Indawo yokutshintshiselana ngetrafikhi: ukusuka kwimvelaphi ukuya kuyila eyakho i-IX

"Simise unxibelelwano lomnxeba phakathi kwethu kunye nabafana base-SRI ...", uKleinrock ... uthe kudliwano-ndlebe:
“Sichwetheze uL saza sabuza emnxebeni, “Uyayibona i-L?”
“Ewe, siyambona uYehova,” yatsho impendulo.
“Sichwetheze i-O, saza sabuza, “Uyayibona i-O.”
"Ewe, sibona i-O."
"Emva koko sachwetheza i-G, kwaye inkqubo yonakala"...

Kodwa uvukelo lwaluqalile...

Ukuqala kwe-intanethi.

Sawubona wonke umntu!

Igama lam nguAlexander, ndiyinjineli yenethiwekhi eLinxdatacenter. Kwinqaku lanamhlanje siza kuthetha ngamanqaku otshintshiselwano lwe-traffic (i-Internet Exchange Points, i-IXP): yintoni eyandulela ukubonakala kwabo, yiyiphi imisebenzi abayisombululayo kunye nendlela eyakhiwe ngayo. Kwakhona kule nqaku ndiza kubonisa umgaqo wokusebenza kwe-IXP usebenzisa i-platform ye-EVE-NG kunye ne-BIRD software router, ukuze ube nokuqonda ukuba isebenza njani "phantsi kwe-hood".

Inxalenye ethile yembali

Ukuba ujonga apha, ngoko unokubona ukuba ukukhula ngokukhawuleza kwenani leendawo zokutshintshiselana kwezithuthi kwaqala ngo-1993. Oku kungenxa yokuba uninzi lwetrafikhi yabaqhubi be-telecom ababekho ngelo xesha badlula kwinethiwekhi yomqolo yase-US. Ngoko ke, umzekelo, xa itrafikhi isuka kumqhubi waseFransi ukuya kumqhubi waseJamani, yaqala ukusuka eFransi ukuya e-USA, kwaye emva koko isuka e-USA ukuya eJamani. Inethiwekhi yomqolo kule meko isebenze njengohambo phakathi kweFransi neJamani. Nokuba i-traffic kwilizwe elinye yayidla ngokudlula hayi ngokuthe ngqo, kodwa ngothungelwano lomqolo lwabaqhubi baseMelika.

Le meko yemicimbi ayizange ichaphazele kuphela iindleko zokuhambisa i-traffic traffic, kodwa kunye nomgangatho wamajelo kunye nokulibaziseka. Inani labasebenzisi be-Intanethi linyukile, kwavela abaqhubi abatsha, umthamo wezithuthi unyukile, kwaye i-Intanethi yakhula. Abaqhubi behlabathi jikelele baqala ukuqaphela ukuba indlela enengqiqo ngakumbi yokuququzelela intsebenziswano phakathi kwabasebenzi iyafuneka. Kutheni le nto mna, umsebenzisi A, kufuneka ndihlawulele uhambo lokudlula kwelinye ilizwe ukuze ndihambise itrafikhi kumsebenzisi ongu-B, okwisitalato esilandelayo? Lo ngumbuzo abazibuza wona abaqhubi be-telecom ngelo xesha. Ke, iindawo zotshintshiselwano lwetrafikhi zaqala ukubonakala kwiindawo ezahlukeneyo zehlabathi kwiindawo zoxinaniso lwabaqhubi:

• 1994-LINX eLondon,
• 1995-DE-CIX eFrankfurt,
• 1995 - MSK-IX, eMoscow, njl.

I-Intanethi kunye neentsuku zethu

Ngokwengqiqo, uyilo lwe-Intanethi yanamhlanje luneenkqubo ezininzi ezizimeleyo (AS) kunye noqhagamshelo oluninzi phakathi kwabo, ngokwasemzimbeni nangengqiqo, emisela indlela yetrafikhi ukusuka kwi-AS ukuya kwenye.

Ii-AS zidla ngokuba ngabaqhubi be-telecom, ababoneleli be-Intanethi, ii-CDN, amaziko edatha, kunye neenkampani zamacandelo oshishino. Ii-AS ziququzelela uqhagamshelo olusengqiqweni (ukujonga) phakathi kwabo, ngesiqhelo kusetyenziswa iprotocol yeBGP.

