UGeoff Huston, unjiniyela omkhulu wocwaningo kwa-inthanethi obhalisa i-APNIC, ubikezele ukuthi amakheli e-IPv4 azophela ngo-2020. Ochungechungeni olusha lwezinto zokwakha, sizobuyekeza ulwazi mayelana nokuthi amakheli aqedwe kanjani, obani ababenawo, nokuthi kungani lokhu kwenzeke.
/Vula/
Kungani siphelelwa amakheli?
Ngaphambi kokudlulela endabeni yokuthi i-IPv4 “yoma kanjani,” ake sikhulume kancane ngezizathu. Ngo-1983, lapho kwethulwa i-TCP/IP, kwasetshenziswa ikheli le-32-bit. Ngenkathi
Ngesikhathi esifanayo, ngeminyaka yawo-80s, izinhlangano eziningi zathola amakheli amaningi kunalawo ezaziwadinga ngempela. Izinkampani eziningi zisasebenzisa amakheli omphakathi kumaseva asebenza ngokukhethekile kumanethiwekhi endawo. Ukusabalala kobuchwepheshe beselula, i-inthanethi yezinto kanye nokwenza izinto ezibonakalayo kwengeze uphethiloli emlilweni. Izibalo ezingalungile zokulinganisa inani labasingathi kunethiwekhi yomhlaba wonke kanye nokusatshalaliswa kwamakheli okungasebenzi kubangele ukushoda kwe-IPv4.
Aphela kanjani amakheli
Ekuqaleni kwawo-XNUMX, umqondisi we-APNIC uPaul Wilson
Unyaka we-2011: Njengoba uWilson abikezela, umbhalisi we-inthanethi i-APNIC (obhekele isifunda sase-Asia-Pacific) wehlele okokugcina.
Unyaka we-2012: I-European Internet registrar RIPE imemezele ukuphela kwechibi. Iphinde yaqala ukusabalalisa ibhulokhi yokugcina /8. Inhlangano yalandela ukuhola kwe-APNIC futhi yethula imikhawulo eqinile ekusatshalalisweni kwe-IPv4. Ngo-2015, i-RIPE yayinamakheli amahhala ayi-16 million kuphela. Namuhla lesi sibalo sehle kakhulu -
Izinto ezimbalwa ezintsha ezivela kubhulogi yethu ku-Habré:
Unyaka we-2013: UGeoff Haston ovela ku-APNIC kubhulogi
Unyaka we-2015: I-ARIN
Unyaka we-2017: Mayelana nokumisa ukukhishwa kwamakheli
Unyaka we-2019: Namuhla, bonke ababhalisi banenombolo encane yamakheli asele. Amachibi agcinwa entanta ngokubuyisela amakheli angasetshenzisiwe ngezikhathi ezithile ukuze asetshenziswe. Isibonelo, eMIT
Yini elandelayo
Kukholakala ukuthi amakheli e-IPv4
I-Network Address Translation (NAT) ikuvumela ukuthi uhumushe amakheli endawo amaningi uwayise ikheli langaphandle elilodwa. Inombolo enkulu yezimbobo iyizinkulungwane ezingama-65. Ngokombono, inombolo efanayo yamakheli endawo ingafakwa kumephu ekhelini elilodwa lomphakathi (uma ungabheki imikhawulo ethile yokusetshenziswa ngakunye kwe-NAT).
/Vula/
Abahlinzeki be-inthanethi bangaphendukela kuzixazululo ezikhethekile - Ibanga Lenkampani Yenethiwekhi NAT. Zikuvumela ukuthi uphathe phakathi nendawo amakheli asekhaya nawangaphandle ababhalisile futhi ukhawulele inani lamachweba we-TCP kanye ne-UDP atholakalayo kumakhasimende. Ngakho-ke, izimbobo zisatshalaliswa ngokuphumelelayo phakathi kwabasebenzisi, futhi kukhona ukuvikeleka ekuhlaselweni kwe-DDoS.
Phakathi kokubi kwe-NAT yizinkinga ezingaba khona ngama-firewall. Zonke izikhathi zabasebenzisi zifinyelela inethiwekhi ngekheli elilodwa elimhlophe. Kuvele ukuthi iklayenti elilodwa kuphela ngesikhathi elingasebenza namasayithi ahlinzeka ngokufinyelela kumasevisi nge-IP. Ngaphezu kwalokho, insiza ingase icabange ukuthi ingaphansi kokuhlaselwa kwe-DoS futhi yenqabe ukufinyelela kuwo wonke amaklayenti.
Enye indlela ye-NAT ukushintshela ku-IPv6. Lawa makheli azohlala isikhathi eside, futhi anenani lezinzuzo. Isibonelo, ingxenye ye-IPSec eyakhelwe ngaphakathi ebethela amaphakethe edatha ngayinye.
Kuze kube manje IPv6
Sizokhuluma ngalokhu ngokuzayo.
Esibhala ngakho kubhulogi lebhizinisi le-VAS Experts:
Source: www.habr.com