ื ื, ืึธืืงืื, ืืืขืื "ืืื ืืขืืื" ืืื ืึท ืืืืืข. ืืื, "ืืื ืืขืืืขื ืืืืืืช ืฆื ืงืึธืืืืืืกืืืจื ืืื."
ืืื ืืืจ ืึทืืข ืืืืกื, ืืื ื ืืคืจืื 16, 2018, Roskomnadzor ืืื ืืืึทืงืื ื ืึทืงืกืขืก ืฆื ืจืขืกืืจืกื ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ ืืื ืืึธืจ ืืจืืื ืกืืจืึธืงืขืก, ืึทืืื ื ืฆื ืื "ืื ืืคืืขื ืจืขืืืกืืจืืจื ืคืื ืคืขืื ื ืขืืขื, ืืืึทื ืื ืืขืงืกืื ืคืื ืืืืืืขื ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ ืืื ื ืขืฅ ืึทืืจืขืกืขืก ืืืึธืก ืืึธืื ืืืขื ืืืคืืฆืืจื ืืืืืืขื. ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ," ืืื ืืื ืคึฟืึธืจืืึทืฆืืข ืืืึธืก ืคืึทืจืฉืคึผืจืืืืื ื ืืื ืคึผืจืึธืืืืืึทืืึทื ืืื ืื ืจืืกืืฉืข ืคืขืืขืจืืืฉืึทื" (ืืื ืืขื ืืขืงืกื - ื ืึธืจ ืึท ืจืขืืืกืืจืืจื) ืืืจื /10 ืืื. ืืื ืึท ืจืขืืืืืึทื, ืืืจืืขืจืก ืคืื ืื ืจืืกืืฉืข ืคืขืืขืจืืืฉืึทื ืืื ืืขืฉืขืคืื ืืขื ืขื ืฆืึธืจืขืก, ืืืืื ืคืึทืจืคืึทืื ืฆืืืจืื ืฆื ืื ืืึธืจ ืืขืืึทื ืจืขืกืืจืกื ืืื ืืึทืจืคึฟื.
ื ืืืืขื ืืืืก ืืื ืืื ืืขืืืื ืืื ืื ืงืืืขื ืืืจื ืฆื ืืืื ืข ืคืื โโืื ืืจืืืงืืขื ืืืืฃ Habrรฉ ืื ืืื ืืื ืืจืืื ืฆื ืืขืืคื ืงืจืื ืืช ืืื ืืืืคืฉืืขืื ื ืืืืคึผืึทืก ืกืืขืืข, ืืขื ืขื ืฆื ืืืจ ืืขืงืืืขื ืขืืืืืข ืืขื ืืฉื ืืขืื ืืืขืืืข ืืืืฃ. ืืืขื ืึทืืฅ ืืขืืจืืขื ืคึฟืึทืจ ืืื, ืืืื ืขืจ ืคืื ืืื ืจืขืงืึทืืขื ืืื ืฆื ืืึทืฉืจืืึทืื ืื ืืขืื ืืง ืืื ืึทื ืึทืจืืืงื. ื ืึธื ืขืืืขืืข ืืขืืึทื ืง, ืืื ืืึทืฉืืึธืกื ืฆื ืืจืขืื ืืืื ืฉืืืืงืืึทื ืืืืฃ ืืขื ืคึผืืึทืฅ ืืื ืคึผืจืืืืจื ืคึฟืึทืจ ืึทืืึธื ืฆื ืฉืจืืึทืื ืขืคึผืขืก ืื ืืขืจืืืืืื ืฆืืืืฉื ืึท ืคึผืจืืืขืงื ืืื ืึท ืคืึทืกืขืืึธืึธืง ืคึผืึธืกืื, ื.ื. habrapost. ืืขืจ ืจืขืืืืืึทื ืืื ืืื ืคืจืึธื ื ืคืื ืืืจ.
ืึธืคึผืืืืงืขื ืื ื
ืืื ื ืขืก ืืื ื ืืฉื ืืืืขืจ ืืขืืึทื ืฆื ืึทืจืืืกืืขืื ืืืขืื ืฆื ืืืืคึผืึทืก ืืืึทืงืื ื ืึทืงืกืขืก ืฆื ืืื ืคึฟืึธืจืืึทืฆืืข ืคึผืจืึธืืืืืึทืืึทื ืืืืฃ ืื ืืขืจืืืึธืจืืข ืคืื โโืื ืจืืกืืฉืข ืคืขืืขืจืืืฉืึทื, ืืขืจ ืฆืื ืคืื ืืขื ืึทืจืืืงื ืืืขื ืืืื ืฆื ืจืขืื ืืืขืื ืึท ืืขืืึธื ืืืึธืก ืึทืืึทืื ืืืจ ืฆื ืึธืืึทืืืื ืึทืงืกืขืก ืฆื ืจืขืกืืจืกื ืืืึธืก ืืขื ืขื ืขืจืืืืื ืืืืฃ ืื ืืขืจืืืึธืจืืข ืคืื โโืื ืจืืกืืฉืข ืคืขืืขืจืืืฉืึทื, ืึธืืขืจ ืจืขืื ืฆื ืขืืขืฆืขืจ ืึทื ืืขืจืฉ ืก ืึทืงืฉืึทื ื ืืขื ืขื ื ืืฉื ืืืืึทื ืฆืืืจืืืืขื ืืืจื ืืืื ืฉืคึผืืึทืืขืจ. ืืื ืึทืงืกืขืก ืฆื ืื ืืขืจืข ืจืขืกืืจืกื ืืืงืืืขื ืืื ืึท ืจืขืืืืืึทื ืคืื ืึทืงืฉืึทื ื ืคืื ืืขื ืึทืจืืืงื ืืื ืึท ื ืขืืขื ืืืึทื ืืืืจืงืื ื ืืื ืืื ืืื ืงืืื ืืืขื ืืขืจ ืฆืื ืคืื ืืขื ืึทืจืืืงื.
ืืืื, ืืื ื ืืื ืืื ืืคึฟืจื ืึท ื ืขืฅ ืึทืจืืืืขืงื ืืืจื ืคืึทื, ืคืึทื ืืื ืืขืื ืืจื, ืคึผืจืึธืืจืึทืืืื ื ืืื ืืื ืืงืก ืืขื ืขื ื ืืฉื ืืืื ืฉืืึทืจืง ืคืื ืงืื. ืืขืจืืืขืจ, ืคืื ืงืืจืก, ืกืงืจืืคึผืก ืงืขื ืขื ืืืื ืืขืฉืจืืื ืืขืกืขืจ, ืืืืขืจืืืื ืืฉืื ืืื VPS ืงืขื ืขื ืืืื ืืืคึผืขืจ ืืืืก, ืืื"ื ื. ืืืื ืคึฟืืจืืืืื ืืืขื ืืืื ืื ืืขื ืืืขื ืืื ืืื ืงืืืจืงืืื, ืืืื ืืื ืืขื ืขื ืืขื ืื ืืขืืึทื - ืืื ืืืขื ืืืื ืฆืืคืจืืื ืฆื ืืืืื ืืื ืฆื ืื ืืขืงืกื ืคืื ืืขื ืึทืจืืืงื.
