ProHoster > Blog > internet nhau > Kufungidzira kwekunetsana kwekambani pane network yekubatanidza

Kufungidzira kwekunetsana kwekambani pane network yekubatanidza

Kufungidzira kwekunetsana kwekambani pane network yekubatanidza
Kunetsana kwemakambani kwakamuka munaChikumi 10.06.2019, XNUMX nekuda kwekuwedzera kwemutengo wekutumira maSMS kune vashandisi veVimpelCom network neMail.RU Group. Semhinduro, Mail.RU Boka rakamira "kushumira" yakananga Russian IP chiteshi kune VimpelCom network.

Pazasi pane ongororo pfupi yemamiriro ezvinhu kubva pakuona kweinjiniya network.

Update: 14.06.2019/18/45 XNUMX:XNUMX - kusimbiswa kwenzira dzeRussia kune VimpelCom network, mhedziso dzakagadziriswa, tsananguro yakawedzerwa Sergei Kubasov (CIO VKontakte).
Update: 14.06.2019/19/48 XNUMX:XNUMX - tsananguro yakawedzerwa yenzira yekumisa kupararira kwenzira munzira "ipfupi" yeRussia kuburikidza neRostelecom, MTS, RETN.NET..


Nhanganyaya:
VimpelCom ine autonomous system AS3216, vamwe vese (8402 - imba Internet, 16345 - mobile Internet) vari kuseri 3216.

Mail.RU Group - autonomous systems AS47541, AS47542 uye AS47764. Iyo huru yemukati jenareta ndeye 47542, iyo inonzi. CDN VKONTAKTE (mabhaisikopo, mimhanzi). Masisitimu ese anozvimiririra anozvimiririra kubva kune mumwe nemumwe (kubva pakuona kwekunze kuzvitonga system).

Kutanga, ngatitarisei mamiriro kubva kune VimpelCom network. Nokuti izvi zvichatibatsira Kutarisa Girazi VimpelCom.

Ngatitarisei kune yekutanga autonomous system - AS47541.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394342
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

AS-PATH ine maviri anozvimiririra masisitimu - 2914 (NTT) uye 47541 (VKONTAKTE-SPB-AS).
Iyo localpref metric yakaiswa ku87, iyo maererano nerondedzero muRIPE DB yechinhu AS3216 inoenderana nekutarisa kune dzimwe nyika.

...
zvirevo: Nzira dzevezera dzepasirese dzinowana zvido zvemuno mu
zvirevo: huwandu hwe81-89.
...

Irwo ruzivo rwakafanana runosimbiswa nenharaunda 3216:3000 uye 3216:3103 (mabviro: RIPE DB yeAS3216):

...
mazwi: 3216:3000 Yakagamuchirwa kubva kune imwe nyika uplink kana vezera, kunyanya:
...
zvirevo: 3216:3103 AMS-IX
...

Ndiko kuti, VimpelCom inoona nzira inoenda kuVKontakte kuburikidza neEuropean junction.

Ngatitarisei imwe VKontakte autonomous network - 47542 (VKONTAKTE-MSK-CDN-AS).

Zvose zvakafanana.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394338
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

Zvakadini neMail.ru pachayo? Ngatitarisei AS47764 (mailru-as).

 3356 47764
    194.67.0.215 (metric 10501) (194.67.0.215)
      Origin IGP, metric 0, localpref 77, valid, internal, best, group-best, import-candidate
      Received Path ID 0, Local Path ID 1, version 2867605667
      Community: 3216:3000 3216:3007 3356:2 3356:22 3356:100 3356:123 3356:519 3356:2094 47764:1 47764:40000 47764:50077

VimpelCom inoona Mail.ru kuburikidza ne3356 (uplink Level3, Tier1 operator). Mashoko aya anosimbiswa ne localpref 77:

...
zvirevo: Nzira dzeUplink dzinowana zvaunofarira munharaunda mukati me71-79.
zvirevo: Kuwedzeredza Kwekupedzisira: Kukadzi 2012…

uye nharaunda (3216:3000 uye 3216:3007):

...
mazwi: 3216:3000 Yakagamuchirwa kubva kune imwe nyika uplink kana vezera, kunyanya:
...
mazwi: 3216:3007 Level 3 Communications
...

