{"id":37685,"date":"2019-10-31T22:19:05","date_gmt":"2019-10-31T19:19:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil\/"},"modified":"2019-10-31T22:19:05","modified_gmt":"2019-10-31T19:19:05","slug":"chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil","title":{"rendered":"\u00c7far\u00eb na kushton nd\u00ebrtimi i Mesh-it: si ofruesi i internetit t\u00eb decentralizuar \u00abMedium\u00bb po krijon nj\u00eb Internet t\u00eb ri mbi baz\u00ebn e Yggdrasil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje!<\/p>\n

Sigurisht q\u00eb nuk do t\u00eb jet\u00eb ndonj\u00eb lajm i madh p\u00ebr ju se \u00abRuneti Suveren\u00bb<\/a><\/noindex> \u00ebsht\u00eb af\u00ebr \u2014 ligji hyn n\u00eb fuqi m\u00eb 1 n\u00ebntor<\/b> t\u00eb k\u00ebtij viti.<\/p>\n

Fatkeq\u00ebsisht, si do t\u00eb funksionoj\u00eb (dhe n\u00ebse do t\u00eb funksionoj\u00eb?) nuk \u00ebsht\u00eb shum\u00eb e qart\u00eb: nuk ka ende instrukcione t\u00eb sakta p\u00ebr operator\u00ebt e komunikimit n\u00eb dispozicion publik. Gjithashtu, nuk ka metoda, nd\u00ebshkime, plane, shp\u00ebrndarje detyrash dhe p\u00ebrgjegj\u00ebsish \u2014 ka vet\u00ebm nj\u00eb deklerat\u00eb.<\/p>\n

Nj\u00eb situat\u00eb e ngjashme u v\u00ebrejt edhe n\u00eb lidhje me realizimin e planeve t\u00eb 'ligjit t\u00eb Yarovaya' \u2014 pajisjet p\u00ebr ligjin nuk u zhvilluan n\u00eb koh\u00eb dhe operator\u00ebt kryesor\u00eb t\u00eb komunikimit t\u00eb vendit u detyruan t\u00eb kontaktojn\u00eb disa her\u00eb prodhuesit potencial t\u00eb pajisjeve speciale me pyetje p\u00ebrkat\u00ebse. Megjithat\u00eb, as ata nuk mor\u00ebn p\u00ebrgjigje as p\u00ebr informacionin mbi pajisjet, as p\u00ebr mostra t\u00eb tyre.<\/p>\n

Por m\u00eb e r\u00ebnd\u00ebsishmja \u2014 nuk \u00ebsht\u00eb se sa shpejt do t\u00eb hyj\u00eb n\u00eb fuqi ligji dhe \u00e7far\u00eb ndryshimesh na presin. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se fal\u00eb hyrjes s\u00eb k\u00ebtij ligji, komuniteti i entuziast\u00ebve nisi shp\u00ebrndarjen e nj\u00eb mjedisi t\u00eb pavarur t\u00eb telekomunikacionit n\u00eb vendin ton\u00eb.<\/p>\n

Sot do t'ju tregoj p\u00ebr at\u00eb q\u00eb ne kemi arritur t\u00eb b\u00ebjm\u00eb, \u00e7far\u00eb planifikojm\u00eb t\u00eb b\u00ebjm\u00eb n\u00eb t\u00eb ardhmen e af\u00ebrt dhe me cilat v\u00ebshtir\u00ebsi dhe probleme na \u00ebsht\u00eb dashur t\u00eb p\u00ebrballemi n\u00eb rrug\u00ebn e zhvillimit t\u00eb projektit.<\/p>\n

\"\u00c7far\u00eb
\n<\/a><\/noindex><\/p>\n

P\u00ebr \u00e7far\u00eb ligji \u00ebsht\u00eb?<\/h2>\n

\nPara se t\u00eb filloj me pjes\u00ebn teknike t\u00eb projektit ton\u00eb, duhet t\u00eb sqaroj se \u00e7far\u00eb p\u00ebrfaq\u00ebson ligji 'P\u00ebr Runetin Suveren'.<\/p>\n

