https://www.pysio.online/assets/AKIX.html-BAvP7YzE.js

1import{a as e,c as n,f as s,o as t}from"./app-fWPFO-Ym.js";const i={};function p(l,a){return t(),n("div",null,[...a[0]||(a[0]=[s(`<p>ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。</p><h2 id="为什么要折腾ixp" tabindex="-1"><a class="header-anchor" href="#为什么要折腾ixp"><span>为什么要折腾IXP？</span></a></h2><p>说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？</p><ul><li>想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操</li><li>让小网络也能低门槛互联，体验&quot;互联网的互联网&quot;</li><li>顺便试试远程虚拟接入，看看能不能让地球另一端的朋友也能轻松接入</li></ul><h2 id="技术选型和踩坑" tabindex="-1"><a class="header-anchor" href="#技术选型和踩坑"><span>技术选型和踩坑</span></a></h2><p>一开始就没打算搞得多复杂，能跑起来、能互联、能安全就行。</p><ul><li>路由软件选了 Bird，轻量好用，配置也不难</li><li>交换用 VXLAN，省得折腾物理交换机，远程接入也方便</li><li>RPKI 自己搭了个 RTR 服务器，安全感 up</li><li>服务器放在法兰克福，欧洲网络资源丰富，延迟也不错</li></ul><p>最头疼的其实是远程虚拟接入，毕竟不是每个人都能去机房插根网线。VXLAN 帮了大忙，大家只要有公网 VPS 就能拉隧道进来。</p><h2 id="动手搭建的流水账" tabindex="-1"><a class="header-anchor" href="#动手搭建的流水账"><span>动手搭建的流水账</span></a></h2><h3 id="_1-服务器和网络" tabindex="-1"><a class="header-anchor" href="#_1-服务器和网络"><span>1. 服务器和网络</span></a></h3><p>先搞了一台支持 BGP 的 VPS，申请了 IPv6 段<code>2a14:67c1:a080::/48</code>。IPv4 太贵，IPv6 用起来真香。</p><div class="language-bash" data-highlighter="prismjs" data-ext="sh"><pre><code class="language-bash"><span class="line"><span class="token comment"># 创建IXP VXLAN接口</span></span>
2<span class="line"><span class="token function">ip</span> <span class="token function">link</span> <span class="token function">add</span> vxlan0 <span class="token builtin class-name">type</span> vxlan <span class="token function">id</span> <span class="token number">10</span> dstport <span class="token number">4789</span> <span class="token builtin class-name">local</span> 2a05:f480:1800:2e75:5400:05ff:fe65:88f3</span>
3<span class="line"><span class="token function">ip</span> addr <span class="token function">add</span> 2a14:67c1:a080::1/64 dev vxlan0</span>
4<span class="line"><span class="token function">ip</span> <span class="token function">link</span> <span class="token builtin class-name">set</span> vxlan0 up</span>
5<span class="line"></span></code></pre></div><h3 id="_2-bird-配置" tabindex="-1"><a class="header-anchor" href="#_2-bird-配置"><span>2. Bird 配置</span></a></h3><p>Bird 是核心，负责 BGP 路由交换。配置其实没想象中复杂，主要就是 ASN 过滤、RPKI 校验、模板化加对等体。</p><div class="language-conf" data-highlighter="prismjs" data-ext="conf"><pre><code class="language-conf"><span class="line">router id 1.1.1.1;</span>
6<span class="line"></span>
7<span class="line"># 定义BOGON ASN过滤</span>
8<span class="line">define BOGON_ASNS = [</span>
9<span class="line">    0, 23456, 64496..64511, # ... 其他BOGON ASN</span>
10<span class="line">];</span>
11<span class="line"></span>
12<span class="line">define IX_PEERS = [</span>
13<span class="line">    213605, 213891, 151194, 198025, 210352</span>
14<span class="line">];</span>
15<span class="line"></span>
16<span class="line">function ix_import() {</span>
17<span class="line">    if bgp_path.last ~ BOGON_ASNS then return false;</span>
18<span class="line">    if !check_roa_v6() then return false;</span>
19<span class="line">    return true;</span>
20<span class="line">}

20</span>
