{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"Nj\u00eb rrjedhje e rrug\u00ebve BGP shkaktoi nj\u00eb nd\u00ebrprerje masive t\u00eb lidhjes n\u00eb internet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Cloudflare publikoi<\/a><\/noindex> raporti p\u00ebr incidentin e djesh\u00ebm, q\u00eb rezultoi n\u00eb tre or\u00eb<\/a><\/noindex> nga 13:34 deri n\u00eb 16:26 (MSK) u v\u00ebrejt\u00ebn probleme me aksesin n\u00eb shum\u00eb burime n\u00eb rrjetin global, p\u00ebrfshir\u00eb infrastruktur\u00ebn Cloudflare, Facebook, Akamai, Apple, Linode dhe Amazon AWS. Problemet n\u00eb infrastruktur\u00ebn Cloudflare, e cila ofron CDN p\u00ebr 16 milion\u00eb faqe, u v\u00ebrejt\u00ebn<\/a><\/noindex> nga 14:02 deri n\u00eb 16:02 (MSK). Sipas vler\u00ebsimeve nga Cloudflare, gjat\u00eb d\u00ebshtimit u regjistrua nj\u00eb humbje prej rreth 15% t\u00eb trafikut global. <\/p>\n

Problemi u shkaktua<\/a><\/noindex> nga rrjedhja e rrug\u00ebve p\u00ebrmes BGP, n\u00eb t\u00eb cil\u00ebn rreth 20 mij\u00eb prefiksesh p\u00ebr 2400 rrjete u ridrejtuar gabimisht. Burimi i rrjedhjes ishte ofruesi DQE Communications, i cili p\u00ebrdori softuerin BGP Optimizer<\/a><\/noindex> p\u00ebr optimizimin e rrug\u00ebzimit. BGP Optimizer ndan prefikset IP n\u00eb m\u00eb t\u00eb vogla, p\u00ebr shembull, ndan 104.20.0.0\/20 n\u00eb 104.20.0.0\/21 dhe 104.20.8.0\/21, dhe, si pasoj\u00eb, DQE Communications mbajti nj\u00eb num\u00ebr t\u00eb madh rrug\u00ebsh specifike nga ana e saj, q\u00eb p\u00ebrkufizuan rrug\u00ebt m\u00eb t\u00eb p\u00ebrgjithshme (dmth. p\u00ebr rrug\u00ebt m\u00eb t\u00eb p\u00ebrgjithshme n\u00eb Cloudflare p\u00ebrdoroheshin rrug\u00eb m\u00eb t\u00eb granuluara p\u00ebr subnetet specifike t\u00eb Cloudflare).<\/p>\n

K\u00ebto rrug\u00eb t\u00eb pik\u00ebs jan\u00eb njoftuar nj\u00ebrit nga klient\u00ebt (Allegheny Technologies, AS396531), i cili gjithashtu kishte nj\u00eb lidhje p\u00ebrmes nj\u00eb ofruesi tjet\u00ebr. Allegheny Technologies e transmetoi rrug\u00ebn e marr\u00eb te nj\u00eb ofrues tjet\u00ebr transit (Verizon, AS701). P\u00ebr shkak t\u00eb munges\u00ebs s\u00eb filtrimit t\u00eb duhur t\u00eb njoftimeve BGP dhe kufizimit t\u00eb numrit t\u00eb prefikseve, Verizon e mori k\u00ebt\u00eb njoftim dhe e transmetoi 20,000 prefikse t\u00eb marra p\u00ebr pjes\u00ebn tjet\u00ebr t\u00eb internetit. Prefikset e pap\u00ebrshtatshme p\u00ebr shkak t\u00eb granularitetit t\u00eb tyre u perceptuan si m\u00eb prioritare, pasi nj\u00eb rrug\u00eb specifike ka nj\u00eb prioritet m\u00eb t\u00eb lart\u00eb se sa t\u00eb p\u00ebrgjithshmet. <\/p>\n

\"Nj\u00eb<\/a><\/noindex><\/center><\/p>\n

Si rezultat, trafiku p\u00ebr shum\u00eb rrjete t\u00eb m\u00ebdha filloi t\u00eb drejtohej p\u00ebrmes Verizon te ofruesi i vog\u00ebl DQE Communications, q\u00eb nuk ishte n\u00eb gjendje t\u00eb p\u00ebrballonte fluksin e papritur, duke \u00e7uar n\u00eb kolaps (efekti \u00ebsht\u00eb krahasues me at\u00eb, sikur nj\u00eb pjes\u00eb e nj\u00eb autostrade t\u00eb ngarkuar t\u00eb z\u00ebvend\u00ebsohej me nj\u00eb rrug\u00eb t\u00eb vog\u00ebl). <\/p>\n

P\u00ebr t\u00eb parandaluar ndodhi t\u00eb tilla n\u00eb t\u00eb ardhmen
\nkonsiderohet<\/a><\/noindex>:<\/p>\n