I-OpenWrt 22.03.0 ifika nohlelo olusha lwe-Firewall, olusekela amadivayisi angaphezu kuka-180 nokunye.

Ngemva konyaka wentuthuko, isibe umemezele ukukhululwa kwenguqulo entsha enkulu wokusabalalisa I-OpenWrt 22.03.0, eqondiswe ezinhlelweni zokusebenza kumadivayisi enethiwekhi ahlukahlukene, njengamarutha, amaswishi, nezindawo zokufinyelela.

I-OpenWrt isekela amapulatifomu amaningi ahlukahlukene nezakhiwo futhi inohlelo lokwakha olukuvumela ukuthi wenze ukuhlanganisa okulula nokulula, okubandakanya izingxenye ezahlukahlukene emhlanganweni, okwenza kube lula ukwakha isithombe se-firmware esenziwe ngomumo noma sediski esiklanyelwe imisebenzi ethile ngesethi oyifunayo yamaphakheji afakwe ngaphambili. .

Izindaba eziyinhloko ze-OpenWrt 22.03.0

Kule nguqulo entsha ye-OpenWrt 22.03.0 eyethulwa, ngokuzenzakalelayo ivuliwe uhlelo lokusebenza olusha lokuphatha i-firewall, fw4 (I-Firewall4), ngokusekelwe kusihlungi sephakethe le-nfttables.

I-Syntax Yamafayela Okucushwa ye-firewall (/etc/config/firewall) futhi i-interface ye-uci ayishintshile:fw4 ingasebenza njengokumiselela okukhanyelayo kwekhithi yamathuluzi esetshenziswe ngaphambilini ye-iptables-based fw3. Okuhlukile kuyimithetho engezwe ngesandla (/etc/firewall.user), okuzodingeka ukuthi ibhalwe kabusha kuma-nftables (i-fw4 ikuvumela ukuthi wengeze amabhlogo akho omthetho, kodwa ngefomethi ye-nftables).

Olunye ushintsho olugqamile yilolo ikhithi yamathuluzi esekelwe ku-iptables endala isusiwe kusuka ezithombeni ezizenzakalelayo, kodwa zingatholwa kusetshenziswa umphathi wephakheji we-opkg noma ikhithi yamathuluzi ye-Image Builder. I-iptables-nft, arptables-nft, ebtables-nft, kanye ne-xtables-nft wrappers nazo zinikeziwe, okukuvumela ukuthi udale imithetho ye-nftables usebenzisa i-syntax endala yama-iptables.

Ngaphezu kwalokhu, kuphinde kuphawulwe ukuthi ungeze ukwesekwa kwamadivayisi amasha angaphezu kuka-180, kufaka phakathi amadivayisi ayi-15 isekelwe ku-MediaTek MT7915 chip I-Wi-Fi 6 iyahambisana (IEEE 802.11ax). Isamba senani lamadivayisi asekelwe selifinyelele ku-1580.

Ukudluliswa kwamapulatifomu kuqhubekile yesiphetho ekusetshenzisweni kwe-DSA kernel subsystem (I-Distributed Switch Architecture), ehlinzeka ngamathuluzi okumisa nokuphatha ama-cascade amaswishi e-Ethernet axhumene, kusetshenziswa izindlela zokumisa ukuxhumana kwenethiwekhi okujwayelekile (iproute2, ifconfig).

I-DSA ingasetshenziswa ukulungisa izimbobo nama-VLAN esikhundleni sethuluzi le-swconfig elinikezwe ngaphambilini, kodwa akuwona wonke ama-switch driver asekela i-DSA okwamanje. Enguqulweni ehlongozwayo, I-DSA inikwe amandla ezinkundla ze-bcm53xx (abashayeli abahunyushiwe bawo wonke amabhodi), lantiq (ama-SoCs asekelwe ku-xrx200 kanye ne-vr9) kanye ne-sunxi (Bananapi Lamobo R1 plates). Ngaphambilini, i-ath79 (TP-Link TL-WR941ND), bcm4908, gemini, kirkwood, mediatek, mvebu, octeon, ramips (mt7621) kanye nezinkundla ze-realtek zidluliselwe ku-DSA.

I-interface yewebhu ye-LuCI inemodi emnyama, Ngokuzenzakalelayo, imodi ivulwa ngokuzenzakalelayo ngokusekelwe kuzilungiselelo zesiphequluli, kodwa futhi ingaphoqeleka ukuthi ivunyelwe ngemenyu ethi “Isistimu” -> “Isistimu” -> “Ulimi Nesitayela”.

Inkinga yonyaka ka-2038 ixazululiwe okubangelwa ukuchichima kohlobo lwe-32-bit time_t (ikhawunta yesikhathi esingu-32-bit epoch izochichima ngo-Jan 19, 2038). Enguqulweni entsha, igatsha le-musl 1.2.x lisetshenziswa njengomtapo wezincwadi ojwayelekile, lapho, kuma-architecture angu-32-bit, izibali sikhathi ezindala ezingu-32-bit zithathelwa indawo yizingu-64-bit (uhlobo lwe-time_t luthathelwa indawo yi-time64_t ). Kuzinhlelo ze-64-bit, uhlobo lwe-time64_t lusetshenziswa ekuqaleni (ikhawunta izochichima eminyakeni eyizigidi eziyizinkulungwane ezingama-292). Ukushintshela ohlotsheni olusha kushintshe i-ABI, okuzodinga ukwakhiwa kabusha kwazo zonke izinhlelo ze-32-bit ezihlotshaniswa ne-musl libc (akukho ukwakhiwa kabusha okudingekayo ezinhlelweni ezingama-64-bit).

Ngakolunye uhlangothi, singathola futhi i- izinguqulo zephakheji ezibuyekeziwe, kufaka phakathi I-Linux kernel 5.10.138 ene-wireless stack cfg80211/mac80211 imbobo ye-kernel 5.15.58 (ngaphambilini i-kernel 5.4 ene-wireless stack esuka ku-5.10 egatsheni), musl libc 1.2.3, glibc 2.34, gcc 11.2.0, binutils 2.37, hostapd 2.10, dnsmasq 2.86, dnsmasq 2022.82.

Futhi okokugcina, kuyashiwo ukuthi ukwakha iplatifomu ye-arc770 (Synopsys DesignWare ARC 770D) kunqanyuliwe.

Uma ufuna ukwazi kabanzi ngayo mayelana nemininingwane efakwe kulokhu kukhishwa okusha kwe-firmware OpenWrt 22.03.0 ungabheka imininingwane ekushicilelweni kwasekuqaleni Kulesi sixhumanisi esilandelayo.

Landa inguqulo entsha ye-OpenWrt 22.03.0

Ukwakhiwa kwale nguqulo entsha kulungiselelwe amapulatifomu ahlukene angama-35, lapho kungatholwa khona amaphakheji wokuvuselela kusuka kusixhumanisi esingezansi.