21<span class="line"></span></code></pre></div><p>模板化配置，后续加成员很方便：</p><div class="language-conf" data-highlighter="prismjs" data-ext="conf"><pre><code class="language-conf"><span class="line">template bgp ix_rs {</span>
22<span class="line">    local as 210440;</span>
23<span class="line">    multihop 2;</span>
24<span class="line">    ipv6 {</span>
25<span class="line">        import where ix_import();</span>
26<span class="line">        export where ix_export();</span>
27<span class="line">        next hop self;</span>
28<span class="line">        graceful restart on;</span>
29<span class="line">    };</span>
30<span class="line">}</span>
31<span class="line"></span></code></pre></div><h3 id="_3-rpki验证" tabindex="-1"><a class="header-anchor" href="#_3-rpki验证"><span>3. RPKI验证</span></a></h3><p>安全这块不能省，自己搭了 RPKI 验证器，Cloudflare 也拉了个备份。</p><div class="language-conf" data-highlighter="prismjs" data-ext="conf"><pre><code class="language-conf"><span class="line">protocol rpki rpki_akae {</span>
32<span class="line">    roa4 { table roa_table_v4; };</span>
33<span class="line">    roa6 { table roa_table_v6; };</span>
34<span class="line">    remote &quot;rpki.akae.re&quot; port 8282;</span>
35<span class="line">    retry keep 90;</span>
36<span class="line">    refresh keep 43200;</span>
37<span class="line">    expire keep 86400;</span>
38<span class="line">}</span>
39<span class="line"></span>
40<span class="line">protocol rpki rpki_cloudflare {</span>
41<span class="line">    roa4 { table roa_table_v4; };</span>
42<span class="line">    roa6 { table roa_table_v6; };</span>
43<span class="line">    remote &quot;rtr.rpki.cloudflare.com&quot; port 8282;</span>
44<span class="line">    retry keep 90;</span>
45<span class="line">    refresh keep 43200;</span>
46<span class="line">    expire keep 86400;</span>
47<span class="line">}</span>
48<span class="line"></span>
49<span class="line">function check_roa_v6() {</span>
50<span class="line">    case roa_check(roa_table_v6, net, bgp_path.last) {</span>
51<span class="line">        ROA_VALID: return true;</span>
52<span class="line">        ROA_UNKNOWN: return true;</span>
53<span class="line">        ROA_INVALID: return false;</span>
54<span class="line">    }</span>
55<span class="line">}</span>
56<span class="line"></span></code></pre></div><h3 id="_4-peeringdb注册" tabindex="-1"><a class="header-anchor" href="#_4-peeringdb注册"><span>4. PeeringDB注册</span></a></h3><p>搭好后顺手在 PeeringDB 挂了个号：</p><ul><li>组织：AKAERE NETWORKS TECHNOLOGY LTD</li><li>别名：Akaere IX</li><li>位置：CN</li><li>地域：亚太地区</li><li>服务级别：工作时间</li><li>网站：<a href="https://ixpm.akae.re/" target="_blank" rel="noopener noreferrer">ixpm.akae.re</a></li></ul><h2 id="运营小记" tabindex="-1"><a class="header-anchor" href="#运营小记"><span>运营小记</span></a></h2><p>目前已经有几个朋友的网络接入了 Akaere IX，大家一起玩 BGP、测路由、折腾 RPKI。带宽和规模其实都不是重点，关键是能互联、能交流、能一起成长。</p><h3 id="遇到的坑" tabindex="-1"><a class="header-anchor" href="#遇到的坑"><span>遇到的坑</span></a></h3><ul><li>VXLAN 偶尔抽风，隧道不稳，得多监控</li><li>每个成员的路由策略都不一样，配置得灵活点</li></ul><h3 id="技术收获" tabindex="-1"><a class="header-anchor" href="#技术收获"><span>技术收获</span></a></h3><ul><li>BGP 路由控制和策略玩法，实际操作比看书有趣多了</li><li>RPKI 部署和异常处理，安全感拉满</li><li>VXLAN 跨地域二层网络，远程接入 so easy</li><li>自动化脚本管理，省心不少</li></ul><h2 id="后续想法" tabindex="-1"><a class="header-anchor" href="#后续想法"><span>后续想法</span></a></h2><p>Akaere IX 还在慢慢完善，未来想：</p><ul><li>多接点，覆盖更多地区</li><li>自动化和可视化做得更好</li><li>路由安全服务再丰富点</li><li>也许还能和别的 IXP 互联玩玩</li></ul><h2 id="总结" tabindex="-1"><a class="header-anchor" href="#总结"><span>总结</span></a></h2><p>这次折腾 IXP，收获的不只是技术，更是和一群同样热爱网络的朋友一起成长的乐趣。