ืคึผืึธืจื˜ืึทื˜ื™ื•ื• ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹OpenBGPD 6.7p0 ื‘ื ื™ืžืฆื

OpenBSD ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืืจื•ื™ืก ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืึท ืคึผืึธืจื˜ืึทื˜ื™ื•ื• ืึทื“ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืจื•ื˜ื™ื ื’ ืคึผืขืงืœ OpenBGPD 6.7, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื•ื™ืฃ ืื ื“ืขืจืข ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ ื•ื•ื™ OpenBSD. ืฆื• ืขื ืฉื•ืจ ืคึผืึธืจื˜ืึทื‘ื™ืœื™ื˜ื™, ืคึผืึทืจืฅ ืคื•ืŸ ื“ื™ ืงืึธื“ ืคื•ืŸ OpenNTPD, OpenSSH ืื•ืŸ LibreSSL ืคึผืจืึทื“ื–ืฉืขืงืก ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• OpenBSD, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืœื™ื ื•ืงืก ืื•ืŸ ืคืจืขืขื‘ืกื“ ืื™ื– ืึทื ืึทื•ื ืกื˜. OpenBGPD ืื™ื– ื˜ืขืกื˜ืขื“ ืื•ื™ืฃ Debian 9, Ubuntu 14.04+ ืื•ืŸ FreeBSD 12.

OpenBGPD ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืื•ื ื˜ืขืจ ืฉื˜ื™ืฆืŸ ืจืขื’ื™ืึธื ืึทืœ ืื™ื ื˜ืขืจื ืขื˜ ืจืขื’ื™ืกื˜ืจืึทื˜ืึธืจ RIPE NCC, ื•ื•ืึธืก ืื™ื– ืื™ื ื˜ืขืจืขืกื™ืจื˜ ืื™ืŸ ื‘ืจืขื ื’ืขืŸ ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ OpenBGPD ืฆื• ื•ืกืึทื‘ื™ืœื™ื˜ื™ ืื•ื™ืฃ ืกืขืจื•ื•ืขืจืก ืคึฟืึทืจ ืจื•ื˜ื™ื ื’ ืื™ืŸ ื™ื ื˜ืขืจืึธืคึผืขืจืึทื˜ืึธืจ ืคืึทืจืงืขืจ ื•ื•ืขืงืกืœ ืคื•ื ืงื˜ืŸ (IXP) ืื•ืŸ ืฆื• ืฉืึทืคึฟืŸ ืึท ืคื•ืœ-ืคืœืขื“ื–ืฉื“ ืื ื“ืขืจ ื‘ืจื™ืจื” ืฆื• ื“ืขื ืคึผืขืงืœ ืคื•ื™ื’ืœ (ืื ื“ืขืจืข ืึธืคึฟืŸ ืึทืœื˜ืขืจื ืึทื˜ื™ื•ื•ืขืก ื™ืžืคึผืœืึทืžืขื ื™ื ื’ ื“ื™ BGP ืคึผืจืึธื˜ืึธืงืึธืœ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืคึผืจืึทื“ื–ืฉืขืงืก FRRouting, GoBGP, ืขืงืกืึทื‘ื’ืคึผ ะธ ื‘ื™ืึธ-ืจื•ื˜ื™ื ื’).

ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ OpenBGPD ืคืึธื•ืงื™ืกื™ื– ืื•ื™ืฃ ื™ื ืฉื•ืจื™ื ื’ ื“ื™ ื”ืขื›ืกื˜ืŸ ืฉื˜ืึทืคึผืœ ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื•ืŸ ืจื™ืœื™ื™ืึทื‘ื™ืœืึทื˜ื™. ืคึฟืึทืจ ืฉื•ืฅ, ืฉื˜ืจืขื ื’ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืงืขืจืขืงื˜ื ืึทืก ืคื•ืŸ ืึทืœืข ืคึผืึทืจืึทืžืขื˜ืขืจืก, ืžื™ื˜ืœ ืคึฟืึทืจ ืžืึธื ื™ื˜ืึธืจื™ื ื’ ื”ืขืกืงืขื ืžื™ื˜ ื‘ืึทืคืขืจ ื‘ืึทื•ื ื“ืจื™ื–, ืฆืขืฉื™ื™ื“ื•ื ื’ ืคื•ืŸ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื•ืŸ ืจื™ืกื˜ืจื™ืงืฉืึทืŸ ืคื•ืŸ ืึทืงืกืขืก ืฆื• ืกื™ืกื˜ืขื ืงืึทืœืœืก ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜. ืื ื“ืขืจืข ืึทื“ื•ื•ืึทื ื˜ื™ื“ื–ืฉื™ื– ืึทืจื™ื™ึทื ื ืขืžืขืŸ ื“ื™ ื‘ืึทืงื•ื•ืขื ืกื™ื ื˜ืึทืงืก ืคื•ืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื“ืขืคึฟื™ื ื™ืฆื™ืข ืฉืคึผืจืึทืš, ื”ื•ื™ืš ืคืึธืจืฉื˜ืขืœื•ื ื’ ืื•ืŸ ื–ื›ึผืจื•ืŸ ืขืคืขืงื˜ื™ื•ื•ืงื™ื™ึทื˜ (ืœืžืฉืœ, OpenBGPD ืงืขื ืขืŸ ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ ืจื•ื˜ื™ื ื’ ื˜ื™ืฉืŸ ืžื™ื˜ ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ ื˜ื•ื™ื–ื ื˜ืขืจ ืคื•ืŸ ืื™ื™ื ืกืŸ). ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืฉื˜ื™ืฆื˜ ืจื•ื‘ึฟ ืคื•ืŸ ื“ื™ BGP 4 ืกืคึผืขืกืึทืคืึทืงื™ื™ืฉืึทื ื– ืื•ืŸ ื ืึธื›ืงื•ืžืขืŸ ืžื™ื˜ ื“ื™ ืจืขืงื•ื•ื™ืจืขืžืขื ืฅ ืคื•ืŸ RFC8212, ืึธื‘ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืึทืจื•ืžื ืขืžืขืŸ ื“ื™ ื•ื•ืึทืกื˜ ืื•ืŸ ื’ื™ื˜ ื“ืขืจ ื”ื•ื™ืคึผื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ ืžืขืจืกื˜ ืคืึธืœืงืก ืื•ืŸ ื•ื•ื™ื™ื“ืกืคึผืจืขื“ ืคืึทื ื’ืงืฉืึทื ื–.

ืื™ืŸ ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ OpenBGPD 6.7 ืื ื’ืขืฆื™ื™ื›ื ื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ:

