标签：rpki
RPKI（Resource Public Key Infrastructure）主要应用在存在RPKI服务器，需要对BGP路由起源是否正确进行验证的组网中。通过验证从邻居收到的BGP路由是否合法来控制选路结果，从而确保域内的主机能够安全地访问外部服务。需要在客户端配置RPKI会话的基本信息并且使能BGP路由起源AS验证结果影响BGP选路，才能完成整个客户端RPKI的配置。
安装RPKI服务器：
1、环境：一台UNIX-like OS的服务器，2G以上内存，安装JAVA 8或9，开启rsync
2、下载安装包：<链接>
3、解压压缩包
[root@i-uiiyw0xz tmp]# tar zxvf rpki-validator-app-2.23-dist.tar.gz
4、运行安装脚本
[root@i-uiiyw0xz rpki-validator-app-2.23]# ./rpki-validator.sh start [ warn ] JAVA_HOME is not set, will try to find java on path. [ info ] Starting rpki-validator... [ info ] writing logs under log directory [ info ] Web user interface is available on port 8080 [ info ] Routers can connect on port 8282 [ info ] Writing PID 7688 to validator.pid [root@i-uiiyw0xz rpki-validator-app-2.23]# echo $? 0
5、检查
[root@i-uiiyw0xz rpki-validator-app-2.23]# ps aux | grep 7688 root 7688 32.8 26.5 4206136 1041544 pts/1 Sl 13:42 1:37 /usr/bin/java -Dapp.name=rpki-validator -Dconfig.file=conf/rpki-validator.conf -Xms512m -Xmx1536m -Dapp.name=rpki-validator -Dconfig.file=conf/rpki-validator.conf -classpath :lib/* net.ripe.rpki.validator.config.Main root 8034 0.0 0.0 103244 848 pts/1 S+ 13:47 0:00 grep 7688 [root@i-uiiyw0xz rpki-validator-app-2.23]# netstat -lnpt Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 963/sshd tcp 0 0 :::8080 :::* LISTEN 7688/java tcp 0 0 :::22 :::* LISTEN 963/sshd
6、打开网页
本地验证：
[root@i-uiiyw0xz tmp]# curl http://localhost:8080 | head % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 13977 100 13977 0 0 2030k 0 --:--:-- --:--:-- --:--:-- 2729k <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8" /> <title>RPKI Validator - Quick Overview of BGP Origin Validation</title> <link rel="stylesheet" href="/stylesheets/bootstrap/1.3.0/bootstrap.css" /> <link rel="stylesheet" href="/stylesheets/application.css" /> <script src="/javascript/datatables/1.8.2/jquery.js"></script> <script src="/javascript/datatables/1.8.2/jquery.dataTables.min.js"></script> <script src="/javascript/bootstrap/1.3.0/bootstrap-alerts.js"></script>
远端验证：
本文出自 “A man & A computer” 博客，请务必保留此出处http://juispan.blog.51cto.com/943137/1952658
标签：rpki
原文地址：http://juispan.blog.51cto.com/943137/1952658
