{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"BGP marsruutide leke viis ulatuslike probleemideni interneti\u00fchenduses","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ettev\u00f5te Cloudflare <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today\/\">avalikustas<\/a><\/noindex> eelmisel p\u00e4eval toimunud juhtumi aruanne, mille t\u00f5ttu <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bgpmon\/status\/1143149817473847296\">kolme tunni v\u00e4ltel<\/a><\/noindex> kell 13:34 kuni 16:26 (MSK) esines probleeme juurdep\u00e4\u00e4suga paljudele ressurssidele \u00fclemaailmses v\u00f5rgus, sealhulgas Cloudflare'i, Facebooki, Akamai, Apple'i, Linode'i ja Amazon AWS-i infrastruktuurile. Probleemid Cloudflare'i infrastruktuuris, mis pakub CDN-i 16 miljonile veebisaidile, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflarestatus.com\/incidents\/46z55mdhg0t5\">olid j\u00e4lgitavad<\/a><\/noindex> kell 14:02 kuni 16:02 (MSK). Cloudflare'i hinnangul kadus katkestuse ajal ligikaudu 15% globaalset liiklust. <\/p>\n<p>Probleem oli <noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101590.html\">on p\u00f5hjustatud<\/a><\/noindex> marsruutide lekke t\u00f5ttu BGP kaudu, mille k\u00e4igus suunati vale suunaga umbes 20 000 eelist 2400 v\u00f5rgust. Lekke l\u00e4htepunktiks oli DQE Communications, kes kasutas tarkvara <noindex><a rel=\"nofollow\" href=\"https:\/\/www.noction.com\/intelligent_routing_platform\/traffic-routing-optimization\">BGP Optimizer<\/a><\/noindex> marsruutimise optimeerimiseks. BGP Optimizer jagab IP-eelist v\u00e4iksemateks, n\u00e4iteks jagab 104.20.0.0\/20 kahte osa 104.20.0.0\/21 ja 104.20.8.0\/21, ja seet\u00f5ttu hoidis DQE Communications enda k\u00e4es suurt arvu spetsiifilisi marsruute, mis m\u00e4\u00e4ratlesid \u00fcmber \u00fcldised marsruudid (st. \u00fcldiste marsruutide asemel Cloudflare'i suunati spetsiifilisemate marsruutide kaudu Cloudflare'i konkreetsetele alamv\u00f5rkudele).<\/p>\n<p>Need spetsiifilised marsruudid kuulutati v\u00e4lja \u00fchele kliendile (Allegheny Technologies, AS396531), kellel oli samuti \u00fchendus teise teenusepakkuja kaudu. Allegheny Technologies edastas saadud marsruudid teisele \u00fcleminekuteenusepakkujale (Verizon, AS701). Sobiva BGP kuulutuste filtreerimise ja eelistuste piirm\u00e4\u00e4ra puudumise t\u00f5ttu v\u00f5ttis Verizon selle kuulutuse vastu ja edastas saadud 20 000 eelist \u00fclej\u00e4\u00e4nud internetile. Vale eelistid, oma spetsiifilisuse t\u00f5ttu, t\u00f5lgendati kui prioriteetsemaid, kuna spetsiifiline marsruut on prioriteetsem kui \u00fcldine. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak2-2.png\"><img decoding=\"async\" alt=\"BGP marsruutide leke viis ulatuslike probleemideni interneti\u00fchenduses\" src=\"\/wp-content\/uploads\/2019\/06\/7b91b949afde7526f989c00666f7fee0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>L\u00f5ppkokkuv\u00f5ttes suunati paljude suurte v\u00f5rkude liiklus Verizon'i kaudu v\u00e4ikese teenusepakkuja DQE Communications'i poole, kes ei suutnud toime tulla tulvava liiklusega, mis viis kokkuvarisemiseni (m\u00f5ju on v\u00f5rreldav olukorraga, kus osa koormatud kiirteest asendati k\u00fclateega).  <\/p>\n<p>Sarnaste juhtumite v\u00e4ltimiseks tulevikus<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101589.html\">soovitatakse<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Kasutage <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47303\">integeratiiv<\/a><\/noindex> kuulutuste kontrollimiseks RPKI alusel (BGP Origin Validation, lubab kuulutuste vastuv\u00f5tmist ainult v\u00f5rguhalduritelt);\n<li class=\"l\"> Piirata maksimaalne prefixide arv, mida k\u00f5ik EBGP sessioonid saavad aktsepteerida (maximum-prefix seadistus aitaks kohe k\u00f5rvaldada 20 000 prefixi saatmise \u00fche sessiooni jooksul);\n<li class=\"l\"> Rakendada IRR (Internet Routing Registry) alusel filtreerimist, mis m\u00e4\u00e4rab AS-id, mille kaudu on lubatud antud prefixide marsruutimine;\n<li class=\"l\"> Kasutage marsruuteritel soovitatud RFC 8212 seadeid vaikimisi blokeerimiseks ('default deny');\n<li class=\"l\"> L\u00f5petada m\u00f5tlematult BGP optimeerijate kasutamine.\n<\/ul>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak3-2.png\"><img decoding=\"async\" alt=\"BGP marsruutide leke viis ulatuslike probleemideni interneti\u00fchenduses\" src=\"\/wp-content\/uploads\/2019\/06\/2b2bb1fe713ee9e87987f57920116943.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50955\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432 \u0441 13:34 \u0434\u043e 16:26 (MSK) \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a\u043e \u043c\u043d\u043e\u0433\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Cloudflare, Facebook, Akamai, Apple, Linode \u0438 Amazon AWS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 CDN \u0434\u043b\u044f 16 \u043c\u043b\u043d \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0441 14:02 \u0434\u043e 16:02 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47BGP marsruutide leke viis laialdase \u00fchenduvuse katkestamiseni internetis | ProHoster","description":"Cloudflare avaldas eile aruande.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:29+00:00","article:modified_time":"2019-10-31T19:05:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35641","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:09:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:30","updated":"2026-01-22 00:09:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35641"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/26701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}