OpenWrt 22.03.0 inosvika neFirewall app itsva, tsigiro yemidziyo inodarika zana nemakumi masere nezvimwe.

Mushure megore rebudiriro, se akazivisa kuburitswa kweshanduro huru itsva wekugovera OpenWrt 22.03.0, yakanangwa pamashandisirwo ezvishandiso zvakasiyana-siyana zvetiweki, senge ma routers, switch, uye nzvimbo dzekuwana.

openwrt inotsigira akawanda mapuratifomu uye maumbirwo uye ine sisitimu yekuvaka iyo inokutendera kuti uite nyore uye nyore kuyambuka-kuunganidza, kusanganisira zvakasiyana zvikamu mugungano, zvichiita kuti zvive nyore kugadzira yakagadzirira-yakagadzirwa firmware kana dhisiki mufananidzo wakarongedzerwa kune chaiwo mabasa neinodiwa seti yemapakeji akafanoiswa. .

Nhau huru dzeWorldWrt 22.03.0

Mune iyi vhezheni itsva yeOpenWrt 22.03.0 inoratidzwa, by default inogoneswa itsva firewall management application, fw4 (Firewall4), zvichibva pane nftables packet filter.

Iyo Syntax yeKugadzirisa Mafaira ye firewall (/etc/config/firewall) uye uci interface haina kuchinja:fw4 inogona kuita sekutsiva kwakajeka kune yakamboshandiswa iptables-based fw3 toolkit. Kusarudzika ndeyemitemo yakawedzerwa nemaoko (/etc/firewall.user), iyo inoda kunyorwazve kune nftables (fw4 inokubvumira kuti uwedzere mabhuroki ako ega ega, asi mune nftables fomati).

Imwe shanduko inomira pachena ndeyekuti yekare iptables based toolkit yakabviswa kubva pamifananidzo yakasarudzika, asi inogona kudzoserwa uchishandisa opkg package maneja kana iyo Image Builder toolkit. Iyo iptables-nft, arptables-nft, ebtables-nft, uye xtables-nft wrappers inopihwa zvakare, ichikubvumidza iwe kugadzira mitemo yenftables uchishandisa yekare iptables syntax.

Mukuwedzera kune izvi, zvinoonekwawo kuti yakawedzera rutsigiro kune anopfuura zana nemakumi masere emidziyo mitsva, kusanganisira 15 zvishandiso yakavakirwa paMediaTek MT7915 chip Wi-Fi 6 inoenderana (IEEE 802.11ax). Huwandu hwemidziyo inotsigirwa yasvika 1580.

Kuendeswa kwemapuratifomu kwaenderera mberi ramangwana pakushandiswa kweiyo DSA kernel subsystem (Distributed Switch Architecture), iyo inopa maturusi ekugadzirisa uye kugadzirisa cascades e-interconnected Ethernet switches, uchishandisa nzira dzekugadzirisa zvakajairwa network interfaces (iproute2, ifconfig).

DSA inogona kushandiswa kugadzirisa ports uye VLANs pachinzvimbo cheyakambopihwa swconfig chishandiso, asi kwete ese madhiraivha ekuchinja anotsigira DSA parizvino. Mushanduro yakarongwa, DSA inogoneswa kune bcm53xx mapuratifomu (madhiraivha akaturikirwa emabhodhi ese), lantiq (xrx200 uye vr9 yakavakirwa SoCs) uye sunxi (Bananapi Lamobo R1 ndiro). Pakutanga, ath79 (TP-Link TL-WR941ND), bcm4908, gemini, kirkwood, mediatek, mvebu, octeon, ramips (mt7621) uye realtek mapuratifomu akaendeswa kuDSA.

LuCI web interface ine yakasviba modhi, Nekumisikidza, iyo modhi inogoneswa otomatiki zvichienderana nebrowser marongero, asi inogona zvakare kumanikidzwa kugoneswa kuburikidza ne "System" -> "System" -> "Mutauro neSitaira" menyu.

Gore ra2038 dambudziko rakagadziriswa zvichikonzerwa nekufashukira kwemhando 32-bit time_t (iyo 32-bit epoch timer ichafashukira muna Ndira 19, 2038). Mushanduro itsva, musl 1.2.x bazi rinoshandiswa seraibhurari yakajairika, umo, pane 32-bit architectures, yekare 32-bit timers inotsiviwa ne 64-bit (type time_t inotsiviwa ne time64_t ). Pane 64-bit masisitimu, iyo time64_t mhando inoshandiswa pakutanga (iyo counter ichafashukira mumakore 292 bhiriyoni). Kuchinjira kurudzi rutsva kwachinja ABI, izvo zvinoda kuvakwazve kwese 32-bit zvirongwa zvine chekuita ne musl libc (hapana kuvakazve kunodiwa kune 64-bit zvirongwa).

Kune rimwe divi, isu tinogona zvakare kuwana iyo yakagadziridzwa pasuru shanduro, kusanganisira iyo Linux kernel 5.10.138 ine wireless stack cfg80211/mac80211 kernel port 5.15.58 (yaimbova kernel 5.4 ine wireless stack kubva ku5.10 bazi), musl libc 1.2.3, glibc 2.34, gcc 11.2.0, binutils 2.37, hostapd 2.10, dnsmasq 2.86 bhokisi 2022.82.

Uye chekupedzisira asi chisiri chidiki, zvinonzi zvinovakira iyo arc770 chikuva (Synopsys DesignWare ARC 770D) zvakamiswa.

Kana iwe uchida kuziva zvakawanda nezvazvo nezve izvo zvakasanganiswa mune ino nyowani kuburitswa kweWorldWrt firmware 22.03.0 unogona kutarisa ruzivo mune rwekutanga kuburitswa Mune inotevera chinongedzo.

Dhawunirodha vhezheni itsva yeOpenWrt 22.03.0

Iyo inovaka yeiyi nyowani vhezheni yakagadzirirwa 35 mapuratifomu akasiyana, kubva maari ekuvandudza mapakeji anogona kuwanikwa kubva pane iyi link iripazasi.