Internet zoo li yog ib tug muaj zog, ywj siab thiab indestructible qauv. Hauv txoj kev xav, lub network muaj zog txaus kom muaj sia nyob ntawm kev tawg nuclear. Hauv kev muaj tiag, Internet tuaj yeem tso ib lub router me me. Txhua yam vim tias Is Taws Nem yog ib pawg ntawm kev tsis sib haum xeeb, qhov tsis zoo, kev ua yuam kev thiab cov yeeb yaj kiab txog miv. Lub caj qaum ntawm Internet, BGP, yog fraught nrog teeb meem. Nws zoo kawg nkaus uas nws tseem ua pa. Ntxiv rau qhov yuam kev hauv Is Taws Nem nws tus kheej, nws tseem raug rhuav tshem los ntawm txhua tus thiab tsis muaj dab tsi: cov chaw muab kev pabcuam hauv Is Taws Nem loj, cov tuam txhab, xeev thiab DDoS tawm tsam. Yuav ua li cas txog nws thiab yuav ua li cas nrog nws?
Paub cov lus teb Alexey Uchakin () yog tus thawj coj ntawm pab pawg network engineers ntawm IQ Option. Nws lub luag haujlwm tseem ceeb yog kev nkag tau ntawm lub platform rau cov neeg siv. Nyob rau hauv cov ntaub ntawv ntawm Alexey tsab ntawv ceeb toom rau Wb tham txog BGP, DDOS kev tawm tsam, kev hloov hauv Is Taws Nem, kev ua haujlwm tsis raug, kev faib tawm thiab cov teeb meem thaum lub router me me xa Is Taws Nem mus pw. Thaum kawg - ob peb lub tswv yim yuav ua li cas kom ciaj sia tag nrho cov no.
Hnub Internet tawg
Kuv yuav hais tsuas yog qee qhov xwm txheej uas Internet kev sib txuas tau tawg. Qhov no yuav txaus rau daim duab tiav.
"AS7007 Kev tshwm sim". Thawj zaug hauv Is Taws Nem tawg yog lub Plaub Hlis 1997. Muaj cov kab laum hauv software ntawm ib lub router los ntawm autonomous system 7007. Qee lub sij hawm, lub router tshaj tawm nws cov lus sab hauv mus rau nws cov neeg nyob ze thiab xa ib nrab ntawm lub network mus rau hauv lub qhov dub.
"Pakistan tawm tsam YouTube". Xyoo 2008, cov neeg siab tawv ntawm Pakistan tau txiav txim siab los thaiv YouTube. Lawv ua tau zoo heev uas ib nrab lub ntiaj teb no tseg tsis muaj miv.
"Kev ntes ntawm VISA, MasterCard thiab Symantec prefixes los ntawm Rostelecom". Hauv 2017, Rostelecom yuam kev pib tshaj tawm VISA, MasterCard thiab Symantec ua ntej. Yog li ntawd, kev lag luam nyiaj txiag tau dhau los ntawm cov kev tswj hwm los ntawm tus kws kho mob. Kev xau tsis tau ntev, tab sis nws tsis zoo siab rau cov tuam txhab nyiaj txiag.
Google vs Japan. Thaum Lub Yim Hli 2017, Google tau pib tshaj tawm cov lus qhia ua ntej ntawm cov chaw pabcuam Nyij Pooj loj NTT thiab KDDI hauv qee qhov ntawm nws cov uplinks. Cov tsheb tau xa mus rau Google raws li kev thauj mus los, feem ntau yog ua yuam kev. Txij li thaum Google tsis yog tus muab kev pabcuam thiab tsis tso cai rau kev thauj mus los, ib feem tseem ceeb ntawm Nyiv tau tso tseg yam tsis muaj Is Taws Nem.
"DV LINK tau ntes cov npe ntawm Google, Apple, Facebook, Microsoft". Tsis tas li ntawd nyob rau hauv 2017, Lavxias teb sab muab kev pab cuam DV LINK rau qee qhov laj thawj pib tshaj tawm cov tes hauj lwm ntawm Google, Apple, Facebook, Microsoft thiab qee tus neeg ua si loj.
"eNet los ntawm Tebchaws Meskas tau ntes AWS Route53 thiab MyEtherwallet prefixes". Xyoo 2018, Ohio tus muab kev pabcuam lossis ib tus neeg siv khoom tau tshaj tawm Amazon Route53 thiab MyEtherwallet crypto hnab nyiaj tes hauj lwm. Qhov kev tawm tsam tau ua tiav: txawm tias txawm tias daim ntawv pov thawj tus kheej kos npe, ceeb toom txog qhov tshwm sim rau tus neeg siv thaum nkag mus rau MyEtherwallet lub vev xaib, ntau lub hnab nyiaj tau nyiag thiab ib feem ntawm cryptocurrency raug nyiag.