N\u00eb p\u00ebrmbledhje: autoritetet duan t\u00eb 'sigurojn\u00eb' segmentin rus t\u00eb Internetit n\u00eb rast se armiqt\u00eb tan\u00eb hipotetik\u00eb duan ta \u00e7aktivizojn\u00eb. Por 'me q\u00ebllime t\u00eb mira asfaltohet rruga p\u00ebr n\u00eb ferr' \u2014 nuk \u00ebsht\u00eb fare e qart\u00eb se nga k\u00eb duan t\u00eb na mbrojn\u00eb dhe si 'armiqt' n\u00eb t\u00eb v\u00ebrtet\u00eb mund t\u00eb d\u00ebmtojn\u00eb funksionimin e segmentit rus t\u00eb Internetit.<\/p>\n

P\u00ebr realizimin e k\u00ebtij skenari, t\u00eb gjitha vendet e bot\u00ebs duhet t\u00eb bashkohen p\u00ebr t\u00eb prishur t\u00eb gjitha kabllot nd\u00ebrkufitare, t\u00eb rr\u00ebzojn\u00eb satelit\u00ebt tan\u00eb vendas dhe t\u00eb krijojn\u00eb interferenca radio permanente.<\/p>\n

Nuk d\u00ebgjohet shum\u00eb e besueshme.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb \u00abMedium\u00bb?<\/h2>\n

\nMedium<\/b> (angl. Medium<\/i> \u2014 \"nd\u00ebrmjet\u00ebs\", slogani origjinal \u2014 Don’t ask for your privacy. Take it back<\/i>; gjithashtu n\u00eb anglisht fjala medium<\/i> do t\u00eb thot\u00eb \"nd\u00ebrmjet\u00ebs\") \u2014 ofruesi i decentralizuar i internetit n\u00eb Rusi, i cili ofron sh\u00ebrbime aksesit n\u00eb rrjet Yggdrasil<\/a><\/noindex> n\u00eb m\u00ebnyr\u00eb falas.<\/p>\n

Kur, ku dhe p\u00ebrse u krijua \"Medium\"?<\/h2>\n

\nFillimisht projekti u mendua si rrjet Mesh<\/a><\/noindex> n\u00eb n\u00eb qarkun qytetar Kolomensky<\/a><\/noindex>.<\/p>\n

\"Medium\" u themelua n\u00eb prill 2019 n\u00eb kuad\u00ebr t\u00eb krijimit t\u00eb nj\u00eb ambienti telekomunikativ t\u00eb pavarur p\u00ebrmes ofrimit t\u00eb aksesit p\u00ebr p\u00ebrdoruesit e fundit n\u00eb burimet e rrjetit Yggdrasil p\u00ebrmes p\u00ebrdorimit t\u00eb teknologjis\u00eb s\u00eb transmetimit pa tela Wi-Fi.<\/p>\n

Ku mund t\u00eb gjej nj\u00eb p\u00ebrmbledhje t\u00eb plot\u00eb t\u00eb t\u00eb gjitha pikave t\u00eb rrjetit?<\/b>Ju mund ta gjeni at\u00eb n\u00eb repo n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \"Medium\" e p\u00ebrdor at\u00eb si transportin kryesor?<\/h2>\n

\nYggdrasil<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb rrjet q\u00eb organizohet vet\u00eb, rrjet Mesh<\/a><\/noindex>, i cili ka mund\u00ebsin\u00eb e lidhjes s\u00eb routerave si n\u00eb modalitetin overlay (p\u00ebrmbi rrjetin e Internetit), ashtu edhe direkt me nj\u00ebri-tjetrin p\u00ebrmes lidhjeve me kabllo ose pa kabllo.<\/p>\n

