{"id":40630,"date":"2020-02-02T15:06:10","date_gmt":"2020-02-02T12:06:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/dostupen-distributiv-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-20-1"},"modified":"2020-02-02T15:06:10","modified_gmt":"2020-02-02T12:06:10","slug":"dostupen-distributiv-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-20-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/dostupen-distributiv-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-20-1","title":{"rendered":"A distribution for creating firewalls OPNsense 20.1 is available.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Came to light<\/a><\/noindex> Distribution for creating firewalls OPNsense 20.1<\/a><\/noindex>, which is a branch of the pfSense project, created to form a fully open distribution capable of providing commercial-level functionality for deploying firewalls and network gateways. Unlike pfSense, the project is positioned as not controlled by any single company, developed with the direct participation of the community, and possesses a completely transparent development process, as well as providing the ability to use any of its developments in third-party products, including commercial ones. The source texts for the distribution components, as well as the tools used for assembly, is distributed<\/a><\/noindex> under the BSD license. Builds are prepared<\/a><\/noindex> in the form of LiveCD and system images for writing to Flash drives (280 MB). <\/p>\n

The basic framework of the distribution is based on the code HardenedBSD 11<\/a><\/noindex>, which supports a synchronized fork of FreeBSD, integrating additional protection mechanisms and techniques against vulnerability exploitation methods. Among the features<\/a><\/noindex> of OPNsense, one can highlight the fully open build toolkit, the ability to install in the form of packages over standard FreeBSD, load balancing tools, a web interface for organizing user connections to the network (Captive portal), mechanisms for tracking connection states (stateful firewall based on pf), setting bandwidth limits, traffic filtering, creating VPNs based on IPsec, OpenVPN, and PPTP, integration with LDAP and RADIUS, support for DDNS (Dynamic DNS), and a system of visual reports and graphs. <\/p>\n

Additionally, the distribution provides tools for creating fault-tolerant configurations, based on the use of the CARP protocol, allowing a backup node to be launched alongside the primary firewall, which will be automatically synchronized at the configuration level and take on the load in case of a primary node failure. For the administrator, a modern and simple interface for configuring the firewall is offered, built using the Bootstrap web framework.<\/p>\n

In the new version:\n<\/p>\n