Lolu cwaningo luchaza ukuthi ukwehluleka kwesistimu eyodwa yokuzimela (AS) kuthinta kanjani ukuxhumeka komhlaba wonke kwesifunda esithile, ikakhulukazi uma kuziwa kumhlinzeki wesevisi ye-inthanethi omkhulu kakhulu (ISP) kulelo zwe. Ukuxhumana kwe-inthanethi ezingeni lenethiwekhi kuqhutshwa ukusebenzelana phakathi kwezinhlelo ezizimele. Njengoba inani leminye imizila phakathi kwama-AS likhula, ukubekezelelana kwamaphutha kuyavela kanye nokuzinza kwe-inthanethi ezweni elinikeziwe kuyanda. Nokho, ezinye izindlela ziba zibaluleke kakhulu kunezinye, futhi ukuba nezindlela eziningi ezihlukile ngangokunokwenzeka ekugcineni kuwukuphela kwendlela yokuqinisekisa ukwethembeka kwesistimu (ngomqondo we-AS).
Ukuxhumana komhlaba wonke kwanoma iyiphi i-AS, noma ngabe iwumhlinzeki we-inthanethi omncane noma isikhondlakhondla samazwe ngamazwe esinezigidi zabasebenzisi besevisi, kuncike enanini nekhwalithi yezindlela zayo eziya kubahlinzeki be-Tier-1. Njengomthetho, i-Tier-1 isho inkampani yamazwe ngamazwe ehlinzeka ngesevisi yezokuthutha ye-IP yomhlaba wonke kanye nokuxhumeka kwabanye opharetha be-Tier-1. Kodwa-ke, asikho isibopho ngaphakathi kweklabhu ye-elite enikeziwe yokugcina ukuxhumana okunjalo. Imakethe kuphela engakhuthaza izinkampani ezinjalo ukuthi zixhumane ngaphandle kwemibandela, zinikeze isevisi yekhwalithi ephezulu. Ingabe lesi sikhuthazo esanele? Sizophendula lo mbuzo ngezansi esigabeni sokuxhuma i-IPv6.
Uma i-ISP ilahlekelwa ngisho nokukodwa kokuxhumana kwayo kwe-Tier-1, cishe ngeke itholakale kwezinye izingxenye zomhlaba.
Ukulinganisa Ukuthembeka Kwe-inthanethi
Cabanga ukuthi i-AS ihlangabezana nokuwohloka okukhulu kwenethiwekhi. Sifuna impendulo yombuzo olandelayo: “Yimaphi amaphesenti e-AS kulesi sifunda angalahlekelwa ukuxhumana nama-opharetha we-Tier-1, ngaleyo ndlela alahlekelwe ukutholakala komhlaba wonke”?
Indlela yocwaningoKungani ulingisa isimo esinjalo? Uma sikhuluma ngokuqinile, lapho i-BGP nomhlaba womzila phakathi kwesizinda usesigabeni sokuklama, abadali bacabange ukuthi i-AS ngayinye engeyona ezokuthutha izoba okungenani nabahlinzeki ababili abakhuphuka nomfula ukuze baqinisekise ukubekezelelana kwamaphutha uma omunye wabo ehluleka. Kodwa-ke, empeleni yonke into ihluke ngokuphelele - ngaphezu kwama-45% ama-ISP anokuxhumana okukodwa kuphela endleleni yokuhamba ekhuphuka nomfula. Iqoqo lobudlelwano obungajwayelekile phakathi kwama-ISPs wezokuthutha aphinde anciphise ukwethembeka kukonke. Ngakho-ke, ingabe ama-ISPs ezokuthutha ayawa? Impendulo inguyebo, futhi kwenzeka kaningi. Umbuzo olungile kuleli cala uthi: "I-ISP ethile izobhekana nini nokuwohloka kokuxhumeka?" Uma izinkinga ezinjalo zibonakala zikude komunye umuntu, kufanelekile ukukhumbula umthetho kaMurphy: "Konke okungahamba kahle, kuzohamba kabi."
