ProHoster > Blog > nkhani zapaintaneti > Kufotokozera za mikangano yamabizinesi pa intaneti

Kufotokozera za mikangano yamabizinesi pa intaneti

Kufotokozera za mikangano yamabizinesi pa intaneti
Mkangano wamakampani udayamba pa Juni 10.06.2019, XNUMX chifukwa chakuwonjezeka kwa mtengo wotumizira ma SMS kwa ogwiritsa ntchito netiweki ya VimpelCom ndi Mail.RU Group. Poyankha, Gulu la Mail.RU linasiya "kutumizira" njira zolunjika zaku Russia za IP kupita ku netiweki ya VimpelCom.

Pansipa pali kusanthula kwachidule kwa momwe zinthu zilili kuchokera pamalingaliro a injiniya wama network.

Pezani: 14.06.2019/18/45 XNUMX:XNUMX - kugogomezera njira zaku Russia zopita ku netiweki ya VimpelCom, zomaliza zakonzedwa, kufotokozera SERGEY Kubasov (CIO VKontakte).
Pezani.


Chiyambi:
VimpelCom ili ndi autonomous system AS3216, ena onse (8402 - Home Internet, 16345 - Mobile Internet) ali kuseri kwa 3216.

Mail.RU Gulu - machitidwe odziyimira pawokha AS47541, AS47542 ndi AS47764. Jenereta wamkulu wokhutira ndi 47542, otchedwa. CDN VKONTAKTE (mafilimu, nyimbo). Machitidwe onse odziyimira pawokha ali odziyimira pawokha (kuchokera pamalo a dongosolo lakunja lodziyimira pawokha).

Choyamba, tiyeni tiwone momwe zinthu zilili pa intaneti ya VimpelCom. Pakuti izi zidzatithandiza Kuyang'ana Glass Vimpelcom.

Tiyeni tiwone dongosolo loyamba lodziyimira palokha - AS47541.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394342
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

AS-PATH ili ndi machitidwe awiri odziyimira pawokha - 2914 (NTT) ndi 47541 (VKONTAKTE-SPB-AS).
Localpref metric imayikidwa ku 87, yomwe malinga ndi kufotokozera mu RIPE DB ya chinthu AS3216 imagwirizana ndi kuyang'ana padziko lonse lapansi.

...
Ndemanga: Njira za anzawo apadziko lonse lapansi zimatengera zokonda zakomweko
Ndemanga: kuyambira 81-89.
...

Zomwezi zimatsimikiziridwa ndi madera 3216:3000 ndi 3216:3103 (gwero: RIPE DB ya AS3216):

...
Ndemanga: 3216:3000 Wolandiridwa kuchokera ku mayiko apamwamba kapena anzawo, makamaka:
...
ndemanga: 3216:3103 AMS-IX
...

Ndiko kuti, VimpelCom amawona njira yopita ku VKontakte kudzera pamphambano yaku Europe.

Tiyeni tione wina VKontakte maukonde - 47542 (VKONTAKTE-MSK-CDN-AS).

Zonse ndi zofanana.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394338
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

Nanga bwanji Mail.ru yokha? Tiyeni tiwone AS47764 (mailru-as).

 3356 47764
    194.67.0.215 (metric 10501) (194.67.0.215)
      Origin IGP, metric 0, localpref 77, valid, internal, best, group-best, import-candidate
      Received Path ID 0, Local Path ID 1, version 2867605667
      Community: 3216:3000 3216:3007 3356:2 3356:22 3356:100 3356:123 3356:519 3356:2094 47764:1 47764:40000 47764:50077

VimpelCom imawona Mail.ru kudzera pa as3356 (uplink Level3, Tier1 operator). Izi zikutsimikiziridwa ndi localpref 77:

...
Ndemanga: Njira za Uplink zimapeza zokonda zakomweko pakati pa 71-79.
Ndemanga: Kusintha Komaliza: February 2012…

ndi dera (3216:3000 ndi 3216:3007):

...
Ndemanga: 3216:3000 Wolandiridwa kuchokera ku mayiko apamwamba kapena anzawo, makamaka:
...
ndemanga: 3216:3007 Level 3 Communications
...

