Tsamaisa li-node tsohle tsa IPv6 seteisheneng

Ho setse matsatsi a seng makae ho fihlela ho qaleha ha phallo e ncha ka tekanyo "Network Engineer" ho tloha OTUS. Tabeng ena, re rata ho arolelana le uena phetolelo ea boitsebiso bo molemo ka sehlooho sena.

Tsamaisa li-node tsohle tsa IPv6 seteisheneng

Letoto la li-post tsa blog mabapi le malebela le maqheka a ho rarolla mathata a IPv6 ping (ICMPv6 Echo Request/Echo Reply)

Ka kopo elelloa hore ke sebelisa Linux (haholo-holo Fedora 31), leha ho le joalo syntax ea taelo ea ping bakeng sa litsamaiso tse ling tsa ts'ebetso e tlameha ho ts'oana haholo.

Tsamaisa li-node tsohle tsa IPv6 seteisheneng

Keletso ea pele le e bonolo ka ho fetisisa ke ho penya li-node tsohle tsa IPv6 sehokelong.

IPv6 e sebelisa liaterese tsa multicast bakeng sa mefuta eohle ea likhokahano tsa motho a le mong ho isa ho tse ngata. Ha ho liaterese tsa IPv6 tsa khaso (kapa khaso). Sena se khetholla IPv6 ho IPv4, moo ho nang le mefuta e 'maloa ea liaterese tsa khaso, mohlala, aterese ea "khaso e fokolang" 255.255.255.255 [RFC1122].

Leha ho le joalo, ho na le "all-nodes multicast" aterese ea IPv6, kahoo re tla e sebelisa ho ping li-node tsohle tsa IPv6 sehokelong. (Aterese ea "phatlalatso" ha e le hantle e mpa e le aterese e khethehileng e bitsoang multicast, e leng sehlopha sa li-multicast se kenyeletsang li-node tsohle. Hlokomela hore, ka mohlala, "sehlopha" kapa bonyane ba aterese ea multicast e buletsoe liaterese tsa khaso tsa Ethernet sebakeng sa khokahanyo. ).

All-nodes multicast IPv6 aterese bakeng sa mocha: ff02::1. ff e bolela aterese ea IPv6 ea multicast. E latelang 0 ke karolo ea folakha e nang le likotoana tse sa hlophisoang.

ka ho eketsehileng 2 e hlalosa sebaka sa sehlopha sa multicast. Ho fapana le liaterese tse ngata tsa IPv4, liaterese tsa IPv6 tse ngata li na le sebaka. Boleng ba scope e bonts'a karolo ea marang-rang eo pakete ea multicast e lumelletsoeng ho fetisetsoa ho eona. Hang ha pakete e fihla moeling oa sebaka se boletsoeng, pakete e tlameha ho theoha, ho sa tsotelehe hore na sebaka sa eona sa Hop Count ke sa nonzero. Ehlile, haeba palo ea hop e fihla ho zero pele e fihla moeling o boletsoeng oa sehlopha sa multicast, e boetse e hlophisoa bocha hanghang. Mona ke lenane le felletseng la boholo ba IPv6 multicast.

Qetellong ::1 e hlalosa sehlopha sa li-multicast-node kaofela.

Mabapi le aterese ff02::1 Ho ke ho hlokomeloe hore ha e utloisisehe. Ho moamoheli oa IPv6 o nang le likhokahano tse ngata, joalo ka router kapa moamoheli ea nang le mefuta e mengata, aterese ff02::1 ha ho na letho moo o ka hlakisang hore na o ka romella likopo tsa ICMPv6 ho kapa ho lebella ho fumana likarabo tsa ICMPv6 echo ha li fihla. ff02::1 e nepahetse ebile e ka sebelisoa ho li-interfaces le likanale tse hoketsoeng node ea li-interface tse ngata.

Kahoo ha re penya li-node tsohle tsa IPv6 sehokelong, re hloka ka tsela e itseng hape re bolelle ts'ebeliso ping bakeng sa IPv6, eo u ka e sebelisang.

Ho hlalosa li-interfaces - Khetho ea Mola oa Taelo

Joalo ka ha re se re bone, aterese ea multicast ea mefuta eohle eo re batlang ho e sebelisa ke − ff02::1 - ha e fane ka tlhahisoleseling mabapi le hore na o ka romella le ho amohela kopo ea ICMPv6 echo le lipakete tsa karabo ea echo.

Joale, re bolela joang sebopeho se tla sebelisoa bakeng sa sebaka sa aterese sa multicast kapa sebaka sa aterese sa unicast Link-Local?

