Yintoni ekufuneka siyakhe iMesh: indlela umnikezeli we-Intanethi onikezelweyo "oPhakathi" wenza njani i-Intanethi entsha esekwe kwiYggdrasil

Nibuliso!

Ngokuqinisekileyo ayizukuba ziindaba ezinkulu kuwe loo nto "Umlawuli weRunet" sele ikufutshane nje – umthetho sele uqalisa ukusebenza 1 Novemba kulo nyaka.

Ngelishwa, iya kusebenza njani (kwaye ingaba iya kusebenza?) Kananjalo akukho ndlela, izohlwayo, izicwangciso, ukwabiwa koxanduva kunye noxanduva - kukho nje isibhengezo.

Kwaphawulwa imeko efanayo ngokubhekiselele ekuphunyezweni kwezicwangciso ze "Yarovaya Law" - izixhobo zomthetho azizange ziphuhliswe ngexesha kwaye abaqhubi bezonxibelelwano belizwe baphoqeleka ukuba baqhagamshelane ngokuphindaphindiweyo nabavelisi bezixhobo ezikhethekileyo ngemibuzo efanelekileyo. Nangona kunjalo, abafumananga mpendulo malunga nolwazi malunga nezixhobo okanye iisampuli ngokwabo.

Kodwa eyona nto iphambili ayikuko ukuba umthetho uza kuqala nini ukusebenza kwaye luluphi utshintsho olusilindeleyo. Into ephambili kukuba ngenxa yokuqaliswa kwalo mthetho oyilwayo, uluntu lwabanomdla lwaqala ukuthunyelwa kwendawo yonxibelelwano oluzimeleyo kwilizwe lethu.

Namhlanje ndiza kuthetha malunga noko sele sikwenzile, esiza kukwenza kwixesha elizayo elingekude, kwaye zeziphi iingxaki kunye neengxaki ebesijongene nazo endleleni yokuphuhlisa iprojekthi.

Umalunga nantoni umthetho?

Ngaphambi kokuba ndiqhubele phambili kwicandelo lobugcisa beprojekthi yethu, kufuneka ndenze ugcino malunga nokuba yintoni umthetho othi "Kwi-Runet enguMongami".

Ngamafutshane: abasemagunyeni bafuna "ukukhusela" icandelo laseRashiya le-Intanethi ukuba iintshaba zethu zifuna ukuyivala. Kodwa "indlela eya esihogweni ihlanjululwe ngeenjongo ezilungileyo" - akucaci ngokupheleleyo ukuba baya kusikhusela kubani kwaye "iintshaba", ngokomgaqo, zingaphazamisa njani umsebenzi wecandelo laseRashiya le-Intanethi.

Ukuphumeza le meko yohlaselo, onke amazwe ehlabathi kufuneka enze iyelenqe, anqumle zonke iintambo ezinqumla imida, adubule iisathelayithi zasekhaya kwaye enze uphazamiseko oluqhubekayo lukanomathotholo.

Akuvakali kusengqiqweni kakhulu.

Yintoni iMedium?

phakathi (eng. phakathi - "umthetheleli", isilogeni sokuqala - Musa ukukubuza imfihlo yakho. Yibuyisele; kwakhona ngesiNgesi igama medium kuthetha "ophakathi") - umnikezeli we-Intanethi waseRussia onikezela ngeenkonzo zokufikelela kwinethiwekhi Yggdrasil simahla kungafunwanga ntlawulo.

Nini, phi kwaye kutheni iMedium yadalwa?

Ekuqaleni, le projekthi yaqanjwa njenge umnatha womnatha в Isithili sasedolophini saseKolomna.

“Ephakathi” yasekwa ngo-Epreli ka-2019 njengenxalenye yokuyilwa kwendawo yonxibelelwano ezimeleyo ngokubonelela abasebenzisi bokugqibela ukufikelela kwimithombo yothungelwano yeYggdrasil ngokusetyenziswa kobuchwephesha bokuhambisa idatha engenazingcingo ye-Wi-Fi.

Ndingalufumana phi uluhlu olupheleleyo lwazo zonke iindawo zenethiwekhi?Ungayifumana kwi iindawo zokugcina kwiGitHub.

Yintoni iYggdrasil kwaye kutheni iMedium iyisebenzisa njengeyona ndlela yothutho?

Yggdrasil kukuzicwangcisa umnatha womnatha, enekhono lokudibanisa ii-routers zombini kwimodi yokwaleka (phezulu kwi-Intanethi) kwaye ngokuthe ngqo komnye nomnye ngoqhagamshelwano olungenazintambo okanye olungenazintambo.

