{"id":92998,"date":"2020-09-02T01:42:42","date_gmt":"2020-09-01T23:42:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery"},"modified":"2020-09-02T01:42:42","modified_gmt":"2020-09-01T23:42:42","slug":"odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery","title":{"rendered":"Ena iz funkcij Chromu ustvarja ogromno obremenitev na korenskih DNS stre\u017enikih","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Ena iz funkcij Chromu ustvarja ogromno obremenitev na korenskih DNS stre\u017enikih\" src=\"\/wp-content\/uploads\/2020\/09\/9991caf15ac312a6151bef193e75796d.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u0411\u0440\u0430\u0443\u0437\u0435\u0440 Chromium, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f open-source-\u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c Google Chrome \u0438 \u043d\u043e\u0432\u043e\u0433\u043e Microsoft Edge, \u043f\u0440\u0438\u0432\u043b\u0451\u043a \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0435 \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u0434\u0443\u043c\u0430\u043d\u0430 \u0441 \u0431\u043b\u0430\u0433\u0438\u043c\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u044f\u043c\u0438: \u043e\u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043d\u0435 \u00ab\u043f\u043e\u0445\u0438\u0449\u0430\u0435\u0442\u00bb \u043b\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1090985\">Intranet Redirect Detector<\/a><\/noindex>, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u00ab\u0434\u043e\u043c\u0435\u043d\u043e\u0432\u00bb, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043c\u0430\u043b\u043e\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u0435\u043d \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0443 \u043e\u0431\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0418\u043d\u0436\u0435\u043d\u0435\u0440 Verisign \u041c\u044d\u0442\u0442 \u0422\u043e\u043c\u0430\u0441 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u0439 <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.apnic.net\/2020\/08\/21\/chromiums-impact-on-root-dns-traffic\/\">objava<\/a><\/noindex> \u0432 \u0431\u043b\u043e\u0433\u0435 APNIC \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0435\u0451 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>\u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f DNS-\u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ena iz funkcij Chromu ustvarja ogromno obremenitev na korenskih DNS stre\u017enikih\" src=\"\/wp-content\/uploads\/2020\/09\/5499edffcfd83884bfbc934315cfc98f.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>\u042d\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u044b\u0441\u0448\u0435\u0439 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0435\u0439, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u043d\u0433\u0430 .com, .net \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u0430\u043c, \u0447\u0442\u043e frglxrtmpuf \u2014 \u044d\u0442\u043e \u043d\u0435 \u0434\u043e\u043c\u0435\u043d \u0432\u0435\u0440\u0445\u043d\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f (TLD).<\/i><\/p>\n<p>DNS, \u0438\u043b\u0438 Domain Name System (\u00ab\u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0451\u043d\u00bb) \u2014 \u044d\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0435 \u0438\u043c\u0435\u043d\u0430 \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 arstechnica.com \u0432 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043c\u0435\u043d\u0435\u0435 \u0443\u0434\u043e\u0431\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 3.128.236.93. \u0411\u0435\u0437 DNS \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0435 \u043c\u043e\u0433 \u0431\u044b \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u043e\u043c \u0434\u043b\u044f \u043b\u044e\u0434\u0435\u0439 \u0432\u0438\u0434\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043d\u0435\u043d\u0443\u0436\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0432\u0435\u0440\u0445\u043d\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439.<\/p>\n<p>\u0414\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0432\u043e\u043e\u0431\u0440\u0430\u0437\u0438\u043c\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 DNS-\u043f\u043e\u0438\u0441\u043a\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u0433\u0434\u0430 \u043c\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0433\u043b\u0430\u0432\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 ESPN, \u0442\u043e \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 93 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d\u0438, \u043e\u0442 a.espncdn.com \u0434\u043e z.motads.com. \u0412\u0441\u0435 \u043e\u043d\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b!