互联网的本质就是开放和连接，IXP 只是一个小小的缩影。</p><p>如果你也想玩 BGP、想体验网络互联，欢迎来找我（[email protected]），一起折腾！</p><figure><img src="https://s3.pysio.online/cdn-cgi/image/f=avif,onerror=redirect,slow-connection-quality=50/https://s3.pysio.online/pysioimages/akaere/Akaere IXP.png" alt="AKIX 

56Logo" tabindex="0" loading="lazy"><figcaption>AKIX Logo</figcaption></figure><hr><p><strong>技术参考：</strong></p><ul><li><a href="https://bird.network.cz/" target="_blank" rel="noopener noreferrer">BIRD 路由软件文档</a></li><li><a href="https://rpki.readthedocs.io/" target="_blank" rel="noopener noreferrer">RPKI 部署指南</a></li><li><a href="https://datatracker.ietf.org/doc/rfc7348/" target="_blank" rel="noopener noreferrer">VXLAN 技术介绍</a></li></ul>`,39)])])}const r=e(i,[["render",p]]),c=JSON.parse(`{"path":"/posts/daily/AKIX.html","title":"组建一个 IXP 的小记","lang":"zh-CN","frontmatter":{"title":"组建一个 IXP 的小记","date":"2025-05-05T00:00:00.000Z","icon":"fa-solid fa-ethernet","category":"daily","tag":["BGP","日常"],"description":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能...","head":[["script",{"type":"application/ld+json"},"{\\"@context\\":\\"https://schema.org\\",\\"@type\\":\\"Article\\",\\"headline\\":\\"组建一个 IXP 的小记\\",\\"image\\":[\\"https://s3.pysio.online/cdn-cgi/image/f=avif,onerror=redirect,slow-connection-quality=50/https://s3.pysio.online/pysioimages/akaere/Akaere%20IXP.png\\"],\\"datePublished\\":\\"2025-05-05T00:00:00.000Z\\",\\"dateModified\\":\\"2025-05-05T14:45:26.000Z\\",\\"author\\":[{\\"@type\\":\\"Person\\",\\"name\\":\\"Pysio\\",\\"url\\":\\"https://github.com/pysio2007/\\"}]}"],["meta",{"property":"og:url","content":"https://www.pysio.online/posts/daily/AKIX.html"}],["meta",{"property":"og:site_name","content":"Pysio's Home"}],["meta",{"property":"og:title","content":"组建一个 IXP 的小记"}],["meta",{"property":"og:description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["meta",{"property":"og:type","content":"article"}],["meta",{"property":"og:image","content":"https://s3.pysio.online/cdn-cgi/image/f=avif,onerror=redirect,slow-connection-quality=50/https://s3.pysio.online/pysioimages/akaere/Akaere%20IXP.png"}],["meta",{"property":"og:locale","content":"zh-CN"}],["meta",{"property":"og:locale:alternate","content":"en-US"}],["meta",{"property":"og:updated_time","content":"2025-05-05T14:45:26.000Z"}],["meta",{"property":"article:tag","content":"日常"}],["meta",{"property":"article:tag","content":"BGP"}],["meta",{"property":"article:published_time","content":"2025-05-05T00:00:00.000Z"}],["meta",{"property":"article:modified_time","content":"2025-05-05T14:45:26.000Z"}],["link",{"rel":"alternate","hreflang":"en-us","href":"https://www.pysio.online/en/posts/daily/AKIX.html"}],["meta",{"property":"article:published_time","content":"2025-05-05T00:00:00.000Z"}],["meta",{"name":"article:published_time","content":"2025-05-05T00:00:00.000Z"}],["meta",{"property":"article:tag","content":"BGP"}],["meta",{"property":"article:tag","content":"日常"}],["meta",{"property":"article:section","content":"daily"}],["meta",{"property":"og:title","content":"组建一个 IXP 的小记"}],["meta",{"property":"og:url","content":"https://www.pysio.online/posts/daily/AKIX.html"}],["meta",{"property":"og:description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原æ

