Inotakurika kuburitswa kweOpenBGPD 8.0

Kuburitswa kweiyo inotakurika vhezheni yeOpenBGPD 8.0 routing package, yakagadziridzwa nevagadziri veOpenBSD chirongwa uye yakagadziridzwa kuti ishandiswe muFreeBSD neLinux (alpine, Debian, Fedora, RHEL/CentOS, Ubuntu rutsigiro rwakaziviswa). Zvikamu zvekodhi kubva kuOpenNTPD, OpenSSH, uye LibreSSL mapurojekiti akashandiswa kuve nechokwadi chekutakurika. Iyo purojekiti inotsigira mazhinji eiyo BGP 4 kutsanangurwa uye inoenderana nezvinodiwa zveRFC8212, asi haiedzi kugamuchira hukuru uye inonyanya kupa rutsigiro rwezvinonyanya kukumbirwa uye zvakajairika mabasa.

Kuvandudzwa kweOpenBGPD kunotsigirwa neRegistrar Internet registrar RIPE NCC, iyo inofarira kuunza kushanda kweOpenBGPD kuti ikwane kushandiswa pamasevha ekufambisa munzvimbo dzeinter-operator traffic exchange point (IXP) uye mukugadzira imwe nzira yakazara kune BIRD package (dzimwe nzira dzakavhurika nekushandiswa kweiyo BGP protocol zvinosanganisira GoBRB, Bioroot protocol, ERRouting, FGBRouting uye ERRouting).

Iyo purojekiti inotarisa pakuvimbisa huwandu hwepamusoro hwekuchengetedza uye kuvimbika. Nekudzivirira, kutarisisa kwakasimba kwekurongeka kwese paramita, nzira dzekutarisa kutevedza nemiganhu yebuffer, kupatsanurwa kweropafadzo uye kudziviswa kwekuwana kufona system kunoshandiswa. Pakati pezvakanakira, pane zvakare iri nyore syntax yekumisikidza tsananguro yemutauro, kuita kwepamusoro uye kugona ndangariro (semuenzaniso, OpenBGPD inogona kushanda nematafura enzira anosanganisira mazana ezviuru zvezvinyorwa).

Shanduko mukuburitswa kweOpenBGPD 8.0 dzinosanganisira:

  • Yakawedzera rutsigiro rwekutanga rweFlowspec (RFC5575). Mune chimiro chayo chazvino, chete kuzivisa flowspec mitemo inotsigirwa.
  • Iyo command parser mubgpctl utility yakakwidziridzwa kuti ibate flowspec-chaiyo mirairo uye inovaka se "bgpctl show rib 192.0.2.0/24 zvakadzama".
  • Semaphore yakawedzerwa kuchengetedza kuburitswa muRDE (Route Decision Injini) yeRTR (RPKI kuenda kuRouter) data yechikamu.
  • Yakagadzirisa tsikidzi yakakonzerwa nekuonekwa kwechinhu chitsva cheASPA muRPKI (Resource Public Key Infrastructure).

Source: opennet.ru

Voeg