<\/p>\n<p>\u0427\u0442\u043e\u0431\u044b \u0442\u0430\u043a\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043c\u043e\u0433\u043b\u0430 \u0432\u044b\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0438\u0441\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0441\u044c \u043c\u0438\u0440, DNS \u0441\u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u043e\u0443\u0440\u043e\u0432\u043d\u0435\u0432\u0430\u044f \u0438\u0435\u0440\u0430\u0440\u0445\u0438\u044f. \u041d\u0430 \u0432\u0435\u0440\u0448\u0438\u043d\u0435 \u044d\u0442\u043e\u0439 \u043f\u0438\u0440\u0430\u043c\u0438\u0434\u044b \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u2014 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u043e\u043c\u0435\u043d \u0432\u0435\u0440\u0445\u043d\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, .com, \u0438\u043c\u0435\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0445\u0441\u044f \u0432\u044b\u0441\u0448\u0435\u0439 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0435\u0439 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430 \u043d\u0438\u0436\u0435 \u043d\u0438\u0445. \u041e\u0434\u043d\u043e\u0439 \u0441\u0442\u0443\u043f\u0435\u043d\u044c\u043a\u043e\u0439 \u0432\u044b\u0448\u0435 <em>\u044d\u0442\u0438\u0445<\/em> \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0441\u0430\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043e\u0442 <code>a.root-servers.net<\/code> do <code>m.root-servers.net<\/code>.<\/p>\n<h2>\u041a\u0430\u043a \u0447\u0430\u0441\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442?<\/h2>\n<p>\nZahvaljuju\u0107i vi\u0161eslojnoj hijerarhiji ke\u0161iranja DNS infrastrukture, vrlo mali postotak svetskih DNS zahteva dosti\u017ee korenske servere. Ve\u0107ina ljudi dobija informacije od DNS rezolvatora direktno od svog provajdera. Kada korisni\u010dkom ure\u0111aju zatreba informacija o tome kako da do\u0111e do odre\u0111enog sajta, zahtev se prvo \u0161alje DNS serveru koji upravlja lokalni provajder. Ako lokalni DNS server ne zna odgovor, on preusmerava zahtev svojim \"serverima preusmeravanja\" (ukoliko su navedeni).<\/p>\n<p>Ako ni lokalni DNS server provajdera, ni \"serveri preusmeravanja\" navedeni u njegovoj konfiguraciji nemaju ke\u0161irani odgovor, zahtev se upu\u0107uje direktno punomo\u0107nom serveru domena <em>\u0432\u044b\u0448\u0435<\/em> onog koji poku\u0161avate da konvertujete. U slu\u010daju <code>domen.com<\/code> to \u0107e zna\u010diti da se zahtev \u0161alje punomo\u0107nim serverima samog domena <code>com<\/code>, koji se nalaze na adresi <code>gtld-servers.net<\/code>.<\/p>\n<p>Sistem <code>gtld-servers<\/code>, na koji je upu\u0107en zahtev, odgovara sa listom punomo\u0107nih servera imena za domen domen.com, kao i sa najmanje jednim vezom koja sadr\u017ei IP adresu jednog takvog servera imena. Zatim se odgovori spu\u0161taju po lancu \u2014 svaki server preusmeravanja prenosi ove odgovore serveru koji ih je tra\u017eio, sve dok odgovor kona\u010dno ne stigne do lokalnog provajdera i korisni\u010dkog ra\u010dunara. Svi oni pri tom ke\u0161iraju ovaj odgovor, kako ne bi optere\u0107ivali sisteme vi\u0161eg nivoa.<\/p>\n<p>U ve\u0107ini slu\u010dajeva, zapisi servera imena za <strong>domen.com<\/strong> ve\u0107 \u0107e biti ke\u0161irani na jednom od ovih servera preusmeravanja, tako da korenske servere niko ne uznemirava. Me\u0111utim, dok govorimo o uobi\u010dajenom obliku URL-a \u2014 onom koji se konvertuje u standardni veb sajt. Zahtevi Chrome-a se odnose na nivo <em>\u0432\u044b\u0448\u0435<\/em> ovoga, na stepen samih klastera <code>root-servers.net<\/code>.<\/p>\n<h2>Chromium i provera NXDomain prevare<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Ena iz funkcij Chromu ustvarja ogromno obremenitev na korenskih DNS stre\u017enikih\" src=\"\/wp-content\/uploads\/2020\/09\/f089ac720a0d6e62be2f7c7c144f1d49.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Provere Chromium-a \"da li me ovaj DNS server obmanjuje?\" \u010dine skoro polovinu celokupnog saobra\u0107aja koji dosti\u017ee klaster korenskih DNS servera Verisign.<\/i><\/p>\n<p>Brskalnik Chromium, star\u0161evski projekt Google Chrome, novega Microsoft Edge in \u0161tevilnih manj znanih brskalnikov, \u017eeli uporabnikom olaj\u0161ati iskanje na enem polju, ki se v\u010dasih imenuje \"Omnibox\". Z drugimi besedami, uporabnik v isto besedilno polje na vrhu okna brskalnika vnese tako prave URL-je kot tudi poizvedbe iskalnika. Da bi \u0161e dodatno poenostavil, uporabniku ni treba vnesti dela URL-ja z <code>http:\/\/<\/code> ili <code>https:\/\/<\/code>.