I-Shadowsocks Outline isekela kuphela ama-AEAD cipher suite
Muva nje ukwethulwa kwe- inguqulo entsha yeseva elibamba i-outline-ss-server 1.4, lokho isebenzisa iphrothokholi ye-Shadowsocks ukufihla imvelo yethrafikhi, i-bypass firewall, namasistimu okuhlola amaphakethe weziwula.
Iseva ithuthukiswa iphrojekthi ye-Outline, ephinde inikeze isixhumi esibonakalayo esibophezelayo sohlelo lweklayenti nokulawula lokho ivumela umsebenzisi ukuthi athumele ngokushesha amaseva e-Shadowsocks aqashile ngokusekelwe kuseva ye-ss-schema ezindaweni zamafu zomphakathi noma kukhompyutha yakho.
Ngaphezu kwalokhu, kungenzeka ukuwaphatha ngokusebenzisa isikhombimsebenzisi sewebhu futhi uhlele ukufinyelela komsebenzisi ngephasiwedi. I-Jigsaw inesibopho sokuthuthukisa nokulungisa amakhodi, okuyingxenye engaphakathi kwe-Google edalwe ukuthuthukisa amathuluzi okugwema ukucwaninga nokunika amandla ukushintshana kwamahhala kolwazi.
Mayelana ne-Outline-ss-server
Umehluko phakathi kwe-outline-ss-server ne-go-shadowsocks2 wehla ekusekelweni kokuxhuma abasebenzisi abaningi. ngokusebenzisa imbobo yenethiwekhi eyodwa, ikhono lokuvula izimbobo eziningi zenethiwekhi ukuze uthole ukuxhumeka, usekelo lokuqalisa kabusha okushisayo nezibuyekezo zokumisa ngaphandle kokuphazamisa ukuxhumeka, ukuqapha okwakhelwe ngaphakathi namathuluzi okulinganisa ithrafikhi ngokusekelwe ku-prometheus .io yesikhulumi .
Kuhle ukusho ukuthi muva nje, umsebenzi oyinhloko wephrojekthi ye-Shadowsocks ugxile ekuthuthukisweni kweseva entsha ngolimi lwe-Rust, futhi ukuqaliswa kwe-Go akuzange kubuyekezwe isikhathi esingaphezu konyaka futhi kungemuva ngokuphawulekayo ekusebenzeni.
Iseva ye-ss-schema futhi yengeza ukuvikeleka ezicelweni zokuvota kanye nokuhlaselwa kokudlala kabusha yethrafikhi. Ukuhlasela ngezicelo zokuqinisekisa kuhloswe ukunquma ubukhona bommeleli, isibonelo umhlaseli angathumela amasethi edatha osayizi abahlukahlukene kuseva eqondiwe ye-Shadowsocks futhi ahlaziye ukuthi ingakanani idatha ezofundwa yiseva ngaphambi kokunquma iphutha futhi avale uxhumano. . Ukuhlasela kwe-replay kusekelwe ekuduneni isikhathi phakathi kweklayenti neseva bese uzama ukuthumela kabusha idatha entshontshiwe ukuze kunqunywe ukuba khona kommeleli.
Ukuvikela ekuhlaselweni ngezicelo zokuqinisekisa, i-outline-ss-server, lapho idatha embi ifika, ayikunqamuli ukuxhumana futhi ayibonisi iphutha, esikhundleni salokho, iyaqhubeka nokuthola ulwazi, isebenza njengohlobo lwembobo emnyama. Ukuvikela ekudlaleni futhi, idatha etholwe kuklayenti zibuye zihlolelwe izimpinda kusetshenziswa amasheke egcinwe ngokulandelana kwezinkulungwane zokugcina zokuxhawula (ubukhulu obuyinkulungwane ezingama-40, usayizi usethelwe ekuqaleni kweseva futhi udla amabhayithi angu-20 enkumbulo ngokulandelana ngakunye). Ukuze uvimbele izimpendulo eziphindaphindiwe ezivela kuseva, zonke izinhlelo zokuxhawula iseva zisebenzisa amakhodi okuqinisekisa e-HMAC anamalebula angu-32-bit.
Ngokwezinga lokucasha kwethrafikhi, iphrothokholi ye-Shadowsocks ekusetshenzisweni kweseva ye-ss-scheme iseduze nezinto zokuhamba ezixhumekeka ku-Obfs4 kunethiwekhi ye-Tor engaziwa. Umthetho olandelwayo wadalelwa ukweqa uhlelo lwase-China lokuhlolwa kwethrafikhi ("I-Firewall Enkulu YaseChina") futhi ikuvumela ukuthi ufihle ithrafikhi edluliselwa kwenye iseva ngendlela ephumelelayo (i-traffic iyinkinga ukuyibona ngenxa yokuxhumeka kwembewu okungahleliwe kanye nokulingisa okuqhubekayo ukugeleza).
I-SOCKS5 isetshenziswa njengephrothokholi yezicelo zommeleli: Ummeleli othobelana ne-SOCKS5 uqalwa kusistimu yendawo, efaka ithrafikhi kuseva ekude lapho izicelo zifakwa khona. I-traffic phakathi kweklayenti neseva ibekwe emhubheni obethelwe, kufihlwa iqiniso lokuthi ukudala kuwumsebenzi oyinhloko wama-Shadowsocks. Umhubhe we-TCP ne-UDP uyasekelwa, njengoba kunjalo ngokwakhiwa kwemigudu engafanele, engagcini nje ku-SOCKS5, ngokusebenzisa ama-plugin afana nezinto zokuthutha ezixhumeka ku-Tor.
para abanentshisekelo kuphrojekthi, kufanele wazi ukuthi i-Outline-ss-server ibhalwe kokuthi Go futhi ikhishwe ngaphansi kwelayisensi ye-Apache 2.0. Ikhodi yeseva elibamba ye-go-shadowsocks2, eyakhiwe umphakathi wonjiniyela we-Shadowsocks, isetshenziswa njengesisekelo.