Iisistim ezizimeleyo zilulungelelanisa njani olu qhakamshelwano lumiselwa linani lezinto:

• ngokwejografi,
• ezoqoqosho,
• ezopolitiko,
• izivumelwano kunye nomdla ofanayo phakathi kwabanini AS,
• njalo njalo.

Ngokuqinisekileyo, esi sikimu sinesakhiwo esithile kunye noluhlu lwezikhundla. Ke, abaqhubi bahlulahlulwe ngokwenqanaba le-1, inqanaba-2 kunye nenqanaba-3, kwaye ukuba abathengi bomnikezeli we-Intanethi wendawo (inqanaba-3) ngokuqhelekileyo, abasebenzisi abaqhelekileyo, ngoko, umzekelo, kwinqanaba-1 abasebenzi bomgangatho abaxumi ngabanye abasebenzi. Abaqhubi be-Tier-3 badibanisa itrafikhi yababhalisi babo, i-tier-2 telecom operators, nabo, badibanisa itrafikhi yabaqhubi be-tier-3, kunye ne-tier-1 - yonke i-intanethi ye-intanethi.

Ngokucwangcisiweyo inokumelwa ngolu hlobo:

Lo mfanekiso ubonisa ukuba i-traffic ihlanganiswe ukusuka phezulu ukuya phezulu, okt. ukusuka kubasebenzisi bokugqibela ukuya kwi-tier-1 yabaqhubi. Kukwakho utshintshiselwano oluthe tye lwetrafikhi phakathi kwee-AS eziphantse zilingane enye kwenye.

Inxalenye ebalulekileyo kwaye kwangaxeshanye ukungonakali kwesi sikimu kukubhideka okuthile konxibelelwano phakathi kweenkqubo ezizimeleyo ezibekwe kufutshane nomsebenzisi wokugqibela, ngaphakathi kwendawo yejografi. Qwalasela lo mfanekiso ungezantsi:

Makhe sicinge ukuba kwisixeko esikhulu kukho abaqhubi be-telecom aba-5, abajonga phakathi kwabo, ngenxa yesizathu esinye okanye esinye, njengoko kuboniswe ngasentla.

Ukuba umsebenzisi uPetya, oqhagamshelwe kwi-Go ISP, ufuna ukufikelela kwiseva eqhagamshelwe kumnikezeli we-ASM, ngoko i-traffic phakathi kwabo iya kunyanzeliswa ukuba idlule kwiinkqubo ezizimeleyo ezi-5. Oku kwandisa ukulibaziseka kuba inani lezixhobo zenethiwekhi apho i-traffic iya kuhamba inyuka, kunye nomthamo wetrafikhi yokuthutha kwiinkqubo ezizimeleyo phakathi kweGo kunye ne-ASM.

Ulicutha njani inani lee-ASs ezothutho ekunyanzeleke ukuba zidlule kuzo? Ilungile loo nto - indawo yokutshintshiselana ngezithuthi.

Namhlanje, ukuvela kwe-IXPs entsha kuqhutywa iimfuno ezifanayo njengasekuqaleni kwe-90-2000s, kuphela kwinqanaba elincinci, ekuphenduleni inani elikhulayo labaqhubi be-telecom, abasebenzisi kunye ne-traffic, inani elikhulayo lomxholo owenziwe ngamanethiwekhi e-CDN. kunye namaziko edatha.

Yintoni indawo yokutshintshiselana?

Indawo yokutshintshiselana nge-traffic yindawo enesiseko esikhethekileyo sothungelwano apho abathathi-nxaxheba abanomdla wokutshintshiselana kwe-traffic traffic baququzelela ukuhlangana. Abathathi-nxaxheba abaphambili bamanqaku otshintshiselwano lwezithuthi: abaqhubi be-telecom, ababoneleli be-Intanethi, ababoneleli bomxholo kunye namaziko edatha. Kwiindawo zokutshintshiselana kwezithuthi, abathathi-nxaxheba badibanisa ngokuthe ngqo omnye nomnye. Oku kukuvumela ukuba usombulule ezi ngxaki zilandelayo:

• ukunciphisa latency,
• ukunciphisa umthamo wezithuthi zokuhamba,
• lungiselela indlela phakathi kwe-AS.

