OpenWrt 21.02.0 yana zuwa tare da canje -canje masu mahimmanci da yawa, gami da canje -canje na kayan aiki

An fito da wani muhimmin sabon sigar OpenWrt 21.02.0, wanda ke tsaye don samun Ƙara ƙananan bukatun hardware, Tun da a cikin ginanniyar tsoho, saboda haɗa ƙarin tsarin kernel na Linux, na'urar da ke da 8MB na Flash da 64MB na RAM yanzu ana buƙatar amfani da OpenWrt.

Kodayake ga masu amfani waɗanda ke da niyyar ƙirƙirar ginin nasu, har yanzu suna iya yin hakan don sauƙaƙe cewa yana iya gudana akan na'urori tare da 4 MB na Flash da 32 MB na RAM, amma aikin irin wannan ginin zai iyakance kuma ba a tabbatar da kwanciyar hankali. .

Kunshin asali ya haɗa da fakiti don tallafawa fasahar tsaro mara waya ta WPA3, wanda a yanzu yana samuwa ta tsoho duka lokacin aiki a yanayin abokin ciniki da lokacin ƙirƙirar wurin samun dama. WPA3 tana ba da kariya daga hare -hare masu ƙarfi (baya bada izinin kai hare -hare cikin yanayin layi) kuma yana amfani da yarjejeniyar tabbatar da SAE. Yawancin masu sarrafa waya suna ba da damar WPA3.

Hakanan eKunshin asali ya haɗa da tallafin TLS da HTTPS ta tsohuwa, yana ba ku damar samun damar shiga yanar gizo ta LuCI akan HTTPS da amfani da abubuwan amfani kamar wget da opkg don dawo da bayanai ta hanyar tashoshin sadarwar da aka ɓoye. Sabis ɗin da aka rarraba fakitin da aka sauke ta opkg suma ana canza su ta tsohuwa don samar da bayanai akan HTTPS.

An maye gurbin ɗakin karatu na mbedTLS da aka yi amfani da shi don ɓoyewa da wolfSSL (Idan ya cancanta, zaku iya shigar da ɗakunan karatu na mbedTLS da OpenSSL, waɗanda har yanzu ana ba su azaman zaɓuɓɓuka.) Don saita turawa ta atomatik zuwa HTTPS, zaɓi "uhttpd.main.redirect_https = 1»A cikin yanar gizo.

Wani canji da za mu iya samu shi ne tallafi na farko da aka aiwatar don tsarin tushen tushen DSA, wanda ke ba da kayan aiki don daidaitawa da sarrafa cascades na hanyoyin haɗin Ethernet masu haɗawa ta amfani da hanyoyin da ake amfani da su don daidaita hanyoyin sadarwa na yau da kullun (iproute2, ifconfig). Ana iya amfani da DSA don saita tashoshin jiragen ruwa da VLANs maimakon kayan aikin swconfig da aka ba da shawara a sama, amma ba duk masu sarrafa sauyawa suna tallafawa DSA ba tukuna.

An yi canje -canje ga daidaiton fayilolin sanyi located in / etc / config / network. A cikin toshe na “config interface”, an canza sunan “ifname” zuwa “na’ura”, kuma a cikin “toshe na'urar” toshe, an sake canza zabin “gada” da “ifname” zuwa “tashoshin jiragen ruwa”. Ana keɓance keɓaɓɓun fayiloli tare da saiti na na'urar (Layer 2, "toshe na'urar" toshe) da musaya na cibiyar sadarwa (Layer 3, "ƙirar daidaitawa" toshe) yanzu don sabbin shigarwa.

Don kula da jituwa ta baya, ana kiyaye goyon baya ga tsohon haɗin gwiwar, wato, saitin da aka kirkira a baya ba zai buƙaci wani canje -canje ba. A wannan yanayin, lokacin da aka samo tsohuwar haɗin keɓaɓɓiyar haɗin yanar gizon, za a nuna shawara don ƙaura zuwa sabon haɗin, wanda ake buƙata don gyara saitin ta hanyar yanar gizo.

Na sauran canje-canje cewa tsaya a waje:

• Ƙara sabon bcm4908 da dandamali na rockchip don Broadcom BCM4908 da Rockchip RK33xx SoC-based devices. Dandalin da aka riga aka tallafa da shi yana da tsayayyen gibi a cikin jituwa na na'ura.
• An cire tallafi don dandamalin ar71xx, maimakon wanda ya kamata a yi amfani da dandalin ath79 (don na'urorin da ke da alaƙa da ar71xx, ana ba da shawarar sake shigar da OpenWrt daga karce). Bugu da ƙari, an dakatar da tallafin cns3xxx, rb532, da samsung (SamsungTQ210).
• Fayilolin aiwatarwa na aikace -aikacen da ke cikin sarrafa hanyoyin haɗin yanar gizo an gina su a cikin yanayin PIE (Matsayin Masu aiwatarwa Masu zaman kansu) tare da cikakken tallafi don Adadin Sararin Samaniya (ASLR) don yin wahalar amfani da rauni a cikin irin waɗannan aikace -aikacen.
• Lokacin tattara kernel na Linux, ana kunna zaɓuɓɓukan tsoho don tallafawa fasahar keɓance akwati, yana ba da damar amfani da kayan aikin LXC da yanayin procd-ujail a cikin OpenWrt akan yawancin dandamali.
• An ba da ikon yin gini tare da tallafi ga tsarin sarrafa ikon tilasta tilasta SELinux (naƙasasshe ta tsoho).

Source: https://openwrt.org