OPNsense 20.1 Firewall nkesa dị

Hụrụ ọkụ ihe nkesa maka ịmepụta firewalls OPNsense 20.1, nke bụ ndụdụ nke ọrụ pfSense, nke e mepụtara na ebumnuche nke ịmepụta nkesa na-emeghe kpamkpam nke nwere ike ịrụ ọrụ nke ngwọta azụmahịa maka ịkwanye ọkụ ọkụ na ọnụ ụzọ netwọk. N'adịghị ka pfSense, a na-edobe ọrụ ahụ dịka otu ụlọ ọrụ anaghị achịkwa ya, mepụtara site na ntinye aka kpọmkwem nke obodo ma nwee usoro mmepe zuru oke, yana inye ohere iji ihe ọ bụla n'ime mmepe ya na ngwaahịa ndị ọzọ, gụnyere azụmahịa. ndị. Ederede isi mmalite nke ihe nkesa nkesa, yana ngwaọrụ eji eme mgbakọ, kesaa n'okpuru ikikere BSD. Mgbakọ kwadebere n'ụdị LiveCD na onyonyo sistemụ maka ịdekọ na draịva Flash (280 MB).

Isi ọdịnaya nke nkesa dabere na koodu Hardened BSD 11, nke na-akwado ndụdụ nke FreeBSD mekọrịtara ọnụ, nke na-ejikọta usoro nchekwa na usoro iji gbochie nrigbu nke adịghị ike. N'ime Ohere Enwere ike ịmata OPNsense site na ngwa ngwa mgbakọ mepere emepe kpamkpam, ikike ịwụnye n'ụdị ngwugwu n'elu FreeBSD oge niile, akụrụngwa na-edozi ibu, ihe ntanetị weebụ maka ịhazi njikọ ndị ọrụ na netwọkụ (Portal Captive), ọnụnọ nke usoro maka steeti njikọ nsochi (ọkụ ọkụ steeti dabere na pf), mwube bandwidth mgbochi, nzacha okporo ụzọ, imepụta VPN dabere na IPsec, OpenVPN na PPTP, njikọta na LDAP na RADIUS, nkwado maka DDNS (Dynamic DNS), sistemụ akụkọ na eserese na eserese. .

Tụkwasị na nke ahụ, nkesa na-enye ngwá ọrụ maka ịmepụta nhazi ndị na-adịghị mma na-adabere n'iji usoro CARP mee ihe ma na-enye gị ohere ịmalite, na mgbakwunye na firewall bụ isi, oghere ndabere nke ga-ejikọta ya na-akpaghị aka na nhazi nhazi ma ga-eweghara ya. ibu na ihe omume nke isi ọnụ ọdịda. A na-enye onye nchịkwa ihe ọhụụ na nke dị mfe maka ịhazi firewall, nke e wuru site na iji usoro weebụ Bootstrap.

Na ụdị ọhụrụ:

  • Arụ ọrụ nke ntanetị weebụ maka ijikọ ndị ọrụ na netwọk ikuku (Portal Captive) abawanyela;
  • IPsec na-akwado ugbu a nyocha igodo ọha;
  • Agbakwunyere ikike ịmepụta asambodo site na iji elliptical curve algọridim;
  • Nkwado agbakwunyere maka ngwaọrụ VXLAN na Loopback;
  • Emeela ka nyocha arụmọrụ firmware sie ike;
  • Na iwu ejikọtara na netwọk netwọk, ọ ga-ekwe omume ịtọ njikọ na ntụziaka nke ngwugwu (na-abata / ọpụpụ) ma na-arụ ọrụ na ọnọdụ na-adịghị ngwa ngwa (iwu ikpeazụ nke na-egbo ọnọdụ na-akpalite, ọ bụghị nke mbụ);
  • Edegharịala n'ihu osisi n'ihu site na iji usoro MVC ma ugbu a na-akwado njikwa API;
  • Ụdị Python nke ndabara bụ 3.7;
  • Ụdị ngwanrọ emelitere, gụnyere LibreSSL 3.0, OpenSSL 1.1.1, php 7.2.27, isc-dhcp 4.4.2, zabbix4-proxy 1.2 na jQuery 3.4.1;
  • Nkwado agbakwunyere maka Google Backup API 2.4.

isi: opennet.ru

Tinye a comment