Netmaker, a tool that creates networks using WireGuard, has released version v0.21.2. This tool automates the creation of fast, secure, and distributed virtual networks. Netmaker leverages Kernel WireGuard, which provides maximum speed, performance, and security for the virtual networks it creates.

The latest release, v0.21.2, brings several improvements and fixes to Netmaker. Some of the new features include auto relay via enrollment key and improvements in local routing.

In terms of fixes, the release addresses an inconsistency in DNS entries for networks, ensures validation of unique network CIDR, fixes caching discrepancies in extclient, resolves issues with deleted node peer updates when disconnected from the network, and adds a force deletion option for daemon nodes stuck in the removing state.

However, there are a few known issues with this release. The Windows installer does not install WireGuard, and the netclient-gui may continuously display an error dialog if the Netmaker server is offline. Additionally, there are IPv6 address and route issues on Mac, and the network tab in netclient-gui may appear blank after disconnecting.

Overall, Netmaker’s latest release offers improved functionality and fixes for a smoother experience in creating virtual networks with WireGuard.

Netgate, the provider of pfSense Community Edition (CE) software, has announced the release of version 2.7.1. pfSense CE is an open-source project that has been supported by Netgate since 2008. The source code for the project is available on GitHub under the Apache 2.0 open-source license. pfSense CE can be used on common hardware to build routers and more.

One major change in this release is the upgrade of OpenSSL to version 3.0.12. This upgrade was necessary as OpenSSL 1.1.1 has reached its End of Life and will no longer receive security patches. With the upgrade to OpenSSL 3.0.12, older and weaker encryption and hash algorithms have been removed, and security certificates based on these algorithms have been deprecated. It is highly recommended to review the release notes and Netgate’s blog post on this topic before performing the upgrade.

Another notable feature in version 2.7.1 is the addition of Kea DHCP as an opt-in feature. While basic functionality is present, it is not yet feature-complete. Switching to the Kea DHCP server can be done through the web interface by navigating to System > Advanced and changing the server backend radio button in the DHCP Options section to “Kea DHCP”. It is important to note that switching to Kea DHCP may result in ignored hostnames for devices on the network that were assigned using static leases or rely on dynamic lease registration in DNS.

This release also includes improved support for SCTP (Stream Control Transmission Protocol) in PF for firewall rules, NAT, and logging. Rules can now act on SCTP packets by port number, whereas previously it was only possible to filter on source or destination address. Additionally, the IPv6 Router Advertisement configuration has been relocated to Services > Router Advertisement as part of the ongoing integration of the Kea DHCP server.

Other changes in version 2.7.1 include the upgrade of PHP to version 8.2.11 and the base operating system to a more recent point of FreeBSD 14-CURRENT. The release also addresses various bugs and issues.

Source: pfSense.

Firefly has released the ROC-RK3588-RT, a single-board computer (SBC) powered by the Rockchip RK3588(J) processor. The SBC is designed for networking applications such as routers and firewalls, and it comes with one 2.5GbE port and two gigabit Ethernet ports. It is available in both commercial and industrial temperature grades.

The Firefly ROC-RK3588-RT is not limited to networking applications, as it also features three video output interfaces (2x HDMI and USB-C DisplayPort), M.2 sockets for a SATA or NVMe SSD, a WiFi 6/Bluetooth 5.2 module, a 6 TOPS NPU embedded in the Rockchip processor, and a non-standard expansion connector with PCIe Gen 3 and other interfaces.

The specifications of the Firefly ROC-RK3588-RT include:

• SoC: Rockchip RK3588 or Rockchip RK3588J
• System Memory: 4GB, 8GB, 16GB, or 32GB LPDDR4/LPDDR4x/LPDDR5
• Storage: 32GB, 64GB, or 128GB eMMC flash, M.2 SATA/PCIe 2242 NVMe SSD, MicroSD card slot
• Video Output: HDMI 2.1 up to 8Kp60, HDMI 2.0 up to 4Kp60, USB-C port for DisplayPort 1.4 up to 8Kp30
• Networking: 2.5GbE RJ45 ports, 2x gigabit Ethernet RJ45 ports, optional WiFi 6 and Bluetooth 5.0 via M.2 E-Key 2230 socket
• USB: 1x USB 3.0 port, 1x USB 2.0 port, 1x USB-C 3.0 OTG port with DisplayPort Alt mode
• Expansion: M.2 SATA/PCIe 2242 socket for SSD, M.2 E-Key 2230 socket for WiFi and Bluetooth module, 60-pin “BTB” connector with PCIe Gen 3, UART, USB, CAN bus, SARADC, GPIOs
• Power Supply: 12V DC via 5.5/2.1mm power barrel jack
• Dimensions: 108.48 x 74.98mm
• Temperature Range: Commercial (-20°C to +60°C), Industrial (-40°C to 85°C)
• Humidity: 10% to 90% RH non-condensing

Source: CNX Software – Embedded Systems News.

Netgate has announced the Release Candidate (RC) of pfSense CE software version 2.7.1. This open-source project, supported by Netgate since 2008, is a widely-used firewall and routing platform. The RC release is an opportunity for users to try out the new version and provide feedback.

The major changes and features in pfSense CE software version 2.7.1 include:

1. Upgraded OpenSSL to version 3.0.12: This upgrade was necessary as OpenSSL 1.1.1 has reached its End of Life and will no longer receive security patches. The upgrade removes older and weaker encryption and hash algorithms, improving security.

