Inguqulo ephathekayo ye-OpenBGPD 6.7p0 iyatholakala

Abathuthukisi be-OpenBSD eshicilelwe ukukhishwa kwe-edishini ephathekayo yephakheji yomzila I-OpenBGPD 6.7, engasetshenziswa ezinhlelweni zokusebenza ngaphandle kwe-OpenBSD. Ukuqinisekisa ukuphatheka, izingxenye zekhodi evela kumaphrojekthi we-OpenNTPD, OpenSSH kanye ne-LibreSSL zisetshenzisiwe. Ngaphezu kwe-OpenBSD, ukusekelwa kwe-Linux ne-FreeBSD kuyamenyezelwa. I-OpenBGPD ihlolwe ku-Debian 9, Ubuntu 14.04+ kanye ne-FreeBSD 12.

I-OpenBGPD ithuthukiswa ngaphansi ukusekela umbhali we-inthanethi wesifunda i-RIPE NCC, enentshisekelo yokuletha ukusebenza kwe-OpenBGPD ekufanelekeni ukuze isetshenziswe kumaseva omzila ezindaweni zokushintshisana zethrafikhi (IXP) kanye nokudala enye indlela egcwele yephakheji INYONI (ezinye izindlela ezivulekile ezisebenzisa iphrothokholi ye-BGP zihlanganisa amaphrojekthi Ukukhipha, I-GoBGP, ExaBGP и I-Bio-Routing).

Ukuthuthukiswa kwe-OpenBGPD kugxile ekuqinisekiseni izinga eliphezulu lokuphepha nokwethembeka. Ukuze uvikeleke, ukuqinisekiswa okuqinile kokulunga kwayo yonke imingcele, izindlela zokuqapha ukuthotshelwa kwemingcele yebhafa, ukuhlukaniswa kwamalungelo, kanye nokuvinjelwa kokufinyelela kumakholi wesistimu kuyasetshenziswa. Ezinye izinzuzo zihlanganisa i-syntax elula yolimi lwencazelo yokumisa, ukusebenza okuphezulu nokusebenza kahle kwenkumbulo (isibonelo, i-OpenBGPD ingasebenza namathebula omzila aqukethe amakhulu ezinkulungwane zokufakiwe). Le phrojekthi isekela imininingwane eminingi ye-BGP 4 futhi ithobelana nezidingo ze-RFC8212, kodwa ayizami ukwamukela okukhulu futhi inikeza ngokuyinhloko ukusekelwa kwemisebenzi ethandwa kakhulu nesabalele.

Ekukhishweni kwe-OpenBGPD 6.7 imakwe ukuthuthukiswa okulandelayo:

• Isisetshenziswa se-bgpctl sinikeza ukwesekwa kokuqala kokuphumayo kwe-JSON;
• В bgpd.conf kuvunyelwe ukusetha kanye kanye amakheli e-IPv4 kanye ne-IPv6 kumyalelo wekheli lendawo kumabhulokhi "weqembu";
• Ukuhlanganiswa okulungile kwamathebula e-ROA (Ukugunyazwa Kwemvelaphi Yomzila) anesiqalo/umthombo-njengamapheya ento eyodwa enevelu ende "ye-maxlen" iyaqinisekiswa;
• Kwengezwe isakhiwo esithi "isiqalo esikhulu esingu-{NUM} ngaphandle" ku-bgpd.conf ukuze kukhawulwe inani leziqalo ezikhangisiwe ukuze kugwenywe ukuvuza amathebula agcwele;
• Ku-bgpctl, umyalo 'womakhelwane wokubonisa' unwetshiwe ukuze ubonise izinto zokubala ezitholiwe nezisethiwe, kanye nenani lomkhawulo "wokuphuma kwesiqalo esikhulu";
• Izaziso zihlanganisa ulwazi mayelana nembangela yamaphutha afakwe esidlekeni. Umyalo "we-bgpctl show umakhelwane" unikeza umphumela wephutha lokugcina elitholiwe;
• Ukuze wenze kahle umsebenzi "wokulayisha kabusha ngomusa", iziqalo eziphelelwe yisikhathi zimakwa kuthebula le-Adj-RIB-Out, eligcina ulwazi mayelana nemizila ekhethwe umzila wendawo we-BGP ukukhangisa imizila elungile kontanga;
• Kwengezwe ikhono lokwakha i-OpenBGPD kusetshenziswa iphakheji yokubhala abahlaluli benyathi ngaphandle kwe-byacc;
• Kwengezwe inketho ethi “--runstatedir”, onganquma ngayo indlela eya ku-bgpctl.sock;
• Kuhlanzwe isikripthi sokumisa ukuze kuthuthukiswe ukuphatheka.

Source: opennet.ru