RIPE yapera IPv4 kero. Zvakakwana pamusoro...

Zvakanaka, kwete chaizvo. Kaive katsvina kadiki kekudzvanya. Asi pamusangano weRIPE NCC Days, wakaitwa munaGunyana 24-25 muKyiv, zvakaziviswa kuti kugoverwa kwe / 22 subnets kumaLIR matsva kuchakurumidza kupera. Dambudziko rekuneta kweiyo IPv4 kero nzvimbo yave ichitaurwa nezvayo kwenguva yakareba. Pangave makore manomwe kubva ekupedzisira / 7 mabhuroki akagoverwa kumatunhu eregistries. Pasinei nezvose zvinodzivisa uye zvinodzivisa, izvo zvisingadzivisiki zvaisagona kudziviswa. Pazasi pane kuchekwa kwezvakatimirira panyaya iyi.

RIPE yapera IPv4 kero. Zvakakwana pamusoro...

Historical digression

Apo ese maInternet ako aya akanga achangogadzirwa, vanhu vakafunga kuti mabhiti makumi matatu nemaviri ekutaura aizokwana munhu wese. 32 ingangoita 232 bhiriyoni network mudziyo kero. Kare muma4.2, masangano mashoma ekutanga akabatana netiweki angave akafunga kuti mumwe munhu angada zvimwe? Sei, rejisita rekutanga rekero rakachengetwa nemumwe mukomana anonzi Jon Postel nemaoko, anenge ari mubhuku rakajairika. Uye iwe unogona kukumbira chivharo chitsva parunhare. Nguva nenguva, kero yazvino yakagoverwa yaiburitswa segwaro reRFC. Somuenzaniso, in RFC790, yakaburitswa munaGunyana 1981, inocherekedza nguva yekutanga yatinoziva nezve 32-bit notation yemakero eIP.

Asi iyo pfungwa yakabata, uye network yepasi rose yakatanga kushingaira kukura. Aya ndiwo maitiro ekutanga emagetsi emagetsi akasimuka, asi zvakadaro haana kunhuwa sechinhu chakakangwa. Kana paive nekururamisa, zvaigoneka kuwana angangoita / 8 block (anopfuura 16 miriyoni kero) mumaoko mamwe. Izvi hazvireve kuti chikonzero chakatariswa zvakanyanya panguva iyoyo.

Isu tose tinonzwisisa kuti kana iwe uchishingaira kushandisa chitubu, nokukurumidza kana kuti gare gare chichapera (zvikomborero kune mammoths). Muna 2011, IANA, iyo yakagovera mabhuroki ekero pasi rose, yakagovera yekupedzisira / 8 kumarejitari edunhu. Musi waGunyana 15, 2012, iyo RIPE NCC yakazivisa kupera kweIPv4 uye yakatanga kugovera isingapfuure /22 (1024 kero) kune rimwe maoko LIR (zvisinei, yakabvumira kuvhurwa kwemaLIR akati wandei kukambani imwe). Musi waApril 17, 2018, yekupedzisira block 185/8 yakapera, uye kubva ipapo, kwegore nehafu, maLIR matsva anga achidya zvimedu zvechingwa nemafuro - zvidhinha zvakadzokera mudziva nekuda kwezvikonzero zvakasiyana. Ikozvino vave kuperawo. Unogona kuona maitiro aya munguva chaiyo https://www.ripe.net/manage-ips-and-asns/ipv4/ipv4-available-pool.

Chitima chakasimuka

Panguva yemushumo wemusangano, angangoita 1200 anoenderera / 22 mabhuroki akaramba aripo. Uye dziva rakakura kwazvo rezvisina kugadziridzwa zvikumbiro zvekugovera. Zvichitaurwa zviri nyore, kana iwe usati wave LIR, iyo yekupedzisira block /22 haichagoneke kwauri. Kana iwe uchitova LIR, asi usina kunyorera yekupedzisira / 22, pachine mukana. Asi zviri nani kuendesa chikumbiro chako nezuro.