Ukuqwalasela ukuba ii-IXPs zikhona kwizixeko ezininzi ezinkulu emhlabeni jikelele, konke oku kunempembelelo enenzuzo kwi-Intanethi ngokubanzi.

Ukuba le meko ingasentla kunye nePetya isombululwe kusetyenziswa i-IXP, iya kuvela into enje:

Isebenza njani indawo yokutshintshiselana ngezithuthi?

Njengomthetho, i-IXP yi-AS eyahlukileyo enebhloko yayo yeedilesi zoluntu ze-IPv4/IPv6.

Inethiwekhi ye-IXP isoloko iqulathe i-domain ye-L2 eqhubekayo. Ngamanye amaxesha le yiVLAN ebamba bonke abathengi be-IXP. Xa kuziwa kumakhulu, i-IXPs esasazwe ngokwejografi, ubugcisa obufana neMPLS, VXLAN, njl.

Izinto ze-IXP

• SKS. Akukho nto ingaqhelekanga apha: ii-racks, i-optical cross-connects, i-patch panels.
• Iiswitshi – isiseko se-IXP. Indawo yokutshintsha indawo yokungena kwinethiwekhi ye-IXP. Izitshintshi ziphinda zenze inxalenye yemisebenzi yokhuseleko - zihluza i-traffic ye-junk engafanele ibekho kwinethiwekhi ye-IXP. Njengomthetho, ukutshintsha kukhethwe ngokusekelwe kwiimfuno zokusebenza - ukuthembeka, ukuxhaswa kwesantya se-port, iimpawu zokhuseleko, inkxaso ye-sFlow, njl.
• Iseva yendlela (RS) -inxalenye ebalulekileyo kunye neyimfuneko kuyo nayiphi na indawo yotshintshiselwano lwangoku. Umgaqo wokusebenza ufana kakhulu nomboniso wendlela kwi-iBGP okanye i-router ekhethiweyo kwi-OSPF kwaye isombulula iingxaki ezifanayo. Njengoko inani labathathi-nxaxheba kwindawo yokutshintshiselana kwezithuthi likhula, inani leeseshoni ze-BGP ukuba umthathi-nxaxheba ngamnye kufuneka axhase ukunyuka, oko kukuthi. oku kukhumbuza i-classic-mesh topology yakudala kwi-IBGP. I-RS isombulula ingxaki ngale ndlela ilandelayo: iseka iseshoni ye-BGP kunye nomthathi-nxaxheba ngamnye onomdla we-IXP, kwaye loo mthathi-nxaxheba uba ngumxhasi we-RS. Ukufumana uhlaziyo BGP ukusuka kwenye abathengi bayo, RS ithumela olu hlaziyo kubo bonke abanye abaxumi bayo, kunjalo, ngaphandle kokuba olu hlaziyo lufunyenwe. Ke, i-RS iyayiphelisa imfuneko yokuseka umnatha ogcweleyo phakathi kwawo onke amalungu e-IXP kwaye isombulule ngobuchule ingxaki ye-scalability. Kufanelekile ukuqaphela ukuba umncedisi wendlela uhambisa ngokuphandle iindlela ukusuka kwenye AS ukuya kwenye ngaphandle kokwenza utshintsho kwiimpawu ezisasazwa yi-BGP, umzekelo, ayifaki inani kwi-AS yayo kwindlela ye-AS. Kwakhona kwi-RS kukho ukuhluzwa okusisiseko kweendlela: umzekelo, i-RS ayamkeli iinethiwekhi zeMartians kunye nezimaphambili ze-IXP ngokwayo.

  Umzila wesoftware yemithombo evulekileyo, INYONI (i-daemon ye-intanethi yeentaka), isoloko isetyenziswa njengesisombululo somncedisi wendlela. Into entle ngayo kukuba isimahla, isasazwa ngokukhawuleza kunikezelo oluninzi lweLinux, inesixhobo esiguquguqukayo sokuseta imigaqo-nkqubo yendlela/yokucoca, kwaye ayifuni kwizixhobo zekhompyuter. Kwakhona, i-hardware / i-router virtual evela kwi-Cisco, iJuniper, njl njl. inokukhethwa njenge-RS.

