Mashruucii OpenBSD waxa uu soo bandhigay siidaynta la qaadi karo ee u horaysay ee macmiilka rpki

Horumarinta BSD la daabacay siidaynta ugu horeysa ee dadwaynaha ee daabacaadda la qaadi karo ee xirmada rpki-macmiil iyadoo la adeegsanayo habka RPKI (Resource
Kaabayaasha Furaha Dadweynaha) ee RP (Xisbiyada La Xiriira), loo isticmaalo in lagu oggolaado isha ogeysiisyada BGP. RPKI Waxay kuu ogolaaneysaa inaad go'aamiso in ogeysiiska BGP uu ka yimid milkiilaha shabakadda iyo in kale, taas oo, iyada oo la adeegsanayo kaabayaasha muhiimka ah ee dadweynaha ee nidaamyada madaxbannaan iyo cinwaannada IP, silsilad kalsooni ayaa la dhisay, taas oo laga dhisay IANA ilaa diiwaan-bixiyeyaasha gobolka (RIRs). ), bixiyeyaasha (LIRs) iyo isticmaalayaasha dhamaadka ciwaannada. Koodhka waxa lagu daabacay shatiga BSD.

Barnaamijka rpki-macmiil waxay suurtogal ka dhigaysaa in codsi loo diro kaydka RPKI oo ay dhaliso shay VRP (la xaqiijiyay ROA Payload) oo xaqiijinaya isha marinka FuranBGPD и BIRD, iyo sidoo kale qaabka CSV ama JSON si loogu isticmaalo xirmooyinka kale ee dariiqa. Si aad u gasho kaydka, isticmaal utility openrsync, kaas oo soo celiya dhammaan X.509 shahaadooyinka, caddaymaha, iyo CRLs. Markaa
rpki-macmiil ayaa hubinaya shahaado kasta oo la xidhiidha ROA, dhisidda iyo xaqiijinta dhammaan silsiladda kalsoonida, iyadoo isla mar ahaantaana la qiimaynayo CRL-yada suurtogalka ah in lagala noqdo shahaado.

Source: opennet.ru