{"id":10963,"date":"2022-10-12T13:11:01","date_gmt":"2022-10-12T20:11:01","guid":{"rendered":"https:\/\/www.xh86.me\/?p=10963"},"modified":"2022-10-12T13:11:01","modified_gmt":"2022-10-12T20:11:01","slug":"routerosfastnetmon-%e5%85%a8%e8%87%aa%e5%8a%a8-bgp-%e8%b7%af%e7%94%b1%e9%bb%91%e6%b4%9e","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=10963","title":{"rendered":"RouterOS+Fastnetmon \u5168\u81ea\u52a8 BGP \u8def\u7531\u9ed1\u6d1e"},"content":{"rendered":"<h2>\u524d\u8a00 :<\/h2>\n<p>\u81ea\u5df1\u8d77 BGP , \u6709\u4ec0\u4e48\u597d\u5904\uff1f<br \/>\n\u6709\u5c0f\u4f19\u4f34\u80af\u5b9a\u4f1a\u8bf4\uff0c\u628a\u8def\u7531\u62c9\u76f4\uff0c\u4e71\u5199 WHOIS \u770b Netflix \u7528&#8230; \u4f60\u4eec\u554a NAIVE !<br \/>\n\u5b89\u5168\u751f\u4ea7\u5728\u5404\u884c\u5404\u4e1a\u90fd\u662f\u6700\u91cd\u8981\u7684\u4e00\u73af\uff01<\/p>\n<hr \/>\n<h2>\u672c\u6b21\u7206\u70b8\u5b9e\u9a8c\u6240\u9700\u6750\u6599 :<\/h2>\n<p>VPS1 RouterOS CHR 6.45.8-6.45.9<br \/>\nVPS2 Ubuntu 16.04 \u5b89\u88c5 Fastnetmon + Exabgp , \u9009\u88c5 Grafana + Influxdb \u63d0\u5347 B \u683c .<\/p>\n<p>Vultr \u8bf7\u7528\u76f8\u540c Region, 2 \u53f0\u540c\u65f6\u5f00\u542f Private IP , \u653e\u5728\u540c\u4e00\u4e2a\u6bb5\u5185\uff0c\u6839\u636e\u8bf4\u660e\u4e66\u624b\u5de5\u914d\u7f6e\u7f51\u5361\uff0c\u6253\u901a\u5185\u7f51.<br \/>\n<a href=\"https:\/\/www.vultr.com\/docs\/configuring-private-network\" target=\"_blank\" rel=\"noopener\">https:\/\/www.vultr.com\/docs\/configuring-private-network<\/a><\/p>\n<p><strong>\u5b9e\u9a8c\u6d41\u7a0b\u56fe :<\/strong><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3566961121.png#mirages-width=1332&amp;mirages-height=606&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"idlzbe2g0or9.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3566961121.png#mirages-width=1332&amp;mirages-height=606&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"idlzbe2g0or9.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p><strong>\u65b0\u624b\u6700\u60f3\u4e0d\u901a\u7684\u4e00\u70b9 :<\/strong><br \/>\nROS \u5982\u4f55\u628a\u6d41\u91cf\u6570\u636e\u4f20\u7ed9 Fastnetmon , \u63a5\u7740\u5982\u4f55\u53d1\u9001\u9ed1\u6d1e\u8def\u7531\u7ed9 ROS .<br \/>\nPig God \u5199\u7684\u6587\u7ae0\u672c\u83dc\u9e21 2019 \u5e74\u5c31\u770b\u4e86\uff0c\u7136\u800c\u4ee5\u4e0a\u95ee\u9898\u6211\u662f\u6076\u8865\u4e86 1 \u5e74\u7684\u57fa\u7840\u77e5\u8bc6\u624d\u60f3\u901a &#8230;<br \/>\nROS \u4e0b : \/ip traffic-flow \u8fd9\u4e2a\u5c31\u662f\u8f93\u51fa\u6d41\u91cf\u6570\u636e\u7684\u5de5\u5177<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3495787277.png#mirages-width=588&amp;mirages-height=672&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"1sqvgvqa0ucl.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3495787277.png#mirages-width=588&amp;mirages-height=672&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"1sqvgvqa0ucl.png\" data-action=\"zoom\" \/><\/div>\u7136\u540e Setting \u5efa\u8bae\u65e0\u8111\u6839\u636e\u672c\u56fe\u8bbe\u5b9a\uff0c\u8fd9\u6837\u8f93\u51fa\u6570\u636e\u6700\u7cbe\u51c6.\u63a5\u4e0b\u6765\u662f Traffic Flow Targets : Src \u586b ROS \u5185\u7f51 IP , Dst \u663e\u7136\u5c31\u662f\u4f60\u53e6\u4e00\u53f0 VPS \u7684\u5185\u7f51 IP . \u5176\u5b83\u7167\u586b .<\/p>\n<p>\u63a5\u4e0b\u6765\u6211\u4eec\u5728 ubuntu \u7684 VPS \u4e0a\u9996\u5148\u5b89\u88c5 Fastnetmon<\/p>\n<pre class=\"loaded\"><code class=\"hljs sql\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\">apt-get <span class=\"hljs-keyword\">install<\/span> <span class=\"hljs-keyword\">build<\/span>-essential tcptraceroute socat python-pip traceroute curl -y<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">wget https:\/\/raw.githubusercontent.com\/pavel-odintsov\/fastnetmon\/<span class=\"hljs-keyword\">master<\/span>\/src\/fastnetmon_install.pl -Ofastnetmon_install.pl<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">perl fastnetmon_install.pl<\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs sql\"><\/code><\/pre>\n<p>\u540e\u7f16\u8f91 \/etc\/fastnetmon.conf<\/p>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Netflow capture method with v5, v9 and IPFIX support<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">netflow<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># it&#8217;s possible to specify multiple ports here, using commas as delimiter<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">netflow_port<\/span> = <span class=\"hljs-number\">2055<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">netflow_host<\/span> = <span class=\"hljs-number\">0.0<\/span>.