{"id":78343,"date":"2020-04-18T19:42:04","date_gmt":"2020-04-18T17:42:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp"},"modified":"2020-04-18T19:42:04","modified_gmt":"2020-04-18T17:42:04","slug":"cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","title":{"rendered":"Cloudflare uruchomi\u0142 us\u0142ug\u0119 do \u015bledzenia filtracji niepoprawnych tras BGP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Firma Cloudflare uruchomi\u0142a<\/a><\/noindex> stron\u0119 isBGPSafeYet.com<\/a><\/noindex>, kt\u00f3ry ma na celu zwr\u00f3cenie uwagi na problem zwi\u0105zany z wyciekiem niepoprawnych tras BGP oraz mo\u017cliwo\u015bci\u0105 przeprowadzania atak\u00f3w na przeadresowanie ruchu przy u\u017cyciu protoko\u0142u BGP. Strona pozwala na sprawdzenie zastosowania przez dostawc\u00f3w technologii filtrowania niepoprawnych tras oraz ocen\u0119 wdro\u017cenia wsparcia dla RPKI. <\/p>\n

Wielu operator\u00f3w pozostaje niezabezpieczonych przed otrzymywaniem anons\u00f3w BGP podsieci z fa\u0142szywymi danymi o d\u0142ugo\u015bci trasy, kt\u00f3re kieruj\u0105 ruch tranzytowy przez zewn\u0119trznych dostawc\u00f3w. Coraz cz\u0119\u015bciej pojawiaj\u0105 si\u0119 przypadki wykorzystywania BGP do atak\u00f3w, w kt\u00f3rych przest\u0119pcy poprzez kompromitacj\u0119 infrastruktury dostawc\u00f3w organizuj\u0105 przeadresowanie i przechwytywanie ruchu, aby podmieni\u0107 konkretne witryny w ramach atak\u00f3w typu MiTM maj\u0105cych na celu zmian\u0119 odpowiedzi DNS. <\/p>\n

Rozwi\u0105zaniem problemu jest wdro\u017cenie systemu autoryzacji anons\u00f3w BGP opartego na RPKI (Resource Public Key Infrastructure), kt\u00f3ry pozwala okre\u015bli\u0107, czy anons BGP pochodzi od w\u0142a\u015bciciela sieci, czy nie. W przypadku korzystania z RPKI dla autonomicznych system\u00f3w i adres\u00f3w IP budowana jest \u0142a\u0144cuch zaufania od IANA do regionalnych rejestrator\u00f3w (RIRs), a nast\u0119pnie do dostawc\u00f3w (LIR) i ko\u0144cowych odbiorc\u00f3w, co pozwala osobom trzecim upewni\u0107 si\u0119, \u017ce operacja z zasobem zosta\u0142a przeprowadzona przez jego w\u0142a\u015bciciela. Niestety, pomimo problem\u00f3w, RPKI do tej pory nie jest u\u017cywane przez wi\u0119kszo\u015b\u0107 dostawc\u00f3w. Nowa us\u0142uga Cloudflare umo\u017cliwia \u015bledzenie problematycznych operator\u00f3w i zwracanie na nich uwagi publicznej.
\n

\"Cloudflare<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442 isBGPSafeYet.com, \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043f\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 BGP. \u0421\u0430\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPKI. \u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f BGP-\u0430\u043d\u043e\u043d\u0441\u043e\u0432 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 \u0441 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0434\u043b\u0438\u043d\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":78344,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-78343","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare uruchomi\u0142 us\u0142ug\u0119 do \u015bledzenia filtrowania niepoprawnych tras BGP | ProHoster","description":"Firma Cloudflare uruchomi\u0142a stron\u0119","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 BGP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0432\u0432\u0435\u043b\u0430 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0430\u0439\u0442","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/cloudflare-zapustil-servis-dlya-otslezhivaniya-filtraczii-nekorrektnyh-marshrutov-bgp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-18T17:42:04+00:00","article:modified_time":"2020-04-18T17:42:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"78343","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:36","updated":"2022-10-08 14:27:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/78343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=78343"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/78343\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/78344"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=78343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=78343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=78343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}