ืื; ืืจ
ืืืจ ืึธืืึทืืืื ืึทืงืกืขืก ืฆื ืจืขืกืืจืกื ืืืจื ืืืื ืืืืืกืืื ื ืืื ืขื ื ืืฆื ืึท ืงืึธืคึผืืข ืคืื โโโโืื ืจืขืืืกืืจื ืืื ืื BGP ืคึผืจืึธืืึธืงืึธื. ืืขืจ ืฆืื ืืื ืฆื ืืึทืืืึทืืืงื ืึทืืข ืคืึทืจืงืขืจ ืึทืืจืขืกื ืฆื ืืคืืขืฉืืขืื ืจืขืกืืจืกื ืืื ืืขื ืืื ืขื. ืืื ืืืื ืืขืจืงืืขืจืื ืืขื, ืืขืจืกืื ืก ืฉืจืื-ืืืจื-ืฉืจืื ืื ืกืืจืึทืงืฉืึทื ื.
ืืืึธืก ืืึธื ืืืจ ืืึทืจืคึฟื ืคึฟืึทืจ ืืขื?
ืฆืื ืืึทืืืืขืจื, ืืขื ืคึผืึธืกืื ืืื ื ืืฉื ืคึฟืึทืจ ืึทืืขืืขื. ืืื ืกืืจ ืฆื ื ืืฆื ืืขื ืืขืื ืืง, ืืืจ ืืึทืจืคึฟื ืฆื ืฉืืขืื ืขืืืขืืข ืืกืืืืช ืฆืืืึทืืขื:
- ืืืจ ืืืื ืืึธืื ืึท ืืื ืืงืก ืกืขืจืืืขืจ ืขืจืืขืฅ ืึทืจืืืก ืื ืืืึทืงืื ื ืคืขืื. ืึธืืขืจ ืืื ืืื ืืกืืขืจ ืื ืคืึทืจืืึทื ื ืฆื ืืึธืื ืึทืืึท ืึท ืกืขืจืืืขืจ - ืฆืื ืืืืง ืขืก ืงืึธืก ืืืฆื ืคืื $ 9 / ืืึธืจ, ืืื ืขืคืฉืขืจ ืืืืื ืืงืขืจ. ืืขืจ ืืืคึฟื ืืื ืืืื ืคึผืึทืกืืง ืืืื ืืืจ ืืึธืื ืึท ืืึทืืื ืืขืจ VPN ืืื ืขื, ืืขืจ ืกืขืจืืืขืจ ืงืขื ืขื ืืืื ืืืื ืืื ืื ืืืึทืงืื ื ืคืขืื.
- ืืืื ืจืึทืืืขืจ ืืึธื ืืืื ืงืืื ืืขื ืื ืฆื ืงืขื ืขื
- ืงืืื ืืืคึผื ืงืืืขื ื ืืืจ ืืื (ืืื ืืขืกืขืจ ืืืขืื OpenVPN, ืึธืืขืจ ืขืก ืงืขื ืืืื PPTP, L2TP, GRE+IPSec ืึธืืขืจ ืงืืื ืื ืืขืจืข ืึธืคึผืฆืืข ืืืึธืก ืงืจืืืืฅ ืึท ืืื ืขื ืฆืืืื ื);
- BGPv4 ืคึผืจืึธืืึธืงืึธื. ืืืึธืก ืืืื ืึทื ืคึฟืึทืจ SOHO ืขืก ืงืขื ืืืื ืืืงืจืึธืืืง ืึธืืขืจ ืงืืื ืจืึทืืืขืจ ืืื OpenWRT/LEDE/ืขื ืืขื ืื ืื ืคืืจืืืืึทืจืข ืืืึธืก ืึทืืึทืื ืืืจ ืฆื ืื ืกืืึทืืืจื ืงืึทืืืึทืืึท ืึธืืขืจ ืืืจื. ื ืืฆื ืึท ืคึผืืกื ืจืึทืืืขืจ ืืื ืืืื ื ืืฉื ืคึผืจืึธืืืืืึทืืึทื. ืืื ืื ืคืึทื ืคืื ืึท ืคืึทืจื ืขืืื ื, ืงืืง ืคึฟืึทืจ BGP ืฉืืืฆื ืืื ืื ืืึทืงืืืืขื ืืืืฉืึทื ืคึฟืึทืจ ืืืื ืืจืขื ืขืฅ ืจืึทืืืขืจ.
- ืืืจ ืืึธื ืืึธืื ืึท ืคืืจืฉืืื ื ืคืื ืืื ืืงืก ืืึทื ืืฅ ืืื ื ืขืืืืึธืจืงืื ื ืืขืงื ืึทืืึทืืืฉืื, ืึทืจืืึทื ืืขืจืขืื ื ืื BGP ืคึผืจืึธืืึธืงืึธื. ืึธืืขืจ ืืคึผืืืช ืืืืื ืฆื ืืึทืงืืืขื ืึทืืึท ืึท ืืขืืึทื ืง. ืืื ื ืืื ืืื ื ืืฉื ืืจืืื ืฆื ืึทืจืืื ืขืืขื ืื ืืืืขื ืกืืื ืืึธืก ืืึธื, ืืืจ ืืืขื ืืึธืื ืฆื ืืขืจื ืขื ืขืืืขืืข ืึทืกืคึผืขืงืฅ ืืืึธืก ืืขื ืขื ืื ืืงืึทืืคึผืจืึทืืขื ืกืืืึทื ืคึฟืึทืจ ืืืจ ืืืืฃ ืืืื ืืืืื. ืึธืืขืจ, ืืื ืืืขื, ืคืื ืงืืจืก, ืขื ืืคึฟืขืจื ืกืคึผืขืฆืืคืืฉ ืคืจืืืขืก ืืื ืื ืืึทืืขืจืงืื ืืขื ืืื ืืื ืืื ืึทื ืืืืงืื ืฆื ืืืื ืืขืจ ืืืืื ืืืื ืขืจ ืืืึธืก ืขื ืืคึฟืขืจื, ืึทืืื ืืึธื ื ืื ืงืืืขื ืงืืขื ืฆื ืคืจืขืื.
ืืืึธืก ืืื ืืขื ืืฆื ืืื ืืขื ืืืึทืฉืคึผืื
- ื ืงืึธืคึผืืข ืคืื โโืื ืจืขืืืกืืจืืจื - ืคืื
- ืจืืืื ื ืืื ืกื -
- ืจืึทืืืขืจ -
- ืืจืืขืื ืคืึธืืืขืจืก - ืืื ื ืืืจ ืึทืจืืขืื ืืื ืืืึธืจืฆื, ืจืืึฟ ืคืื ืึทืืฅ ืืืขื ืืืื ืืืื ืืื ืืขืจ ืืืึธืจืฆื ืก ืืืื ืืขืงืข. ืจืขืกืคึผืขืงืืืืืื:
- /root/blacklist - ืืจืืขืื ืืขืงืข ืืื ืื ืืึทืืืื ื ืฉืจืืคื
- /root/zi - ืงืึธืคึผืืข ืคืื โโโโืื ืจืขืืืกืืจื ืคึฟืื ืืืืืื
- /etc/bird - ื ืึธืจืืึทื ืืขืงืข ืคึฟืึทืจ ืคืืืื ืกืขืจืืืืก ืกืขืืืื ืืก
- ืื ืคืื ืืจืืืกื ืืืง IP ืึทืืจืขืก ืคืื ืื ืืืคึผืก ืืื ืื ืจืืืื ื ืกืขืจืืืขืจ ืืื ืื ืืื ืขื ืืขืจืืึทื ืืืฉืึทื ืคืื ื ืืื 194.165.22.146, ASN 64998; ืคืื ืืจืืืกื ืืืง IP ืึทืืจืขืก ืคืื ืื ืจืึทืืืขืจ - 81.177.103.94, ASN 64999
- ืื IP ืึทืืจืขืกืขืก ืืื ืืขื ืืื ืขื ืืขื ืขื ืจืืกืคึผืขืงืืืืืื 172.30.1.1 ืืื 172.30.1.2.
