ocserv 0.9.0
Nikos Mavrogiannopoulos
nmav at gnutls.org
Tue Jan 20 12:14:15 PST 2015
Hello,
I've just released ocserv 0.9.0. This release integrates supports for
the radius protocol using the freeradius-client library, and adds support
for compression using LZS and LZ4.
ocserv is a VPN server that implements the AnyConnect SSL VPN protocol
and targets small embedded Linux devices.
* Version 0.9.0 (released 2015-01-20)
- Added native support for radius. That adds the new auth configuration
option "radius", which has as parameters the freeradius-client
configuration file and optionally the groupconfig option which
instructs to read configuration from radius; the stats-report-time
option enables interim-updates. That adds the dependency to
freeradius-client (see doc/README.radius).
- Reply using the same address that received UDP packets are sent.
- Simplify the input of IPv6 network addresses.
- Use a separate IPC and PID namespace in Linux systems for worker
processes. That effectively puts each worker process in a separate
container. This can be enabled at compile time using --enable-linux-namespaces.
- Configuration option 'use-seccomp' was replaced by 'isolate-workers',
which in addition to seccomp it enables the Linux namespaces restrictions.
- Added support for stateless compression using LZ4 and LZS. This
is disabled by default.
The current release is available at:
ftp://ftp.infradead.org/pub/ocserv/ocserv-0.9.0.tar.xz
ftp://ftp.infradead.org/pub/ocserv/ocserv-0.9.0.tar.xz.sig
The VPN server's web-site is at:
http://www.infradead.org/ocserv
regards,
Nikos
More information about the openconnect-devel
mailing list