OpenWrt 21.02.0 inosvika iine shanduko dzinoverengeka dzakakosha, kusanganisira shanduko dzehardware

Iyo yakakosha nyowani vhezheni yeWorldWrt 21.02.0 ichangoburitswa, iyo inomira pakuve nayo yakawedzera zvishoma zvigadzirwa zvemahara, Sezvo mukumisikidza kuvaka, nekuda kwekuisirwa kweakawedzera Linux kernel subsystems, chishandiso chine 8MB yeFlash uye 64MB ye RAM yave kuda kushandisa OpenWrt.

Kunyangwe kune vashandisi vane chinangwa chekugadzira yavo yekuvaka, vanogona vachiri kuzviitira kurerutsa kuti inogona kumhanyisa pamidziyo ine 4 MB yeFlash uye 32 MB ye RAM, asi mashandiro eiyo kuvaka ichaganhurirwa uye kugadzikana hakuna kuvimbiswa ..

Basic package inosanganisira mapakeji ekutsigira WPA3 isina waya yekuchengetedza tekinoroji, iyo yave kuwanikwa nekumisikidza zvese kana uchishanda muvatengi modhi uye kana uchigadzira yekuwana poindi. WPA3 inopa kudzivirirwa pakurwiswa kwechisimba (haibvumiri kurwisa kwechisimba mumamiriro ekunze) uye inoshandisa iyo SAE yechokwadi protocol. Vazhinji vasina waya vanodzora vanopa WPA3 kugona.

Zvakare eBasic package inosanganisira TLS uye HTTPS rutsigiro nekutadza, Kukubvumidza iwe kuti uwane iyo LuCI webhu interface pamusoro peHTTPS uye shandisa zvinobatsira senge wget uye opkg kuti utore ruzivo kuburikidza nenzira yakavharidzirwa yekutaurirana. Iwo maseva kuburikidza nawo mapakeji anotorwa kuburikidza neopkg anogoverwa anochinjwazve nekutadza kupa ruzivo pamusoro peHTTPS.

Iyo mbedTLS raibhurari inoshandiswa kunyorera yakatsiviwa newolfSSL (Kana zvichidikanwa, iwe unokwanisa kuisa manyore mbedTLS uye OpenSSL maraibhurari, ayo achiri kupihwa senzira.) Kugadzirisa otomatiki kuendesa kuHTTPS, sarudzo «uhttpd.main.redirect_https = 1»Muwebhu interface.

Imwe shanduko yatinogona kuwana ndeyekuti yekutanga rutsigiro inoitwa yeiyo DSA yepasi subsystem, iyo inopa maturusi ekugadzirisa nekutarisa macascades eakaunganidzwa Ethernet switch dzinoshandisa nzira dzinoshandiswa kugadzirisa zvakajairika network interfaces (iproute2, ifconfig). DSA inogona kushandiswa kumisikidza madoko neVLAN pachinzvimbo che swconfig chishandiso chakataurwa pamusoro, asi havazi vese switch switchers vanotsigira DSA parizvino.

Shanduko dzakaitwa kune syntax yemafaira ekugadzirisa irimo / etc / config / network. Mu "config interface" block, iyo "ifname" sarudzo yakapihwa zita rekuti "mudziyo", uye mu "config mudziyo" block, iyo "bhiriji" uye "ifname" sarudzo dzakatumidzwa zita rekuti "madoko". Patsanura mafaera nedhijitari dhizaini (dura 2, "dhizaini yekumisikidza" block) uye network mapindiro (dura 3, "gadziriso interface" block) izvozvi zvakagadzirwa kumisikidza nyowani.

Kuchengetedza kuenderana kumashure, rutsigiro rwekare syntax runochengetwa, ndokuti, marongero akagadzirwa kare haazodi chero shanduko. Mune ino kesi, kana iyo yakare syntax yawanikwa mune yewebhu interface, zano rinoratidzwa kuzotamira kune iyo nyowani syntax, iyo inodikanwa kugadzirisa dhizaini kuburikidza newebhu interface.

Yeimwe shanduko izvo zvinomira pachena:

• Wakawedzera nyowani bcm4908 uye rockchip mapuratifomu e Broadcom BCM4908 uye Rockchip RK33xx SoC-based zvishandiso. Mapuratifomu anotsigirwa-akagadzwa akagadzirisa mipata mukuenderana kwechigadzirwa.
• Tsigiro yeiyo ar71xx chikuva yabviswa, pachinzvimbo chekuti ath79 chikuva chinofanira kushandiswa (pamidziyo yakabatana ne ar71xx, zvinokurudzirwa kudzorera OpenWrt kubva pakutanga). Pamusoro pezvo, rutsigiro rweiyo cns3xxx, rb532, uye samsung (SamsungTQ210) mapuratifomu amiswa.
• Mafaira ekushandisa ekushandisa akabatanidzwa mukugadziriswa kwenetiweki anovakwa muPIE (Position Independent Executable) modhi nerutsigiro ruzere rweAdress Space Randomization (ASLR) kuitira kuti zviome kushandisa zvishuwo mumashandisirwo akadaro.
• Paunenge uchinyora iyo Linux kernel, izvo zvekusarudzika sarudzo dzekutsigira mudziyo wekuzvitsaura matekinoroji zvinogoneswa, zvichibvumira iyo LXC toolkit uye procd-ujail modhi kuti ishandiswe muOverWrt pane akawanda mapuratifomu.
• Yakapa kugona kuvaka nerutsigiro rweiyo SELinux yekumanikidza yekuwanikidza control system (yakaremara nekutadza).

mabviro: https://openwrt.org