Ichi chidzidzo chinotsanangura kuti kutadza kweimwe yakazvimirira system (AS) kunokanganisa sei kubatana kwepasirese kweimwe dunhu, kunyanya kana zvasvika kune yakakura Internet service provider (ISP) munyika iyoyo. Kubatana kweInternet padanho retiweki kunofambiswa nekudyidzana pakati pekuzvimiririra masisitimu. Sezvo nhamba yedzimwe nzira pakati peASs inowedzera, kukanganisa kushivirira kunomuka uye kugadzikana kweInternet munyika yakapihwa kunowedzera. Nekudaro, mamwe makwara anove akakosha kupfuura mamwe, uye kuve neakawanda dzimwe nzira sezvinobvira ndiyo yekupedzisira nzira yekuve nechokwadi chekuvimbika kwehurongwa (mupfungwa yeAS).
Kubatana kwepasi rose kwechero AS, ingave iri mudiki Internet mupi kana hofori yepasirese ine mamirioni evatengi vesevhisi, zvinoenderana nehuwandu uye kunaka kwenzira dzayo kune vanopa Tier-1. Semutemo, Tier-1 inoreva kambani yepasi rese inopa yepasi rose IP yekufambisa sevhisi uye yekubatanidza kune vamwe Tier-1 vanoshanda. Nekudaro, hapana chinosungirwa mukati meiyo yakapihwa elite kirabhu kuchengetedza kubatana kwakadaro. Musika chete unogona kukurudzira makambani akadaro kuti abatane zvisina magumo, achipa basa remhando yepamusoro. Izvi zvinokurudzira zvakakwana here? Tichapindura mubvunzo uyu pazasi muchikamu pane IPv6 yekubatanidza.
Kana ISP ikarasikirwa kana imwe yayo yeTier-1 yekubatanidza, ingangove isingawanikwe mune dzimwe nzvimbo dzepasi.
Kuyera Kuvimbika kweInternet
Fungidzira kuti AS inosangana nekuderera kwakanyanya kwetiweki. Tiri kutsvaga mhinduro kumubvunzo unotevera: "Ndeipi muzana yeAS mudunhu rino inogona kurasikirwa nekubatana nevashandisi veTier-1, nekudaro kurasikirwa nekuwanikwa kwepasirese"?
Maitiro ekutsvagisaSei uchitevedzera mamiriro ezvinhu akadaro? Kunyatsotaura, apo BGP uye nyika yeinterdomain routing yaive mudanho rekugadzira, vagadziri vakafunga kuti yega yega isiri-yekufambisa AS yaizove nevaviri vanopa vanopa kuti vaone kushivirira kwekukanganisa kana mumwe wavo atadza. Nekudaro, muchokwadi zvinhu zvese zvakasiyana zvachose - inopfuura 45% yeISPs ine imwe chete yekubatanidza kune yekukwira kumusoro. Seti yehukama husina kujairika pakati pevafambi ISPs inowedzera kuderedza kuvimbika kwese. Saka, maISPs ekufambisa ari kudonha here? Mhinduro ndeyokuti hungu, uye zvinoitika kakawanda. Mubvunzo wakakodzera mune iyi nyaya ndewekuti: "Imwe ISP ichasangana riini kuderedzwa?" Kana matambudziko akadaro achiita seakareruka kune mumwe munhu, zvakakodzera kuyeuka mutemo waMurphy: "Zvose zvinogona kuipa, zvichakanganisika."
Kuti titevedzere mamiriro akafanana, isu tinomhanyisa modhi imwechete yegore rechitatu rakateedzana. Mugore rimwe chetero, hatina kungodzokorora kuverenga kwakapfuura - takawedzera zvakanyanya chiyero chetsvagiridzo yedu. Matanho anotevera akateverwa kuongorora kuvimbika kweAS:
- Kune yega yega AS munyika, tinowana nzira dzese dzeTier-1 vashandisi vachishandisa AS hukama modhi, iyo inoshanda sepakati peiyo Qrator.Radar chigadzirwa;
- Tichishandisa IPIP geodatabase, takaronga kero yega yega yeIP yega yega AS kuenda kunyika yayo inoenderana;
- Kune imwe neimwe AS, takaverenga mugove wenzvimbo yayo yekero inoenderana nenzvimbo yakasarudzwa. Izvi zvakabatsira kusefa mamiriro ezvinhu apo ISP inogona kuvapo pane imwe nzvimbo yekuchinjana mune imwe nyika, asi isina huvepo munharaunda yacho yose. Muenzaniso wemuenzanisiro ndeweHong Kong, uko mazana enhengo dzeAsia hukuru hweinternet HKIX exchange traffic ine zero kuvapo muchikamu cheinternet cheHong Kong;
- Tawana mhinduro dzakajeka dzeAS mudunhu, tinoongorora kukanganisa kwekutadza kweiyo AS pane mamwe maAS uye nyika dzavari;
- Pakupedzisira, kune imwe neimwe nyika, takawana iyo chaiyo AS iyo yakabata chikamu chikuru chemamwe maAS munzvimbo iyoyo. Ma ASs ekunze haatariswe.