Yggdrasil \u00ebsht\u00eb vazhdim\u00ebsi e projektit CjDNS<\/a><\/noindex>. Dallimi kryesor midis Yggdrasil dhe CjDNS \u00ebsht\u00eb p\u00ebrdorimi i protokollit STP<\/a><\/noindex> (protokolli i pem\u00ebs s\u00eb shtrir\u00eb).<\/p>\n

\"\u00c7far\u00eb
\n
\nSi parazgjedhje, t\u00eb gjith\u00eb routerat e rrjetit p\u00ebrdorin kriptimin end-to-end<\/a><\/noindex> p\u00ebr transferimin e t\u00eb dh\u00ebnave midis pjes\u00ebmarr\u00ebsve t\u00eb tjer\u00eb.<\/p>\n

Zgjedhja e rrjetit Yggdrasil si transportin kryesor u b\u00eb p\u00ebr shkak t\u00eb nevoj\u00ebs p\u00ebr t\u00eb rritur shpejt\u00ebsin\u00eb e lidhjes (deri n\u00eb gusht 2019 \"Medium\" p\u00ebrdorte I2P<\/a><\/noindex>).<\/p>\n

Kalimi n\u00eb Yggdrasil gjithashtu u dha pjes\u00ebmarr\u00ebsve t\u00eb projektit mund\u00ebsin\u00eb p\u00ebr t\u00eb nisur shp\u00ebrndarjen e nj\u00eb rrjeti Mesh me topologjin\u00eb Full-Mesh. Kjo organizim i rrjetit \u00ebsht\u00eb antidoti m\u00eb efektiv kund\u00ebr censur\u00ebs.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

Rishikimi i gabimeve: mbi cilat pengesa kemi hasur deri tani<\/h2>\n

\n'Eksperienca \u00ebsht\u00eb djali i gabimeve t\u00eb v\u00ebshtira'. Gjat\u00eb zhvillimit t\u00eb 'Medium', ne kemi arritur t\u00eb zgjidhim shum\u00eb probleme q\u00eb jan\u00eb shfaqur n\u00eb rrug\u00ebn ton\u00eb.<\/p>\n

Gabimi \u21161: infrastruktura e \u00e7el\u00ebsave t\u00eb hapur<\/h3>\n

\nNj\u00eb nga problemet kryesore gjat\u00eb projektimit t\u00eb rrjetit ishte mund\u00ebsia e kryerjes sulm MITM<\/a><\/noindex>. Trafiku midis routerit t\u00eb operatorit dhe pajisjes s\u00eb klientit nuk ishte asnj\u00ebher\u00eb i enkriptuar, sepse dekodimi i trafikut kryesor b\u00ebhej drejtp\u00ebrdrejt n\u00eb routerin e operatorit.<\/p>\n

Problemi ishte se prapa routerit mund t\u00eb ishte kushdo \u2014 dhe ne nuk do t\u00eb donim q\u00eb ky 'dikush' t\u00eb mund t\u00eb d\u00ebgjonte gjith\u00e7ka q\u00eb merrnin klient\u00ebt.<\/p>\n

Gabimi yn\u00eb i par\u00eb ishte q\u00eb v\u00ebm\u00eb n\u00eb funksion infrastrukturat e \u00e7el\u00ebsave t\u00eb hapur<\/a><\/noindex> (PKI).<\/p>\n

Fal\u00eb p\u00ebrdorimit t\u00eb nivelit 7 t\u00eb modelit OSI <\/a><\/noindex> ne p\u00ebrfunduam nga sulmet e tipit MITM, por fituam nj\u00eb problem t\u00eb ri \u2014 nevoj\u00ebn p\u00ebr t\u00eb instaluar certifikatat e qendrave t\u00eb akreditimit. Dhe qendrat e akreditimit \u2014 kjo \u00ebsht\u00eb nj\u00eb tjet\u00ebr problem i panevojsh\u00ebm. Fjala ky\u00e7e k\u00ebtu \u00ebsht\u00eb 'besimi'.<\/p>\n