  • ื“ื™ bgpctl ื ื•ืฆืŸ ื’ื™ื˜ ืขืจืฉื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ JSON ืจืขื–ื•ืœื˜ืึทื˜;
  • ะ’ bgpd.conf ืขืก ืื™ื– ืขืจืœื•ื™ื‘ื˜ ืฆื• ืฉื˜ืขืœืŸ ืกื™ื™ืžืึทืœื˜ื™ื™ื ื™ืึทืกืœื™ IPv4 ืื•ืŸ IPv6 ืึทื“ืจืขืกืขืก ืื™ืŸ ื“ื™ ื”ื™ื’ืข ืึทื“ืจืขืก ื“ื™ืจืขืงื˜ื™ื•ื• ืื™ืŸ "ื’ืจื•ืคึผืข" ื‘ืœืึทืงืก;
  • ืจื™ื›ื˜ื™ืง ืึทื’ื’ืจืขื’ืึทื˜ื™ืึธืŸ ืคื•ืŸ ืจืึธืึท ื˜ื™ืฉืŸ (ืจืึธื•ื˜ ืึธืจื™ื’ื™ืŸ ืึทื•ื˜ื”ืึธืจื™ื–ืึทื˜ื™ืึธืŸ) ืžื™ื˜ ืคึผืจืขืคื™ืงืก / ืžืงื•ืจ-ื•ื•ื™ ืคึผืขืจื– ืื™ืŸ ืื™ื™ืŸ ืขืœืขืžืขื ื˜ ืžื™ื˜ ื“ื™ ืœืึธื ื’ืขืกื˜ "ืžืึทืงืกืœืขืŸ" ื•ื•ืขืจื˜ ืื™ื– ื™ื ืฉื•ืจื“;
  • ืฆื•ื’ืขื’ืขื‘ืŸ "ืžืึทืงืก-ืคึผืจืขืคื™ืงืก {NUM} ืื•ื™ืก" ืคืึทืจืžืึธื’ ืฆื• bgpd.conf ืฆื• ื‘ืึทื’ืจืขื ืขืฆืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืึทื“ื•ื•ืขืจื˜ื™ื™ื–ื“ ืคึผืจืขืคื™ืงืก ืฆื• ื•ื™ืกืžื™ื™ื“ืŸ ืœื™ืงื™ื ื’ ืคื•ืœ ื˜ื™ืฉืŸ;
  • ืื™ืŸ bgpctl, ื“ื™ 'ื•ื•ื™ื™ึทื–ืŸ ืฉื›ืŸ' ื‘ืึทืคึฟืขืœ ืื™ื– ื™ืงืกืคึผืึทื ื“ื™ื“ ืฆื• ื•ื•ื™ื™ึทื–ืŸ ืงืึธื•ื ื˜ืขืจืก ืคื•ืŸ ื‘ืืงื•ืžืขืŸ ืื•ืŸ ื‘ืึทืฉื˜ื™ืžื˜ ืคึผืจืขืคื™ืงืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ื•ื•ืขืจื˜ ืคื•ืŸ ื“ื™ "ืžืึทืงืก-ืคึผืจืขืคื™ืงืก ืื•ื™ืก" ืฉื™ืขื•ืจ;
  • ื“ื™ ื ืึธื•ื˜ืึทืคืึทืงื™ื™ืฉืึทื ื– ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื’ืจื•ื ื˜ ืคื•ืŸ ื“ื™ ื ืขืกื˜ืขื“ ืขืจืจืึธืจืก. ื“ืขืจ ื‘ืึทืคึฟืขืœ "bgpctl ื•ื•ื™ื™ึทื–ืŸ ืฉื›ืŸ" ื’ื™ื˜ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ื™ ื’ืจื•ื ื˜ ืคื•ืŸ ื“ื™ ืœืขืฆื˜ืข ื‘ืืงื•ืžืขืŸ ื˜ืขื•ืช;
  • ืฆื• ืจื™ื›ื˜ื™ืง ื“ื•ืจื›ืคื™ืจืŸ ื“ื™ "ื’ืจืึทืฆื™ืขื– ืจื™ืœืึธื•ื“" ืึธืคึผืขืจืึทืฆื™ืข, ืคืึทืจืขืœื˜ืขืจื˜ ืคึผืจืขืคื™ืงืกื™ื– ื–ืขื ืขืŸ ืื ื’ืขืฆื™ื™ื›ื ื˜ ืื™ืŸ ื“ื™ Adj-RIB-Out ื˜ื™ืฉ, ื•ื•ืึธืก ืกื˜ืึธืจื– ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ืจื•ืฅ ืื•ื™ืกื’ืขืงืœื™ื‘ืŸ ื“ื•ืจืš ื“ื™ ื”ื™ื’ืข BGP ืจืึทื•ื˜ืขืจ ืฆื• ืžืขืœื“ืŸ ืึธืคึผื˜ื™ืžืึทืœ ืจื•ืฅ ืฆื• ืคึผื™ืจื–;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื‘ื•ื™ืขืŸ OpenBGPD ื ื™ืฆืŸ ื“ืขื ืคึผืขืงืœ ืคึฟืึทืจ ืฉืจื™ื™ื‘ืŸ ื‘ื™ืกืึธืŸ ืคึผืึทืจืกืขืจื– ืึธืŸ ื‘ื™ื™ืึทืงืง;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ "--runstatedir" ืึธืคึผืฆื™ืข, ื“ื•ืจืš ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ืขื ื“ืจืš ืฆื• bgpctl.sock;
  • ืงืœื™ื ื“ ืึทืจื•ื™ืฃ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจ ืฉืจื™ืคื˜ ืฆื• ืคึฟืึทืจื‘ืขืกืขืจืŸ ืคึผืึธืจื˜ืึทื‘ื™ืœื™ื˜ื™.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’