Mukuwedzera kune inoenderera / 22, pane zvakare mukana wekuwana yakasanganiswa sarudzo - musanganiswa we /23 uye / kana /24. Nekudaro, maererano nefungidziro iripo, zvese izvi zvinobvira zvichapera mukati memavhiki. Izvo zvinovimbiswa kuti pakupera kwegore rino unogona kukanganwa nezve / 22.

Matura mashoma

Sezvineiwo, kero hadzina kujekeswa kusvika zero. RIPE yakasiya imwe kero nzvimbo yezvido zvakasiyana:

  • /13 yekugadzwa kwenguva pfupi. Kero dzinogona kugovaniswa pakukumbirwa kwekuita kwemamwe mabasa ane nguva shoma (semuenzaniso, kuyedza, kuita makonferensi, nezvimwewo). Mushure mekunge basa rapera, block yekero ichasarudzwa.
  • /16 yekuchinjana mapoinzi (IXP). Zvinoenderana nekuchinjana mapoinzi, izvi zvinofanirwa kukwana kune mamwe makore mashanu.
  • /16 nokuda kwezviitiko zvisingafanoonekwi. Iwe haugoni kuvaona.
  • / 13 - kero kubva kugarwa (zvimwe nezve pazasi).
  • Chikamu chakasiyana ndicho chinonzi IPv4 guruva - akapararira zvidhinha zvidiki pane / 24, izvo zvisingakwanisi kushambadzwa nenzira ipi neipi uye kufambiswa zvinoenderana nezviyero zvazvino. Naizvozvo, ivo vanorembera vasina kutorwa kudzamara bhuroka riri padyo rasunungurwa uye kanenge / 24 yaumbwa.

Mabhuroko anodzoswa sei?

Makero haana kungogoverwa chete, asi dzimwe nguva anowira zvakare mudziva revanowanikwa. Izvi zvinogona kuitika nekuda kwezvikonzero zvakawanda: kudzoka kwekuzvidira sezvisingakoshi, kuvharwa kweLIR nekuda kwekubhuroka, kusabhadhara mari yenhengo, kutyora mitemo yeRIPE, zvichingodaro.

Asi kero hadzingowira mudziva rakajairika. Ivo vakavharirwa kwemwedzi mitanhatu kuitira kuti "vakanganwike" (kunyanya isu tiri kutaura nezveakasiyana mablacklists, spammer dhatabhesi, nezvimwewo). Ehe, mashoma kero anodzoserwa padziva pane akapihwa, asi muna 6 chete, 2019/1703 zvidhinha zvakatodzoswa. Mabhuroki akadzoserwa akadaro uchave iwo chete mukana wemangwana LIRs kugamuchira ingangoita imwe IPv24 block.

A bit of cybercrime

Kushaikwa kwechishandiso kunowedzera kukosha kwayo uye chido chekuva nacho. Uye iwe waisazoda sei? .. Mabhuroki ekero anotengeswa nemutengo wemadhora gumi nemashanu-madhora pachidimbu, zvichienderana nehukuru hwebhuroko. Uye nekushomeka kuri kukura, mitengo ingangokwira zvakanyanya. Panguva imwecheteyo, wawana mukana usina kutenderwa kuLIR account, zvinokwanisika kutsausa zviwanikwa kune imwe account, uyezve hazvizove nyore kuvadzosa. Iyo RIPE NCC, hongu, inobatsira mukugadzirisa chero makakatanwa akadai, asi haitore mabasa emapurisa kana edare.

Pane nzira dzakawanda dzekurasa kero dzako: kubva kune akajairwa bungling uye anovuza mapassword, kuburikidza nekudzingwa kwakashata kwemunhu ane mukana pasina kumunyima aya mapindiro, uye kune zvachose nyaya dzemutikitivha. Saka, pane mumwe musangano, mumwe mumiririri weimwe kambani akataura kuti vakapotsa varasikirwa sei nezvinhu zvavo. Vamwe varume vakangwara, vachishandisa magwaro enhema, vakanyoresa zvakare kambani muzita ravo murejista yemabhizinesi. Muchidimbu, vakaita raider kutora, chinangwa chega chaive chekubvisa IP blocks. Kupfuurirazve, vachive de jure vamiriri vezvemutemo vekambani, ma scammers vakabatana neRIPE NCC kuti vatangezve kuwana maaccount account uye vakatanga kutumira kero. Sezvineiwo, maitiro akacherechedzwa, mashandiro nemakero akaomeswa nechando "kusvikira ajekeserwa." Asi kunonoka kwemutemo kudzosera kambani pachayo kuvaridzi vepakutanga kwakatora inopfuura gore. Mumwe wevaive pamusangano uyu akataura kuti kuitira kudzivirira mamiriro ezvinhu akadai, kambani yake yakaendesa kero dzayo kare kunzvimbo inoshandira mutemo zviri nani. Rega ndikuyeuchidze kuti kwete kare kare isu pachedu yakanyoresa kambani muEU.

