Mazuva mashoma apfuura kuvhurwa kweshanduro nyowani ye firewall kugovera OPNsense 22.7, yakanzi "Simba Panther", inosuma FreeBSD 13.1 update, PHP 8.0, Phalcon 5, Stacked VLAN uye Intel QuickAssist (QAT) tsigiro, DDoS kudzivirira uchishandisa SYN makuki, MVC/API mapeji eIPsec mamiriro uye Unbound overrides, itsva APCUPSD uye CrowdSec plugins nezvimwe zvakawanda.
Kune avo vasingazive OPNsense, iwe unofanirwa kuziva izvo forogo yeiyo pfSense chirongwa, Yakagadzirwa nechinangwa chekuumba kit yakavhurika yekuparadzira kit iyo inogona kuve neanoshanda padanho rekushambadzira mhinduro dzekuendesa kweye firewalls uye network masuo.
Kusiyana pfSense, chirongwa ichi chakaiswa seisingatariswe nekambani imwe chete, sezvo ichivandudzwa nekutora chikamu chaiko kwenharaunda uye iine yakajeka nzira yekusimudzira, pamusoro pekupa mukana wekuti ishandise chero zvazvinoitika mune yechitatu-bato zvigadzirwa, kusanganisira vezvokutengeserana.
Pakati peiyo OPNsense mikana unogona kusiyanisa iro rakazara rakavhurika dhizaini yekuunganidza, pamwe nekugona kuisa mapakeji pamusoro peyakajairika FreeBSD system, mutoro balancer, webhu interface yemasangano ekubatanidza vashandisi kunetiweki, maitiro eanoonekwa uye emifananidzo yakajeka, pakati pezvimwe zvinhu.
OPNsense 22.7 Huru Zvitsva Zvimiro
Mune iyi vhezheni itsva yekugovera, hwaro hwehurongwa hunoratidzwa.e akachinjira kuFreeBSD 13.1 bazi, kunze kwekuti iyo system package yakaendeswa kune yakagadziridzwa vhezheni ye PHP 8.0.20, Phalcon 5, sqlite 3.39.0, meerkat 6.0.6, unbound 1.16.1.
Kana zviri zvitsva zvinoratidzwa mune iyi vhezheni itsva, tinogona kuwana izvozvo yakawedzera rutsigiro rweIntel QuickAssist (QAT), pamwe nerutsigiro rweStacked VLAN tekinoroji (multilayer encapsulation yeVLAN tags) uye kuti iyo nzira ye DDoS dziviriro uchishandisa SYN cookie.
Dzimwe shanduko dzinomira pachena mune iyi vhezheni itsva ndeyekuti iyo APCUPSD uye CrowdSec plugins, Ini zvakare ndinoziva kuti yakawedzera simba reloading yemidziyo inodiwa uye zvakare iyo WPA bhizinesi kumisikidzwa yemaitiro ezvivakwa.
Ukuwo, kunotaurwa kutiakaremara IPv6 mukati meGIF 4in6 uye 4in4 tunnel, pamwe nekugadziridzwa kwakaitwa kune kusapindirana mukutarisira isina waya, zvakare kugadzirisa kune kusaita kwekuratidza akawanda loopbacks, kusakwanisa kwekuratidza akati wandei maVXLAN uye izvo. cheki inoitwa kana iri int isati yapfuura ku convert_seconds_to_hms().
Yeimwe shanduko izvo zvinoratidzika kubva pane iyi nyowani vhezheni:
- Yakachinjwa kubviswa kwechitupa kushandisa phpseclib raibhurari
- Kunatsiridza kuita kwe set_single_sysctl()
- Kurongeka kutsva kwekuita modhi yekudzora PHP kukanganisa kuyerera
- /tmp MFS ikozvino inoshandisa yakawanda ye50% RAM nekukasira uye inogona kugadziriswa
- / var MFS inova / var / log MFS uye inoshandisa yakawanda ye50% RAM nekukasira uye inogona kurongeka.
- Yakapfuura yakakosha yemukati ye / var MFS ikozvino yakachengetwa zvachose mukati / var kuve nechokwadi chekushanda kuzere
- Yakawedzera sefa kune system log widget (yakapihwa na kulikov-a)
- Kuonekwa otomatiki pane kure gedhi zvinodiwa kune default nzira
- Interfaces: chinja kuMVC/API musiyano weDNS yekutarisa peji
- Interfaces: refactor DHCP uye PPPoE zvinyorwa zvekushandisa ifctl chete
Chekupedzisira, zvakakosha kuziva kuti LibreSSL inonzi icharongerwa kubviswa pakupera kweiyi nhevedzano uye ingangove isingagamuchire imwe gadziriso. Iyo inotevera huru update ichaitika
otomatiki OpenSSL maitiro.
Finalmente kana iwe uchifarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.
Dhawunorodha vhezheni itsva ye OPNsense 22.7
Si unoda here kuwana iyi nyowani vhezheni solamente Iwe unofanirwa kuenda kune yayo yepamutemo webhusaiti uye muchikamu chekutora kwaunogona kuwana mufananidzo wakabatanidzwa muchimiro cheLiveCD uye system image yekunyora kune Flash drives mune zvinotevera. link
Kodhi yekodhi yezvinhu zvekuparadzira, pamwe nemidziyo inoshandiswa kuvaka, inoparadzirwa pasi pezenisi reBSD.