{"id":31415,"date":"2019-10-31T21:41:08","date_gmt":"2019-10-31T18:41:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\/"},"modified":"2019-10-31T21:41:08","modified_gmt":"2019-10-31T18:41:08","slug":"vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","title":{"rendered":"Gjith\u00e7ka \u00ebsht\u00eb shum\u00eb keq ose nj\u00eb form\u00eb e re e interceptimit t\u00eb trafikut","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>M\u00eb 13 mars, n\u00eb grupin punues t\u00eb RIPE p\u00ebr t\u00eb luftuar abuzimet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ripe.net\/ripe\/mail\/archives\/anti-abuse-wg\/2019-March\/004585.html\">u paraqit propozimi<\/a><\/noindex> p\u00ebr t\u00eb konsideruar BGP-interceptimin (hjjack) si nj\u00eb shkelje t\u00eb politik\u00ebs s\u00eb RIPE. N\u00eb rast se propozohet, ofruesi i internetit, i sulmuar nga interceptimi i trafikut, do t\u00eb kishte mund\u00ebsin\u00eb t\u00eb d\u00ebrgonte nj\u00eb k\u00ebrkes\u00eb speciale p\u00ebr t\u00eb zbuluar keqb\u00ebr\u00ebsin. N\u00ebse grupi i ekspert\u00ebve mbledh mjaft prova konfirmuese, at\u00ebher\u00eb nj\u00eb LIR e till\u00eb, q\u00eb \u00ebsht\u00eb burimi i BGP-interceptimit, do t\u00eb konsiderohej se kishte shkelur rregullat dhe mund t\u00eb humbiste statusin e saj LIR. Kishte gjithashtu disa argumente <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ripe.net\/ripe\/mail\/archives\/anti-abuse-wg\/2019-March\/004601.html\">kund\u00ebr nj\u00eb<\/a><\/noindex> ndryshimi t\u00eb till\u00eb.<\/p>\n<p>N\u00eb k\u00ebt\u00eb publikim, d\u00ebshirojm\u00eb t\u00eb tregojm\u00eb nj\u00eb shembull sulmi, kur jo vet\u00ebm q\u00eb ishte n\u00ebn dyshim keqb\u00ebr\u00ebsi real, por gjithashtu lista e plot\u00eb e prefikseve t\u00eb d\u00ebmtuara. M\u00eb shum\u00eb se kaq, nj\u00eb sulm i till\u00eb rikthen n\u00eb v\u00ebmendje pyetje rreth motiveve t\u00eb interceptimeve t\u00eb ardhshme t\u00eb trafikut t\u00eb k\u00ebtij tipi.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nK\u00ebto dy vitet e fundit, mediat kan\u00eb raportuar si BGP hijackings vet\u00ebm konflikte t\u00eb tipit MOAS (Multiple Origin Autonomous System). MOAS \u00ebsht\u00eb nj\u00eb rast specifik ku dy sisteme autonome t\u00eb ndryshme shpallin prefikse n\u00eb konflikt me numrat p\u00ebrkat\u00ebs ASN n\u00eb AS_PATH (ASN e par\u00eb n\u00eb AS_PATH, e m\u00ebpasshme \u2014 origin ASN). Megjithat\u00eb, mund t\u00eb p\u00ebrmendim t\u00eb pakt\u00ebn <noindex><a rel=\"nofollow\" href=\"https:\/\/pc.nanog.org\/static\/published\/meetings\/NANOG75\/1892\/20190219_Gavrichenkov_Four_Years_Of_v1.pdf\">3 lloje t\u00eb tjera<\/a><\/noindex> t\u00eb interceptimit t\u00eb trafikut, q\u00eb lejojn\u00eb sulmuesin t\u00eb manipuloj\u00eb atributin AS_PATH me q\u00ebllime t\u00eb ndryshme, p\u00ebrfshir\u00eb edhe p\u00ebr t\u00eb anashkaluar qasjet moderne t\u00eb filtrimit dhe monitorimit. Nj\u00eb lloj i njohur sulmi <noindex><a rel=\"nofollow\" href=\"https:\/\/we.riseup.net\/assets\/43591\/defcon-16-pilosov-kapela.pdf\">Pilozova-Kapela<\/a><\/noindex> \u2014 \u00ebsht\u00eb lloji m\u00eb i fundit i k\u00ebtij interceptimi, por jo m\u00eb pak i r\u00ebnd\u00ebsish\u00ebm. \u00cbsht\u00eb mjaft e mundshme q\u00eb k\u00ebt\u00eb sulm ne po e kemi par\u00eb gjat\u00eb jav\u00ebve t\u00eb fundit. Ky ngjarje ka nj\u00eb karakter t\u00eb shpjeguesh\u00ebm dhe pasoj\u00eb mjaft serioze.