<span class=\"hljs-number\">0.0<\/span><\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<p>\u7f16\u8f91 \/etc\/networks_list<br \/>\n\u628a\u4f60 BGP \u5e7f\u64ad\u7684 IP \u6bb5\u5199\u8fdb\u53bb \u6bd4\u5982 103.114.0.0\/24<\/p>\n<p>\u8fd0\u884c service fastnetmon start , \u518d\u8fd0\u884c \/opt\/fastnetmon\/fastnetmon_client<br \/>\n\u770b\u7684\u5230\u6709\u6bcf\u4e2a IP \u7684\u6d41\u91cf\uff0c\u8bf4\u660e\u7b2c\u4e00\u6b65\u5b8c\u6210\u65e0\u8bef .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4175574524.png#mirages-width=729&amp;mirages-height=495&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"0zkatz4bygeq.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4175574524.png#mirages-width=729&amp;mirages-height=495&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"0zkatz4bygeq.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p>\u63a5\u4e0b\u6765\u5b89\u88c5 exabgp :<br \/>\npip install exabgp==3.4.20<\/p>\n<p>\u4f7f\u7528\u5df4\u897f\u5927\u795e\u5199\u7684\u7b80\u6613 systemctl \u63a7\u5236\u811a\u672c :<\/p>\n<p>vim \/etc\/init.d\/exabgp<\/p>\n<pre class=\"loaded\"><code class=\"hljs bash\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-meta\">#!\/bin\/bash<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\">### BEGIN INIT INFO<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Provides: exabgp<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Required-Start: $all<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Required-Stop:<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Default-Start: 2 3 4 5<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Default-Stop:<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\">### END INIT INFO<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">VERMELHO=<span class=\"hljs-string\">&#8216;\\033[1;31m&#8217;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">VERDE=<span class=\"hljs-string\">&#8216;\\033[1;32m&#8217;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">NC=<span class=\"hljs-string\">&#8216;\\033[0m&#8217;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">PROCESSO=$(ps -x |grep -v <span class=\"hljs-string\">&#8220;grep&#8221;<\/span> |grep -v <span class=\"hljs-string\">&#8220;\/bin\/bash&#8221;<\/span> |grep exabgp |wc -l);<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">function<\/span> <span class=\"hljs-function\"><span class=\"hljs-title\">startExaBGP<\/span><\/span>(){<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">if<\/span> [ <span class=\"hljs-variable\">$PROCESSO<\/span> -eq 0 ]<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">then<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> <span class=\"hljs-string\">&#8220;Iniciandos&#8230;&#8221;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">env exabgp.daemon.user=root \\<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">exabgp.daemon.daemonize=<span class=\"hljs-literal\">true<\/span> \\<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">exabgp.daemon.pid=\/var\/run\/exabgp.pid \\<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">exabgp.log.destination=\/var\/<span class=\"hljs-built_in\">log<\/span>\/exabgp.log \\<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">exabgp \/etc\/exabgp.conf<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">sleep 0.3<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP [<span class=\"hljs-variable\">${VERDE}<\/span> Iniciado <span class=\"hljs-variable\">${NC}<\/span>] &#8220;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">else<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP j\u00e1 exst\u00e1 em execux\u00e3o. [<span class=\"hljs-variable\">${VERDE}<\/span> Ativo <span class=\"hljs-variable\">${NC}<\/span>] &#8220;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">fi<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">}<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">function<\/span> <span class=\"hljs-function\"><span class=\"hljs-title\">stopExaBGP<\/span><\/span>(){<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">if<\/span> [ <span class=\"hljs-variable\">$PROCESSO<\/span> -eq 0 ]<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">then<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP n\u00e3o est\u00e1 sendo executado. [<span class=\"hljs-variable\">${VERMELHO}<\/span> Parado <span class=\"hljs-variable\">${NC}<\/span>]&#8221;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">else<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> <span class=\"hljs-string\">&#8220;Parando&#8230;&#8221;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">kill<\/span> -9 `cat \/var\/run\/exabgp.pid` &amp;&gt;\/dev\/null<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP [<span class=\"hljs-variable\">${VERMELHO}<\/span> Parado <span class=\"hljs-variable\">${NC}<\/span>] &#8220;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">fi<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">}<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">function<\/span> <span class=\"hljs-function\"><span class=\"hljs-title\">statusExaBGP<\/span><\/span>(){<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">if<\/span> [ <span class=\"hljs-variable\">$PROCESSO<\/span> -eq 0 ]<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">then<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP est\u00e1 [<span class=\"hljs-variable\">${VERMELHO}<\/span> Parado <span class=\"hljs-variable\">${NC}<\/span>]&#8221;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">else<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> -e <span class=\"hljs-string\">&#8220;ExaBGP est\u00e1 [<span class=\"hljs-variable\">${VERDE}<\/span> Ativo <span class=\"hljs-variable\">${NC}<\/span>]&#8221;<\/span>;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">fi<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> <span class=\"hljs-string\">&#8220;Logs:&#8221;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">tail \/var\/<span class=\"hljs-built_in\">log<\/span>\/exabgp.log<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">}<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">case<\/span> <span class=\"hljs-string\">&#8220;<span class=\"hljs-variable\">$1<\/span>&#8220;<\/span> <span class=\"hljs-keyword\">in<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">start )<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">startExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">;;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">stop )<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">stopExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">;;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">restart )<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">stopExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">sleep 1<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">startExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">;;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">status )<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">statusExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">;;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">* )<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-built_in\">echo<\/span> <span class=\"hljs-string\">&#8220;Op\u00e7\u00e3o inv\u00e1lida, use start | stop | restart | status&#8221;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\">;;<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">esac<\/span><\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs bash\"><\/code><\/pre>\n<p>chmod a+x \/etc\/init.d\/exabgp<\/p>\n<p>vim \/lib\/systemd\/system\/exabgp.service<\/p>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-section\">[Unit]<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">Description<\/span>=ExaBGP<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">After<\/span>=network.target remote-fs.target<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-section\">[Service]<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">Type<\/span>=simple<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">RemainAfterExit<\/span>=<span class=\"hljs-literal\">yes<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ExecStart<\/span>=\/etc\/init.d\/exabgp start<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ExecStop<\/span>=\/etc\/init.d\/exabgp stop<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ExecReload<\/span>=\/etc\/init.d\/exabgp restart<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-section\">[Install]<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">WantedBy<\/span>=multi-user.target<\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<p>systemctl daemon-reload<br \/>\nsystemctl enable exabgp<\/p>\n<p>vim \/etc\/exabgp.conf<\/p>\n<pre class=\"loaded\"><code class=\"hljs properties\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">group<\/span> <span class=\"hljs-string\">fastnetmon {<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-meta\">local-as<\/span> <span class=\"hljs-string\">YOUR-AS-NUMBER;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-meta\">peer-as<\/span> <span class=\"hljs-string\">YOUR-AS-NUMBER;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">neighbor<\/span> <span class=\"hljs-string\">ROS\u5185\u7f51IP { <\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-meta\">local-address<\/span> <span class=\"hljs-string\">\u672c\u5730\u5185\u7f51IP;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">family<\/span> <span class=\"hljs-string\">{<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ipv4<\/span> <span class=\"hljs-string\">unicast;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ipv6<\/span> <span class=\"hljs-string\">unicast;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">}<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">}<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">process<\/span> <span class=\"hljs-string\">service-dynamic {<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">run<\/span> <span class=\"hljs-string\">\/usr\/bin\/socat stdout pipe:\/var\/run\/exabgp.cmd;<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">}<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">}<\/span><\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs properties\"><\/code><\/pre>\n<p>\u5230\u4e86\u8fd9\u4e00\u6b65\u6700\u597d\u91cd\u542f\u4e00\u4e0b VPS , \u7136\u540e\u5f00\u59cb\u914d ROS \u7684 BGP.<\/p>\n<hr \/>\n<p><strong>\u672c\u6587\u5927\u5927\u964d\u4f4e\u96be\u5ea6\uff0c\u4e0d\u8d77\u79c1\u6709 AS \u53f7\u3002\u76f4\u63a5 2 \u53f0 VPS \u7528\u73b0\u6709\u7684 AS \u53f7\u8d77 IBGP.<\/strong><\/p>\n<p>\u9996\u5148\u65b0\u5efa\u4e24\u6761 Filter Rules:<\/p>\n<pre class=\"loaded\"><code class=\"hljs sql\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\">\/routing filter<\/div>\n<\/li>\n<li>\n<div class=\"code-line\">add action=accept chain=FastNetMon-IN <span class=\"hljs-keyword\">set<\/span>&#8211;<span class=\"hljs-keyword\">type<\/span>=blackhole<\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">add<\/span> <span class=\"hljs-keyword\">action<\/span>=discard <span class=\"hljs-keyword\">chain<\/span>=FastNetMon-<span class=\"hljs-keyword\">OUT<\/span><\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs sql\"><\/code><\/pre>\n<p>\u4e4b\u540e\u5229\u7528\u4f60\u73b0\u6709\u7684 BGP instance \u4e24\u7aef\u7528\u76f8\u540c\u7684 AS \u53f7\u8d77 IBGP ~<br \/>\n\u90a3\u4e48 IBGP \u7684\u591a\u8df3\u8fd9\u91cc\u522b\u5fd8\u8bb0\u6253\u52fe\uff01<br \/>\nFILTER \u9009\u521a\u624d\u5efa\u597d\u7684\u90a3 2 \u4e2a :<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/592797471.png#mirages-width=537&amp;mirages-height=764&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"4ma1j81o5bmy.