Dariiqa BGP Leak wuxuu u horseedaa kala goyn weyn oo internetka ah

Shirkadda Cloudflare la daabacay warbixin ku saabsan dhacdadii shalay, taasoo keentay saddex saacadood laga bilaabo 13:34 ilaa 16:26 (MSK) waxaa jiray dhibaatooyin la xidhiidha helitaanka ilo badan oo shabakada caalamiga ah, oo ay ku jiraan kaabayaasha Cloudflare, Facebook, Akamai, Apple, Lindode iyo Amazon AWS. Dhibaatooyinka kaabayaasha Cloudflare, kaas oo siiya CDN 16 milyan oo goobood, arkay laga bilaabo 14:02 ilaa 16:02 (MSK). Cloudflare ayaa ku qiyaastay in ku dhawaad ​​15% taraafikada caalamiga ah ay luntay intii uu maqnaa.

Dhibaatadu waxay ahayd sababay Dariiqa BGP ayaa daadsan, inta lagu gudajiray ilaa 20 kun horgalayaal 2400 oo shabakadood ah ayaa si khaldan loo jiheeyay. Isha daadadku waxay ahayd bixiyaha DQE Communications, kaas oo isticmaalay software-ka BGP Optimizer si loo wanaajiyo habaynta. BGP Optimizer wuxuu u kala qaybiyaa horgalayaasha IP-ga oo u kala qaybiya kuwa yaryar, tusaale ahaan 104.20.0.0/20 u kala qaybiya 104.20.0.0/21 iyo 104.20.8.0/21, natiijadiina, Isgaadhsiinta DQE waxay dhinaceeda ku haysay tiro badan oo waddooyin gaar ah oo xad dhaaf ah. Wadooyinka guud (tusaale ahaan halkii laga isticmaali lahaa dariiqyada guud ee Cloudflare, wadooyin badan oo granular ah oo loo maro shabakad-hoosaadyada gaarka ah ee Cloudflare ayaa la isticmaalay).

Dariiqyadan dhibcaha waxaa lagu dhawaaqay mid ka mid ah macaamiisha (Allegheny Technologies, AS396531), kaas oo sidoo kale xiriir la lahaa bixiye kale. Allegheny Technologies waxay faafisay dariiqyada ka soo baxay adeeg bixiye kale (Verizon, AS701). Sababtoo ah la'aanta shaandhaynta saxda ah ee ogeysiisyada BGP iyo xaddidaadaha tirada horgalayaasha, Verizon waxay qaadatay ogeysiiskan oo ay faafisay natiijada 20 kun ee horgalayaasha intarneedka intiisa kale. Horgalayaasha khaldan, oo ay ugu wacan tahay weynaantooda, ayaa loo arkay inay yihiin mudnaan sare maadaama dariiq gaar ah uu leeyahay mudnaan ka sareysa kan guud.

Natiijo ahaan, taraafikada shabakado badan oo waaweyn ayaa bilaabay in loo maro Verizon bixiyaha yar ee Isgaarsiinta DQE, kaas oo awoodi waayay inuu xakameyo taraafikada kor u kacday, taas oo keentay burbur (saameyntu waxay la mid tahay in lagu beddelo qayb ka mid ah waddo weyn oo furan wadada dalka).

Si looga hortago dhacdooyinka la midka ah inay dhacaan mustaqbalka
lagu taliyay:

• Si aad u isticmaasho xaqiijin ogaysiisyada ku salaysan RPKI (BGP Origin Validation, waxay ogolaataa aqbalaada ogeysiisyada mulkiilayaasha shabakada);
• Xaddid tirada ugu badan ee horgalayaasha la helay dhammaan fadhiyada EBGP (goob ugu badnaan horgalayaasha ayaa kaa caawin doona in isla markiiba la tuuro gudbinta 20 kun horgalayaasha hal kulan gudaheed);
• Codso shaandhaynta ku salaysan diiwanka IRR (Diiwaanka Jidka Internetka, ayaa go'aamiya ASes kaas oo la ogolyahay marinka horgalayaasha la cayimay);
• Isticmaal habka xannibaadda caadiga ah ee lagu taliyay RFC 8212 ee router-ka ('diidmada hore');
• Jooji isticmaalka taxadar la'aanta ah ee BGP optimizers.

Source: opennet.ru