IPv4 kuvimbika
Pazasi iwe unogona kuona nyika dzepamusoro dze20 maererano nekuvimbika maererano nekutadza kushivirira muchiitiko chekutadza kumwe kweAS. Mukuita, izvi zvinoreva kuti nyika ine hutano hwakanaka hweInternet, uye chikamu chinoratidza chikamu cheASs chinorasikirwa nekubatana kwepasirese kana iyo yakakura AS ikakundikana.
Kurumidza chokwadi:
- USA yakadonhedza zvinzvimbo gumi neimwe kubva pachinhanho chechinomwe kuenda pachinzvimbo chegumi nesere;
- Bangladesh yakasiya 20 yepamusoro;
- Ukraine yakasimuka 8 nzvimbo kusvika 4th nzvimbo;
- Austria yakabuda mu20 yepamusoro;
- Nyika mbiri dzinodzokera kumusoro makumi maviri: Italy neLuxembourg mushure mekubuda muna 20 uye 2017 zvichiteerana.
Mafambiro anonakidza anoitika mukusimudzira masanjiro gore rega rega. Gore rapfuura takanyora kuti kuita kwese kwenyika makumi maviri epamusoro kwanga kusati kwanyanya kushanduka kubva muna 20. Zvakakosha kucherechedza kuti gore negore tinoona maitiro akanaka epasi rose kune kuvimbika kwakavandudzwa uye kuwanikwa kwese. Kuenzanisira pfungwa iyi, tinofananidza kuchinja kweavhareji uye kwepakati mukati memakore mana mune yakazara IPv2017 kuenderera rating munyika dzese 4.
Huwandu hwenyika dzakakwanisa kudzikisira kutsamira paAS imwe kusvika pasi pegumi muzana (chiratidzo chekusimba zvakanyanya) hwawedzera ne10 kana zvichienzaniswa negore rapfuura, kusvika pazvikamu makumi matatu neshanu enyika kubva munaGunyana 5.
Saka, semaitiro akanyanya kukosha akaonekwa panguva yedu yekudzidza, tinoona kuwedzera kukuru kwekusimba kwemanetiweki pasi rese, muIPv4 neIPv6.
IPv6 kusimba
Isu tanga tichidzokorora kwemakore akati kuti fungidziro isiriyo yekuti IPv6 inoshanda zvakafanana neIPv4 idambudziko rakakosha muhurongwa hweIPv6 nekuita.
Gore rakapera takanyora nezvehondo dzekutarisa dzichiramba kwete muIPv6 chete, asiwo muIPv4, apo Cogent neHurricane Electric hazvitauri kune mumwe nemumwe. Gore rino takashamisika kuona kuti vamwe vaviri vevakwikwidzi vegore rapfuura, Deutsche Telekom neVerizon US, vakabudirira kumisa IPv6 peering muna Chivabvu 2019. Iwe haufanirwe kuwana chero kutaurwa nezvayo, asi iyi inhanho hombe - maviri makuru eTier-1 vanopa vakamira kurwa uye vakapedzisira vagadzira peer-to-peer yekubatanidza vachishandisa protocol iyo isu tese tinoda kwakawanda budiriro.
Kuve nechokwadi chekubatana kwakazara uye kuvimbika kwakanyanya, nzira dzeTier-1 vanoshanda dzinofanirwa kunge dziripo nguva dzese. Isu takaverengawo huwandu hwemaAS munyika ine chikamu chekubatana chete muIPv6 nekuda kwehondo dzekuonana. Heino mibairo:
Kwapera gore, IPv4 inoramba yakavimbika zvakanyanya kupfuura IPv6. Avhareji yekuvimbika uye kugadzikana kweIPv4 muna 2019 i62,924%, uye 54,53% yeIPv6. IPv6 ichine chikamu chepamusoro chenyika dzisina kuwanikwa pasi rose-kureva kuti, chikamu chepamusoro chekubatana.