Tsela ea pele le e totobetseng ke ho fana ka eona e le parameter ho kopo eo re e sebelisang.

Bakeng sa thuso ping re fana ka eona ka khetho -I.

[mark@opy ~]$ ping -w 1 -I enp3s2 ff02::1
ping: Warning: source address might be selected on device other than: enp3s2
PING ff02::1(ff02::1) from :: enp3s2: 56 data bytes
64 bytes from fe80::1d36:1fff:fefd:82be%enp3s2: icmp_seq=1 ttl=64 time=0.438 ms
64 bytes from fe80::f31c:ccff:fe26:a6d9%enp3s2: icmp_seq=1 ttl=64 time=0.589 ms (DUP!)
64 bytes from fe80::7e31:f5ff:fe1b:9fdb%enp3s2: icmp_seq=1 ttl=64 time=5.15 ms (DUP!)
64 bytes from fe80::f7f8:15ff:fe6f:be6e%enp3s2: icmp_seq=1 ttl=64 time=58.0 ms (DUP!)
64 bytes from fe80::877d:4ff:fe1a:b881%enp3s2: icmp_seq=1 ttl=64 time=62.3 ms (DUP!)
64 bytes from fe80::877d:4ff:fe1a:ad79%enp3s2: icmp_seq=1 ttl=64 time=62.8 ms (DUP!)
 
--- ff02::1 ping statistics ---
1 packets transmitted, 1 received, +5 duplicates, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.438/31.544/62.786/29.566 ms
[mark@opy ~]$

Ka ho sebelisa multicast ping ena, re fumane likarabo ho tsoa ho 6 IPv6 node. Likarabo li tsoa ho liaterese tsa node tsa Link-Local IPv6, ho qala ka sehlomathiso fe80::/10.

hore ping ha e tsoelepele ho romella likopo tsa ICMPv6 ka nako e sa lekanyetsoang ho fihlela re e sitisa, hangata re bolela palo ea lipakete tse lokelang ho romelloa ka khetho ea -c. Leha ho le joalo, sena se boetse se thibela ping ho amohela le ho hlahisa karabo e fetang e le 'ngoe ea ICMPv6 ha e romella kopo ea echo ea multicast ICMPv6. Sebakeng seo, re sebelisitse -w khetho ho hlakisa hore ping e tlameha ho phethela kamora motsotsoana o le mong, ho sa tsotelehe hore na likopo tse kae tsa ICMPv1 echo kapa likarabo tsa echo li rometsoe kapa li amoheloa.

Ntho e 'ngoe eo u lokelang ho e ela hloko ke (DUP!) tlhahiso karabong ea bobeli le e latelang. Lipakete tsena li tsejoa e le likarabo tse peli hobane li na le boleng bo lekanang ba tatelano ea ICMP joalo ka likopo tsa ICMPv6 tse rometsoeng pele. Li hlaha hobane kopo ea ICMPv6 multicast echo e fella ka likarabo tse ngata tsa unicast. Palo ea likopi hape e bonts'itsoe kakaretsong ea lipalo.

Ho hlalosa li-interfaces - Zone ID

Mokhoa o mong oa ho pepesa sebopeho sa tšebeliso ke karolo ea paramente ea aterese ea IPv6.

Re ka bona mohlala oa sena tlhahisong ea ping, moo liaterese tsa mabotho a arabelang a IPv6 le tsona li nang le suffix. %enp3s2mohlala:

64 bytes from fe80::1d36:1fff:fefd:82be%enp3s2: icmp_seq=1 ttl=64 time=0.438 ms

Mokhoa ona oa ho hlakisa likhokahano o hlalosoa ka molao ho [RFC4007], "IPv6 Defined Address Architecture." Leha hangata li bitsoa sebopeho sa sistimi ea ts'ebetso, ha e le hantle li hlalosa ntho e 'ngoe e akaretsang - "zone" kapa "scope".

Lebaka la ho ba le libaka tse akaretsang kapa libaka tse akaretsang ke hore, joalo ka ha ho boletsoe ho [RFC4007], node ea IPv6 e ka ba le likhokahano tse fapaneng tse fapaneng tsa IPv6 tse hoketsoeng mocha o le mong. Likhokahano tsena ke litho tsa sebaka se le seng.

Hoa khoneha ho hlophisa li-interfaces tse ngata ka har'a libaka tlas'a tsamaiso ea ts'ebetso; Hajoale ha ke tsebe hore na sena sea khoneha tlasa Linux kapa mokhoa oa ho se etsa.

