Cloudflare Company website , yakagadzirirwa kukwevera kutarisa kune dambudziko rekudonha zvisiri izvo BGP nzira uye mukana wekuita traffic redirection kurwisa uchishandisa BGP protocol. Iyo saiti inobvumidza iwe kuti utarise kushandiswa kwehunyanzvi hwekusefa nzira dzisiridzo nevanopa uye kuongorora kuisirwa kweRPKI rutsigiro.
Vazhinji vashandisi vanoramba vari pachena kune BGP subnet kushambadzira ine manyepo enzira ruzivo rwekureba, routing traffic yekufambisa kuburikidza nevechitatu-bato vanopa. Kuwedzera, nyaya dzekushandisa BGP pakurwiswa dziri kubuda, panguva iyo vanorwisa, nekukanganisa zvivakwa zvevanopa, kuronga kudzoserwa uye kuvharirwa kwetraffic kuti iparadze nzvimbo dzakati nekuronga MiTM kurwisa kutsiva DNS mhinduro.
Mhinduro yedambudziko ndeyekuunza hurongwa hwemvumo yezviziviso zveBGP zvinoenderana neRPKI (Resource Public Key Infrastructure), iyo inokutendera kuti uone kana chiziviso cheBGP chinobva kumuridzi wetiweki kana kwete. Paunenge uchishandisa RPKI yeanozvimiririra masisitimu uye IP kero, ketani yekuvimba inovakwa kubva kuIANA kuenda kune vedunhu registrars (RIRs), uyezve kune vanopa masevhisi (LIRs) uye vashandisi vekupedzisira, izvo zvinobvumira mapato matatu kuona kuti kushanda kwechishandiso kwaive zvichiitwa nemuridzi wayo. Nehurombo, kunyangwe paine matambudziko, RPKI haisati yashandiswa nevazhinji vanopa. Iyo nyowani Cloudflare sevhisi inokutendera iwe kuti utarise matambudziko vanoshanda uye uuye navo kune veruzhinji.
Source: opennet.ru