Tichienzaniswa negore rapfuura, takaona kuvandudzwa kukuru munyika nhatu huru, kunyanya muchikamu chekubatana. Gore rapfuura, Venezuela yaive ne33%, China 65% uye UAE 25%. Nepo Venezuela neChina dzakavandudza zvakanyanya kubatana kwavo, kugadzirisa matambudziko akakura emataneti akabatana zvishoma, iyo UAE yakasiiwa isina simba rakanaka munzvimbo iyi.
Broadband kuwana uye PTR zvinyorwa
Tichidzokorora mubvunzo watanga tichizvibvunza kubva gore rapfuura: "Ichokwadi here kuti mupi anotungamira munyika anogara achikanganisa kuvimbika kwedunhu kupfuura munhu wese kana chero?", Takagadzira imwe metric yekuwedzera kudzidza. Zvichida inonyanya kukosha (nenheyo yevatengi) mupi weInternet munzvimbo yakapihwa haizove iyo inozvimiririra sisitimu inova yakakosha mukupa kubatana kwepasirese.
Gore rapfuura, takaona kuti chiratidzo chechokwadi chekukosha kwemupi chinogona kubva pakuongorora marekodhi ePTR. Iwo anowanzo shandiswa kudzosera kumashure DNS lookups: uchishandisa IP kero, yakabatana zita rekutambira kana zita rezita rinogona kuzivikanwa.
Izvi zvinoreva kuti PTR inogona kugonesa kuyerwa kwemidziyo chaiyo munzvimbo yekero yemunhu. Sezvo isu tatoziva maASes makuru kune imwe neimwe nyika pasirese, tinogona kuverenga zvinyorwa zvePTR mumambure evapeki ava, tichiona mugove wavo pakati pezvinyorwa zvese zvePTR mudunhu. Zvakakodzera kuita disclaimer ipapo ipapo: isu takaverenga PTR marekodhi CHETE uye hatina kuverenga reshiyo yemakero eIP pasina PTR marekodhi kune IP kero ane PTR marekodhi.
Saka, mune zvinotevera tiri kutaura chete nezve IP kero ine PTR marekodhi aripo. Haisi mutemo wakajairika kuvagadzira, ndosaka vamwe vanopa vachisanganisira PTR uye vamwe vasingadaro.
Takaratidza kuti mangani emakero aya eIP ane marekodhi akatsanangurwa ePTR aizobviswa pachiitiko chekudimburwa kubva/pamwechete neiyo huru (nePTR) inozvimiririra system munyika yakataurwa. Huwandu hunoratidza huwandu hweese IP kero nePTR rutsigiro mudunhu.
Ngatienzanisai makumi maviri anonyanya kuvimbika nyika kubva ku20 IPv4 mazinga ane PTR chinzvimbo:
Zviripachena, iyo nzira inofunga PTR marekodhi inopa mhedzisiro dzakasiyana. Muzviitiko zvakawanda, kwete chete iyo yepakati AS munharaunda inoshanduka, asi kusagadzikana kwezana yezvakati AS yakasiyana zvachose. Munzvimbo dzose dzakavimbika, kubva pakuona kuwanikwa kwepasi rose, nhamba ye IP kero ine PTR tsigiro iyo ichabviswa nekuda kwekudonha kweAS inokwira makumi enguva.
Izvi zvinogona kureva kuti iyo inotungamira yenyika ISP inogara iri yevashandisi vekupedzisira. Nekudaro, isu tinofanirwa kufunga kuti chikamu ichi chinomiririra chikamu chemushandisi weISP uye mutengi anozogurwa (muchiitiko chekuti kuchinjika kune mumwe mupi wekupa hazvigoneke) kana watadza. Kubva pamaonero aya, nyika hadzisisiri kuita sedzakavimbika sezvadzinotarisa kubva pakuona kwekufamba. Isu tinosiira muverengi izvo zvinogoneka mhedziso kubva pakuenzanisa iyo yepamusoro makumi maviri IPv20 nePTR chiyero kukosha.
Tsanangudzo yekuchinja munyika imwe neimwe
Semazuva ese muchikamu chino, tinotanga neyakanyanya kukosha AS174 yekupinda - Cogent. Gore rapfuura takatsanangura maitiro ayo muEurope, uko AS174 inoonekwa seyakakosha kune 5 yenyika makumi maviri epamusoro muIPv20 Resilience Index. Gore rino Cogent inoramba iripo mumakumi maviri epamusoro kuvimbika, zvisinei, paine shanduko - kunyanya muBelgium neSpain iyo AS4 yakatsiviwa seyakanyanya kunetsa AS. Muna 20, kuBelgium yakava AS174 - Telenet, uye yeSpain - AS2019 - Vodafone.