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/592797471.png#mirages-width=537&amp;mirages-height=764&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"4ma1j81o5bmy.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p>BGP State \u663e\u793a established \u4e4b\u540e\u6211\u4eec\u8fdb\u5165 Fastnetmon \u8be6\u7ec6\u53c2\u6570\u914d\u7f6e .<br \/>\n\u53c8\u8981\u7f16\u8f91 \/etc\/fastnetmon.conf \u4e86\uff0c\u4e4b\u540e\u4f60\u8fd8\u6709\u5f97\u597d\u7f16\u8f91\u4ed6\u4e86\uff0c\u6bcf\u505a\u4e00\u6b65\u7f16\u8f91\u4e00\u6b21\uff0c\u4e0d\u8981\u6d6a\uff01<\/p>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Enable\/Disable any actions in case of attack<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">enable_ban<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># How long (in seconds) we should keep an IP in blocked state<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># If you set 0 here it completely disables unban capability<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ban_time<\/span> = <span class=\"hljs-number\">1900<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Different approaches to attack detection<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ban_for_pps<\/span> = <span class=\"hljs-literal\">off<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ban_for_bandwidth<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">ban_for_flows<\/span> = <span class=\"hljs-literal\">off<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Limits for Dos\/DDoS attacks<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">threshold_mbps<\/span> = <span class=\"hljs-number\">900<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># announce blocked IPs with BGP protocol with ExaBGP<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">exabgp<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># specify different communities for host and subnet announces<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># next_hop \u586b\u4f60\u5185\u7f51\u7f51\u5361\u7684IP<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">exabgp_next_hop<\/span> = <span class=\"hljs-number\">10.25<\/span>.<span class=\"hljs-number\">96.3<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Announce \/32 host itself with BGP<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">exabgp_announce_host<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-comment\"># Announce origin subnet of IP address instead IP itself<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">exabgp_announce_whole_subnet<\/span> = <span class=\"hljs-literal\">off<\/span><\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<p>\u89e3\u91ca\u4e00\u4e0b\u90e8\u5206\u53c2\u6570 : ban_time \u6309\u7167\u79d2\u6765\u7b97\uff0c\u65f6\u95f4\u5230\u4e86 IP \u89e3\u5c01\uff0c\u8fd9\u4e2a\u770b\u4f60\u5fc3\u60c5\u8bbe\u5b9a .<br \/>\n\u901a\u8fc7\u54ea\u79cd\u8ba1\u91cf\u5355\u4f4d\u6765 ban , \u6211\u4eec\u53ea\u5f00\u542f ban_for_bandwidth , \u8fd9\u5c31\u8db3\u591f\u4e86.<br \/>\nthreshold_mbps = 900 \u4ee5\u4e0a\uff0c\u901a\u5e38\u88ab\u51fa\u95ee\u9898\u6765\u7684\u5fc5\u7136\u88ab\u6253\u6ee1 . 10G \u53e3\u7684\u5efa\u8bae\u8c03\u7684\u66f4\u9ad8 .<br \/>\n\u6ce8\u610f\uff1a\u8fd9\u662f\u5355\u4e2a \/ 32 IP \u5f97\u5230\u7684\u91cf\uff0c\u4e0d\u662f\u6240\u6709 IP \u7684\u603b\u91cf &#8230;<\/p>\n<p>\u90a3\u4e48\u6211\u4eec\u5148\u7528 ROS \u81ea\u5e26\u7684 bandwidth test \u6765\u6d4b\u4e00\u53d1\u901f\u6a21\u62df\u4e00\u4e0b DDOS \u6d41\u91cf<br \/>\nthreshold_mbps = 300 \u5373\u53ef<br \/>\n\u914d\u5b8c\u4e4b\u540e service fastnetmon restart \u8fdb\u884c\u66b4\u529b\u6d4b\u901f (\u8d85\u8fc7\u8bbe\u5b9a\u7684 300)<\/p>\n<p>\u6253\u5f00\u4f60\u7684 ROS \/ip route<br \/>\n\u7136\u540e\u4f60\u4f1a\u53d1\u73b0\u4f60\u7684\u8def\u7531\u8868\u91cc\u591a\u4e86\u4e00\u6761\u4ece IBGP \u4f20\u8fc7\u6765\u7684 \/32 \u8def\u7531<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/1686258368.png#mirages-width=531&amp;mirages-height=469&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"meo4t93xgw52.