Olivier Cochard-Labbé, creator of the FreeNAS distribution, release of the specialized distribution (BSDRP), notable for updating the codebase to FreeBSD 12.1. The distribution is intended for creating compact software routers that support a wide range of protocols such as RIP, OSPF, BGP, and PIM. Management is done via a command-line interface reminiscent of Cisco. The distribution is available for amd64 and i386 architectures (installation image size 140 MB).
In addition to the update to FreeBSD 12.1-STABLE, the new version includes by default the loading of microcode for Intel processors and the addition of packages such as wireguard, Mellanox Firmware, vim-tiny, mrtparse, nrpe3, perl, bash, and frr7-pythontools, as well as drivers if_cxgbev (Chelsio Ethernet VF) and if_qlxgb (Ethernet QLogic 3200). By default, correct blocking of ICMP redirects is enabled. Updates to software versions include easy-rsa 3.0.7, FRR 7.4, pmacct 1.7.4, openvpn 2.4.9, and strongswan 5.8.4. Multicast utilities for IPv6 (pim6-tools, pim6dd, pim6sd) have been removed.
Key features of the distribution:
- Includes two packages with routing protocol implementations: (fork of Quagga) with support for BGP, RIP, RIPng (IPv6), OSPF v2, OSPF v3 (IPv6), ISIS, and with support for BGP, RIP, RIPng (IPv6), OSPF v2, and OSPF v3 (IPv6);
- The distribution is adapted for the parallel use of several isolated routing tables (FIB) tied to real and virtual interfaces;
- For monitoring and management, SNMP (bsnmp-ucd) can be used. It supports the export of traffic data in the form of Netflow streams;
- To assess network performance, utilities such as NetPIPE, iperf, netblast, netsend, and netreceive are included. For collecting traffic statistics, ng_netflow is used;
- The presence of freevrrpd implementing the VRRP (Virtual Router Redundancy Protocol, RFC 3768) protocol and ucarp with support for the CARP protocol, designed for organizing fault-tolerant routers by binding a virtual MAC address to the active server, allowing backup server takeover in case of failure. Under normal operation, load can be distributed across both servers, but in case of failure, the first router can take on the load of the second, and the second can take on the first;
- (Multi-link PPP daemon) with support for PPTP, PPPoE, and L2TP;
- To manage bandwidth, a shaper from IPFW + dummynet is recommended. ;
- For Ethernet, support for VLAN (802.1q), link aggregation, and network bridges using the Rapid Spanning Tree Protocol (802.1w) is provided;
- For monitoring, the following is used ;
- VPN support is provided: GRE, GIF, IPSec (IKEv1 and IKEv2 with strongswan), OpenVPN, and Wireguard;
- Support for NAT64 using the tayga daemon and built-in support for IPv6-to-IPv4 tunnels;
- A package manager pkgng is used for installing additional programs;
- Includes the isc-dhcp DHCP server and client, as well as the ssmtp mail server;
- Management support via SSH, serial port, telnet, and local console. For easier administration, the package includes the tmux utility (BSD equivalent of screen);
- Boot images are generated based on FreeBSD using a script ;
- To ensure system updates on the Flash card, two partitions are created; when an updated image is available, it is loaded into the second partition, which becomes active after reboot, while the base partition waits for the next update (the partitions are used alternately). Rollback to a previous system state is possible in case of issues with the installed update;
- A sha256 checksum is provided for each file, allowing for integrity verification.
Source: opennet.ru