56¥è‡ªå·±ä¹Ÿèƒ½æžèµ·æ¥ã€‚顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["meta",{"name":"description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["meta",{"name":"twitter:title","content":"组建一个 IXP 的小记"}],["meta",{"name":"twitter:description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["script",{"type":"application/ld+json"},"{\\"@context\\":\\"https://schema.org\\",\\"@type\\":\\"BlogPosting\\",\\"headline\\":\\"组建一个 IXP 的小记\\",\\"author\\":{\\"@type\\":\\"Person\\",\\"name\\":\\"Pysio\\",\\"url\\":\\"https://github.com/pysio2007\\"},\\"publisher\\":{\\"@type\\":\\"Organization\\",\\"name\\":\\"Pysio's Home\\",\\"url\\":\\"https://www.pysio.online\\"},\\"url\\":\\"https://www.pysio.online/posts/daily/AKIX.html\\",\\"datePublished\\":\\"2025-05-05T00:00:00.000Z\\",\\"dateModified\\":\\"2025-05-05T00:00:00.000Z\\",\\"description\\":\\"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能...\\",\\"mainEntityOfPage\\":{\\"@type\\":\\"WebPage\\",\\"@id\\":\\"https://www.pysio.online/posts/daily/AKIX.html\\"}}"],["link",{"rel":"canonical","href":"https://www.pysio.online/posts/daily/AKIX.html"}],["link",{"rel":"alternate","type":"application/rss+xml","title":"Pysio's Home RSS Feed","href":"https://www.pysio.online/rss.xml"}],["meta",{"property":"og:title","content":"组建一个 IXP 的小记"}],["meta",{"property":"og:description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["meta",{"property":"og:image","content":"https://www.pysio.online/og-images/组建一个ixp的小记.png"}],["meta",{"property":"og:url","content":"https://www.pysio.online/posts/daily/AKIX.html"}],["meta",{"property":"og:type","content":"article"}],["meta",{"property":"og:site_name","content":"Pysio's Home"}],["meta",{"name":"twitter:card","content":"summary_large_image"}],["meta",{"name":"twitter:title","content":"组建一个 IXP 的小记"}],["meta",{"name":"twitter:description","content":"ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。 为什么要折腾IXP？ 说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？ 想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操 让小网络也能..."}],["meta",{"name":"twitter:image","content":"https://www.pysio.online/og-images/组建一个ixp的小记.png"}],["link",{"rel":"alternate","type":"application/rss+xml","href":"https://www.pysio.online/rss.xml","title":"Pysio's Home RSS Feed"}]]}

56,"git":{"createdTime":1746447114000,"updatedTime":1746456326000,"contributors":[{"name":"Pysio","username":"Pysio","email":"[email protected]","commits":1,"url":"https://github.com/Pysio"},{"name":"liuzhen932 🇦🇶","username":"","email":"[email protected]","commits":1}]},"readingTime":{"minutes":3.43,"words":1030},"filePathRelative":"posts/daily/AKIX.md","excerpt":"<p>ASN 拿到手已经三个月了，前阵子也没怎么折腾。最近纯粹是心血来潮，突然想试试能不能自己搭个 IXP。</p>\\n<h2>为什么要折腾IXP？</h2>\\n<p>说实话，最初的动力很简单，就是想玩。BGP、RPKI 这些词看着高大上，实际动手才发现，原来自己也能搞起来。顺便还能帮朋友们的网络互联省点事，何乐而不为？</p>\\n<ul>\\n<li>想深入理解 BGP 和 RPKI，光看文档不过瘾，必须实操</li>\\n<li>让小网络也能低门槛互联，体验&quot;互联网的互联网&quot;</li>\\n<li>顺便试试远程虚拟接入，看看能不能让地球另一端的朋友也能轻松接入</li>\\n</ul>\\n<h2>技术选型和踩坑</h2>","autoDesc":true}`);export{r as comp,c as data};