is presented a new significant release of the distribution OpenWRT 21.02.0 Application-oriented in various network devices, such as routers, switches and access points. OpenWRT supports many different platforms and architectures and has an assembly system that allows you to simply and conveniently produce a cross-compilation, including the collection of various components, which makes it easy to form an adapted for specific tasks ready-made firmware or disk image with the desired set of pre-installed packages.
Assembly formed for 36 target platforms.
From changes in OpenWRT 21.02.0 is noted. / A>:
- increased minimum equipment requirements. In the default assembly due to the inclusion of additional Linux nucleus subsystems to use OpenWRT, a device with 8 MB Flash and 64 Mb RAM is now required. If you wish, you can still to form your own trimmed assembly, which can work on devices with 4 MB Flash and 32 MB RAM, but the functionality of this The assembly will be limited, and the stability of the work is not guaranteed.
- The basic delivery includes packages to support WPA3 wireless network protection, which is now available by default both when working in client mode and when creating an access point.
WPA3 is provided with protection from the password selection attacks (it will not allow to select a password in offline mode) and the SAE authentication protocol is involved. The ability to use WPA3 is provided in most drivers for wireless devices. - In the basic delivery by default, TLS and HTTPS support is enabled, which allows you to access the LUCI web interface via HTTPS and use utilities similar to WGET and OPKG to extract information on encrypted communication channels. Servers through which the packages downloaded via OPKG are also translated by default to return information by HTTPS. Used to encrypt the MBEDTLS library is replaced with WolfSSL (if necessary, mbedtls and OpenSSL can be installed manually, which continue to be supplied as options).
To configure an automatic forwarding on HTTPS in the Web interface, the “uhttpd.main.redirect_https = 1” option is offered. - Implementable support for the subsystem of the nucleus DSA (Distributed Switch Architecture) providing Tools for configuring and controlling the cascades of the connected Ethernet switches using the mechanisms used to configure ordinary network interfaces (iProute2, ifconfig). DSA can be used for Settings
/Media reports.