Netgate® is pleased to announce the release of TNSR® software version 24.06. This regularly scheduled release includes additional hardware support, updates, and bug fixes. The Release Notes are available for review.

Overview

Netgate TNSR is a high-speed (exceeding 100 Gbps) virtual router and VPN aggregator. TNSR is the answer for businesses, governments, and xSPs looking for scalable routing without the six-figure price tag. Businesses can deploy TNSR as a Netgate hardware appliance, Bare Metal Image, or as a Virtual Appliance on Amazon Web Services and Microsoft Azure.

TNSR leverages vector packet processing (VPP), a RESTCONF management layer, and a CLI or GUI for real-time queries to deliver high performance in mission-critical site-to-site, edge-to-cloud, data center, and VPN scenarios. Complemented by Netgate’s 24x365 Technical Assistance Center, we stand ready to support your critical business requirements every day.

In this release, we have implemented the following improvements and features. 

Major Changes and Features

TNSR ARM64 Image for AWS and Azure

The new ARM64 image of TNSR can lower your AWS and Azure infrastructure costs! The 24.06 release of TNSR has AWS Graviton and Microsoft Azure Ampere Altra options. Be on the lookout in the AWS and Azure Marketplaces for new TNSR listings that are m7g (Graviton) and Dpsv5 (Ampere Altra) specific.

Remote Access VPN Enhancements

Multiple Remote Access VPNs

TNSR can now support clients connecting via IPsec over IPv4 and IPv6 utilizing different authentication methods or encryption/integrity algorithms on different VPNs. Administrators can segregate different user groups to separate VPNs for access control and isolation.

RADIUS Assignment of Client Virtual IP Addresses

With EAP-RADIUS authentication enabled, specified client virtual IP addresses can now be assigned to users, providing another layer of granularity for administrators to control access to resources. The RADIUS server can assign a client connecting to a remote access IPsec VPN an IP address based on their user group, allowing for ACL configurations that can restrict access to resources based on a user’s role.

Multiple Client Connections for a Single User

A single user can now establish multiple remote access VPN connections to TNSR, allowing simultaneous connectivity from multiple mobile devices.

User Experience Improvements

CLI improvements include adding interface average throughput statistics (last 5-minute pps/bps) and rolling counters which display near real-time updates for an interface. A ‘show interface vrrp’ command is now available to provide a simultaneous view of VRRP for IPv4 and IPv6. A ‘show ipsec tunnel brief’ command is now available to display a table of connected IPsec tunnels which can be particularly useful for managing remote access IPsec VPNs.

Logging Enhancements 

TNSR's improved logging allows system data to be retrieved using both the RESTCONF API and CLI. Results can be filtered by category, service type, and date/time range. VPP logging now defaults to SYSLOG. TNSR logs can now be forwarded to remote logging hosts such as Splunk®.

Core Technology Upgrades 

Upgrades to essential elements of the TNSR software stack include:

• VPP to stable/2402 (DPDK 23.11)
• Clixon/CLIgen to 7.0.0
• strongSwan to 5.9.14
• Kea to 2.4.1

Installing the TNSR Version 24.06 Upgrade

For detailed upgrade instructions, please consult the detailed Upgrade Guide on our TNSR documentation page.

We recommend saving a backup of the TNSR configuration before any significant change or upgrade. You will find Backup and Recovery instructions on our TNSR documentation page.

Netgate Support

This TNSR 24.06 software release is ready for use in production environments. Should any issues arise, please post to our forum or contact the Netgate Technical Assistance Center (TAC) for professional support.

We’re happy to discuss your needs in detail so we can provide you with the best solution for your business. Netgate makes a TNSR lab evaluation version available for you to try. Please contact one of our authorized partners or our Netgate sales team for prompt assistance.