ืคืื ืงืืจืก, ืืืจ ืงืขื ืขื ื ืืฆื ืงืืื ืื ืืขืจืข ืจืึธืืืขืจืก, ืึธืคึผืขืจืืืืื ื ืกืืกืืขืืขื ืืื ืืืืืืืืืจื ืคึผืจืึธืืืงืื, ืึทืืืฉืึทืกืืื ืื ืืืืืื ื ืฆื ืืืืขืจ ืืึธืืืง.
ืืขืงืืฆืขืจ - ืื ืืึธืืืง ืคืื ืื ืืืืืื ื
- ืคึผืจืขืคึผืึทืจืึทืืึธืจื ืึทืงืืืืืืืขืื
- ืืึทืงืืืขื ืึท VPS
- ืจืืืืื ื ืึท ืืื ืขื ืคืื ืื ืจืึทืืืขืจ ืฆื ืื VPS
- ืืืจ ืืึทืงืืืขื ืืื ืงืขืกืืืืขืจ ืืขืจืืืึทื ืืืงื ืึท ืงืึธืคึผืืข ืคืื โโืื ืจืขืืืกืืจื
- ืื ืกืืึธืืื ื ืืื ืงืึทื ืคืืืืขืจ ืื ืจืืืื ื ืืื ืกื
- ืืืจ ืืึทืื ืึท ืจืฉืืื ืคืื ืกืืึทืืืง ืจืืฅ ืคึฟืึทืจ ืื ืจืืืื ื ืืื ืกื ืืืืืจื ืืืืฃ ืื ืจืขืืืกืืจื
- ืืืจ ืคืึทืจืืื ืื ืื ืจืึทืืืขืจ ืฆื ืื ืืื ืกื ืืื ืงืึทื ืคืืืืขืจ ืฉืืงื ืึทืืข ืคืึทืจืงืขืจ ืืืจื ืืขื ืืื ืขื.
ืื ืคืึทืงืืืฉ ืืืืืื ื
ืคึผืจืขืคึผืึทืจืึทืืึธืจื ืึทืงืืืืืืืขืื
ืขืก ืืขื ืขื ืคืืืข ืืึทืืื ืื ืืก ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ ืืืึธืก ืฆืืฉืืขืื VPS ืคึฟืึทืจ ืืึธืจ ืืืืึทื ืคึผืจืืื. ืืื ืืืฆื ืืื ืืึธืื ืืขืคึฟืื ืขื ืืื ืืื ื ืืฆื ืื ืึธืคึผืฆืืข ืคึฟืึทืจ $ 9 / ืืึธืจ, ืึธืืขืจ ืืคืืื ืืืื ืืืจ ืืึธื ื ืื ืึทืจื ืฆื ืคืื, ืขืก ืืขื ืขื ืคืืืข ืึธืคึผืฆืืขืก ืคึฟืึทืจ 1E / ืืืืฉ ืืืืฃ ืืขืืขืจ ืืืื ืงื. ืื ืงืฉืื ืคืื ืืฉืืืื ื ืึท VPS ืืืื ืืืืึทื ืืืืึทืืขืจ ืคืื ืืขื ืคืึทืจื ืขื ืคืื ืืขื ืึทืจืืืงื, ืึทืืื ืืืื ืขืืขืฆืขืจ ืงืขื ื ืืฉื ืคึฟืึทืจืฉืืืื ืขืคึผืขืก ืืืขืื ืืขื, ืคืจืขืื ืืื ืื ืืึทืืขืจืงืื ืืขื.
ืืืื ืืืจ ื ืืฆื ืึท VPS ื ืื ืืืืื ืคึฟืึทืจ ืื ืจืืืื ื ืืื ืกื, ืึธืืขืจ ืืืื ืฆื ืคืึทืจืขื ืืืงื ืึท ืืื ืขื ืืืืฃ ืขืก, ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืคึผื ืืขื ืืื ืขื ืืื, ืึผืืขื ืืืืขืจ, ืงืึทื ืคืืืืขืจ NAT ืคึฟืึทืจ ืขืก. ืขืก ืืขื ืขื ืึท ืืจืืืก ื ืืืขืจ ืคืื ืื ืกืืจืึทืงืฉืึทื ื ืืืืฃ ืื ืึทืงืฉืึทื ื ืืืืฃ ืื ืืื ืืขืจื ืขื, ืืื ืืืขื ื ืืฉื ืืืืขืจืืืจื ืืื ืืึธ. ืื ืืืืคึผื ืคืึธืืขืจืื ื ืคึฟืึทืจ ืึทืืึท ืึท ืืื ืขื ืืื ืึทื ืขืก ืืืื ืฉืึทืคึฟื ืึท ืืึทืืื ืืขืจ ืฆืืืื ื ืืืืฃ ืืืื ืจืึทืืืขืจ ืืืึธืก ืฉืืืฆื ืืขื ืืื ืขื ืฆื ืื VPS. ืจืืึฟ ืืขืืืืื ื ืืืคึผื ืืขืงื ืึทืืึทืืืฉืื ืืจืขืคื ืืขื ืคืึธืืขืจืื ื - ืคึฟืึทืจ ืืืึทืฉืคึผืื, OpenVPN ืืื ืืื ืืึธืืข ืืื ืืื ืฅ.
ืืึทืงืืืขื ืึท ืงืึธืคึผืืข ืคืื โโืื ืจืขืืืกืืจื
ืืื Jabrail ืืื ืืขืืืื, "ืขืจ ืืืืก ืืื ืืขืจื ืืื ืื ืืืขื ืืขืืคึฟื ืืื ืื." ืืืืืืื ืืขืจ ืจืงื ืืืื ื ืจืขืืืกืืจ ืคืื ืคืืจืืืื ืืืืืขื, ืืืืื ืืขืืืขื ื ืืื ื ื ืืฉื ืฆื ื ืืฆื ืืขื ืจืขืืืกืืจ ืฆื ืืืืื ืืื ืืขืจ ืคืจืืืืขื. ืืืจ ืืืขืื ืืึทืงืืืขื ืึท ืงืึธืคึผืืข ืคืื โโโโืื ืจืขืืืกืืจื ืคึฟืื ืืืืืื.
