Simon Marsh
3970981f1b
All checks were successful
continuous-integration/drone/push Build is passing
191 lines
7.8 KiB
Markdown
191 lines
7.8 KiB
Markdown
---
|
|
title: "Public Services"
|
|
geekdocDescription: "List of public services"
|
|
weight: 20
|
|
---
|
|
Services provided for use within DN42
|
|
|
|
## Website
|
|
|
|
- [burble.dn42](https://burble.dn42/) (dn42 link)
|
|
- [dn42.burble.com](https://dn42.burble.com/) (public internet link)
|
|
|
|
This website is built using [Hugo](https://gohugo.io/) and is
|
|
[distributed](/services/internal/#rproxyburbledn42) across burble.dn42
|
|
core nodes.
|
|
|
|
The public internet site is hosted on de-fra1 behind
|
|
[CloudFlare](https://www.cloudflare.com) and the source for the website
|
|
is [published](https://git.burble.com/burble.dn42/www) in the burble.dn42 git.
|
|
|
|
## Issue Log
|
|
|
|
A public issue log is maintained on the [DN42 Registry](https://git.dn42.dev).
|
|
|
|
- [Issue Log](https://git.dn42.dev/burble/burble.dn42/issues)
|
|
|
|
Users are welcome to raise issues or enhancements via the log.
|
|
|
|
## Diagnostic Services
|
|
|
|
### Looking Glass
|
|
|
|
- [lg.burble.com](https://lg.burble.com) (public internet link)
|
|
- [lg.burble.dn42](https://lg.burble.dn42) (dn42 link)
|
|
|
|
The burble.dn42 looking glass is based on
|
|
[bird-lg-go](https://github.com/xddxdd/bird-lg-go) with some local
|
|
customisations. The source code for the looking glass is available
|
|
on the
|
|
[burble.dn42 git](https://git.burble.com/burble.dn42/bird-lg-go).
|
|
|
|
The looking glass is hosted on de-fra1 and the public version is
|
|
behind [CloudFlare](https://www.cloudflare.com).
|
|
|
|
### Pingable IP address
|
|
|
|
* pingable.burble.dn42
|
|
* 172.20.129.5
|
|
* fd42:4242:2601:ac05::1
|
|
|
|
pingable.burble.dn42 is a single IP address that will respond to ping and
|
|
traceroute requests across the entire network.
|
|
|
|
This address may be used for automated reachability or latency tests, however
|
|
please be considerate and configure a reasonable test frequency.
|
|
|
|
{{<hint warning>}}
|
|
In all cases, do not set the ping frequency to be higher than once a second.
|
|
{{</hint>}}
|
|
|
|
### Speed Test Service
|
|
|
|
A speed test service is available in France and Canada.<br/>
|
|
Note that the service is currently available over IPv6 only at this time.
|
|
|
|
- France: [https://speedtest.fr-rbx1.burble.dn42](https://speedtest.fr-rbx1.burble.dn42)
|
|
- Canada: [https://speedtest.ca-bhs2.burble.dn42](https://speedtest.ca-bhs2.burble.dn42)
|
|
|
|
{{<hint warning>}}
|
|
If the service ends up loading or disrupting the rest of the network then I may end up
|
|
removing it, so remember this service is provided for your benefit and use responsibly.
|
|
{{</hint>}}
|
|
|
|
## Network Status and Reporting
|
|
|
|
### Grafana Dashboards
|
|
|
|
- [https://grafana.burble.dn42](https://grafana.burble.dn42) dn42 link
|
|
- [https://grafana.burble.com](https://grafana.burble.com) public internet link
|
|
|
|
The hosted grafana service has it's own page [here](/services/grafana).
|
|
|
|
### Uptime monitoring
|
|
|
|
- [https://stats.uptimerobot.com/l2913c0R6](https://stats.uptimerobot.com/l2913c0R6)
|
|
|
|
Each node in the network is monitored by [UptimeRobot](https://uptimerobot.com/) with alerts
|
|
if a node becomes unavailable.
|
|
|
|
### Internal monitoring
|
|
|
|
Internally, nodes are measured by
|
|
[netdata](https://github.com/netdata/netdata) which provides a real time view of
|
|
each node. [prometheus](https://prometheus.io/) is then used to collect and
|
|
store that data for historical reporting. [grafana](https://grafana.com/) is used
|
|
for visualisation.
|
|
|
|
Syslogs are exported in real time to a central logging node on the internal network.
|
|
|
|
## Shell Accounts
|
|
|
|
The burble.dn42 shell service provides shell accounts for dn42 users who
|
|
have SSH auth methods in the registry.
|
|
See the [Shell Accounts](/services/shell/) page.
|
|
|
|
## DNS
|
|
|
|
|Service|Name|IP|
|
|
|:--|:--|:--|
|
|
|Authoritative Service|ns1.burble.dn42|172.20.129.1<br/>fd42:4242:2601:ac53::1|
|
|
|Recursive Service|dns.burble.dn42|172.20.129.2<br/>fd42:4242:2601:ac53::53|
|
|
|DNS64 Service|dns64.burble.dn42|fd42:4242:2601:ac53::64|
|
|
|
|
burble.dn42 provides a local, anycast, authoritative and recursive DNS service.
