{"id":113276,"date":"2024-01-31T13:41:06","date_gmt":"2024-01-31T11:41:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec"},"modified":"2024-01-31T13:41:06","modified_gmt":"2024-01-31T11:41:10","slug":"sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","title":{"rendered":"Panne dans la zone de domaine RU en raison d'une erreur lors du remplacement des cl\u00e9s DNSSEC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Le 30 janvier \u00e0 18h20 (MSK), les utilisateurs ont rencontr\u00e9 une panne massive de la r\u00e9solution des h\u00f4tes dans la zone de domaine RU, caus\u00e9e par une erreur lors du changement des cl\u00e9s utilis\u00e9es pour certifier la validit\u00e9 de la zone RU via DNSSEC. En cons\u00e9quence, tous les domaines dans la zone \u00ab .ru \u00bb ont cess\u00e9 d'\u00eatre r\u00e9solus sur les serveurs DNS utilisant DNSSEC pour v\u00e9rifier l'authenticit\u00e9 des donn\u00e9es. Le probl\u00e8me a touch\u00e9 uniquement les utilisateurs utilisant les r\u00e9solveurs DNS des fournisseurs ou des services DNS publics, tels que 8.8.8.8, qui v\u00e9rifient l'authenticit\u00e9 des requ\u00eates \u00e0 l'aide de DNSSEC. Les utilisateurs des r\u00e9solveurs DNS qui ont d\u00e9sactiv\u00e9 DNSSEC n'ont pas \u00e9t\u00e9 affect\u00e9s. <\/p>\n

L'incident rappelle celui de l'ann\u00e9e derni\u00e8re avec le registraire InternetNZ, responsable de la zone de domaine \u00ab .NZ \u00bb, qui a entra\u00een\u00e9 une panne de r\u00e9solution complets<\/a> dans la zone \u00ab .nz \u00bb en raison d'une erreur lors de la rotation des cl\u00e9s KSK (Key Signing Key), utilis\u00e9es pour la signature num\u00e9rique des enregistrements DNSKEY contenant les cl\u00e9s pour signer la zone de domaine (ZSK, Zone Signing Key). Dans le cas d'InternetNZ, l'erreur \u00e9tait li\u00e9e \u00e0 un changement de format des cl\u00e9s lors de la transition vers un nouveau syst\u00e8me d'information du registraire. Les raisons de l'incident dans la zone RU n'ont pas encore \u00e9t\u00e9 d\u00e9taill\u00e9es - le Centre de coordination des domaines RU n'a confirm\u00e9 que de mani\u00e8re g\u00e9n\u00e9rale que le probl\u00e8me \u00e9tait li\u00e9 \u00e0 la reconfiguration de DNSSEC. <\/p>\n

\u00c0 en juger par les manifestations ext\u00e9rieures, la panne s'est produite \u00e0 la suite d'une tentative de remplacement de la cl\u00e9 utilis\u00e9e pour certifier la zone RU. Cette cl\u00e9 est la racine de confiance pour les autres cl\u00e9s utilis\u00e9es dans les domaines de second niveau et utilise, \u00e0 son tour, la cl\u00e9 du domaine \u00ab . \u00bb comme sup\u00e9rieure pour confirmer sa confiance. Le 26 janvier, dans les param\u00e8tres DNSEC de la zone RU, en plus de la cl\u00e9 principale avec l'identifiant 44301, une cl\u00e9 suppl\u00e9mentaire 52263 est apparue.

\"Panne\"Panne<\/center> <\/p>\n

Hier, vers 18h20, une nouvelle cl\u00e9 a \u00e9t\u00e9 utilis\u00e9e pour v\u00e9rifier les enregistrements dans la zone RU, mais apr\u00e8s le passage \u00e0 la nouvelle cl\u00e9, la v\u00e9rification de l'authenticit\u00e9 a \u00e9chou\u00e9 en raison d'une erreur.

\"Panne<\/center> <\/p>\n

La signature de l'ancienne cl\u00e9 a \u00e9t\u00e9 restaur\u00e9e vers 21 heures (MSK), et la premi\u00e8re r\u00e9ponse correcte a \u00e9t\u00e9 enregistr\u00e9e par le service dnsviz.net \u00e0 22h07 (MSK). Des r\u00e9glages d\u00e9faillants ont \u00e9t\u00e9 pr\u00e9sents pendant environ deux heures et demie, mais en raison de la persistance des enregistrements erron\u00e9s dans les caches des serveurs DNS, un temps suppl\u00e9mentaire est n\u00e9cessaire pour une restauration compl\u00e8te, \u00e0 moins de forcer le vide-cache sur les serveurs DNS r\u00e9cursifs. Certains fournisseurs ont r\u00e9solu le probl\u00e8me de mani\u00e8re plus rapide et radicale en d\u00e9sactivant temporairement la v\u00e9rification via DNSSEC dans les r\u00e9glages de leurs r\u00e9solveurs.

\"Panne\"Panne<\/center>
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 DNSSEC \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0441\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0432 \u0437\u043e\u043d\u0435 «.ru». \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DNS-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Panne dans la zone de domaine RU due \u00e0 une erreur lors de la substitution des cl\u00e9s DNSSEC | ProHoster","description":"Le 30 janvier \u00e0 18h20 (MSK), les utilisateurs ont rencontr\u00e9 une panne majeure de la r\u00e9solution des h\u00f4tes dans la zone de domaine RU, caus\u00e9e par une erreur lors du changement des cl\u00e9s utilis\u00e9es pour certifier l'int\u00e9grit\u00e9 de la zone RU via DNSSEC.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0439 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438 \u0437\u0430\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DNSSEC | ProHoster","og:description":"30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-31T11:41:10+00:00","article:modified_time":"2024-01-31T11:41:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:56:04","updated":"2026-02-08 20:56:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=113276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113276\/revisions"}],"predecessor-version":[{"id":158095,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/113276\/revisions\/158095"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/113277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=113276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=113276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=113276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}