Ho sebedisa suffix %<zone_id>, re ka tlosa khetho ea mola oa taelo -I ping.

[mark@opy ~]$ ping -w 1 ff02::1%enp3s2
PING ff02::1%enp3s2(ff02::1%enp3s2) 56 data bytes
64 bytes from fe80::2392:6213:a15b:66ff%enp3s2: icmp_seq=1 ttl=64 time=0.106 ms
64 bytes from fe80::1d36:1fff:fefd:82be%enp3s2: icmp_seq=1 ttl=64 time=0.453 ms (DUP!)
64 bytes from fe80::f31c:ccff:fe26:a6d9%enp3s2: icmp_seq=1 ttl=64 time=0.606 ms (DUP!)
64 bytes from fe80::7e31:f5ff:fe1b:9fdb%enp3s2: icmp_seq=1 ttl=64 time=6.23 ms (DUP!)
64 bytes from fe80::f7f8:15ff:fe6f:be6e%enp3s2: icmp_seq=1 ttl=64 time=157 ms (DUP!)
64 bytes from fe80::877d:4ff:fe1a:ad79%enp3s2: icmp_seq=1 ttl=64 time=159 ms (DUP!)
64 bytes from fe80::877d:4ff:fe1a:b881%enp3s2: icmp_seq=1 ttl=64 time=161 ms (DUP!)
64 bytes from fe80::23d:e8ff:feec:958c%enp3s2: icmp_seq=1 ttl=64 time=179 ms (DUP!)
 
--- ff02::1%enp3s2 ping statistics ---
1 packets transmitted, 1 received, +7 duplicates, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.106/82.858/179.216/81.281 ms
 
[mark@opy ~]$

Khokahano-Likarabo tsa Aterese ea Sebaka

Ho tsoa ho ping ena e mengata ea li-multicast re fumane kakaretso ea likarabo tse 6 tse ikhethang.

Likarabo tsena li tsoa ho liaterese tsa moamoheli tsa unicast Link-Local IPv6. Ka mohlala, karabo ea pele ke ena:

64 bytes from fe80::2392:6213:a15b:66ff%enp3s2: icmp_seq=1 ttl=64 time=0.106 ms

Unicast Link-Local IPv6 liaterese lia hlokahala lihokelong tsohle tsa IPv6 tse lumelletsoeng [RFC4291], "IP Version 6 Addressing Architecture". Lebaka la sena ke hore node ea IPv6 e lula e na le aterese ea unicast IPv6, eo bonyane e ka e sebelisang ho buisana le li-node tse ling lihokelong tsa eona tse hokahaneng ka kotloloho. Sena se kenyelletsa ho buisana le lits'ebetso ho baamoheli ba bang ka liaterese tsa moamoheli tsa Link-Local.

Sena se nolofatsa moralo le ts'ebetsong ea liprothokholo tse kang IPv6 Neighbor Discovery le OSPFv3. E boetse e lumella lits'ebetso tsa basebelisi ba ho qetela ho mabotho ho buisana ka seteishene ntle le ho hloka lisebelisoa tse ling tse tšehetsang IPv6 seteisheneng. Puisano e tobileng lipakeng tsa li-host tse hokahaneng tsa IPv6 ha e hloke router ea IPv6 kapa seva sa DHCPv6 khokahanyong.

Liaterese tsa Link-Local li qala ka 10-bit prefix fe80, e lateloe ke 54 zero bits ebe e ntan'o ba 64-bit interface identifier (IID). Karabong ea pele e ka holimo 2392:6213:a15b:66ff ke 64-bit IID.

Multicast ea looped

Ka kamehla, lipakete tsa multicast li khutlisetsoa ka hare ho node e li rometseng. Sena se etsahala bakeng sa liaterese tsa IPv6 le IPv4 ka bobeli.

Lebaka la boits'oaro bona bo sa feleng ke hore ha liphutheloana tsa multicast li romelloa, ho ka 'na ha boela ha e-ba le ts'ebeliso ea libaka tse ngata tse mamelang tse sebetsang ho moamoheli ea romellang ka boeona, hammoho le kae-kae marang-rang. Sesebelisoa sena sa lehae se tlameha ho amohela lipakete tsa multicast.

Re ka bona loop ena ea lehae ea multicast ho tlhahiso ea rona ea ping:

[mark@opy ~]$ ping -w 1 ff02::1%enp3s2
PING ff02::1%enp3s2(ff02::1%enp3s2) 56 data bytes
64 bytes from fe80::2392:6213:a15b:66ff%enp3s2: icmp_seq=1 ttl=64 time=0.106 ms
64 bytes from fe80::1d36:1fff:fefd:82be%enp3s2: icmp_seq=1 ttl=64 time=0.453 ms (DUP!)
...

