{"id":37685,"date":"2019-10-31T22:19:05","date_gmt":"2019-10-31T19:19:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil\/"},"modified":"2019-10-31T22:19:05","modified_gmt":"2019-10-31T19:19:05","slug":"chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-nam-stoit-mesh-postroit-kak-detsentralizovannyj-internet-provajder-medium-delaet-novyj-internet-na-baze-yggdrasil","title":{"rendered":"\u00c7far\u00eb na kushton t\u00eb nd\u00ebrtojm\u00eb Mesh: si ofruesi i internetit t\u00eb decentralizuar 'Medium' po krijon nj\u00eb Internet t\u00eb ri mbi Yggdrasil.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje!<\/p>\n

Ndoshta p\u00ebr ju nuk do t\u00eb jet\u00eb nj\u00eb lajm i madh q\u00eb \u00abRrjeti Suveren\u00bb<\/a><\/noindex> nuk \u00ebsht\u00eb larg \u2014 ligji hyn n\u00eb fuqi m\u00eb 1 n\u00ebntor<\/b> t\u00eb k\u00ebtij viti.<\/p>\n

Fatkeq\u00ebsisht, si do t\u00eb funksionoj\u00eb (dhe a do t\u00eb funksionoj\u00eb?) nuk \u00ebsht\u00eb krejt e qart\u00eb: nuk ka udh\u00ebzime t\u00eb sakta p\u00ebr operator\u00ebt e komunikimeve n\u00eb dispozicion t\u00eb hapur. Po ashtu nuk ka metoda, nd\u00ebshkimesh, plane, ndarjen e detyrave dhe p\u00ebrgjegj\u00ebsve \u2014 ka vet\u00ebm nj\u00eb deklarim.<\/p>\n

Nj\u00eb situat\u00eb e ngjashme \u00ebsht\u00eb v\u00ebrejtur edhe n\u00eb lidhje me realizimin e planeve t\u00eb \u00abligjit Jarovoi\u00bb \u2014 pajisjet e nevojshme p\u00ebr ligjin nuk arrit\u00ebn t\u00eb zhvilloheshin n\u00eb koh\u00eb dhe operator\u00ebt kryesor\u00eb t\u00eb komunikimeve n\u00eb vend ishin t\u00eb detyruar t\u00eb k\u00ebrkonin ndihm\u00eb nga prodhues t\u00eb mundsh\u00ebm t\u00eb pajisjeve t\u00eb specializuara me pyetje p\u00ebrkat\u00ebse. Megjithat\u00eb, as ata nuk mor\u00ebn p\u00ebrgjigje as p\u00ebr informacionin mbi pajisjet, as p\u00ebr mostra t\u00eb vet\u00eb pajisjeve.<\/p>\n

Por, m\u00eb e r\u00ebnd\u00ebsishmja \u2014 nuk \u00ebsht\u00eb se sa shpejt do t\u00eb hyj\u00eb ligji n\u00eb fuqi dhe \u00e7far\u00eb ndryshimesh na presin. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se, fal\u00eb futjes s\u00eb k\u00ebtij ligji, komuniteti i entuziast\u00ebve ka filluar t\u00eb nd\u00ebrtoj\u00eb nj\u00eb mjedis telekomunikacionesh t\u00eb pavarur n\u00eb vendin ton\u00eb.<\/p>\n

Sot do t\u00eb flas p\u00ebr at\u00eb q\u00eb kemi arritur t\u00eb realizojm\u00eb, \u00e7far\u00eb kemi n\u00eb plan t\u00eb b\u00ebjm\u00eb n\u00eb t\u00eb ardhmen e af\u00ebrt, dhe me cilat v\u00ebshtir\u00ebsi dhe probleme na \u00ebsht\u00eb dashur t\u00eb p\u00ebrballemi n\u00eb rrug\u00ebn e zhvillimit t\u00eb projektit.<\/p>\n

