Konfiguriranje BGP-a na Vultru s OpenBSD-om

Vultrova BGP značajka omogućuje vam da donesete svoj vlastiti IP prostor i koristite ga na bilo kojoj od naših lokacija, uz OpenBSD instancu nije potreban dodatni softver!

Početak rada

Da biste koristili BGP, trebat će vam vlastiti IP prostor (v4 ili v6). Ako imate vlastiti ASN, možete ga koristiti ili mi možemo dodijeliti privatni.

Otvorite kartu sa sljedećim podacima:

• Vaši IP rasponi
• Vaš ASN (ako ga imate)
• LOA za vaše IP raspone (samo ako nemate vlastiti ASN)

Nakon što je BGP konfiguriran na vašem računu, možete nastaviti s konfiguriranjem BGP-a.

Naši primjeri će koristiti sljedeće:

• ASN: 64512
• IPv4 adresa instance: 203.0.113.123
• IPv6 adresa instance: 2001:DB8:1000::1/64
• IPv4 blok: 198.51.100.0/24
• IPv6 blok: 2001:0db8::/32
• BGP lozinka: hunter2

Postavljanje BGP-a

OpenBSD se isporučuje s bgpd(8)već instaliranim i zahtijeva samo nekoliko promjena konfiguracijske datoteke za početak.

Uredite rc.conf.local(8)da biste dodali sljedeći redak kako biste omogućili bgpd(8)daemon pokrene putemrc.d(8)

bgpd_flags=

Potpuni primjer bgpd.conf(8)može se pronaći na /etc/examples/bgpd.confi sadrži puno dodatnih opcija konfiguracije koje bi vam mogle zatrebati.

Prilagodite primjer konfiguracije u nastavku prema potrebi i pišite u /etc/bgpd.conf (uvjerite se da su dopuštenja za ovu datoteku 600)

   AS 64512
    router-id 203.0.113.123

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 2001:0db8::/32

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.123
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::1
    }

Da biste bili sigurni da je sve u redu, možete izdati naredbu bgpd -f /etc/bgpd.conf -n. Ako bgpd(ok)se vrati, možete pokrenuti demon.

# rcctl enable bgpd
# rcctl start bgpd
bgpd(ok)

Da biste provjerili status svojih BGP sesija, morat ćete koristiti bgpctl(8). Na primjer, možete koristiti da biste vidjeli osnovni pregledbgpctl show summary

# bgpctl show summary
Neighbor                   AS    MsgRcvd    MsgSent  OutQ Up/Down  State/PrfRcvd
Vultr IPv6              64515        230        207     0 01:41:40      0
Vultr IPv4              64515        244        220     0 01:48:09      0

Da biste vidjeli detaljne informacije o BPG susjedu koristite bgpctl show neighbor

BGP neighbor is 2001:19f0:ffff::1, remote AS 64515, Multihop (2)
 Description: Vultr IPv6
  BGP version 4, remote router-id 45.63.102.186, using md5sig
  BGP state = Established, up for 01:46:45
  Last read 00:00:08, holdtime 90s, keepalive interval 30s
  Neighbor capabilities:
    Multiprotocol extensions: IPv6 unicast
    Route Refresh
    Graceful Restart: Timeout: 120, IPv6 unicast
    4-byte AS numbers

  Message statistics:
          Sent       Received  
  Opens                    1          1
  Notifications            0          0
  Updates                  2          1
  Keepalives             214        240
  Route Refresh            0          0
  Total                  217        242

  Update statistics:
          Sent       Received  
  Updates                  4          0
  Withdraws                0          0
  End-of-Rib               1          1

  Local host:  2001:DB8:1000::1, Local port:  38298
  Remote host:    2001:19f0:ffff::1, Remote port:   179

BGP neighbor is 169.254.169.254, remote AS 64515, Multihop (2)
 Description: Vultr IPv4
  BGP version 4, remote router-id 45.63.102.186, using md5sig
  BGP state = Established, up for 01:53:14
  Last read 00:00:14, holdtime 90s, keepalive interval 30s
  Neighbor capabilities:
    Multiprotocol extensions: IPv4 unicast
    Route Refresh
    Graceful Restart: Timeout: 120, IPv4 unicast
    4-byte AS numbers

  Message statistics:
          Sent       Received  
  Opens                    1          1
  Notifications            0          0
  Updates                  2          1
  Keepalives             227        253
  Route Refresh            0          0
  Total                  230        255

  Update statistics:
          Sent       Received  
  Updates                  4          0
  Withdraws                0          0
  End-of-Rib               1          1

  Local host:         203.0.113.123, Local port:  19824
  Remote host:      169.254.169.254, Remote port:   179

U ovom trenutku možemo početi dodjeljivati ​​naše IP adrese sučeljima (npr. konfiguriranjem /etc/hostname.lo1) kako bi se aplikacije mogle konfigurirati da slušaju te IP adrese.

Ako namjeravate koristiti svoje IP adrese na više instanci, morat ćete prilagoditi networkizjave na svakoj instanci kako biste najavili određeniju rutu za te IP adrese.

Primjer A

   AS 64512
    router-id 203.0.113.123

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 198.51.100.1/32
    network 2001:0db8::/32
    network 2001:0db8::/64

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.123
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::1
    }

Primjer B

   AS 64512
    router-id 203.0.113.124

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 198.51.100.2/32
    network 2001:0db8::/32
    network 2001:0db8:0001::/64

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.124
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::2
    }

Napomena: Ne zaboravite upotrijebiti zaporku koja se razlikuje od one navedene u ovom članku.