Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Приветствую!

Chokwadi hazvizove nhau huru kwauri izvo "Changamire Runet" watova pedyo nekona - mutemo unotanga kushanda 1 November gore rino.

Sezvineiwo, zvichange zvakaita sei (uye kana zvichizodaro?) Kushanda hakuna kunyatsojeka: mirairo chaiyo yevafambisi venhare haisati yave kuwanikwa pachena. Iko hakuna zvakare nzira, faindi, zvirongwa, kugoverwa kwemabasa uye mabasa - pane chiziviso chete.

Mamiriro akafanana akacherechedzwa maererano nekuitwa kwezvirongwa zve "Yarovaya Law" - midziyo yemutemo haina kugadzirwa nenguva uye vanotungamira telecom vafambisi venyika vakamanikidzwa kudzokorodza kubata vangangove vagadziri vemichina yakakosha nemibvunzo yakakodzera. Nekudaro, ivo havana kugamuchira mhinduro kana nezve ruzivo nezve michina kana masampuli ivo pachavo.

Asi chinhu chikuru hachisi chekuti mutemo unotanga kushanda nekukurumidza uye ndedzipi shanduko dzakatimirira. Chinhu chikuru ndechekuti nekuda kwekuunzwa kwebhiri iri, nharaunda yevanofarira yakatanga kuvandudzwa kwenzvimbo yakazvimirira yekufambiswa kwemashoko munyika yedu.

Nhasi ndichataura pamusoro pezvatakatoita, zvatichaita munguva pfupi iri kutevera, uye kuti ndeapi matambudziko nematambudziko ataifanira kutarisana nawo munzira yekugadzira chirongwa.

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Mutemo unoti chii?

Ndisati ndaenderera kune chikamu chehunyanzvi chepurojekiti yedu, ini ndinofanira kuita chengetedzo pamusoro pekuti mutemo "Pamusoro peChangamire Runet" chii.

Muchidimbu: zviremera zvinoda "kuchengetedza" chikamu cheRussia cheInternet kana vavengi vedu vanofungidzirwa vachida kuivhara. Asi "nzira inoenda kugehena yakagadzirwa nevavariro dzakanaka" - hazvina kujeka zvachose kuti vachatidzivirira kubva kunaani uye kuti "vavengi", mumutemo, vanogona kukanganisa sei basa rechikamu cheRussia cheInternet.

Kuti uite chiitiko ichi chekurwisa, nyika dzese pasirese dzinofanira kurangana, kucheka tambo dzese dzekuyambuka, kupfura masatellite epamba uye kugadzira kupindira kweredhiyo nguva dzose.

Hazvina kunzwika zvakanyanya.

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Chii chinonzi Medium?

nzira (eng. nzira - "murevereri", sirogani yekutanga - Usabvunze zvakavanzika zvako. Dzosera; zvakare muchiRungu izwi nzira zvinoreva "yepakati") - mupi weRussia ane hunyanzvi hweInternet anopa masevhisi ekuwana network Yggdrasil pasina muripo.

Ndirini, kupi uye nei Medium yakagadzirwa?

Pakutanga, purojekiti yacho yakaumbwa se Mesh network в Kolomna urban district.

"Medium" yakaumbwa muna Kubvumbi 2019 sechikamu chekugadzirwa kwenzvimbo yakazvimirira yekufambiswa kwemashoko nekupa vashandisi vekupedzisira mukana wekuwana Yggdrasil network zviwanikwa kuburikidza nekushandisa Wi-Fi isina waya yekuparadzira data tekinoroji.

Ndekupi kwandingawane runyoro rwakakwana rwese network point?Unogona kuzviwana mukati repositories paGitHub.

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Chii chinonzi Yggdrasil uye nei Medium ichiishandisa sekutakura kwayo kukuru?

Yggdrasil ndiko kuzvironga Mesh network, iyo inokwanisa kubatanidza ma routers ari maviri ari pamusoro peiyo nzira (pamusoro peInternet) uye zvakananga kune mumwe nemumwe kuburikidza newaya kana isina waya.