ืืืจ ืืืื ืฆื ืืืื ืืื ืืงืก ืกืขืจืืืขืจ, ืคืึทืื ืืื ืื ืืืึธืจืฆื ืงืึธื ืืขืงืกื (sudo su โ) ืืื ืื ืกืืึทืืืจื ืืื ืืืื ืขืก ืืื ื ืืฉื ืฉืืื ืืื ืกืืึทืืืจื.
apt install gitืืืื ืฆื ืืืื ืืืื ืืืขืืืืืึทืืขืจ ืืื ืฆืืขื ืึท ืงืึธืคึผืืข ืคืื โโโโืื ืจืขืืืกืืจื.
cd ~ && git clone --depth=1 https://github.com/zapret-info/z-i ืืืจ ืฉืืขืื ืึทืจืืืฃ ืึท ืงืจืึธื ืืขืจืืืึทื ืืืงื (ืืื ืืึธื ืืึธืก ืึทืืึธื ืืขืืขืจ 20 ืืื ืื, ืึธืืขืจ ืืืจ ืงืขื ืขื ืงืืืึทืื ืงืืื ืื ืืขืจืืืึทื ืืืึธืก ืืืจ ืืื ืืขืจืขืกื). ืฆื ืืึธื ืืึธืก, ืืืจ ืึธื ืืืืื crontab -e ืืื ืืืื ืฆื ืื ืคืืืืขื ืืข ืฉืืจื:
*/20 * * * * cd ~/z-i && git pull && git gcืืืจ ืคืึทืจืืื ืื ืึท ืงืจืืง ืืืึธืก ืืืขื ืืึทืื ืืขืงืขืก ืคึฟืึทืจ ืื ืจืืืื ื ืืื ืกื ื ืึธื ืึทืคึผืืืืืื ื ืื ืจืขืืืกืืจื. ืฆื ืืึธื ืืึธืก, ืฉืึทืคึฟื ืึท ืืขืงืข /root/zi/.git/hooks/post-merge ืืื ืื ืคืืืืขื ืืข ืืื ืืึทืื:
#!/usr/bin/env bash
changed_files="$(git diff-tree -r --name-only --no-commit-id ORIG_HEAD HEAD)"
check_run() {
echo "$changed_files" | grep --quiet "$1" && eval "$2"
}
check_run dump.csv "/root/blacklist/makebgp"ืืื ืืึธื ื ืื ืคืึทืจืืขืกื ืฆื ืืึทืื ืขืก ืขืงืกืขืงืืืึทืืืข
chmod +x /root/z-i/.git/hooks/post-mergeืืืจ ืืืขืื ืืึทืื ืื Makebgp ืฉืจืืคื ืืืึธืก ืื ืงืจืืง ืจืขืคืขืจืก ืฆื ืึท ืืืกื ืฉืคึผืขืืขืจ.
ืื ืกืืึธืืื ื ืืื ืงืึทื ืคืืืืขืจ ืึท ืจืืืื ื ืืื ืกื
ืื ืกืืึทืืืจื ืคืืืื. ืฆืื ืืึทืืืืขืจื, ืื ืืืขืจืกืืข ืคืื โโโโืคืืืื ืืขืจืืืืึทื ืึทืจืืึทื ืืขืฉืืงื ืืื ืื Ubuntu ืจืืคึผืึทืืึทืืึธืจืื ืืื ืคืึทืจืืืืึทืืืขื ืืื ืคืจืขืฉื ืึทืก ืฆื Archeopteryx ืคืขืกืขืก, ืึทืืื ืืืจ ืืึทืจืคึฟื ืฆื ืขืจืฉืืขืจ ืืืืื ืื ืืึทืึทืืืขืจ PPA ืคืื ืื ืืืืืืืืืจื ืืขืืืขืืึธืคึผืขืจืก ืฆื ืื ืกืืกืืขื.
add-apt-repository ppa:cz.nic-labs/bird
apt update
apt install birdื ืึธื ืืขื, ืืืจ ืืื ืืืกืืืืึทื ืคืืืื ืคึฟืึทืจ IPv6 - ืืืจ ืืืขืื ื ืืฉื ืืึทืจืคึฟื ืขืก ืืื ืืขื ืื ืกืืึทืืืจืื ื.
systemctl stop bird6
systemctl disable bird6ืื ืืขืจ ืืื ืึท ืืื ืืืึทืืืกืืืง ืคืืืื ืกืขืจืืืืก ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืงืข (/etc/bird/bird.conf), ืืืึธืก ืืื ืืึทื ืฅ ืืขื ืื ืคึฟืึทืจ ืืื ืื (ืืื ืืื ืืขืจืืึธื ืขื ืืืจ ืึทืืึธื ืืืืืขืจ ืึทื ืงืืื ืืืื ืขืจ ืคืึทืจืืืขืจื ืืขืืืขืืึธืคึผืื ื ืืื ืืื ืื ื ืื ืืขืืึทื ืง ืฆื ืคึผืึทืกื ืืืื ืืืืืขื ืข ืืืืขืจืคืขื ืืฉื)
log syslog all;
router id 172.30.1.1;
protocol kernel {
scan time 60;
import none;
# export all; # Actually insert routes into the kernel routing table
}
protocol device {
scan time 60;
}
protocol direct {
interface "venet*", "tun*"; # Restrict network interfaces it works with
}
protocol static static_bgp {
import all;
include "pfxlist.txt";
#include "iplist.txt";
}
protocol bgp OurRouter {
description "Our Router";
neighbor 81.177.103.94 as 64999;
import none;
export where proto = "static_bgp";
local as 64998;
passive off;
multihop;
}
ืจืึทืืืขืจ ืฉืืึทื - ืจืึทืืืขืจ ืืืขื ืืืคืืขืจ, ืืืึธืก ืืืืืฉืืืึทืื ืงืืงื ืืื ืึทื IPv4 ืึทืืจืขืก, ืึธืืขืจ ืืื ื ืืฉื ืืืื ืขืจ. ืืื ืืื ืืืขืจ ืคืึทื, ืขืก ืงืขื ืืืื ืงืืื 32-ืืืกื ื ืืืขืจ ืืื ืื IPv4 ืึทืืจืขืก ืคึฟืึธืจืืึทื, ืึธืืขืจ ืขืก ืืื ืึท ืืื ืคืึธืจืขื ืฆื ืึธื ืืืืึทืื ืคึผืื ืงื ืื IPv4 ืึทืืจืขืก ืคืื ืืืื ืืืื (ืืื ืืขื ืคืึทื, VPS).
ืคึผืจืึธืืึธืงืึธื ืืืจืขืงื ืืืคืืื ื ืืืึธืก ืื ืืขืจืคืืืกืื ืืืขื ืึทืจืืขืื ืืื ืื ืจืืืื ื ืคึผืจืึธืฆืขืก. ืืขืจ ืืืึทืฉืคึผืื ืืื ืึท ืคึผืึธืจ ืคืื ืืืืฉืคึผืื ื ืขืืขื, ืืืจ ืงืขื ืขื ืืืืื ืื ืืขืจืข. ืืืจ ืงืขื ืขื ืคืฉืื ืืืกืืขืงื ืื ืฉืืจื; ืืื ืืขื ืคืึทื, ืืขืจ ืกืขืจืืืขืจ ืืืขื ืืขืจื ืฆื ืึทืืข ืื ืืืฆื ืื ืืขืจืคืืืกืื ืืื ืึทื IPv4 ืึทืืจืขืก.
