RIPE Atlas

Tsiku labwino kwa nonse! Ndikufuna kupereka nkhani yanga yoyamba yokhudza habr pamutu wosangalatsa kwambiri - RIPE Atlas Internet control system. Zina mwa zomwe ndimachita chidwi ndi kuphunzira pa intaneti kapena pa intaneti (mawu omwe akudziwika kwambiri, makamaka asayansi). Pali zida zambiri pa RIPE Atlas pa intaneti, kuphatikiza pa habr, koma zidawoneka zosakwanira kwa ine. Nthawi zambiri, nkhaniyi idagwiritsa ntchito zambiri kuchokera patsamba lovomerezeka RIPE Atlas ndi maganizo anga.

RIPE Atlas

M'malo mwambi

Registrar Internet Registrar (RIR), yemwe udindo wake umakhala ku Europe, Central Asia ndi Middle East, ndi RIPE NCC (RΓ©seaux IP EuropΓ©ens Network Coordination Center). RIPE NCC ndi bungwe lopanda phindu lomwe lili ku Netherlands. Imathandizira intaneti. Amapereka ma adilesi a IP ndi manambala odziyimira pawokha kwa omwe amapereka intaneti ndi mabungwe akulu.

Imodzi mwama projekiti apamwamba a RIPE NCC omwe cholinga chake ndikufufuza za intaneti ndi RIPE Atlas (yoyamba kumapeto kwa 2010), yomwe inali kusinthika kwa Test Traffic Measurement Service, yomwe idasiya kugwira ntchito mu 2014.

RIPE Atlas ndi gulu lapadziko lonse lapansi la masensa omwe amayesa momwe intaneti ilili. Pakali pano pali masauzande masauzande ambiri mu RIPE Atlas network ndipo chiwerengero chawo chikukula mosalekeza. RIPE NCC imasonkhanitsa zomwe zasonkhanitsidwa ndikuzipangitsa kuti zizipezeka kwaulere kwa ogwiritsa ntchito m'njira yosavuta.

Kukula kwa maukonde kumachitika pa mfundo yokhazikitsa mwaufulu kwa masensa ndi ogwiritsa ntchito muzomangamanga zawo, zomwe "ngongole" zimaperekedwa, zomwe zitha kugwiritsidwa ntchito pochita miyeso ya chidwi pogwiritsa ntchito masensa ena.

Nthawi zambiri RIPE Atlas imagwiritsidwa ntchito:

  • kuwunika kupezeka kwa maukonde anu kuchokera kumalo osiyanasiyana pa intaneti;
  • kuti mufufuze ndikuthetsa maukonde anu ndi mayeso olumikizana achangu, osinthika;
  • m'dongosolo loyang'anira maukonde anu;
  • kuyang'anira kupezeka kwa zomangamanga za DNS;
  • Cheke cholumikizira cha IPv6.

RIPE Atlas

Monga ndanenera kale, RIPE Atlas ndi dongosolo la masensa omwe ali pa intaneti ndipo ali pansi pa ulamuliro umodzi. Kuwonjezera masensa ochiritsira (Probes), pali zina zapamwamba - nangula (Nangula).

Pofika pakati pa 2020, dongosolo la RIPE Atlas lili ndi masensa opitilira 11 ndi anangula opitilira 650, omwe pamodzi amapanga miyeso yopitilira 25 ndikulandila zotsatira zopitilira 10 pamphindikati.

Ma graph omwe ali pansipa akuwonetsa kukula kwa kuchuluka kwa masensa ndi nangula.

RIPE Atlas

RIPE Atlas

Ndipo ziwerengero zotsatirazi zikuwonetsa mapu a Dziko lapansi omwe akuwonetsa malo a masensa ndi nangula, motsatana.

RIPE Atlas

RIPE Atlas

Ngakhale chigawo cha RIPE NCC, maukonde a RIPE Atlas akukhudza pafupifupi dziko lonse lapansi, pomwe Russia ili pamwamba 5 potengera kuchuluka kwa masensa omwe adayikidwa (568), pamodzi ndi Germany (1562), USA (1440), France. (925) ndi UK (610).