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/1686258368.png#mirages-width=531&amp;mirages-height=469&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"meo4t93xgw52.png\" data-action=\"zoom\" \/><\/div>\u81ea\u5e26 BGP Local Pref. 100 \u5c5e\u6027\uff0c\u6211\u4eec\u63a5\u4e0b\u6765\u5229\u7528\u8fd9\u4e2a\u7279\u70b9\u628a\u4ed6\u8f6c\u5316\u4e3a\u9ed1\u6d1e\u8def\u7531\u53d1\u5f80\u516c\u7f51 .<\/p>\n<p>\u6765\u5230\u4e86\u5f53\u521d\u901f\u6210\u73ed\u63d0\u5230\u7684\u9632\u6b62\u8def\u7531\u6cc4\u9732 Filter \u8981\u505a\u597d\u7684\u5730\u65b9\uff0c\u65b0\u5efa\u4e00\u6761\uff0c\u7f16\u8f91\u5b8c\u6210\u540e\u653e\u5728 0 \u53f7\u4f4d\u6700\u4f18\u5148.<br \/>\nChain : \u81ea\u5df1\u8d77 BGP \u5141\u8bb8\u62e8\u51fa\u53bb\u7684 IP \u76f8\u540c\u7684 Chain \u5373\u53ef<br \/>\nPrefix Length \u8f93\u5165 32 , \u9ed1\u6d1e\u8def\u7531\u90fd\u662f \u4e00\u4e2a\u4e00\u4e2a IP \u53d1\u7684 .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/479037608.png#mirages-width=514&amp;mirages-height=331&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"2da3cl2vcqt3.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/479037608.png#mirages-width=514&amp;mirages-height=331&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"2da3cl2vcqt3.png\" data-action=\"zoom\" \/><\/div>\u90a3\u4e48\u8fd9\u4e2a IP \u8fd8\u6709\u4ec0\u4e48\u7279\u70b9\u5462\uff1f\u662f\u4ece IBGP \u53d1\u8fc7\u6765\u7684\uff0c\u4ee5\u53ca Local Pref. 100 .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3275339056.png#mirages-width=534&amp;mirages-height=405&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"93qxsyor5tez.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3275339056.png#mirages-width=534&amp;mirages-height=405&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"93qxsyor5tez.png\" data-action=\"zoom\" \/><\/div>\u4e4b\u540e Actions \u9009\u9879\u679c\u65ad accept \u5c31\u4e0d\u622a\u56fe\u4e86 .BGP Actions \u6211\u4eec\u8981\u7ed9\u4ed6\u6253\u4e0a Vultr \u7684\u9ed1\u6d1e\u793e\u533a\u6807\u7b7e .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/2462174781.png#mirages-width=482&amp;mirages-height=347&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"q8z4nbfphhnp.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/2462174781.png#mirages-width=482&amp;mirages-height=347&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"q8z4nbfphhnp.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p>\u6700\u540e\u5f53\u7136\u8981\u9a8c\u8bc1\u4e00\u4e0b\u8def\u7531\u5230\u5e95\u6709\u6ca1\u6709\u53d1\u51fa\u53bb .<br \/>\n\u770b\u5230 BGP Advertisements \u91cc\u6709\u8fd9\u6761 \/32 \u8def\u7531\uff0c\u4e14\u9644\u5e26\u4e86 \u9ed1\u6d1e\u793e\u533a\u6807\u7b7e\u90a3\u4e48\u57fa\u672c OK \u4e86.<br \/>\n\u5f53\u7136\u81ea\u5df1\u6700\u597d\u672c\u5730 traceroute \u4e00\u53d1\u786e\u4fdd\u8def\u7531\u7a7a\u4e86 .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4009280152.png#mirages-width=594&amp;mirages-height=322&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"ew7ku9kcz4k5.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4009280152.png#mirages-width=594&amp;mirages-height=322&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"ew7ku9kcz4k5.png\" data-action=\"zoom\" \/><\/div><\/p>\n<hr \/>\n<h2>\u8865\u5145\u77e5\u8bc6\u8981\u70b9 :<\/h2>\n<p>\u6211\u4eec\u4ed4\u7ec6\u770b\u4e00\u4e0b fastnetmon.conf \u4e4b\u540e\u53ef\u4ee5\u53d1\u73b0\u5b83\u63a7\u5236 exabgp \u53d1\u8def\u7531\u5b9e\u9645\u4e0a\u901a\u8fc7\u7684\u662f \/var\/run\/exabgp.cmd \u8fd9\u4e2a\u811a\u672c.