<\/p>\n<p>Ata q\u00eb k\u00ebrkojn\u00eb nj\u00eb version TL;DR mund t\u00eb rrotullohen te n\u00ebnkapitulli \u201cSulmi ideal\u201d.<\/p>\n<h3>Mbackgroundi rrjetor<\/h3>\n<p><i>(p\u00ebr ta kuptuar m\u00eb mir\u00eb proceset e angazhuara n\u00eb k\u00ebt\u00eb incident)<\/i><\/p>\n<p>N\u00ebse d\u00ebshironi t\u00eb d\u00ebrgoni nj\u00eb paket\u00eb dhe keni disa prefikse n\u00eb tabel\u00ebn e itinerareve q\u00eb p\u00ebrmbajn\u00eb IP-n\u00eb e destinacionit, do t\u00eb p\u00ebrdorni itinerarin p\u00ebr prefiksin me gjat\u00ebsin\u00eb maksimale. N\u00ebse n\u00eb tabel\u00ebn e itinerareve ekzistojn\u00eb disa rrug\u00eb t\u00eb ndryshme p\u00ebr nj\u00eb prefiks, do t\u00eb zgjidhni at\u00eb m\u00eb t\u00eb mir\u00ebn (sipas mekanizmit t\u00eb zgjedhjes s\u00eb rrug\u00ebs m\u00eb t\u00eb mir\u00eb).<\/p>\n<p>Qasjet ekzistuese p\u00ebr filtrimin dhe monitorimin p\u00ebrpiqen t\u00eb analizojn\u00eb itineraret dhe t\u00eb marrin vendime duke analizuar atributin AS_PATH. Routteri mund ta ndryshoj\u00eb k\u00ebt\u00eb atribut n\u00eb \u00e7do vler\u00eb gjat\u00eb njoftimit. Shtimi i thjesht\u00eb i ASN-s\u00eb s\u00eb pronarit n\u00eb fillim t\u00eb AS_PATH (si ASN origjin\u00eb) mund t\u00eb jet\u00eb mjaftuesh\u00ebm p\u00ebr t\u00eb anashkaluar mekanizmat aktual\u00eb t\u00eb verifikimit t\u00eb burimit. M\u00eb shum\u00eb se kaq, n\u00ebse ekziston nj\u00eb rrug\u00eb nga ASN-i n\u00eb sulm te ju, krijohet mund\u00ebsia p\u00ebr t\u00eb nxjerr\u00eb dhe p\u00ebrdorur AS_PATH-in e k\u00ebsaj rruge n\u00eb njoftimet tua t\u00eb tjera. \u00c7do verifikim i besueshm\u00ebris\u00eb vet\u00ebm t\u00eb AS_PATH p\u00ebr njoftimet e tua t\u00eb krijuara n\u00eb fund do t\u00eb kaloj\u00eb.<\/p>\n<p>Ekzistojn\u00eb disa kufizime t\u00eb r\u00ebnd\u00ebsishme q\u00eb meritojn\u00eb p\u00ebrmendje. S\u00eb pari, n\u00eb rastin e filtrimit t\u00eb prefikseve nga ofruesi m\u00eb t\u00eb lart\u00eb, rrethimi juaj mund t\u00eb filtrohet p\u00ebrs\u00ebri (pavar\u00ebsisht nga AS_PATH i sakt\u00eb), n\u00ebse prefiksi nuk i p\u00ebrket konusit tuaj t\u00eb klientit t\u00eb vendosur te upstrimi. E dyta \u2014 nj\u00eb AS_PATH valide mund t\u00eb b\u00ebhet jo valide, n\u00ebse rrethimi i krijuar p\u00ebrcillet n\u00eb drejtim t\u00eb pap\u00ebrshtatsh\u00ebm, duke shkelur k\u00ebshtu politik\u00ebn e rrethimit. Dhe e fundit \u2014 \u00e7do rrethim me nj\u00eb prefiks q\u00eb shkel gjat\u00ebsi ROA mund t\u00eb konsiderohet i pavlefsh\u00ebm.<\/p>\n<h3>Incident<\/h3>\n<p>\nDisa jav\u00eb m\u00eb par\u00eb mor\u00ebm nj\u00eb ankes\u00eb nga nj\u00eb nga p\u00ebrdoruesit. Ne pam\u00eb rrethime me ASN origjinal dhe prefikse \/25, nd\u00ebrsa p\u00ebrdoruesi pretendonte se ato nuk i kishte njoftuar.