Control maseva

Pophunzira ntchito ya sensayi, idapezeka kuti nthawi ndi nthawi (mphindi 4 zilizonse) imayang'ana kulumikizana ndi zinthu zina pamaneti, zomwe zimaphatikizapo ma seva a DNS ndi ma node okhala ndi mayina amtundu ngati "ctr-sin02.atlas.ripe.net" , ndikukhulupirira, omwe ndi ma seva olamulira a netiweki ya RIPE Atlas.

Sindinapeze zambiri za ma seva owongolera patsamba lovomerezeka, koma titha kuganiza kuti ntchito zawo zikuphatikiza kuyang'anira masensa, komanso kuphatikizira ndi kukonza deta. Ngati kulingalira kwanga kuli kolondola, ndiye kuti pali ma seva olamulira osachepera 6, omwe 2 ali ku USA, 2 ku Netherlands, 1 ku Germany, 1 ku Singapore. Port 443 imatsegulidwa pa maseva onse.

Ngati wina ali ndi zambiri zokhudzana ndi maseva owongolera a netiweki ya RIPE Atlas, chonde fotokozerani nkhaniyi.

Sensor

RIPE Atlas

RIPE Atlas sensor ndi chipangizo chaching'ono (TP-Link 3020) chomwe chimayendetsedwa ndi USB ndikulumikizana ndi doko la Ethernet la router pogwiritsa ntchito chingwe cha netiweki. Kutengera chitsanzo, sensa ikhoza kukhala ndi Atheros AR9331 chipset, 400 MHz, 4 MB flash ndi 32 MB RAM kapena MediaNek MT7628NN chipset, 575 MHz, 8 MB flash ndi 64 MB RAM.

Nangula

RIPE Atlas

The armature ndi sensor yowongoleredwa yokhala ndi magwiridwe antchito kwambiri komanso kuthekera koyezera. Ndi chipangizo chomwe chili mumtundu wamba wa 19-inch pa APU2C2 kapena APU2E2 hardware platform ndi 4-core 1 GHz purosesa, 2 GB ya RAM, 3 Gigabit Ethernet madoko ndi 250 GB SSD drive. Mtengo wa nangula ndi pafupifupi $400.

Kuyika ndi kasamalidwe ka sensa

Monga ndanenera kale, masensa amagawidwa kwaulere ndicholinga chowayika muzomangamanga zanu. Mukapempha sensa, onetsani dziko, mzinda ndi chiwerengero cha machitidwe odziyimira pawokha kumene idzakhala. Poyankha pempho langa, a RIPE NCC adatumiza uthenga wotsatira.

Tsoka ilo, pulogalamu yanu siyikukwaniritsa zomwe tikufuna kuti tilandire sensor ya hardware pakadali pano. Ngakhale cholinga chathu ndikugawa masensa a RIPE Atlas momwe tingathere, zikuwoneka kuti pali zida zokwanira kale zolumikizidwa mkati mwa ASN yomwe mudatchula, netiweki yomwe mudalembako, kapena dziko lomwe mudagwiritsa ntchito.

Palibe vuto. Pankhaniyi, mutha kukhazikitsa sensa yamapulogalamu, mwachitsanzo, pamakina enieni, seva yakunyumba kapena rauta - palibe zoletsa pamalo ndi dongosolo lodziyimira palokha. CentOS, Debian, Raspbian ndi Turris OS amathandizidwa. Kuti mutumize, muyenera kutsitsa ndikuyika pulogalamu yoyenera, mwachitsanzo kuchokera posungira pa GitHub.

Kuyika sensa yamapulogalamu ndikosavuta. Mwachitsanzo, kukhazikitsa pa CentOS 8 muyenera kuyendetsa malamulo awa:

curl -O 'https://ftp.ripe.net/ripe/atlas/software-probe/centos8/noarch/ripe-atlas-repo-1-2.el8.noarch.rpm'

yum install ripe-atlas-repo-1-2.el8.noarch.rpm

ndikulembetsa sensa, pakadali pano muyenera kupereka kiyi ya SSH, yomwe ili mkati /var/atlas-probe/etc/probe_key.pub, ndikuwonetsanso nambala yodziyimira payokha ndi mzinda wanu. Kalatayo idatikumbutsa za kufunika kowonetsa bwino malo a sensor.

