Njira zotsikitsitsa za BGP zimabweretsa kusokoneza kwakukulu kwa intaneti

Kampani ya Cloudflare losindikizidwa lipoti za zomwe zidachitika dzulo, zomwe zidapangitsa maola atatu kuchokera ku 13:34 mpaka 16:26 (MSK) panali mavuto ndi mwayi wopeza zinthu zambiri pa intaneti padziko lonse lapansi, kuphatikizapo zomangamanga za Cloudflare, Facebook, Akamai, Apple, Linode ndi Amazon AWS. Mavuto mu Cloudflare Infrastructure, yomwe imapereka CDN kwa masamba 16 miliyoni, anaona kuyambira 14:02 mpaka 16:02 (MSK). Cloudflare akuyerekeza kuti pafupifupi 15% ya magalimoto padziko lonse lapansi adatayika panthawi yotseka.

Vuto linali zidayambitsa BGP njira kutayikira, pomwe pafupifupi 20 zikwi prefixes kwa 2400 maukonde anatumizidwa molakwika. Gwero la kutayikirako anali wothandizira DQE Communications, yemwe adagwiritsa ntchito pulogalamuyo BGP Optimizer kukhathamiritsa njira. BGP Optimizer imagawa ma prefixes a IP kukhala ang'onoang'ono, mwachitsanzo kugawa 104.20.0.0/20 kukhala 104.20.0.0/21 ndi 104.20.8.0/21, ndipo chifukwa chake, DQE Communications idasunga mbali yake njira zambiri zomwe zimapitilira zambiri. njira zanthawi zonse (mwachitsanzo, m'malo mwa njira wamba zopita ku Cloudflare, njira zochulukirachulukira zopita ku ma subnet ena a Cloudflare zidagwiritsidwa ntchito).

Njira zamtunduwu zidalengezedwa kwa m'modzi mwamakasitomala (Allegheny Technologies, AS396531), yemwe analinso ndi kulumikizana kudzera mwa wopereka wina. Allegheny Technologies imawulutsa njira zomwe zatsatiridwazo kwa wopereka ma mayendedwe (Verizon, AS701). Chifukwa chosowa kusefa koyenera kwa zilengezo za BGP ndi zoletsa pa kuchuluka kwa ma prefixes, Verizon adatenga chilengezochi ndikuwulutsa zoyambira 20 zikwizikwi pa intaneti yonse. Ma prefixes olakwika, chifukwa cha kukula kwake, adawonedwa ngati ofunika kwambiri chifukwa njira inayake imakhala yofunika kwambiri kuposa njira wamba.

Zotsatira zake, kuchuluka kwa magalimoto pama network ambiri akulu kudayamba kuyendetsedwa kudzera ku Verizon kupita ku DQE Communications yaying'ono, yomwe sinathe kuthana ndi kuchuluka kwa magalimoto, zomwe zidapangitsa kugwa (zotsatira zake zikufanana ndi kusintha gawo la msewu wawukulu wotanganidwa ndi njira ya dziko).

Kupewa kuti zochitika ngati izi zisachitike m'tsogolomu
analimbikitsa:

• Gwiritsani ntchito kutsimikizira zolengeza zochokera RPKI (BGP Origin Validation, amalola kuvomereza zolengeza okha kuchokera eni maukonde);
• Chepetsani kuchuluka kwa ma prefixes omwe alandilidwa pamagawo onse a EBGP (kukhazikitsa kwachiyambi kungathandize kutaya nthawi yomweyo kutumiza kwa ma prefixes zikwi 20 mkati mwa gawo limodzi);
• Ikani zosefera potengera kaundula wa IRR (Internet Routing Registry, imatsimikizira ma ASes omwe amaloleza ma prefixes odziwika);
• Gwiritsani ntchito zoikamo zotsekereza zomwe zikulimbikitsidwa mu RFC 8212 pa ma routers ('kukana kosasintha');
• Lekani kugwiritsa ntchito mosasamala za BGP optimizers.

Source: opennet.ru