\"\u00c7far\u00eb
\n<\/a><\/noindex><\/p>\n

P\u00ebr \u00e7far\u00eb b\u00ebhet fjal\u00eb n\u00eb ligj?<\/h2>\n

\nPara se t\u00eb fillojm\u00eb me pjes\u00ebn teknike t\u00eb projektit ton\u00eb, duhet t\u00eb sakt\u00ebsoj \u00e7far\u00eb p\u00ebrfaq\u00ebson ligji \u00abP\u00ebr rrjetin suveren\u00bb.<\/p>\n

N\u00eb p\u00ebrmbledhje: autoritetet duan t\u00eb \u00absigurojn\u00eb\u00bb segmentin rus t\u00eb Internetit p\u00ebr rast se armiqt\u00eb hipotetik\u00eb do t\u00eb p\u00ebrpiqen ta \u00e7aktivizojn\u00eb. Por \u00abn\u00eb em\u00ebr t\u00eb q\u00ebllimeve t\u00eb mira, rruga drejt ferrit \u00ebsht\u00eb e mbushur\u00bb \u2014 nuk \u00ebsht\u00eb krejt e qart\u00eb se nga k\u00eb ne do t\u00eb mbrohemi dhe si do ta shkelin \u00abarmiqt\u00eb\u00bb funksionimin e segmentit rus t\u00eb Internetit.<\/p>\n

P\u00ebr t\u00eb realizuar k\u00ebt\u00eb skenar, duhet q\u00eb t\u00eb gjitha vendet e bot\u00ebs t\u00eb bashkohen, t\u00eb presin t\u00eb gjitha kabllot nd\u00ebrkomb\u00ebtare, t\u00eb neutralizojn\u00eb satelit\u00ebt vendas dhe t\u00eb krijojn\u00eb nd\u00ebrprerje t\u00eb vazhdueshme radiokomunikimesh.<\/p>\n

D\u00ebgjohet jo shum\u00eb e besueshme.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb \u00abMedium\u00bb?<\/h2>\n

\nMesatar<\/b> (angl. Mesatar<\/i> \u2014 \u00abnd\u00ebrlidh\u00ebs\u00bb, slogani origjinal \u2014 Mos k\u00ebrkoni intimitetin tuaj. Merreni p\u00ebrs\u00ebri<\/i>; gjithashtu n\u00eb anglisht fjala medium<\/i> do t\u00eb thot\u00eb \u00abkujdestar\u00bb) \u2014 nj\u00eb ofrues rus i internetit t\u00eb decentralizuar, q\u00eb ofron sh\u00ebrbime qasje n\u00eb rrjet Yggdrasil<\/a><\/noindex> pa pages\u00eb.<\/p>\n

Kur, ku dhe pse u krijua \u00abMedium\u00bb?<\/h2>\n

\nFillimi e projektit ishte menduar si Rrjet me mesh<\/a><\/noindex> n\u00eb n\u00eb qytetin Kolomenskij<\/a><\/noindex>.<\/p>\n

\u00abMedium\u00bb \u00ebsht\u00eb formuar n\u00eb prill 2019 si pjes\u00eb e krijimit t\u00eb nj\u00eb mjedisi telekomunikacioni t\u00eb pavarur duke ofruar p\u00ebrdoruesve p\u00ebrfundimtar\u00eb qasje n\u00eb burimet e rrjetit Yggdrasil p\u00ebrmes teknologjis\u00eb s\u00eb transmetimit t\u00eb dh\u00ebnave Wi-Fi.<\/p>\n

Ku mund t\u00eb gjej nj\u00eb list\u00eb t\u00eb plot\u00eb t\u00eb t\u00eb gjith\u00eb pikave t\u00eb rrjetit?<\/b>Ju mund ta gjeni at\u00eb n\u00eb repozytorin n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \u00abMedium\u00bb e p\u00ebrdor at\u00eb si transportin kryesor?<\/h2>\n