Ukuze silingise isimo esifanayo, sisebenzisa imodeli efanayo unyaka wesithathu ulandelana. Ngawo lowo nyaka, asizange nje siphinde izibalo ezedlule - sandise kakhulu ububanzi bocwaningo lwethu. Izinyathelo ezilandelayo zilandelwe ukuze kuhlolwe ukwethembeka kwe-AS:
- Ku-AS ngayinye emhlabeni, sithola zonke ezinye izindlela eziya kuma-opharetha we-Tier-1 sisebenzisa imodeli yobudlelwano ye-AS, esebenza njengomnyombo womkhiqizo we-Qrator.Radar;
- Sisebenzisa isizindalwazi se-IPIP, senze imephu ikheli le-IP ngalinye le-AS ngalinye silibhekise ezweni elihambisana nalo;
- Ku-AS ngayinye, sibale isabelo sesikhala salo sekheli esihambisana nesifunda esikhethiwe. Lokhu kusize ukuhlunga izimo lapho i-ISP ingase ibe khona endaweni yokushintshisana ezweni elithile, kodwa ingabi khona esifundeni sisonke. Isibonelo esingokomfanekiso i-Hong Kong, lapho amakhulu amalungu ohwebo lwe-inthanethi olukhulukazi lwase-Asia lwe-HKIX lushintshanisa ithrafikhi enoziro engxenyeni ye-inthanethi yase-Hong Kong;
- Ngemva kokuthola imiphumela ecacile ye-AS esifundeni, sihlola umthelela wokwehluleka okungenzeka kwale AS kwamanye ama-AS kanye namazwe akhona;
- Ekugcineni, ezweni ngalinye, sithole i-AS ethile ethinte iphesenti elikhulu kwamanye ama-AS kuleso sifunda. Ama-AS angaphandle ngeke acatshangelwe.
Ukwethembeka kwe-IPv4
Ngezansi ungabona amazwe angu-20 aphezulu mayelana nokuthembeka mayelana nokubekezelela amaphutha uma kwenzeka ukwehluleka kwe-AS okukodwa. Empeleni, lokhu kusho ukuthi izwe linokuxhumana okuhle kwe-inthanethi, futhi iphesenti libonisa ingxenye yama-AS azolahlekelwa ukuxhumeka komhlaba wonke uma i-AS enkulu yehluleka.
Amaqiniso asheshayo:
- I-USA yehle izikhundla ezingu-11 isuka kweyesi-7 yaya kweye-18;
- I-Bangladesh ishiye phezulu kwabangama-20;
- I-Ukraine ikhuphuke izikhundla ezingu-8 endaweni yesi-4;
- I-Austria iphume kwabangu-20;
- Amazwe amabili abuyela kwabangama-20 aphezulu: i-Italy neLuxembourg ngemuva kokuphuma ngo-2017 nango-2018 ngokulandelana.
Ukunyakaza okuthakazelisayo kwenzeka ezilinganisweni zokusimama minyaka yonke. Ngonyaka odlule sabhala ukuthi ukusebenza jikelele kwamazwe angu-20 aphezulu akukashintshi kangako kusukela ngowezi-2017. Kuhle ukuqaphela ukuthi unyaka nonyaka sibona inkambiso enhle yomhlaba wonke eya ekuthembekeni okuthuthukisiwe kanye nokutholakala kukonke. Ukukhombisa leli phuzu, siqhathanisa izinguquko ezimaphakathi nemaphakathi phakathi neminyaka engu-4 esilinganisweni esiphelele se-IPv4 sokusimama kuwo wonke amazwe angu-233.
Inani lamazwe akwazile ukwehlisa ukuncika kwawo ku-AS eyodwa laya ngaphansi kuka-10% (uphawu lokukhuthazela okuphezulu) likhuphuke ngama-5 uma kuqhathaniswa nonyaka odlule, lafinyelela izingxenye zikazwelonke ezingama-2019 kusukela ngoSepthemba 35.
Ngakho-ke, njengethrendi ebaluleke kakhulu ebonwa phakathi nenkathi yethu yocwaningo, sihlonza ukwanda okukhulu kokuqina kwamanethiwekhi emhlabeni wonke, ku-IPv4 naku-IPv6.
Ukuqina kwe-IPv6
Sekuyiminyaka embalwa siphinda ukuthi ukucabanga okuyiphutha kokuthi i-IPv6 isebenza ngokufana ne-IPv4 kuyinkinga yesakhiwo ekuthuthukisweni nasekusetshenzisweni kwe-IPv6.
