Wasu kwanaki da suka gabata ExpressVPN ya bayyana buɗe tushen aiwatar da yarjejeniyar Lightway, wanda aka ƙera don cimma mafi ƙarancin lokutan saitin haɗi yayin riƙe matakan tsaro da aminci. An rubuta lambar a C kuma an rarraba ta ƙarƙashin lasisin GPLv2.
Aiwatarwa yana da ƙima sosai kuma ya yi daidai da layin lambobi dubu biyu, Bugu da ƙari, an ba da sanarwar tallafi ga Linux, Windows, macOS, iOS, dandamali na Android, magudanar ruwa (Asus, Netgear, Linksys) da masu bincike.
Game da Lightway
Lambar Lightway yana amfani da ingantattun ayyukan almarashirye-da-amfani s samar da wolfSSL library cewa an riga an yi amfani da shi a cikin FIPS 140-2 ingantattun mafita.
A cikin yanayin al'ada, yarjejeniya yana amfani da UDP don watsa bayanai da DTLS don ƙirƙirar tashar sadarwar da aka ɓoye. A matsayin zaɓi don tabbatar da aiki akan cibiyoyin UDP marasa amintattu ko iyakance, sabar tana ba da ƙarin abin dogaro, amma a hankali, yanayin watsawa wanda ke ba da damar canja wurin bayanai akan TCP da TLSv1.3.
A cikin shekarar da ta gabata, masu amfani da mu sun sami damar sanin yadda saurin haɗin haɗin su yake da Lightway, da sauri za su iya samun haɗin VPN, galibi a cikin ɗan ƙaramin sakan, kuma yadda amincin haɗin su yake, ko da sun canza. cibiyoyin sadarwa. Lightway har yanzu wani dalili ne, tare da ingantaccen bandwidth da kayan aikin sabar da muka gina, zamu iya samar da mafi kyawun sabis na VPN ga masu amfani da mu.
Kuma yanzu, kowa zai iya gani da kansa abin da aka haɗa a cikin mahimmin lambar Lightway, tare da karanta binciken mai zaman kansa na tsaron Lightway ta kamfanin yanar gizo na tsaro Cure53.
Gwaji ta ExpressVPN ya nuna cewa idan aka kwatanta da tsohuwar yarjejeniya (ExpressVPN tana goyan bayan L2TP / IPSec, OpenVPN, IKEv2, PPTP, da SSTP, amma baya fayyace abin da aka yi kwatankwacin), sauyawa zuwa Lightway ya rage lokacin saitin kira matsakaici na sau 2,5 (a cikin fiye da rabi na lokuta, an ƙirƙiri tashar sadarwa a ƙasa da daƙiƙa ɗaya).
Sabuwar yarjejeniya kuma ta rage adadin katsewa a cikin hanyoyin sadarwar tafi da gidanka mara dogaro da matsalolin ingancin sadarwa da kashi 40%.
A bangaren da tsaro na aiwatarwa muna iya gani a cikin sanarwar da aka ambata cewa An tabbatar da sakamakon binciken mai zaman kansa wanda Cure53 ya gudanar, wanda a wani lokaci ya gudanar da binciken NTPsec, SecureDrop, Cryptocat, F-Droid, da Dovecot.
Binciken ya haɗa da tabbatar da lambar tushe kuma ya haɗa da gwaji don gano yuwuwar raunin da ya faru (ba a yi la’akari da batutuwan da suka shafi kimiyyar lissafi ba).
Gaba ɗaya, an kimanta ingancin lambar, Amma duk da haka, binciken ya bayyana raunin abubuwa guda uku waɗanda zasu iya haifar da ƙi sabis da rauni ɗaya wanda ke ba da damar amfani da yarjejeniya azaman amplifier zirga -zirga yayin hare -haren DDoS.
An gyara matsalolin da aka ruwaito yanzu kuma an yi la’akari da haɓaka haɓakar lambar. Binciken ya kuma mai da hankali kan sanannun rauni da batutuwan da suka shafi abubuwan ɓangare na uku, kamar libdnet, WolfSSL, Unity, Libuv, da lua-crypt. Yawancin batutuwan ƙarami ne, ban da MITM a cikin WolfSSL (CVE-2021-3336).
Ci gaban turawa reference yarjejeniya Za a yi a GitHub tare da bayar da damar shiga cikin ci gaban wakilan al'umma (don canja canje-canje, ana buƙatar su sanya hannu kan yarjejeniyar CLA kan canja wurin mallakar haƙƙi ga lambar).
Har ila yau ana gayyatar sauran masu ba da sabis na VPN don ba da haɗin kai, tunda za su iya amfani da ƙa'idar da aka gabatar ba tare da ƙuntatawa ba. Haɗin yana buƙatar amfani da tsarin hawa na Duniya da Ceedling. An tsara aikin turawa azaman ɗakin karatu wanda zaku iya amfani da shi don haɗa abokin ciniki na VPN da ayyukan sabar cikin aikace -aikacen ku.
A ƙarshe, idan kuna sha'awar ƙarin sani game da shi na wannan aiwatarwa, zaku iya duba cikakkun bayanai A cikin mahaɗin mai zuwa.