|
|
The [DNS Service](/services/dns) has it's own page.
|
|
|
|
{{<hint info>}}
|
|
#### DNS over HTTPs (DoH)
|
|
#### DNS over TLS
|
|
|
|
All services support DNS over HTTPs on port 443, and DNS over TLS on port 843.
|
|
{{</hint>}}
|
|
|
|
## Registry API Service and Explorer
|
|
|
|
- [https://explorer.burble.com/](https://explorer.burble.com/) (public internet link)
|
|
- [https://explorer.burble.dn42/](https://explorer.burble.dn42/) (DN42 link)
|
|
|
|
[dn42regsrv](https://git.burble.com/burble.dn42/dn42regsrv) is a REST API for the DN42 registry
|
|
that provides a bridge between interactive applications and the registry.
|
|
|
|
As well as the main REST API to the DN42 registry, the server can also generate ROA tables
|
|
and provides a small web application for exploring registry data.
|
|
|
|
## ROA Data
|
|
|
|
Route Origin Authorisation (ROA) tables are generated using
|
|
[dn42regsrv](https://git.dn42.us/burble/dn42regsrv) and published to the
|
|
[dn42.burble.com](https://dn42.burble.com/) website for general use.
|
|
|
|
The JSON output file can be used with [gortr](https://github.com/cloudflare/gortr)
|
|
to implement ROA checks via RPKI.
|
|
The Bird files can be used directly with Bird to implement ROA checks as detailed
|
|
in the DN42 Wiki ([Bird1](https://dn42.net/howto/Bird) / [Bird2](https://dn42.net/howto/Bird2)).
|
|
The OpenBGPD files can be used directly with OpenBGPD to implement ROA checks as details in the DN42 Wiki
|
|
[OpenBGPD](https://dn42.dev/howto/OpenBGPD)
|
|
|
|
|URL| IPv4/IPv6 |Description|
|
|
|---|---|---|
|
|
|[https://dn42.burble.com/roa/dn42_roa_46.json](https://dn42.burble.com/roa/dn42_roa_46.json) | Both | DN42 ROA data in JSON format |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird1_46.conf](https://dn42.burble.com/roa/dn42_roa_bird1_46.conf) | Both | DN42 ROA data for use with Bird1 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird1_4.conf](https://dn42.burble.com/roa/dn42_roa_bird1_4.conf) | IPv4 Only | DN42 ROA data for use with Bird1 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird1_6.conf](https://dn42.burble.com/roa/dn42_roa_bird1_6.conf) | IPv6 Only | DN42 ROA data for use with Bird1 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird2_46.conf](https://dn42.burble.com/roa/dn42_roa_bird2_46.conf) | Both | DN42 ROA data for use with Bird2 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird2_4.conf](https://dn42.burble.com/roa/dn42_roa_bird2_4.conf) | IPv4 Only | DN42 ROA data for use with Bird2 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_bird2_6.conf](https://dn42.burble.com/roa/dn42_roa_bird2_6.conf) | IPv6 Only | DN42 ROA data for use with Bird2 |
|
|
|[https://dn42.burble.com/roa/dn42_roa_obgpd_46.conf](https://dn42.burble.com/roa/dn42_roa_obgpd_46.conf) | Both | DN42 ROA data for use with OpenBGPD |
|
|
|[https://dn42.burble.com/roa/dn42_roa_obgpd_4.conf](https://dn42.burble.com/roa/dn42_roa_obgpd_4.conf) | IPv4 Only | DN42 ROA data for use with OpenBGPD |
|
|
|[https://dn42.burble.com/roa/dn42_roa_obgpd_6.conf](https://dn42.burble.com/roa/dn42_roa_obgpd_6.conf) | IPv6 Only | DN42 ROA data for use with OpenBGPD |
|
|
|
|
ROA data is cached via Cloudflare to provide fast local access, and an
|
|
[n8n](https://n8n.io) script is used to update ROA data immediately following
|
|
registry changes.
|
|
|
|
|
|
## Git
|
|
|
|
- [git.burble.dn42](https://git.burble.dn42/) (dn42 link)
|
|
- [git.burble.com](https://git.burble.com/) (public internet link)
|
|
|
|
burble.dn42 related code and configuration is maintained in a local
|
|
[gitea](https://gitea.io) repository.
|
|
|
|
## PrivateBin Instance
|
|
|
|
- [paste.burble.dn42](https://paste.burble.dn42) (dn42 link)
|
|
- [paste.burble.com](https://paste.burble.com) (public internet link)
|
|
|
|
burble.dn42 PrivateBin instance.
|
|
|
|
|
|
|
|
## NTP Service
|
|
|
|
All servers in burble.dn42 provide a stable, high stratum
|
|
NTP service using [chrony](https://chrony.tuxfamily.org).
|
|
|
|
The NTP service is exposed over DN42, and users are welcome to use any server
|
|
in the burble.dn42 network as an NTP time server on either the public or DN42 networks.
|
|
|