\nYggdrasil<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb rrjet q\u00eb organizohet vet\u00eb Rrjet me mesh<\/a><\/noindex>, q\u00eb ka mund\u00ebsin\u00eb e lidhjes s\u00eb router\u00ebve si n\u00eb modalitetin overlay (n\u00eb sip\u00ebrfaqe t\u00eb internetit) ashtu edhe direkt me nj\u00ebri-tjetrin p\u00ebrmes nj\u00eb lidhjeje t\u00eb kabluar ose pa tela.<\/p>\n

Yggdrasil \u00ebsht\u00eb nj\u00eb vazhdim i projektit CjDNS<\/a><\/noindex>. Dallimi kryesor midis Yggdrasil dhe CjDNS \u00ebsht\u00eb p\u00ebrdorimi i protokollit STP<\/a><\/noindex> (protokolli i pem\u00ebs s\u00eb shtrirjes).<\/p>\n

\"\u00c7far\u00eb
\n
\nP\u00ebr default, t\u00eb gjith\u00eb router\u00ebt e rrjetit p\u00ebrdorin kriptimin end-to-end<\/a><\/noindex> p\u00ebr t\u00eb transmetuar t\u00eb dh\u00ebnat midis an\u00ebtar\u00ebve t\u00eb tjer\u00eb.<\/p>\n

Zgjedhja e rrjetit Yggdrasil si transporti kryesor ishte e ndikuar nga nevoja p\u00ebr t\u00eb rritur shpejt\u00ebsin\u00eb e lidhjes (deri n\u00eb gusht 2019, \u00abMedium\u00bb p\u00ebrdorte I2P<\/a><\/noindex>).<\/p>\n

Kalimi n\u00eb Yggdrasil gjithashtu u ofroi pjes\u00ebmarr\u00ebsve t\u00eb projektit mund\u00ebsin\u00eb p\u00ebr t\u00eb filluar shp\u00ebrndarjen e rrjetit me topologjin\u00eb Full-Mesh. Kjo organizat\u00eb e rrjetit \u00ebsht\u00eb antidoti m\u00eb efektiv ndaj censur\u00ebs.<\/p>\n

\"\u00c7far\u00eb
\n<\/p>\n

Analiza e situat\u00ebs: n\u00eb cilat pengesa kemi hasur<\/h2>\n

\n\u00abP\u00ebrvoja \u00ebsht\u00eb djali i gabimeve t\u00eb v\u00ebshtira\u00bb. Gjat\u00eb zhvillimit t\u00eb \u00abMedium\u00bb, kemi arritur t\u00eb zgjidhim shum\u00eb probleme q\u00eb kan\u00eb dal\u00eb n\u00eb rrug\u00ebn ton\u00eb.<\/p>\n

Gabimi nr. 1: infrastruktura e \u00e7el\u00ebsave publik\u00eb<\/h3>\n

\nNj\u00eb nga problemet kryesore n\u00eb momentin e projektimit t\u00eb rrjetit ishte mund\u00ebsia e zhvillimit t\u00eb sulmit MITM<\/a><\/noindex>. Trafiku midis routerit t\u00eb operatorit dhe pajisjes s\u00eb klientit nuk ishte i koduar n\u00eb asnj\u00eb m\u00ebnyr\u00eb, pasi dekriptimi i trafikut kryesor b\u00ebhej direkt n\u00eb routerin e operatorit.<\/p>\n

Problemi ishte q\u00eb pas routerit mund t\u00eb ishte kushdo \u2014 dhe nuk donim q\u00eb ky \u00abdike\u00bb t\u00eb mund t\u00eb d\u00ebgjonte gjith\u00e7ka q\u00eb merrnin klient\u00ebt.<\/p>\n

Gabimi yn\u00eb i par\u00eb ishte vendosja n\u00eb pun\u00eb t\u00eb infrastruktur\u00ebs s\u00eb \u00e7el\u00ebsave publik\u00eb<\/a><\/noindex> (PKI).<\/p>\n

Fal\u00eb p\u00ebrdorimit t\u00eb nivelit 7 i rrjetit OSI <\/a><\/noindex> Ne kemi eliminuar sulmet MITM, por tani kemi nj\u00eb problem t\u00eb ri \u2014 nevoj\u00ebn p\u00ebr t\u00eb instaluar certifikata nga autoritetet e besueshme. Dhe autoritetet e besueshme jan\u00eb nj\u00eb problem tjet\u00ebr i panevojsh\u00ebm. Fjala ky\u00e7e k\u00ebtu \u00ebsht\u00eb \"besimi\".<\/p>\n