• Khu seleko. Ekubeni inethiwekhi ye-IXP igxininise yenani elikhulu le-AS, umgaqo-nkqubo wokhuseleko omele ulandelwe ngabo bonke abathathi-nxaxheba kufuneka ubhalwe kakuhle. Ngokubanzi, zonke iindlela ezifanayo ezisebenzayo xa kumiselwa udibaniso lwe-BGP phakathi koontanga ababini abahlukeneyo be-BGP ngaphandle kwe-IXP basebenza apha, kunye nezinye iimpawu zokhuseleko ezongezelelweyo.

  Ngokomzekelo, yinto efanelekileyo yokuvumela i-traffic kuphela kwidilesi ethile ye-mac yomthathi-nxaxheba we-IXP, ekuxoxwe ngayo kwangaphambili. Ukwala i-traffic ngamabala e-ethertype ngaphandle kwe-0x0800(IPv4), 0x08dd(IPv6), 0x0806(ARP); oku kwenziwa ukuze kuhluzwe itrafikhi engeyoyakwi BGP peering. Iinkqubo ezifana ne-GTSM, RPKI, njl.njl nazo zingasetyenziswa.

Mhlawumbi ezi zingasentla zizinto eziphambili kuyo nayiphi na i-IXP, nokuba isikali. Ewe kunjalo, ii-IXPs ezinkulu zinokuba neetekhnoloji ezongezelelweyo kunye nezisombululo endaweni.
Kwenzeka ukuba i-IXP ikwabonelela abathathi-nxaxheba ngeenkonzo ezongezelelweyo:

• ibekwe kwiseva ye-IXP TLD DNS,
• faka iiseva ze-NTP zehardware, ukuvumela abathathi-nxaxheba ukuba badibanise ngokuchanekileyo ixesha,
• bonelela ngokhuseleko kuhlaselo lweDDoS, njl.

ukuba isebenza njani

Makhe sijonge umgaqo wokusebenza kwendawo yokutshintshiselana nge-traffic usebenzisa umzekelo we-IXP elula, imodeli usebenzisa i-EVE-NG, kwaye emva koko uqwalasele ukuseta okusisiseko kwe-router ye-BIRD software. Ukwenza lula umzobo, siya kushiya izinto ezibalulekileyo ezifana nokuphindaphinda kunye nokunyamezela iimpazamo.

I-topology yenethiwekhi iboniswe kumzobo ongezantsi.

Masicinge ukuba silawula indawo encinci yotshintshiselwano kwaye sinika olu khetho lulandelayo lokujonga:

• ukujonga uluntu,
• ukujonga ngasese,
• ukujonga ngeseva yendlela.

Inombolo yethu ye-AS yi-555, siphethe ibhloko yeedilesi ze-IPv4 - 50.50.50.0/24, apho sikhupha iidilesi ze-IP kwabo bafuna ukuxhuma kwinethiwekhi yethu.

50.50.50.254 - Idilesi ye-IP iqwalaselwe kwi-interface yomncedisi wendlela, kunye nabathengi be-IP baya kuseka iseshoni ye-BGP kwimeko yokujonga nge-RS.

Kwakhona, ngokujonga nge-RS, siye saqulunqa umgaqo-nkqubo olula womzila osekwe kuluntu lwe-BGP, ovumela abathathi-nxaxheba be-IXP ukuba balawule kubani kwaye zeziphi iindlela zokuthumela:

BGP uluntu
inkcazelo

LOCAL_AS:PEER_AS
Thumela izimaphambili kuphela ku PEER_AS

LOCAL_AS:IXP_AS
Dlulisela izimaphambili kubo bonke abathathi-nxaxheba be-IXP

Abathengi be-3 bafuna ukuqhagamshela kwi-IXP yethu kunye nokutshintshiselana ngetrafikhi; Masithi aba ngababoneleli be-Intanethi. Bonke bafuna ukucwangcisa ukujonga ngeseva yendlela. Apha ngezantsi ngumzobo oneeparamitha zoqhagamshelwano lomxhasi:

