{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"Scurgerea rutelor BGP a dus la o perturbare masiv\u0103 a conectivit\u0103\u021bii pe internet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Compania Cloudflare <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today\/\">a publicat<\/a><\/noindex> raportul incidentului de ieri, care a cauzat <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bgpmon\/status\/1143149817473847296\">timp de trei ore<\/a><\/noindex> \u00eentre 13:34 \u0219i 16:26 (MSK), au fost probleme de acces la multe resurse din re\u021beaua global\u0103, inclusiv infrastructura Cloudflare, Facebook, Akamai, Apple, Linode \u0219i Amazon AWS. Problemele \u00een infrastructura Cloudflare, care ofer\u0103 CDN pentru 16 milioane de site-uri, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflarestatus.com\/incidents\/46z55mdhg0t5\">au fost observate<\/a><\/noindex> \u00eentre 14:02 \u0219i 16:02 (MSK). Potrivit evalu\u0103rii Cloudflare, \u00een timpul \u00eentreruperii s-a \u00eenregistrat o pierdere de aproximativ 15% din traficul global. <\/p>\n<p>Problema a fost <noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101590.html\">provocat\u0103<\/a><\/noindex> o scurgere de rute prin BGP, \u00een timpul c\u0103reia aproximativ 20.000 de prefixe pentru 2400 de re\u021bele au fost redirec\u021bionate incorect. Sursa scurgerii a fost furnizorul DQE Communications, care a folosit software-ul <noindex><a rel=\"nofollow\" href=\"https:\/\/www.noction.com\/intelligent_routing_platform\/traffic-routing-optimization\">BGP Optimizer<\/a><\/noindex> pentru optimizarea rutelor. BGP Optimizer \u00eemparte prefixele IP \u00een unit\u0103\u021bi mai mici, de exemplu, \u00eemparte 104.20.0.0\/20 \u00een 104.20.0.0\/21 \u0219i 104.20.8.0\/21, \u0219i, ca rezultat, DQE Communications a p\u0103strat de partea sa un num\u0103r mare de rute specifice, care redefineau rutele mai generale (adic\u0103, \u00een loc de rutele generale c\u0103tre Cloudflare, au fost utilizate rute mai granularizate c\u0103tre subneturi specifice Cloudflare).<\/p>\n<p>Aceste rute punctuale au fost anun\u021bate unui client (Allegheny Technologies, AS396531), care avea, de asemenea, o conexiune printr-un alt furnizor. Allegheny Technologies a transmis rutele primite unei alte companii de tranzit (Verizon, AS701). Din lipsa unei filtr\u0103ri adecvate a anun\u021burilor BGP \u0219i a limit\u0103rii num\u0103rului de prefixe, Verizon a preluat acest anun\u021b \u0219i a transmis cele 20.000 de prefixe primite pentru restul internetului. Prefixele incorecte, datorit\u0103 granularit\u0103\u021bii lor, au fost percepute ca fiind mai prioritare, deoarece ruta specific\u0103 are o prioritate mai mare dec\u00e2t cea general\u0103. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak2-2.png\"><img decoding=\"async\" alt=\"Scurgerea rutelor BGP a dus la o perturbare masiv\u0103 a conectivit\u0103\u021bii pe internet\" src=\"\/wp-content\/uploads\/2019\/06\/7b91b949afde7526f989c00666f7fee0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Ca urmare, traficul pentru multe re\u021bele mari a fost direc\u021bionat prin Verizon c\u0103tre un furnizor mic, DQE Communications, incapabil s\u0103 gestioneze fluxul masiv, ceea ce a dus la un colaps (efectul este comparabil cu acela \u00een care o parte dintr-o autostrad\u0103 aglomerat\u0103 este \u00eenlocuit\u0103 cu o cale de \u021bar\u0103).  <\/p>\n<p>Pentru a preveni apari\u021bia unor incidente similare \u00een viitor,<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101589.html\">se recomand\u0103<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Utiliza\u021bi <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47303\">verificarea<\/a><\/noindex> anun\u021burilor pe baza RPKI (BGP Origin Validation, permite acceptarea anun\u021burilor doar de la proprietarii re\u021belei);\n<li class=\"l\"> Limitarea num\u0103rului maxim de prefixe acceptate pentru toate sesiunile EBGP (setarea maximum-prefix ar ajuta imediat s\u0103 resping\u0103 transmiterea celor 20.000 de prefixe \u00eentr-o singur\u0103 sesiune);\n<li class=\"l\"> Aplica\u021bi filtrarea pe baza registrului IRR (Internet Routing Registry, care determin\u0103 AS-urile prin care este permis\u0103 rutarea prefixelor specificate);\n<li class=\"l\"> Utiliza pe routere set\u0103rile recomandate \u00een RFC 8212 pentru blocarea implicit\u0103 (&#8216;default deny&#8217;);\n<li class=\"l\"> Opri\u021bi utilizarea nechibzuit\u0103 a optimizatorilor BGP.\n<\/ul>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak3-2.png\"><img decoding=\"async\" alt=\"Scurgerea rutelor BGP a dus la o perturbare masiv\u0103 a conectivit\u0103\u021bii pe internet\" src=\"\/wp-content\/uploads\/2019\/06\/2b2bb1fe713ee9e87987f57920116943.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50955\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432 \u0441 13:34 \u0434\u043e 16:26 (MSK) \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a\u043e \u043c\u043d\u043e\u0433\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Cloudflare, Facebook, Akamai, Apple, Linode \u0438 Amazon AWS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 CDN \u0434\u043b\u044f 16 \u043c\u043b\u043d \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0441 14:02 \u0434\u043e 16:02 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Scurgerea rutelor BGP a dus la o \u00eentrerupere masiv\u0103 a conectivit\u0103\u021bii \u00een internet | ProHoster","description":"Compania Cloudflare a publicat un raport despre zilele trecute.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:29+00:00","article:modified_time":"2019-10-31T19:05:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35641","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:09:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:30","updated":"2026-01-22 00:09:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=35641"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/26701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=35641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=35641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=35641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}