<\/p>\n<p><code>TABLE_DUMP2|1554076803|B|xxx|265466|78.163.7.0\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.7.128\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.18.0\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.18.128\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.226.0\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.226.128\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.164.7.0\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.164.7.128\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<\/code><br \/>\n<i>Shembuj t\u00eb njoftimeve n\u00eb fillim t\u00eb prillit 2019<\/i><\/p>\n<p>NTT n\u00eb rrug\u00eb p\u00ebr prefiksin \/25 e b\u00ebn at\u00eb ve\u00e7an\u00ebrisht t\u00eb dyshimt\u00eb. Gjat\u00eb incidentit, LG NTT nuk dinte asgj\u00eb p\u00ebr k\u00ebt\u00eb rrug\u00eb. Pra, po, ndonj\u00eb ofrues po krijon nj\u00eb AS_PATH t\u00eb t\u00ebr\u00eb p\u00ebr k\u00ebto prefikse! Kontrollimi n\u00eb rrug\u00eb t\u00eb tjera lejon t\u00eb identifikohet nj\u00eb ASN e ve\u00e7ant\u00eb: AS263444. Duke par\u00eb rrug\u00ebt e tjera me k\u00ebt\u00eb sistem autonom, e gjet\u00ebm situat\u00ebn e m\u00ebposhtme:<\/p>\n<p><code>TABLE_DUMP2|1554076800|B|xxx|265466|1.6.36.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.38.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.23.143.0\/25|265466 262761 263444 22356 6762 9498 9730 45528|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.23.143.128\/25|265466 262761 263444 22356 6762 9498 9730 45528|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.24.0.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.24.128.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.26.0.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.26.128.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.64.96.0\/20|265466 262761 263444 6762 3491 4760|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.64.112.0\/20|265466 262761 263444 6762 3491 4760|IGP|xxx|0|0||NAG||<\/code><br \/>\n<i>Provoni t\u00eb merrni me mend se \u00e7far\u00eb nuk shkon k\u00ebtu<\/i><\/p>\n<p>Duket se dikush ka marr\u00eb nj\u00eb prefiks nga rruga, e ka ndar\u00eb at\u00eb n\u00eb dy pjes\u00eb dhe ka shpallur rrug\u00ebn me t\u00eb nj\u00ebjtin AS_PATH p\u00ebr k\u00ebto dy prefikse.<\/p>\n<p><code>TABLE_DUMP2|1554076800|B|xxx|263444|1.6.36.0\/23|263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|263444|1.6.38.0\/23|263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|61775|1.6.36.0\/23|61775 262761 263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|61775|1.6.38.0\/23|61775 262761 263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.36.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.38.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|28172|1.6.36.0\/23|28172 52531 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|28172|1.6.38.0\/23|28172 52531 263444 52320 9583|IGP|xxx|0|0||NAG||<\/code><br \/>\n<i>Shembuj rrug\u00ebsh p\u00ebr nj\u00eb nga \u00e7iftet e prefikseve t\u00eb ndara<\/i><\/p>\n<p>Shfaqen disa pyetje. A ka ndonj\u00ebher\u00eb dikush provuar n\u00eb praktik\u00eb k\u00ebt\u00eb lloj interceptimi? A ka dikush pranuar k\u00ebto rrug\u00eb? Cilat prefikse jan\u00eb prekur?<\/p>\n<p>K\u00ebtu fillon seria jon\u00eb e d\u00ebshtimeve dhe nj\u00eb raund tjet\u00ebr zhg\u00ebnjimi n\u00eb gjendjen aktuale t\u00eb sh\u00ebndetit t\u00eb Internetit.