Kubva pane ruzivo rwakagamuchirwa zviri pachena kuti traffic kubva kuVimpelCom network kuenda kuVKontakte uye MailRu inogoverwa kuburikidza neEuropean junctions maererano nemigwagwa yakagamuchirwa kuburikidza neBGP protocol. Iko hakuna dzimwe nzira kuburikidza nekumba kweRussia kubatana muKutarisa Girazi. Hapana nhanho dzakawanikwa kuti dzigadzirise traffic nenzira dzakaipa nenzira dziri pachena.

Mail.ru Boka rinoona sei network yeVimpelCom?
Ngatitore mukana Kutarisa Girazi naMailov.

Kubva kumarouter kubva kuAS47764 (mailru-as):

  Path #6: Received by speaker 0
  Advertised to peers (in unique update groups):
    188.93.60.188   
  1299 1299 1273 3216 3216
    217.20.147.250 (metric 100) from 217.20.147.250 (217.20.147.253)
      Origin IGP, metric 500, localpref 200, valid, internal, best, group-best
      Received Path ID 0, Local Path ID 0, version 1172721494
      Community: 1299:20000 47764:701 47764:41100 47764:41108 47764:50077

AS-PATH ine AS1299 (Telia, Tier1 opareta, Mail.RU uplink) uye as1273 (Vodafon, Tier1 opareta, VimpelCom uplink).

LocalPreference 200 ndiyo chiyero chekubatana kwekunze kweMail.ru (https://net.mail.ru/bgp.html), uye MED 500 inoenderana nezvose zvisingagamuchirwi kubva kune zvakananga kubatana, kwete kubva kuIXs, kwete kubva kune vezera. .

Asi nei pasina nzira dzemunharaunda kuburikidza neRussia telecom operators ???
Ivo varipo, asi ivo vanonyanya kukoshesa "kwete-standard"!
Heino nzira kuburikidza neRostelecom (as12389):

  Path #1: Received by speaker 0
  Not advertised to any peer
  12389 3216
    46.61.178.149 from 46.61.178.149 (213.59.207.79)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 12389:5 12389:6 12389:1100 12389:1105 12389:1277 47764:701 47764:41100 47764:41104 47764:50077
      Origin-AS validity: not-found

Pano kuburikidza neMegafon (as31133):

  Path #2: Received by speaker 0
  Not advertised to any peer
  31133 3216
    78.25.77.41 from 78.25.77.41 (10.222.253.97)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 31133:300 31133:46170 47764:701 47764:41100 47764:41105 47764:50077
      Origin-AS validity: not-found

Pano kuburikidza neRETN.NET:

  Path #3: Received by speaker 0
  Not advertised to any peer
  9002 9002 3216
    87.245.253.24 from 87.245.253.24 (87.245.225.1)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 9002:9002 9002:64667 47764:701 47764:41100 47764:41101 47764:50077
      Origin-AS validity: not-found

Uye kunyangwe kuburikidza neMTS!

  Path #5: Received by speaker 0
  Not advertised to any peer
  8359 3216
    212.188.61.105 from 212.188.61.105 (195.34.52.77)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 8359:200 8359:609 8359:5012 47764:701 47764:41100 47764:41103 47764:50077
      Origin-AS validity: not-found

Iyo localpref metric yeiyi nzira dzeRussia haina kushomeka, ndiko kuti, nzira dzakaipa kana dzichienzaniswa nedzekunze!

Mukuwedzera, pane zvinorambidzwa paMail.Ru Group kugovera prefixes yako kuVimpelCom kuburikidza neRussia vanoshanda!

RETN.NET (http://lg.retn.net/):
Zviziviso kubva kuMail.RU Group show community 3216:65535.
Kubviswa kubva LG RETN.NETinet.0: 762737 destinations, 1734826 routes (762708 active, 222780 holddown, 277 hidden)
94.100.176.0/20 (1 yekupinda, 1 yakaziviswa)
*BGP Kuda: 170/-201
...
...
AS nzira: 47764 I
AS nzira: Yakanyorwa
Nharaunda: 3216:65535 9002:64667 9002:65530
...

