Sigar šaukuwa ta OpenBGPD 6.7p0 akwai

Buɗe BSD Masu Haɓakawa aka buga fitar da bugu na šaukuwa na fakitin zirga-zirga BuɗeBGPD 6.7, wanda za'a iya amfani dashi akan tsarin aiki ban da OpenBSD. Don tabbatar da ɗaukar nauyi, an yi amfani da sassan lambar daga ayyukan OpenNTPD, OpenSSH da LibreSSL. Baya ga OpenBSD, an sanar da tallafi ga Linux da FreeBSD. An gwada OpenBGPD akan Debian 9, Ubuntu 14.04+ da FreeBSD 12.

Ana haɓaka OpenBGPD a ƙarƙashin goyon baya mai rejista yanar gizo na yanki RIPE NCC, wanda ke da sha'awar kawo ayyukan OpenBGPD zuwa dacewa don amfani da sabobin don zirga-zirga a wuraren musayar zirga-zirgar ababen hawa (IXP) da kuma samar da cikakken madadin kunshin. Tsuntsu (wasu buɗaɗɗen hanyoyin aiwatar da ka'idar BGP sun haɗa da ayyuka FRRouting, GoBGP, ExaBGP и Bio-Routing).

Ci gaban OpenBGPD yana mai da hankali kan tabbatar da mafi girman matakin tsaro da aminci. Don karewa, ana amfani da tsauraran tabbatar da daidaiton duk sigogi, na nufin sa ido kan bin iyakokin buffer, raba gata, da ƙuntatawa ga kiran tsarin. Sauran fa'idodin sun haɗa da dacewa daidaitaccen harshe na ma'anar daidaitawa, babban aiki da ingancin ƙwaƙwalwar ajiya (misali, OpenBGPD na iya aiki tare da tebur mai tuƙi mai ɗauke da ɗaruruwan dubban shigarwar). Aikin yana goyan bayan mafi yawan ƙayyadaddun bayanai na BGP 4 kuma ya dace da buƙatun RFC8212, amma baya ƙoƙarin rungumar fa'ida kuma yana ba da galibin tallafi don shahararrun ayyuka da yaɗuwa.

A cikin sakin OpenBGPD 6.7 alama abubuwan ingantawa:

• Mai amfani da bgpctl yana ba da tallafi na farko don fitowar JSON;
• В bgpd.conf an ba da izinin saita adiresoshin IPv4 da IPv6 lokaci guda a cikin umarnin adireshi na gida a cikin tubalan "ƙungiyar";
• Daidaita tara teburin ROA (Izinin Tushen Hanya) tare da prefix/source-kamar nau'i-nau'i zuwa kashi ɗaya tare da mafi tsayin ƙimar "maxlen";
• Ƙara "max-prefix {NUM} out" dukiya zuwa bgpd.conf don iyakance adadin prefixes da aka yi talla don guje wa zubar da cikakkun tebur;
• A cikin bgpctl, an faɗaɗa umarnin 'show maƙwabci' don nuna ƙididdiga na karɓa da saita maƙasudi, da ƙimar iyakar “max-prefix out”;
• Sanarwa sun haɗa da bayani game da dalilin kurakuran gida. Umurnin "bgpctl show makwabci" yana ba da fitarwa na dalilin kuskuren da aka karɓa na ƙarshe;
• Don aiwatar da aikin “sake kaya mai kyau” daidai, ana yiwa tsofaffin prefixes alama a cikin Teburin Adj-RIB-Out, wanda ke adana bayanai game da hanyoyin da na'ura mai ba da hanya tsakanin hanyoyin sadarwa na BGP na gida ya zaba don tallata ingantattun hanyoyi ga takwarorinsu;
• Ƙara ikon gina OpenBGPD ta amfani da kunshin don rubuta bison parsers ba tare da byacc ba;
• An ƙara zaɓin "--runstatedir", ta inda zaku iya tantance hanyar zuwa bgpctl.sock;
• An share rubutun saitin don inganta ɗaukakawa.

source: budenet.ru