Ngonyaka odlule sabhala ngezimpi zokubuka ezingaqhubeki ku-IPv6 kuphela, kodwa naku-IPv4, lapho i-Cogent ne-Hurricane Electric zingaxhumani. Kulo nyaka simangele ukuthola ukuthi enye ipheya yezimbangi zangonyaka odlule, iDeutsche Telekom neVerizon US, isungule ngempumelelo i-IPv6 yokubuka ngoMeyi 2019. Mancane amathuba okuthi uthole noma yikuphi okushiwo ngakho, kodwa lesi isinyathelo esikhulu - abahlinzeki ababili abakhulu be-Tier-1 bayekile ukulwa futhi ekugcineni sebesungule uxhumano kontanga besebenzisa umthetho olandelwayo sonke esifuna ukuthuthukiswa okwengeziwe.
Ukuqinisekisa ukuxhumeka okugcwele nokwethembeka okuphezulu, izindlela eziya ku-opharetha we-Tier-1 kufanele zibe khona ngaso sonke isikhathi. Siphinde sabala iphesenti lama-AS ezweni elinokuxhumeka okuyingxenye kuphela ku-IPv6 ngenxa yezimpi ezikhona. Nansi imiphumela:
Ngemva konyaka, i-IPv4 isalokhu ithembekile kakhulu kune-IPv6. Ukuthembeka okumaphakathi nokuzinza kwe-IPv4 ngo-2019 ngu-62,924%, kanye no-54,53% ku-IPv6. I-IPv6 isenenani eliphezulu lamazwe anokutholakala okubi komhlaba jikelele—okungukuthi, iphesenti eliphezulu lokuxhumana okuyingxenye.
Uma kuqhathaniswa nonyaka odlule, sibone intuthuko enkulu emazweni amathathu amakhulu, ikakhulukazi emkhakheni wokuxhumana ngokwengxenye. Ngonyaka odlule, iVenezuela ibe nama-33%, i-China 65% kanye ne-UAE 25%. Ngenkathi i-Venezuela ne-China zithuthukise kakhulu ukuxhumana kwazo, zibhekana nezinselelo ezinkulu zamanethiwekhi axhumeke kancane, i-UAE ishiywe ngaphandle komfutho omuhle kule ndawo.
Ukufinyelela kwebroadband namarekhodi e-PTR
Ukuphinda umbuzo ebesilokhu sizibuza wona kusukela ngonyaka odlule: "Ingabe kuyiqiniso ukuthi umhlinzeki oholayo ezweni uhlala ethinta ukwethembeka kwesifunda ngaphezu kwawo wonke umuntu noma yimuphi omunye?", sithuthukise imethrikhi eyengeziwe ukuze siqhubeke sicwaninga. Mhlawumbe umhlinzeki we-inthanethi obaluleke kakhulu (ngesisekelo samakhasimende) endaweni ethile ngeke ngempela kube uhlelo oluzimele oluba olubaluleke kakhulu ekuhlinzekeni ukuxhumana komhlaba wonke.
Ngonyaka odlule, sinqume ukuthi inkomba enembe kakhulu yokubaluleka kwangempela komhlinzeki ingase isekelwe ekuhlaziyweni kwamarekhodi e-PTR. Ngokuvamile zisetshenziselwa ukuhlehliswa kwe-DNS lookups: kusetshenziswa ikheli le-IP, igama lomethuleli elihlobene noma igama lesizinda lingabonakala.
Lokhu kusho ukuthi i-PTR ingakwazi ukunika amandla ukukalwa kwesisetshenziswa esithile endaweni yekheli lomuntu ngamunye. Njengoba sesivele sazi ama-AS amakhulu wezwe ngalinye emhlabeni, singabala amarekhodi e-PTR kumanethiwekhi alaba bahlinzeki, sinquma isabelo sabo phakathi kwawo wonke amarekhodi e-PTR esifundeni. Kuyafaneleka ukwenza umshwana wokuzihlangula ngokushesha: sibale amarekhodi e-PTR KUPHELA futhi asizange sibale isilinganiso samakheli e-IP ngaphandle kwamarekhodi e-PTR kumakheli e-IP anamarekhodi e-PTR.