P\u00ebrs\u00ebri duhet t\u00eb besosh dik\u00eb! Po sikur qendra e akreditimit t\u00eb jet\u00eb e kompromituar? Si\u00e7 na tregon shoku Murphy \u2014 her\u00ebt a von\u00eb, nj\u00eb qend\u00ebr akreditimi do t\u00eb komprometohet me t\u00eb v\u00ebrtet\u00eb. Dhe kjo \u00ebsht\u00eb e v\u00ebrteta e hidhur.<\/p>\n

Ne menduam gjat\u00eb p\u00ebr zgjidhjen e k\u00ebtij problemi dhe n\u00eb fund arrit\u00ebm n\u00eb p\u00ebrfundimin se nevoja p\u00ebr p\u00ebrdorimin e PKI-s\u00eb nuk ekziston \u2014 mjafton t\u00eb p\u00ebrdorim enkriptimin natyror t\u00eb Yggdrasil<\/a><\/noindex>.<\/p>\n

Pas b\u00ebri ndryshimet p\u00ebrkat\u00ebse, topologjia e rrjetit 'Medium' mori form\u00ebn e m\u00ebposhtme:<\/p>\n

\"\u00c7far\u00eb<\/p>\n

Gabimi \u21162: DNS i centralizuar<\/h3>\n

\nSistemi i emrave t\u00eb domainit na ishte i nevojsh\u00ebm q\u00eb n\u00eb fillim, sepse adresat e pajisjeve IPv6 ishin jo vet\u00ebm t\u00eb pak\u00ebndshme p\u00ebr t\u2019u shikuar \u2014 ishte e pap\u00ebrshtatshme t\u2019i p\u00ebrdorim n\u00eb hyperlinke, dhe mungesa e p\u00ebrb\u00ebr\u00ebsit semantik ishte nj\u00eb shqet\u00ebsim i madh.<\/p>\n

Krijuam disa server\u00eb rr\u00ebnj\u00ebsor\u00eb DNS, t\u00eb cil\u00ebt mbajn\u00eb nj\u00eb kopje t\u00eb list\u00ebs AAAA-rekordeve<\/a><\/noindex>, t\u00eb vendosura n\u00eb repo n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"\u00c7far\u00eb
\nMegjithat\u00eb, problemi i besimit nuk u zhduk \u2014 operatori i serverit t\u00eb DNS mund t\u00eb nd\u00ebrronte adres\u00ebn IPv6 n\u00eb nj\u00eb moment. Me nj\u00eb aft\u00ebsi t\u00eb caktuar \u2014 madje gati pa u v\u00ebn\u00eb re nga t\u00eb tjer\u00ebt.<\/p>\n

Duke qen\u00eb se ne nuk p\u00ebrdorim HTTPS dhe, p\u00ebr m\u00eb tep\u00ebr, teknologjin\u00eb HSTS<\/a><\/noindex>, mund t\u00eb kryhej nj\u00eb sulm i nd\u00ebrrimit t\u00eb adres\u00ebs IPv6 t\u00eb serverit p\u00ebrfundimtar pa ndonj\u00eb problem n\u00eb rast nd\u00ebrrimi t\u00eb adres\u00ebs n\u00eb DNS.<\/p>\n

Zgjidhja nuk vonoi t\u00eb vinte: ne vendos\u00ebm t\u00eb p\u00ebrdorim teknologjin\u00eb EmerDNS<\/a><\/noindex> \u2014 DNS i decentralizuar.<\/p>\n

N\u00eb nj\u00eb mas\u00eb, EmerDNS \u00ebsht\u00eb si nj\u00eb skedar hosts, ku gjenden regjistrime p\u00ebr t\u00eb gjitha \u0441\u0430\u0439\u0442et e njohura. Por ndryshe nga hosts:<\/p>\n