An buga sakin kayan rarrabawa don ƙirƙirar wutan wuta OPNsense 22.7, wanda shine reshe na aikin pfSense, wanda aka ƙirƙira tare da manufar ƙirƙirar kayan rarraba gabaɗaya wanda zai iya samun aiki a matakin hanyoyin kasuwanci don ƙaddamar da tacewar wuta da hanyar sadarwa. ƙofofin shiga. Ba kamar pfSense ba, aikin yana matsayin matsayin kamfani ɗaya ba wanda ke sarrafa shi, wanda aka haɓaka tare da haɗin kai kai tsaye na al'umma kuma yana da tsarin ci gaba gaba ɗaya a bayyane, tare da ba da damar yin amfani da duk wani ci gabansa a cikin samfuran ɓangare na uku, gami da kasuwanci. wadanda. An rarraba lambar tushe na sassan rarraba, da kayan aikin da ake amfani da su don haɗuwa, a ƙarƙashin lasisin BSD. An shirya taron a cikin hanyar LiveCD da hoton tsarin don yin rikodi akan faifan filasha (347 MB).
Babban manhajar rarrabawa ta dogara ne akan lambar FreeBSD. Siffofin OPNsense sun haɗa da kayan aikin gina tushen buɗaɗɗe gaba ɗaya, ikon shigar da fakiti akan FreeBSD na yau da kullun, kayan aikin daidaita kaya, hanyar sadarwa ta yanar gizo don tsara haɗin mai amfani zuwa hanyar sadarwa (Tashar Captive), hanyoyin bin diddigin yanayin haɗi (tashar wuta ta stateful bisa pf), iyakance bandwidth, tace zirga-zirga, da ikon ƙirƙirar. VPN bisa ga IPsec, OpenVPN da PPTP, haɗin kai tare da LDAP da RADIUS, tallafin DDNS (Dynamic DNS), tsarin rahotannin gani da zane-zane.
Rarraba yana ba da kayan aiki don ƙirƙirar ƙayyadaddun ƙayyadaddun kuskure dangane da amfani da ka'idar CARP kuma yana ba ku damar ƙaddamarwa, ban da babban Tacewar zaɓi, kullin madadin wanda za a daidaita shi ta atomatik a matakin daidaitawa kuma zai ɗauki nauyin kaya a ciki. al'amarin gazawar kumburin farko. Ana ba wa mai gudanar da aiki na zamani da sauƙi don daidaita bangon wuta, wanda aka gina ta amfani da tsarin gidan yanar gizon Bootstrap.
Daga cikin canje-canje:
- An yi canji zuwa reshen FreeBSD 13.1.
- Sabbin nau'ikan ƙarin shirye-shirye daga tashar jiragen ruwa, misali, PHP 8.0.20, Phalcon 5, sqlite 3.39.0, suricata 6.0.6, unbound 1.16.1.
- Ƙara tallafi don Intel QuickAssist (QAT).
- Ƙara goyon baya don fasahar VLAN Stacked (multilayer encapsulation na VLAN tags).
- An aiwatar da tsarin kariyar DDoS ta amfani da kuki SYN.
- Ƙara APCUPSD da CrowdSec plugins.
source: budenet.ru
