Aikin Firezone yana haɓaka uwar garken VPN don tsara damar yin amfani da runduna a cikin keɓewar cibiyar sadarwa na ciki daga na'urorin masu amfani da ke kan cibiyoyin sadarwar waje. Aikin yana nufin cimma babban matakin kariya da sauƙaƙa tsarin ƙaddamar da VPN. An rubuta lambar aikin a cikin Elixir da Ruby, kuma an rarraba a ƙarƙashin lasisin Apache 2.0.
Injiniyan injiniya mai sarrafa kansa na tsaro na Cisco ne ke haɓaka aikin, wanda ya yi ƙoƙarin ƙirƙirar mafita wanda ke sarrafa aiki tare da daidaitawar runduna kuma yana kawar da matsalolin da ya kamata a fuskanta yayin shirya amintaccen damar yin amfani da girgije VPCs. Ana iya tunanin Firezone azaman takwaransa na buɗe tushen zuwa OpenVPN Access Server, wanda aka gina akan WireGuard maimakon OpenVPN.
Don shigarwa, ana ba da fakitin rpm da deb don nau'ikan CentOS, Fedora, Ubuntu da Debian, shigarwar wanda baya buƙatar dogaro na waje, tunda an riga an haɗa duk abubuwan da suka dace ta amfani da kayan aikin Chef Omnibus. Don yin aiki, kawai kuna buƙatar kayan rarrabawa tare da Linux kernel wanda bai girmi 4.19 ba da tsarin kernel da aka haɗa tare da VPN WireGuard. A cewar marubucin, ƙaddamarwa da kafa uwar garken VPN za a iya yi a cikin 'yan mintuna kaɗan. Abubuwan haɗin yanar gizo suna gudana ƙarƙashin mai amfani mara amfani, kuma samun dama yana yiwuwa ta HTTPS kawai.
Don tsara tashoshin sadarwa a cikin Firezone, ana amfani da WireGuard. Firezone kuma yana da ginanniyar aikin Tacewar zaɓi ta amfani da nftables. A cikin sigar sa na yanzu, Tacewar zaɓi yana iyakance ga toshe zirga-zirga mai fita zuwa takamaiman runduna ko rukunonin sadarwa a cibiyoyin sadarwa na ciki ko na waje. Ana gudanar da gudanarwa ta hanyar haɗin yanar gizon yanar gizon ko a cikin yanayin layin umarni ta amfani da kayan aiki na firezone-ctl. Cibiyar sadarwar yanar gizo ta dogara ne akan Admin One Bulma.
A halin yanzu, duk abubuwan Firezone suna gudana akan sabar guda ɗaya, amma an fara haɓaka aikin tare da ido don daidaitawa kuma a nan gaba ana shirin ƙara ikon rarraba abubuwan haɗin yanar gizon yanar gizo, VPN da Tacewar zaɓi a cikin runduna daban-daban. Tsare-tsare kuma sun haɗa da haɗin kai na talla na matakin DNS, tallafi don jerin toshewar mai masaukin baki da na yanki, damar tantancewar LDAP/SSO, da ƙarin damar sarrafa mai amfani.
source: budenet.ru