페이지 이력

mkdir -p /opt/routinator
cd /opt/routinator
vi docker-compose.yml
docker compose up -d

services:
  routinator:
    image: nlnetlabs/routinator
    container_name: routinator
    restart: unless-stopped
    ports:

services:
  routinator:
    image: nlnetlabs/routinator
    container_name: routinator
    restart: unless-stopped
    ports:
      - 3323:3323   # RTR port
      - 3323:3323   # RTR port
      - 8323:8323   # HTTP port
    volumes:
      - cache:/home/routinator/.rpki-cache
     environment:
      - TZ=Asia/Seoul

volumes:
  cache:

(HOST) # docker exec -it routinator /bin/sh.

(CONTAINER) / $ ps auxf
PID   USER     TIME  COMMAND
    1 routinat  0:00 /sbin/tini -- routinator server --rtr 0.0.0.0:3323 --http 0.0.0.0:8323 --http 0.0.0.0:9556
    7 routinat  0:58 routinator server --rtr 0.0.0.0:3323 --http 0.0.0.0:8323 --http 0.0.0.0:9556
   46 routinat  0:00 rsync --contimeout=10 --max-size=20000000 -rltz --delete rsync://rpki.netiface.net/repo/ /home/routinator/.rpki-cache/repository/rsync/rpki.netiface.net/repo/

alias routinator='docker exec -it routinator routinator'

# routinator config
repository-dir = "/home/routinator/.rpki-cache/repository"
exceptions = []
strict = false
stale = "reject"
unsafe-vrps = "accept"
unknown-objects = "warn"
allow-dubious-hosts = false
disable-rsync = false
rsync-command = "rsync"
rsync-timeout = 300
disable-rrdp = false
rrdp-fallback = "stale"
rrdp-fallback-time = 3600
rrdp-max-delta-count = 100
rrdp-timeout = 300
rrdp-tcp-keepalive = 60
rrdp-root-certs = []
rrdp-proxies = []
max-object-size = 20000000
max-ca-depth = 32
enable-bgpsec = false
dirty = false
validation-threads = 4
refresh = 600
retry = 600
expire = 7200
history-size = 10
rtr-listen = []
rtr-tls-listen = []
http-listen = []
http-tls-listen = []
systemd-listen = false
rtr-tcp-keepalive = 60
rtr-client-metrics = false
log-level = "WARN"
log = "default"
syslog-facility = "daemon"

# routinator --tal=list
 .---- RIR TALs
 |  .- RIR test TALs
 V  V

 X      afrinic             AFRINIC production TAL
 X      apnic               APNIC production TAL
 X      arin                ARIN production TAL
 X      lacnic              LACNIC production TAL
 X      ripe                RIPE production TAL
    X   apnic-testbed       APNIC RPKI Testbed
    X   arin-ote            ARIN Operational Test and Evaluation Environment
    X   ripe-pilot          RIPE NCC RPKI Test Environment
        nlnetlabs-testbed   NLnet Labs RPKI Testbed

mkdir -p /opt/fort
cd /opt/fort
vi docker-compose.yml
docker compose up -d

services:
  rpki-client:
    image: nicmx/fort-validator
    container_name: fort-validator
    restart: unless-stopped
    volumes:
      - ./config.json:/etc/fort/fort.conf
      - tals:/etc/fort/tal
      - cache:/var/local/fort
    ports:
      - 3323:323 # RTR port
    environment:
      - TZ=Asia/Seoul

volumes:
  tals:
  cache:

 {
  "tal":"/etc/fort/tal",
  "local-repository":"/var/local/fort"

  "mode": "server",
  "work-offline": false,
  "daemon": false,

  "log": {
    "enabled": true,
    "output": "console",
    "level": "info",
    "tag": "Operation",
    "facility": "daemon",
    "file-name-format": "global-url",
    "color-output": false
  },

  "validation-log": {
    "enabled": false,
    "output": "console",
    "level": "warning",
    "tag": "Validation",
    "facility": "daemon",
    "file-name-format": "global-url",
    "color-output": false
  }
}

(HOST) # docker exec -it fort-validator /bin/sh
(CONTAINER) / # ps auxf
PID   USER     TIME  COMMAND
    1 root      0:00 tini -g -- fort --configuration-file /etc/fort/fort.conf
    7 root      1:21 fort --configuration-file /etc/fort/fort.conf

# docker logs -f fort-validator
Jun 11 08:50:37 INF [Operation]: fort 1.6.2
Jun 11 08:50:37 INF [Operation]: Configuration {
Jun 11 08:50:37 INF [Operation]: tal: /etc/fort/tal
Jun 11 08:50:37 INF [Operation]: local-repository: /var/local/fort
Jun 11 08:50:37 INF [Operation]: shuffle-uris: false
Jun 11 08:50:37 INF [Operation]: maximum-certificate-depth: 32
Jun 11 08:50:37 INF [Operation]: slurm: (null)
Jun 11 08:50:37 INF [Operation]: mode: server
Jun 11 08:50:37 INF [Operation]: work-offline: false
...
Jun 11 08:50:37 INF [Operation]: }
Jun 11 08:50:37 INF [Operation]: Main loop: Starting...
Jun 11 08:50:37 INF [Operation]: [::]:323: Setting up socket...
Jun 11 08:50:37 INF [Operation]: [::]:323: Success.
Jun 11 08:50:37 INF [Operation]: The cache appears to have been built by a different version of Fort. I'm going to clear it, just to be safe.

# routinator --tal=list
 .---- RIR TALs
 |  .- RIR test TALs
 V  V

 X      afrinic             AFRINIC production TAL
 X      apnic               APNIC production TAL
 X      arin                ARIN production TAL
 X      lacnic              LACNIC production TAL
 X      ripe                RIPE production TAL
    X   apnic-testbed       APNIC RPKI Testbed
    X   arin-ote            ARIN Operational Test and Evaluation Environment
    X   ripe-pilot          RIPE NCC RPKI Test Environment
        nlnetlabs-testbed   NLnet Labs RPKI Testbed