P\u00ebrs\u00ebri duhet t'i besojm\u00eb dikujt! Po sikur autoriteti i certifikimit t\u00eb jet\u00eb komprometuar? Si\u00e7 na thot\u00eb shoku Murphy, \u2014 her\u00ebt a von\u00eb, autoriteti i certifikimit do t\u00eb komprometohet. Dhe kjo \u00ebsht\u00eb nj\u00eb e v\u00ebrtet\u00eb e hidhur.<\/p>\n

Ne mendojm\u00eb p\u00ebr zgjidhjen e k\u00ebtij problemi dhe p\u00ebrfundimisht arrit\u00ebm n\u00eb p\u00ebrfundimin se nuk ka nevoj\u00eb p\u00ebr p\u00ebrdorimin e PKI \u2014 \u00ebsht\u00eb e mjaftueshme t\u00eb p\u00ebrdorim enkriptimin nativ Yggdrasil<\/a><\/noindex>.<\/p>\n

Pas p\u00ebrmir\u00ebsimeve t\u00eb nevojshme, topologjia e rrjetit \"Medium\" mori pamjen e m\u00ebposhtme:<\/p>\n

\"\u00c7far\u00eb<\/p>\n

Gabimi nr. 2: DNS-i i centralizuar<\/h3>\n

\nSistemi i emrave t\u00eb domenit na duhej q\u00eb n\u00eb fillim, sepse adresat IPv6 tep\u00ebr t\u00eb gjera nuk duken aspak t\u00eb mira \u2014 ishin t\u00eb v\u00ebshtira p\u00ebr t'u p\u00ebrdorur n\u00eb lidhjet hipertekstuese, dhe mungesa e p\u00ebrb\u00ebrjes semantike ishte nj\u00eb shqet\u00ebsim i madh.<\/p>\n

Krijuam disa server\u00eb t\u00eb rr\u00ebnj\u00ebs DNS, t\u00eb cil\u00ebt mbajn\u00eb nj\u00eb kopje t\u00eb list\u00ebs AAAA-regjistrimeve<\/a><\/noindex>, e vendosur n\u00eb repozytorin n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"\u00c7far\u00eb
\nMegjithat\u00eb, problemi i besimit nuk ka zhdukur \u2014 operatori mund t\u00eb b\u00ebj\u00eb ndryshimin e adres\u00ebs IPv6 n\u00eb serverin DNS n\u00eb nj\u00eb \u00e7ast. Me pak aft\u00ebsi \u2014 madje edhe pothuajse pa u v\u00ebn\u00eb re nga t\u00eb tjer\u00ebt.<\/p>\n

Duke qen\u00eb se ne nuk p\u00ebrdorim HTTPS dhe, posa\u00e7\u00ebrisht, teknologjin\u00eb HSTS<\/a><\/noindex>, n\u00eb rastin e ndryshimit t\u00eb adres\u00ebs n\u00eb DNS, mund t\u00eb kryhej nj\u00eb sulm p\u00ebr nd\u00ebrrimin e adres\u00ebs IPv6 t\u00eb serverit p\u00ebrfundimtar pa ndonj\u00eb problem.<\/p>\n

Zgjidhja nuk pati vones\u00eb: ne vendos\u00ebm t\u00eb p\u00ebrdorim teknologjin\u00eb EmerDNS<\/a><\/noindex> \u2014 DNS t\u00eb decentralizuar.<\/p>\n

N\u00eb nj\u00ebfar\u00eb kuptimi, EmerDNS \u00ebsht\u00eb si nj\u00eb sked\u00eb hosts, ku ndodhen regjistrimet p\u00ebr t\u00eb gjith\u00eb site t\u00eb njohura. Por ndryshe nga skedari hosts:<\/p>\n