ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื™ื ื•ื•ืขื ื˜ืึทืจ ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ืคื™ื™ืจื•ื•ืึทืœืœืก OPNsense 19.7

ื ืึธืš 6 ื—ื“ืฉื™ื ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ื“ืขืจืœืื ื’ื˜ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืึท ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื™ื ื•ื•ืขื ื˜ืึทืจ ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ืคื™ื™ืจื•ื•ืึทืœืœืก ืึธืคึผื ืกืขื ืก 19.7, ื•ื•ืึธืก ืื™ื– ืึท ื’ืึธืคึผืœ ืคื•ืŸ ื“ื™ pfSense ืคึผืจื•ื™ืขืงื˜, ื‘ืืฉืืคืŸ ืžื™ื˜ ื“ืขืจ ืฆื™ืœ ืคื•ืŸ ืคืึธืจืžื™ื ื’ ืึท ื’ืึธืจ ืึธืคึฟืŸ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื•ื•ืึธืก ืงืขืŸ ื”ืึธื‘ืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ื’ืขืฉืขืคื˜ ืกืึทืœื•ืฉืึทื ื– ืคึฟืึทืจ ื“ื™ืคึผืœื•ื™ื™ื ื’ ืคื™ืจืขื•ื•ืึทืœืœืก ืื•ืŸ ื ืขืฅ ื’ื™ื™ื˜ื•ื•ื™ื™ื–. ื ื™ื˜ ืขื ืœืขืš pfSense, ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืื™ื– ืคึผืึทื–ื™ืฉืึทื ื“ ื•ื•ื™ ื ื™ื˜ ืงืึทื ื˜ืจืึธื•ืœื“ ื“ื•ืจืš ืื™ื™ืŸ ืคื™ืจืžืข, ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืžื™ื˜ ื“ื™ ื“ื™ืจืขืงื˜ ืึธื ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืงื”ืœ ืื•ืŸ ื”ืื˜ ืึท ื’ืึธืจ ื˜ืจืึทื ืกืคึผืขืจืึทื ื˜ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคึผืจืึธืฆืขืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืฆื• ืฆื•ืฉื˜ืขืœืŸ ื“ื™ ื’ืขืœืขื’ื ื”ื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ืงื™ื™ืŸ ืคื•ืŸ ื–ื™ื™ึทืŸ ื“ื™ื•ื•ืขืœืึทืคึผืžืึทื ืฅ ืื™ืŸ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืคึผืจืึธื“ื•ืงื˜ืŸ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื’ืขืฉืขืคื˜. ืึธื ืขืก. ื“ื™ ืžืงื•ืจ ื˜ืขืงืกืฅ ืคื•ืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ืžื›ืฉื™ืจื™ื ื’ืขื ื™ืฆื˜ ืคึฟืึทืจ ืคึฟืึทืจื–ืึทืžืœื•ื ื’, ืคืึทืจืฉืคึผืจื™ื™ื˜ืŸ ืื•ื ื˜ืขืจ BSD ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ. ืึทืกืขืžื‘ืœื™ ืฆื•ื’ืขื’ืจื™ื™ื˜ ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ ืึท LiveCD ืื•ืŸ ืึท ืกื™ืกื˜ืขื ื‘ื™ืœื“ ืคึฟืึทืจ ืจืขืงืึธืจื“ื™ื ื’ ืื•ื™ืฃ ืคืœืึทืฉ ื“ืจื™ื™ื•ื•ื– (290 ืžืขื’ืื‘ื™ื™ื˜ืŸ).

