ProHoster > Blog > internet nhau > Iyo OpenBSD purojekiti yakaunza yekutanga inotakurika kuburitswa kwerpki-mutengi

Iyo OpenBSD purojekiti yakaunza yekutanga inotakurika kuburitswa kwerpki-mutengi

OpenBSD Vagadziri yakabudiswa kekutanga kuburitswa pachena kwepasuru inotakurika rpki-client nekuita kweRPKI michina (Resource
Public Key Infrastructure) yeRP (Mapato Anoenderana), inoshandiswa kupa mvumo kunobva BGP zviziviso. RPKI inokubvumira kuti uone kana chiziviso cheBGP chinobva kumuridzi wetiweki kana kuti kwete, iyo, uchishandisa ruzhinji kiyi yezvivakwa zveanozvimiririra masisitimu uye IP kero, ketani yekuvimba inovakwa, iyo inovakwa kubva kuIANA kuenda kune registrars (RIRs). ), vanopa (LIRs) uye vashandisi vekupedzisira emakero. Iyo kodhi inoburitswa pasi peiyo BSD rezinesi.

Purogiramu rpki-client inoita kuti zvikwanise kutumira chikumbiro kuRPKI repository uye kugadzira chinhu cheVRP (Validated ROA Payload) chinosimbisa nzira sosi (ROA, Route Origin Authorization) mufomati yekuronga mapaketi. OpenBGPD ΠΈ SHIRI, pamwe chete ne CSV kana JSON mafomati ekushandisa mune mamwe mastacks enzira. Kuti uwane iyo repository, shandisa utility openrsync, iyo inotora zvitupa zvese zveX.509, zviratidzi, uye maCRL. Zvadaro
rpki-mutengi anotarisa chitupa chega chega chakabatana neROA, kuvaka nekuona cheni yese yekuvimba, ukuwo uchiongorora maCRL ekubvisiswa zvitupa.

Source: opennet.ru