Muaj ntau dua 2017 qhov xwm txheej zoo li no hauv 14 ib leeg! Lub network tseem decentralized, yog li tsis yog txhua yam thiab tsis yog txhua tus tawg. Tab sis muaj ntau txhiab qhov xwm txheej, txhua yam cuam tshuam nrog BGP raws tu qauv uas muaj zog hauv Is Taws Nem.
BGP thiab nws cov teeb meem
Raws tu qauv BGP - Border Gateway Protocol, tau piav qhia thawj zaug hauv xyoo 1989 los ntawm ob tus kws tshaj lij los ntawm IBM thiab Cisco Systems ntawm peb "napkins" - A4 nplooj ntawv. Cov no tseem zaum ntawm Cisco Systems lub hauv paus hauv paus hauv San Francisco raws li qhov tseem ceeb ntawm lub ntiaj teb kev sib txuas.
Cov txheej txheem yog ua raws li kev sib cuam tshuam ntawm autonomous systems - Autonomous Systems lossis AS luv luv. Ib qho kev tswj hwm tus kheej tsuas yog ib qho ID uas IP network tau muab tso rau hauv kev sau npe pej xeem. Ib lub router nrog tus ID no tuaj yeem tshaj tawm cov tes hauj lwm no rau lub ntiaj teb. Yog li, txhua txoj hauv kev hauv Is Taws Nem tuaj yeem sawv cev ua vector, uas yog hu ua AS Path. Lub vector muaj cov lej ntawm kev tswj hwm tus kheej uas yuav tsum tau hla mus kom ncav cuag lub hom phiaj network.
Piv txwv li, muaj ib tug network ntawm ib tug xov tooj ntawm autonomous systems. Koj yuav tsum tau txais los ntawm AS65001 system mus rau AS65003 system. Txoj kev los ntawm ib qho system yog sawv cev los ntawm AS Path hauv daim duab. Nws muaj ob lub tshuab autonomous: 65002 thiab 65003. Rau txhua qhov chaw nyob muaj ib qho AS Path vector, uas muaj cov lej ntawm cov tshuab autonomous uas peb yuav tsum mus dhau.
Yog li dab tsi yog cov teeb meem nrog BGP?
BGP yog kev ntseeg siab
BGP raws tu qauv yog kev ntseeg siab. Qhov no txhais tau hais tias peb tso siab rau peb cov neeg zej zog los ntawm lub neej ntawd. Qhov no yog qhov tshwj xeeb ntawm ntau cov kev cai uas tau tsim thaum kaj ntug hauv Internet. Cia peb xav seb "kev ntseeg" txhais li cas.
Tsis muaj kev txheeb xyuas neeg nyob ze. Raws li txoj cai, muaj MD5, tab sis MD5 hauv 2019 tsuas yog qhov ntawd ...
Tsis muaj lim. BGP muaj cov ntxaij lim dej thiab lawv tau piav qhia, tab sis lawv tsis siv lossis siv tsis raug. Kuv mam piav vim li cas tom qab.
Nws yooj yim heev los teeb tsa ib cheeb tsam. Teeb tsa ib cheeb tsam hauv BGP raws tu qauv ntawm yuav luag txhua lub router yog ob peb kab ntawm kev teeb tsa.
Tsis tas yuav muaj cai tswj hwm BGP. Koj tsis tas yuav xeem ntawv los ua pov thawj koj qhov kev tsim nyog. Tsis muaj leej twg yuav tshem koj txoj cai rau kev teeb tsa BGP thaum qaug dej qaug cawv.
Ob qhov teeb meem loj
Ua ntej hijacks. Prefix hijacking yog tshaj tawm lub network uas tsis koom nrog koj, ib yam li MyEtherwallet. Peb coj qee qhov ua ntej, pom zoo nrog tus kws kho mob lossis nyiag nws, thiab dhau ntawm nws peb tshaj tawm cov tes hauj lwm no.
Txoj kev xau. Leaks yog qhov nyuaj me ntsis. Leak yog qhov hloov pauv hauv AS Path. Qhov zoo tshaj plaws, qhov kev hloov pauv yuav ua rau ncua sij hawm ntau dua vim tias koj yuav tsum tau taug kev ntev dua lossis ntawm qhov txuas tsawg dua. Qhov phem tshaj plaws, rooj plaub nrog Google thiab Nyiv yuav rov ua dua.
Google nws tus kheej tsis yog tus neeg teb xov tooj lossis lub chaw hla kev tswj hwm tus kheej. Tab sis thaum nws tshaj tawm cov tes hauj lwm ntawm cov neeg ua haujlwm Nyij Pooj rau nws tus neeg muab kev pabcuam, kev khiav tsheb los ntawm Google ntawm AS Path tau pom tias yog qhov tseem ceeb dua. Kev khiav mus rau qhov ntawd thiab poob tsuas yog vim qhov kev teeb tsa hauv Google yog qhov nyuaj dua li cov lim dej ntawm ciam teb.
