Konfiguriranje BGP na Vultr z OpenBSD

Vultrova funkcija BGP vam omogoča, da prinesete svoj prostor IP in ga uporabite na kateri koli od naših lokacij, s primerkom OpenBSD dodatna programska oprema ni potrebna!

Začetek

Če želite uporabljati BGP, boste potrebovali svoj prostor IP (v4 ali v6). Če imate svoj ASN, ga lahko uporabite ali pa vam dodelimo zasebnega.

Odprite vstopnico z naslednjimi podatki:

• Vaši razponi IP
• Vaš ASN (če ga imate)
• LOA za vaše obsege IP (samo če nimate svojega ASN)

Ko je BGP konfiguriran na vašem računu, lahko nadaljujete s konfiguracijo BGP.

Naši primeri bodo uporabljali naslednje:

• ASN: 64512
• Naslov IPv4 primerka: 203.0.113.123
• IPv6 naslov primerka: 2001:DB8:1000::1/64
• Blok IPv4: 198.51.100.0/24
• Blok IPv6: 2001:0db8::/32
• Geslo BGP: hunter2

Nastavitev BGP

OpenBSD je bgpd(8)že nameščen in zahteva le nekaj sprememb konfiguracijske datoteke za začetek.

Uredite, rc.conf.local(8)da dodate naslednjo vrstico, da omogočite bgpd(8)demonu, da se zažene prekrc.d(8)

bgpd_flags=

Celoten primer bgpd.conf(8)lahko najdete na /etc/examples/bgpd.confin vsebuje veliko dodatnih možnosti konfiguracije, ki jih boste morda potrebovali.

Po potrebi prilagodite spodnji primer konfiguracije in pišite /etc/bgpd.conf (zagotovite, da so dovoljenja za to datoteko 600)

   AS 64512
    router-id 203.0.113.123

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 2001:0db8::/32

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.123
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::1
    }

Če želite zagotoviti, da je vse v redu, lahko izdate ukaz bgpd -f /etc/bgpd.conf -n. Če bgpd(ok)se vrne, lahko zaženete demona.

# rcctl enable bgpd
# rcctl start bgpd
bgpd(ok)

Če želite preveriti stanje svojih sej BGP, boste morali uporabiti bgpctl(8). Če si želite na primer ogledati osnovni pregled, lahko uporabitebgpctl show summary

# bgpctl show summary
Neighbor                   AS    MsgRcvd    MsgSent  OutQ Up/Down  State/PrfRcvd
Vultr IPv6              64515        230        207     0 01:41:40      0
Vultr IPv4              64515        244        220     0 01:48:09      0

Za ogled podrobnih informacij o sosednji BPG uporabite bgpctl show neighbor

BGP neighbor is 2001:19f0:ffff::1, remote AS 64515, Multihop (2)
 Description: Vultr IPv6
  BGP version 4, remote router-id 45.63.102.186, using md5sig
  BGP state = Established, up for 01:46:45
  Last read 00:00:08, holdtime 90s, keepalive interval 30s
  Neighbor capabilities:
    Multiprotocol extensions: IPv6 unicast
    Route Refresh
    Graceful Restart: Timeout: 120, IPv6 unicast
    4-byte AS numbers

  Message statistics:
          Sent       Received  
  Opens                    1          1
  Notifications            0          0
  Updates                  2          1
  Keepalives             214        240
  Route Refresh            0          0
  Total                  217        242

  Update statistics:
          Sent       Received  
  Updates                  4          0
  Withdraws                0          0
  End-of-Rib               1          1

  Local host:  2001:DB8:1000::1, Local port:  38298
  Remote host:    2001:19f0:ffff::1, Remote port:   179

BGP neighbor is 169.254.169.254, remote AS 64515, Multihop (2)
 Description: Vultr IPv4
  BGP version 4, remote router-id 45.63.102.186, using md5sig
  BGP state = Established, up for 01:53:14
  Last read 00:00:14, holdtime 90s, keepalive interval 30s
  Neighbor capabilities:
    Multiprotocol extensions: IPv4 unicast
    Route Refresh
    Graceful Restart: Timeout: 120, IPv4 unicast
    4-byte AS numbers

  Message statistics:
          Sent       Received  
  Opens                    1          1
  Notifications            0          0
  Updates                  2          1
  Keepalives             227        253
  Route Refresh            0          0
  Total                  230        255

  Update statistics:
          Sent       Received  
  Updates                  4          0
  Withdraws                0          0
  End-of-Rib               1          1

  Local host:         203.0.113.123, Local port:  19824
  Remote host:      169.254.169.254, Remote port:   179

Na tej točki lahko začnemo dodeljevati naše naslove IP vmesnikom (npr. s konfiguracijo /etc/hostname.lo1), tako da je mogoče aplikacije konfigurirati za poslušanje teh IP-jev.

Če nameravate uporabiti svoje naslove IP v več primerih, boste morali prilagoditi networkizjave na vsakem primerku, da objavite bolj specifično pot za te IP-je.

Primer A

   AS 64512
    router-id 203.0.113.123

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 198.51.100.1/32
    network 2001:0db8::/32
    network 2001:0db8::/64

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.123
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::1
    }

Primer B

   AS 64512
    router-id 203.0.113.124

    listen on 127.0.0.1
    listen on ::1
    log updates
    network 198.51.100.0/24
    network 198.51.100.2/32
    network 2001:0db8::/32
    network 2001:0db8:0001::/64

    neighbor 169.254.169.254 {
            remote-as               64515
            descr                   "Vultr IPv4"
            announce IPv4           unicast
            announce IPv6           none
            tcp md5sig password     hunter2
            multihop                2
            local-address           203.0.113.124
    }
    neighbor 2001:19f0:ffff::1 {
            remote-as               64515
            descr                   "Vultr IPv6"
            announce IPv4           none
            announce IPv6           unicast
            tcp md5sig password     hunter2
            multihop                2
            local-address           2001:DB8:1000::2
    }

Opomba: Ne pozabite uporabiti gesla, ki se razlikuje od tistega, ki je navedeno v tem članku.