{"id":92230,"date":"2020-08-24T19:42:19","date_gmt":"2020-08-24T17:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pochti-polovina-trafika-na-kornevye-dns-servery-vyzvana-aktivnostyu-chromium"},"modified":"2020-08-24T19:42:19","modified_gmt":"2020-08-24T17:42:19","slug":"pochti-polovina-trafika-na-kornevye-dns-servery-vyzvana-aktivnostyu-chromium","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/pochti-polovina-trafika-na-kornevye-dns-servery-vyzvana-aktivnostyu-chromium","title":{"rendered":"N\u00e6sten halvdelen af trafikken til de rod DNS-servere skyldes aktiviteten fra Chromium","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

APNIC, registratoren der ansvarer for fordeling af IP-adresser i Asien-Stillehavsomr\u00e5det, udgav<\/a><\/noindex> resultaterne af analyserne af trafikfordelingen p\u00e5 en af de prim\u00e6re DNS-servere a.root-servers.net. 45,80% af foresp\u00f8rgslerne til den prim\u00e6re server viste sig at v\u00e6re relateret til kontroller udf\u00f8rt af browsere baseret p\u00e5 Chromium-motoren. S\u00e5ledes g\u00e5r n\u00e6sten halvdelen af ressourcerne p\u00e5 de prim\u00e6re DNS-servere til at udf\u00f8re diagnostiske checks i Chromium i stedet for at behandle foresp\u00f8rgsler fra DNS-servere ved bestemmelse af r\u00f8dderne. Da Chrome har 70% af markedet for web-browsere, f\u00f8rer denne diagnostiske aktivitet til, at der sendes omkring 60 milliarder foresp\u00f8rgsler til de prim\u00e6re servere om dagen.<\/p>\n

Diagnostiske kontroller bruges i Chromium til at identificere, hvordan udbydere af tjenester omdirigerer anmodninger til ikke-eksisterende navne til deres egne h\u00e5ndteringssystemer. S\u00e5danne systemer implementeres af nogle udbydere for at dirigere trafik til sig selv ved dom\u00e6nenavne, der er indtastet forkert \u2014 som regel vises fejlmeddelelsessider, forslag til sandsynlige korrekte navne og annoncering for ikke-eksisterende dom\u00e6ner. Denne aktivitet underminerer fuldst\u00e6ndigt logikken i at bestemme intranet-v\u00e6rter i browseren.<\/p>\n

N\u00e5r man behandler en s\u00f8geforesp\u00f8rgsel indtastet i adresselinjen, hvis der kun er indtastet \u00e9t ord uden punkter, fors\u00f8ger browseren f\u00f8rst at<\/a><\/noindex> bestemme dette ord i DNS, idet det antages, at brugeren m\u00e5ske fors\u00f8ger at f\u00e5 adgang til et intranet-websted i det interne netv\u00e6rk snarere end at sende en foresp\u00f8rgsel til en s\u00f8gemaskine. Hvis udbyderen omdirigerer anmodninger til ikke-eksisterende dom\u00e6nenavne til sig selv, opst\u00e5r der et problem for brugerne \u2014 enhver s\u00f8geforesp\u00f8rgsel best\u00e5ende af \u00e9t ord, indtastet i adressefeltet, begynder at blive omdirigeret til udbyderens sider i stedet for at blive sendt til s\u00f8gemaskinen.<\/p>\n