Vim li cas cov lim dej tsis ua haujlwm?
Tsis muaj leej twg txhawj. Qhov no yog qhov laj thawj tseem ceeb - tsis muaj leej twg mob siab rau. Tus thawj coj ntawm ib lub chaw muab kev pabcuam me me lossis lub tuam txhab uas txuas nrog tus kws kho mob ntawm BGP coj MikroTik, teeb tsa BGP rau nws thiab tsis paub txawm tias cov ntxaij lim dej tuaj yeem teeb tsa rau ntawd.
Configuration yuam kev. Lawv messed ib yam dab tsi, ua yuam kev hauv lub npog ntsej muag, tso rau ntawm qhov tsis ncaj ncees lawm mesh - thiab tam sim no muaj qhov yuam kev dua.
Tsis muaj kev ua tau zoo. Piv txwv li, cov chaw muab xov tooj muaj ntau tus neeg siv khoom. Qhov ntse uas yuav tsum tau ua yog kom hloov kho cov lim dej rau txhua tus neeg siv khoom - los saib xyuas tias nws muaj lub network tshiab, uas nws tau xauj nws lub network rau ib tus neeg. Nws nyuaj ua raws li qhov no, thiab tseem nyuaj dua nrog koj txhais tes. Yog li ntawd, lawv tsuas txhim kho cov ntxaij lim dej so lossis tsis nruab cov lim dej txhua.
Tsis suav. Muaj kev zam rau cov neeg nyiam thiab cov neeg siv khoom loj. Tshwj xeeb tshaj yog nyob rau hauv cov ntaub ntawv ntawm inter-operator interfaces. Piv txwv li, TransTeleCom thiab Rostelecom muaj ib pawg ntawm tes hauj lwm thiab muaj kev sib txuas ntawm lawv. Yog tias qhov sib koom ua ke poob, nws yuav tsis zoo rau leej twg, yog li cov ntxaij lim dej tau so lossis tshem tawm tag nrho.
Cov ntaub ntawv tshaj tawm lossis tsis cuam tshuam hauv IRR. Cov lim yog tsim los ntawm cov ntaub ntawv uas tau sau tseg hauv IRR - Internet Routing Registry. Cov no yog cov npe ntawm cov neeg sau npe hauv cheeb tsam hauv Internet. Feem ntau, cov ntawv sau npe muaj cov ntaub ntawv dhau los lossis tsis cuam tshuam, lossis ob qho tib si.
Leej twg yog tus sau npe?
Txhua qhov chaw nyob hauv Internet yog nyob ntawm lub koom haum IANA - Internet Assigned Numbers Authority. Thaum koj yuav IP network los ntawm ib tug neeg, koj tsis yog yuav chaw nyob, tab sis txoj cai siv lawv. Chaw nyob yog ib qho khoom siv tsis tau thiab los ntawm kev pom zoo lawv txhua tus muaj los ntawm IANA.
Lub kaw lus ua haujlwm zoo li no. IANA tso cai rau kev tswj hwm ntawm IP chaw nyob thiab tus lej tswj hwm tus lej rau tsib tus neeg sau npe hauv cheeb tsam. Lawv muab autonomous systems LIR - tus sau npe hauv internet hauv zos. LIRs ces faib IP chaw nyob rau cov neeg siv kawg.
Qhov tsis zoo ntawm qhov system yog tias txhua tus neeg sau npe hauv cheeb tsam tswj hwm nws cov npe hauv nws txoj kev. Txhua leej txhua tus muaj lawv tus kheej xav txog dab tsi cov ntaub ntawv yuav tsum muaj nyob rau hauv cov ntaub ntawv sau npe, thiab leej twg yuav tsum los yog yuav tsum tsis txhob mus xyuas nws. Qhov tshwm sim yog qhov mess peb muaj tam sim no.
Koj tuaj yeem tiv thaiv cov teeb meem no li cas?
IRR - nruab nrab zoo. Nws yog qhov tseeb nrog IRR - txhua yam tsis zoo nyob ntawd.
BGP-cov zej zog. Nov yog qee tus cwj pwm uas tau piav qhia hauv cov txheej txheem. Peb tuaj yeem txuas, piv txwv li, ib lub zej zog tshwj xeeb rau peb cov lus tshaj tawm kom cov neeg zej zog tsis xa peb cov tes hauj lwm mus rau nws cov neeg nyob ze. Thaum peb muaj P2P txuas, peb tsuas yog pauv peb lub network. Txhawm rau tiv thaiv txoj hauv kev los ntawm kev yuam kev mus rau lwm lub network, peb ntxiv cov zej zog.
