Inguqulo ephathekayo ye-OpenBGPD 6.6p0 iyatholakala

Abathuthukisi be-OpenBSD ilungisiwe ukukhishwa kwe-edishini ephathekayo yephakheji yomzila I-OpenBGPD 6.6, engasetshenziswa ezinhlelweni zokusebenza ngaphandle kwe-OpenBSD. Ukuqinisekisa ukuphatheka, izingxenye zekhodi evela kumaphrojekthi we-OpenNTPD, OpenSSH kanye ne-LibreSSL zisetshenzisiwe. Ngaphezu kwe-OpenBSD, ukusekelwa kwe-Linux ne-FreeBSD kuyamenyezelwa. I-OpenBGPD ihlolwe ku-Debian 9, Ubuntu 14.04 kanye ne-FreeBSD 12.

I-OpenBGPD ithuthukiswa ngaphansi ukusekela umbhali we-inthanethi wesifunda i-RIPE NCC, enentshisekelo yokuletha ukusebenza kwe-OpenBGPD ekufanelekeni ukuze isetshenziswe kumaseva omzila ezindaweni zokushintshisana zethrafikhi (IXP) kanye nokudala enye indlela egcwele yephakheji INYONI (ezinye izindlela ezivulekile ezisebenzisa iphrothokholi ye-BGP zihlanganisa amaphrojekthi Ukukhipha, I-GoBGP, ExaBGP и I-Bio-Routing).

Ukuthuthukiswa kwe-OpenBGPD kugxile ekuqinisekiseni izinga eliphezulu lokuphepha nokwethembeka. Ukuze uvikeleke, ukuqinisekiswa okuqinile kokulunga kwayo yonke imingcele, izindlela zokuqapha ukuthotshelwa kwemingcele yebhafa, ukuhlukaniswa kwamalungelo, kanye nokuvinjelwa kokufinyelela kumakholi wesistimu kuyasetshenziswa. Ezinye izinzuzo zihlanganisa i-syntax elula yolimi lwencazelo yokumisa, ukusebenza okuphezulu nokusebenza kahle kwenkumbulo (isibonelo, i-OpenBGPD ingasebenza namathebula omzila aqukethe amakhulu ezinkulungwane zokufakiwe). Le phrojekthi isekela imininingwane eminingi ye-BGP 4 futhi ithobelana nezidingo ze-RFC8212, kodwa ayizami ukwamukela okukhulu futhi inikeza ngokuyinhloko ukusekelwa kwemisebenzi ethandwa kakhulu nesabalele.

Ukukhishwa kwe-OpenBGPD 6.6 kufaka ukuthuthukiswa okulandelayo:

• Ukuthuthukisa ukusebenza kwethebula I-Adj-RIB-Out, egcina ulwazi mayelana nemizila ekhethwe umzila wendawo ye-BGP ukukhangisa imizila elungile kontanga, ishintshelwe ekusebenziseni izihlahla ze-RB ezihlotshaniswa nontanga;
• Ikhodi yokufanisa umphakathi isibhalwe kabusha, umsebenzi wokucupha nemiphakathi embalwa kanye nenani elikhulu lontanga lisheshiswe kakhulu.
• Umyalo we-'show mrt neighbors' wengezwe ku-bgpctl ukuze kulahlwe ithebula lamarutha e-BGP angomakhelwane ngefomethi MRT TABLE_DUMP_V2;
• Uma isebenza ku-Linux, usekelo luhlinzekwa ukuvikela izikhathi ze-BGP kusetshenziswa I-TCP MD5SIG;
• Usayizi omkhulu imiyalezo yokunqanyulwa kokuxhumana inyuke yaba ngamabhayithi angama-255.

Source: opennet.ru