMPTCP inokusetyenziselwa ukuhlela ukudluliselwa kwedatha kwi-smartphone isebenzisa ii-WiFi kunye ne-3G iilinki ngaxeshanye, okanye ukunciphisa iindleko ngokudibanisa iserver usebenzisa amakhonkco aliqela atshiphu endaweni enye ebizayo.
Elinye ityala, umzekelo, likwiseva ezifanelekileyo, utshintsho olungenamthungo ukusuka kwi-WLAN ukuya kunxibelelwano lwefowuni lunokwenzeka ukuba uluhlu lweWLAN ligqithile. Ukudibanisa i-Multipath TCP kwi-Linux nako kuyanceda kuba iteknoloji ye-5G ezayo ifuna itekhnoloji.
Ekugqibeleni, Inguqulelo entsha yeLinux Kernel 5.6 ilindelekile njengoko besesitshilo ekuqaleni ndifikile Ekupheleni kuka-Matshi (umhla wokulinga ngulo Ngomhla wamashumi amabini anesibini kuMatshiokanye ekuqaleni kuka-Epreli (Epreli 6) nangona oku kunokwahluka kancinci.
Umthombo: https://git.kernel.org