Saki na BSD Router Project 1.97 rarraba

Olivier Cochard-Labbé, mahaliccin rarrabawar FreeNAS, gabatar sakin kayan rarraba na musamman Ayyukan Router BSD 1.97 (BSDRP), sananne don sabunta codebase zuwa FreeBSD 12.1. An tsara rarrabawar don ƙirƙirar ƙananan hanyoyin sadarwa na software waɗanda ke goyan bayan ka'idoji masu yawa, kamar RIP, OSPF, BGP da PIM. Ana gudanar da gudanarwa a yanayin layin umarni ta hanyar haɗin CLI mai tunawa da Cisco. Rarrabawa akwai a cikin majalisai na amd64 da i386 architectures (girman hoton shigarwa 140 MB).

Baya ga haɓakawa zuwa FreeBSD 12.1-STABLE, sabon sigar na ban mamaki kunna microcode loading don masu sarrafawa na Intel ta tsohuwa da ƙara wayoyi, Mellanox Firmware, vim-tiny, mrtparse, nrpe3, perl, bash da fakitin frr7-pythontools, kazalika da if_cxgbev (Chelsio Ethernet VF) da if_qlxgb (Ethernet QLogic 3200) direba Ta hanyar tsoho, an kunna daidai toshewa na ICMP turawa. Sigar software da aka sabunta sun haɗa da mai sauƙi-rsa 3.0.7, FRR 7.4, pmacct 1.7.4, openvpn 2.4.9 da strongswan 5.8.4. Multicast utilities don IPv6 (pim6-kayan aikin, pim6dd, pim6sd) an cire su daga kunshin.

Babban halayen rarraba:

• Kit ɗin ya haɗa da fakiti guda biyu tare da aiwatar da ka'idojin zirga-zirga: FRRouting (Quagga cokali mai yatsa) tare da goyan bayan BGP, RIP, RIPng (IPv6), OSPF v2, OSFP v3 (IPv6), ISIS da Tsuntsu tare da goyan bayan BGP, RIP, RIPng (IPv6), OSPF v2 da OSFP v3 (IPv6);
• An daidaita rarraba don yin amfani da layi daya na tebur daban-daban daban-daban (FIBs), an ɗaure su zuwa musaya na gaske da kama-da-wane;
• SNMP (bsnmp-ucd) ana iya amfani dashi don saka idanu da gudanarwa. Yana goyan bayan fitar da bayanan zirga-zirga a cikin nau'in rafukan Netflow;
• Don kimanta aikin cibiyar sadarwa, ya haɗa da abubuwan amfani kamar NetPIPE, iperf, netblast, netsend da netreceive. Don tara kididdigar zirga-zirga, ana amfani da ng_netflow;
• Kasancewar freevrrpd tare da aiwatar da ka'idar VRRP (Virtual Router Redundancy Protocol, RFC 3768) da ucarp tare da goyan bayan ka'idar CARP, wanda aka tsara don tsara aikin na'urori masu jure wa kuskure ta hanyar ɗaure adireshin MAC mai kama da sabar mai aiki, wanda idan akwai gazawar an koma zuwa uwar garken madadin. A cikin yanayin al'ada, ana iya rarraba kaya a cikin duka sabobin, amma a cikin yanayin rashin nasara, na'ura mai ba da hanya tsakanin hanyoyin sadarwa na farko zai iya ɗaukar nauyin na biyu, kuma na biyu - na farko;
• mpd (Multi-link PPP daemon) yana tallafawa PPTP, PPPoE da L2TP;
• Don sarrafa bandwidth, an ba da shawarar yin amfani da mai siffa daga IPFW + dummynet ko mota ng_;
• Don Ethernet, yana goyan bayan aiki tare da VLAN (802.1q), haɗin haɗin gwiwa da kuma amfani da gadoji na cibiyar sadarwa ta amfani da Rapid Spanning Tree Protocol (802.1w);
• Ana amfani dashi don saka idanu lura;
• An bayar da tallafin VPN: GRE, GIF, IPSec (IKEv1 da IKEv2 tare da strongswan), OpenVPN da Wireguard;
• Tallafin NAT64 ta amfani da tayga daemon da goyon bayan ɗan ƙasa don ramukan IPv6-to-IPv4;
• Don shigar da ƙarin shirye-shirye, yi amfani da mai sarrafa fakitin pkgg;
• Ya haɗa da uwar garken DHCP da abokin ciniki na isc-dhcp, da kuma sabar saƙon ssmtp;
• Yana goyan bayan gudanarwa ta hanyar SSH, tashar tashar jiragen ruwa, telnet da na'ura wasan bidiyo na gida. Don sauƙaƙe gudanarwa, kit ɗin ya haɗa da tmux utility (BSD analogue na allo);
• Hotunan taya da aka ƙirƙira bisa FreeBSD ta amfani da rubutun NanoBSD;
• Don tabbatar da sabunta tsarin, an ƙirƙiri ɓangarori biyu akan katin Flash ɗin; idan akwai sabunta hoto, ana loda shi cikin bangare na biyu; bayan sake kunnawa, wannan ɓangaren yana aiki, kuma ɓangaren tushe yana jiran sabuntawa na gaba ya bayyana ( ana amfani da partitions bi da bi). Zai yiwu a sake komawa zuwa yanayin da ya gabata na tsarin idan an gano matsaloli tare da sabuntawar da aka shigar;
• Kowane fayil yana da sha256 checksum, wanda ke ba ka damar tabbatar da amincin bayanan.

source: budenet.ru