{"id":78343,"date":"2020-04-18T19:42:04","date_gmt":"2020-04-18T17:42:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp"},"modified":"2020-04-18T19:42:04","modified_gmt":"2020-04-18T17:42:04","slug":"cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","title":{"rendered":"Cloudflare k\u00e4ivitas teenuse vale BGP marsruutide filtreerimise j\u00e4lgimiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cloudflare k\u00e4ivitatud<\/a><\/noindex> veebileht isBGPSafeYet.com<\/a><\/noindex>, mille eesm\u00e4rk on juhtida t\u00e4helepanu vale BGP marsruutide lekkeprobleemile ja v\u00f5imalusele suunamisr\u00fcnnakute teostamiseks BGP protokolli abil. Veebisait v\u00f5imaldab kontrollida teenusepakkujate vale marsruutide filtreerimise tehnoloogia rakendamist ning hinnata RPKI toe rakendamise taset. <\/p>\n

Paljud operaatorid j\u00e4\u00e4vad kaitsetuks vale pikkusega marsruutide BGP-anon\u00fc\u00fcmsuse vastuv\u00f5tmise eest, mis suunavad transiiditrafiku kaudu kolmandate osapoolte teenusepakkujat. \u00dcha enam esinevad BGP kasutamise juhud r\u00fcnnakute korral, kus kurjategijad kompromiteerivad teenusepakkujate infrastruktuuri, korraldades liikluse suunamist ja pealetungimist does DNS-i vastuste asendamiseks MiTM-r\u00fcnnaku kaudu. <\/p>\n

Probleemi lahenduseks on BGP-teate autoriseerimiss\u00fcsteemi rakendamine RPKI (Resource Public Key Infrastructure) alusel, mis v\u00f5imaldab m\u00e4\u00e4rata, kas BGP-teade p\u00e4rineb v\u00f5rgu omanikult v\u00f5i mitte. RPKI kasutamisel autonoomsete s\u00fcsteemide ja IP-aadresse jaoks ehitatakse usaldusketti IANA-st piirkondlikele registreerijatele (RIR-id) ja seej\u00e4rel teenusepakkujatele (LIR) ja l\u00f5ppkasutajatele, mis v\u00f5imaldab kolmandatel isikutel veenduda, et ressurss on opereeritud selle omanikult. Kahjuks ei ole RPKI seni suurema osa teenusepakkujate poolt kasutusele v\u00f5etud. Uus Cloudflare'i teenus v\u00f5imaldab j\u00e4lgida probleemseid operaatoreid ja suunata neile avalikku t\u00e4helepanu.
\n

\"Cloudflare<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442 isBGPSafeYet.com, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 BGP. \u0421\u0430\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPKI. \u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f BGP-\u0430\u043d\u043e\u043d\u0441\u043e\u0432 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u0441 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0434\u043b\u0438\u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":78344,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78343","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare k\u00e4ivitas vale BGP marsruutide filtreerimise j\u00e4lgimise teenuse | ProHoster","description":"Cloudflare avas \u00fcles isBGPSafeYet.com, mille eesm\u00e4rk on t\u00f5mmata t\u00e4helepanu vale BGP marsruutide lekke probleemile ja v\u00f5imalusele teostada liikluse \u00fcmbersuunamise r\u00fcnnakuid BGP protokolli abil. Saidil on v\u00f5imalik kontrollida, kuidas teenusepakkujad rakendavad vale marsruutide filtreerimise tehnoloogiat ja hinnata RPKI toe rakendamist. Paljud operaatorid j\u00e4\u00e4vad kaitsetuks vale marsruutide BGP kuulutuste vastu, mis sisaldavad valeid teavet marsruudi pikkuse kohta.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 BGP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442 isBGPSafeYet.com, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 BGP. \u0421\u0430\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPKI. \u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f BGP-\u0430\u043d\u043e\u043d\u0441\u043e\u0432 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u0441 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0434\u043b\u0438\u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-18T17:42:04+00:00","article:modified_time":"2020-04-18T17:42:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78343","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:36","updated":"2022-10-08 14:27:38"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/78343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=78343"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/78343\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/78344"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=78343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=78343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=78343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}