Yggdrasil kuenderera mberi kweprojekti CjDNS. Musiyano mukuru pakati peYggdrasil neCjDNS ndiko kushandiswa kweprotocol Stp (inotenderera muti protocol).

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Nekumisikidza, ese marouters pane network anoshandisa end-to-end encryption kuendesa data pakati pevamwe vatori vechikamu.

Sarudzo yeYggdrasil network sechokufambisa chikuru chaive nekuda kwekuda kwekuwedzera kukurumidza kwekubatanidza (kusvika Nyamavhuvhu 2019, Medium yakashandiswa. I2P).

Shanduko kuenda kuYggdrasil yakapawo vatori vechikamu mukana wekutanga kutumira network yeMesh ine Full-Mesh topology. Sangano retiweki rakadaro ndiro rinonyanya kurwisa censorship.

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Debriefing: ndezvipi zvikanganiso zvatakatoita?

"Zvakaitika mwanakomana wekukanganisa kwakaoma." Munguva yekuvandudzwa kweMedium, takakwanisa kugadzirisa matambudziko mazhinji akamuka munzira.

Kukanganisa #1: Public Key Infrastructure

Imwe yematambudziko makuru panguva yekugadzira network yaive mukana wekuita MITM kurwisa. Iyo traffic pakati peiyo opareta router uye mudziyo wemutengi haina kuvharirwa chero nzira, nekuti iyo huru traffic yakadhindwa yakanangana neanoshanda router.

Dambudziko nderekuti chero munhu anogona kunge ari kumashure kweiyo router - uye isu takanga tisingadi kuti "mumwe munhu" akwanise kuteerera kune zvese zvaigamuchirwa nevatengi.

Kukanganisa kwedu kwekutanga kwaive kusuma zvivakwa zvakakosha zveveruzhinji (PKI).

Nekuda kwekushandiswa kwelevel 7 OSI network modhi Isu takabvisa kurwiswa kweMITM-mhando, asi takawana dambudziko idzva - kukosha kwekuisa zvitupa kubva kumidzi certification zviremera. Uye nzvimbo dzezvitupa nderimwe dambudziko risingakoshi. Shoko rakakosha apa nderekuti “vimbo”.

Unofanira kuvimba nomumwe munhu zvakare! Ko kana mvumo yechitupa ikakanganiswa? Sezvatinoudzwa naComrade Murphy, munguva pfupi kana kuti gare gare chiremera chechitupa chinenge chakanganiswa. Uye ichi ndicho chokwadi chinorwadza.

Takafunga kwenguva yakareba nezvekugadzirisa dambudziko iri uye takazopedzisira tafunga kuti hapana chikonzero chekushandisa PKI - yakakwana kushandisa. Yggdrasil native encryption.

Mushure mekugadzirisa kwakakodzera, iyo topology ye "Medium" network yakatora inotevera fomu:

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil

Kukanganisa #2: Centralized DNS

Isu taida domain name system kubva pakutanga, nekuti inorema IPv6 kero kwete chete yaisaratidzika zvakanaka - zvaive zvisingaite kuishandisa muma hyperlink, uye kushomeka kwesemantic chikamu kwaive kukanganisa kukuru.

Isu takagadzira akati wandei midzi DNS maseva akachengeta kopi yerondedzero AAAA zvinyorwa, iri mu repositories paGitHub.

Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil
Nekudaro, dambudziko rekuvimba harisati raenda - mushandisi anogona kutsiva IPv6 kero paDNS server mukubwaira kweziso. Kana iwe uine imwe dexterity, inotoita isingaonekwe kune vamwe.

Sezvo isu tisingashandisi HTTPS uye, kunyanya, tekinoroji HSTS, pakubira kero muDNS, zvaigoneka kuita kurwisa nekubira IPv6 kero yevhavha yekupedzisira pasina matambudziko.

Mhinduro haina kunonoka kuuya: takasarudza kushandisa tekinoroji EmerDNS -DNS yakasarudzika.