I-Yggdrasil kukuqhubekeka kweprojekthi CjDNS. Owona mahluko mkhulu phakathi kweYggdrasil kunye neCjDNS kusetyenziso lweprotocol STP (iprotocol yomthi enwebekayo).

Ngokungagqibekanga, zonke iirouter ezikwinethiwekhi ziyasetyenziswa uguqulelo oluntsonkothileyo ekupheleni ukuya ekupheleni ukudlulisa idatha phakathi kwabanye abathathi-nxaxheba.

Ukukhethwa kwenethiwekhi yeYggdrasil njengothutho oluphambili ngenxa yesidingo sokwandisa isantya soxhulumaniso (kude kube ngu-Agasti 2019, i-Medium isetyenzisiwe. I2P).

Utshintsho oluya kwi-Yggdrasil lukwanike abathathi-nxaxheba beprojekthi ithuba lokuqalisa ukusasaza inethiwekhi yeMesh ene-Full-Mesh topology. Umbutho womnatha onjalo lolona nyango lusebenzayo ngokuchasene nokuhlolwa.

Debriefing: zeziphi iimpazamo esele sizenzile?

"Amava ngunyana weempazamo ezinzima." Ngexesha lophuhliso lweMedium, sikwazile ukusombulula iingxaki ezininzi ezithe zavela endleleni.

Impazamo #1: Iziseko ezingundoqo zoLuntu

Enye yeengxaki eziphambili ngexesha loyilo lwenethiwekhi yayinokwenzeka ukuba iqhutywe Ukuhlaselwa kwe-MITM. I-traffic phakathi kwe-router yomqhubi kunye nesixhobo somxhasi ayizange ibhalwe ngekhowudi nangayiphi na indlela, kuba i-traffic ephambili yachithwa ngokuthe ngqo kwi-router yomqhubi.

Ingxaki yayikukuba nabani na unokuba semva kwe-router - kwaye sasingafuni ukuba "umntu" akwazi ukumamela yonke into abaxumi abayifumanayo.

Impazamo yethu yokuqala yaba kukwazisa Iziseko ezingundoqo zoluntu (PKI).

Enkosi kusetyenziso lwenqanaba lesi-7 imodeli yenethiwekhi ye-OSI Siye sahlukana nokuhlaselwa kohlobo lwe-MITM, kodwa safumana ingxaki entsha - imfuneko yokufaka izatifikethi ezivela kwabasemagunyeni bezatifikethi zeengcambu. Kwaye amaziko eziqinisekiso yenye ingxaki engeyomfuneko. Igama eliphambili apha lithi "ithemba."

Kufuneka umthembe umntu kwakhona! Kuthekani ukuba igunya lesatifikethi liye lachaphazeleka? Njengoko uComrade Murphy esixelela, kungekudala okanye kamva igunya lezatifikethi liya kuthotywa. Kwaye le yinyaniso ekrakra.

Sacinga ixesha elide malunga nokusombulula le ngxaki kwaye ekugqibeleni safikelela kwisigqibo sokuba akukho mfuneko yokusebenzisa i-PKI - kwanele ukusebenzisa. Yggdrasil uguqulelo oluntsonkothileyo.

Emva kokwenza uhlengahlengiso olufanelekileyo, i-topology yenethiwekhi "Ephakathi" ithathe le ndlela ilandelayo:

Impazamo #2: I-DNS ephakathi

Sasifuna inkqubo yegama lesizinda kwasekuqaleni, kuba iidilesi ze-IPv6 ezinzima azikhange zikhangeleke zilungile kuphela - kwakunzima ukuzisebenzisa kwii-hyperlink, kwaye ukunqongophala kwecandelo le-semantic kwakuyingxaki enkulu.

Senza iiseva ezininzi zeengcambu ze-DNS ezigcine ikopi yoluhlu Iirekhodi zeAAAA, ibekwe kwi iindawo zokugcina kwiGitHub.

Nangona kunjalo, ingxaki yokuthembela ayihambanga - umqhubi unokutshintsha idilesi ye-IPv6 kwiseva ye-DNS ngokuqhwanyaza kweliso. Ukuba unobuchule obuthile, buphantse bungabonakali kwabanye.

Ekubeni singasebenzisi i-HTTPS kwaye, ngokukodwa, iteknoloji IHSTS, xa i-spoofing idilesi kwi-DNS, kwakunokwenzeka ukwenza uhlaselo ngokuhlambalaza idilesi ye-IPv6 yomncedisi wokugqibela ngaphandle kweengxaki.

Isisombululo asibanga kudala: sagqiba ekubeni sibhenele ekusebenziseni itekhnoloji EmerDNS - i-DNS enikezelweyo.