Kuwongolera kwa sensa kumangokhala ndi kuthekera kogawana zoyezera ndi ogwiritsa ntchito ena, sinthani zidziwitso zanthawi yocheperako, komanso makonda okhazikika pamanetiweki (adiresi, chipata chosasinthika, ndi zina).

Miyeso

Pomaliza tinayamba kuyeza. Kukhazikitsa ntchito zoyezera kumachitika kuchokera ku akaunti yanu. Mutha kuwonanso zotsatira pamenepo.

Kupanga ntchito yoyezera kumakhala ndi masitepe atatu: kusankha mtundu woyezera, kusankha sensa, kusankha nthawi yoyezera.

Miyeso ikhoza kukhala ya mitundu iyi: ping, traceroute, DNS, SSL, HTTP, NTP. Zosintha mwatsatanetsatane za mtundu wina woyezera, kupatula zomwe zili ku protocol kapena zofunikira zina, zimaphatikizapo: adilesi yomwe mukufuna, ma network osanjikiza protocol, kuchuluka kwa mapaketi mumiyeso ndi nthawi pakati pa miyeso, kukula kwa paketi ndi nthawi pakati pa mapaketi, kuchuluka kwa kusintha kwachisawawa mu nthawi yoyambira kutumiza mapaketi.

Zomverera zitha kusankhidwa ndi chizindikiritso chawo kapena dziko lomwe ali, dera, makina odziyimira pawokha, tag, ndi zina zambiri.

Nthawi yoyezera imayikidwa ndi nthawi yoyambira ndi yomaliza.

Zotsatira zoyezera zimapezeka patsamba lanu mu akaunti yanu, zomwe zitha kupezekanso mumtundu wa json. Nthawi zambiri, zotsatira zoyezera ndi zizindikiro za kuchuluka kwa kupezeka kwa nodi kapena ntchito inayake.

Kwa wogwiritsa ntchito, kuthekera kwa kuyeza kumaperekedwa m'magulu ambiri koma ochepa kwambiri. Komabe, ndizodziwikiratu kuti kuthekera kwadongosolo kumakhudza kupanga mapaketi pafupifupi kasinthidwe kalikonse, komwe kumatsegula mwayi wambiri woyezera momwe intaneti ilili.

Pansipa pali chitsanzo cha zotsatira zosasinthika kuchokera muyeso imodzi pogwiritsa ntchito zoikamo zokhazikika. Mumiyezo monga ping, traceroute ndi SSL, adilesi ya IP ya habr.com idasankhidwa kukhala chandamale, DNS inali adilesi ya IP ya seva ya Google DNS, NTP inali adilesi ya IP ya seva ya NTP ntp1.stratum2.ru. Miyezo yonse idagwiritsa ntchito sensa imodzi yomwe ili ku Vladivostok.

Ping

[{"fw":4790,"lts":18,"dst_name":"178.248.237.68","af":4,"dst_addr":"178.248.237.68","src_addr":"192.168.0.10","proto":"ICMP","ttl":55,"size":48,"result":[{"rtt":122.062873},{"rtt":121.775641},{"rtt":121.807897}],"dup":0,"rcvd":3,"sent":3,"min":121.775641,"max":122.062873,"avg":121.882137,"msm_id":26273241,"prb_id":4428,"timestamp":1594622562,"msm_name":"Ping","from":"5.100.99.178","type":"ping","group_id":26273241,"step":null,"stored_timestamp":1594622562}]