Ngakho-ke, kulokhu okulandelayo sikhuluma ngokukhethekile ngamakheli e-IP anamarekhodi e-PTR akhona. Akuwona umthetho ojwayelekile ukuwadala, yingakho abanye abahlinzeki befaka ama-PTR kanti abanye abakwenzi.
Sibonise ukuthi mangaki kulawa makheli e-IP anamarekhodi e-PTR ashiwo azonqanyulwa uma kwenzeka kunqanyulwa uhlelo oluzimele olukhulu (nge-PTR) ezweni elishiwo. Isibalo sibonisa amaphesenti awo wonke amakheli e-IP anosekelo lwe-PTR esifundeni.
Ake siqhathanise amazwe angama-20 athenjwe kakhulu kusukela kumazinga e-IPv4 ka-2019 nezinga le-PTR:
Ngokusobala, indlela ecubungula amarekhodi e-PTR inikeza imiphumela ehluke ngokuphelele. Ezimweni eziningi, hhayi kuphela ukuthi i-AS emaphakathi esifundeni iyashintsha, kodwa iphesenti lokungazinzi kwe-AS elishiwo lihluke ngokuphelele. Kuzo zonke izifunda ezinokwethenjelwa, ngokombono wokutholakala komhlaba wonke, inani lamakheli e-IP anosekelo lwe-PTR elizonqanyulwa ngenxa yokuwa kwe-AS liphezulu izikhathi eziyishumi.
Lokhu kungasho ukuthi i-ISP kazwelonke ehamba phambili ihlala ingumnikazi wabasebenzisi bokugcina. Ngakho, kufanele sicabange ukuthi leli phesenti limelela ingxenye yomsebenzisi nekhasimende le-ISP ezonqanyulwa (uma kwenzeka ukushintshela komunye umhlinzeki kungenakwenzeka) uma kwenzeka kwehluleki. Ngokwaleli phuzu lokubuka, amazwe awasabonakali njengokwethenjelwa njengoba ebukeka ngokombono wezokuthutha. Sishiyela kumfundi iziphetho ezingaba khona kusukela ekuqhathaniseni i-IPv20 ephezulu engu-4 namanani okulinganisa e-PTR.
Imininingwane yoshintsho emazweni ngamanye
Njengenjwayelo kulesi sigaba, siqala ngokungena okukhethekile kakhulu kwe-AS174 - Cogent. Ngonyaka odlule siveze umthelela wayo e-Europe, lapho i-AS174 ihlonzwa njengebalulekile emazweni angu-5 kwangu-20 aphezulu ku-IPv4 Resilience Index. Kulo nyaka u-Cogent ugcina ukuba khona kwabangu-20 abaphezulu ngokwethembeka, nokho, ngezinguquko ezithile - ikakhulukazi eBelgium naseSpain i-AS174 isithathelwe indawo njenge-AS ebaluleke kakhulu. Ngo-2019, eBelgium yaba yi-AS6848 - Telenet, naseSpain - AS12430 - Vodafone.
Manje, ake sibhekisise amazwe amabili anamaphuzu amahle ngokomlando okukhuthazela enze izinguquko ezibaluleke kakhulu onyakeni odlule: i-Ukraine ne-United States of America.
Okokuqala, i-Ukraine isithuthukise kakhulu isikhundla sayo kuzinga le-IPv4. Ukuze uthole imininingwane, siphendukele ku-Max Tulyev, ilungu lebhodi le-Ukrainian Internet Association, ukuthola imininingwane ngokwenzeka ezweni lakubo phakathi nezinyanga eziyi-12 ezedlule:
“Ushintsho olubaluleke kakhulu esilubona e-Ukraine ukwehla kwezindleko zokuthutha idatha. Lokhu kuvumela izinkampani eziningi ze-inthanethi ezinenzuzo ukuthi zithole ukuxhumana okuningi okukhuphuka nomfula ngaphandle kwemingcele yethu. I-Hurricane Electric iyasebenza ikakhulukazi emakethe, ihlinzeka "ngezokuthutha zamazwe ngamazwe" ngaphandle kwenkontileka eqondile ngoba ayisusi iziqalo ekushintshaneni - ivele imemezele ikhoni yekhasimende kuma-IXPs wendawo."
