I-MikroTik Cloud Hoved Router

Iinkcukacha

• Igama lemveliso: I-MikroTik CHR (i-Cloud Hosting Router)
• Inkcazo: I-router esekelwe kwilifu yendlela yokusebenza yenethiwekhi
• Iimbonakalo: Ulawulo lwenethiwekhi, iinkonzo zeVPN, ukhuseleko lomlilo, ulawulo lwe-bandwidth

Imiyalelo yokusetyenziswa kwemveliso

Isikhokelo soFakelo

1. Lungiselela Indalo yakho: Qinisekisa ukuba indawo yakho yelifu ihlangabezana neemfuno zofakelo lwe-CHR.
2. Khuphela umfanekiso we-MikroTik CHR: Fumana umfanekiso we-CHR kwiMikroTik esemthethweni webindawo okanye indawo yokugcina.
3. Sebenzisa i-CHR kwindawo yakho yeLifu: Landela imiyalelo ethe ngqo yeqonga ukuze usebenzise i-CHR kulungiselelo lwakho lwamafu.
4. Ubumbeko Lokuqala: Qwalasela useto olusisiseko olufana nojongano lwenethiwekhi kunye needilesi ze-IP emva kokuthunyelwa.
5. Ubumbeko olukwinqanaba eliphezulu (Ngokhetho): Lungiselela useto lwe-CHR ngokusekwe kwiimfuno zenethiwekhi yakho kunye nemigaqo-nkqubo yolawulo.
6. Ulawulo kunye nokuBeka iliso: Sebenzisa izixhobo zeMikroTik ukulawula, ukubeka esweni, kunye nokusombulula ingxaki kwi-CHR yakho.
7. ULondolozo lwarhoqo: Yenza imisebenzi yogcino lwesiqhelo ukuqinisekisa ukusebenza ngokupheleleyo kunye nokhuseleko.

Injongo: I-MikroTik CHR yi-router esekelwe kwilifu eyenzelwe ukubonelela ngokusebenza kwendlela yothungelwano kwiindawo ezibonakalayo. Ikuvumela ukuba usebenzise iimpawu ze-MikroTik's RouterOS kwiziseko zelifu, iyenza ilunge kulawulo lwenethiwekhi, iinkonzo zeVPN, ukhuseleko lomlilo, kunye nolawulo lwe-bandwidth ngokusekwe kwi-virtualized okanye kwilifu.

Sebenzisa Amatyala

1. INethiwekhi yaBucala Eyinyani (VPN): I-CHR ingasetyenziselwa ukulawula kunye nomzila we-VPN traffic, ukuqinisekisa uqhagamshelwano olukhuselekileyo nolusebenzayo phakathi kweendawo ezikude.
2. Ulawulo Lwenethiwekhi: Ilungele ukulawula imo yenethiwekhi entsonkothileyo, kubandakanya ukuhamba, ukutshintsha, kunye nokubunjwa kwetrafikhi.
3. I-Firewall kunye noKhuseleko: Ibonelela ngezakhono ezinamandla zokukhusela i-firewall ukukhusela i-traffic yenethiwekhi kunye nokukhusela ukufikelela okungagunyaziswanga.
4. Ulawulo lwe-Bandwidth: Iluncedo ekubekeni iliso kunye nokulawula ukusetyenziswa kwe-bandwidth ukwenza ngcono ukusebenza kwenethiwekhi.

