ProHoster > blog > habari za mtandao > Makadirio ya migogoro ya ushirika kwenye muunganisho wa mtandao

Makadirio ya migogoro ya ushirika kwenye muunganisho wa mtandao

Makadirio ya migogoro ya ushirika kwenye muunganisho wa mtandao
Mzozo wa kibiashara ulizuka Juni 10.06.2019, XNUMX kutokana na kuongezeka kwa gharama ya kutuma SMS kwa watumiaji wa mtandao wa VimpelCom na Mail.RU Group. Kama jibu, Kikundi cha Mail.RU kiliacha "kuhudumia" chaneli za moja kwa moja za IP za Urusi kuelekea mtandao wa VimpelCom.

Chini ni uchambuzi mfupi wa hali hiyo kutoka kwa mtazamo wa mhandisi wa mtandao.

Update: 14.06.2019/18/45 XNUMX:XNUMX - msisitizo juu ya njia za Kirusi kwa mtandao wa VimpelCom, hitimisho kusahihishwa, maelezo yameongezwa Sergei Kubasov (CIO VKontakte).
Update: 14.06.2019/19/48 XNUMX:XNUMX - maelezo yameongezwa ya mbinu ya kuzuia kuenea kwa njia kwenye njia "fupi" ya Kirusi kupitia Rostelecom, MTS, RETN.NET..


Utangulizi:
VimpelCom ina mfumo wa uhuru AS3216, wengine wote (8402 - mtandao wa nyumbani, 16345 - mtandao wa rununu) ziko nyuma ya 3216.

Mail.RU Group - mifumo ya uhuru AS47541, AS47542 na AS47764. Jenereta kuu ya maudhui ni 47542, kinachojulikana. CDN VKONTAKTE (sinema, muziki). Mifumo yote ya uhuru ni huru kutoka kwa kila mmoja (kutoka kwa nafasi ya mfumo wa nje wa uhuru).

Kwanza, hebu tuangalie hali kutoka kwa mtandao wa VimpelCom. Kwa hili itatusaidia Kuangalia kioo Vimpelcom.

Hebu tuangalie mfumo wa kwanza wa uhuru - AS47541.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394342
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

AS-PATH ina mifumo miwili ya uhuru - 2914 (NTT) na 47541 (VKONTAKTE-SPB-AS).
Metriki ya localpref imewekwa kuwa 87, ambayo kulingana na maelezo katika RIPE DB ya kitu AS3216 inalingana na utazamaji wa kimataifa.

...
maoni: Njia za rika za kimataifa hupata upendeleo wa ndani katika
maoni: kati ya 81-89.
...

Taarifa sawa imethibitishwa na jumuiya 3216:3000 na 3216:3103 (chanzo: RIPE DB kwa AS3216):

...
maoni: 3216:3000 Imepokelewa kutoka kwa kiungo cha kimataifa au rika, haswa:
...
maelezo: 3216:3103 AMS-IX
...

Hiyo ni, VimpelCom inaona njia ya VKontakte kupitia makutano ya Uropa.

Hebu tuangalie mtandao mwingine wa VKontakte - 47542 (VKONTAKTE-MSK-CDN-AS).

Kila kitu ni sawa.

 2914 47541
    79.104.32.251 (metric 10500) (79.104.32.251)
      Origin IGP, metric 30, localpref 87, valid, internal, best, group-best, import-candidate, import suspect
      Received Path ID 0, Local Path ID 1, version 2865394338
      Community: 2914:410 2914:1214 2914:2213 2914:3200 3216:3000 3216:3103 47541:1 47541:40000 47541:50078

Vipi kuhusu Mail.ru yenyewe? Wacha tuangalie AS47764 (mailru-as).

