Some new features in the v3.0.x branch
Marek Zarychta
mzar at rad-bk.pwste.edu.pl
Tue Jul 27 18:23:59 CEST 2021
W dniu 26.07.2021 o 20:56, Alan DeKok pisze:
> There are some interesting new features available now in the v3.0.x branch. Initial documentation is here:
>
> https://github.com/FreeRADIUS/freeradius-server/tree/v3.0.x/raddb/certs/realms#readme
>
> In short, it's now trivial to have one EAP module serve multiple realms, each with their own certificate chain.
That's excellent news. Thank you for providing us with this valuable and
long-awaited feature.
>
> I've also added Server Name Indication (SNI) for RadSec. This allows for the same kind of realm selection in RadSec.
>
> SNI also allows tools like haproxy to accept many TLS connections, and then forward "realm A" to home server A (over TCP), and "realm B" to home server B. This configuration allows for increased scalability and load balancing.
>
> Any questions or comments?
Is approximate date for upcoming release of 3.0.24 already known?
--
Marek Zarychta
More information about the Freeradius-Users
mailing list