ืคึผืจืึธืืึธืงืึธื ืกืืึทืืืง ืืื ืืื ืืืขืจ ืืึทืืืฉ ืึทื ืืึธืืื ืจืฉืืืืช ืคืื ืคึผืจืขืคืืงืกืื ืืื IP ืึทืืจืขืกืขืก (ืืืึธืก ืืขื ืขื ืึทืงืฉืื /32 ืคึผืจืขืคืืงืก, ืคืื ืงืืจืก) ืคึฟืื ืืขืงืขืก ืคึฟืึทืจ ืกืึทืืกืึทืงืืืึทื ื ืืขืืื. ืืื ืื ืจืฉืืืืช ืงืืืขื ืคืื ืืืขื ืืืื ืืืกืงืึทืกื ืืื ืื. ืืืืข ืืึธื ืึทื ืืึธืืืื ื IP ืึทืืจืขืกืขืก ืืื ืงืึทืืขื ืืึทื ืืืจื ืคืขืืืงืืึทื, ืื ืกืืื ืคึฟืึทืจ ืืขื ืืื ืื ืืจืืืก ืืึทื ื ืคืื ืืคึผืืึธืึทืืื ื. ืฆืื ืคืืจืืืืื, ืืื ืืขืจ ืฆืืื ืคืื ืฉืจืืืื, ืขืก ืืขื ืขื 78 ืฉืืจืืช ืืื ืืขืจ ืจืฉืืื ืคืื ืคึผืจืขืคืืงืก, ืืื 85898 ืืื ืืขืจ ืจืฉืืื ืคืื IP ืึทืืจืขืกืขืก. ืืื ืฉืืืจืง ืจืขืงืึธืืขื ืืืจื ืฆื ืึธื ืืืืื ืืื ืืืืึทืืื ื ืืืืื ืืืืฃ ืืขืจ ืจืฉืืื ืคืื ืคึผืจืขืคืืงืก, ืืื ืฆื ืฆื ืืขืื IP ืืึธืืืื ื ืืื ืึธืืขืจ ื ืืฉื ืื ืฆืืงืื ืคึฟื ืืื ืึทืจืืืฃ ืฆื ืืืจ ืฆื ืืึทืฉืืืกื ื ืึธื ืขืงืกืคึผืขืจืืืขื ืืื ื ืืื ืืืื ืจืึทืืืขืจ. ื ืื ืืขืืขืจ ืคืื ืืื ืงืขื ืขื ืืืืื ืืืืืืฉืขืกืืื 85 ืืืืื ื ืืืื ืกื ืืื ืื ืจืืืื ื ืืืฉ.
ืคึผืจืึธืืึธืงืึธื bgp, ืืื ืคืึทืงื, ืกืขืืึทืคึผ bgp ืคึผืืจืื ื ืืื ืืืื ืจืึทืืืขืจ. ืื IP ืึทืืจืขืก ืืื ืื ืึทืืจืขืก ืคืื ืื ืคืื ืืจืืืกื ืืืง ืฆืืืื ื ืคืื ืื ืจืึทืืืขืจ (ืึธืืขืจ ืื ืึทืืจืขืก ืคืื ืื ืืื ืขื ืฆืืืื ื ืืืืฃ ืื ืจืึทืืืขืจ ืืืึทื), 64998 ืืื 64999 ืืขื ืขื ืื ื ืืืขืจื ืคืื ืึธืืึทื ืึทืืึทืก ืกืืกืืขืืขื. ืืื ืืขื ืคืึทื, ืืื ืงืขื ืขื ืืืื ืึทืกืืื ื ืืื ืื ืคืึธืจืขื ืคืื ืงืืื 16-ืืืกื ื ืืืขืจื, ืึธืืขืจ ืขืก ืืื ืืื ืคืืจ ืฆื ื ืืฆื AS ื ืืืขืจื ืคืื ืื ืคึผืจืืืืึทื ืงืืื ืืืคืืื ื ืืืจื RFC6996 - 64512-65534 ืื ืงืืืกืืื (ืขืก ืืื ืึท ืคึฟืึธืจืืึทื ืคึฟืึทืจ 32-ืืืกื ืึทืกื ืก, ืึธืืขืจ ืืื ืืื ืืืขืจ ืคืึทื ืืึธืก ืืื ืืืฉืืืื ืึธืืืืขืจืงืื). ืื ืืืกืงืจืืืื ืงืึทื ืคืืืืขืจืืืฉืึทื ื ืืฆื eBGP ืคึผืืจืื ื, ืืื ืืืึธืก ืื ื ืืืขืจื ืคืื ืื ืึธืืึทื ืึทืืึทืก ืกืืกืืขืืขื ืคืื ืื ืจืืืื ื ืืื ืกื ืืื ืื ืจืึทืืืขืจ ืืืื ืืืื ืึทื ืืขืจืฉ.
ืืื ืืืจ ืงืขื ืขื ืืขื, ืื ืกืขืจืืืืก ืืึทืจืฃ ืืืืกื ืื IP ืึทืืจืขืก ืคืื ืื ืจืึทืืืขืจ, ืึทืืื ืืืื ืืืจ ืืึธืื ืึท ืืื ืึทืืืฉ ืึธืืขืจ ื ืื-ืจืึธืืืึทืืึทื ืคึผืจืืืืึทื (RFC1918) ืึธืืขืจ ืฉืขืจื (RFC6598) ืึทืืจืขืก, ืืืจ ืืึธื ื ืื ืืึธืื ืื ืึธืคึผืฆืืข ืฆื ืืึทืคึผื ืคึผืืจืื ื ืืืืฃ ืื ืคืื ืืจืืืกื ืืืง. ืฆืืืื ื, ืึธืืขืจ ืื ืกืขืจืืืืก ืืืขื ื ืึธื ืึทืจืืขืื ืืื ืืขื ืืื ืขื.
ืขืก ืืื ืืืื ืืึทื ืฅ ืงืืึธืจ ืึทื ืคึฟืื ืืืื ืืื ืกื ืืืจ ืงืขื ืขื ืฆืืฉืืขืื ืจืืฅ ืฆื ืขืืืขืืข ืคืึทืจืฉืืืขื ืข ืจืึธืืืขืจืก - ื ืึธืจ ืืืคึผืืืงืึทื ืื ืกืขืืืื ืืก ืคึฟืึทืจ ืืื ืืืจื ืงืึทืคึผืืื ื ืื ืคึผืจืึธืืึธืงืึธื ืืืคึผ ืึธืคึผืืืืืื ื ืืื ืืฉืึทื ืืื ื ืื IP ืึทืืจืขืก ืคืื ืื ืืืจ. ืึทื ืืื ืืืึธืก ืื ืืืึทืฉืคึผืื ืืืืืื ืกืขืืืื ืืก ืคึฟืึทืจ ืคึผืืจืื ื ืึทืจืืืก ืืขื ืืื ืขื, ืืื ืื ืืขืจืกื ืื ืืืืขืจืกืึทื. ืขืก ืืื ืืจืื ื ืฆื ืืึทืืืึทืืืงื ืืื ืืื ืืขื ืืื ืขื ืืืจื ืืฉืึทื ืืื ื ืื IP ืึทืืจืขืกืขืก ืืื ืื ืกืขืืืื ืืก ืึทืงืึธืจืืื ืืื.
ืคึผืจืึทืกืขืกืื ื ืื ืจืขืืืกืืจื ืคึฟืึทืจ ืื ืจืืืื ื ืืื ืกื
ืืืฆื ืืืจ ืืึทืจืคึฟื, ืืื ืคืึทืงื, ืฆื ืฉืึทืคึฟื ืจืฉืืืืช ืคืื ืคึผืจืขืคืืงืก ืืื IP ืึทืืจืขืกืขืก, ืืืึธืก ืืขื ืขื ืืขืืืขื ืืขืจืืื ื ืืื ืื ืกืืึทืืืง ืคึผืจืึธืืึธืงืึธื ืืื ืื ืคืจืืขืจืืืงืข ืืื ืข. ืฆื ืืึธื ืืึธืก, ืืืจ ื ืขืืขื ืื ืจืขืืืกืืจื ืืขืงืข ืืื ืืึทืื ืื ืืขืงืขืก ืืืจ ืืึทืจืคึฟื ืคึฟืื ืขืก ืืื ืื ืคืืืืขื ืืข ืฉืจืืคื, ืืขืฉืืขืื ืืื /root/blacklist/makebgp
#!/bin/bash
cut -d";" -f1 /root/z-i/dump.csv| tr '|' 'n' | tr -d ' ' > /root/blacklist/tmpaddr.txt
cat /root/blacklist/tmpaddr.txt | grep / | sed 's_.*_route & reject;_' > /etc/bird/pfxlist.txt
cat /root/blacklist/tmpaddr.txt | sort | uniq | grep -Eo "([0-9]{1,3}[.]){3}[0-9]{1,3}" | sed 's_.*_route &/32 reject;_' > /etc/bird/iplist.txt
/etc/init.d/bird reload
logger 'bgp list compiled'ืื ืืืืกื ื ืืฉื ืคืึทืจืืขืกื ืฆื ืืึทืื ืขืก ืขืงืกืขืงืืืึทืืืข
chmod +x /root/blacklist/makebgpืืืฆื ืืืจ ืงืขื ืขื ืืืืคื ืขืก ืืึทื ืืืึทืื ืืื ืึธืืกืขืจืืืืจื ืื ืืืืกืืขื ืคืื ืืขืงืขืก ืืื /etc/bird.
