DN42入坑指南（五）DN42百宝箱

DN42网络如何调试，可以用来验证是否已成功进入DN42网络

#是否能到达DN42官方DNS，如下是地址（可以ping结合mtr来看）
    172.23.0.53

#若是有多个peer，添加一条静态路由，指定出口，再次测试看是否通达DN42-DNS
    ip route add 172.23.0.53/32 via 172.23.235.1 dev DE_TBSPACE
    ip route del 172.23.0.53/32 via 172.23.235.1 dev DE_TBSPACE

百宝箱

lede下面wireguard生产key，并配置vpn
    opkg update
    opkg install luci-proto-wireguard wireguard kmod-wireguard
    cd /root
    wg genkey | tee sprivatekey | wg pubkey > spublickey

root@Openwrt:~# cat dn42_HK_FNK.conf 
#IBGP-与香港节点
[Interface]
PrivateKey = IGM0/l6BNZx34/vBDEe43+9N3jXwgQtxV4bxCkF+NGs=
ListenPort = 9990
[Peer]
PublicKey = DDZ3okHxSQancA/XTD1Dx5EI9M7vA2P/Zcazsya9ZHo=
Endpoint = 58.82.202.242:9990
AllowedIPs = 172.16.0.0/12
AllowedIPs = 10.0.0.0/8
AllowedIPs = fd00::/8
AllowedIPs = fe80::/10
root@Openwrt:~# cat tunel-up.sh 
ip addr del dev HK_FNK 172.20.58.195/32
ip link add dev HK_FNK type wireguard
wg setconf HK_FNK /root/dn42_HK_FNK.conf
ip addr add fe80::f816:3eff:fe16:3c42/64 dev HK_FNK
ip addr add 172.20.58.195/32 peer 172.20.58.194/32 dev HK_FNK
ip link set HK_FNK up

如何执行（这样就OK了。可以ping通了）
    ./tunel-up.sh

BGP的配置
router bgp 4242420524
 bgp router-id 172.20.58.193
 neighbor 172.20.58.194 remote-as 4242420524
 neighbor 172.20.58.194 description dn42-HK_FNK-AS4242420524-2020-3-22-IBGP
 neighbor 172.20.58.194 interface HK_FNK
 neighbor fe80::f816:3eff:fe16:3c41 remote-as 4242420524
 neighbor fe80::f816:3eff:fe16:3c41 description dn42-HK_FNK-AS4242420524-2020-3-22-IBGP
!
 address-family ipv6
 network fd91:7b3d:8d19::/48
 exit-address-family
 exit

LANTIAN的DN42详细介绍文章：入坑指南（我就是这么入的）
    https://lantian.pub/article/modify-website/dn42-experimental-network-2020.lantian/

DN42官方，关于Bird2如何配置BGP的介绍
    https://wiki.dn42.us/howto/Bird2

介绍IBGP对等体互联：
    https://weiti.org/dn42/2018/01/13/ibgp-bgp-within-as4242423905

burble的全球Peer节点信息，找近的建对等体
    https://dn42.burble.com/peering

神秘的BGPpeer（很多节点，国内都有，不过不知道怎么见，人家是公网AS）
    https://nekomimirouter.com/peer-with-us/

将Bird进行路由过滤的文章
    https://blog.swineson.me/bgp-at-home-1-multi-isp-policy-routing/

介绍使用Bird-BGP推静态路由给路由器
    https://404space.net/network/broadcast-static-routes-to-routers-by-using-bird-bgp.html

DN42-Peer动态图，类似bgphe的asn邻居图
    https://nixnodes.net/dn42/graph/
    http://map.dn42/

DN42网络导航页
    https://collector.burble.com/

DN42测试地址：
    http://kioubit.dn42/speedtest/

非常牛逼的lg站点
    https://net-lg.nia.ac.cn/

知识介绍
    https://nowhere.ws/guides/dn42/

BGP多归属问题分析
    https://blog.csdn.net/weixin_43726831/article/details/91039113

群里一大佬
    https://0x7f.cc/dn42-0x00/

BGP相关的文章
    https://docs.cumulusnetworks.com/cumulus-linux-343/Layer-Three/Border-Gateway-Protocol-BGP/
    http://arthurchiao.art/blog/bgp-in-data-center-zh/

    https://vincent.bernat.ch/en/blog/2011-lab-site-to-site-vpn
    https://weiti.org/dn42/2018/01/05/basics-tunnels-ospf
    https://vincent.bernat.ch/en/blog#tag-network-vpn
    https://vincent.bernat.ch/en/blog/2018-route-based-vpn-wireguard
    https://0x7f.cc/dn42-0x02/
    https://blog.ni-co.moe/public/561.html
    https://docs.nycmesh.net/networking/bgp/
    https://404space.net/network/broadcast-static-routes-to-routers-by-using-bird-bgp.html
    https://weiti.org/dn42/2018/01/13/ibgp-bgp-within-as4242423905

待建的peer
    https://dn42.tchekda.fr/
    https://www.chrismoos.com/dn42-peering/     (这是他的自助申请地址：ssh cli@cli.dn42.tech9.io )
    https://dn42.6700.cc/nodes.html
    https://dn42.munsternet.eu/peering/
    https://graffen.dk/dn42.html
    https://dn42.miegl.cz/
    http://dn42.wxmn.net/
    https://dn42.fiatflux.is/
    https://dn42.g-load.eu/
    https://sigterm.sh/dn42-peering/
    https://sgp.dn42.icez.net/

找peer
    https://dn42.us/peers
IRC：
    https://webirc.hackint.org/

托管解析服务
    fastnet.dn42

     iptables -t nat -A POSTROUTING -s 172.20.29.68/32 ! -d 172.20.0.0/14 -j SNAT --to 192.168.0.103

looking glass 测试

    https://lg.burble.com/summary/all
    https://lg.prauscher.de/
    https://dn42.g-load.eu/lg/
    http://dn42.gotroot.ca/summary/

    graffen的LG
    https://lg.hessnet.dk/summary/dn42-nl-ams1+dn42-uk-lon1+dn42-de-fsn1/ipv4