A control plane for WireGuard

WireGuard is a VPN protocol that has gained significant interest recently. Its main advantages are: (i) simple configuration (via pre-shared SSH-like public keys), (ii) mobility support, (iii) reduced codebase to ease auditing, and (iv) Linux kernel implementation that yields high performance. However, WireGuard (intentionally) lacks a control plane. This means that each peer in a WireGuard network has to be manually configured with the other peers’ public key and IP addresses, or by other means. In this paper we present an architecture based on a centralized server to automatically distribute this information. In a nutshell, first we manually establish a WireGuard tunnel to the centralized server, and ask all the peers to store their public keys and IP addresses in it. Then, WireGuard peers use this secure channel to retrieve on-demand the information for the peers they want to communicate to. Our design strives to: (i) offer a key distribution scheme simpler than PKI-based ones, (ii) limit the number of public keys sent to the peers, and (iii) reduce tunnel establishment latency by means of an UDP-based protocol. We argue that such automation can help the deployment in enterprise or ISP scenarios. We also describe in detail our implementation and analyze several performance metrics. Finally, we discuss possible improvements regarding several shortcomings we found during implementation.This work was partially supported by the Spanish MINECO under contract TEC2017-90034-C2-1-R (ALLIANCE) and the Catalan Institution for Research and Advanced Studies (ICREA).Peer ReviewedPostprint (author's final draft

Los primeros tiempos de Cuba en la ruta antillana del café

The author analizes the historical process of Cuban coffee along two and a half centuries (until the end of Spanish colonial era), its transformation in a international commoditie from the end of XVIIIth century (after Saint Domingue revolution), its phases, the coffee cultivated land dismiss for sugar production and coffee popular difussion in Cuban cities and villages.En el presente artículo se da a conocer el proceso cafetalero en Cuba durante siglo y medio de actividad (desde su introducción al fin del dominio español sobre la isla), su transformación en objeto de comercio internacional desde finales del siglo XVIII tras la destrucción de Saint Domingue, sus etapas de auge y decadencia en la isla, el abandono de sus tierras de cultivo en favor del azúcar y la rápida difusión de su ingesta por la población de ciudades y pueblos de Cuba

Human Mesenchymal Stem Cells Prevent Neurological Complications of Radiotherapy

Radiotherapy is a highly effective tool for the treatment of brain cancer. However, radiation also causes detrimental effects in the healthy tissue, leading to neurocognitive sequelae that compromise the quality of life of brain cancer patients. Despite the recognition of this serious complication, no satisfactory solutions exist at present. Here we investigated the effects of intranasal administration of human mesenchymal stem cells (hMSCs) as a neuroprotective strategy for cranial radiation in mice. Our results demonstrated that intranasally delivered hMSCs promote radiation-induced brain injury repair, improving neurological function. This intervention confers protection against inflammation, oxidative stress, and neuronal loss. hMSC administration reduces persistent activation of damage-induced c-AMP response element-binding signaling in irradiated brains. Furthermore, hMSC treatment did not compromise the survival of glioma-bearing mice. Our findings encourage the therapeutic use of hMSCs as a non-invasive approach to prevent neurological complications of radiotherapy, improving the quality of life of brain tumor patients

Slavery and the african cultural legacy in the Caribbean

Con autorización de la editorial para este libro.[EN] The purpose of this book is to raise awareness among a wide audience of one of the most significant and shameful phenomena for humanity, as was the enslavement of over twelve and a half million Africans who were brought to America and forced to work and live as slaves. Many countries participated in the slave trade at different times and withvaried intensity (Great Britain, Portugal, France, Spain, Denmark, Netherlands, Germany, United States...).[ES] El propósito de esta obra es dar a conocer a un público amplio uno de los fenómenos de mayor trascendencia y vergüenza para la humanidad como fue la esclavización de más de doce millones y medio de africanos que fueron trasladados a América, obligados a trabajar y vivir como esclavos. Muchos países participaron en la trata de esclavos en distintos momentos y con diferente intensidad (Gran Bretaña, Portugal, Francia, España, Dinamarca, Países Bajos, Alemania, Estados Unidos…).Connected Worlds: The Caribbean, Origin of Modern World. This project has received funding from the European Union´s Horizon 2020 research and innovation programme under the Marie Sklodowska Curie grant agreement Nº 823846. This project is directed by professor Consuelo Naranjo Orovio, Institute of History-CSIC.Peer reviewe

Comunicació inalàmbrica ultraràpida

Persistence Optimization for MAC protocols in Wireless Networks on Chip.Optimización de la persistencia del protocolo MAC para redes inalámbricas en chips.Optimizació de la Persistencia del protocol MAC per a xarxes inalàmbriques dintre d'un chip

Pla de control per Wireguard basat en extracció.