Cov zej zog tsis hloov pauv. Nws yog ib txwm ib daim ntawv cog lus rau ob, thiab qhov no yog lawv drawback. Peb tsis tuaj yeem muab ib lub zej zog, tshwj tsis yog ib qho, uas tau lees paub los ntawm txhua tus neeg. Peb tsis tuaj yeem paub tseeb tias txhua tus neeg yuav lees txais lub zej zog no thiab txhais nws kom raug. Yog li ntawd, nyob rau hauv qhov zoo tshaj plaws, yog tias koj pom zoo nrog koj uplink, nws yuav nkag siab qhov koj xav tau los ntawm nws nyob rau hauv cov nqe lus ntawm lub zej zog. Tab sis koj tus neeg nyob ze yuav tsis nkag siab, lossis tus neeg teb xov tooj yuav rov pib dua koj lub cim, thiab koj yuav tsis ua tiav qhov koj xav tau.
RPKI + ROA daws tsuas yog ib feem me me ntawm cov teeb meem. RPKI yog Resource Public Key Infrastructure - lub moj khaum tshwj xeeb rau kev kos npe cov ntaub ntawv qhia kev. Nws yog ib lub tswv yim zoo los yuam LIRs thiab lawv cov neeg siv khoom kom tswj tau qhov chaw nyob qhov chaw nyob tshiab. Tab sis muaj ib qho teeb meem nrog nws.
RPKI kuj tseem yog qhov tseem ceeb ntawm pej xeem hierarchical. IANA muaj tus yuam sij los ntawm cov yuam sij RIR tsim tawm, thiab cov yuam sij LIR tau tsim los ntawm qhov twg? nrog rau qhov uas lawv kos npe rau lawv qhov chaw nyob siv ROAs - Route Origin Authorisations:
- Kuv paub tseeb rau koj tias cov lus hais ua ntej no yuav raug tshaj tawm sawv cev ntawm thaj chaw muaj kev ywj pheej.
Ntxiv rau ROA, muaj lwm yam khoom, tab sis ntau ntxiv txog lawv tom qab. Nws zoo li ib qho zoo thiab muaj txiaj ntsig. Tab sis nws tsis tiv thaiv peb los ntawm kev xau los ntawm lo lus "tag nrho" thiab tsis daws txhua yam teeb meem nrog kev nyiag khoom ua ntej. Yog li ntawd, cov players tsis nrawm los siv nws. Txawm hais tias twb tau muaj kev lees paub los ntawm cov neeg ua si loj xws li AT&T thiab cov tuam txhab IX loj uas ua ntej nrog cov ntaub ntawv ROA tsis raug yuav raug tso tseg.
Tej zaum lawv yuav ua qhov no, tab sis rau tam sim no peb muaj ntau tus thawj coj uas tsis tau kos npe rau hauv txhua txoj kev. Ntawm ib sab, nws tsis paub meej tias lawv puas raug tshaj tawm. Ntawm qhov tod tes, peb tsis tuaj yeem tso lawv los ntawm lub neej ntawd, vim peb tsis paub meej tias qhov no yog qhov tseeb lossis tsis yog.
Puas muaj dabtsi ntxiv?
BGPSec. Qhov no yog qhov txias tshaj plaws uas cov kws tshawb fawb tau tuaj nrog rau lub network ntawm cov paj liab ponies. Lawv hais tias:
- Peb muaj RPKI + ROA - ib lub tswv yim rau kev txheeb xyuas qhov chaw nyob kos npe. Cia peb tsim BGP tus cwj pwm cais thiab hu nws BGPSec Txoj Kev. Txhua tus router yuav kos npe nrog nws tus kheej kos npe cov lus tshaj tawm nws tshaj tawm rau nws cov neeg nyob ze. Txoj kev no peb yuav tau txais txoj kev ntseeg siab los ntawm cov saw hlau ntawm cov ntawv tshaj tawm kos npe thiab yuav tuaj yeem kuaj xyuas nws.
Zoo hauv txoj kev xav, tab sis hauv kev xyaum muaj ntau yam teeb meem. BGPSec rhuav tshem ntau BGP mechanics uas twb muaj lawm rau kev xaiv tom ntej-hops thiab tswj kev nkag mus / tawm ncaj qha ntawm router. BGPSec tsis ua hauj lwm kom txog rau thaum 95% ntawm tag nrho cov lag luam tau siv nws, uas nyob rau hauv nws tus kheej yog ib tug utopia.
BGPSec muaj teeb meem kev ua haujlwm loj. Ntawm cov khoom siv tam sim no, qhov ceev ntawm kev tshuaj xyuas cov ntawv tshaj tawm yog kwv yees li 50 prefixes ib ob. Kev sib piv: cov lus hauv Is Taws Nem tam sim no ntawm 700 prefixes yuav muab tso rau hauv 000 teev, thaum lub sijhawm nws yuav hloov 5 zaug ntxiv.
BGP Qhib Txoj Cai (Role-based BGP). Cov tswv yim tshiab raws li tus qauv Gao-Rexford. Cov no yog ob tus kws tshawb fawb uas tshawb fawb BGP.