<br \/>\n\u90a3\u4e48\u6709\u7684\u60c5\u51b5\u4e0b\uff0cfastnetmon \u88ab\u91cd\u542f\u4e86\uff0c\u4e4b\u524d\u88ab BAN \u7684 IP \u7684\u5c31\u6c38\u8fdc\u4e0d\u4f1a\u88ab\u89e3\u5c01\u4e86 &#8211; -&#8230; \u8fd9\u662f\u4e00\u4e2a\u7f3a\u70b9.<br \/>\n\u89e3\u51b3\u65b9\u6cd5\u6709\u4e24\u79cd\uff0c\u91cd\u542f exabgp , \u90a3\u4e48\u6240\u6709\u88ab\u5c01\u7684 IP \u5168\u90e8\u89e3\u5c01.<br \/>\n\u4eba\u5de5\u8fd0\u884c\u4e00\u4e0b exabgp.cmd \u5355\u72ec\u89e3\u5c01 IP :<\/p>\n<pre class=\"loaded\"><code class=\"hljs php\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-keyword\">echo<\/span> <span class=\"hljs-string\">&#8220;withdraw route \u88ab\u5c01IP next-hop \u5185\u7f51IP&#8221;<\/span> &gt; \/<span class=\"hljs-keyword\">var<\/span>\/run\/exabgp.cmd<\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs php\"><\/code><\/pre>\n<hr \/>\n<p>\u6700\u540e\u4e00\u6b65\u6211\u4eec\u8981\u901a\u77e5\u81ea\u5df1\u88ab D \u7206\u4ee5\u53ca\u5728\u7fa4\u91cc\u5206\u4eab\u7206\u70b8\u7684\u559c\u60a6\uff5e<\/p>\n<p><strong>\u5229\u7528\u8fd9\u4e2a\u811a\u672c\u5373\u53ef:<\/strong><br \/>\n<a href=\"https:\/\/github.com\/halbebruno\/fastnetmon-telegram\/blob\/master\/telegram_notify_about_attack.sh\" target=\"_blank\" rel=\"noopener\">https:\/\/github.com\/halbebruno\/fastnetmon-telegram\/blob\/master\/telegram_notify_about_attack.sh<\/a><br \/>\n\u628a\u4ed6\u4fdd\u5b58\u5728 \/usr\/local\/bin\/notify_about_attack.sh<br \/>\n\u4fee\u6539\u5b8c\u6210\u540e\u522b\u5fd8\u8bb0\u6dfb\u52a0\u6743\u9650 chmod a+x \/usr\/local\/bin\/notify_about_attack.sh<\/p>\n<p><strong>Telegram Bot \u4f7f\u7528\u6559\u7a0b :<\/strong><br \/>\n<a href=\"https:\/\/www.91yunbbs.com\/discussion\/633\" target=\"_blank\" rel=\"noopener\">https:\/\/www.91yunbbs.com\/discussion\/633<\/a><br \/>\n\u6ce8\u610f\u4e00\u4e0b userid \u4e4b\u524d\u6709\u4e00\u4e2a &#8220;-&#8221; \u5343\u4e07\u522b\u5fd8\u8bb0\u586b\u4e0a .<br \/>\n\u4f5c\u8005\u7684\u53d8\u91cf\u5199\u7684\u662f : bot$KEY , \u90a3\u4e48\u8bb0\u5f97\u522b\u591a\u5199\u4e00\u4e2a bot \u4e0a\u53bb.<\/p>\n<p>\u4e8e\u662f\u6548\u679c\u5982\u4e0b :<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3879646058.png#mirages-width=500&amp;mirages-height=95&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"w3rct4z9qxyw.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3879646058.png#mirages-width=500&amp;mirages-height=95&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"w3rct4z9qxyw.png\" data-action=\"zoom\" \/><\/div><\/p>\n<hr \/>\n<p>\u8981\u70b9\u5df2\u7ecf\u6728\u6709\u4e86\uff0c\u63a5\u4e0b\u6765\u662f\u63d0\u5347 B \u683c\u7684\u90e8\u5206\uff5e\u7eaf\u5c5e SHOW \u7ed9\u5c0f\u4f19\u4f34\u4eec\u770b .<\/p>\n<p>\u8bf7\u5168\u7a0b\u53c2\u8003\u4ee5\u4e0b\u6587\u7ae0 :<br \/>\n<a href=\"https:\/\/ccav.me\/fastnetmon-grafana-monitoring-network-traffic-and-ddos-early-warning.html\">https:\/\/ccav.me\/fastnetmon-grafana-monitoring-network-traffic-and-ddos-early-warning.html<\/a><br \/>\n<a href=\"https:\/\/forum.mikrotik.com\/viewtopic.php?t=124958\" target=\"_blank\" rel=\"noopener\">https:\/\/forum.mikrotik.com\/viewtopic.php?t=124958<\/a><\/p>\n<p>\u6839\u636e\u6587\u7ae0\u5b89\u88c5\u914d\u7f6e Grafana \u548c Influxdb \u540e\uff0c<br \/>\n\u8fd9\u91cc\u7684\u8981\u70b9\u5c31\u662f\u7f16\u8f91 \/etc\/fastnetmon.conf \u4e2d\u5982\u4e0b\u5b57\u6bb5<\/p>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<ul>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">graphite<\/span> = <span class=\"hljs-literal\">on<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">graphite_host<\/span> = <span class=\"hljs-number\">127.0<\/span>.<span class=\"hljs-number\">0.1<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">graphite_port<\/span> = <span class=\"hljs-number\">2003<\/span><\/div>\n<\/li>\n<li>\n<div class=\"code-line\"><span class=\"hljs-attr\">graphite_prefix<\/span> = fastnetmon<\/div>\n<\/li>\n<\/ul>\n<pre class=\"loaded\"><code class=\"hljs ini\"><\/code><\/pre>\n<p>\u4f5c\u7528\u662f\u628a Fastnetmon \u7684\u6570\u636e\u80fd\u5199\u5165 InfluxDB \u6570\u636e\u5e93 &#8230;<br \/>\n\u6700\u540e\u901a\u8fc7 Grafana \u6765\u8bfb\u53d6 InfluxDB \u4e2d\u7684\u6570\u636e &#8230;<\/p>\n<p>Grafana \u6dfb\u52a0 DB :<br \/>\n\u5728 Configuration &#8211; Data sources \u9009\u9879\u91cc\uff0c\u6dfb\u52a0\u4e00\u4e2a InfluxDB \u63a5\u53e3\uff0c\u57fa\u672c\u4e0a\u90fd\u662f\u9ed8\u8ba4\u53c2\u6570\u5373\u53ef.