Zida zogawa zopangira ma firewall a OPNsense 20.1 zilipo

adawona kuwala zida zogawa kuti mupange ma firewall OPNSEnse 20.1, yomwe ndi foloko ya polojekiti ya pfSense, yopangidwa ndi cholinga chopanga kugawa kotseguka komwe kungakhale ndi ntchito zothetsera malonda opangira ma firewall ndi zipata za intaneti. Mosiyana ndi pfSense, polojekitiyi ili ngati yosayendetsedwa ndi kampani imodzi, yopangidwa ndi kutenga nawo mbali mwachindunji kwa anthu ammudzi ndipo ili ndi ndondomeko yachitukuko yowonekera bwino, komanso kupereka mwayi wogwiritsa ntchito zomwe zikuchitika muzinthu zamagulu achitatu, kuphatikizapo malonda. omwe. Zolemba zoyambira za magawo ogawa, komanso zida zomwe zimagwiritsidwa ntchito pophatikiza, kufalitsa pansi pa layisensi ya BSD. Misonkhano kukonzekera mu mawonekedwe a LiveCD ndi chithunzi chadongosolo chojambulira pa Flash drive (280 MB).

Zomwe zili zofunika pakugawa zimatengera code Chithunzi chaBSD11, yomwe imathandizira foloko yolumikizidwa ya FreeBSD, yomwe imaphatikiza njira zowonjezera zachitetezo ndi njira zothana ndi kugwiritsa ntchito ziwopsezo. Pakati mwayi OPNsense imatha kusiyanitsidwa ndi zida zotsegulira zotseguka, kuthekera koyika ngati phukusi pamwamba pa FreeBSD yokhazikika, zida zosinthira katundu, mawonekedwe apaintaneti okonzekera kulumikizana ndi netiweki (Captive portal), kukhalapo kwa njira zolumikizirana. kutsata mayendedwe olumikizirana (chiwongolero chamoto chokhazikitsidwa ndi pf), kukhazikitsa zoletsa bandwidth, kusefa kwamagalimoto, kupanga VPN kutengera IPsec, OpenVPN ndi PPTP, kuphatikiza ndi LDAP ndi RADIUS, kuthandizira kwa DDNS (Dynamic DNS), dongosolo la malipoti owonera ndi ma graph .

Kuphatikiza apo, kugawa kumapereka zida zopangira masinthidwe olekerera zolakwika potengera kugwiritsa ntchito protocol ya CARP ndikukulolani kuti muyambitse, kuwonjezera pa chowotcha chachikulu, node yosunga zobwezeretsera yomwe idzalumikizidwa yokha pamlingo wokonzekera ndipo idzatenga. katundu pakachitika kulephera koyambirira kwa node. Woyang'anira amapatsidwa mawonekedwe amakono komanso osavuta kuti akonze zozimitsa moto, zomangidwa pogwiritsa ntchito Bootstrap web framework.

Mu mtundu watsopano:

  • Kugwira ntchito kwa intaneti yolumikizira ogwiritsa ntchito opanda zingwe (Captive portal) kwawonjezeka;
  • IPsec tsopano imathandizira kutsimikizika kwachinsinsi pagulu;
  • Anawonjezera kuthekera kopanga ziphaso pogwiritsa ntchito ma elliptic curve algorithms;
  • Thandizo lowonjezera la VXLAN ndi zida za Loopback;
  • Kuwunika magwiridwe antchito a firmware kwalimbikitsidwa;
  • M'malamulo omwe amamangiriridwa ku mawonekedwe a intaneti, ndizotheka kukhazikitsa chomangira kumayendedwe a mapaketi (obwera / otuluka) ndikugwira ntchito mumayendedwe osafulumira (lamulo lomaliza lomwe limakwaniritsa zikhalidwe limayambitsidwa, osati loyamba);
  • Malo otsetsereka odula mitengo adalembedwanso pogwiritsa ntchito dongosolo la MVC ndipo tsopano amathandizira kasamalidwe ka API;
  • Mtundu wosasinthika wa Python ndi 3.7;
  • Mapulogalamu osinthidwa, kuphatikizapo LibreSSL 3.0, OpenSSL 1.1.1, php 7.2.27, isc-dhcp 4.4.2, zabbix4-proxy 1.2 ndi jQuery 3.4.1;
  • Thandizo lowonjezera la Google Backup API 2.4.

Source: opennet.ru

Kuwonjezera ndemanga