Olivier Cochard-Labbé, the creator of the FreeNAS distribution, has released a specialized version of the BSD Router Project 1.994 (BSDRP), notable for updating the codebase to the in-development branch of FreeBSD 15. This distribution is designed for creating compact software routers supporting the routing protocols RIP, OSPF, BGP, and PIM. Management is performed via a command-line interface resembling the Cisco IOS interface. The distribution is available in builds for the x86_64 architecture (installation image size is 190 MB).
Glavne karakteristike verzije:
- The package includes two routing protocol implementations: FRRouting (a fork of Quagga) with support for BGP, RIP, RIPng (IPv6), OSPF v2, OSPF v3 (IPv6), ISIS, and BIRD with support for BGP, RIP, RIPng (IPv6), OSPF v2, and OSPF v3 (IPv6).
- The distribution is adapted for the simultaneous use of multiple isolated routing tables (FIB) linked to real and virtual interfaces.
- SNMP (bsnmp-ucd) can be used for monitoring and management.
- Exporting traffic data in the form of Netflow streams is supported.
- For network performance evaluation, the package includes tools such as NetPIPE, iperf, netblast, netsend, and netreceive. ng_netflow is used to accumulate traffic statistics.
- Support for creating failover routers from two strežnikov — under normal operation, the load can be distributed between both servers, but in the event of a failure, the first router can take over the load of the second one, and the second can take over the first (this applies the binding to the active server of the virtual MAC address). The implementation is based on using VRRP (Virtual Router Redundancy Protocol) and CARP (Common Address Redundancy Protocol), achieved with the ucarp package.
- Support for PPTP, PPPoE, and L2TP using mpd (Multi-link PPP daemon).
- Support for bandwidth limiting using IPFW + dummynet or ng_car.
- For Ethernet, support for working with VLANs (802.1q), link aggregation, and the use of network bridges (802.1w, Rapid Spanning Tree Protocol) is available.
- The monit package is used for monitoring.
- Podpora VPN: GRE, GIF, IPSec (IKEv1 and IKEv2 with strongswan), OpenVPN, and Wireguard.
- Support for NAT64 using the tayga daemon and built-in support for IPv6-to-IPv4 tunnels.
- The ability to install additional software using the pkgng package manager.
- Using dnsmasq as a DHCP server, and ssmtp as a mail delivery agent.
- Podpora upravljanja preko SSH, serijskega porta, telnet in lokalne konzole. Za poenostavitev upravljanja je priložena orodje tmux (BSD-analog screen).
- Zagon slik je bil ustvarjen na osnovi FreeBSD s pomočjo skriptov iz NanoBSD.
- Mehanizem posodabljanja sistema temelji na ustvarjanju dveh particij na Flash pomnilniku: nova različica se naloži v drugo particijo, ki po ponovnem zagonu postane aktivna, medtem ko druga particija čaka na novo posodobitev (particiji se izmenjujeta). V primeru težav z nameščeno posodobitvijo je mogoče vrniti prejšnje stanje sistema.
- Za preverjanje celovitosti sistema se za vsako datoteko shrani kontrolna vsota sha256.
U novom izdanju:
- Sistemsko okolje je bilo posodobljeno na veje FreeBSD 15-HEAD in pristanišč po stanju z dne 21. januar 2025.
- Posodobljene različice FRR 10.2.1, Bird 2.16.1, Strongswan 5.9.14 in ExaBGP 4.2.22, iperf na 2.2.1, iperf3 na 3.18, lldpd na 1.0.18, monit 5.34.4, nrpe 4.1.3, open-vm-tools 12.5, python 3.11.
- Za delovanje DHCP namesto isc-dhcp44 in dhcprelya se uporablja paket dnsmasq (kot alternativa za zamenjavo je bil obravnavan kea, vendar ta skupaj z potrebnimi odvisnostmi zahteva 300MB prostora na disku). Paketi dhcprelya in isc-dhcp44 so razglašeni za zastarele.
- Odstranjen je bil paket freevrrpd. Za zagotavljanje odpornosti na napake se zdaj uporablja samo paket ucarp, ki vključuje lastno implementacijo protokola VRRP, kar omogoča, da se brez freevrrpd.
- Odstranjen je paket aquantia-atlantic-kmod, ki ne podpira sestavljanja v FreeBSD 15.
- Dela se na prehodu s sestavljalnih skriptov NanoBSD na orodje Poudriere-Image. Migracija bo omogočila dodajanje načina dvojnega zagona UEFI/BIOS, skrajšanje časa sestavljanja in uporabo običajnega metoda sestavljanja pristanišč.
Izvor: opennet.ru