Zvino, ngatitarisei zvakanyanya nyika mbiri dzine nhoroondo yakanaka yekusimba zvibodzwa dzakaita shanduko yakakosha mugore rapfuura: Ukraine neUnited States of America.
Chekutanga, Ukraine yakavandudza zvakanyanya chinzvimbo chayo muIPv4 chinzvimbo. Kuti uwane rumwe ruzivo, takatendeukira kuna Max Tulyev, nhengo yebhodhi yeUkraine Internet Association, kuti anzwe nezve zvakaitika munyika yake mumwedzi gumi nemiviri yapfuura:
"Shanduko yakakosha yatinoona muUkraine kudonha kwemitengo yekufambisa data. Izvi zvinobvumira makambani eInternet ane pundutso akawanda kuti awane akawanda ekumusoro ekubatanidza kunze kwemiganhu yedu. Hurricane Electric inonyanya kushanda mumusika, ichipa "international transit" pasina chibvumirano chakananga nokuti havabvisi prefixes kubva mukutsinhanisa - vanongozivisa koni yevatengi paIXPs yemo.
Iyo huru AS yeUkraine yachinja kubva kuAS1299 Telia kuenda kuAS3255 UARNET. Mr. Tulyev akatsanangura kuti, kuva aichimbova dzidzo network, UARNET zvino yava inoshingaira transit network, kunyanya Western Ukraine.
Zvino ngatifambei kune chimwe chikamu chePasi - kuU.SA.
Mubvunzo wedu mukuru wakareruka - ndedzipi ruzivo rwekudonha kwegumi nerimwe mukusimba kweUS?
Muna 2018, US yakatora nzvimbo yechinomwe ne7% yenyika inogona kurasikirwa nekuwanikwa kwepasirese kana AS4,04 ikatadza. Chirevo chedu che209 chinopa nzwisiso yezvaichinja muUnited States gore rapfuura:
“Asi nhau huru ndeyezvakaitika kuUnited States. Kwemakore maviri akatevedzana - 2016 na2017 - takaona Cogent's AS174 semutambo-kuchinja mumusika uyu. Izvozvi hazvisisiri izvo-muna 2018, AS 209 CenturyLink yakatsiva iyo, ichitumira United States kumusoro nzvimbo nhatu kuNhamba 7 muIPv4 rankings."
Mhedzisiro ya2019 inoratidza kuti United States iri pachinzvimbo chegumi nesere uye chibodzwa chekusimba ichidzika kusvika pa18% - shanduko inodarika 6,83%, iyo inowanzokwana kudonha kubva pamakumi maviri epamusoro muIPv2,5 resilience rankings.
Takasvika kuna Hurricane Electric muvambi Mike Leber nezvekutaura kwake pamamiriro ezvinhu:
“Iyi ishanduko yechisikigo sezvo Internet yepasi rose iri kuramba ichikura. Iyo IT zvivakwa munyika yese iri kukura uye nekuvandudza kutsigira hupfumi hweruzivo huri kuramba huchichinja uye kubuda. Kugadzirwa kunovandudza ruzivo rwevatengi uye mari. Local IT zvivakwa zvinovandudza budiriro. Aya ndiwo macro-techno-economic forces. "
Zvinogara zvichinakidza kuongorora zviri kuitika muupfumi hwenyika hukuru, kunyanya kana tichiona kuderera kwakadai kwechiyero chekuvimbika. Sechiyeuchidzo, gore rapfuura takaona kutsiva kweCogent's AS174 neCenturyLink's AS209 muUnited States. Gore rino, CenturyLink yakarasa chinzvimbo chayo seyakakosha nyika AS kune imwe yakamira system, Level3356's AS3. Izvi hazvishamise sezvo makambani maviri aya akanyatso kumiririra sangano rimwe kubva pakatorwa masimba muna 2017. Kubva zvino zvichienda mberi, CenturyLink yekubatanidza inoenderana zvachose neLevel3 yekubatanidza. Zvinogona kugumiswa kuti kudzikira kwese kwekuvimbika kwakabatana nechiitiko chakaitika paLevel3/CenturyLink network pakupera kwa2018, apo mana asina kuzivikanwa network mapaketi akakanganisa Internet kwemaawa akati wandei munzvimbo huru yeUnited States. . Chiitiko ichi chakanyatso kanganisa kugona kweCenturyLink/Level4 kupa mafambiro kune vatambi vakuru venyika, vamwe vacho vanogona kunge vakachinjira kune vamwe vanopa zvekufambisa kana kungosiyanisa kubatanidza kwavo kumusoro nezasi. Nekudaro, kunyangwe zvese zviri pamusoro, Level3 inoramba iri iyo yakakosha yekubatanidza mupi weUS, kuvharika kwayo kunogona kukonzera kushaikwa kwekuwanikwa kwepasirese kweinoda kusvika 3% yemasisitimu akazvimirira emuno anovimba nekufambisa uku.