Kuchokera pazomwe adalandira zikuwonekeratu kuti magalimoto ochokera pa intaneti ya VimpelCom kupita ku VKontakte ndi MailRu amagawidwa m'magulu a ku Ulaya malinga ndi njira zomwe adalandira kudzera pa protocol ya BGP. Palibe njira zina zolumikizirana zaku Russia mu Looking Glass. Palibe njira zomwe zidapezeka zowongolera magalimoto mwachisawawa kudzera munjira zoipitsitsa.

Kodi Mail.ru Group imawona bwanji maukonde a VimpelCom?
Tiyeni titengerepo mwayi Galasi Yoyang'ana ndi Mailov.

Kuchokera ku ma routers ochokera ku AS47764 (mailru-as):

  Path #6: Received by speaker 0
  Advertised to peers (in unique update groups):
    188.93.60.188   
  1299 1299 1273 3216 3216
    217.20.147.250 (metric 100) from 217.20.147.250 (217.20.147.253)
      Origin IGP, metric 500, localpref 200, valid, internal, best, group-best
      Received Path ID 0, Local Path ID 0, version 1172721494
      Community: 1299:20000 47764:701 47764:41100 47764:41108 47764:50077

AS-PATH ili ndi AS1299 (Telia, Tier1 operator, Mail.RU uplink) ndi as1273 (Vodafon, Tier1 operator, VimpelCom uplink).

LocalPreference 200 ndiye muyeso wamalumikizidwe akunja a Mail.ru (https://net.mail.ru/bgp.html), ndipo MED 500 imagwirizana ndi chilichonse chomwe sichinalandiridwe mwachindunji, osati kuchokera ku IXs, osati kwa anzanu. .

Koma chifukwa chiyani palibe njira zakomweko kudzera ku Russia telecom operators ???
Zilipo, koma chofunika kwambiri ndi "chopanda muyezo"!
Nayi njira yodutsa Rostelecom (as12389):

  Path #1: Received by speaker 0
  Not advertised to any peer
  12389 3216
    46.61.178.149 from 46.61.178.149 (213.59.207.79)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 12389:5 12389:6 12389:1100 12389:1105 12389:1277 47764:701 47764:41100 47764:41104 47764:50077
      Origin-AS validity: not-found

Apa kudzera pa Megafon (as31133):

  Path #2: Received by speaker 0
  Not advertised to any peer
  31133 3216
    78.25.77.41 from 78.25.77.41 (10.222.253.97)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 31133:300 31133:46170 47764:701 47764:41100 47764:41105 47764:50077
      Origin-AS validity: not-found

Apa kudzera pa RETN.NET:

  Path #3: Received by speaker 0
  Not advertised to any peer
  9002 9002 3216
    87.245.253.24 from 87.245.253.24 (87.245.225.1)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 9002:9002 9002:64667 47764:701 47764:41100 47764:41101 47764:50077
      Origin-AS validity: not-found

Ndipo ngakhale kudzera MTS!

  Path #5: Received by speaker 0
  Not advertised to any peer
  8359 3216
    212.188.61.105 from 212.188.61.105 (195.34.52.77)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 8359:200 8359:609 8359:5012 47764:701 47764:41100 47764:41103 47764:50077
      Origin-AS validity: not-found

Ma metric am'deralo amayendedwe aku Russia awa akucheperachepera, ndiye kuti, misewu ndi yoyipa kwambiri poyerekeza ndi yakunja!

Komanso, pali zoletsa pa gulu la Mail.Ru kugawa ma prefixes anu ku VimpelCom kudzera mwa ogwiritsa ntchito aku Russia!

RETN.NET (http://lg.retn.net/):
Zilengezo zochokera ku Mail.RU Group show community 3216:65535.
Kuchokera ku LG RETN.NETinet.0: 762737 kopita, 1734826 njira (762708 yogwira, 222780 holddown, 277 zobisika)
94.100.176.0/20 (1 kulowa, 1 kulengeza)
*BGP Kukonda: 170/-201
...
...
AS njira: 47764 I
AS njira: Zojambulidwa
Magulu: 3216:65535 9002:64667 9002:65530
...

