{"id":100869,"date":"2021-07-29T16:23:24","date_gmt":"2021-07-29T14:23:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-21-7"},"modified":"2021-07-29T16:23:24","modified_gmt":"2021-07-29T14:23:24","slug":"vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-21-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-21-7","title":{"rendered":"Release of OPNsense 21.7 Firewall Distribution","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

The release of the OPNsense 21.7 distribution for creating firewalls has taken place. This is a branch of the pfSense project, developed to create a fully open distribution that could possess features on par with commercial solutions for deploying firewalls and network gateways. Unlike pfSense, the project is positioned as independent from any single company, developed with direct community involvement, and has a completely transparent development process, providing the opportunity to utilize any of its developments in third-party products, including commercial ones. The source texts of the distribution components, as well as the tools used for assembly, are distributed under the BSD license. The builds are prepared in the form of LiveCD and system images for writing to Flash drives (422 MB). <\/p>\n

The basic filling of the distribution is based on HardenedBSD code, which supports a synchronized fork of FreeBSD, integrating additional security mechanisms and techniques to counteract vulnerability exploitation methods. OPNsense features a fully open build toolset, the ability to install packages on top of standard FreeBSD, load balancing tools, a web interface for organizing user connections (Captive portal), stateful connection tracking mechanisms based on pf, bandwidth limitation, traffic filtering, and creation. VPN<\/a> based on IPsec, OpenVPN, and PPTP, LDAP and RADIUS integration, DDNS (Dynamic DNS) support, and a system of visual reports and charts. <\/p>\n

The distribution provides tools for creating fault-tolerant configurations based on the CARP protocol, allowing for the launch of a backup node alongside the primary firewall, which will be automatically synchronized at the configuration level and take over the load in case of a primary node failure. A modern and simple interface for configuring the firewall is offered to the administrator, built using the Bootstrap web framework. <\/p>\n

Among the changes: <\/p>\n