Italy yakadzokera pamusoro pemakumi maviri munzvimbo yechigumi nenomwe ine yakafanana AS20 Fastweb, ingangove mhedzisiro yekuvandudzwa kwakakosha mumhando uye kuwanda kwenzira kune uyu mupi. Mushure mezvose, pamwe chete naye muna 17, Italy yakadonha kusvika panzvimbo yechi12874, ichisiya yepamusoro makumi maviri.
Muna 2019, Singapore, iyo yakapinda epamusoro makumi maviri chete gore rapfuura asi yakasvetuka yakananga kunzvimbo yechishanu, yakagamuchira zvakare yakakosha ASN. Gore rakapera takaedza kutsanangura shanduko mumatunhu eSoutheast Asia. Gore rino, iyo yakaoma AS yeSingapore yachinja kubva gore rapfuura AS20 SingNet kuenda kuAS5 Starnet. Nekuchinja uku, dunhu rakarasikirwa nechinzvimbo chimwe chete, richiwira panzvimbo yechitanhatu munzvimbo ye3758.
China yakaita kusvetuka kunoshamisa kubva pachinzvimbo chechi113 muna 2018 kuenda pachinhanho chemakumi manomwe nesere muna 78, paine shanduko inosvika 2019% musimba reIPv5 zvinoenderana nemaitiro edu. MuIPv4, kubatana kweChina kwakadzikira kubva pa6% gore rapfuura kusvika kungopfuura 65,93% gore rino. Iyo yekutanga ASN muIPv20 yakashanduka kubva kuAS6 China Mobile muna 9808 kuenda kuAS2018 muna 4134. MuIPv2019, AS4, iyo iri pasi peChina Telecom, yave yakakosha kwemakore akawanda.
MuIPv6, panguva imwecheteyo, chikamu cheChinese cheInternet chakadonha nenzvimbo makumi maviri muchikamu chekusimudzira che20 - kubva pa2019% gore rapfuura kusvika 10% muna 23,5.
Pamwe, zvese izvi zvinoratidza chinhu chimwe chete chakareruka - China Telecom iri kushingaira kuvandudza zvivakwa zvayo, ichisara iyo huru yekutaurirana network yeChina neInternet yekunze.
Nekukura kwenjodzi dzecybersecurity uye, kutaura zvazviri, kutenderera kwenhau dzekurwiswa kweInternet zvivakwa, yave nguva yekuti hurumende dzese, makambani akazvimirira uye eruzhinji, asi kupfuura zvese, vashandisiwo zvavo vanyatso ongorora zvinzvimbo zvavo. Njodzi dzine chekuita nekubatana kwedunhu dzinofanirwa kuongororwa nekuchenjera uye nekutendeseka, kuongorora mazinga echokwadi ekuvimbika. Kunyangwe hunhu hwakaderera muhutete chiyero chinogona kukonzera matambudziko ekuwanikwa kwechiitiko chekurwiswa kukuru kune hombe, nyika yese mupi webasa rakakosha, inodaro DNS. Usakanganwa zvakare kuti nyika yekunze ichabviswa kubva kumasevhisi uye data iri mukati medunhu kana paine kurasikirwa kwakakwana kwekubatana.
Tsvagiridzo yedu inoratidza zvakajeka kuti inokwikwidza ISP uye misika yevatakuri inozopedzisira yave kugadzikana uye kugadzikana kune njodzi mukati uye kunyangwe kupfuura dunhu rakapihwa. Pasina musika wemakwikwi, kutadza kweimwe AS kunogona uye kuchaguma nekurasikirwa kwetiweki yekubatanidza kune chikamu chakakosha chevashandisi munyika kana nzvimbo yakafara.
Source: www.habr.com