I-AS eyinhloko yase-Ukraine isishintshile isuka ku-AS1299 Telia yaba i-AS3255 UARNET. UMnu Tulyev wachaza ukuthi, ekubeni inethiwekhi yezemfundo yangaphambili, i-UARNET manje isibe inethiwekhi yezokuthutha esebenzayo, ikakhulukazi eNtshonalanga ye-Ukraine.
Manje ake sidlulele kwenye ingxenye yoMhlaba - e-USA.
Umbuzo wethu oyinhloko ulula kakhulu - ithini imininingwane yokwehla kwe-11-notch ekuqineni kwe-US?
Ngo-2018, i-US yakleliswa endaweni yesi-7 ngo-4,04% wezwe okungenzeka ukuthi lilahlekelwe ukutholakala komhlaba wonke uma i-AS209 yehluleka. Umbiko wethu ka-2018 unikeza ukuqonda kokuthi yini eyayishintsha e-United States ngonyaka odlule:
Kodwa izindaba ezinkulu yilokho okwenzeka e-United States. Iminyaka emibili ilandelana - 2016 kanye no-2017 - sihlonze i-AS174 ka-Cogent njengoshintsho lwegeyimu kule makethe. Akusenjalo—ngonyaka ka-2018, i-AS 209 CenturyLink yathatha indawo yayo, yathumela i-United States ezindaweni ezintathu kuNombolo 7 ezilinganisweni ze-IPv4."
Imiphumela yango-2019 ikhombisa i-United States ikleliswe endaweni ye-18 ngemiphumela yayo yokuqina ewela ku-6,83%—ushintsho olungaphezu kuka-2,5%, okuvamise ukwanele ukuphuma kwabangu-20 abaphezulu kumazinga okuqina e-IPv4.
Sifinyelele kumsunguli we-Hurricane Electric uMike Leber ukuze aphawule ngalesi simo:
“Lokhu kuwushintsho olungokwemvelo njengoba i-inthanethi yomhlaba wonke iqhubeka nokukhula. Ingqalasizinda ye-IT kuwo wonke amazwe iyakhula futhi yenziwa ibe yesimanje ukweseka umnotho wolwazi olokhu ushintsha njalo futhi uthuthuka. Ukukhiqiza kuthuthukisa ulwazi lwamakhasimende kanye nemali engenayo. Ingqalasizinda ye-IT yendawo ithuthukisa ukukhiqiza. Lawa amandla e-macro-techno-economic.”
Kuhlale kuthakazelisa ukuhlaziya okwenzekayo emnothweni omkhulukazi emhlabeni, ikakhulukazi uma sibona ukwehla okuphawulekayo kwezinga lokwethembeka. Njengesikhumbuzo, ngonyaka odlule saphawula ukushintshwa kwe-Cogent's AS174 yi-AS209 ka-CenturyLink e-United States. Kulo nyaka, i-CenturyLink ilahlekelwe isikhundla sayo njenge-AS ebucayi yezwe kolunye uhlelo oluzimele, i-Level3356's AS3. Lokhu akumangazi njengoba lezi zinkampani ezimbili zimele kahle inhlangano eyodwa kusukela zathatha izintambo ngo-2017. Kusukela manje kuqhubeke, ukuxhumana kwe-CenturyLink kuncike ngokuphelele ekuxhumekeni kwe-Level3. Kungaphethwa ngokuthi ukwehla okuphelele kokuthembeka kuhlotshaniswa nesigameko esenzeka kunethiwekhi ye-Level3/CenturyLink ekupheleni kuka-2018, lapho amaphakethe enethiwekhi ama-4 angaziwa aphazamisa i-inthanethi amahora ambalwa endaweni enkulu yase-United States. . Lo mcimbi ngokuqinisekile ube nomthelela ekhonweni le-CenturyLink/Level3 lokuhlinzeka ngezokuthutha kubadlali abakhulu besizwe, abanye babo okungenzeka ukuthi bashintshele kwabanye abahlinzeki bezokuthutha noma bavele bashintshanisa ukuxhumana kwabo komfula nokwehla nomfula. Kodwa-ke, naphezu kwakho konke lokhu okungenhla, i-Level3 isalokhu ingumhlinzeki wokuxhumana obaluleke kakhulu e-US, ukuvalwa kwayo okungaholela ekuntulekeni kokutholakala komhlaba wonke cishe kwe-7% yezinhlelo zasekhaya ezizimele ezithembele kulokhu kudlula.