<\/p>\n<h3>Rruga e d\u00ebshtimeve<\/h3>\n<p>\nP\u00ebr \u00e7do gj\u00eb sipas rendit. Si mund t\u00eb p\u00ebrcaktojm\u00eb se cil\u00ebt rrug\u00ebzues kan\u00eb pranuar rrug\u00ebt e kapura dhe cilat trafik mund t\u00eb ridrejtohen q\u00eb sot? Ne menduam t\u00eb fillojm\u00eb me prefiksat \/25, sepse ato \"thjesht nuk mund t\u00eb ken\u00eb shp\u00ebrndarje globale\". Si\u00e7 mund ta hamend\u00ebsoni \u2014 ne gaboheshim shum\u00eb. Kjo metrik\u00eb doli t\u00eb ishte tep\u00ebr e zhurmshme dhe rrug\u00ebt me k\u00ebto prefikse mund t\u00eb shfaqen madje nga operator\u00ebt Tier-1. P\u00ebr shembull, NTT ka rreth 50 k\u00ebto prefikse q\u00eb ai shp\u00ebrndan te klient\u00ebt e vet. Nga ana tjet\u00ebr, kjo metrik\u00eb \u00ebsht\u00eb e dob\u00ebt, sepse k\u00ebto prefikse mund t\u00eb filtroren n\u00eb rast se operatori aplikon <noindex><a rel=\"nofollow\" href=\"http:\/\/bgpfilterguide.nlnog.net\/guides\/small_prefixes\/\">filtrimin e prefikseve t\u00eb vogla<\/a><\/noindex>, n\u00eb t\u00eb gjitha drejtimet. Prandaj, ky metod\u00eb nuk \u00ebsht\u00eb e p\u00ebrshtatshme p\u00ebr t\u00eb gjetur t\u00eb gjith\u00eb operator\u00ebt, t\u00eb cil\u00ebt trafik jan\u00eb ridrejtuar si pasoj\u00eb e nj\u00eb incidenti t\u00eb till\u00eb.<\/p>\n<p>Nj\u00eb ide tjet\u00ebr e mir\u00eb na dukej t\u00eb shikonim n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc6811\/\">POV<\/a><\/noindex>. Sidomos p\u00ebr itineraret me shp\u00ebrb\u00ebrje t\u00eb rregullit maxLength t\u00eb p\u00ebrkatsh\u00ebm t\u00eb ROA. K\u00ebshtu, mund t\u00eb gjejm\u00eb numrin e origjinave t\u00eb ndryshme ASN me statusin Invalid, t\u00eb cilat ishin t\u00eb dukshme nga AS-i p\u00ebrkat\u00ebs. Megjithat\u00eb, ka nj\u00eb \"problem t\u00eb vog\u00ebl\". Vlera mesatare (mediana dhe moda) e k\u00ebtij numri (numrit t\u00eb ndrysh\u00ebm ASN t\u00eb origjin\u00ebs) \u00ebsht\u00eb rreth 150 dhe, edhe n\u00ebse filtrojm\u00eb prefixet e vogla, ajo do t\u00eb mbetet mbi 70. Kjo situat\u00eb ka nj\u00eb shpjegim t\u00eb thjesht\u00eb: ka vet\u00ebm disa operator\u00eb q\u00eb tashm\u00eb aplikojn\u00eb filtra ROA me politik\u00ebn \"t\u00eb largojn\u00eb itineraret Invalid\" n\u00eb pik\u00ebt hyr\u00ebse, prandaj, kudo q\u00eb t\u00eb shfaqet nj\u00eb itinerar me shkelje ROA n\u00eb bot\u00ebn reale, ai mund t\u00eb p\u00ebrhapet n\u00eb t\u00eb gjitha drejtat.<\/p>\n<p>Qasjet e fundit lejojn\u00eb t\u00eb gjejm\u00eb operator\u00ebt q\u00eb pan\u00eb incidentin ton\u00eb (pasi ishte mjaft i madh), por n\u00eb p\u00ebrgjith\u00ebsi ato jan\u00eb t\u00eb paperdorura. Mir\u00eb, por a mund t\u00eb gjejm\u00eb sulmuesin? Cilat jan\u00eb karakteristikat e p\u00ebrgjithshme t\u00eb till\u00eb manipulimi AS_PATH? Ka disa supozime baz\u00eb:<\/p>\n<ul>\n<li>Prefiksi nuk ishte par\u00eb m\u00eb par\u00eb;<\/li>\n<li>Origjina ASN (kujtes\u00eb: ASN-i i par\u00eb n\u00eb AS_PATH) \u00ebsht\u00eb valide;<\/li>\n<li>ASN i fundit n\u00eb AS_PATH \u00ebsht\u00eb ASN i sulmuesit (n\u00eb rast se fqinj i tij kontrollon ASN-n\u00eb e fqinjit n\u00eb t\u00eb gjitha rrug\u00ebt hyr\u00ebse);<\/li>\n<li>Sulmi vjen nga nj\u00eb ofrues.