{"id":78343,"date":"2020-04-18T19:42:04","date_gmt":"2020-04-18T17:42:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp"},"modified":"2020-04-18T19:42:04","modified_gmt":"2020-04-18T17:42:04","slug":"cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","title":{"rendered":"Cloudflare spustil slu\u017ebu pro sledov\u00e1n\u00ed filtrov\u00e1n\u00ed nespr\u00e1vn\u00fdch BGP tras.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Cloudflare zprovoznila<\/a><\/noindex> the site isBGPSafeYet.com<\/a><\/noindex>, kter\u00fd m\u00e1 p\u0159it\u00e1hnout pozornost k probl\u00e9mu \u00faniku nespr\u00e1vn\u00fdch BGP tras a mo\u017enosti prov\u00e1d\u011bn\u00ed \u00fatok\u016f na p\u0159esm\u011brov\u00e1n\u00ed provozu pomoc\u00ed protokolu BGP. Web umo\u017e\u0148uje zkontrolovat aplikaci technologie filtrov\u00e1n\u00ed nespr\u00e1vn\u00fdch tras ze strany poskytovatel\u016f a zhodnotit implementaci podpory RPKI. <\/p>\n

Mnoho oper\u00e1tor\u016f z\u016fst\u00e1v\u00e1 nechr\u00e1n\u011bno v\u016f\u010di p\u0159\u00edchoz\u00edm BGP ozn\u00e1men\u00edm pods\u00edt\u00ed s fale\u0161n\u00fdmi informacemi o d\u00e9lce trasy, kter\u00e9 sm\u011b\u0159uj\u00ed tranzitn\u00ed provoz p\u0159es t\u0159et\u00ed poskytovatele. \u010c\u00edm d\u00e1l \u010dast\u011bji se objevuj\u00ed p\u0159\u00edpady vyu\u017e\u00edv\u00e1n\u00ed BGP k \u00fatok\u016fm, b\u011bhem nich\u017e \u00fato\u010dn\u00edci pomoc\u00ed kompromitace infrastruktury poskytovatel\u016f organizuj\u00ed p\u0159esm\u011brov\u00e1n\u00ed a odposlech provozu, aby nahradili konkr\u00e9tn\u00ed weby prost\u0159ednictv\u00edm prov\u00e1d\u011bn\u00ed MiTM \u00fatok\u016f pro v\u00fdm\u011bnu odpov\u011bd\u00ed DNS. <\/p>\n

\u0158e\u0161en\u00edm probl\u00e9mu je implementace syst\u00e9mu autorizace BGP ozn\u00e1men\u00ed zalo\u017een\u00e9ho na RPKI (Resource Public Key Infrastructure), kter\u00fd umo\u017e\u0148uje zjistit, zda BGP ozn\u00e1men\u00ed poch\u00e1z\u00ed od vlastn\u00edka s\u00edt\u011b nebo ne. P\u0159i pou\u017eit\u00ed RPKI pro autonomn\u00ed syst\u00e9my a IP adresy se buduje \u0159et\u011bzec d\u016fv\u011bry od IANA k region\u00e1ln\u00edm registr\u00e1tor\u016fm (RIR) a pot\u00e9 k poskytovatel\u016fm (LIR) a koncov\u00fdm u\u017eivatel\u016fm, co\u017e umo\u017e\u0148uje t\u0159et\u00edm stran\u00e1m ov\u011b\u0159it, \u017ee operace s munic\u00ed byla provedena jej\u00edm vlastn\u00edkem. Bohu\u017eel, i p\u0159es probl\u00e9my, RPKI prozat\u00edm v\u011bt\u0161ina poskytovatel\u016f nepou\u017e\u00edv\u00e1. Nov\u00e1 slu\u017eba Cloudflare umo\u017e\u0148uje sledovat probl\u00e9mov\u00e9 oper\u00e1tory a p\u0159it\u00e1hnout k nim ve\u0159ejnou pozornost.
\n

\"Cloudflare<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442 isBGPSafeYet.com, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 BGP. \u0421\u0430\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPKI. \u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f BGP-\u0430\u043d\u043e\u043d\u0441\u043e\u0432 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u0441 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0434\u043b\u0438\u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":78344,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78343","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare spustil slu\u017ebu pro sledov\u00e1n\u00ed filtrov\u00e1n\u00ed nespr\u00e1vn\u00fdch tras BGP | ProHoster","description":"Spole\u010dnost Cloudflare uvedla do provozu web","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 BGP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-18T17:42:04+00:00","article:modified_time":"2020-04-18T17:42:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78343","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:36","updated":"2022-10-08 14:27:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/78343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=78343"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/78343\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/78344"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=78343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=78343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=78343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}