Sauki mai ɗaukar hoto na OpenBGPD 8.0

An gabatar da shi ne fitowar bugu mai ɗaukuwa na fakitin kewayawa na OpenBGPD 8.0, wanda masu haɓaka aikin OpenBSD suka haɓaka kuma an daidaita su don amfani akan FreeBSD da Linux (tallafin Alpine, Debian, Fedora, RHEL/CentOS, Ubuntu an ayyana). Don tabbatar da ɗaukar nauyi, an yi amfani da sassan lambar daga ayyukan OpenNTPD, OpenSSH da LibreSSL. Aikin yana goyan bayan mafi yawan ƙayyadaddun bayanai na BGP 4 kuma ya dace da buƙatun RFC8212, amma baya ƙoƙarin rungumar fa'ida kuma yana bayar da galibin tallafi ga mafi shahara da ayyuka masu yaduwa.

Ana gudanar da ci gaban OpenBGPD tare da goyon bayan mai rejista na Intanet na yanki RIPE NCC, wanda ke da sha'awar kawo ayyukan OpenBGPD zuwa dacewa don amfani da sabobin don yin tuƙi a wuraren musayar zirga-zirgar zirga-zirga (IXP) da kuma samar da cikakken aiki. madadin kunshin BIRD (daga wasu buɗaɗɗen madadin waɗanda ke aiwatar da ka'idar BGP Ana iya lura da ayyukan FRRouting, GoBGP, ExaBGP da Bio-Routing).

Aikin yana mai da hankali kan tabbatar da matsakaicin matakin aminci da aminci. Don karewa, ana amfani da tsauraran tabbatar da daidaiton duk sigogi, na nufin sa ido kan yarda da iyakoki, raba gata, da ƙuntatawa ga kiran tsarin. Sauran fa'idodin sun haɗa da dacewa daidaitaccen harshe na ma'anar daidaitawa, babban aiki da ingancin ƙwaƙwalwar ajiya (misali, OpenBGPD na iya aiki tare da tebur mai tuƙi mai ɗauke da ɗaruruwan dubban shigarwar).

Daga cikin canje-canje a cikin sakin OpenBGPD 8.0:

  • Ƙara tallafi na farko don Flowspec (RFC5575). A cikin tsarin sa na yanzu, sanarwar ƙa'idodin flowspec kawai ake tallafawa.
  • An faɗaɗa ƙarfin ikon faɗar umarni a cikin bgpctl mai amfani, wanda yanzu zai iya aiwatar da takamaiman takamaiman umarni da ginawa kamar "bgpctl show rib 192.0.2.0/24 dalla-dalla".
  • An ƙara semaphore don kare buga bayanan zaman RTR (RPKI zuwa Router) a cikin RDE (Injin yanke shawara).
  • Kafaffen bug wanda ya haifar da bayyanar sabon abu na ASPA a cikin RPKI (Maɓallin Maɓallin Jama'a na Albarkatu).

source: budenet.ru

Add a comment