2. Kea DHCP added as an opt-in feature: The Kea DHCP server is now available as an optional feature. While it is not feature complete in this version, users can switch to Kea DHCP by navigating to the System > Advanced menu and changing the DHCP Options to “Kea DHCP”. However, switching to Kea DHCP may result in the ignoring of assigned hostnames and dynamic lease registration in DNS.

3. Improved support for SCTP: Support for SCTP in firewall rules, NAT, and logging has been enhanced. Users can now filter SCTP packets by port number, in addition to source and destination address.

4. IPv6 Router Configuration moved: The IPv6 Router Advertisement configuration has been relocated to Services > Router Advertisement as part of the integration with the Kea DHCP server.

Other changes in this release include upgrading PHP to version 8.2.11, upgrading the base operating system to a more recent point of FreeBSD 14-CURRENT, and addressing various bugs and issues.

Testing of the RC software release is crucial to ensure its reliability and robustness for all users. Netgate encourages users to download and test the release candidate, and provide feedback on any issues they encounter.

To install the upgrade, users can follow the detailed Upgrade Guide available in the pfSense documentation. It is recommended to back up the pfSense CE configuration prior to the upgrade. The upgrade can be performed through the web interface by navigating to System > Update and setting the Branch to “Next Stable Version (2.7.1-RC)”.

For those who have QLogic 10Gb PCIe Ethernet adapters, the mainline Linux kernel plans to remove the QLGE driver from the kernel source tree unless active users come forward to maintain it. QLogic was acquired by Cavium in 2016, and then Marvell acquired Cavium in 2018. Despite these acquisitions, there are still QLogic 10Gb Ethernet adapters on the market and in various servers.

The QLogic 10Gb Ethernet adapter can still be found on platforms like Amazon for around $75 USD. It has also been used in some Dell adapters. However, the QLGE driver is not being maintained, and it is currently planned for removal from the Linux kernel source tree.

The QLGE driver has been residing in the Linux kernel’s staging area, but there has been no activity since January 2021. Without anyone stepping up to maintain the driver and improve the code for integration into the networking subsystem, it is now scheduled for removal in Linux 6.7.

A patch to “retire” the QLGE driver has been queued in staging-next. If there are users of the QLogic 10Gb Ethernet hardware supported by this driver who are still using the latest upstream Linux kernel versions, they can make it known and the driver can be restored. However, if this does not happen, the driver removal will take place in the upcoming Linux 6.7 cycle.

Source: Phoronix.

Netmaker has released its latest version, v0.21.1, of their WireGuard mesh VPN. Netmaker is a platform that automates the creation of fast, secure, and distributed virtual networks.

With Netmaker, users can easily create virtual networks between data centers, clouds, and edge devices without the need for manual configuration. This automation saves time and effort for users, allowing them to focus on other important tasks.

One of the key features of Netmaker is its integration with Kernel WireGuard, which provides maximum speed, performance, and security. This ensures that the virtual networks created with Netmaker are not only efficient but also highly secure.

Netmaker is designed to scale from small businesses to enterprise-level organizations. This means that whether you are a small startup or a large corporation, Netmaker can meet your networking needs.

One of the standout features of Netmaker is its ability to be highly customized. Users can configure Netmaker with WireGuard for various use cases, such as peer-to-peer connections, site-to-site connections, Kubernetes deployments, and more. This flexibility allows users to tailor Netmaker to their specific requirements.

The latest version, v0.21.1, brings several new features and fixes to the Netmaker platform:

What’s New in v0.21.1:

• Remote access client session management: Users now have more control over managing remote access client sessions. Refer to the users section in the documentation for more details.
• Generic DNS entries: It is now possible to create generic DNS entries, providing more flexibility in configuring DNS settings.
• Upgrade client version: Users can now easily upgrade the client version to match the server version directly from the user interface.
• Moved PersistentKeepAlive setting: The PersistentKeepAlive setting has been moved from the node level to the host level, simplifying network configuration.

What’s Fixed in v0.21.1:

• Extclients DNS properly set: The issue of Extclients DNS not being properly set from the ingress DNS value provided has been resolved.
• Role update of OAuth user allowed: Users can now update the role of an OAuth user without any issues.
• Zombie node issue fixed: The issue of zombie nodes has been fixed, ensuring a smoother user experience.

Despite the improvements in v0.21.1, there are still a few known issues that users should be aware of:

• Windows installer does not install WireGuard: Users running the Windows installer may encounter an issue where WireGuard is not installed automatically. This can be resolved by manually installing WireGuard.
• netclient-gui error dialog: If the Netmaker server is offline, the netclient-gui application will continuously display an error dialog. This is a known issue that will be addressed in future releases.
• Mac IPv6 addresses/route issues: Mac users may experience issues with IPv6 addresses and routes. This is a known issue that is currently being investigated.
• Docker client re-join issue: Users may encounter difficulties when trying to re-join a network using the Docker client after complete deletion. This issue is currently being addressed.
• netclient-gui network tab blank: After disconnecting from a network, the network tab in the netclient-gui application may appear blank. This is a known issue that will be fixed in future updates.

Despite these known issues, Netmaker’s latest release, v0.21.1, brings several new features and fixes that further enhance its capabilities as a WireGuard mesh VPN solution. With its automation, scalability, and customization options, Netmaker continues to be a valuable tool for those interested in servers, Linux, DevOps, and home labs.