Inguqulelo ephathekayo ye-OpenBGPD 6.7p0 ekhoyo

Abaphuhlisi be-OpenBSD ipapashiwe ukukhutshwa koshicilelo oluphathwayo lwepakethe yomzila I-OpenBGPD 6.7, enokusetyenziswa kwiindlela zokusebenza ngaphandle kwe-OpenBSD. Ukuqinisekisa ukuphatheka, iinxalenye zekhowudi ezivela kwi-OpenNTPD, i-OpenSSH kunye neeprojekthi ze-LibreSSL zisetyenzisiwe. Ukongeza kwi-OpenBSD, inkxaso yeLinux kunye neFreeBSD iyabhengezwa. I-OpenBGPD ivavanyiwe kwi-Debian 9, Ubuntu 14.04+ kunye neFreeBSD 12.

OpenBGPD iphuhliswa phantsi inkxaso Umbhalisi we-Intanethi wengingqi i-RIPE NCC, enomdla ekuziseni ukusebenza kwe-OpenBGPD ukuba ilungele ukusetyenziswa kwiiseva zomzila kwiindawo zotshintshiselwano lwe-traffic interoperator (IXP) kunye nokudala enye indlela epheleleyo kwiphakheji. INTAKA (ezinye iindlela ezivulekileyo zokuphumeza iprotocol yeBGP ziquka iiprojekthi UKUQALA, GoBGP, ExaBGP ΠΈ I-Bio-Routing).

Uphuhliso lwe-OpenBGPD lujolise ekuqinisekiseni inqanaba eliphezulu lokhuseleko kunye nokuthembeka. Ukukhusela, ukuqinisekiswa okungqongqo kokuchaneka kwazo zonke iiparameters, iindlela zokubeka esweni ukuthotyelwa kwemida ye-buffer, ukwahlulwa kwamalungelo, kunye nokunciphisa ukufikelela kwiifowuni zenkqubo kusetyenziswa. Ezinye iingenelo ziquka i-syntax efanelekileyo yolwimi lwenkcazo yoqwalaselo, ukusebenza okuphezulu kunye nokusebenza kakuhle kwememori (umzekelo, i-OpenBGPD inokusebenza kunye neetafile zomzila eziqulethe amakhulu amawaka amangenelo). Le projekthi ixhasa uninzi lwenkcazo ye-BGP 4 kwaye ihambelana neemfuno ze-RFC8212, kodwa ayizami ukwamkela ubukhulu kwaye ibonelela ikakhulu ngenkxaso yemisebenzi ethandwa kakhulu kwaye ixhaphake.

Ekukhutshweni kwe-OpenBGPD 6.7 iphawulwe olu phuculo lulandelayo:

  • Usetyenziso lwebgpctl lubonelela ngenkxaso yokuqala yemveliso yeJSON;
  • Π’ bgpd.conf kuvumelekile ukuseta ngaxeshanye IPv4 kunye needilesi ze-IPv6 kumyalelo wendawo-yedilesi kwiibhloko "zeqela";
  • Ukudityaniswa okuchanekileyo kweetheyibhile ze-ROA (Ugunyaziso lweNdlela yeMvelaphi) kunye nesimaphambili/umthombo-njengezibini zibe yinto enye enexabiso "maxlen" elide liqinisekisiwe;
  • Kongezwe ipropathi ethi "max-prefix {NUM} ngaphandle" kwi-bgpd.conf ukunciphisa inani lezimaphambili ezipapashiweyo ukunqanda ukuvuza kweetafile ezipheleleyo;
  • Kwi-bgpctl, umyalelo 'wokubonisa ummelwane' uye wandiswa ukubonisa izinto zokubala ezifunyenweyo kunye nezimaphambili ezimiselweyo, kunye nexabiso lomda we "max-prefix out";
  • Izaziso ziquka ulwazi malunga nonobangela weempazamo ezibekwe kwindlwane. Umyalelo othi "bgpctl bonisa ummelwane" unika isiphumo sesizathu semposiso yokugqibela efunyenweyo;
  • Ukwenza ngokuchanekileyo umsebenzi "wokulayisha kwakhona ngobabalo", izimaphambili eziphelelwe lixesha ziphawulwe kwitheyibhile ye-Adj-RIB-Out, egcina ulwazi malunga neendlela ezikhethwe yi-router ye-BGP yendawo ukubhengeza iindlela ezifanelekileyo kwiontanga;
  • Yongezwa isakhono sokwakha i-OpenBGPD usebenzisa ipakethe yokubhala abahlalutyi benyathi ngaphandle kwacc;
  • Yongeza "--runstatedir" ukhetho, apho unokumisela indlela eya bgpctl.sock;
  • Icociwe uqwalaselo lweskripthi ukuphucula ukuphatheka.

umthombo: opennet.ru

Yongeza izimvo