VimpelCom haigamuchire nzira dzakamisikidzwa nenharaunda yakadai panetiweki yayo. Chidimbu kubva kuRIPE DB paAS3216:
...
remarks: Internal comminuties are assigned only internally.
remarks: They are in range 3216:0000-3216:4999 and 3216:6000-3216:65535
remarks: and are always deleted from incoming updates at the border
remarks: routers.
...
Munzira yeRostelecom (http://lg.ip.rt.ru), Mail.RU Group inopa nzira dzakafanana kubva munharaunda 12389:8350.
Kubviswa kubva LG Rostelecom94.100.176.0/20 kuburikidza ne217.107.65.1 pa eth0.9 [sr2 2019-06-13] * (100/?) [AS47764i]
Rudzi: BGP unicast univ
BGP.mavambo: IGP
BGP.as_path: 47764
BGP.next_hop: 213.59.207.78
BGP.med: 0
BGP.local_pref: 850
BGP.community: (12389,1) (12389,1100) (12389,1105) (12389,1277) (12389,8350) (12389,8380) (47764,1) (47764,40000).
BGP.originator_id: 213.59.207.78
BGP.cluster_list: 95.167.88.79 95.167.88.49 95.167.88.17

Zvinoenderana neiyo RIPE DB mapindiro eiyo as12389 chinhu, iyi nharaunda inoreva "usashambadzire kune as3216 network":...
remarks: | 12389:835y When advertising to GoldenTelecom (AS3216) |
...
remarks: | ...y=0 - do not advertise |
...
Saizvozvo kuMTS (http://lg.mtu.ru):Kubvisa kubva LG MTSBGP routing tafura yekupinda ye94.100.176.0/20, shanduro 161717219
Nzira: (2 iripo, yakanakisa #1, tafura default)
Multipath: eBGP
Yakashambadzirwa kuupdate-mapoka:
6
47764, (yakagamuchirwa & yakashandiswa)
195.34.52.77 (metric 16) kubva 195.34.52.181 (195.34.52.181)
Origin IGP, metric 0, localpref 140, inoshanda, yemukati, yakanakisa
Nharaunda: 8359:2120 8359:2150 8359:5500 8359:55277
Muvambi: 195.34.52.77, Cluster list: 83.59.83.59
47764, (yakagamuchirwa & yakashandiswa)
195.34.52.77 (metric 16) kubva 195.34.52.182 (195.34.52.182)
Origin IGP, metric 0, localpref 140, inoshanda, yemukati
Nharaunda: 8359:2120 8359:2150 8359:5500 8359:55277
Muvambi: 195.34.52.77, Cluster list: 83.59.2.77

Nharaunda 8359:2120 zvinoreva:...
remarks: 8359:212x when announcing to Sovam (Beeline)
...
remarks: x=0 - do not announce
...
Iwe haugone kutarisa zviziviso zveMail.RU Group munzira yeMegafon - iyo yekupedzisira haina Kutarisa Girazi.

Ngatitarisei AS47541 (VKONTAKTE-SPB-AS).

Zvabuda zvakakurisa.

 Router: a9922-e-5
Command: show ip bgp 81.211.56.202


Last switch-over Thu Apr  5 04:25:09 2018: 1 year, 10 weeks, 6 hours, 9 minutes ago