Karabo ea pele le e potlakileng (0,106 ms ha e bapisoa le 0,453 ms) e tsoa ho aterese ea Link-Local e hlophisitsoeng ho sebopeho ka boeona. enp3s2.

[mark@opy ~]$ ip addr show dev enp3s2 | grep fe80
    inet6 fe80::2392:6213:a15b:66ff/64 scope link noprefixroute 
[mark@opy ~]$

Tšebeliso ping e fana ka mokhoa oa ho hatella maikutlo a batho ba bangata ka ho sebelisa paramethara -L. Haeba re romella ping ea multicast e nang le folakha ena, likarabo li lekanyelitsoe ho li-node tse hole. Ha re fumane karabo ho tsoa ho aterese ea Link-Local ea sebopeho se romellang.

[mark@opy ~]$ ping -L -w 1 ff02::1%enp3s2
PING ff02::1%enp3s2(ff02::1%enp3s2) 56 data bytes
64 bytes from fe80::1d36:1fff:fefd:82be%enp3s2: icmp_seq=1 ttl=64 time=0.383 ms
 
64 bytes from fe80::f31c:ccff:fe26:a6d9%enp3s2: icmp_seq=1 ttl=64 time=0.467 ms (DUP!)
...

Ping Link-Liaterese tsa Sebaka

Joalo ka ha u ka hakanya, liaterese tsa unicast Link-Local ka botsona ha li fane ka tlhaiso-leseling e lekaneng ho bonts'a hore na u ka sebelisa sebopeho sefe ho li fihlela. Joalo ka li-node tsa multicast ping, re boetse re hloka ho hlakisa sebopeho e le paramente ea mola oa taelo ping kapa ID ea libaka e nang le aterese ha u penya liaterese tsa Link-Local.

Lekhetlong lena re ka sebelisa -cho fokotsa palo ea lipakete le likarabo tse rometsoeng le tse amoheloang ping, kaha re etsa unicast ping.

[mark@opy ~]$ ping -c 1 fe80::f31c:ccff:fe26:a6d9%enp3s2
 
PING fe80::f31c:ccff:fe26:a6d9%enp3s2(fe80::fad1:11ff:feb7:3704%enp3s2) 56 data bytes
64 bytes from fe80::f31c:ccff:fe26:a6d9%enp3s2: icmp_seq=1 ttl=64 time=0.395 ms
 
--- fe80::f31c:ccff:fe26:a6d9%enp3s2 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.395/0.395/0.395/0.000 ms
[mark@opy ~]$

Ping (tsohle) liaterese tse ling tsa IPv6?

Sehloohong sena, re bone mokhoa oa ho ping li-node tsohle tsa IPv6 seteisheneng u sebelisa aterese ea IPv6 ea multicast. ff02::1. Re boetse re bone mokhoa oa ho hlakisa hore na u ka sebelisa sebopeho sefe ka aterese ea IPv6 ea multicast, kaha aterese ka boeona e ke ke ea fana ka tlhahisoleseling ena. Re sebelisitse khetho ea mola oa taelo ping, kapa o hlalositse sebopeho se sebelisang sehokelo %<zone_id>.

Eaba re ithuta ka liaterese tsa unicast Link-Local, e leng liaterese tse sebelisetsoang ho araba likopo tsohle tsa multicast ICMPv6 echo.

Re boetse re bone hore na lipakete tsa multicast li khutlisetsoa joang sebakeng sa ho romella ka boiketsetso le mokhoa oa ho tima sena molemong oa ts'ebeliso. ping.

Qetellong, re ile ra penya aterese e le 'ngoe ea Link-Local re sebelisa sehlomathiso %<zone_id>, kaha liaterese tsa Link-Local ka botsona le tsona ha li fane ka tlhahisoleseling mabapi le sebopeho se hlahang.

Joale ho thoe'ng ka li-node tse ling kaofela le ho fumana liaterese tsa bona tsa lefatše ka bophara (GUAs) (ke hore, liaterese tsa bona tsa sechaba Marang-rang) kapa liaterese tsa bona tse ikhethang tsa lehae (ULAs)? Re tla sheba sena posong e latelang ea blog.

Ke phetho.

U ka fumana ho eketsehileng ka thupelo ea rona ho lintlha tse bulehileng tsa letsatsi.

Source: www.habr.com

Eketsa ka tlhaloso