Umthengi
Inombolo ye-AS yomthengi
Umxhasi upapashe izimaphambili
Idilesi ye-IP ekhutshelwe umxhasi ukuze aqhagamshele kwi-IXP

I-ISP #1
NJENGE-100
1.1.0.0/16
50.50.50.10/24

I-ISP #2
NJENGE-200
2.2.0.0/16
50.50.50.20/24

I-ISP #3
NJENGE-300
3.3.0.0/16
50.50.50.30/24

Umiselo olusisiseko lwe-BGP kumzila womxhasi:

router bgp 100
 no bgp enforce-first-as
 bgp log-neighbor-changes
 neighbor 50.50.50.254 remote-as 555
address-family ipv4
  network 1.1.0.0 mask 255.255.0.0
  neighbor 50.50.50.254 activate
  neighbor 50.50.50.254 send-community both
  neighbor 50.50.50.254 soft-reconfiguration inbound
  neighbor 50.50.50.254 route-map ixp-out out
 exit-address-family

ip prefix-list as100-prefixes seq 5 permit 1.1.0.0/16
route-map bgp-out permit 10
 match ip address prefix-list as100-prefixes
 set community 555:555

Kufanelekile ukuqaphela i-bgp yokunyanzeliswa-kuqala-njengesetingi apha. Ngokungagqibekanga, i-BGP ifuna ukuba indlela yohlaziyo olufunyenweyo lwe-BGP luqulathe njengenombolo ye-bgp yentanga apho uhlaziyo lufunyenwe. Kodwa ekubeni umncedisi wendlela engenzi utshintsho kwindlela yendlela, inani layo aliyi kuba kwindlela kunye nohlaziyo luya kulahlwa. Olu seto lusetyenziselwa ukwenza i-router ingawunaki lo mgaqo.

Siyabona kwakhona ukuba umxhasi usete uluntu lwe-bgp 555:555 kwesi simaphambili, esithetha ngomgaqo-nkqubo wethu ukuba umxhasi ufuna ukubhengeza le prefix kubo bonke abanye abathathi-nxaxheba.

Kwezinye iirouter zabathengi, izicwangciso ziya kufana, ngaphandle kweeparamitha zabo ezizodwa.

Umzekelo woqwalaselo lweNYONI:

define ixp_as = 555;
define ixp_prefixes = [ 50.50.50.0/24+ ];

template bgp RS_CLIENT {
  local as ixp_as;
  rs client;
}

Oku kulandelayo kuchaza isihluzo esingazamkeliyo izimaphambili ze-martians, kunye nezimaphambili ze-IXP ngokwayo:

function catch_martians_and_ixp()
prefix set martians;
prefix set ixp_prefixes;
{
  martians = [ 
  0.0.0.0/8+,
  10.0.0.0/8+,
  100.64.0.0/10+,
  127.0.0.0/8+,
  169.254.0.0/16+,
  172.16.0.0/12+,
  192.0.0.0/24+,
  192.0.2.0/24+,
  192.168.0.0/16+,
  198.18.0.0/15+,
  198.51.100.0/24+,
  203.0.113.0/24+,
  224.0.0.0/4+,
  240.0.0.0/4+ ];

  if net ~ martians || net ~ ixp_prefixes then return false;

  return true;
}

Lo msebenzi uphumeza umgaqo-nkqubo womzila esiwuchaze ngaphambili.

function bgp_ixp_policy(int peer_as)
{
  if (ixp_as, ixp_as) ~ bgp_community then return true;
  if (ixp_as, peer_as) ~ bgp_community then return true;

  return false;
}

filter reject_martians_and_ixp
{
  if catch_martians_and_ixp() then reject;
  if ( net ~ [0.0.0.0/0{25,32} ] ) then {
    reject;
  }
  accept;


}

Simisela i-peering, sebenzisa izihluzi ezifanelekileyo kunye nemigaqo-nkqubo.