Gao-Rexford qauv yog raws li nram no. Txhawm rau kom yooj yim, nrog BGP muaj qee qhov me me ntawm kev sib cuam tshuam:
- Tus neeg muab kev pabcuam;
- P2P;
- kev sib txuas lus sab hauv, hais iBGP.
Raws li lub luag haujlwm ntawm lub router, nws twb tau muab qee yam kev cai ntshuam / xa tawm los ntawm lub neej ntawd. Tus thawj coj tsis tas yuav teeb tsa cov npe ua ntej. Raws li lub luag haujlwm uas cov routers pom zoo ntawm lawv tus kheej thiab qhov twg tuaj yeem teeb tsa, peb twb tau txais qee qhov kev lim dej ua ntej. Qhov no yog tam sim no ib daim qauv uas tab tom tham hauv IETF. Kuv vam tias tsis ntev peb yuav pom qhov no nyob rau hauv daim ntawv ntawm RFC thiab kev siv ntawm kho vajtse.
Cov chaw muab kev pabcuam Internet loj
Cia peb saib tus piv txwv ntawm tus kws kho mob CenturyLink. Nws yog tus thib peb loj tshaj plaws hauv Teb Chaws Asmeskas cov chaw muab kev pabcuam, ua haujlwm rau 37 lub xeev thiab muaj 15 lub chaw cov ntaub ntawv.β
Thaum Lub Kaum Ob Hlis 2018, CenturyLink tau nyob hauv Asmeskas kev lag luam rau 50 teev. Thaum muaj xwm txheej, muaj teeb meem nrog kev ua haujlwm ntawm ATMs hauv ob lub xeev, thiab tus lej 911 tsis ua haujlwm rau ob peb teev hauv tsib lub xeev. Lub rho npe hauv Idaho tau tawg tag. Qhov xwm txheej tam sim no tab tom tshawb xyuas los ntawm US Telecommunications Commission.
Qhov ua rau ntawm qhov xwm txheej yog ib daim npav network hauv ib lub chaw khaws ntaub ntawv. Daim npav ua haujlwm tsis zoo, xa cov pob ntawv tsis raug, thiab tag nrho 15 ntawm cov chaw zov me nyuam cov ntaub ntawv poob qis.
Lub tswv yim tsis ua haujlwm rau tus muab kev pabcuam no "loj heev poob". Lub tswv yim no tsis ua hauj lwm kiag li. Koj tuaj yeem nqa txhua tus neeg ua si loj thiab muab qee yam me me rau saum. Tebchaws Asmeskas tseem ua tau zoo nrog kev sib txuas. CenturyLink cov neeg siv khoom uas muaj qhov tshwj tseg tau mus rau hauv nws hauv kev tsav tsheb. Tom qab ntawd lwm tus neeg ua haujlwm yws yws txog lawv cov kev sib txuas tau dhau mus.
Yog tias Kazakhtelecom raug cai poob, tag nrho lub tebchaws yuav raug tso tseg yam tsis muaj Internet.
Cov tuam txhab
Tej zaum Google, Amazon, FaceBook thiab lwm lub koom haum txhawb nqa Is Taws Nem? Tsis yog, lawv tawg thiab.
Hauv 2017 hauv St. Petersburg ntawm lub rooj sib tham ENOG13 Jeff Houston los ntawm APnic tswvcuab . Nws hais tias peb tau raug coj mus rau kev sib cuam tshuam, nyiaj txiag thiab kev khiav tsheb hauv Is Taws Nem yog ntsug. Peb muaj cov chaw muab kev pabcuam me me uas them rau kev sib txuas rau cov neeg loj dua, thiab lawv twb them rau kev sib txuas mus rau kev thauj mus los thoob ntiaj teb.
Tam sim no peb muaj xws li ib tug vertically oriented qauv. Txhua yam yuav zoo, tab sis lub ntiaj teb hloov pauv - cov neeg ua si loj tab tom tsim lawv cov transoceanic cables los tsim lawv cov pob txha.
Xov xwm txog CDN cable.
Hauv 2018, TeleGeography tau tshaj tawm txoj kev tshawb fawb tias ntau tshaj ib nrab ntawm cov tsheb khiav hauv Is Taws Nem tsis yog Is Taws Nem, tab sis cov pob txha CDN ntawm cov neeg ua si loj. Qhov no yog kev khiav tsheb uas cuam tshuam nrog Is Taws Nem, tab sis qhov no tsis yog lub network uas peb tau tham txog lawm.
Internet tab tom tawg mus rau hauv ib pawg loj ntawm kev sib txuas lus xoob xoob.
Microsoft muaj nws tus kheej network, Google muaj nws tus kheej, thiab lawv muaj me ntsis sib tshooj nrog ib leeg. Tsheb thauj mus los uas yog los ntawm ib qho chaw hauv Tebchaws Meskas mus dhau ntawm Microsoft cov kev hla dej hiav txwv mus rau Tebchaws Europe qhov chaw ntawm CDN, tom qab ntawd los ntawm CDN lossis IX nws txuas nrog koj tus kws kho mob thiab nkag mus rau koj lub router.
