{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"BGP-rute l\u00e6kage f\u00f8rte til massiv forbindelsesbrud p\u00e5 internettet.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cloudflare <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today\/\">offentliggjorde<\/a><\/noindex> rapport om g\u00e5rsdagens h\u00e6ndelse, som for\u00e5rsagede <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bgpmon\/status\/1143149817473847296\">tre timer<\/a><\/noindex> fra 13:34 til 16:26 (MSK) oplevedes problemer med adgangen til mange ressourcer p\u00e5 det globale netv\u00e6rk, inklusive Cloudflare, Facebook, Akamai, Apple, Linode og Amazon AWS. Problemerne i Cloudflares infrastruktur, der s\u00f8rger for CDN til 16 mio. websteder, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflarestatus.com\/incidents\/46z55mdhg0t5\">blev observeret<\/a><\/noindex> fra 14:02 til 16:02 (MSK). If\u00f8lge Cloudflare var der under nedbruddet et tab p\u00e5 cirka 15% af den globale trafik. <\/p>\n<p>Problemet var <noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101590.html\">er for\u00e5rsaget<\/a><\/noindex> en ruteutslipning via BGP, hvor omkring 20.000 pr\u00e6fikser for 2400 netv\u00e6rk blev omdirigeret forkert. Kilden til udsivningen var udbyderen DQE Communications, som brugte softwaren <noindex><a rel=\"nofollow\" href=\"https:\/\/www.noction.com\/intelligent_routing_platform\/traffic-routing-optimization\">BGP Optimizer<\/a><\/noindex> til at optimere routing. BGP Optimizer opdeler IP-pr\u00e6fikser i mindre dele, for eksempel opdeler 104.20.0.0\/20 i 104.20.0.0\/21 og 104.20.8.0\/21, hvilket medf\u00f8rte, at DQE Communications havde mange specifikke ruter p\u00e5 sin side, som omdefinerede mere generelle ruter (dvs. i stedet for de generelle ruter til Cloudflare blev der brugt mere granul\u00e6re ruter til specifikke subnetv\u00e6rk fra Cloudflare).<\/p>\n<p>Disse punkt-ruter blev annonceret til en af kunderne (Allegheny Technologies, AS396531), som ogs\u00e5 havde forbindelse via en anden udbyder. Allegheny Technologies broadcastede de modtagne ruter til en anden transitudbyder (Verizon, AS701). P\u00e5 grund af manglende korrekt filtrering af BGP-annoncer og begr\u00e6nsning af antallet af pr\u00e6fikser, tog Verizon denne annonce til sig og broadcastede de modtagne 20.000 pr\u00e6fikser til resten af internettet. De forkert pr\u00e6fikser blev p\u00e5 grund af deres granularitet opfattet som mere prioriterede, da en specifik rute har h\u00f8jere prioritet end en generel. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak2-2.png\"><img decoding=\"async\" alt=\"BGP-rute l\u00e6kage f\u00f8rte til massiv forbindelsesbrud p\u00e5 internettet.\" src=\"\/wp-content\/uploads\/2019\/06\/7b91b949afde7526f989c00666f7fee0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Som f\u00f8lge heraf blev trafikken til mange store netv\u00e6rk dirigeret gennem Verizon til den lille udbyder DQE Communications, som ikke var i stand til at h\u00e5ndtere det store trafikpres, hvilket f\u00f8rte til et kollaps (effekten kan sammenlignes med, at en del af en overbelastet motorvej blev erstattet med en grusvej).  <\/p>\n<p>For at forhindre opst\u00e5en af lignende h\u00e6ndelser i fremtiden<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101589.html\">anbefales<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Brug <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47303\">verificering<\/a><\/noindex> af annoncer baseret p\u00e5 RPKI (BGP Origin Validation, tillader kun modtagelse af annoncer fra netv\u00e6rsejere);\n<li class=\"l\"> Begr\u00e6ns det maksimale antal modtagne pr\u00e6fikser for alle EBGP-sessioner (indstillingen maximum-prefix ville straks have afvist overf\u00f8rslen af 20.000 pr\u00e6fikser inden for \u00e9n session);\n<li class=\"l\"> Anvend filtrering baseret p\u00e5 IRR-registeret (Internet Routing Registry, der definerer AS, som tillader routing af angivne pr\u00e6fikser);\n<li class=\"l\"> Brug de i RFC 8212 anbefalede indstillinger til routere for som standard at blokere ('default deny');\n<li class=\"l\"> Stop det tankel\u00f8se brug af BGP-optimerere.\n<\/ul>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak3-2.png\"><img decoding=\"async\" alt=\"BGP-rute l\u00e6kage f\u00f8rte til massiv forbindelsesbrud p\u00e5 internettet.\" src=\"\/wp-content\/uploads\/2019\/06\/2b2bb1fe713ee9e87987f57920116943.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Kilde: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50955\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432 \u0441 13:34 \u0434\u043e 16:26 (MSK) \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a\u043e \u043c\u043d\u043e\u0433\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Cloudflare, Facebook, Akamai, Apple, Linode \u0438 Amazon AWS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 CDN \u0434\u043b\u044f 16 \u043c\u043b\u043d \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0441 14:02 \u0434\u043e 16:02 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 BGP-rute l\u00e6kager f\u00f8rte til massivt sammenbrud af forbindelser p\u00e5 internettet | ProHoster","description":"Cloudflare har offentliggjort en rapport om g\u00e5rsdagen.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:29+00:00","article:modified_time":"2019-10-31T19:05:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35641","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:09:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:30","updated":"2026-01-22 00:09:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=35641"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/26701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=35641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=35641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=35641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}