<\/li>\n<\/ul>\n<p>\nN\u00ebse t\u00eb gjitha supozimet jan\u00eb t\u00eb sakta, ASN-ja e sulmuesit (p\u00ebrve\u00e7 ASN-s\u00eb origjinare) do t\u00eb paraqitet n\u00eb t\u00eb gjitha rrug\u00ebt e gabuara dhe k\u00ebshtu kjo \u00ebsht\u00eb nj\u00eb \"pik\u00eb kritike\". Midis grabit\u00ebsve t\u00eb v\u00ebrtet\u00eb ishte edhe AS263444, megjith\u00ebse kishte dhe t\u00eb tjer\u00eb. Edhe kur ne p\u00ebrjashtuam rrug\u00ebt e incidentit nga shqyrtimi. Pse? Pika kritike mund t\u00eb mbetet kritike edhe p\u00ebr rrug\u00ebt e sakta. Ajo mund t\u00eb jet\u00eb si rezultat i lidhshm\u00ebris\u00eb s\u00eb dob\u00ebt n\u00eb ndonj\u00eb rajon, ose e kufizimeve t\u00eb bindshm\u00ebris\u00eb son\u00eb.<\/p>\n<p>Si rezultat: ka nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb zbuluar sulmuesin, por vet\u00ebm n\u00ebse p\u00ebrmbushen t\u00eb gjitha kushtet e p\u00ebrmendura m\u00eb lart dhe vet\u00ebm kur kapja \u00ebsht\u00eb mjaft e madhe p\u00ebr t\u00eb kaluar kufijt\u00eb e monitorimit. N\u00ebse disa nga k\u00ebto faktor\u00eb nuk respektohen, a mund t\u00eb identifikojm\u00eb prefikset q\u00eb jan\u00eb d\u00ebmtuar nga nj\u00eb kapje t\u00eb till\u00eb? P\u00ebr operator\u00eb t\u00eb caktuar \u2014 po.<\/p>\n<p>Kur nj\u00eb sulmues krijon nj\u00eb rrug\u00eb m\u00eb specifike, ky prefiks nuk shpallet nga pronari i v\u00ebrtet\u00eb. N\u00eb rast se keni nj\u00eb list\u00eb dinamike t\u00eb t\u00eb gjith\u00eb prefikseve t\u00eb tij, at\u00ebher\u00eb krijohet mund\u00ebsia p\u00ebr t\u00eb b\u00ebr\u00eb krahasimin dhe p\u00ebr t\u00eb gjetur rrug\u00ebt e deformuara m\u00eb specifike. Ne e mbledhim k\u00ebt\u00eb list\u00eb prefikse p\u00ebrmes seancave tona BGP, pasi na transmetohet jo vet\u00ebm lista e plot\u00eb e rrug\u00ebve q\u00eb operatori po sheh tani, por edhe lista e t\u00eb gjith\u00eb prefikseve q\u00eb ai d\u00ebshiron t\u00eb shpall\u00eb n\u00eb bot\u00eb. Fatkeq\u00ebsisht, aktualisht ka disa dhjet\u00ebra p\u00ebrdorues Radar, q\u00eb nuk e kryejn\u00eb k\u00ebt\u00eb pjes\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb sakt\u00eb. N\u00eb koh\u00ebt n\u00eb vijim do t'i njoftojm\u00eb ata dhe do t\u00eb p\u00ebrpiqemi t\u00eb zgjidhim k\u00ebt\u00eb problem. T\u00eb tjer\u00ebt mund t\u00eb bashkohen me sistemin ton\u00eb t\u00eb monitorimit tani.<\/p>\n<p>N\u00ebse kthehemi te incidenti fillestar, si sulmuesi, ashtu edhe zona e shp\u00ebrndarjes u zbuluan nga ne p\u00ebrmes k\u00ebrkimit t\u00eb pikave kritike. \u00cbsht\u00eb e \u00e7uditshme, por AS263444 shp\u00ebrndante rrug\u00eb t\u00eb falsifikuara vet\u00ebm p\u00ebr disa nga klient\u00ebt e tij. Megjithat\u00eb, ka nj\u00eb \u00e7\u00ebshtje akoma m\u00eb t\u00eb \u00e7uditshme.<\/p>\n<p><code>BGP4MP|1554905421|A|xxx|263444|178.248.236.0\/24|263444 6762 197068|IGP|xxx|0|0|13106:12832 22356:6453 65444:20000|NAG||<br \/>\nBGP4MP|1554905421|A|xxx|263444|178.248.237.0\/24|263444 6762 197068|IGP|xxx|0|0|13106:12832 22356:6453 65444:20000|NAG||<\/code><br \/>\n<i>Nj\u00eb shembull i fundit i p\u00ebrpjekjes p\u00ebr t\u00eb kapur hap\u00ebsir\u00ebn ton\u00eb adresuese<\/i><\/p>\n<p>Kur u krijuan more specific p\u00ebr prefixet tona, u p\u00ebrdor nj\u00eb AS_PATH i krijuar ve\u00e7mas. Megjithat\u00eb, ky AS_PATH nuk mund t\u00eb merrej nga