I-OPNsense 22.7 «I-Panther enamandla» sele ikhutshwe kwaye ezi ziindaba zayo

Zimbalwa iintsuku ezidlulileyo ukumiliselwa kwenguqulelo entsha ye ukuhanjiswa kodonga lomlilo OPNsense 22.7, ebizwa ngokuba yi "Powerful Panther", ingenisa uhlaziyo lwe-FreeBSD 13.1, i-PHP 8.0, i-Phalcon 5, i-VLAN egciniweyo kunye ne-Intel QuickAssist (QAT) inkxaso, ukukhuselwa kwe-DDoS usebenzisa i-cookies ye-SYN, amaphepha e-MVC / API yesimo se-IPsec kunye ne-Unbound overrides, i-plugins entsha ye-APCUPSD kunye ne-CrowdSec kunye nokunye okuninzi.

Kulabo abangaqhelekanga nge-OPNsense, kufuneka bayazi loo nto yimfoloko yeprojekthi yePSSense, Yenziwe ngenjongo yokwenza ikiti yokuhambisa evulekileyo ngokupheleleyo enokuthi isebenze kwinqanaba lezisombululo zorhwebo zokuhambisa ii-firewalls kunye neendlela zokunxibelelana.

Ngokungafaniyo ne-pfSense, Iprojekthi ibekwe njengengalawulwa yinkampani enye, kuba iphuhliswa ngokuthatha inxaxheba ngokuthe ngqo koluntu kwaye inenkqubo ebonakalayo yophuhliso, ukongeza ekunikezeleni ithuba lokusebenzisa nakuphi na ukukhula kwayo kwiimveliso zomntu wesithathu, kubandakanya nezorhwebo.

Phakathi kwamathuba e-OPNsense unokwazi ukwahlula isixhobo esivulekileyo sokuhlanganisa, kunye nokukwazi ukufaka iiphakeji ngaphezulu kwenkqubo yesiqhelo yeFreeBSD, umthwalo wokulinganisa, ujongano lwewebhu yemibutho yokuqhagamshela abasebenzisi kwinethiwekhi, Inkqubo yeengxelo ezibonakalayo nezizizo, phakathi kwezinye izinto.

I-OPNsense 22.7 Iimpawu eziNtsha eziphambili

Kule nguqulo entsha yokusasazwa, isiseko senkqubo sinikezelwa.e yatshintshela kwisebe leFreeBSD 13.1, ngaphandle kokuba iphakheji yenkqubo iye yasiwa kuguqulelo oluhlaziyiweyo lwe PHP 8.0.20, Phalcon 5, sqlite 3.39.0, meerkat 6.0.6, unbound 1.16.1.

Ngokuphathelele izinto ezintsha ezivezwa kule nguqulo intsha, sinokuyifumana loo nto inkxaso eyongeziweyo ye-Intel QuickAssist (QAT), kunye nenkxaso yeTekhnoloji yeVLAN eGqiweyo (i-multilayer encapsulation yeethegi zeVLAN) kunye nokuba indlela Ukhuseleko lweDDoS usebenzisa icookie yeSYN.

Olunye utshintsho olugqamayo kolu guqulelo lutsha kukuba I-APUPSD kunye neeplagi zeCrowdSec, Ndiyazi kwakhona ukuba yongeze ukulayishwa kwakhona okuguquguqukayo kwezixhobo eziyimfuneko kunye noqwalaselo lweshishini le-WPA kwimo yeziseko ezingundoqo.

Kwelinye icala, kukhankanyiwe ukubae ikhubaziwe i-IPv6 ngaphakathi kwe-GIF 4in6 kunye neetonela ze-4in4, kunye nokuba izilungiso zenziwa ukungangqinelani kulawulo olungenazingcingo, kwakhona izilungiso ekungenakwenzeka kokubonisa loopbacks ezininzi, akunakwenzeka ukubonisa iiVXLAN ezininzi kunye nokuba itsheki yenziwe ukuba int phambi kokuba kudlulelwe convert_seconds_to_hms().

Olunye utshintsho evelele kule nguqulo intsha:

  • Kutshintshwe ukurhoxiswa kwesatifikethi ukuze kusetyenziswe ithala leencwadi lephpseclib
  • Uphuculo lomsebenzi we set_single_sysctl()
  • Isicwangciso esitsha sokuphunyezwa kwendlela yokulawula ukuhamba kwempazamo ye-PHP
  • /tmp MFS ngoku isebenzisa ubuninzi be-RAM ye-50% ngokungagqibekanga kwaye inokulungiswa
  • /var MFS iba ngu/var/log MFS kwaye isebenzisa ubuninzi be-50% RAM ngokungagqibekanga kwaye inokulungiswa
  • Umxholo okhethekileyo wangaphambili we/var MFS ngoku ugcinwe ngokusisigxina kwi/var ukuqinisekisa ukusebenza ngokupheleleyo
  • Yongeza icebo lokucoca kwindlela yenkqubo yewijethi (inikezwe ngu kulikov-a)
  • Ubhaqo oluzenzekelayo kwimfuno yesango elikude lendlela emiselweyo
  • Ujongano: tshintshela kwi-MVC/API eyahlukileyo yephepha lokujonga iDNS
  • Ujongano: refactor DHCP kunye nePPPoE scripts ukusetyenziswa ifctl kuphela

Okokugqibela, kubalulekile ukuqaphela ukuba i-LibreSSL ikhankanyiwe ukuba icwangciselwe ukususwa ekupheleni kolu luhlu kwaye ayizukufumana naluphi na ulungiso olungakumbi. Uhlaziyo olukhulu olulandelayo luya kwenzeka
ngokuzenzekelayo isimbo se-OpenSSL.

Gqibela ukuba unomdla wokwazi okungakumbi ngayo, ungajonga iinkcukacha Kule khonkco ilandelayo.

Khuphela ingxelo entsha ye I-OPNsense 22.7

Si Ngaba uyafuna ukufumana le nguqulo intsha solamente Kuya kufuneka uye kwiwebhusayithi esemthethweni nakwicandelo lokukhuphela apho ungafumana khona umfanekiso oqokelelweyo ngendlela ye LiveCD kunye nomfanekiso wenkqubo yokubhalela kwiFlash drives koku kulandelayo unxibelelwano

Ikhowudi yemvelaphi yamacandelo osasazo, kunye nezixhobo ezisetyenziselwa ulwakhiwo, zisasazwa phantsi kwelayisensi ye-BSD.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Inoxanduva lwedatha: I-AB Internet Networks 2008 SL
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.