Decentralization yog ploj mus.
Lub zog ntawm Is Taws Nem no, uas yuav pab kom muaj sia nyob ntawm kev tawg nuclear, tau ploj mus. Qhov chaw ntawm concentration ntawm cov neeg siv thiab kev khiav tsheb tshwm sim. Yog tias qhov xwm txheej Google huab poob, yuav muaj ntau tus neeg raug tsim txom ib zaug. Peb xav tias qhov no ib nrab thaum Roskomnadzor thaiv AWS. Thiab qhov piv txwv ntawm CenturyLink qhia tau hais tias txawm tias tej yam me me txaus rau qhov no.
Yav dhau los, tsis yog txhua yam thiab tsis yog txhua tus tawg. Nyob rau hauv lub neej yav tom ntej, peb tuaj yeem xaus lus tias los ntawm kev cuam tshuam rau ib tus neeg tseem ceeb, peb tuaj yeem rhuav tshem ntau yam, hauv ntau qhov chaw thiab ntau tus neeg.
Xeev
Cov xeev yog nyob rau hauv kab, thiab qhov no feem ntau tshwm sim rau lawv.
Ntawm no peb Roskomnadzor tsis yog ib tug pioneer kiag li. Ib qho kev coj ua zoo sib xws ntawm kev kaw Internet muaj nyob hauv Iran, Is Nrias teb, thiab Pakistan. Hauv tebchaws Askiv muaj ib daim nqi ntawm qhov muaj peev xwm kaw hauv Is Taws Nem.
Txhua lub xeev loj xav kom tau txais kev hloov pauv los tua Is Taws Nem, tag nrho lossis hauv ntu: Twitter, Telegram, Facebook. Nws tsis yog tias lawv tsis nkag siab tias lawv yuav tsis ua tiav, tab sis lawv xav tau tiag tiag. Kev hloov pauv yog siv, raws li txoj cai, rau kev nom kev tswv - txhawm rau tshem tawm cov kev sib tw nom tswv, lossis kev xaiv tsa tau los txog, lossis Lavxias hackers tau tawg qee yam ntxiv.
DDoS tawm tsam
Kuv yuav tsis tshem cov ncuav ntawm kuv cov phooj ywg los ntawm Qrator Labs, lawv ua nws zoo dua kuv. Lawv muaj ntawm Internet stability. Thiab qhov no yog qhov lawv tau sau hauv tsab ntawv ceeb toom 2018.
Lub sijhawm nruab nrab ntawm DDoS tawm tsam poob rau 2.5 teev. Cov neeg tawm tsam kuj pib suav nyiaj, thiab yog tias cov peev txheej tsis muaj tam sim ntawd, lawv sai sai tso nws ib leeg.
Qhov kev siv ntawm kev tawm tsam yog loj hlob. Hauv 2018, peb pom 1.7 Tb / s ntawm Akamai network, thiab qhov no tsis yog qhov txwv.
Tshiab tawm tsam vectors yog tshwm sim thiab cov qub yog intensifying. Cov txheej txheem tshiab tau tshwm sim uas muaj kev cuam tshuam rau kev nthuav dav, thiab kev tawm tsam tshiab tau tshwm sim ntawm cov txheej txheem uas twb muaj lawm, tshwj xeeb tshaj yog TLS thiab lwm yam.
Feem ntau ntawm cov tsheb khiav yog los ntawm cov khoom siv mobile. Tib lub sijhawm, kev khiav tsheb hauv Is Taws Nem hloov mus rau cov neeg siv khoom siv mobile. Ob tus neeg tawm tsam thiab cov neeg tiv thaiv yuav tsum muaj peev xwm ua haujlwm nrog qhov no.
Invulnerable - tsis muaj. Qhov no yog lub tswv yim tseem ceeb - tsis muaj kev tiv thaiv thoob ntiaj teb uas yuav tiv thaiv txhua yam DDoS.
Lub kaw lus tsis tuaj yeem nruab tshwj tsis yog nws txuas nrog Is Taws Nem.
Kuv vam tias kuv tau ntshai koj txaus. Cia peb xav txog yuav ua li cas txog nws.
Yuav ua li cas?!
Yog tias koj muaj sijhawm dawb, muaj siab xav thiab paub lus Askiv, koom nrog pawg ua haujlwm: IETF, RIPE WG. Cov no yog qhib cov npe xa ntawv, sau npe rau cov npe xa ntawv, koom nrog kev sib tham, tuaj koom rooj sib tham. Yog tias koj muaj qhov xwm txheej LIR, koj tuaj yeem pov npav, piv txwv li, hauv RIPE rau ntau yam kev pib.
Rau mere mortals qhov no yog saib xyuas. Kom paub qhov tawg.
Kev soj ntsuam: yuav kuaj dab tsi?
