Mofuta o nkehang oa OpenBGPD 6.7p0 o teng

Baetsi ba OpenBSD e phatlalalitsoeng ho lokolloa ha khatiso e nkehang ea sephutheloana sa litsela OpenBGPD 6.7, e ka sebelisoang lits'ebetsong tse ling ntle le OpenBSD. Ho netefatsa hore hoa khoneha, likarolo tsa khoutu ho tsoa ho merero ea OpenNTPD, OpenSSH le LibreSSL li ile tsa sebelisoa. Ntle le OpenBSD, tšehetso ea Linux le FreeBSD e phatlalalitsoe. OpenBGPD e lekoa ho Debian 9, Ubuntu 14.04+ le FreeBSD 12.

OpenBGPD e ntse e ntlafatsoa tlasa tshehetso Registrar Internet Regional RIPE NCC, e nang le thahasello ea ho tlisa ts'ebetso ea OpenBGPD molemong oa ho sebelisoa ho li-server bakeng sa ho tsamaisa libakeng tsa phapanyetsano ea sephethephethe (IXP) le ho theha mofuta o felletseng oa sephutheloana. NONYANE (mekhoa e meng e bulehileng ea ho kenya tšebetsong protocol ea BGP e kenyelletsa merero FROUting, GoBGP, ExaBGP и Bio-Routing).

Nts'etsopele ea OpenBGPD e shebane le ho netefatsa boemo bo holimo ba ts'ireletso le ts'epo. Bakeng sa ts'ireletso, ho sebelisoa netefatso e tiileng ea ho nepahala ha litekanyo tsohle, mekhoa ea ho beha leihlo ho lateloa ha meeli ea buffer, karohano ea litokelo, le thibelo ea phihlello ea mehala ea sistimi. Melemo e meng e kenyelletsa syntax e bonolo ea puo ea tlhaloso ea tlhophiso, ts'ebetso e phahameng le ts'ebetso ea memori (mohlala, OpenBGPD e ka sebetsa ka litafole tsa routing tse nang le likenyo tse likete tse makholo). Porojeke e tshehetsa boholo ba ditlhaloso tsa BGP 4 mme e dumellana le ditlhoko tsa RFC8212, empa ha e leke ho amohela tse kgolo mme e fana haholo ka tshehetso bakeng sa mesebetsi e tsebahalang haholo le e atileng.

Ho lokolloa ha OpenBGPD 6.7 tshwailoe lintlafatso tse latelang:

  • Sesebelisoa sa bgpctl se fana ka ts'ehetso ea pele bakeng sa tlhahiso ea JSON;
  • В bgpd.conf e lumelloa ho beha ka nako e le 'ngoe liaterese tsa IPv4 le IPv6 taelong ea liaterese tsa sebaka ka har'a li-block tsa "sehlopha";
  • Kakaretso e nepahetseng ea litafole tsa ROA (Route Origin Authorization) e nang le sehlomapele/mohloli-joaloka lipara ho karolo e le 'ngoe e nang le boleng bo bolelele ba "maxlen" e tiisitsoe;
  • E kentse thepa ea "max-prefix {NUM} out" ho bgpd.conf ho fokotsa palo ea li-prefixes tse bapalitsoeng ho qoba ho tsoa litafole tse felletseng;
  • Ho bgpctl, taelo ea 'show neighbourne' e atolositsoe ho bonts'a li-prefixes tse amoheloang le tse behiloeng, hammoho le boleng ba moeli oa "max-prefix out";
  • Litsebiso li kenyelletsa lintlha tse mabapi le sesosa sa liphoso tse behiloeng. Taelo ea "bgpctl show neighbour" e fana ka tlhahiso ea sesosa sa phoso ea ho qetela e fumanoeng;
  • Ho etsa ka nepo ts'ebetso ea "ho kenya hape ka mosa", li-prefixes tse sa sebetseng li tšoailoe tafoleng ea Adj-RIB-Out, e bolokang tlhahisoleseling mabapi le litsela tse khethiloeng ke router ea lehae ea BGP ho phatlalatsa litsela tse nepahetseng ho lithaka;
  • E ekelitse bokhoni ba ho haha ​​OpenBGPD ka ho sebelisa sephutheloana sa ho ngola li-parsers tsa bison ntle le byacc;
  • E kentse khetho ea "--runstatedir", eo ka eona u ka tsebang tsela ea bgpctl.sock;
  • E hloekisitse script ho ntlafatsa ho khoneha.

Source: opennet.ru

Eketsa ka tlhaloso