Ngandlela ithile, i-EmerDNS iyafana nefayile yenginginya, apho kukho amangeno kuzo zonke iisayithi ezaziwayo. Kodwa ngokungafaniyo nababuki zindwendwe:

• Umgca ngamnye kwi-EmerDNS unokuguqulwa kuphela ngumnini wayo, kwaye akukho mntu wumbi
• Ukungenakwenzeka "kokungenelela kukaThixo (umlawuli ophezulu)" kuqinisekiswa yimvumelwano yabasebenzi basezimayini.
• Le fayile iyafana kumntu wonke, oqinisekiswa yindlela yokuphindaphinda i-blockchain
• Injini yokukhangela ekhawulezayo ifakiwe kunye nefayile.

umthombo: "I-EmerDNS - enye indawo kwi-DNSSEC"

Impazamo #3: Ukubeka yonke into embindini

Ekuqaleni, igama elithi “i-Intanethi” lalithetha enye into uthungelwano olunxibelelanayo okanye uthungelwano lothungelwano.

Ngokuhamba kwexesha, abantu bayeka ukudibanisa i-Intanethi nento ethile yezemfundo kwaye yaba yingcamango yemihla ngemihla, njengoko impembelelo yayo isasazeka ngokubanzi kubomi babantu abaqhelekileyo.

Oko kukuthi, ekuqaleni i-Intanethi yayisabiwa. Kule mihla ayinakubizwa ngokuba yi-decentralization, nangona ingcamango isaphila nanamhlanje - kuphela iindawo ezinkulu zokutshintshiselana kwezithuthi zilawulwa ziinkampani ezinkulu. Kwaye iinkampani ezinkulu, nazo, zilawulwa ngurhulumente.

Kodwa masibuyele kwingxaki yethu - umkhwa obhekiselele kwi-centralization usetwa ngabaqhubi beenkonzo ezizimeleyo ezinje ngeintanethi zentlalo, iiseva ze-imeyile, abathunywa abakhawulezayo, njalo njalo.

“Ephakathi” kulo mba yayingohlukanga kangako kwi-Intanethi enkulu ukuza kuthi ga ngoku - uninzi lweenkonzo zazibekwe kwindawo enye kwaye zilawulwa ngabasebenzi ngabanye.

Ngoku sithathe isigqibo sokuseta ikhosi yokusasazwa ngokupheleleyo-ukuze iinkonzo ezibalulekileyo ziqhubeke nokusebenza nokuba kukho ukusilela kumncedisi ophakathi womqhubi okanye hayi.

Njengenkqubo yemiyalezo ekhawulezileyo esiyisebenzisayo Matrix. Njengeintanethi zentlalo- IMododon и UHubzilla. Ukubamba ividiyo - I-PeerTube.

Kakade ke, uninzi lweenkonzo zisabekwe kwindawo enye kwaye zisalawulwa ngabasebenzi ngabanye, kodwa eyona nto iphambili kukuba kukho intshukumo ebhekiselele kulawulo olupheleleyo kwaye iviwa ngawo onke amalungu oluntu.

I-Intanethi yasimahla eRussia iqala ngawe

Unokunikezela ngalo lonke uncedo olunokwenzeka ekusekeni i-Intanethi yasimahla eRashiya namhlanje. Siqulunqe uluhlu olubanzi lwendlela onokunceda ngayo inethiwekhi:

       Xelela abahlobo bakho kunye noogxa bakho malunga nenethiwekhi ePhakathi
       Yabelana ireferensi kweli nqaku kwiintanethi zentlalo okanye kwiblogi yomntu
       Thatha inxaxheba kwiingxoxo zemiba yobugcisa yothungelwano oluPhakathi kwiGitHub
       Yenza inkonzo yakho yewebhu kwi-intanethi Yggdrasil
       Phakamisa eyakho indawo yokufikelela kwinethiwekhi ePhakathi

Funda kwakhona:

Akukho nto ndiyifihlayo
Yonke into obufuna ukuyazi malunga nomnikezeli we-Intanethi ophakathi, kodwa woyika ukubuza
Sthandwa, sibulala i-Intanethi

Unemibuzo? Joyina ingxoxo kwiTelegram: @medium_jikelele.

Isipho esincinci kwabo bafunda kude kube sekupheleni

Ngabasebenzisi ababhalisiweyo kuphela abanokuthatha inxaxheba kuphando. Ngena, ndiyacela.

Olunye ukuvota: kubalulekile kuthi ukuba sazi uluvo lwabo bangenayo iakhawunti epheleleyo kuHabré

• ↑

• ↓

Bali-68 abasebenzisi abavotileyo. Abasebenzisi abasi-16 abakhange.

umthombo: www.habr.com