Zimbalwa izinsuku ezedlule umemezele ukukhishwa kwenguqulo entsha ye ukusatshalaliswa kwe-firewall I-OPNsense 22.7, ebizwa ngokuthi "I-Panther Enamandla", yethula isibuyekezo se-FreeBSD 13.1, i-PHP 8.0, i-Phalcon 5, i-VLAN Estacked kanye ne-Intel QuickAssist (QAT), ukuvikelwa kwe-DDoS kusetshenziswa amakhukhi e-SYN, amakhasi we-MVC/API wesimo se-IPsec kanye nokukhipha okungenamkhawulo, ama-plugin amasha we-APCUPSD kanye ne-CrowdSec nokunye okuningi.
Kulabo abangayazi i-OPNsense, kufanele bakwazi lokho imfoloko yephrojekthi ye-pfSense, idalwe ngenhloso yokwakha ikhithi yokusabalalisa evulekile ngokuphelele engaba nokusebenza ezingeni lezixazululo zezohwebo zokuthunyelwa kwezingilazi namasango enethiwekhi.
Ngokungafani ne-pfSense, iphrojekthi ibekwe njengengalawulwa yinkampani eyodwa, ngoba ithuthukiswa ngokubamba iqhaza ngqo komphakathi futhi inenqubo yentuthuko esobala ngokuphelele, ngaphezu kokunikeza ithuba lokusebenzisa noma yikuphi ukuthuthuka kwayo emikhiqizweni evela eceleni, kufaka phakathi eyokuhweba.
Phakathi kwamathuba we-OPNsense ungahlukanisa ithuluzi lokuhlanganisa elivuleke ngokuphelele, kanye nokukwazi ukufaka amaphakheji ngaphezulu kohlelo olujwayelekile lwe-FreeBSD, i-balancer yokulayisha, isikhombimsebenzisi sewebhu izinhlangano ukuxhuma abasebenzisi kunethiwekhi, uhlelo lwemibiko ebonakalayo neyokuqhafaza, phakathi kwezinye izinto.
I-OPNsense 22.7 Izici Ezintsha Eziyinhloko
Kule nguqulo entsha yokusabalalisa, isisekelo sesistimu sivezwa.ushintshele egatsheni le-FreeBSD 13.1, ngaphandle kokuthi iphakheji yesistimu iyiswe ezinguqulweni ezibuyekeziwe ze PHP 8.0.20, Phalcon 5, sqlite 3.39.0, meerkat 6.0.6, unbound 1.16.1.
Ngokuqondene nezinto ezintsha ezethulwa kule nguqulo entsha, singakuthola lokho ungeze ukusekelwa kwe-Intel QuickAssist (QAT), kanye nokusekelwa kobuchwepheshe be-Stacked VLAN (i-multilayer encapsulation yamathegi e-VLAN) nokuthi indlela Ukuvikelwa kwe-DDoS kusetshenziswa ikhukhi ye-SYN.
Ezinye izinguquko ezigqamayo kule nguqulo entsha ukuthi i I-APUPSD kanye nama-plugin we-CrowdSec, Ngiyazi futhi ukuthi yengeze ukulayishwa kabusha okuguquguqukayo kwamadivayisi adingekayo kanye nokucushwa kwebhizinisi le-WPA kumodi yengqalasizinda.
Ngakolunye uhlangothi, kuyashiwo ukuthie ikhubaze i-IPv6 ngaphakathi kwe-GIF 4in6 kanye nemigudu engu-4in4, kanye nokuthi ukulungiswa kwenziwa ukungahambisani nokuphathwa okungenantambo, nokulungiswa kokungenzeki kokukhombisa ama-loopback amaningi, ukungenzeki kokukhombisa ama-VXLAN amaningana nokuthi isheke lenziwa uma i-int ngaphambi kokudlula ku-convert_seconds_to_hms().
Kwezinye izinguquko okuvelele kule nguqulo entsha:
- Kushintshwe ukuhoxiswa kwesitifiketi ukuze usebenzise ilabhulali ye-phpseclib
- Ukuthuthukiswa kokusebenza kwe-set_single_sysctl()
- Isilungiselelo esisha semodi yokusebenzisa ukulawula ukugeleza kwephutha le-PHP
- /tmp MFS manje isebenzisa ubuningi be-RAM engu-50% ngokuzenzakalelayo futhi ingalungiswa
- /var MFS iba/var/log MFS futhi isebenzisa ubuningi be-RAM engu-50% ngokuzenzakalelayo futhi ingashunwa
- Okuqukethwe okukhethekile kwangaphambilini kwe/var MFS manje kugcinwe unomphela ku/var ukuze kuqinisekiswe ukusebenza okugcwele
- Kwengezwe isihlungi kuwijethi yelogi yesistimu (inikelwe ngu- kulikov-a)
- Ukutholwa okuzenzakalelayo kumfuneko yesango elikude lomzila ozenzakalelayo
- Ukusebenzelana: shintshela kokuhlukile kwe-MVC/API kukhasi lokubheka i-DNS
- Ukusebenzelana: i-refactor DHCP kanye nemibhalo ye-PPPoE ezosetshenziswa i-ifctl kuphela
Okokugcina, kubalulekile ukuqaphela ukuthi i-LibreSSL kuthiwa izohlelelwa ukususwa ekupheleni kwalolu chungechunge futhi cishe ngeke iphinde ikuthole ukunakekelwa okwengeziwe. Isibuyekezo esikhulu esilandelayo sizokwenzeka
ngokuzenzakalela isitayela se-OpenSSL.
Okokugcina uma unentshisekelo yokwazi kabanzi ngakho, ungabheka imininingwane Kulesi sixhumanisi esilandelayo.
Landa inguqulo entsha ye I-OPNsense 22.7
Si Ngabe ufuna ukuthola le nguqulo entsha kuphela Kufanele uye kuwebhusayithi yayo esemthethweni kanye nengxenye yokulanda lapho ungathola khona isithombe esihlanganisiwe ngendlela ye-LiveCD kanye nesithombe sohlelo ongasibhalela kuma-Flash drives kulokhu okulandelayo isixhumanisi
Ikhodi yomthombo yezingxenye zokusabalalisa, kanye namathuluzi asetshenziselwa ukwakhiwa, asatshalaliswa ngaphansi kwelayisense le-BSD.