ืจืืึฟ ืืกืชึผืื, ืคืืืื ืืื ื ืืฉื ืืจืืขืื ืคึฟืึทืจ ืืืจ ืืื ืืขื ืืึธืืขื ื, ืืืืึทื ืืื ืื ืคืจืืขืจืืืงืข ืืื ืข ืืืจ ืืขืืขืื ืขืก ืฆื ืงืืงื ืคึฟืึทืจ ืืขืงืขืก ืืืึธืก ืืึธืื ื ืืฉื ืขืงืกืืกืืืจื ื ืึธื. ืืขืจืืืขืจ, ืืืจ ืงืึทืืขืจ ืขืก ืืื ืงืึธื ืืจืึธืืืจื ืึทื ืขืก ืืื ืกืืึทืจืืขื:
systemctl start bird
birdc show routeืืขืจ ืจืขืืืืืึทื ืคืื ืื ืฆืืืืืืข ืืึทืคึฟืขื ืืึธื ืืืืึทืื ืืืขืื 80 ืจืขืงืึธืจืืก (ืืึธืก ืืื ืคึฟืึทืจ ืืืฆื, ืึธืืขืจ ืืืขื ืืืจ ืฉืืขืื ืขืก ืึทืจืืืฃ, ืึทืืฅ ืืืขื ืึธืคืขื ืืขื ืืืืฃ ืื ืืจืขื ืคืื ืื ืจืงื ืืื ืืืึทืงืื ื ื ืขืืืืึธืจืงืก) ืขืคึผืขืก ืืื ืืึธืก:
54.160.0.0/12 unreachable [static_bgp 2018-04-19] * (200)ืงืึธืืขืงืืืื
birdc show protocolืืืขื ืืืืึทืื ืื ืกืืึทืืืก ืคืื ืคึผืจืึธืืึธืงืึธืืก ืืื ืื ืืื ืกื. ืืื ืืืจ ืืึธื ืงืึทื ืคืืืืขืจื ืื ืจืึทืืืขืจ (ืืขื ืื ืืืืึทืืขืจ ืคืื ื), ืื OurRouter ืคึผืจืึธืืึธืงืึธื ืืืขื ืืืื ืืื ืื ืึธื ืืืื ืฉืืึทื (ืงืึธื ื ืขืงื ืึธืืขืจ ืึทืงืืืื ืคืึทืกืข), ืืื ื ืึธื ืึท ืืขืจืึธืื ืคึฟืึทืจืืื ืืื ื, ืขืก ืืืขื ืืืื ืฆื ืื ืึทืจืืืฃ ืฉืืึทื (ืืขืืจืื ืืขื ืคืึทืกืข). ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืืฃ ืืืื ืกืืกืืขื ืื ืจืขืืืืืึทื ืคืื ืืขื ืืึทืคึฟืขื ืงืืงื ืืื ืืึธืก:
BIRD 1.6.3 ready.
name proto table state since info
kernel1 Kernel master up 2018-04-19
device1 Device master up 2018-04-19
static_bgp Static master up 2018-04-19
direct1 Direct master up 2018-04-19
RXXXXXx1 BGP master up 13:10:22 Established
RXXXXXx2 BGP master up 2018-04-24 Established
RXXXXXx3 BGP master start 2018-04-22 Connect Socket: Connection timed out
RXXXXXx4 BGP master up 2018-04-24 Established
RXXXXXx5 BGP master start 2018-04-24 Passive
ืงืึทื ืขืงืืื ื ืึท ืจืึทืืืขืจ
ืึทืืขืืขื ืืื ืืืกืืึธืืข ืืื ืคืื ืืืืขื ืขื ืืขื ืคืึธืืขื, ืึธืืขืจ ื ืขืืขื ืืึทืจืฅ - ืืขืจ ืกืืฃ ืืื ื ืึธืขื ื. ืืขืจืฆื, ืืื ืืขื ืึธืคึผืืืืืื ื ืืื ืงืขื ื ืืฉื ืืขืื ืฉืจืื-ืืืจื-ืฉืจืื ืื ืกืืจืึทืงืฉืึทื ื - ืขืก ืืืขื ืืืื ืึทื ืืขืจืฉ ืคึฟืึทืจ ืืขืืขืจ ืคืึทืืจืืงืึทื ื.
ืึธืืขืจ, ืืื ืงืขื ืขื ืืืืึทืื ืืืจ ืึท ืคึผืึธืจ ืคืื ืืืืฉืคืืื. ืื ืืืืคึผื ืืึธืืืง ืืื ืฆื ืืึทืคึผื BGP ืคึผืืจืื ื ืืื ืืึทืฉืืืืขื Nexthop ืฆื ืึทืืข ืืืงืืืขื ืคึผืจืขืคืืงืกืขืก, ืืืืืื ืฆื ืืื ืืืขืจ ืืื ืขื (ืืืื ืืืจ ืืึทืจืคึฟื ืฆื ืฉืืงื ืคืึทืจืงืขืจ ืืืจื ืึท ืคึผ2ืคึผ ืฆืืืื ื) ืึธืืขืจ ืื Nexthop IP ืึทืืจืขืก ืืืื ืืขืจ ืคืึทืจืงืขืจ ืืืขื ืืืื ืฆื ืขืืขืจื ืขื).
ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืืืฃ Mikrotik ืืื RouterOS, ืืึธืก ืืื ืกืึทืืืื ืืื ืืืื
/routing bgp instance set default as=64999 ignore-as-path-len=yes router-id=172.30.1.2
/routing bgp peer add in-filter=dynamic-in multihop=yes name=VPS remote-address=194.165.22.146 remote-as=64998 ttl=default
/routing filter add action=accept chain=dynamic-in protocol=bgp comment="Set nexthop" set-in-nexthop=172.30.1.1ืืื ืืื ืกืืกืงืึธ ืืึธืก - ืืื ืืึธืก
router bgp 64999
neighbor 194.165.22.146 remote-as 64998
neighbor 194.165.22.146 route-map BGP_NEXT_HOP in
neighbor 194.165.22.146 ebgp-multihop 250
!
route-map BGP_NEXT_HOP permit 10
set ip next-hop 172.30.1.1ืืืื ืืขืจ ืืขืืืืงืขืจ ืืื ืขื ืืื ืืขื ืืฆื ืืืืืข ืคึฟืึทืจ BGP ืคึผืืจืื ื ืืื ืคึฟืึทืจ ืืจืึทื ืกืืืืื ื ื ืืฆืืง ืคืึทืจืงืขืจ, ืขืก ืืื ื ืื ื ืืืืืง ืฆื ืฉืืขืื Nexthop; ืขืก ืืืขื ืืืื ืฉืืขืื ืจืืืืืง ืืื ืืขื ืคึผืจืึธืืึธืงืึธื. ืึธืืขืจ ืืืื ืืืจ ืฉืืขืื ืขืก ืืึทื ืืืึทืื, ืขืก ืืืขื ื ืืฉื ืืึทืื ืขืก ืขืจืืขืจ.