VimpelCom savomereza njira zodziwika ndi gulu lotere pamanetiweki ake. Kuchokera ku RIPE DB pa AS3216:
...
remarks: Internal comminuties are assigned only internally.
remarks: They are in range 3216:0000-3216:4999 and 3216:6000-3216:65535
remarks: and are always deleted from incoming updates at the border
remarks: routers.
...
Kumbali ya Rostelecom (http://lg.ip.rt.ru), Mail.RU Gulu limapereka njira zofananira kuchokera kudera 12389:8350.
Kuchotsedwa kwa LG Rostelecom94.100.176.0/20 kudzera pa 217.107.65.1 pa eth0.9 [sr2 2019-06-13] * (100/?) [AS47764i]
Mtundu: BGP unicast univ
BGP.chiyambi: IGP
BGP.as_path: 47764
BGP.next_hop: 213.59.207.78
BGP pa: 0
BGP.local_pref: 850
BGP.community: (12389,1) (12389,1100) (12389,1105) (12389,1277) (12389,8350) (12389,8380) (47764,1) (47764,40000).
BGP.originator_id: 213.59.207.78
BGP.cluster_list: 95.167.88.79 95.167.88.49 95.167.88.17

Malinga ndi zolemba za RIPE DB za chinthu cha as12389, gululi limatanthauza "osatsatsa ku netiweki ya as3216":...
remarks: | 12389:835y When advertising to GoldenTelecom (AS3216) |
...
remarks: | ...y=0 - do not advertise |
...
Momwemonso ku MTS (http://lg.mtu.ru):Kuchotsedwa kwa LG MTSBGP routing table kulowa kwa 94.100.176.0/20, version 161717219
Njira: (2 ilipo, yabwino # 1, kusakhazikika kwa tebulo)
Multipath: eBGP
Adalengezedwa kumagulu osintha:
6
47764, (yolandiridwa & yogwiritsidwa ntchito)
195.34.52.77 (metric 16) kuchokera ku 195.34.52.181 (195.34.52.181)
Origin IGP, metric 0, localpref 140, yovomerezeka, yamkati, yabwino kwambiri
Gulu: 8359:2120 8359:2150 8359:5500 8359:55277
Woyambitsa: 195.34.52.77, Mndandanda wamagulu: 83.59.83.59
47764, (yolandiridwa & yogwiritsidwa ntchito)
195.34.52.77 (metric 16) kuchokera ku 195.34.52.182 (195.34.52.182)
Origin IGP, metric 0, localpref 140, yovomerezeka, yamkati
Gulu: 8359:2120 8359:2150 8359:5500 8359:55277
Woyambitsa: 195.34.52.77, Mndandanda wamagulu: 83.59.2.77

Community 8359:2120 amatanthauza:...
remarks: 8359:212x when announcing to Sovam (Beeline)
...
remarks: x=0 - do not announce
...
Simungayang'ane zolengeza za Mail.RU Group molunjika ku Megafon - yomaliza ilibe Glass Yoyang'ana.

Tiyeni tione AS47541 (VKONTAKTE-SPB-AS).

Zotulutsa zake ndizambiri.

 Router: a9922-e-5
Command: show ip bgp 81.211.56.202


Last switch-over Thu Apr  5 04:25:09 2018: 1 year, 10 weeks, 6 hours, 9 minutes ago

