Some new features in the v3.0.x branch
There are some interesting new features available now in the v3.0.x branch. Initial documentation is here: https://github.com/FreeRADIUS/freeradius-server/tree/v3.0.x/raddb/certs/real... In short, it's now trivial to have one EAP module serve multiple realms, each with their own certificate chain. I've also added Server Name Indication (SNI) for RadSec. This allows for the same kind of realm selection in RadSec. SNI also allows tools like haproxy to accept many TLS connections, and then forward "realm A" to home server A (over TCP), and "realm B" to home server B. This configuration allows for increased scalability and load balancing. Any questions or comments? Alan DeKok.
W dniu 26.07.2021 o 20:56, Alan DeKok pisze:
There are some interesting new features available now in the v3.0.x branch. Initial documentation is here:
https://github.com/FreeRADIUS/freeradius-server/tree/v3.0.x/raddb/certs/real...
In short, it's now trivial to have one EAP module serve multiple realms, each with their own certificate chain.
That's excellent news. Thank you for providing us with this valuable and long-awaited feature.
I've also added Server Name Indication (SNI) for RadSec. This allows for the same kind of realm selection in RadSec.
SNI also allows tools like haproxy to accept many TLS connections, and then forward "realm A" to home server A (over TCP), and "realm B" to home server B. This configuration allows for increased scalability and load balancing.
Any questions or comments?
Is approximate date for upcoming release of 3.0.24 already known? -- Marek Zarychta
On Jul 27, 2021, at 12:23 PM, Marek Zarychta <mzar@rad-bk.pwste.edu.pl> wrote:
That's excellent news. Thank you for providing us with this valuable and long-awaited feature.
You're welcome!
Is approximate date for upcoming release of 3.0.24 already known?
We're adding a few more things, and then we'll see. Probably by September. Alan DeKok.
participants (2)
-
Alan DeKok -
Marek Zarychta