asnj\u00eb nga rrug\u00ebt tona t\u00eb m\u00ebparshme. Ne madje nuk kemi lidhje me AS6762. Shikojm\u00eb n\u00eb rrug\u00eb t\u00eb tjera n\u00eb incident: disa prej tyre kishin nj\u00eb AS_PATH t\u00eb v\u00ebrtet\u00eb, q\u00eb ishte p\u00ebrdorur m\u00eb par\u00eb, dhe disa t\u00eb tjera - jo, edhe n\u00ebse dukeshin si t\u00eb v\u00ebrtet\u00eb. Ndryshimi i m\u00ebtejsh\u00ebm i AS_PATH nuk ka asnj\u00eb kuptim praktik, pasi n\u00eb \u00e7do rast trafiku do t\u00eb ridrejtohej te sulmuesi, por rrug\u00ebt me \"AS_PATH t\u00eb err\u00ebt\" mund t\u00eb filtrohen nga ASPA ose ndonj\u00eb mekaniz\u00ebm tjet\u00ebr kontrolli. K\u00ebtu po mendojm\u00eb p\u00ebr motivimin e grabit\u00ebsit. Tani na mungojn\u00eb t\u00eb dh\u00ebna p\u00ebr t\u00eb pretenduar se ky incident ishte nj\u00eb sulm i planifikuar. Sidoqoft\u00eb - \u00ebsht\u00eb e mundur. Le t\u00eb provojm\u00eb t\u00eb imagjinojm\u00eb nj\u00eb situat\u00eb, edhe pse hipotezike, por potencialisht shum\u00eb reale.<\/p>\n<h3>Sulmi ideal<\/h3>\n<p>\n\u00c7far\u00eb kemi? Supozoni se jeni nj\u00eb ofrues kalimi, q\u00eb transmeton rrug\u00ebt p\u00ebr klient\u00ebt tuaj. N\u00ebse klient\u00ebt tuaj kan\u00eb nj\u00eb prani t\u00eb shumt\u00eb (multihome), at\u00ebher\u00eb do t\u00eb merrni vet\u00ebm nj\u00eb pjes\u00eb t\u00eb trafikut t\u00eb tyre. Por sa m\u00eb shum\u00eb trafik \u2014 aq m\u00eb shum\u00eb t\u00eb ardhura. Prandaj, n\u00ebse filloni t\u00eb njoftoni prefiksat e n\u00ebnrrjet\u00ebve t\u00eb k\u00ebtyre rrug\u00ebve t\u00eb nj\u00ebjt\u00eb me AS_PATH-in e nj\u00ebjt\u00eb, do t\u00eb merrni pjes\u00ebn tjet\u00ebr t\u00eb trafikut t\u00eb tyre. Si pasoj\u00eb, do t\u00eb keni pjes\u00ebn tjet\u00ebr t\u00eb parave.<\/p>\n<p>A do t'i ndihmoj\u00eb k\u00ebtu ROA? Ndoshta, po, n\u00ebse vendosni t\u00eb braktisni plot\u00ebsisht p\u00ebrdorimin <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-sidrops-rpkimaxlen\/\">maxLength<\/a><\/noindex>. P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb ekstremisht e pap\u00ebrshtatshme t\u00eb keni regjistrime ROA me prefiks t\u00eb mbivendosur. P\u00ebr disa operator\u00eb, k\u00ebto kufizime jan\u00eb t\u00eb papranueshme.<\/p>\n<p>Duke shqyrtuar mekanizmat e tjer\u00eb t\u00eb sigurimit t\u00eb rrug\u00ebtimit, n\u00eb k\u00ebt\u00eb rast ASPA gjithashtu nuk do ndihmoj\u00eb (sepse p\u00ebrdoret AS_PATH nga ruta e lejuar). BGPSec \u00ebsht\u00eb ende nj\u00eb mund\u00ebsi e pap\u00ebrshtatshme p\u00ebr shkak t\u00eb shkall\u00ebs s\u00eb ul\u00ebt t\u00eb pranimit dhe mund\u00ebsis\u00eb p\u00ebr sulme downgrade.<\/p>\n<p>Pra, kemi nj\u00eb p\u00ebrfitim t\u00eb qart\u00eb p\u00ebr sulmuesin dhe munges\u00eb t\u00eb siguris\u00eb. Nj\u00eb kombim i shk\u00eblqyer!<\/p>\n<h3>Cila \u00ebsht\u00eb tregu q\u00eb t\u00eb ndihmoj\u00eb?