Fri Jun 14 10:34:20.791 MSK
BGP routing table entry for 81.211.0.0/17
Versions:
  Process           bRIB/RIB  SendTblVer
  Speaker          913059757   913059757
Last Modified: May 21 05:20:38.536 for 1y03w
Paths: (6 available, best #4)
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  Path #1: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.235 (metric 31) from 87.240.191.235 (87.240.191.235)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #2: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.248 (metric 31) from 87.240.191.248 (87.240.191.248)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #3: Received by speaker 0
  Not advertised to any peer
  174 6762 3216 3216
    87.240.191.249 (metric 31) from 87.240.191.249 (87.240.191.249)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
  Path #4: Received by speaker 0
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  174 6762 3216 3216
    149.6.169.113 from 149.6.169.113 (38.28.1.236)
      Origin IGP, metric 5000, localpref 150, valid, external, best, group-best
      Received Path ID 0, Local Path ID 0, version 913059757
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
      Origin-AS validity: not-found
  Path #5: Received by speaker 0
  Not advertised to any peer
  1273 1273 3216 3216
    195.89.114.197 from 195.89.114.197 (195.2.1.107)
      Origin IGP, metric 5005, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41110 47541:50078
      Origin-AS validity: not-found
  Path #6: Received by speaker 0
  Not advertised to any peer
  3356 3356 3216 3216 3216
    213.242.69.69 from 213.242.69.69 (4.69.177.130)
      Origin IGP, metric 5000, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 3356:2 3356:22 3356:100 3356:123 3356:503 3356:2067 47541:701 47541:41100 47541:41107 47541:50078
      Origin-AS validity: not-found

AS-PATH imalozera ku AS174 - Cogent (Mail.RU uplink, Tier1), kenako AS6762 - Telecom Italia (VimpelCom uplink). Local Preference ndi 150 kulikonse, koma izi zimagwira ntchito pazolumikizana zonse zakunja, mosasamala kanthu ndondomeko zolembedwa.

Tiyeni tione AS47542 (VKONTAKTE-MSK-CDN-AS).

 Router: mx960-m9-0
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.222  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.251  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Ndipo kuchokera pa rauta yachiwiri: 

 Router: mx960-m9-1
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.224  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.250  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Njira zokhazikika zokha (0.0.0.0/0). Izi zidafotokozedwa ndi wogwira ntchito ku Mail.RU Group umbombo, zimene ndimamuyamikira. Mwachidule: gawo la Moscow la netiweki ya VKontakte ndi gawo la caching (osati kupanga), lomwe ntchito yake ndikukulitsa liwiro lotsitsa lazinthu zodziwika bwino, zomwe zimafunikira. Kusamalira ogwiritsa ntchito, inde.

Ngati palibe njira yopita ku netiweki inayake, ndiye kuti maukondewa samatumizidwa ndi ma seva osungira. Izi zikutanthauza kuti kukhathamiritsa kuthamanga sikugwira ntchito, ndipo ogwiritsa ntchito amavutika. Koma apa tiyenera kutsindika kuti ogwiritsa ntchito si athu okha, komanso a VimpelCom.

Zotsatira:

  1. Kuchokera ku VimpelCom, magalimoto opita ku Mail.RU Group amagawidwa mwachibadwa. Palibe kulondolera kwina kwina kudzera muzosintha za Local Preference komwe kunapezeka
  2. Gulu la Mail.RU likuwona zosinthika ndi ma prefixes a VimpelCom. Njira zomwe zilipo zopita ku netiweki ya VimpelCom kudzera kwa ogwiritsa ntchito aku Russia zili ndi zofunikira zochepa poyerekeza ndi mayendedwe odutsa akunja a Tier1.
  3. Oyang'anira ammudzi a BGP awonjezedwa kumayendedwe omwe amatumizidwa kwa ogwiritsa ntchito aku Russia (MTS, Rostelecom, RETN.NET) ndi Mail.RU Gulu kuti achepetse kufalikira kwawo ku VimpelCom.

Chifukwa chiyani Mail.RU Group imayika patsogolo njira zodutsa ku Europe? Chifukwa chiyani Mail.RU Group imaletsa kulumikizana kwakanthawi kochepa ku Russia ndi VimpelCom?

Kodi ndizotsika mtengo kwa iwo? Yendetsani magalimoto kudzera mumayendedwe akunja ndikulipira ma Tirvans ndi ndalama zakunja?
Kapena pali chikhumbo choyendetsa magalimoto kutali kotero kuti kunyamula sikoyenera, huh?
Izi sizikudziwika kwa injiniya wa network...

Source: www.habr.com

Gulani kuchititsa kodalirika kwamasamba okhala ndi chitetezo cha DDoS, ma seva a VPS VDS Gulani malo odalirika osungira mawebusayiti okhala ndi chitetezo cha DDoS, ma seva a VPS VDS | ProHoster