{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"A BGP route leak has led to widespread connectivity issues on the internet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cloudflare released<\/a><\/noindex> Report on yesterday's incident, which caused three hours<\/a><\/noindex> of access problems to many global network resources, including Cloudflare, Facebook, Akamai, Apple, Linode, and Amazon AWS. Issues in the Cloudflare infrastructure, which provides CDN for 16 million websites, were observed<\/a><\/noindex> from 14:02 to 16:02 (MSK). According to Cloudflare, approximately 15% of global traffic was lost during the outage. <\/p>\n

The problem was is caused by<\/a><\/noindex> a route leak through BGP, during which around 20,000 prefixes for 2,400 networks were incorrectly redirected. The leak's source was the provider DQE Communications, which used software BGP Optimizer<\/a><\/noindex> to optimize routing. BGP Optimizer breaks IP prefixes into smaller parts; for example, it splits 104.20.0.0\/20 into 104.20.0.0\/21 and 104.20.8.0\/21, resulting in DQE Communications holding a large number of specific routes that override more general routes (i.e., instead of general routes to Cloudflare, more granular routes to specific Cloudflare subnets were used).<\/p>\n

These specific routes were announced to one of the clients (Allegheny Technologies, AS396531), which also had a connection through another provider. Allegheny Technologies broadcast the received routes to another transit provider (Verizon, AS701). Due to the lack of proper BGP announcement filtering and limits on the number of prefixes, Verizon picked up this announcement and broadcast the received 20,000 prefixes to the rest of the internet. The incorrect prefixes were perceived as more prioritized due to their granularity, as a specific route has a higher priority than a general one. <\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

As a result, traffic for many major networks began to route through Verizon to the small provider DQE Communications, which was unable to handle the influx, leading to a collapse (the effect is comparable to replacing part of a busy highway with a dirt road). <\/p>\n

To prevent similar incidents in the future,
\nare recommended<\/a><\/noindex>:<\/p>\n