6.1.10. Component Analysis

Component analysis tries to reflect each application or framework used in the Agent to provide functionality. These three major components are WireGuard, OpenVpn and OSQuery.

6.1.10.1. WireGuard

WireGuard is an open-source VPN technology that allows secure point-to-point connections to be established using the UDP connection protocol, as this protocol does not need to perform checks like TCP and would therefore be faster.

Another outstanding feature of this technology, in addition to its speed, is the reduction of the code used for its implementation. Unlike other VPN technologies such as OpenVpn, WireGuard has fewer lines and this offers a greater advantage when it comes to learning how it works internally and is also easier to patch in the event of a bug.

This software is embedded in the multiplatform Agent (making use of the generated dll libraries). Therefore, it would not be necessary to install any external applications, since the WireGuard technology is part of the Agent.

Version used on Multiplatform Agent: 0.10.1

LICENSE: The kernel components are released under the GPLv2, as is the Linux kernel itself. Other projects are licensed under MIT, BSD, Apache 2.0, or GPL, depending on context. https://www.wireguard.com/#license

6.1.10.2. OpenVpn

OpenVpn, like the WireGuard VPN technology discussed above, it is also a free software. It is much older and uses the TCP communication protocol. This was the initial VPN component, while the cross-platform agent was later extended to support new VPN technologies.

OpenVpn is an external dependency for the cross-platform Agent, so it is installed as a standalone application when installing the Agent. When the agent is uninstalled, the OpenVpn application that had been installed as a requirement would also be uninstalled (only in the case that the agent installed this dependency previously).

Version used on Multiplatform Agent: 2.4.9 (Windows 7 or higher compatibility)

6.1.10.3. OSQuery

OSQuery is a framework or tool used to obtain information about the operating system and its components. This application, created by Facebook, returns information in the form of SQL tables that can be such as the operating system version, installed applications, the security status of the computer, among others.

The limitation of this component, which limits the Agent application, is that only a 64-bit version is published for Windows. Therefore, the multiplatform Agent is only valid on 64-bit Windows machines.

OSQuery Version used on Multiplatform Agent: 5.11.0