<\/p>\n<p>Ne glede na to, kako priro\u010dno je to, ta pristop zahteva, da brskalnik razume, kaj naj \u0161teje za URL, in kaj za iskalno poizvedbo. V ve\u010dini primerov je to precej o\u010ditno \u2014 na primer, niz s presledki ne more biti URL. Vendar pa je lahko stvar bolj zapletena, \u010de upo\u0161tevamo intranete \u2014 zasebna omre\u017eja, ki lahko uporabljajo tudi zasebne vrhnje domene za re\u0161evanje dejanskih spletnih mest.<\/p>\n<p>\u010ce uporabnik v intranetu svojega podjetja vnese \"marketing\", in v intranetu podjetja obstaja notranja spletna stran s tem imenom, potem Chromium prika\u017ee pojavna okna, ki spra\u0161ujejo uporabnika, ali \u017eeli iskati \"marketing\", ali preiti na <code>https:\/\/marketing<\/code>. To je \u017ee nekoliko bolje, a mnogi ponudniki interneta in ponudniki javnih Wi-Fi omre\u017eij \"ukradejo\" vsak vnesen napa\u010den URL, preusmerjajo\u010d uporabnika na kak\u0161no stran, polno oglasnih pasic.<\/p>\n<h2>Naklju\u010dna generacija<\/h2>\n<p>\nRazvijalci Chromuim niso \u017eeleli, da bi uporabniki v javnih omre\u017ejih ob vsakem iskanju ene same besede videli pojavna okna, ki jih spra\u0161ujejo, kaj mislijo, zato so izvedli test: ob zagonu brskalnika ali spremembi omre\u017eja Chromium izvede DNS iskanje treh naklju\u010dno generiranih \"domenskih\" vrhnjih nivojev dol\u017eine od sedem do petnajst znakov. \u010ce se kateri koli dve od teh iskanj vrneta z enakim IP-naslovom, Chromium domneva, da lokalno omre\u017eje \"ukrade\" napake <code>NXDOMAIN<\/code>, ki jih mora prejemati, zato brskalnik do nadaljnjega obvestila \u0161teje vse vne\u0161ene poizvedbe iz ene besede za poskuse iskanja.<\/p>\n<p>Na \u017ealost v omre\u017ejih, ki <em>ne<\/em> ukradejo rezultate DNS poizvedb, ti trije postopki obi\u010dajno pridejo na vrh, do samih korenskih stre\u017enikov imen: lokalni stre\u017enik ne ve, kako pretvoriti <code>qwajuixk<\/code>, therefore it forwards this request to its forwarding server, which does the same until finally, <code>a.root-servers.net<\/code> either one of its 'brothers' is forced to say 'Sorry, but this is not a domain'.<\/p>\n<p>Since there are approximately 1.67*10^21 possible fake domain names ranging from seven to fifteen characters long, most often <em>each<\/em> of these tests, conducted in a 'fair' network, reaches the root server. This amounts to as much as <em>half<\/em> of the total load on root DNS, according to statistics from that part of the clusters <code>root-servers.net<\/code>, which belong to Verisign.<\/p>\n<h2>History repeats itself<\/h2>\n<p>\nThis is not the first case where a project created with the best intentions <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/NTP_server_misuse_and_abuse#D-Link_and_Poul-Henning_Kamp\">crashed<\/a><\/noindex> or nearly crashed a public resource with unnecessary traffic \u2014 it immediately reminded us of the long and sad history of D-Link and the NTP server (Network Time Protocol) by Poul-Henning Kamp in the mid-2000s.<\/p>\n<p>V letu 2005 je razvijalec FreeBSD Poul-Henning, ki je imel tudi edini stre\u017enik Network Time Protocol razreda Stratum 1 na Danskem, prejel nepri\u010dakovano in visoko ra\u010duna za preneseni promet. Na kratko, razlog je bil, da so razvijalci D-Link v programsko opremo svoje linije preklopnikov, usmerjevalnikov in dostopnih to\u010dk vpisali naslove NTP stre\u017enikov Stratum 1, vklju\u010dno s stre\u017enikom Kampa. To je takoj pove\u010dalo promet stre\u017enika Kampa devetkrat, zaradi \u010desar je Danish Internet Exchange (to\u010dka za izmenjavo internetnega prometa na Danskem) spremenil njegov tarifni paket z 'Brezpla\u010dno' na '9.000 dolarjev na leto'.<\/p>\n<p>The problem was not that there were too many D-Link routers, but that they 'disobeyed the hierarchy'. Just like DNS, NTP must operate in a hierarchical manner \u2014 Stratum 0 servers pass information to Stratum 1 servers, which pass information to Stratum 2 servers, and so on, down the hierarchy. A regular home router, switch, or access point, like those that D-Link hardcoded NTP server addresses into, should have been sending requests to a Stratum 2 or Stratum 3 server.<\/p>\n<p>The Chromium project, likely with the best intentions, repeated the NTP problem in the DNS issue, flooding the root servers of the Internet with requests they were never meant to handle.