Тег: pfsense

pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. The project's latest release, pfSense 2.5.0, is based on FreeBSD 12.2. The release announcement highlights changes in the new version: "Base OS upgraded to FreeBSD 12.2-STABLE, OpenSSL upgraded to 1.1.1, pPerformance improvements. Kernel WireGuard implementation, as mentioned in a previous WireGuard blog post. WireGuard is a new VPN Layer 3 protocol designed for speed and simplicity. The pfSense documentation site includes information on how to configure WireGuard as well as example configuration recipes. IPsec enhancements: Configuration for the strongSwan IPsec backend was changed from the deprecated ipsec.conf/stroke format to the new swanctl/VICI format. Various improvements to tunnel configuration, including better options for lifetime and rekey to avoid duplicate security associations."

Софт

Софт

pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. The project's latest release upgrades the base operating system, adds improvements to the web interface and disables access time writes by default to improve disk performance. "2.4.5 adds several new features, including: OS Upgrade: Base Operating System upgraded to FreeBSD 11-STABLE after FreeBSD 11.3. Added sorting and search/filtering to several pages including the Certificate Manager, DHCP Leases, and ARP/NDP Tables. Added DNS Resolver (Unbound) Python Integration. Added IPsec DH and PFS groups 25, 26, 27, and 31. Changed UFS filesystem defaults to noatime on new installations to reduce unnecessary disk writes. Set autocomplete=new-password for forms containing authentication fields to help prevent browser auto-fill from completing irrelevant fields. Added new Dynamic DNS providers Linode and Gandi."

Софт

The new release of the pfSense operating system for routers and firewalls is based on FreeBSD 11.2 and offers several new features: "2.4.4 includes a number of significant new features: OS Upgrade - base Operating System upgraded to FreeBSD 11.2-RELEASE-p3. As a part of moving to FreeBSD 11.2, support is included for C3000-based hardware. PHP 7.2 - PHP upgraded to version 7.2, which required numerous changes to syntax throughout the source code and packages. Routed IPsec (VTI) - routed IPsec is now possible using using FreeBSD if_ipsec(4) Virtual Tunnel Interfaces (VTI). IPsec Speed Improvements - the new Asynchronous Cryptography option under the IPsec Advanced Settings tab can dramatically improve IPsec performance on multi-core hardware. Default Gateway Group - the default gateway may now be configured using a Gateway Group setup for failover, which replaces Default Gateway Switching. Limiter AQM/Queue Schedulers - limiters now include support for several Active Queue Management (AQM) methods and Queue Scheduler configurations such as FQ_CODEL."

Софт

We are happy to announce the release of pfSense software version 2.3.4. This is a maintenance release in the 2.3.x series, bringing stability and bug fixes, fixes for a few security issues, and a handful of new features. On the 2.3.4-RELEASE Dashboard you'll find a few additional pieces of information - the BIOS vendor, version, and release date (if the firewall can determine them) and a Netgate Unique ID. The Netgate Unique ID is similar to a serial number, it is used to uniquely identify an instance of pfSense software for customers who want to purchase support services. For hardware sold in our store, it also allows us to tie units to our manufacturing records. This ID is consistent across all platforms (bare metal, virtual machines, and hosted/cloud instances such as AWS/Azure). We had originally intended to use the hardware serial number or the UUID generated by the operating system, but we found that these were unreliable.

Софт