Home NOC Operators' Group的 the Internet

e-ZUKA Tech Night vol.52 -コロナ禍を支えるITインフラ-
発表内容

Transcript

1. Home NOC Operators' Groupత the Internet Tomoya Takezaki Committee Home NOC Operators' Group/AS59105
2. ࣗݾ঺հ ஛㟒 ༑࠸(͚͖ͨ͟ ͱ΋΍) ෱Ԭݝ෱Ԭࢢग़਎ ͓࢓ࣄ͸ʮͱ͋ΔISPʯͷதͷਓ झຯ͸Πϯϑϥ׆ಈ ೔ຊ֤஍ͷ௨৴Πϯϑϥࢪઃ΍έʔϒϧ γοϓΛࡱΓา͘
3. ஂମ֓ཁ ஂମ໊ ೔ຊޠ໊শ: ࣗ୐NOCΦϖϨʔλʔζάϧʔϓ ӳޠ໊শ: Home NOC Operators' Group ӡӦϝϯόʔ 8ਓ ઀ଓϢʔβ਺ ໿50Ϣʔβ(ݸਓ/ஂମ)
4. Ԋֵ 2014೥11݄ ઃཱ 2015೥ 1݄ AS൪߸/PIΞυϨεऔಘ 2015೥ 2݄ ܦ࿏޿ใ։࢝ 2015೥11݄ JPNIC IPΞυϨε؅ཧࢦఆࣄۀऀ 2017೥ 3݄ ಧग़ిؾ௨৴ࣄۀऀ(A-29-15661) AS59105 103.48.31.0/24
5. ׆ಈ໨త ঎༻ISPͳͲͷωοτϫʔΫ ʮΠϯϑϥʯͱ΋ݴΘΕࢭΊΔ͜ͱ͕ڐ͞Εͳ͍ɻ I/F LEDͷϐΧϐΧ͕൧ͷछ
6. ׆ಈ໨త ࣗ༝ʹઃܭߏஙӡ༻Ͱ͖ΔΠϯλʔωοτ ॴଐ૊৫ͷϙϦγʔͳͲʹറΒΕͳ͍Φʔϓϯͳ؀ڥ ೔ʑͷۀ຿Ͱ࢖͏ٕज़Λ࣮໢Ͱֶͼݕূ͠ۀ຿ʹੜ͔͢ ϥϘͰ͸Ͱ͖ͳ͍յͯ͠༡΂Δ࣮ωοτϫʔΫʹ͍ۙ؀ڥ Πϯλʔωοτ΁ͷߩݙ ৽͍͠ςΫϊϩδʔͷੵۃతͳಋೖͱίϛϡχςΟ΁ͷߩݙ एऀΤϯδχΞ΍ֶੜͷࢧԉ ʮ͚͔͠ΒΜNSPʯͱͯ͠ͷτϥϯδοτ΍ಛघཁ݅ͷ઀ଓͷఏڙ ICTτϥϒϧγϡʔςΟϯάίϯςετͳͲͷֶੜ޲͚Πϕϯτ΁ͷڠࢍ
7. ҙຯ͕Θ͔Γ·ͤΜᵇ(´дʆ)ᵃ
8. ͦ΋ͦ΋the Internetͱ͸ ωοτϫʔΫͱωοτϫʔΫΛ݁Μͩ΋ͷ ޿ٛతͳΠϯλʔωοτ(internet) IPͱ͍͏ϓϩτίϧ(نଇ)ʹैͬͯ઀ଓ͞Ε͍ͯΔੈքͰ།Ұແೋͷωο τϫʔΫͷू߹ମ ຊ࣭తͳΠϯλʔωοτ(the Internet)
9. ͭ·Γ͜͏ By Opte Project https://www.opte.org/
10. ߋʹ؆୯ʹॻ͘ͱ͜͏ ྫͱͯ͠ɺNTT,KDDI,SoftBank,IIJͱ͍͏ 4ͭͷωοτϫʔΫ͕ܨ͕Γ͋͏ ޿ٛతͳΠϯλʔωοτ(internet) ͜ͷ4ͭ͸ΠϯλʔωοτΛߏ੒͍ͯ͠ Δ͘͝Ұ෦ʹ͔͠ա͗ͳ͍ ຊ࣭తͳΠϯλʔωοτ(the Internet) NTT KDDI SoftBank IIJ
11. આ໌Λ౿·͑ͯ HOMENOC/AS59105͸ΠϯλʔωοτΛߏ੒͍ͯ͠Δ૊৫ͷ1ͭ(AS) ࣗ୐αʔό΍ࣗ୐NOCͳਓͨͪ΁઀ଓੑΛఏڙ͍ͯ͠Δ(NSP)
12. ωοτϫʔΫߏ੒ ؔ౦5ڌ఺ͱେࡕ2ڌ఺ͷܭ7ڌ఺ ର֎઀ଓ߹ܭ 35.3Gbps(ͨͩ͠ϕετΤϑΥʔτ) https://www.homenoc.ad.jp/tech/ backbone/
13. ର֎઀ଓ(྘)ɺόοΫϘʔϯ(੨ؙͱ੨ؙୡΛ݁Ϳ໼ҹ)
14. NOC-PIC
15. ߏ੒ͷϙΠϯτ ର֎઀ଓ͸ۃྗ෼ࢄ ڌ఺ো֐΍ର֎઀ଓىҼʹΑΔ OutageϦεΫΛۃྗݮΒ͢ ҆ఆੑͱ৑௕ੑΛ୲อ ૊৫໊ AS൪߸ छผ ઀ଓڌ఺ BIGLOBE AS2518 Transit NOC01,NOC03,POP52 ͘͞ΒΠϯλʔωοτ AS9370 Transit POP03 ͘͞ΒΠϯλʔωοτ AS9371 Transit POP52 ιϑτΠʔα AS59103 Transit POP03 ΞΫηϦΞ AS17686 Partial Transit NOC03 FORNEXT AS131948 Peering Proxy NOC01 JPIX Tokyo N/A Internet eXchange POP03 Other PNI N/A Private Peer POP05