<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3658225122.png#mirages-width=702&amp;mirages-height=433&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"8n4k38vkfnj1.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/3658225122.png#mirages-width=702&amp;mirages-height=433&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"8n4k38vkfnj1.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p>\u5bfc\u5165\u63a7\u5236\u53f0\u6a21\u677f :<br \/>\n\u9009\u62e9 Create &#8211; Import \u9009\u9879\u5361 \u8f93\u5165 7378 , \u5373\u53ef\u5bfc\u5165\u4e0b\u9762\u8fd9\u4e2a\u63a7\u5236\u53f0<br \/>\n<a href=\"https:\/\/grafana.com\/grafana\/dashboards\/7378\" target=\"_blank\" rel=\"noopener\">https:\/\/grafana.com\/grafana\/dashboards\/7378<\/a><\/p>\n<p>\u5bfc\u5165\u4e4b\u540e\u4f1a\u53d1\u73b0\u6700\u5e95\u4e0b\u7684 Top incoming \/ Out Going By Subnet \u90fd\u6ca1\u529e\u6cd5\u7528.<br \/>\n\u7ecf\u67e5\u8fd9\u4e9b\u9762\u677f\u9ed8\u8ba4\u67e5\u8be2\u6570\u636e\u5e93\u4e2d &#8220;networks&#8221; \u8868\uff0c\u7136\u800c\u6211\u4eec\u8fd9\u4e2a\u662f ROS \u5bfc\u5165\u7684\u6570\u636e\uff0c\u6240\u4ee5\u8981\u6539\u6210 &#8220;total&#8221; \u8fd9\u4e2a\u8868.<br \/>\n\u622a\u56fe\u91cc\u7684\u4f4d\u7f6e\uff0c\u4fee\u6539\u4e00\u4e0b\uff0c\u8fd9\u4e2a\u529f\u80fd\u5c31\u590d\u6d3b\u4e86 .<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/1766483519.png#mirages-width=970&amp;mirages-height=825&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"8l2gxmnz7zac.png\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/1766483519.png#mirages-width=970&amp;mirages-height=825&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"8l2gxmnz7zac.png\" data-action=\"zoom\" \/><\/div><\/p>\n<p>\u6210\u54c1\u6548\u679c\u56fe :<br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/2173387642.jpg#mirages-width=1204&amp;mirages-height=691&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"pexdjmhphmak.jpg\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/2173387642.jpg#mirages-width=1204&amp;mirages-height=691&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"pexdjmhphmak.jpg\" data-action=\"zoom\" \/><\/div><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4062082673.jpg#mirages-width=1207&amp;mirages-height=904&amp;mirages-cdn-type=3'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" title=\"y0gfwcxcynlw.jpg\" data-original=\"https:\/\/ccav.me\/usr\/uploads\/2020\/06\/4062082673.jpg#mirages-width=1207&amp;mirages-height=904&amp;mirages-cdn-type=3\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"y0gfwcxcynlw.jpg\" data-action=\"zoom\" \/><\/div><\/p>\n<p>\u4e8e\u662f\u6574\u4e2a\u5b9e\u9a8c\u6309\u7167\u6d41\u7a0b\u56fe\u5168\u90e8\u5b8c\u6210\u4e86\uff5e<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u524d\u8a00 : \u81ea\u5df1\u8d77 BGP , \u6709\u4ec0\u4e48\u597d\u5904\uff1f \u6709\u5c0f\u4f19\u4f34\u80af\u5b9a\u4f1a\u8bf4\uff0c\u628a\u8def\u7531\u62c9\u76f4\uff0c\u4e71\u5199 WHOIS \u770b Netflix [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,2],"tags":[],"class_list":["post-10963","post","type-post","status-publish","format-standard","hentry","category-mikrotik","category-network"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10963","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10963"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10963\/revisions"}],"predecessor-version":[{"id":10964,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/10963\/revisions\/10964"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10963"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=10963"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=10963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}