Ping li qub, thiab tsis tsuas yog binary kos - nws ua haujlwm lossis tsis ua haujlwm. Sau RTT hauv keeb kwm yog li koj tuaj yeem saib qhov tsis txaus ntseeg tom qab.
Traceroute. Qhov no yog ib qho kev pab cuam rau kev txiav txim cov ntaub ntawv txoj kev ntawm TCP / IP tes hauj lwm. Pab txheeb xyuas qhov tsis txaus ntseeg thiab kev thaiv.
HTTP kuaj xyuas cov kev cai URLs thiab daim ntawv pov thawj TLS yuav pab txheeb xyuas qhov thaiv lossis DNS spoofing rau kev tawm tsam, uas yog qhov ua tau zoo ib yam. Kev thaiv feem ntau yog ua los ntawm DNS spoofing thiab tig tsheb mus rau nplooj ntawv stub.
Yog tias ua tau, xyuas koj cov neeg siv khoom daws teeb meem ntawm koj lub hauv paus los ntawm ntau qhov chaw yog tias koj muaj daim ntawv thov. Qhov no yuav pab koj txheeb xyuas DNS hijacking anomalies, ib yam dab tsi uas cov chaw muab kev pab qee zaum ua.
Saib xyuas: qhov twg mus kuaj?
Yog tsis muaj universal teb. Tshawb xyuas qhov twg tus neeg siv los ntawm. Yog tias cov neeg siv nyob rau hauv Russia, kos los ntawm Russia, tab sis tsis txhob txwv koj tus kheej rau nws. Yog tias koj cov neeg siv nyob hauv cheeb tsam sib txawv, xyuas los ntawm cov cheeb tsam no. Tab sis zoo dua los ntawm thoob plaws lub ntiaj teb.
Kev soj ntsuam: yuav kuaj dab tsi?
Kuv tuaj nrog peb txoj kev. Yog tias koj paub ntau ntxiv, sau rau hauv cov lus.
- RIPE Atlas.
- Kev soj ntsuam kev lag luam.
- Koj tus kheej lub network ntawm cov tshuab virtual.
Cia peb tham txog lawv txhua tus.
RIPE Atlas - nws yog ib lub thawv me me. Rau cov neeg uas paub lub domestic "Inspector" - qhov no yog tib lub thawv, tab sis nrog ib tug txawv sticker.
RIPE Atlas yog qhov kev pabcuam pub dawb. Koj sau npe, tau txais ib lub router los ntawm kev xa ntawv thiab ntsaws rau hauv lub network. Rau qhov tseeb tias lwm tus siv koj tus qauv, koj tau txais qee qhov qhab nia. Nrog cov nyiaj qiv no koj tuaj yeem ua qee qhov kev tshawb fawb koj tus kheej. Koj tuaj yeem sim ntau txoj hauv kev: ping, traceroute, kos daim ntawv pov thawj. Qhov kev pab cuam yog loj heev, muaj ntau cov nodes. Tab sis muaj nuances.
Cov credit system tsis tso cai rau tsim cov kev daws teeb meem. Yuav tsis muaj qhab nia txaus rau kev tshawb fawb tsis tu ncua lossis kev saib xyuas kev lag luam. Cov qhab nia txaus rau kev kawm luv luv lossis ib zaug kuaj xyuas. Cov kev cai niaj hnub los ntawm ib qho qauv yog noj 1-2 daim tshev.
Kev pab yog tsis sib npaug. Txij li qhov kev pab cuam pub dawb nyob rau hauv ob qho tib si kev qhia, kev pab them nqi yog zoo nyob rau hauv cov teb chaws Europe, nyob rau hauv European ib feem ntawm Russia thiab ib co cheeb tsam. Tab sis yog tias koj xav tau Indonesia lossis New Zealand, ces txhua yam yog qhov phem dua - koj yuav tsis muaj 50 tus qauv hauv ib lub tebchaws.
Koj tsis tuaj yeem kuaj http los ntawm tus qauv. Qhov no yog vim technical nuances. Lawv cog lus tias yuav kho nws hauv qhov tshiab, tab sis tam sim no http tsis tuaj yeem kuaj xyuas. Tsuas yog daim ntawv pov thawj tuaj yeem kuaj xyuas. Qee hom http kos tsuas yog ua tau rau ib qho tshwj xeeb RIPE Atlas ntaus ntawv hu ua Anchor.
Txoj kev thib ob yog kev saib xyuas kev lag luam. Txhua yam zoo nrog nws, koj them nyiaj, puas yog? Lawv cog lus rau koj ob peb lub kaum os lossis ntau pua ntawm kev saib xyuas cov ntsiab lus thoob ntiaj teb thiab kos cov dashboards zoo nkauj tawm ntawm lub thawv. Tab sis, dua, muaj teeb meem.