Chii chinotevera?

Panguva yehurukuro yemushumo, mumwe wevamiriri veRIPE akayeuka chirevo chekare cheIndia:

RIPE yapera IPv4 kero. Zvakakwana pamusoro...

Inogona kutorwa semhinduro ine musoro kumubvunzo wekuti "ndingawana sei imwe IPv4." Iyo dhizaini IPv6 yakajairwa, inogadzirisa dambudziko rekushomeka kwekero, yakaburitswa kumashure muna 1998, uye anenge ese maturusi etiweki uye masisitimu anoshanda akaburitswa kubva pakati pe2000s anotsigira iyi protocol. Seiko tisati tasvika? "Dzimwe nguva nhanho yakasimba yekuenda kumberi mhedzisiro yekurovera pambongoro." Nemamwe mashoko, vanopa vanongori nungo. Hutungamiri hweBelarus hwakaita nenzira yepakutanga nehusimbe hwavo, huchivamanikidza kupa rutsigiro rweIPv6 munyika padanho remutemo.

Nekudaro, chii chichaitika pakugoverwa kweIPv4? Gwaro idzva rakatogamuchirwa uye rakabvumidzwa apo kamwe / 22 zvidhinha zvapera, maLIR matsva anozokwanisa kugashira / 24 zvidhinha sezviripo. Kana pasina zvivharo zviripo panguva yekushandisa, LIR ichaiswa pane yekumirira rondedzero uye (kana kusazo) kugamuchira block kana yave kuwanikwa. Panguva imwecheteyo, kusavapo kwechivharo chemahara hakurerutsi iwe kudiwa kwekubhadhara mari yekupinda uye yenhengo. Iwe uchiri kukwanisa kutenga kero pamusika wechipiri uye woaendesa kuaccount yako. Nekudaro, RIPE NCC inodzivirira izwi rekuti "tenga" mukutaura kwaro, ichiedza kubvisa kubva kune chikamu chemari chechimwe chinhu chakanga chisina kurongerwa zvachose sechinhu chekutengesa.

Semupi ane mutoro, tinokukurudzira kuti ushingaire kushandisa IPv6 muhupenyu hwako. Uye kuva LIR, takagadzirira kubatsira vatengi vedu munyaya iyi nenzira dzose dzinobvira.

Usakanganwe kunyoresa kublog yedu, tiri kuronga kuburitsa zvimwe zvinonakidza zvakanzwikwa pamusangano.

Ndinokutendai nekugara nesu. Unoda zvinyorwa zvedu here? Unoda kuona zvimwe zvinonakidza zvemukati? Titsigire nekuisa odha kana kukurudzira kushamwari, 30% kuderedzwa kwevashandisi veHabr pane yakasarudzika analogue yekupinda-level maseva, iyo yakagadzirwa nesu kuti iwe: Chokwadi chese nezveVPS (KVM) E5-2650 v4 (6 Cores) 10GB DDR4 240GB SSD 1Gbps kubva pamadhora makumi maviri kana kugovera sevha? (inowanikwa neRAID1 uye RAID10, kusvika ku24 cores uye kusvika ku40GB DDR4).

Dell R730xd kaviri zvakachipa? Chete pano 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TV kubva $199 muNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kubva pamadhora makumi mapfumbamwe nemapfumbamwe! Verenga nezve Nzira yekuvaka Infrastructure Corp. kirasi nekushandiswa kweDell R730xd E5-2650 v4 maseva anokosha 9000 euros penny?

Source: www.habr.com

Voeg