{"id":35641,"date":"2019-10-31T22:05:29","date_gmt":"2019-10-31T19:05:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\/"},"modified":"2019-10-31T22:05:29","modified_gmt":"2019-10-31T19:05:29","slug":"utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","title":{"rendered":"BGP-ruttl\u00e4ckage ledde till massiva connectivity-problem p\u00e5 internet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Cloudflare <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/how-verizon-and-a-bgp-optimizer-knocked-large-parts-of-the-internet-offline-today\/\">publicerade<\/a><\/noindex> rapport om g\u00e5rdagens h\u00e4ndelse, som ledde till <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/bgpmon\/status\/1143149817473847296\">tre timmar<\/a><\/noindex> fr\u00e5n 13:34 till 16:26 (MSK) uppstod problem med \u00e5tkomst till m\u00e5nga resurser p\u00e5 det globala n\u00e4tverket, inklusive infrastrukturen Cloudflare, Facebook, Akamai, Apple, Linode och Amazon AWS. Problem i Cloudflare-infrastrukturen, som tillhandah\u00e5ller CDN f\u00f6r 16 miljoner webbplatser, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflarestatus.com\/incidents\/46z55mdhg0t5\">observerades<\/a><\/noindex> fr\u00e5n 14:02 till 16:02 (MSK). Enligt Cloudflare uppskattades det att det under avbrottet f\u00f6rlorades cirka 15% av den globala trafiken. <\/p>\n<p>Problemet var <noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101590.html\">orsakas<\/a><\/noindex> en l\u00e4cka av rutter genom BGP, d\u00e4r omkring 20 000 prefix f\u00f6r 2400 n\u00e4tverk felaktigt dirigerades om. K\u00e4llan till l\u00e4ckan var DQE Communications, som anv\u00e4nde programvaran <noindex><a rel=\"nofollow\" href=\"https:\/\/www.noction.com\/intelligent_routing_platform\/traffic-routing-optimization\">BGP Optimizer<\/a><\/noindex> f\u00f6r att optimera routing. BGP Optimizer delar IP-prefixen i mindre delar, till exempel delas 104.20.0.0\/20 upp i 104.20.0.0\/21 och 104.20.8.0\/21, och konsekvent h\u00f6ll DQE Communications ett stort antal specifika rutter p\u00e5 sin sida, som omdefinierade mer allm\u00e4nna rutter (dvs. ist\u00e4llet f\u00f6r att generella rutter till Cloudflare anv\u00e4nde man mer detaljerade rutter till specifika underm n\u00e4tverk av Cloudflare).<\/p>\n<p>Dessa specifika rutter annonserades till en av kunderna (Allegheny Technologies, AS396531), som ocks\u00e5 hade anslutning via en annan leverant\u00f6r. Allegheny Technologies vidarebefordrade de mottagna rutterna till en annan transitleverant\u00f6r (Verizon, AS701). P\u00e5 grund av bristande filtrering av BGP-annonser och begr\u00e4nsning p\u00e5 antalet prefix, tog Verizon upp denna annons och vidarebefordrade de 20 000 prefixen till resten av internet. Felaktiga prefix, p\u00e5 grund av sin granularitet, uppfattades som mer prioriterade d\u00e5 en specifik rutt har h\u00f6gre prioritet \u00e4n en allm\u00e4n. <\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak2-2.png\"><img decoding=\"async\" alt=\"BGP-ruttl\u00e4ckage ledde till massiva connectivity-problem p\u00e5 internet\" src=\"\/wp-content\/uploads\/2019\/06\/7b91b949afde7526f989c00666f7fee0.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Som resultat b\u00f6rjade trafiken f\u00f6r m\u00e5nga stora n\u00e4tverk att dirigera genom Verizon till den lilla leverant\u00f6ren DQE Communications, som inte var kapabel att hantera den pl\u00f6tsliga str\u00f6mmen, vilket ledde till en kollaps (effekten kan liknas vid att en del av en \u00f6verbelastad motorv\u00e4g ers\u00e4tts med en grusv\u00e4g).  <\/p>\n<p>F\u00f6r att f\u00f6rhindra liknande h\u00e4ndelser i framtiden<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/mailman.nanog.org\/pipermail\/nanog\/2019-June\/101589.html\">rekommenderas<\/a><\/noindex>:<\/p>\n<ul>\n<li class=\"l\"> Anv\u00e4nd <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47303\">verifiering<\/a><\/noindex> av annonser baserat p\u00e5 RPKI (BGP Origin Validation, till\u00e5ter mottagande av annonser endast fr\u00e5n n\u00e4tverks\u00e4gare);\n<li class=\"l\"> Begr\u00e4nsa det maximala antalet prefix som tas emot f\u00f6r alla EBGP-sessioner (inst\u00e4llningen maximum-prefix skulle omedelbart ha avvisat \u00f6verf\u00f6ringen av 20 000 prefix inom en session);\n<li class=\"l\"> Till\u00e4mpa filtrering baserat p\u00e5 IRR-registret (Internet Routing Registry, som definierar AS genom vilka rutten ska till\u00e5tas f\u00f6r angivna prefix);\n<li class=\"l\"> Anv\u00e4nda de rekommenderade inst\u00e4llningarna f\u00f6r routrar i RFC 8212 f\u00f6r att blockera som standard (\u2018default deny\u2019);\n<li class=\"l\"> Avsluta o\u00f6verv\u00e4gt anv\u00e4ndande av BGP-optimerare.\n<\/ul>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.cloudflare.com\/content\/images\/2019\/06\/leak3-2.png\"><img decoding=\"async\" alt=\"BGP-ruttl\u00e4ckage ledde till massiva connectivity-problem p\u00e5 internet\" src=\"\/wp-content\/uploads\/2019\/06\/2b2bb1fe713ee9e87987f57920116943.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50955\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432 \u0441 13:34 \u0434\u043e 16:26 (MSK) \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a\u043e \u043c\u043d\u043e\u0433\u0438\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 Cloudflare, Facebook, Akamai, Apple, Linode \u0438 Amazon AWS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 CDN \u0434\u043b\u044f 16 \u043c\u043b\u043d \u0441\u0430\u0439\u0442\u043e\u0432, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0441 14:02 \u0434\u043e 16:02 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35641","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:05:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 BGP-ruttl\u00e4ckor ledde till omfattande anslutningsavbrott p\u00e5 internet | ProHoster","description":"Cloudflare har publicerat en rapport om g\u00e5rdagen.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 BGP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c\u0443 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0451\u0442 \u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/utechka-bgp-marshrutov-privela-k-massovomu-narusheniyu-svyaznosti-v-internete","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:29+00:00","article:modified_time":"2019-10-31T19:05:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35641","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 00:09:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:58:30","updated":"2026-01-22 00:09:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/35641","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=35641"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/35641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/26701"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=35641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=35641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=35641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}