Isikhokelo soFakelo

1. Lungiselela Indalo yakho:
   Qinisekisa ukuba unendawo yelifu okanye iqonga le-virtualization apho unokuthumela khona i-CHR. Iiplatifti ezixhaswayo ziquka i-AWS, i-Azure, i-Google Cloud, i-VMware, i-Hyper-V, kunye nabanye.
2. Khuphela umfanekiso we-MikroTik CHR:
   Ndwendwela igosa leMikroTik webindawo okanye MikroTik.com ukukhuphela umfanekiso ofanelekileyo we-CHR. Khetha phakathi kweenguqulelo ezahlukeneyo ngokusekelwe kwiimfuno zakho (umzekelo, ezinzile okanye uvavanyo).
3. Sebenzisa i-CHR kwindawo yakho yeLifu:
   • AWS: Yenza umzekelo omtsha kwaye ulayishe umfanekiso we-CHR. Qwalasela umzekelo ngezixhobo ezifanelekileyo (CPU, RAM, ukugcinwa).
   • Azure: Sebenzisa iMarike ye-Azure ukuhambisa umatshini we-MikroTik CHR obonakalayo.
   • VMware/Hyper–V: Yenza umatshini omtsha kwaye uncamathele umfanekiso we-CHR kuwo.
4. Ubumbeko Lokuqala:
   • Ukufikelela CHR: Qhagamshela kumzekelo we-CHR usebenzisa i-SSH okanye uqhagamshelo lwe-console.
   • Isiseko Uqwalaselo: Cwangcisa ujongano lwenethiwekhi, iidilesi ze-IP, kunye neeprothokholi zomzila njengoko zifuneka. Jonga kuxwebhu lweMikroTik ngemiyalelo ethile kunye noqwalaselo.
5. Ubumbeko olukwinqanaba eliphezulu (Ngokhetho):
   • VPN Misela: Qwalasela iitonela zeVPN zokufikelela okukhuselekileyo kude.
   • Imithetho yeFirewall: Cwangcisa imigaqo yomlilo ukukhusela inethiwekhi yakho.
   • Ububanzi Ulawulo: Ukuphumeza ukubunjwa kwetrafikhi kunye nemigaqo-nkqubo yolawulo lwe-bandwidth.
6. Ulawulo kunye nokuBeka iliso:
   Sebenzisa iWinBox yeMikroTik okanye WebFig ukulawula kunye nokubeka iliso kwi-CHR umzekelo. Ezi zixhobo zibonelela ngomzobo womzobo woqwalaselo nokubeka iliso.
7. ULondolozo lwarhoqo:
   Gcina umzekelo wakho we-CHR uhlaziywe ngokukhutshwa kwesoftware yamva nje kunye neepetshi ukuqinisekisa ukhuseleko kunye nokusebenza.

Iingqwalasela:

• Ukukhutshwa kwelayisensi: IMikroTik CHR isebenza phantsi kwamanqanaba ahlukeneyo eelayisenisi. Khetha ilayisenisi esekelwe ekusebenzeni kwakho kunye neemfuno zesici.
• Ulwabiwo lweZibonelelo: Qinisekisa okusingqongileyo okubonakalayo kukubonelela ngezixhobo ezaneleyo zokuphatha ukugcwala kwenethiwekhi yakho kunye neemfuno zendlela.

Izixhobo:

• Uxwebhu lweMikroTik: Uxwebhu lweMikroTik CHR
• IiForam zasekuhlaleni: Zibandakanye noluntu lweMikroTik ngenkxaso kunye neengcebiso ezongezelelweyo.