<\/p>\n<h2>There is hope for a timely solution<\/h2>\n<p>\nThe Chromium project is open <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=1090985\">bubanj<\/a><\/noindex>, ki zahteva, da se privzeto onemogo\u010di Intranet Redirect Detector. Treba je pohvaliti projekt Chromium: napaka je bila odkrita <em>pred tem<\/em>, ko je Matt Thomas iz Verisigna pritegnil veliko pozornosti s svojim <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.apnic.net\/2020\/08\/21\/chromiums-impact-on-root-dns-traffic\/\">objavom<\/a><\/noindex> v blogu APNIC. Napaka je bila odprta junija, a je ostala v pozabi do Thomasove objave; po objavi je za\u010dela biti pod natan\u010dnim nadzorom.<\/p>\n<p>Obstaja upanje, da bo te\u017eava kmalu re\u0161ena in da korenskim DNS stre\u017enikom ne bo ve\u010d treba vsakodnevno odgovarjati na pribli\u017eno 60 milijard la\u017enih poizvedb.<\/p>\n<p><\/p>\n<h4>V okviru ogla\u0161evanja<\/h4>\n<p>\n<b>Epicni stre\u017eniki<\/b> \u2014 to je <noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr85\">VPS na Windows<\/a><\/noindex> ali Linux z zmogljivimi procesorji dru\u017eine AMD EPYC in zelo hitrimi NVMe diski Intel. Pohitite z naro\u010dilom!<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr85\"><img decoding=\"async\" alt=\"Ena iz funkcij Chromu ustvarja ogromno obremenitev na korenskih DNS stre\u017enikih\" src=\"\/wp-content\/uploads\/2020\/09\/c4fecbb05095f808fa41a9a6d99a3407.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/517166\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0411\u0440\u0430\u0443\u0437\u0435\u0440 Chromium, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f open-source-\u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c Google Chrome \u0438 \u043d\u043e\u0432\u043e\u0433\u043e Microsoft Edge, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u043d\u0430 \u0441\u0435\u0431\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0435 \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0441 \u0431\u043b\u0430\u0433\u0438\u043c\u0438 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u044f\u043c\u0438: \u043e\u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043d\u0435 \u00ab\u043f\u043e\u0445\u0438\u0449\u0430\u0435\u0442\u00bb \u043b\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0435\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432. Intranet Redirect Detector, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u00ab\u0434\u043e\u043c\u0435\u043d\u043e\u0432\u00bb, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043c\u0430\u043b\u043e\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u0435\u043d \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0443 \u043e\u0431\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92999,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-92998","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0411\u0440\u0430\u0443\u0437\u0435\u0440.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0434\u043d\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Chromium \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0411\u0440\u0430\u0443\u0437\u0435\u0440.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-01T23:42:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-01T23:42:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ena izmed funkcij Chromioma ustvarja ogromno obremenitev za korenske DNS stre\u017enike | ProHoster","description":"Brskalnik.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0434\u043d\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Chromium \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b | ProHoster","og:description":"\u0411\u0440\u0430\u0443\u0437\u0435\u0440.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/odna-iz-funkczij-chromium-sozdayot-ogromnuyu-nagruzku-na-kornevye-dns-servery","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-01T23:42:42+00:00","article:modified_time":"2020-09-01T23:42:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92998","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:57:25","updated":"2022-09-30 00:56:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/92998","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=92998"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/92998\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/92999"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=92998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=92998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=92998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}