Michael Tremer from the IPFire project announced today general availability of IPFire 2.27 Core Update 162 as a new maintenance release of this hardened open source Linux firewall distribution, the first to be powered by Linux kernel 5.15 LTS.
IPFire 2.27 Core Update 162 is here less than a month after the Core Update 161 release as the last update of the year and also the first update powered by the latest and greatest Linux 5.15 LTS kernel series.
Until now, IPFire has been powered by the Linux 5.10 LTS kernel series, since mid-August 2021, but even if Linux kernel 5.10 LTS is supported until the end of 2026, the developers have decided to move to Linux kernel 5.15 LTS, which is only will be supported until October 2023, as it offers better hardware support and some cool new features.
For example, Linux kernel 5.15 LTS introduces a full-featured implementation of the NTFS file system, an in-kernel SMB3 server, real-time preemption locking, support for migrating memory pages to persistent memory, support for the pre-mapped trace mechanism in the IOAM subsystem, support for the Management Component Transport Protocol (MCTP) protocol, and out-of-band data support for the Unix domain sockets.
“We continued our work to take advantage of improvements in the kernel that help reduce CPU usage when forwarding large numbers of packets,” said Michael Tremer. “In certain environments, this allows IPFire to achieve significantly more throughput and lower latency, as more CPU resources are available when needed.”
IPFire 2.27 Core Update 162 is not only the last release of the year, but also the last release to support the i586 (32-bit) architecture as the developers want to focus their efforts on improving support for architectures supported by the mass are used. Those who have installed IPFire on machines powered by 32-bit Intel-compatible processors are urged to back up their files and perform a fresh install on a supported architecture.
Among other changes, the IPFire 2.27 Core Update 162 release further improves the IPS (Intrusion Prevention System), adds a new “help” option to the web UI to redirect users to the correct page on the IPFire Wiki, adds IPFire location to the new “DROP” category, improves OpenVPN and Dynamic DNS support, and updates the installer to properly create EFI boot entries in all BIOSes.
Of course, several components and add-ons have been updated to the latest versions. These include BIND 9.16.22, GNU Bison 3.8.2, GNU Coreutils 9.0, dhcpcd 9.4.1, Gawk 5.1.1, Meson 0.59.2, OpenVPN 2.4.4, OpenSSH 8.8p1, Suricata 5.0.8, Unbound 1.13. 2 , xtables add-ons 3.18, ClamAV 0.104.1, Postfix 3.6.3 and Tor 0.4.6.8.
Image Credits: IPFire Project (edited by Marius Nestor)
Last updated 14 minutes ago