protocol as_100 from RS_CLIENT {
  neighbor 50.50.50.10 as 100;
  ipv4 {
    export where bgp_ixp_policy(100);
    import filter reject_martians_and_ixp;
  }
}

protocol as_200 from RS_CLIENT {
  neighbor 50.50.50.20 as 200;
  ipv4 {
    export where bgp_ixp_policy(200);
    import filter reject_martians_and_ixp;
  }
}

protocol as_300 from RS_CLIENT {
  neighbor 50.50.50.30 as 300;
  ipv4 {
    export where bgp_ixp_policy(300);
    import filter reject_martians_and_ixp;
  }
}

Kuyafaneleka ukuba uqaphele ukuba kumncedisi wendlela kuyindlela efanelekileyo yokubeka iindlela ezivela kwiontanga ezahlukeneyo kwii-RIB ezahlukeneyo. I-BIRD ikuvumela ukuba wenze oku. Kumzekelo wethu, ukwenza lula, lonke uhlaziyo olufunyenwe kubo bonke abathengi longezwa kwi-RIB enye eqhelekileyo.

Ke, masijonge into esinayo.

Kumncedisi wendlela sibona ukuba iseshoni ye-BGP iye yasekwa kunye nabathengi abathathu:

Siyabona ukuba sifumana izimaphambili kubo bonke abathengi:

Kwi-router njenge-100, siyabona ukuba kukho iseshoni enye ye-BGP kunye nomncedisi wendlela, sifumana izimaphambili ezivela kuzo zombini njenge-200 kunye ne-300, ngelixa iimpawu ze-BGP azitshintshanga, njengokungathi ukujonga phakathi kwabaxhasi kuqhutywe ngokuthe ngqo:

Ke, siyabona ukuba ubukho bomncedisi wendlela bulula kakhulu umbutho wokujonga kwi-IXP.

Ndiyathemba ukuba lo mboniso uncede ukuba uqonde ngcono indlela i-IXPs esebenza ngayo kunye nendlela umncedisi wendlela osebenza ngayo kwi-IXP.

Linxdatacenter IX

Kwi-Linxdatacenter, sakha eyethu i-IXP esekelwe kwisiseko sokunyamezela i-faults ye-2 switch kunye ne-2 iiseva zendlela. I-IXP yethu ngoku isebenza kwimodi yokuvavanya, kwaye simema wonke umntu ukuba axhume kwi-Linxdatacenter IX kwaye athathe inxaxheba ekuvavanyeni. Xa uqhagamshelwe, uya kubonelelwa ngezibuko eline-bandwidth ye-1 Gbit/s, ukukwazi ukujonga kwiiseva zethu zendlela, kunye nokufikelela kwiakhawunti yakho yobuqu ye-IX portal, ekhoyo ix.linxdatacenter.com.

Bhala kumagqabantshintshi okanye kwimiyalezo yabucala ukuze ufumane ukufikelela kuvavanyo.

isiphelo

Iindawo zokutshintshiselana ngezithuthi zavela ekuqaleni kwe-Intanethi njengesixhobo sokusombulula umba wokuhamba kwetrafikhi phakathi kwabaqhubi be-telecom. Ngoku, ngokuza kweenkonzo ezintsha zehlabathi kunye nokwanda kwenani le-CDN ye-traffic traffic, iindawo zokutshintshiselana ziyaqhubeka nokwandisa ukusebenza kwenethiwekhi yehlabathi. Ukunyuka kwenani le-IXPs kwihlabathi lixhamla zombini umsebenzisi wokugqibela wenkonzo kunye nabaqhubi be-telecom, abaqhubi bomxholo, njl. Kubathathi-nxaxheba be-IXP, inzuzo ibonakaliswe ekunciphiseni iindleko zokulungelelanisa i-peering yangaphandle, ukunciphisa inani le-traffic apho abaqhubi bezinga eliphezulu kufuneka bahlawule, ukulungiswa kwendlela, kunye nokukwazi ukuba ne-interface echanekileyo kunye nabaqhubi bomxholo.

amakhonkco aluncedo

• Jonga imephu yendawo yeendawo zokutshintshiselana ngezithuthi: www.internetexchangemap.com
• Jonga iinkcukacha-manani kwi-BGP yokubona, kuquka ubukho kwi-IXP: www.peeringdb.com

umthombo: www.habr.com