ExpressVPN 宣佈開源 Lightway 協議，VPN 市場將有大變化？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"blockquote","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2021 年 8 月 10 日，ExPressVPN 在其官網博客宣佈，開源他們最新的 Lightway 協議，讓更多的人可以享受到 Lightway 帶來的好處。Lightway 是 ExpressVPN 研發的新一代 VPN 協議，旨在爲用戶提供更快、更安全、更可靠的 VPN 體驗。"}]}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"Lightway 的由來"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"一直以來，主流 VPN 廠商都在使用諸如 OpenVpn、IKEv2、IPsec、WireGuard 之類的協議。ExpressVPN 作爲行業巨頭，在表示不會使用 WireGuard 協議後，決定開始嘗試獨立開發一個新的 VPN 協議-- "},{"type":"link","attrs":{"href":"https:\/\/github.com\/expressvpn\/lightway-core","title":null,"type":null},"content":[{"type":"text","text":"Lightway"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"去年 ExpressVPN 就開始使用 Lightway 作爲他們新的虛擬私人網絡協議，一年左右的時間裏 ExpressVPN 也一直在內部不斷測試改進 Lightway 協議。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"Lightway 作爲 ExpressVPN 從頭構建的一個全新 VPN 協議，與舊的 VPN 協議相比有着代碼簡潔高效、連接和運行速度更快以及穩定性更好的優勢。藉助於 ExpressVPN 提供全平臺應用支持，可用於 Android、iOS、Windows、Mac、Linux 和路由器。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"更安全快速可靠的新標準"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"提高性能，減輕負載"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"Lightway 不會受到其他協議遺留功能或技術債務的影響。這一點從它僅有約 2000 行核心代碼的代碼庫中就能看出來。極簡的代碼庫不但CPU 負載很低，維護和審計也相對容易。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在 ExpressVPN 的官方測試中，Lightway 連接速度比舊協議快 2.5 倍，超過一半的時間裏，Lightway 不到一秒就可以成功連接 VPN。同時 90% 的受測用戶也表示 Lightway 能比之前更快的連接到 VPN，上網的速度也更快。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"動態處理應對複雜網絡變化"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"從 Wi-Fi 到蜂窩網絡，從無信號到有信號，大多數舊的 VPN 協議在處理這些網絡中斷和網絡交換的時候必須退出重新啓動會話或者出現卡頓，Lightway 可以讓 VPN 有更高的穩定性。即使網絡意外斷開，VPN 會話也會持續保持，直到你下次連接網絡，無需重新建立 VPN 鏈接。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"開源與審計"}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"Cure53 對 Lightway 進行測試"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"在全面推廣之前，ExpressVPN 邀請網絡安全公司 Cure53 對 Lightway 進行了滲透性測試和源代碼審計。Cure 53 發現了 14 個安全問題，但都沒被列爲“重大”。ExpressVPN 的工程團隊及時跟進並已在 7 月份修復了所有問題。感興趣的可以在這裏查看"},{"type":"link","attrs":{"href":"https:\/\/cure53.de\/pentest-report_lightway.pdf","title":null,"type":null},"content":[{"type":"text","text":"安全評估報告"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"對於這次測試，Cure53 補充道“ Lightway 上觀察到的代碼庫遵循一致的編碼模式，質量非常高。Lightway 協議在評估中給人留下了穩定的印象。儘管報告中列出了一些問題，但修復起來相當簡單。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"heading","attrs":{"align":null,"level":3},"content":[{"type":"text","text":"通過開源提升 Lightway 的信任度、透明度和安全性"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"審計之外，ExpressVPN 在開源許可證（GNU GPLv2 ）下發布了 Lightway 核心代碼。允許全球技術社區和個人測試、檢查代碼、識別潛在漏洞並提高整體安全性。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"如果發現安全漏洞，通過 ExpressVPN 的"},{"type":"link","attrs":{"href":"https:\/\/www.expressvpn.com\/bug-bounty","title":null,"type":null},"content":[{"type":"text","text":"漏洞賞金計劃"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]},{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"提交給 ExpressVPN，能夠獲得獎勵。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"ExpressVPN 副總裁 Harold Li 表示：“信任和透明度的舉措讓我們更有信心全面推出 Lightway，我們很高興能讓更多人享受 Lightway 的好處。”"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"領導 Lightway 工程工作的 ExpressVPN 熟悉架構師 Peter Membrey 補充道：“這是我們迄今爲止所做的最重要的創新之一，我們很高興通過與全世界分享 Lightway 來回饋隱私和安全社區。同時也鼓勵其他人對 Lightway 的代碼做出貢獻，與我們一起推動 VPN 行業向前發展。”"}]},{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"一些隱患和擔心"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"相比其他非常成熟的 VPN 協議，Lightway 雖然有一些優勢，但仍是個新生兒，會存在很多不穩定的因素和風險。嚐鮮體驗還可以，遷移到 Lightway 是否可以支持長期穩定使用尚需時間來驗證。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":" "}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}],"text":"參考："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.expressvpn.com\/blog\/lightway-open-source-security-audit\/","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/www.expressvpn.com\/blog\/lightway-open-source-security-audit\/"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.expressvpn.com\/blog\/expressvpn-wireguard-update\/","title":null,"type":null},"content":[{"type":"text","text":"https:\/\/www.expressvpn.com\/blog\/expressvpn-wireguard-update\/"}],"marks":[{"type":"color","attrs":{"color":"#494949","name":"user"}}]}]}]}