For at l\u00f8se det opst\u00e5ede problem har udviklerne af Chromium tilf\u00f8jet i browseren yderligere checks<\/a><\/noindex>, som \u00e6ndrer logikken for behandling af foresp\u00f8rgsler i adresselinjen, hvis der opdages omdirigeringer.
\nVed hver opstart, \u00e6ndring af DNS-indstillinger eller skift af IP-adresse sender browseren tre DNS-foresp\u00f8rgsler med tilf\u00e6ldige f\u00f8rste niveau dom\u00e6nenavne, som sandsynligvis ikke eksisterer. Navnene indeholder mellem 7 og 15 latinske bogstaver (uden punkter) og bruges til at identificere omdirigeringen af ikke-eksisterende dom\u00e6nenavne af udbyderen til deres v\u00e6rt. Hvis der modtages en omdirigering til den samme side for to af de tre HTTP-foresp\u00f8rgsler med tilf\u00e6ldige navne, anser Chromium det for, at brugeren er blevet omdirigeret til en tredjeparts side.<\/p>\n

Som indikatorer for at skelne Chromium-aktivitet fra det samlede flow af anmodninger p\u00e5 den rod DNS-server, blev der anvendt us\u00e6dvanlige st\u00f8rrelser for f\u00f8rste niveau dom\u00e6ner (mellem 7 og 15 bogstaver) og faktoren for gentagelse af anmodninger (navnene blev genereret tilf\u00e6ldigt hver gang og blev ikke gentaget).
\nI loggen blev f\u00f8rst foresp\u00f8rgsler om ikke-eksisterende dom\u00e6ner filtreret fra (78,09 %), derefter blev der udvalgt foresp\u00f8rgsler, der blev gentaget h\u00f8jst tre gange (51,41 %), og derefter blev dom\u00e6ner, der indeholdt mellem 7 og 15 bogstaver, filtreret fra (45,80 %). Interessant nok viste det sig, at kun 21,91 % af foresp\u00f8rgslerne til roden af serverne var relateret til bestemmelsen af eksisterende dom\u00e6ner.<\/p>\n

\"N\u00e6sten<\/a><\/noindex><\/center><\/p>\n

I l\u00f8bet af unders\u00f8gelsen blev der ogs\u00e5 unders\u00f8gt sammenh\u00e6ngen mellem stigningen i belastningen p\u00e5 rodserverne a.root-servers.net og j.root-servers.net og stigningen i populariteten af Chrome.<\/p>\n

\"N\u00e6sten<\/a><\/noindex><\/center><\/p>\n

I Firefox er kontroller for omdirigering gennem DNS begr\u00e6nset til<\/a><\/noindex> bestemmelsen af omdirigeringer til autentificeringssider (captive portal) og er implementeret<\/a><\/noindex> med brugen af<\/a><\/noindex> fast subdom\u00e6net \u00abdetectportal.firefox.com\u00bb, uden at anmode om dom\u00e6nenavne i f\u00f8rste niveau. En s\u00e5dan adf\u00e6rd skaber ikke yderligere belastning p\u00e5 de rod DNS-servere, men kan potentielt betegnes<\/a><\/noindex> cause a leakage of confidential data about the user's IP address (a request for the page \u00abdetectportal.firefox.com\/success.txt\u00bb is made at every start). To disable the check in Firefox, there is a setting \u00abnetwork.captive-portal-service.enabled\u00bb, which can be changed on the page \u00ababout:config\u00bb.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 a.root-servers.net. 45.80% \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0434\u0432\u0438\u0436\u043a\u0430 Chromium. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a Chromium, \u0430 \u043d\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043e\u0442 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92231,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92230","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00e6sten halvdelen af trafikken til de rod DNS-servere skyldes aktiviteten fra Chromium | ProHoster","description":"APNIC, registratoren der ansvarer for fordeling af IP-adresser i Asien-Stillehavsomr\u00e5det,","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/pochti-polovina-trafika-na-kornevye-dns-servery-vyzvana-aktivnostyu-chromium","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e Chromium | ProHoster","og:description":"\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435,","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/pochti-polovina-trafika-na-kornevye-dns-servery-vyzvana-aktivnostyu-chromium","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-24T17:42:19+00:00","article:modified_time":"2020-08-24T17:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92230","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:12:28","updated":"2022-10-02 11:58:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=92230"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92230\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/92231"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=92230"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=92230"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=92230"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}