Fri Jun 14 10:34:20.791 MSK
BGP routing table entry for 81.211.0.0/17
Versions:
  Process           bRIB/RIB  SendTblVer
  Speaker          913059757   913059757
Last Modified: May 21 05:20:38.536 for 1y03w
Paths: (6 available, best #4)
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  Path #1: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.235 (metric 31) from 87.240.191.235 (87.240.191.235)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #2: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.248 (metric 31) from 87.240.191.248 (87.240.191.248)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #3: Received by speaker 0
  Not advertised to any peer
  174 6762 3216 3216
    87.240.191.249 (metric 31) from 87.240.191.249 (87.240.191.249)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
  Path #4: Received by speaker 0
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  174 6762 3216 3216
    149.6.169.113 from 149.6.169.113 (38.28.1.236)
      Origin IGP, metric 5000, localpref 150, valid, external, best, group-best
      Received Path ID 0, Local Path ID 0, version 913059757
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
      Origin-AS validity: not-found
  Path #5: Received by speaker 0
  Not advertised to any peer
  1273 1273 3216 3216
    195.89.114.197 from 195.89.114.197 (195.2.1.107)
      Origin IGP, metric 5005, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41110 47541:50078
      Origin-AS validity: not-found
  Path #6: Received by speaker 0
  Not advertised to any peer
  3356 3356 3216 3216 3216
    213.242.69.69 from 213.242.69.69 (4.69.177.130)
      Origin IGP, metric 5000, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 3356:2 3356:22 3356:100 3356:123 3356:503 3356:2067 47541:701 47541:41100 47541:41107 47541:50078
      Origin-AS validity: not-found

AS-PATH inonongedza kuAS174 - Cogent (Mail.RU uplink, Tier1), ipapo AS6762 - Telecom Italia (VimpelCom uplink). Local Preference ndeye 150 kwese, asi izvi zvinoshanda kune ese ekunze majoini, zvisinei mitemo yakanyorwa.

Ngatitarisei AS47542 (VKONTAKTE-MSK-CDN-AS).

 Router: mx960-m9-0
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.222  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.251  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Uye kubva kune yechipiri router: 

 Router: mx960-m9-1
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.224  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.250  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Nzira dzekutanga chete (0.0.0.0/0). Iyi mamiriro akatsanangurwa nemushandi weMail.RU Group kukara, zvandinomutenda nazvo. Muchidimbu: chikamu cheMoscow cheVKontakte network ndeye caching (uye kwete kugadzira) chikamu, chine basa rekugadzirisa kukurumidza kurodha kwezvakakurumbira, mu-kuda zvemukati. Kutarisira vashandisi, hongu.

Kana pasina nzira yekuenda kune imwe network, saka iyi network haishandiswe ne caching maseva. Izvi zvinoreva kuti kurodha kumhanyisa optimization hakushande, uye vashandisi vanotambura. Asi pano tinofanira kusimbisa kuti vashandisi havasi vedu chete, asiwo avo veVimpelCom.

Mhedziso:

  1. Kubva kuVimpelCom, traffic yakananga kuMail.RU Group inogovaniswa zvakajairika. Hapana mafambisirwo ezvekufambiswa kuburikidza ne Local Preference manipulations aonekwa
  2. Mail.RU Group iri kuona manipulations ane VimpelCom prefixes. Nzira dziripo dzekuenda kunetiweki yeVimpelCom kuburikidza nevashandisi vekuRussia vane zvinonyanya kukosha zvichienzaniswa nemigwagwa kuburikidza nevekunze Tier1 vanoshanda.
  3. Mail.RU Group yakawedzera mamaneja enharaunda dzeBGP kunzira dzinofambiswa kune vashandisi veRussia (MTS, Rostelecom, RETN.NET) kudzikamisa kupararira kwavo vakananga kuVimpelCom.

Sei Mail.RU Group ichiisa pamberi nzira kuburikidza neEurope? Nei Mail.RU Group ichirambidza kupfupika kweRussia kushamwaridzana neVimpelCom?

Zvakachipa kwavari here? Dhiraivha traffic kuburikidza nezviteshi zvekunze uye kubhadhara maTirvans nemari yekunze?
Kana kuti pane here chishuwo chekutyaira traffic kure kuti kuitora kusava nyore, huh?
Izvi hazvizivikanwe kune network engineer...

Source: www.habr.com

Tenga inovimbika yekutambira kwemasaiti ane DDoS dziviriro, VPS VDS maseva πŸ”₯ Tenga webhusaiti yakavimbika ine dziviriro yeDDoS, maseva eVPS VDS | ProHoster