Anycast

import socket
import subprocess
import time

# Anycast DNS 응답 위치 확인
def check_anycast_location(dns_server="1.1.1.1"):
    """Cloudflare Anycast DNS가 응답하는 데이터센터 확인"""
    import dns.resolver

    resolver = dns.resolver.Resolver()
    resolver.nameservers = [dns_server]

    # Cloudflare의 whoami 서비스로 응답 위치 확인
    answers = resolver.resolve("whoami.cloudflare.com", "TXT")
    for rdata in answers:
        print(f"응답 위치: {rdata}")

check_anycast_location()

# 여러 Anycast DNS 응답 시간 비교
def compare_anycast_dns():
    """주요 Anycast DNS 서비스 응답 시간 비교"""
    dns_servers = {
        "Cloudflare": "1.1.1.1",
        "Google": "8.8.8.8",
        "Quad9": "9.9.9.9",
        "OpenDNS": "208.67.222.222"
    }

    for name, server in dns_servers.items():
        start = time.time()
        socket.create_connection((server, 53), timeout=2)
        latency = (time.time() - start) * 1000
        print(f"{name} ({server}): {latency:.2f}ms")

compare_anycast_dns()

# BGP 경로 길이 확인 (RouteViews API 활용 예시)
def check_bgp_path(prefix="1.1.1.0/24"):
    """특정 IP 프리픽스의 BGP 경로 정보 확인"""
    import requests

    # RIPEstat API 사용
    url = f"https://stat.ripe.net/data/routing-status/data.json"
    params = {"resource": prefix}

    response = requests.get(url, params=params)
    data = response.json()

    if data.get("data"):
        visibility = data["data"].get("visibility", {})
        print(f"프리픽스: {prefix}")
        print(f"전 세계 가시성: {visibility.get('v4', 0)}개 Peer")

# check_bgp_path("1.1.1.0/24")

# AWS Global Accelerator - Anycast IP 활용
resource "aws_globalaccelerator_accelerator" "example" {
  name            = "my-anycast-accelerator"
  ip_address_type = "IPV4"
  enabled         = true

  attributes {
    flow_logs_enabled   = true
    flow_logs_s3_bucket = aws_s3_bucket.logs.bucket
    flow_logs_s3_prefix = "global-accelerator/"
  }

  tags = {
    Name = "Anycast-Accelerator"
  }
}

# Anycast IP로 라우팅될 Listener 설정
resource "aws_globalaccelerator_listener" "https" {
  accelerator_arn = aws_globalaccelerator_accelerator.example.id
  protocol        = "TCP"

  port_range {
    from_port = 443
    to_port   = 443
  }
}

# 엔드포인트 그룹 (각 리전별 서버)
resource "aws_globalaccelerator_endpoint_group" "seoul" {
  listener_arn          = aws_globalaccelerator_listener.https.id
  endpoint_group_region = "ap-northeast-2"

  endpoint_configuration {
    endpoint_id = aws_lb.seoul.arn
    weight      = 100
  }

  health_check_protocol = "HTTPS"
  health_check_path     = "/health"
}

resource "aws_globalaccelerator_endpoint_group" "tokyo" {
  listener_arn          = aws_globalaccelerator_listener.https.id
  endpoint_group_region = "ap-northeast-1"

  endpoint_configuration {
    endpoint_id = aws_lb.tokyo.arn
    weight      = 100
  }
}

# 출력: Anycast IP 주소 확인
output "anycast_ips" {
  value = aws_globalaccelerator_accelerator.example.ip_sets[0].ip_addresses
}