ืืืืฃ ืื ืืขืจืข ืคึผืืึทืืคืึธืจืืก, ืืืจ ืืืขื ืืึธืื ืฆื ืจืขืืขื ืขื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื, ืึธืืขืจ ืืืื ืืืจ ืืึธืื ืงืืื ืฉืืืขืจืืงืืืื, ืฉืจืืึทืื ืืื ืื ืืึทืืขืจืงืื ืืขื, ืืื ืืืขื ืคึผืจืืืืจื ืฆื ืืขืืคื.
ื ืึธื ืืืื BGP ืกืขืกืืข ืืื ืกืืึทืจืืขื, ืจืืฅ ืฆื ืืจืืืก ื ืขืืืืึธืจืงืก ืืขื ืขื ืื ืืขืงืืืขื ืืื ืืขื ืขื ืืื ืกืืึทืืืจื ืืื ืื ืืืฉ, ืคืึทืจืงืขืจ ืืื ืคืืึธืื ืฆื ืื ืึทืืจืขืกืขืก ืคึฟืื ืืื ืืื ืืืืง ืืื ื ืึธืขื ื, ืืืจ ืงืขื ืขื ืฆืืจืืงืงืืืขื ืฆื ืื ืคืืืื ืืื ืกื ืืื ืคึผืจืืืืจื ืฆื ืืืงืขืจื ืื ืคึผืึธืืืฆืืข ืืึธืจื ืืืึธืก ืงืึทื ืขืงืฅ ืื ืจืฉืืื ืคืื IP ืึทืืจืขืกืขืก, ืืืกืคืืจื ื ืึธื ืืขื
systemctl reload birdืืื ืืขื ืืื ืืืื ืจืึทืืืขืจ ืืจืึทื ืกืคืขืจื ืื 85 ืืืืื ื ืจืืฅ. ืืืื ืฆืืืขืืจืืื ืฆื ืึธืคึผืฉืืขืงื ืืื ืืจืึทืืื ืืืขืื ืืืึธืก ืฆื ืืึธื ืืื ืืื :)
ืืื ืืึทื ืฅ
ืจืืื ืืขืึธืจืขืืืฉ, ื ืึธื ืงืึทืืคึผืืืืื ื ืื ืกืืขืคึผืก ืืืกืงืจืืืื ืืืืื, ืืืจ ืืืฆื ืืึธืื ืึท ืืื ืกื ืืืึธืก ืืืืืึธืืึทืืืฉ ืจืืืขืจืขืงืฅ ืคืึทืจืงืขืจ ืฆื IP ืึทืืจืขืกืขืก ืืืึธืก ืืขื ืขื ืืึทื ื ืืื ืื ืจืืกืืฉืข ืคืขืืขืจืืืฉืึทื ื ืึธื ืื ืคึฟืืืืจืืจืื ื ืกืืกืืขื.
ืขืก ืงืขื, ืคืื ืงืืจืก, ืืืื ืืืคึผืจืืืื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืขืก ืืื ืืึทื ืฅ ืืจืื ื ืฆื ืกืึทืืขืจืืื ืึท ืจืฉืืื ืคืื IP ืึทืืจืขืกืขืก ืืื ืคึผืขืจื ืึธืืขืจ ืคึผืืืืึธื ืกืึทืืืฉืึทื ื. ื ืคึผืฉืื ืคึผืขืจื ืฉืจืืคื ืืื ืืขื ื ืืฆื Net::CIDR::Lite ืืืจื ืก 85 ืืืืื ื ืคึผืจืขืคืืงืก ืืื 60 (ื ืื ืืืืื ื), ืึธืืขืจ, ืคืื ืงืืจืก, ืงืึธืืืขืจืก ืึท ืคืื ืืจืขืกืขืจืข ืงืืื ืคืื ืึทืืจืขืกืขืก ืืื ืืื ืืคืืขืฉืืขืื.
ืืื ื ืื ืืื ืกื ืึทืคึผืขืจืืืฅ ืืืืฃ ืื ืืจืื ืฉืืึทืคึผื ืคืื ืื ISO / OSI ืืึธืืขื, ืขืก ืืืขื ื ืืฉื ืจืึทืืขืืืขื ืืืจ ืคืื ืืืึทืงืื ื ืึท ืคึผืืึทืฅ / ืืืึทื ืืืื ืขืก ืจืืืึทืืืื ืฆื ืื ืืืืจืขืื ืึทืืจืขืก ืืื ืจืขืงืึธืจืืขื ืืื ืื ืจืขืืืกืืจื. ืึธืืขืจ ืฆืืืืืขื ืืื ืื ืจืขืืืกืืจื, ืื ืืขืงืข nxdomain.txt ืงืืื ืคึฟืื ืืืืืื, ืืืึธืก ืืื ืึท ืืืกื ืกืืจืึธืงืขืก ืคืื ืื ืฉืจืืคื ืืืืื ืืืจื ืก ืืื ืึท ืืงืืจ ืคืื ืึทืืจืขืกืขืก ืคึฟืึทืจ, ืืืฉื, ืื SwitchyOmega ืคึผืืืืื ืืื ืงืจืึธืื.
ืขืก ืืื ืืืื ื ืืืืืง ืฆื ืืขืจืืึธื ืขื ืึทื ืื ืืืืืื ื ืจืืงืืืืืขืจื ื ืึธื ืจืึทืคืื ืืจืืงืืึทื ืืืื ืืืจ ืืขื ื ื ืืฉื ืืืืื ืึทื ืืื ืืขืจื ืขื ืืึทื ืืฆืขืจ, ืึธืืขืจ ืืืื ืึทืจืืืกืืขืื ืขืืืขืืข ืจืขืกืืจืกื ืืืืฃ ืืืื ืืืืืขื ืข (ืืืฉื, ืึท ืืืขืืืืืื ืึธืืขืจ ืคึผืึธืกื ืกืขืจืืืขืจ ืืืืคื ืืืืฃ ืืขื ืงืฉืจ). ื ืืฆื ืื ืืืื ืคืื ืื ืจืึทืืืขืจ, ืขืก ืืื ื ืืืืืง ืฆื ืฉืืจืขื ื ืืื ืื ืึทืืืืึธืืื ื ืคืึทืจืงืขืจ ืคืื ืืขื ืืื ืกื ืฆื ืืืื ืขืคื ืืืขื ืึทืืจืขืก, ืึทื ืืขืจืฉ ืืืจ ืืืขื ืคืึทืจืืืจื ืงืึทื ืขืงืืืืืืื ืืื ืื ืจืขืกืืจืกื ืืืึธืก ืืขื ืขื ืืืืขืงื ืืืจื ืื ืจืฉืืื ืคืื ืคึผืจืขืคืืงืก ืืืงืืืขื ืืืจื ืื ืจืึทืืืขืจ.
ืืืื ืืืจ ืืึธื ืคึฟืจืืื, ืคืจืขืื, ืืื ืืื ืืจืืื ืฆื ืขื ืืคึฟืขืจื.