Ushicilelo olusisigxina (Lolude) lofakelo oluzenzekelayo

• # Misela umphathi wepakethe
  ukuba umyalelo -v yum &> /dev/null; emva koko pkg_manager="yum"; elif umyalelo -v apt &> /dev/null; emva koko pkg_manager="apt"; enye into
  • echo “Akukho yum okanye i-apt ifunyenwe. Esi script asixhaswanga.”; phuma 1; iFi
• # Hlaziya iipakethe kwaye ufake i-unzip, i-pwgen, kunye ne-coreutils ukuba [“$pkg_manager” == “yum”]; emva koko sudo yum -y hlaziya && sudo yum -y faka unzip pwgen coreutils; elif [ “$pkg_manager” == “apt”]; emva koko sudo apt-fumana -y hlaziya && sudo apt-fumana -y faka unzip pwgen coreutils; iFi
  • echo "Isistim ihlaziywa kwaye iipakethe ezifunekayo zifakiwe."
• # Qinisekisa ingcambu file inkqubo isixhobo root_device=$(df / | awk 'NR==2 {print $1}') root_device_base=$(echo $root_device | sed 's/[0-9]\+$//')
  • phinda “Root fileinkqubo ikwisixhobo: i-$root_device”
  • phinda "indlela yesixhobo: $root_device_base"
• # Yenza kwaye unyuse ulawulo lwexeshana mkdir /mt_ros_tmp && intaba -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp
• # Fumana idilesi ye-IP kunye nesango
  INTERFACE=$(indlela ye-ip | ukungagqibeki kwe-grep | awk '{print $5}')
  Idilesi=$(ip addr show “$INTERFACE” | grep global | cut -d' ' -f 6 | intloko -n 1)
  GATEWAY=$(uluhlu lwendlela ye-ip | grep default | cut -d' ' -f 3) echo “Nceda ufake isitishi (esihlala sihleli='estable', or='testing'): ” funda isitishi
• # Ukuhlala kukho 'ukuzinza' ukuba akukho galelo linikiweyo ukuba [ -z “$channel” ]; emva koko ijelo=”zinzile” fi
  phinda "Faka i-RouterOS CHR kwisitishi 'se-$channel'..."
• # Khuphela URL ngokusekelwe kumjelo okhethiweyo
  ukuba [ “$channel” == “testing”]; emva koko rss_feed=”https://download.mikrotik.com/routeros/latest-testing.rss"elserss_feed="https://download.mikrotik.com/routeros/latest-stable.rss"Fi
• # Khuphela inguqulelo yamva nje yeMikroTik RouterOS rss_content=$(curl -s $rss_feed) latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | intloko -1) ukuba [ -z “$latest_version”]; ngoko
  • echo "Ayikwazanga kuphinda kufumaneke inombolo yamva nje." phuma 1 fi
  • phinda "uguqulelo lwamva nje: $yamva_uguqulelo" download_url=”https://download.mikrotik.com/routeros/$latest-version/chr-$latest-version.img.zip“
  • phinda "Khuphela kwi-$download_url…” wget –akukho-check-certificate -O “chr-$latest_version.img.zip” “$download_url” ukuba [ $? -eq 0 ]; emva koko echo "File ikhutshelwe ngempumelelo: chr-$latest_version.img.zip” enye
  • thetha "File ukukhuphela kusilele. phuma 1 fi
• # Vula unzip kwaye ulungise umfanekiso gunzip -c "chr-$latest_version.img.zip"> "chr-$latest_version.img"
• # Nyusa umfanekiso -o loop "chr-$latest_version.img" /mnt
• # Yenza igama eliyimfihlo elingaqhelekanga PASSWORD=$(pwgen 12 1)
• # Bhala iskripthi se-autorun ukumisela umzekelo we-RouterOS
  • echo "Igama lomsebenzisi (Kullanıcı adı): admin"
  • echo "Igama lokugqithisa (Şifre): $PASSWORD"
  • i-echo “/idilesi ye-ip yongeza idilesi=$ADDRESS ujongano=[/ujongano lwe-ethernet fumana apho igama=ether1]” > /mnt/rw/autorun.scr
  • echo "/ip indlela yongeza isango=$GATEWAY" >> /mnt/rw/autorun.scr
  • echo "/ip inkonzo khubaza i-telnet" >> /mnt/rw/autorun.scr
  • i-echo "/umsebenzisi usete igama elingu-0 = igama eliyimfihlo = $ PASSWORD" >> /mnt/rw/autorun.scr
  • echo “/ip dns set server=8.8.8.8,1.1.1.1” >> /mnt/rw/autorun.scr
• # Khupha zonke zixhonywe fileIindlela zokufunda-kuphela ungqamaniso && echo u > /proc/sysrq-trigger
• # Danyaza umfanekiso kwidisk dd ukuba=”chr-$latest_version.img” ye=$root_device_base bs=4M oflag=sync
• # Nyanzelisa inkqubo yokuqalisa kwakhona
  • echo 1> /proc/sys/kernel/sysrq
  • echo b> /proc/sysrq-trigger

I-SCRIPT OMNYE (OMfutshane) we-LINER yokuFakelo oluSebenzayo

ukuba umyalelo -v yum &> /dev/null; emva koko pkg_manager="yum"; elif umyalelo -v apt &> /dev/null; emva koko pkg_manager="apt"; omnye uphinda athi “Ayikho i-yum okanye ayifumanekiyo. Esi script asixhaswanga.”; phuma 1; fi && \ [ “$pkg_manager” == “yum” ] && sudo yum -y uhlaziyo && sudo yum -y faka unzip pwgen coreutils || [“$pkg_manager” == “apt”] && sudo apt-fumana -y uhlaziyo && sudo apt-fumana -y faka unzip pwgen coreutils && \ root_device=$(df / | awk 'NR==2 {print $1}' ) && root_device_base=$(echo $root_device | sed's/[0-9]\+$//') && \ echo “Ingcambu fileinkqubo ikwisixhobo: $root_device” && echo “Umendo wesixhobo: $root_device_base” && \ mkdir /mt_ros_tmp && mount -t tmpfs tmpfs /mt_ros_tmp/ && cd /mt_ros_tmp && \ INTERFACE=$(ip indlela esisiseko |w) print $5}') && ADDRESS=$(ip addr show “$INTERFACE” | grep global | awk '{print $2}' | intloko -n 1) && \ GATEWAY=$(uluhlu lwendlela ye-ip | grep default | awk '{ print $3}') && \ funda -p “Faka isitishi (esihlala sihleli='estable', okanye='testing'): ” isitishi; [ -z “$channel” ] && isitishi="stable”;rss_feed=”https://download.mikrotik.com/routeros/latest-$channel.rss” && rss_content=$(curl -s $rss_feed) && \ latest_version=$(echo “$rss_content” | grep -oP '(?<= RouterOS )[\d\.] +rc\d+' | intloko -1) && \ [ -z “$latest_version” ] && echo “Ayikwazanga kuphinda kufumaneke inombolo yamva nje.” && phuma 1 || \ echo "Uguqulelo lwamva nje: $last_version" && download_url=”https://download.mikrotik.com/routeros/$latest_version/chr-$latest-version.img.zip” && \ echo “Ukukhuphela kwi-$download_url…” && wget –no-check-certificate -O “chr-$latest_version.img.zip” “$download_url” && \ [ $? -eq 0 ] && echo "File ikhutshelwe ngempumelelo: chr-$latest_version.img.zip” || thetha "File ukukhuphela kusilele. && \ gunzip -c “chr-$latest_version.img.zip” > “chr-$latest_version.img” && mount -o loop “chr-$latest_version.img” /mnt && \ PASSWORD=$(pwgen 12 1) && echo “Igama lomsebenzisi: admin” && echo “Password: $PASSWORD” && \ echo “/ip idilesi yongeza idilesi=$ADDRESS ujongano=[/interface ethernet fumana apho igama=ether1]” > /mnt/rw/autorun.scr &&\ i-echo "/indlela ye-ip yongeza isango=$GATEWAY" >> /mnt/rw/autorun.scr && echo "/ip inkonzo khubaza i-telnet" >> /mnt/rw/autorun.scr && \ echo "/useti yomsebenzisi 0 igama= admin password=$PASSWORD” >> /mnt/rw/autorun.scr &&echo “/ip dns set server=8.8.8.8,1.1.1.1″ >> /mnt/rw/autorun.scr &&\sync && echo u> /proc/sysrq-trigger && dd ukuba=”chr-$latest_version.img” ye=$root_device_base bs=4M oflag=sync &&\echo 1 > /proc/sys/kernel/sysrq && echo b > /proc/sysrq- ukuxhokonxa