Traceroute

[{"fw":4790,"lts":19,"endtime":1594622643,"dst_name":"178.248.237.68","dst_addr":"178.248.237.68","src_addr":"192.168.0.10","proto":"ICMP","af":4,"size":48,"paris_id":1,"result":[{"hop":1,"result":[{"from":"192.168.0.1","ttl":64,"size":76,"rtt":7.49},{"from":"192.168.0.1","ttl":64,"size":76,"rtt":1.216},{"from":"192.168.0.1","ttl":64,"size":76,"rtt":1.169}]},{"hop":2,"result":[{"from":"5.100.98.1","ttl":254,"size":28,"rtt":1.719},{"from":"5.100.98.1","ttl":254,"size":28,"rtt":1.507},{"from":"5.100.98.1","ttl":254,"size":28,"rtt":1.48}]},---DATA OMITED---,{"hop":10,"result":[{"from":"178.248.237.68","ttl":55,"size":48,"rtt":121.891},{"from":"178.248.237.68","ttl":55,"size":48,"rtt":121.873},{"from":"178.248.237.68","ttl":55,"size":48,"rtt":121.923}]}],"msm_id":26273246,"prb_id":4428,"timestamp":1594622637,"msm_name":"Traceroute","from":"5.100.99.178","type":"traceroute","group_id":26273246,"stored_timestamp":1594622649}]

DNS

[{"fw":4790,"lts":146,"dst_addr":"8.8.8.8","af":4,"src_addr":"192.168.0.10","proto":"UDP","result":{"rt":174.552,"size":42,"abuf":"5BGAgAABAAEAAAAABGhhYnIDY29tAAABAAHADAABAAEAAAcmAASy+O1E","ID":58385,"ANCOUNT":1,"QDCOUNT":1,"NSCOUNT":0,"ARCOUNT":0},"msm_id":26289620,"prb_id":4428,"timestamp":1594747880,"msm_name":"Tdig","from":"5.100.99.178","type":"dns","group_id":26289620,"stored_timestamp":1594747883}]

SSL

[{"fw":4790,"lts":63,"dst_name":"178.248.237.68","dst_port":"443","method":"TLS","ver":"1.2","dst_addr":"178.248.237.68","af":4,"src_addr":"192.168.0.10","ttc":106.920213,"rt":219.948332,"cert":["-----BEGIN CERTIFICATE-----nMIIGJzCCBQ+gAwIBAg ---DATA OMITED--- yd/teRCBaho1+Vn-----END CERTIFICATE-----"],"msm_id":26289611,"prb_id":4428,"timestamp":1594747349,"msm_name":"SSLCert","from":"5.100.99.178","type":"sslcert","group_id":26289611,"stored_timestamp":1594747352}]

NTP

[{"fw":4790,"lts":72,"dst_name":"88.147.254.230","dst_addr":"88.147.254.230","src_addr":"192.168.0.10","proto":"UDP","af":4,"li":"no","version":4,"mode":"server","stratum":2,"poll":8,"precision":0.0000076294,"root-delay":0.000518799,"root-dispersion":0.0203094,"ref-id":"5893fee5","ref-ts":3803732581.5476198196,"result":[{"origin-ts":3803733082.3982748985,"receive-ts":3803733082.6698465347,"transmit-ts":3803733082.6698560715,"final-ts":3803733082.5099263191,"rtt":0.111643,"offset":-0.21575},{"origin-ts":3803733082.5133042336,"receive-ts":3803733082.7847337723,"transmit-ts":3803733082.7847442627,"final-ts":3803733082.6246700287,"rtt":0.111355,"offset":-0.215752},{"origin-ts":3803733082.6279149055,"receive-ts":3803733082.899283886,"transmit-ts":3803733082.8992962837,"final-ts":3803733082.7392635345,"rtt":0.111337,"offset":-0.2157}],"msm_id":26289266,"prb_id":4428,"timestamp":1594744282,"msm_name":"Ntp","from":"5.100.99.178","type":"ntp","group_id":26289266,"stored_timestamp":1594744289}]

Pomaliza

Netiweki ya RIPE Atlas ndi chida chosavuta chomwe chimakulolani kuwunika kupezeka kwa zinthu ndi ntchito pa intaneti posachedwa.

Zomwe zimatulutsidwa ndi netiweki ya RIPE Atlas zitha kukhala zothandiza kwa ogwiritsa ntchito ma telecom, ofufuza, akatswiri aukadaulo ndi aliyense amene ali ndi chidwi ndi thanzi la intaneti ndipo akufuna kudziwa zambiri za momwe ma network amathandizira komanso kayendedwe ka data komwe kumathandizira intaneti padziko lonse lapansi. .

PS RIPE Atlas siili yokha mwa mtundu wake, pali ma analogi, mwachitsanzo izi.

Source: www.habr.com

Kuwonjezera ndemanga