ื“ื™ ื’ืจื•ื ื˜ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืงืึธื“ HardenedBSD 11, ื•ื•ืึธืก ืฉื˜ื™ืฆื˜ ืึท ืกื™ื ื’ืงืจืึทื ื™ื™ื–ื“ ื’ืึธืคึผืœ ืคื•ืŸ FreeBSD, ื•ื•ืึธืก ื™ื ื˜ืึทื’ืจื™ื™ืฅ ื ืึธืš ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืขืงืึทื ื™ื–ืึทืžื– ืื•ืŸ ื˜ืขืงื ื™ืงืก ืฆื• ืึทื ื˜ืงืขื’ื ืฉื˜ืขืœื  ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืฆื•ื•ื™ืฉืŸ ืึทืคึผืขืจื˜ื•ื ืึทื˜ื™ื– OPNsense ืงืขื ืขืŸ ื–ื™ื™ืŸ ืื•ื ื˜ืขืจืฉื™ื™ื“ืŸ ื“ื•ืจืš ืึท ื’ืึธืจ ืึธืคึฟืŸ ืคึฟืึทืจื–ืึทืžืœื•ื ื’ ื˜ืึธืึธืœืงื™ื˜, ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ ืจืขื’ื•ืœืขืจ FreeBSD, ืžืึทืกืข ื‘ืึทืœืึทื ืกื™ื ื’ ืžื›ืฉื™ืจื™ื, ืึท ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ื‘ืึทื ื™ืฆืขืจ ืงืึทื ืขืงืฉืึทื ื– ืฆื• ื“ื™ ื ืขืฅ (ืงืึทืคึผื˜ื™ื•ื•ืข ื˜ื•ื™ืขืจ), ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ืคึฟืึทืจ ื˜ืจืึทืงื™ื ื’ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืฉื˜ืึทื˜ืŸ (ืกื˜ื™ื™ื˜ืคืึทืœ ืคื™ื™ืจื•ื•ืึทืœ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืคึผืฃ), ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืจื™ืกื˜ืจื™ืงืฉืึทื ื– ื‘ืึทื ื“ื•ื•ื™ื“ื˜, ืคืึทืจืงืขืจ ืคึฟื™ืœื˜ืจื™ืจื•ื ื’, ืงืจื™ื™ื™ื˜ื™ื ื’ ืึท ื•ื•ืคึผืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ IPsec, OpenVPN ืื•ืŸ PPTP, ื™ื ืึทื’ืจื™ื™ืฉืึทืŸ ืžื™ื˜ LDAP ืื•ืŸ RADIUS, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ DDNS (ื“ื™ื ืึทืžื™ืฉ ื“ื ืก), ืึท ืกื™ืกื˜ืขื ืคื•ืŸ ื•ื•ื™ื–ืฉืึทื•ื•ืึทืœ ืจื™ืคึผืึธืจืฅ ืื•ืŸ ื’ืจืึทืคืก. .

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ื“ื™ ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื’ื™ื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ืฉื•ืœื“-ื˜ืึธืœืขืจืึทื ื˜ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ CARP ืคึผืจืึธื˜ืึธืงืึธืœ ืื•ืŸ ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ืงืึทื˜ืขืจ, ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ื”ื•ื™ืคึผื˜ ืคื™ื™ืจื•ื•ืึทืœ, ืึท ื‘ืึทืงืึทืคึผ ื ืึธื“ืข ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืกื™ื ื’ืงืจืึทื ื™ื™ื–ื“ ืื•ื™ืฃ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืžื“ืจื’ื” ืื•ืŸ ื•ื•ืขื˜ ื ืขืžืขืŸ ืื™ื‘ืขืจ. ื“ื™ ืžืึทืกืข ืื™ืŸ ื“ื™ ื’ืขืฉืขืขื ื™ืฉ ืคื•ืŸ ืึท ืขืจืฉื˜ื™ืง ื ืึธื“ืข ื“ื•ืจื›ืคืึทืœ. ื“ืขืจ ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ืื™ื– ื’ืขืคึฟื™ื ื˜ ืึท ืžืึธื“ืขืจืŸ ืื•ืŸ ืคึผืฉื•ื˜ ืฆื•ื‘ื™ื ื“ ืคึฟืึทืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืคื™ื™ืจื•ื•ืึทืœ, ื’ืขื‘ื•ื™ื˜ ืžื™ื˜ ื“ื™ Bootstrap ื•ื•ืขื‘ ืคืจื™ื™ืžื•ื•ืขืจืง.

ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข:

  • ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉื™ืงืŸ ืœืึธื’ืก ืฆื• ืึท ื•ื•ื™ื™ึทื˜ ืกืขืจื•ื•ืขืจ ื ื™ืฆืŸ Syslog-ng;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืึท ื‘ืึทื–ื•ื ื“ืขืจ ืจืฉื™ืžื” ืคึฟืึทืจ ื•ื•ื™ื•ื™ื ื’ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืคึผืึทืงืึทื˜ ืคื™ืœื˜ืขืจ ื›ึผืœืœื™ื;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืคึฟืึทืจ ืึทืœืข ืคึผืึทืงืึทื˜ ืคื™ืœื˜ืขืจ ื›ึผืœืœื™ื;
  • ื™ืžืคึผืจื•ื•ื•ื“ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืคึผืกืขื•ื•ื“ืึธื ื™ื ืื™ืŸ ืคื™ืจืขื•ื•ืึทืœืœ ื›ึผืœืœื™ื (ืœืึธื–ืŸ ืื™ืจ ื ื•ืฆืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ืžื—ื ื•ืช, ืคึผืึธืจื˜ ื ื•ืžืขืจืŸ ืื•ืŸ ืกื•ื‘ื ืขืฅ). ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื™ื™ึทื ืคื™ืจ ืื•ืŸ ืึทืจื•ื™ืกืคื™ืจืŸ ื™ื™ืœื™ืึทืกื™ื– ืื™ืŸ JSON ืคึฟืึธืจืžืึทื˜. ืขืก ืื™ื– ืึทืŸ ืึทืคึผืฉืึทื ืึทืœ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื”ืึทืœื˜ืŸ ืกื˜ืึทื˜ื™ืกื˜ื™ืง ืคึฟืึทืจ ืคึผืกืขื•ื•ื“ืึธื ื™ื;
  • ื“ืขืจ ืงืึธื“ ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ืื•ืŸ ืกื•ื•ื™ื˜ืฉื™ื ื’ ื’ื™ื™ื˜ื•ื•ื™ื™ื– ืื™ื– ืจื™ืจื™ื˜ืึทืŸ;
  • ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืกื™ื ื’ืงืจืึทื ื™ื™ื– LDAP ื’ืจื•ืคึผืขืก;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉื™ืงืŸ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืกื™ื™ื ื™ื ื’ ืจื™ืงื•ื•ืขืก;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคืึธืจื•ื•ืขืจื“ื™ื ื’ ืจื•ืฅ ื“ื•ืจืš IPsec (VTI);
  • ืกื™ื ื’ืงืจืึทื ืึทื–ื™ื™ืฉืึทืŸ ืคื•ืŸ ื™ื™ืœื™ืึทืกื™ื–, โ€‹โ€‹ื•ื•ื”ื™ื“ืก ืื•ืŸ ื•ื•ื™ื“ื–ืฉื™ืฅ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื•ืจืš XMLRPC;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ ืื™ืŸ ื•ื•ืขื‘ ืคืจืืงืกื™ ืื•ืŸ IPsec ื“ื•ืจืš PAM;
  • ืึทื“ื“ืขื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืงืึทื ืขืงื˜ื™ื ื’ ื“ื•ืจืš ืึท ืคึผืจืึทืงืกื™ ืงื™ื™ื˜;
  • ื™ื ื˜ืจืึธื•ื“ื•ืกื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื’ืจื•ืคึผืขืก ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืคึผืจืึทืงืกื™ ืงืฉืจ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื–;
  • ืคึผืœื•ื’ื™ื ืก ืคึฟืึทืจ Netdata, WireGuard, Maltrail ืื•ืŸ Mail-Backup (PGP) ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืจื™ื™ื˜. ื“ืคึผื™ื ื’ืขืจ ืื•ืŸ DHCP ืกืขืจื•ื•ืขืจืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืคึผืึธืจื˜ื™ื“ ืฆื• ื“ื™ ืคึผืœื•ื’ื™ืŸ ืกื™ืกื˜ืขื;
  • ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืื™ื‘ืขืจื–ืขืฆื•ื ื’ืขืŸ ืื™ืŸ ืจื•ืกื™ืฉ;
  • ื ื™ื• ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ Bootstrap 3.4, LibreSSL 2.9, Unbound 1.9, PHP 7.2, Python 3.7 ืื•ืŸ Squid 4 ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’