Ukukhutshwa kweProjekthi ye-BSD Router 1.97 yokuhanjiswa

U-Olivier Cochard-LabbΓ©, umdali wosasazo lweFreeNAS, wazisiwe ukukhutshwa kwekhithi yokuhambisa ekhethekileyo Iprojekthi ye-BSD Router 1.97 (BSDRP), ephawulekayo ngokuhlaziya i-codebase kwi-FreeBSD 12.1. Ukuhanjiswa kwenzelwe ukudala iirotha zesoftware ezidibeneyo ezixhasa uluhlu olubanzi lweeprotocol, ezifana neRIP, OSPF, BGP kunye nePIM. Ulawulo lwenziwa kwimodi yomgca womyalelo ngokusebenzisa i-interface ye-CLI ekhumbuza iCisco. Ukusasazwa iyafumaneka kwiindibano ze-amd64 kunye ne-i386 yezakhiwo (ubungakanani bomfanekiso wofakelo 140 MB).

Ukongeza ekuphuculeni kwi-FreeBSD 12.1-STABLE, inguqulelo entsha ephawulekayo ukunika amandla ukulayisha i-microcode ye-Intel processors ngokungagqibekanga kunye nokongeza i-wireguard, i-Mellanox Firmware, i-vim-tiny, i-mrtparse, i-nrpe3, i-perl, i-bash kunye ne-frr7-pythontools iiphakheji, kunye ne-if_cxgbev (i-Chelsio Ethernet VF) kunye ne-if_qlxgb (i-Ethernet3200 QLogic drivers). Ngokungagqibekanga, uthintelo oluchanekileyo lokwalathiswa kwakhona kwe-ICMP luvuliwe. Iinguqulelo zesoftware ezihlaziyiweyo ziquka i-easy-rsa 3.0.7, FRR 7.4, pmacct 1.7.4, openvpn 2.4.9 kunye ne-strongswan 5.8.4. Izinto ezininzi ezisetyenziselwa i-IPv6 (izixhobo ze-pim6, i-pim6dd, i-pim6sd) azibandakanywanga kwiphakheji.

Iimpawu eziphambili zosasazo:

  • Ikhithi ibandakanya iipakethe ezimbini kunye nokuphunyezwa kweendlela ezilandelwayo: UKUQALA (Quagga fork) ngenkxaso yeBGP, RIP, RIPng (IPv6), OSPF v2, OSFP v3 (IPv6), ISIS kunye INTAKA ngenkxaso ye-BGP, i-RIP, i-RIPng (IPv6), i-OSPF v2 kunye ne-OSFP v3 (IPv6);
  • Unikezelo lulungiselelwa ukusetyenziswa ngokuhambelanayo kweetheyibhile ezininzi zomzila ezahlukeneyo (iiFIBs), ezibotshelelwe kujongano lwenyani kunye nenyani;
  • I-SNMP (bsnmp-ucd) ingasetyenziselwa ukubeka iliso kunye nokulawula. Ixhasa ukuthunyelwa kwedatha yetrafikhi ngendlela ye-Netflow streams;
  • Ukuvavanya ukusebenza komsebenzi womnatha, iquka izinto eziluncedo ezifana ne-NetPIPE, iperf, netblast, netsend kunye netreceive. Ukuqokelela izibalo zendlela, ng_netflow isetyenziswa;
  • Ubukho be-freevrrpd kunye nokuphunyezwa kwe-protocol ye-VRRP (i-Virtual Router Redundancy Protocol, i-RFC 3768) kunye ne-ucarp ngenkxaso ye-protocol ye-CARP, eyenzelwe ukuququzelela ukusebenza kwee-router ezinyamezelayo ngokubopha idilesi ye-MAC ebonakalayo kwiseva esebenzayo, apho kwimeko yokusilela isiwe kumncedisi wogcino. Kwimodi eqhelekileyo, umthwalo ungahanjiswa kuwo omabini amaseva, kodwa xa kukho ukungaphumeleli, i-router yokuqala inokuthatha umthwalo wesibini, kwaye okwesibini - eyokuqala;
  • mpd (I-Multi-link PPP daemon) exhasa i-PPTP, i-PPPoE kunye ne-L2TP;
  • Ukulawula i-bandwidth, kucetywayo ukusebenzisa i-shaper evela kwi-IPFW + dummynet okanye nge_imoto;
  • Kwi-Ethernet, isekela ukusebenza kunye neVLAN (802.1q), ukudibanisa ikhonkco kunye nokusetyenziswa kweebhuloho zenethiwekhi usebenzisa iProtocol ye-Rapid Spanning Tree (802.1w);
  • Isetyenziselwa ukubeka iliso iliso;
  • Inkxaso ye-VPN enikeziweyo: GRE, GIF, IPSec (IKEv1 kunye ne-IKEv2 nge-strongswan), i-OpenVPN kunye ne-Wireguard;
  • Inkxaso ye-NAT64 isebenzisa i-tayga daemon kunye nenkxaso yemveli yeetonela ze-IPv6-to-IPv4;
  • Ukufakela udweliso lweenkqubo ezongezelelweyo, sebenzisa umphathi wephakheji ye-pkgng;
  • Ibandakanya iseva ye-DHCP kunye nomxhasi we-isc-dhcp, kunye nomncedisi weposi we-ssmtp;
  • Ixhasa ulawulo nge-SSH, i-serial port, i-telnet kunye ne-console yasekhaya. Ukwenza lula ulawulo, ikiti ibandakanya ukusetyenziswa kwe-tmux (i-analogue ye-BSD yesikrini);
  • Qalisa imifanekiso eyenziwe ngokusekwe kwiFreeBSD usebenzisa iscript NanoBSD;
  • Ukuqinisekisa uhlaziyo lwenkqubo, izahlulo ezibini zenziwa kwikhadi leFlash; ukuba umfanekiso ohlaziyiweyo uyafumaneka, ulayishwa kwisahlulelo sesibini; emva kokuqalisa ngokutsha, olu lwahlulelo lusebenza, kwaye isahlulelo sesiseko silinda uhlaziyo olulandelayo ukuba luvele ( izahlulo zisetyenziswa ngokulandelelana). Kuyenzeka ukuba ubuyisele umva kwimeko yangaphambili yenkqubo ukuba iingxaki zichongiwe ngohlaziyo olufakelweyo;
  • Ifayile nganye ine-sha256 checksum, ekuvumela ukuba uqinisekise ukunyaniseka kolwazi.

umthombo: opennet.ru

Yongeza izimvo