The wireguard protocol has been recently introduced to provide communciation security among end-points. Wireguard has similar goals than traditional VPNs (Virtual Private Networks), but has been designed with efficiency and mobility in mind.This thesis is based on IP security, Internet Protocol (IP) was developed without security or mobility. Later with the time, IPsec was implemented, a secure IP protocol which is complicated, weighty and doesn?t include mobility either. Wireguard is a VPN protocol from the new security family protocols which provides a security layer for IP in a very simple way and also, includes mobility, a very useful feature in the nowadays networks. But, Wireguard doesn?t include a control-plane to manage all the cryptographic material into his users. I have used the Locator/Identifier Separation Protocol (LISP) to apply a Wireguard functional control-plane. In OOR software, where LISP is implemented, I merge all the Wireguard features with the LISP control-plane developing an efficient, functional and more important secure protocol. In the end, I achieve to include what Wireguard didn?t have, increasing his value and the use cases for that new secure protocol.Esta tesis se basa en la seguridad de IP, el Protocolo de Internet (IP) se desarrolló sin seguridad ni movilidad. Más adelante con el tiempo, se implementó IPsec, un protocolo de IP seguro que es complicado, pesado y que tampoco incluye movilidad. Wireguard es un protocolo de las nuevas familias VPNs que proporciona una capa de seguridad para IP de una manera muy simple y también incluye movilidad, una característica muy útil en las redes actuales. Pero, Wireguard no incluye un plano de control para administrar todo el material criptográfico en sus usuarios. He utilizado el Protocolo Locator/Identifier Separation Protocol (LISP) para aplicar un plano de control funcional a Wireguard. En el software OOR, donde se implementa LISP, fusiono todas las funciones de Wireguard con el plano de control de LISP, desarrollando un protocolo seguro eficiente y funcional. Al final, se consigue incluir lo que Wireguard no tenía al principio, aumentando su valor y los casos de uso donde se puede aplicar este nuevo protocolo de seguridad.Aquesta tesi es basa en la seguretat d'IP, el Protocol d'Internet (IP) es va desenvolupar sense seguretat ni mobilitat. Més endavant, amb el temps, es va implementar IPsec, un protocol d'IP segur que és complicat, pesat pero que tampoc inclou mobilitat. Wireguard és un protocol de les noves famílies de VPNs que proporciona una capa de seguretat per a IP d'una manera molt simple i tenint en compte la mobilitat a Internet, una característica molt útil en les xarxes actuals. Però, Wireguard no inclou un pla de control per administrar tot el material criptogràfic entre els seus usuaris. He utilitzat el Protocol Locator/*Identifier Separation Protocol (LISP) per a aplicar un pla de control funcional a Wireguard. En el programari OOR, on s'implementa LISP, fusiono totes les funcions de Wireguard amb el pla de control de LISP, desenvolupant un protocol segur eficient i funcional. Al final, s'aconsegueix incloure el que Wireguard no tenia al principi, augmentant el seu valor i els casos d'ús on es pot aplicart aquest nou protocol de seguretat

Comunicació inalàmbrica ultraràpida

Persistence Optimization for MAC protocols in Wireless Networks on Chip.Optimización de la persistencia del protocolo MAC para redes inalámbricas en chips.Optimizació de la Persistencia del protocol MAC per a xarxes inalàmbriques dintre d'un chip

Comunicació inalàmbrica ultraràpida

Persistence Optimization for MAC protocols in Wireless Networks on Chip.Optimización de la persistencia del protocolo MAC para redes inalámbricas en chips.Optimizació de la Persistencia del protocol MAC per a xarxes inalàmbriques dintre d'un chip

Human mesenchymal stem cells prevent neurological complications of radiotherapy

Radiotherapy is a highly effective tool for the treatment of brain cancer. However, radiation also causes detrimental effects in the healthy tissue, leading to neurocognitive sequelae that compromise the quality of life of brain cancer patients. Despite the recognition of this serious complication, no satisfactory solutions exist at present. Here we investigated the effects of intranasal administration of human mesenchymal stem cells (hMSCs) as a neuroprotective strategy for cranial radiation in mice. Our results demonstrated that intranasally delivered hMSCs promote radiation-induced brain injury repair, improving neurological function. This intervention confers protection against inflammation, oxidative stress, and neuronal loss. hMSC administration reduces persistent activation of damage-induced c-AMP response element-binding signaling in irradiated brains. Furthermore, hMSC treatment did not compromise the survival of glioma-bearing mice. Our findings encourage the therapeutic use of hMSCs as a non-invasive approach to prevent neurological complications of radiotherapy, improving the quality of life of brain tumor patients.This work was funded by grants from the non-profit foundation “Fundación Progreso y Salud” of the Andalusian Regional Ministry of Health (VC-G, PI-0109-2014 and PI-0272-2017), the Spanish Ministry of Economy, Industry and Competitiveness, Instituto de Salud Carlos III co-funded by Fondos FEDER (BS, RD16/0011/0034, PI17/02104; AM-M, PI18/01590, PI15/00134; AH, PI16/00259) and the crowdfunding platform PRECIPITA of the Spanish Foundation for Science and Technology (VC-G, 2018-000237). AM-M is a recipient of a Miguel Servet contract (CP14/00105) from the Instituto de Salud Carlos III co-funded by Fondos FEDER whereas VC-G is a recipient of a Sara Borrell contract (CD16/00118) from the Instituto de Salud Carlos III co-funded by Fondos FEDER. CIBERDEM is an initiative of the Instituto de Salud Carlos III