16. ωοτϫʔΫͷӡ༻ɾ؂ࢹ ASωοτϫʔΫ(ද)ͱ͸׬શ෼཭ͨ͠MgmtωοτϫʔΫ(ཪ) ASωοτϫʔΫͱ͸׬શʹ෼཭͠ɺද่͕յͯ͠΋౸ୡੑ͚ͩ͸֬อ ZabbixͰͷσόΠε؂ࢹ ର֎؂ࢹπʔϧΛ༻͍ͨࢮ׆؂ࢹ
17. ؂ࢹઃܭ
18. ؂ࢹͷϙΠϯτ ؂ࢹج൫͸౦੢Ͱ৑௕ߏ੒ ઃඋঢ়ଶ͕҆ఆ͍ͯ͠ΔDC಺ͷαʔόʹઃஔ Active-ActiveͰσόΠεΛ؂ࢹ ओܥࢮ๢࣌ʹ͸෭ܥ͕ػೳΛҾ͖ܧ͗ https://www.homenoc.ad.jp/blog/monitoring/ 2021/03/09/monitoring.html
19. ΞϥʔτରԠ յΕΔΑɻ͔ͩΒຖ೔ӡ༻தɻ Կ΋໰୊ͳ͘24/7Ͱಈ͖ଓ͚ͨΒͲΕ͚ͩ޾ͤͳ͜ͱ͔…(ເ෺ޠ) ༗ࢤͰͷӡ༻ͷͨΊجຊϕετΤϑΥʔτରԠɻ͕ɺର޲૊৫ʹ໎࿭͸ ͔͚ͳ͍Α͏ਝ଎ͳରԠ͸ৗʹ৺͕͚͍ͯΔɻ
20. Ξϥʔτ݅਺ ֓Ͷ1೔ʹ30ʙ50݅ఔ౓ େ൒͸ର޲૊৫ىҼ Ϣʔβ΍Peering PartnerͷBGP fl apͳͲ ϢʔβͷBGP down͸௨஌཈ࢭ ࢒Γ͸ઃඋىҼ ͕ɺࠜຊղܾ͕গ͠ݫ͍͠໰୊
21. ೔ʑͷӡ༻
22. ΞϥʔτରԠ
23. noc01er01 rpd crash(ݕ஌ʙॳಈରԠ։࢝)
24. ରԠ։࢝ʙରԠ׬ྃ·Ͱ
25. In rare case
27. ରԠ׬ྃ
28. ଞʹ΋ɺɺɺ ϐΞϦϯάύʔτφʔͷ௕࣌ؒஅͰ͋Ε͹໰͍߹Θͤ(جຊӳޠ) Network OSͷόάௐࠪɾݕূ ৽ػೳݕূ ϝϯςφϯεରԠ AbuseରԠ ΍Δ͜ͱ͸ͨ͘͞Μ
29. ઃܭͱӡ༻ͷϧʔϧ Πϯλʔωοτ΁ͷ໎࿭ μϝɻθολΠɻ Πϯλʔωοτͷߏ੒һͱͯ͠੹೚Λ࣋ͬͨӡ༻ ࠷௿ݶͷӡ༻্ͷϧʔϧΛఆΊͯΈΜͳͰकΔɻ ٕज़తͳํ๏Ͱ҆ఆՔಇΛ໨ࢦͦ͏ɻ ༧ࢉ΍ػࡐͷෆ଍͸ٕज़తͳ޻෉ͰΧόʔɻ ՄೳͳݶΓ҆ఆͨ͠ঢ়ଶͰύέοτΛӡͿʂ ΍Γ͍ͨ͜ͱɺָ͍͜͠ͱʹશྗͰʂ
30. ϐΞϦϯά
31. ϐΞϦϯά΋େࣄͳӡ༻ۀ຿ ϐΞϦϯάͷϝϦοτ ASͷ౸ୡੑ޲্ ≠ASͷՁ஋޲্ ଞASىҼͰͷτϥϒϧͷճආ HOMENOC/AS59105͸JPIX Tokyoʹ1GͰ઀ଓ
32. ϑϧϧʔτ
33. ܦ࿏਺ IPv4 Total: 859,827 Peerܦ࿏: 152,312(໿18%) IPv6 Total: 130,899 Peerܦ࿏: 51,711(໿39%) HOMENOC/AS59105ͷϐΞϦϯάঢ়گ https://www.homenoc.ad.jp/blog/network/2021/07/20/peering.html
34. ϐΞϦϯάۀ຿ From Peering partner Peering request Judge End Reject Accept To Peering partner Peering request Judge End Reject Accept con fi g Peering start Operating
35. Peering request ͋ͳͨͱϐΞ͕͍ͨ͠Ͱ͢ʙ ϐΞͯ͘͠ΕΔͳΒઃఆ͍ͩ͘͞ʙ զʑͷ৘ใΛ෇͚͓ͯ͘Α ΑΖ͘͠
36. Operating ϐΞͷ௕࣌ؒஅ ໰͍߹Θͤ (ࣗಈԽ͍ͨ͠)
37. ยखؒ΍झຯͰӡ༻ ͔͠͠ɺख͸ൈ͔ͳ͍ɻ
38. ҰԠϓϩͰ͔͢Β
39. Do you have any questions?