Nws tau them, hauv qee qhov chaw nws yog heev. Kev saib xyuas Ping, kev kuaj xyuas thoob ntiaj teb, thiab ntau qhov kev kuaj xyuas http tuaj yeem raug nqi ntau txhiab nyiaj hauv ib xyoos. Yog tias nyiaj txiag tso cai thiab koj nyiam qhov kev daws teeb meem no, mus tom ntej.
Kev pab them nqi yuav tsis txaus nyob rau thaj tsam ntawm kev txaus siab. Nrog tib ping, qhov siab tshaj plaws ntawm ib feem ntawm lub ntiaj teb tau teev tseg - Asia, Europe, North America. Tsis tshua muaj kev saib xyuas cov tshuab tuaj yeem nkag mus rau hauv ib lub tebchaws lossis cheeb tsam.
Kev them nyiaj yug tsis muaj zog rau kev kuaj kev cai. Yog tias koj xav tau qee yam kev cai, thiab tsis yog "curly" ntawm url, ces muaj teeb meem nrog qhov ntawd thiab.
Txoj kev thib peb yog koj txoj kev saib xyuas. Nov yog qhov classic: "Cia peb sau peb tus kheej!"
Koj qhov kev saib xyuas hloov mus rau hauv kev tsim cov khoom siv software, thiab ib qho kev faib tawm. Koj tab tom nrhiav rau tus neeg muab kev pabcuam hauv vaj tse, saib seb yuav siv thiab saib xyuas li cas - kev saib xyuas yuav tsum tau saib xyuas, puas yog? Thiab kev txhawb nqa kuj xav tau. Xav txog kaum zaus ua ntej koj ua qhov no. Tej zaum nws yuav yooj yim dua los them ib tus neeg los ua nws rau koj.
Saib xyuas BGP anomalies thiab DDoS tawm tsam
Ntawm no, raws li cov peev txheej muaj, txhua yam yog yooj yim dua. BGP anomalies raug kuaj pom siv cov kev pabcuam tshwj xeeb xws li QRadar, BGPmon. Lawv lees txais lub rooj saib tag nrho los ntawm ntau tus neeg ua haujlwm. Raws li qhov lawv pom los ntawm cov neeg ua haujlwm sib txawv, lawv tuaj yeem kuaj pom qhov tsis txaus ntseeg, nrhiav cov amplifiers, thiab lwm yam. Kev tso npe feem ntau yog pub dawb - koj sau koj tus lej xov tooj, sau npe rau email ceeb toom, thiab qhov kev pabcuam yuav ceeb toom koj txog koj cov teeb meem.
Kev soj ntsuam DDoS tawm tsam kuj yooj yim. Feem ntau qhov no yog NetFlow-raws li thiab cov cav. Muaj cov tshuab tshwj xeeb xws li FastNetMon, modules rau Txaws. Raws li qhov chaw kawg, muaj koj tus kws kho mob tiv thaiv DDoS. Nws tseem tuaj yeem xau NetFlow thiab, raws li nws, nws yuav ceeb toom koj txog kev tawm tsam hauv koj cov kev taw qhia.
tshawb pom
Tsis muaj illusions - Internet yuav twv yuav raug hu tawg. Tsis yog txhua yam thiab tsis yog txhua tus yuav tawg, tab sis 14 txhiab qhov xwm txheej hauv 2017 hint tias yuav muaj xwm txheej.
Koj txoj haujlwm yog kom pom cov teeb meem sai li sai tau. Yam tsawg kawg, tsis pub dhau koj tus neeg siv. Tsis tsuas yog nws tseem ceeb heev uas yuav tsum nco ntsoov, nco ntsoov khaws "Plan B" hauv kev cia. Ib txoj kev npaj yog lub tswv yim rau yam koj yuav ua thaum txhua yam tawg.: reserve operators, DC, CDN. Ib txoj kev npaj yog ib daim ntawv txheeb cais uas koj txheeb xyuas txhua yam haujlwm. Txoj kev npaj yuav tsum ua hauj lwm yam tsis muaj kev koom tes ntawm network engineers, vim hais tias feem ntau muaj ob peb ntawm lawv thiab lawv xav pw.
Yog tag nrho. Kuv xav kom koj muaj siab thiab saib xyuas ntsuab.
Lub lim tiam tom ntej nyob rau hauv Novosibirsk tshav ntuj, siab load thiab siab concentration ntawm developers yuav tsum . Nyob rau hauv Siberia, ua ntej ntawm cov lus ceeb toom ntawm kev saib xyuas, kev nkag mus tau thiab kev sim, kev ruaj ntseg thiab kev tswj hwm tau kwv yees. Cov dej nag yuav tsum nyob rau hauv daim ntawv sau ntawv, sib tham, duab thiab tshaj tawm hauv social networks. Peb pom zoo kom ncua txhua yam dej num rau lub Rau Hli 24 thiab 25 thiab . Peb tab tom tos koj hauv Siberia!
Tau qhov twg los: www.hab.com