{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"BGP marsruutide leke p\u00f5hjustas massilise \u00fchenduse katkemise internetis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cloudflare <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today\/\">avalikustasin<\/a><\/noindex> eile \u00f5nnetuse raport, mille tagaj\u00e4rjel esinesid juurdep\u00e4\u00e4suprobleemid paljudele globaalsetele ressurssidele, sealhulgas Cloudflare'i, Facebooki, Akamai, Apple'i, Linode'i ja Amazon AWS-i infrastruktuurile, <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bgpmon\/status\/1143149817473847296\">kolme tunni v\u00e4ltel<\/a><\/noindex> kell 13:34 kuni 16:26 (MSK). Probleemid Cloudflare'i infrastruktuuris, mis pakub CDN-i 16 miljonile veebisaidile, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflarestatus.com\/incidents\/46z55mdhg0t5\">ilmnesid<\/a><\/noindex> kell 14:02 kuni 16:02 (MSK). Cloudflare'i hindangul registreeriti rikke ajal umbes 15% globaalsetest andmevoogudest. <\/p>\n<p>Probleem oli <noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101590.html\">p\u00f5hjustatud<\/a><\/noindex> BGP kaudu toimunud marsruutide lekke t\u00f5ttu, mille k\u00e4igus suunati vale suunas umbes 20 000 eelistust 2400 v\u00f5rgust. Lekke allikaks oli teenusepakkuja DQE Communications, kes kasutas tarkvara <noindex><a rel=\"nofollow\" href=\"https:\/\/www.noction.com\/intelligent_routing_platform\/traffic-routing-optimization\">BGP Optimizer<\/a><\/noindex> marsruutimise optimeerimiseks. BGP Optimizer jagab IP-eelistusi v\u00e4iksemateks, n\u00e4iteks jagab 104.20.0.0\/20 kaheks 104.20.0.0\/21 ja 104.20.8.0\/21, mist\u00f5ttu hoidis DQE Communications enda s\u00fcsteemis suurt hulka spetsiifilisi marsruute, mis \u00fcletavad \u00fcldised marsruudid (st Cloudflare'i \u00fcldiste marsruutide asemel kasutati konkreetsetele Cloudflare'i alams\u00fcsteemidele suunatud detailsemaid marsruute).<\/p>\n<p>Needlike punktite marsruudid said teada\u00fcksi \u00fchele kliendile (Allegheny Technologies, AS396531), kes oli samuti \u00fchendatud veel \u00fche teenusepakkuja kaudu. Allegheny Technologies edastas saadud marsruudid teisele \u00fclemisteenusepakkujale (Verizon, AS701). Adekaatsete BGP-s\u00f5numite filtreerimise puudumise ning prefiksite arvu piirangu t\u00f5ttu, Verizon v\u00f5ttis selle s\u00f5numi \u00fcles ja edastas saadud 20 tuhat prefiksi \u00fclej\u00e4\u00e4nud internetile. Vale prefiksid nende granulaarsuse t\u00f5ttu t\u00f5lgendati k\u00f5rgemate prioriteetidena, kuna konkreetne marsruut omab k\u00f5rgemat prioriteeti kui \u00fcldine. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak2-2.png\"><img decoding=\"async\" alt=\"BGP marsruutide leke p\u00f5hjustas massilise \u00fchenduse katkemise internetis\" src=\"\/wp-content\/uploads\/2019\/06\/7b91b949afde7526f989c00666f7fee0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Kokkuv\u00f5ttes suunati liiklus paljude suurte v\u00f5rkude kaudu Verizon'i v\u00e4ikesele teenusepakkujale DQE Communications, kes ei suutnud taluda suurenenud voogu, mis viis kokkuvarisemiseni (efekt on v\u00f5rreldav sellega, kui osa koormatud kiirteest asendatakse taluteedega).  <\/p>\n<p>Sarnaste intsidentide ennetamiseks tulevikus<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101589.html\">soovitatud<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Kasutage <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47303\">verifitseerimine<\/a><\/noindex> s\u00f5numite p\u00f5hjal RPKI (BGP p\u00e4ritolu valideerimine, lubab s\u00f5numite vastuv\u00f5ttu ainult v\u00f5rgu omanike poolt);\n<li class=\"l\"> Piirata maksimaalne lubatud EBGPi seansside prefiksite arv (maximum-prefix seadistamine aitaks kohe k\u00f5rvaldada 20 000 prefiksi edastamise \u00fche seansi jooksul);\n<li class=\"l\"> Rakendada IRR (Internet Routing Registry) registrip\u00f5hist filtreerimist (m\u00e4\u00e4rab AS-id, mille kaudu on lubatud antud prefiksite marsruutimine);\n<li class=\"l\"> Kasutada marsruuterites RFC 8212 soovitatud vaikeseadeid vaikimisi blokeerimiseks ('default deny');\n<li class=\"l\"> L\u00f5petada m\u00f5tlematu BGP optimeerijate kasutamine.\n<\/ul>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak3-2.png\"><img decoding=\"async\" alt=\"BGP marsruutide leke p\u00f5hjustas massilise \u00fchenduse katkemise internetis\" src=\"\/wp-content\/uploads\/2019\/06\/2b2bb1fe713ee9e87987f57920116943.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50955\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432 \u0441 13:34 \u0434\u043e 16:26 (MSK) \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a\u043e \u043c\u043d\u043e\u0433\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Cloudflare, Facebook, Akamai, Apple, Linode \u0438 Amazon AWS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 CDN \u0434\u043b\u044f 16 \u043c\u043b\u043d \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0441 14:02 \u0434\u043e 16:02 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47BGP marsruutide lekkimine p\u00f5hjustas massilisi \u00fchenduvuse h\u00e4ireid internetis | ProHoster","description":"Cloudflare avaldas eile aruande.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:29+00:00","article:modified_time":"2019-10-31T19:05:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35641","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:09:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:30","updated":"2026-01-22 00:09:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35641"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/26701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}