I-Italy ibuyele kwabangu-20 abaphezulu endaweni ye-17 nge-AS12874 Fastweb efanayo, okungenzeka kube umphumela wokuthuthukiswa okuphawulekayo kwekhwalithi kanye nenani lezindlela eziya kulo mhlinzeki. Phela, kanye naye ngo-2017, i-Italy yehla yaya endaweni yama-21, yashiya phezulu kwe-20.
Ngo-2019, iSingapore, eyangena ezikhundleni eziphezulu ezingama-20 kuphela ngonyaka odlule kodwa yagxumela endaweni yesi-5, yaphinde yathola i-ASN entsha ebucayi. Ngonyaka odlule sizame ukuchaza izinguquko ezifundeni zaseNingizimu-mpumalanga ye-Asia. Kulo nyaka, i-AS ebalulekile yaseSingapore isishintshile isuka ku-AS3758 SingNet yangonyaka odlule yaba i-AS4657 Starnet. Ngalolu shintsho, isifunda silahlekelwe isikhundla esisodwa kuphela, sehlela endaweni yesi-6 kusezingeni ngo-2019.
I-China yenze ukweqa okumangalisayo isuka endaweni ye-113 ngo-2018 yaya endaweni yama-78 ngo-2019, noshintsho olucishe lube ngu-5% kumandla e-IPv4 ngokwendlela yethu. Ku-IPv6, ukuxhumana kwe-China ngokwengxenye kwehle kusuka ku-65,93% ngonyaka odlule kwaya ngaphezudlwana nje kwama-20% kulo nyaka. I-ASN eyinhloko ku-IPv6 ishintshile ukusuka ku-AS9808 China Mobile ngo-2018 ukuya ku-AS4134 ngo-2019. Ku-IPv4, AS4134, okuphethwe yi-China Telecom, ibibucayi iminyaka eminingi.
Ku-IPv6, ngasikhathi sinye, ingxenye yamaShayina Ye-inthanethi yehle ngezindawo ezingama-20 esimeni sokusimama sango-2019 - isuka ku-10% ngonyaka odlule yaya ku-23,5% ngo-2019.
Mhlawumbe, konke lokhu kubonisa into eyodwa kuphela elula - i-China Telecom ithuthukisa ngenkuthalo ingqalasizinda yayo, isele inethiwekhi yokuxhumana eyinhloko ye-China ne-Inthanethi yangaphandle.
Ngokukhula kwezingozi ze-cybersecurity futhi, eqinisweni, ukugeleza okuqhubekayo kwezindaba mayelana nokuhlaselwa kwengqalasizinda ye-inthanethi, sekuyisikhathi sabo bonke ohulumeni, izinkampani ezizimele nezikahulumeni, kodwa ngaphezu kwakho konke, abasebenzisi abajwayelekile ukuthi bahlole ngokucophelela izikhundla zabo. Izingozi ezihlobene nokuxhumana kwesifunda kufanele zihlolwe ngokucophelela nangokwethembeka, kuhlaziywe amazinga eqiniso okwethembeka. Ngisho namanani aphansi esilinganisweni sobuthakathaka angabangela izinkinga zokutholakala kwangempela uma kwenzeka ukuhlaselwa okukhulu kumhlinzeki omkhulu, ezweni lonke wesevisi ebalulekile, kusho i-DNS. Ungakhohlwa futhi ukuthi umhlaba wangaphandle uzonqanyulwa kumasevisi nedatha etholakala ngaphakathi kwesifunda uma kwenzeka kulahleka ukuxhumeka okuphelele.
Ucwaningo lwethu lubonisa ngokusobala ukuthi i-ISP eqhudelanayo nezimakethe zenkampani yenethiwekhi ekugcineni ziyavela ukuze zizinze kakhulu futhi zikwazi ukumelana nezingozi ngaphakathi nangaphandle kwesifunda esithile. Ngaphandle kwemakethe yokuncintisana, ukwehluleka kwe-AS eyodwa kungakwazi futhi kuzoholela ekulahlekeni kokuxhumana kwenethiwekhi engxenyeni enkulu yabasebenzisi ezweni noma esifundeni esibanzi.
Source: www.habr.com