Neimwe nzira, EmerDNS yakafanana nefaira faira, uko kune zvinyorwa kune ese anozivikanwa masaiti. Asi kusiyana nevatambi:

  • Mutsara wega wega muEmerDNS unogona kungogadziriswa nemuridzi wayo, uye hapana mumwe
  • Iko kusagoneka kwe "Mwari (super-administrator) kupindira" kunovimbiswa nekubvumirana kwemugodhi.
  • Iri faira rakafanana kune wese munhu, iro rinovimbiswa ne blockchain replication mechanism
  • Injini yekutsvaga nekukurumidza inosanganisirwa nefaira.

Source: "EmerDNS - imwe nzira kune DNSSEC"

Mistake #3: Kuisa pakati zvese

Pakutanga, izwi rekuti "Internet" raingoreva chimwe chinhu kunze zvakabatana network kana network network.

Nekufamba kwenguva, vanhu vakamira kubatanidza iyo Internet nechimwe chinhu chedzidzo uye yakava pfungwa yemazuva ese, sezvo pesvedzero yayo yakapararira zvakanyanya muhupenyu hwevanhuwo zvavo.

Ndiko kuti, pakutanga iyo Internet yakadzorwa. Mazuva ano hazvigone kunzi decentralization, kunyangwe iyo pfungwa yakaramba iripo nanhasi - chete mahombe ekuchinjana traffic anodzorwa nemakambani makuru. Uye makambani makuru, zvakare, anodzorwa nehurumende.

Asi ngatidzokere kudambudziko redu - maitiro ekuenda kucentralization anotarwa nevashandisi vega masevhisi akadai sesocial network, maemail maseva, vatumwa ipapo, zvichingodaro.

"Medium" mune izvi yanga isina kumbosiyana neInternet hombe kusvika zvino - masevhisi mazhinji aive ari pakati uye achidzorwa nevashandisi vega.

Zvino isu tafunga kuseta kosi yekuisa matunhu akazara - kuitira kuti masevhisi akakosha arambe achishanda zvisinei nekuti pane kutadza kuri pakati pe server kana kwete.

Sehurongwa hwekutumira mameseji tinoshandisa Matrix. Sema social network - Mastodon и hubzilla. Zvekutambira vhidhiyo - PeerTube.

Ehe, masevhisi mazhinji achiri pakati uye achiri kudzorwa neanoshanda ega, asi chinhu chikuru ndechekuti kune mafambiro akananga kukuendesa matunhu akazara uye inonzwika nenhengo dzese dzenharaunda.

Yemahara Internet muRussia inotanga newe

Iwe unogona kupa rubatsiro rwese rwunobvira pakugadzwa kweInternet yemahara muRussia nhasi. Isu takanyora runyoro rwakakwana rwekuti ungabatsira sei network:

    Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil   Udza shamwari dzako uye vaunoshanda navo nezve Medium network
    Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil   Share rejisheni kuchinyorwa ichi pasocial network kana yako blog
    Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil   Tora chikamu mukukurukurirana kwehunyanzvi nyaya paMedium network paGitHub
    Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil   Gadzira yako webhusaiti sevhisi online Yggdrasil
    Chii chatinofanira kuvaka Mesh: sei iyo yakatemerwa Internet mupi "Medium" ari kugadzira iyo Internet nyowani yakavakirwa paYggdrasil   Simudza yako access point kuMedium network

Verenga zvakare:

Handina chekuvanza
Zvese zvawaida kuziva nezve yakatemerwa Internet inopa Medium, asi wakatya kubvunza
Darling tiri kuuraya internet

Une mibvunzo? Joinha nhaurirano paTeregiramu: @medium_general.

Chipo chidiki kune avo vanoverenga kusvika kumagumo

Vashandisi vakanyoresa chete ndivo vanogona kutora chikamu muongororo. Nyorera mu, Munogamuchirwa.

Kumwe kuvhota: zvakakosha kuti isu tizive maonero eavo vasina account yakazara paHabré.

68 vashandisi vakavhota. 16 vashandisi vakaramba.

Source: www.habr.com

Voeg