UPD. ืืืื ืง ะธ ืคึฟืึทืจ ืคึผืึทืจืึทืืขืืขืจืก ืคึฟืึทืจ ืืื ืืืึธืก ืืึธืื ืจืืืืกืื ื ืืึทืื ืืึธืืืื ื ืืืึทืืืืื.
UPD2. ืืืจืื, ืขืก ืงืืงื ืืื ืืื ืืขืืืื ืึท ืืจืืึทื ืืืจื ื ืืฉื ืืืืื ืื ืกืืจืึทืงืฉืึทื ื ืคึฟืึทืจ ืืึทืฉืืขืืืงื ืึท ืืื ืขื ืฆืืืืฉื ืื ืืืคึผืก ืืื ืื ืจืึทืืืขืจ ืฆื ืืขื ืึทืจืืืงื. ื ืคึผืืึทืฅ ืคืื ืฉืืืืช ืืขื ืขื ืืืืคืืขืฉืืื ืขื ืืืจื ืืขื.
ื ืึธืจ ืืื ืคืึทื, ืืื ืืืขื ืืึธื ืึทืืึธื ืืืืืขืจ ืึทื ืืืืืขืจ ืืืจ ืึธื ืืืืื ืืขื ืคืืจืขืจ, ืืืจ ืืึธื ืฉืืื ืงืึทื ืคืืืืขืจื ืึท ืืืคึผื ืืื ืขื ืืื ืืขืจ ืจืืืืื ื ืืืจ ืืึทืจืคึฟื ืืื ืึธืคึผืืขืฉืืขืื ืืืึทื ืคืึทื ืืงืฉืึทื ืึทืืืื (ืืืฉื ืืืจื ืืืขื ืื ืคืึทืจืงืขืจ ืืึธืจื ืืืจื ืคืขืืืงืืึทื ืึธืืขืจ ืกืืึทืืืงืื). ืืืื ืืืจ ืืึธื ื ืืฉื ืคืึทืจืขื ืืืงื ืืขื ืคืึทืกืข ื ืึธื, ืขืก ืืื ื ืืฉื ืืึทืื ืคืื ืืื ืขื ืฆื ื ืึธืืคืึธืืื ืื ืกืืขืคึผืก ืืื ืืขื ืึทืจืืืงื. ืืื ืืึธื ื ืื ืืึธืื ืืืื ืืืืืขื ืข ืืขืงืกื ืืืืฃ ืืขื ื ืึธื, ืึธืืขืจ ืืืื ืืืจ ืืืื "ืกืขืืืื ื ืึทื OpenVPN ืกืขืจืืืขืจ" ืฆืืืืืขื ืืื ืื ื ืึธืืขื ืคืื ืื ืึธืคึผืขืจืืืืื ื ืกืืกืืขื ืืื ืกืืึทืืืจื ืืืืฃ ืื ืืืคึผืก, ืืื "ืกืขืืืื ื ืึทื OpenVPN ืงืืืขื ื" ืืื ืื ื ืึธืืขื ืคืื ืืืื ืจืึทืืืขืจ. , ืืืจ ืืืขื ืจืืึฟ ืืกืชึผืื ืืขืคึฟืื ืขื ืึท ื ืืืขืจ ืคืื ืึทืจืืืงืืขื ืืืืฃ ืืขื ืืขืืข, ืึทืจืืึทื ืืขืจืขืื ื ืืืืฃ Habrรฉ.
UPD3. ืืื ืืขืฉืจืืื ืึท ืงืึธื ืืืึธืก ืืืจื ืก dump.csv ืืื ืึท ืจืืืึทืืืื ื ืืขืงืข ืคึฟืึทืจ ืคืืืื ืืื ืึทืคึผืฉืึทื ืึทื ืกืึทืืขืจืืืืืฉืึทื ืคืื IP ืึทืืจืขืกืขืก. ืืขืจืืืขืจ, ืืขืจ ืึธืคึผืืืืืื ื "ืคึผืจืึทืกืขืกืื ื ืื ืจืขืืืกืืจื ืคึฟืึทืจ ืื ืจืืืื ื ืืื ืกื" ืงืขื ืขื ืืืื ืจืืคึผืืืืกื ืืืจื ืจืืคื ืืืึทื ืคึผืจืึธืืจืึทื.
UPD4. ื ืืืกื ืึทืจืืขื ืืืืฃ ืขืจืจืึธืจืก (ืืื ืืื ื ืืฉื ืืืืื ืืื ืฆื ืื ืืขืงืกื):
1) ืึทื ืฉืืึธื systemctl ืจืืืึธืื ืคืืืื ืขืก ืืืื ืืื ืขื ืฆื ื ืืฆื ืืขื ืืึทืคึฟืขื birdc configure.
2) ืืื ืื ืืืงืจืึธืืืง ืจืึทืืืขืจ, ืึทื ืฉืืึธื ืคืื ืืฉืึทื ืืื ื ืื Nexthop ืฆื ืื IP ืคืื ืื ืจืืข ืืืึทื ืคืื ืืขื ืืื ืขื / ืจืืืื ื ืคืืืืขืจ ืืืืื ืงืึทืืฃ = ืึธื ื ืขืืขื ืงืืื = ืืื ืึทืืืฉ-ืืื ืคึผืจืึธืืึธืงืึธื = bgp ืืึทืืขืจืงืื ื =ยปืฉืืขืื Nexthopยป set-in-nexthop=172.30.1.1 ืขืก ืืืื ืืื ืขื ืฆื ืกืคึผืขืฆืืคืืฆืืจื ืื ืืึทืจืฉืจืื ืืืืึทื ืฆื ืื ืืื ืขื ืฆืืืื ื, ืึธื ืึทื ืึทืืจืขืก / ืจืืืื ื ืคืืืืขืจ ืืืืื ืงืึทืืฃ = ืึธื ื ืขืืขื ืงืืื = ืืื ืึทืืืฉ-ืืื ืคึผืจืึธืืึธืงืึธื = bgp ืงืึธืืขื ืืึทืจ =ยปืฉืืขืื Nexthopยป set-in-nexthop-direct=<Interface ื ืึธืืขื>
UPD5. ื ื ืืึทืข ืืื ืกื ืืื ืืจืืืก , ืคึฟืื ืืื ืืืจ ืงืขื ืขื ืงืืืึทืื ืคืึทืจืืืง ืจืฉืืืืช ืคืื IP ืึทืืจืขืกืขืก. ืืขืจืืืึทื ืืืงื ืืขืืขืจ ืืึทืื ืฉืขื. ืืืืฃ ืืขืจ ืงืืืขื ื ืืืึทื, ืึทืืข ืืืึธืก ืืืืืื ืืื ืฆื ืจืึทื ืื ืจืขืงืึธืจืืก ืืื ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื "ืืึทืจืฉืจืื ... ืึธืคึผืืืึทืจืคื".
ืืื ืืื ืืขื ืคืื ื, ืืืกืืึธืืข, ืขืก ืืื ืืขื ืื ืฆื ืฉืืึทืืข ืืืื ืืึธืืข ืืื ืืขืจืืืึทื ืืืงื ืืขื ืึทืจืืืงื.
UPD6. ื ืจืืืืืืื ืืืขืจืกืืข ืคืื โโโโืืขื ืึทืจืืืงื ืคึฟืึทืจ ืื ืืืืก ืืึธื ื ืืฉื ืืืขืื ืฆื ืืขืคึฟืื ืขื ืขืก, ืึธืืขืจ ืืืืื ืฆื ืึธื ืืืืื - .
ืืงืืจ: www.habr.com