Uhlaziyo oluPhambili kunye neeNkcazo zeZikripthi ezizenzekelayo

1. Kuhlohlwa iiPakethi ezongezelelweyo:
   • Imiyalelo yokufakela eyongeziweyo ye-pwgen kunye ne-coreutils kuzo zombini i-yum kunye nabaphathi bephakheji ye-apt.
2. Idilesi ye-IP kunye neSango lokuFumana:
   • Umbhalo ubamba idilesi ye-IP yenkqubo kunye nesango usebenzisa i-add ye-IP kunye nendlela ye-ip.
3. Ukukhulula iZip kunye nokuNqangisa:
   • Umfanekiso awukhutshiwe kwaye unyuswe kusetyenziswa i-gunzip kunye nemiyalelo yokunyuka kunye neendlela ezifanelekileyo.
4. Ukuvelisa kunye nokuSeta igama lokugqithisa:
   • Igama lokugqitha elingenamnxeba elinamagama ali-12 iveliswa kusetyenziswa i-pwgen kwaye emva koko isetiwe kwiskripthi se-autorun ye-RouterOS.
5. I-Autorun script:
   • Isikripthi se-autorun sibandakanya imiyalelo yokuqwalasela umzekelo we-RouterOS, kuquka ukongeza idilesi ye-IP, ukuseta isango, ukukhubaza i-telnet, ukuseta igama eligqithisiweyo lomlawuli, kunye nokuqwalasela iiseva ze-DNS.
6. Ukuqalisa kwakhona inkqubo:
   • FileUngqamaniso lwenkqubo lwenziwa phambi kokunyanzeliswa kwenkqubo ngokutsha usebenzisa iSysRq isiqalo, iqinisekisa ukuba yonke idatha ibhalwe kwidisk.
7. UkuFunyaniswa koNxibelelwano oluSebenzayo lweNethiwekhi:
   • INTERFACE=$(indlela ye-ip | grep default | awk '{print $5}'): Ibhaqa ngokuzenzekelayo ujongano lwenethiwekhi esebenzayo ngokufumana ujongano lwendlela ehlala ikho.
   • Utshintsho lwe-ADDRESS lusetwa kusetyenziswa olu jongano lubhaqiweyo.

FAQ

Umbuzo: Zeziphi iimeko zokusetyenziswa eziphambili zeMikroTik CHR?
A: I-MikroTik CHR iqhele ukusetyenziselwa ukulawula itrafikhi ye-VPN, ubume benethiwekhi, ukhuseleko lomlilo, kunye nolawulo lwe-bandwidth ekusetweni okubonakalayo okanye okusekwe kwilifu.

Umbuzo: Ndingayifumana njani inkxaso yeMikroTik CHR?
A: Ungabhekisa kuxwebhu lweMikroTik okanye uqhagamshelane neeforam zoluntu ukuze ufumane inkxaso kunye neengcebiso ezongezelelweyo malunga nokusebenzisa i-CHR.

Amaxwebhu / Izibonelelo

I-MikroTik Cloud Hoved Router [pdf] Isikhokelo somsebenzisi I-Cloud Hosting Router, i-Hosting Router, iRouter

Iimbekiselo

• Incwadi yokusebenzisa