Utgivning av distribution för att skapa brandväggar pfSense 2.5.0

Compact distribution for creating firewalls and network gateways pfSense 2.5.0 has been released. The distribution is based on the FreeBSD code base, utilizing developments from the m0n0wall project and actively using pf and ALTQ. An ISO image for the amd64 architecture, sized at 360 MB, has been prepared for download.

Distributionen hanteras via ett webbgränssnitt. Captive Portal, NAT, kan användas för att organisera användarnas åtkomst till både trådbundna och trådlösa nätverk. VPN (IPsec, OpenVPN) och PPPoE. Ett brett spektrum av funktioner för begränsning av bandbredd, begränsning av antalet samtidiga anslutningar, trafikfiltrering och skapande av redundanta konfigurationer baserade på CARP stöds. Statistiken över prestandan visas i form av diagram eller tabeller. Autentisering stöds via en lokal användardatabas, samt via RADIUS och LDAP.

Nyckeländringar:

• Components of the base system have been updated to FreeBSD 12.2 (the previous branch used FreeBSD 11).
• Transition to OpenSSL 1.1.1 and OpenVPN 2.5.0 with support for ChaCha20-Poly1305 has been implemented.
• A VPN WireGuard implementation, operating at the kernel level, has been added.
• The configuration of the strongSwan IPsec backend has been transitioned from ipsec.conf to using swanctl and VICI format. Tunnel settings have been improved.
• The interface for managing certificates has been enhanced. It now includes the ability to update records in the certificate manager. Notifications for expiring certificates are provided. Exporting keys and PKCS #12 archives with password protection is now possible. Support for certificates based on elliptic curves (ECDSA) has been added.
• The backend for connecting to wireless networks through Captive Portal has been significantly modified.
• Tools for ensuring fault tolerance have been improved.

Källa: opennet.ru