<\/h3>\n<p>\nHapi dhe hapi m\u00eb radikal \u00ebsht\u00eb rishikimi i politik\u00ebs tuaj aktuale t\u00eb ruteve. Ndani hap\u00ebsir\u00ebn tuaj adresare n\u00eb cop\u00ebza sa m\u00eb t\u00eb vogla (pa mbivendosje) q\u00eb d\u00ebshiron t\u00eb shpallni. N\u00ebnshkruani ROA vet\u00ebm p\u00ebr to, pa p\u00ebrdorur parametrin maxLength. N\u00eb k\u00ebt\u00eb rast, POV aktual mund t'ju shp\u00ebtoj\u00eb nga nj\u00eb sulm t\u00eb till\u00eb. Megjithat\u00eb, p\u00ebrs\u00ebri, p\u00ebr disa operatore nj\u00eb qasje e till\u00eb nuk \u00ebsht\u00eb e arsyeshme p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb p\u00ebrjashtuar t\u00eb ruteve m\u00eb specifike. T\u00eb gjitha problemet e gjendjes aktuale t\u00eb ROA dhe objekteve t\u00eb rutes do t\u00eb p\u00ebrshkruhen n\u00eb nj\u00eb nga materialet tona t\u00eb ardhshme.<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb mundohemi t\u00eb monitorojm\u00eb interceptime t\u00eb ngjashme. P\u00ebr k\u00ebt\u00eb, na nevojitet informacion i sakt\u00eb rreth prefikseve tuaja. k\u00ebshtu q\u00eb, n\u00ebse vendosni nj\u00eb sesion BGP me kolektorin ton\u00eb dhe na jepni informacion rreth dukshm\u00ebris\u00eb suaj n\u00eb Internet, ne mund t\u00eb gjejm\u00eb fush\u00ebn e shp\u00ebrndarjes dhe p\u00ebr incidente t\u00eb tjera. P\u00ebr ata q\u00eb nuk jan\u00eb ende t\u00eb lidhur me sistemin ton\u00eb t\u00eb monitorimit, fillimisht na mjafton nj\u00eb list\u00eb rrug\u00ebsh vet\u00ebm p\u00ebr prefiksin tuaj. N\u00ebse keni vendosur nj\u00eb sesion me ne, ju lutemi kontrolloni q\u00eb t\u00eb gjitha rrug\u00ebt tuaja t\u00eb jen\u00eb d\u00ebrguar. Fatkeq\u00ebsisht, \u00ebsht\u00eb e nevojshme t\u00eb kujtohet k\u00ebt\u00eb, pasi disa operator\u00eb harrojn\u00eb nj\u00eb ose dy prefikse dhe k\u00ebshtu krijojn\u00eb pengesa p\u00ebr metodologjit\u00eb tona t\u00eb k\u00ebrkimit. N\u00ebse b\u00ebhet gjith\u00e7ka si\u00e7 duhet, do t\u00eb kemi t\u00eb dh\u00ebna t\u00eb besueshme p\u00ebr prefiksin tuaj, q\u00eb n\u00eb t\u00eb ardhmen do t\u00eb ndihmojn\u00eb n\u00eb identifikimin dhe detektimin automatik t\u00eb k\u00ebtij (dhe llojeve t\u00eb tjera) t\u00eb interceptimeve t\u00eb trafik p\u00ebr hap\u00ebsir\u00ebn tuaj adres\u00eb.<\/p>\n<p>N\u00ebse n\u00eb koh\u00eb reale keni m\u00ebsuar p\u00ebr nj\u00eb interceptim t\u00eb till\u00eb t\u00eb trafikut tuaj, mund t\u00eb p\u00ebrpiqeni t\u00eb kund\u00ebrshtoni vet\u00eb. Qasja e par\u00eb \u2014 t\u00eb njoftoni rrug\u00ebt me k\u00ebto more specific prefikse vet\u00eb. N\u00eb rast t\u00eb nj\u00eb sulmi t\u00eb ri ndaj k\u00ebtyre prefikseve \u2014 p\u00ebrs\u00ebritni.<\/p>\n<p>Qasja e dyt\u00eb \u2014 t\u00eb nd\u00ebshkoni sulmuesin dhe ata p\u00ebr t\u00eb cil\u00ebt ai \u00ebsht\u00eb nj\u00eb pik\u00eb kritike (p\u00ebr rrug\u00eb t\u00eb mira), duke i prer\u00eb aksesin e rrug\u00ebve tuaja te sulmuesi. Kjo mund t\u00eb b\u00ebhet duke shtuar ASN e sulmuesit n\u00eb AS_PATH e rrug\u00ebve tuaja t\u00eb vjetra dhe k\u00ebshtu t'i b\u00ebni ata t\u00eb shmangin k\u00ebt\u00eb AS, duke p\u00ebrdorur mekanizmin e integruar t\u00eb zb discovery t\u00eb cikleve n\u00eb BGP. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/en\/company\/qrator\/blog\/431244\/\">p\u00ebr mir\u00ebqenien tuaj<\/a><\/noindex>.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/qrator\/blog\/447876\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 (hjjack) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 RIPE. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0431\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0430 \u0447\u0438\u0441\u0442\u0443\u044e \u0432\u043e\u0434\u0443. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0442\u043e \u0442\u0430\u043a\u043e\u0439 LIR, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31415","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 (hjjack) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 RIPE. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0431\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0430 \u0447\u0438\u0441\u0442\u0443\u044e \u0432\u043e\u0434\u0443. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0442\u043e \u0442\u0430\u043a\u043e\u0439 LIR, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u0441\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u043b\u043e\u0445\u043e \u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 (hjjack) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 RIPE. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0431\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0430 \u0447\u0438\u0441\u0442\u0443\u044e \u0432\u043e\u0434\u0443. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0442\u043e \u0442\u0430\u043a\u043e\u0439 LIR, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:41:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:41:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47E gjith\u00eb situata \u00ebsht\u00eb tep\u00ebr e keqe ose nj\u00eb lloj i ri i nd\u00ebrhyrjes n\u00eb trafik | ProHoster","description":"M\u00eb 13 mars, grupi punues t\u00eb RIPE p\u00ebr luftimin e keqp\u00ebrdorimeve mori propozimin q\u00eb t\u00eb shqyrtoj\u00eb BGP-n\u00eb e nd\u00ebrhyrjes (hjjack) si nj\u00eb shkelje t\u00eb politik\u00ebs s\u00eb RIPE. N\u00ebse propozimi miratohet, ofruesi i internetit, i sulmuar p\u00ebrmes nd\u00ebrhyrjes n\u00eb trafik, do t\u00eb kishte mund\u00ebsin\u00eb t\u00eb d\u00ebrgonte nj\u00eb k\u00ebrkes\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb nxjerr\u00eb n\u00eb pah keqb\u00ebr\u00ebsin. N\u00ebse grupi i ekspert\u00ebve mbledh mjaft prova p\u00ebrkrah\u00ebse, at\u00ebher\u00eb nj\u00eb LIR i till\u00eb, q\u00eb \u00ebsht\u00eb burimi i BGP-s\u00eb s\u00eb nd\u00ebrhyrjes,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0441\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u043b\u043e\u0445\u043e \u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 (hjjack) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 RIPE. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0431\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0430 \u0447\u0438\u0441\u0442\u0443\u044e \u0432\u043e\u0434\u0443. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0442\u043e \u0442\u0430\u043a\u043e\u0439 LIR, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:08+00:00","article:modified_time":"2019-10-31T18:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31415","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:04:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:17:25","updated":"2026-01-21 06:04:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31415"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31415\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}