 3356 47764
    194.67.0.215 (metric 10501) (194.67.0.215)
      Origin IGP, metric 0, localpref 77, valid, internal, best, group-best, import-candidate
      Received Path ID 0, Local Path ID 1, version 2867605667
      Community: 3216:3000 3216:3007 3356:2 3356:22 3356:100 3356:123 3356:519 3356:2094 47764:1 47764:40000 47764:50077

VimpelCom inaona Mail.ru kupitia as3356 (uplink Level3, Tier1 operator). Habari hii imethibitishwa na localpref 77:

...
maoni: Njia za Uplink hupata upendeleo wa ndani katika anuwai ya 71-79.
maoni: Sasisho la Mwisho: Februari 2012…

na jumuiya (3216:3000 na 3216:3007):

...
maoni: 3216:3000 Imepokelewa kutoka kwa kiungo cha kimataifa au rika, haswa:
...
maoni: 3216:3007 Level 3 Mawasiliano
...

Kutoka kwa habari iliyopokelewa ni wazi kwamba trafiki kutoka kwa mtandao wa VimpelCom hadi VKontakte na MailRu inasambazwa kupitia makutano ya Ulaya kulingana na njia zilizopokelewa kupitia itifaki ya BGP. Hakuna njia mbadala kupitia miunganisho ya ndani ya Kirusi katika Kioo cha Kuangalia. Hakuna hatua zilizopatikana za kuelekeza upya trafiki kwa njia bandia kupitia njia mbaya zaidi.

Je! Kikundi cha Mail.ru kinaonaje mtandao wa VimpelCom?
Hebu kuchukua faida Kuangalia Kioo na Mailov.

Kutoka kwa vipanga njia kutoka AS47764 (mailru-as):

  Path #6: Received by speaker 0
  Advertised to peers (in unique update groups):
    188.93.60.188   
  1299 1299 1273 3216 3216
    217.20.147.250 (metric 100) from 217.20.147.250 (217.20.147.253)
      Origin IGP, metric 500, localpref 200, valid, internal, best, group-best
      Received Path ID 0, Local Path ID 0, version 1172721494
      Community: 1299:20000 47764:701 47764:41100 47764:41108 47764:50077

AS-PATH ina AS1299 (Telia, Tier1 operator, Mail.RU uplink) na as1273 (Vodafon, Tier1 operator, VimpelCom uplink).

LocalPreference 200 ndio kiwango cha miunganisho ya nje ya Mail.ru (https://net.mail.ru/bgp.html), na MED 500 inalingana na kila kitu ambacho hakijapokelewa kutoka kwa unganisho la moja kwa moja, sio kutoka kwa IX, sio kutoka kwa marafiki. .

Lakini kwa nini hakuna njia za ndani kupitia waendeshaji wa mawasiliano ya Kirusi ???
Zipo, lakini kipaumbele chao ni "isiyo ya kawaida"!
Hii ndio njia kupitia Rostelecom (as12389):

  Path #1: Received by speaker 0
  Not advertised to any peer
  12389 3216
    46.61.178.149 from 46.61.178.149 (213.59.207.79)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 12389:5 12389:6 12389:1100 12389:1105 12389:1277 47764:701 47764:41100 47764:41104 47764:50077
      Origin-AS validity: not-found

Hapa kupitia Megafon (as31133):

  Path #2: Received by speaker 0
  Not advertised to any peer
  31133 3216
    78.25.77.41 from 78.25.77.41 (10.222.253.97)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 31133:300 31133:46170 47764:701 47764:41100 47764:41105 47764:50077
      Origin-AS validity: not-found

Hapa kupitia RETN.NET:

  Path #3: Received by speaker 0
  Not advertised to any peer
  9002 9002 3216
    87.245.253.24 from 87.245.253.24 (87.245.225.1)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 9002:9002 9002:64667 47764:701 47764:41100 47764:41101 47764:50077
      Origin-AS validity: not-found

Na hata kupitia MTS!

  Path #5: Received by speaker 0
  Not advertised to any peer
  8359 3216
    212.188.61.105 from 212.188.61.105 (195.34.52.77)
      Origin IGP, metric 500, localpref 199, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 8359:200 8359:609 8359:5012 47764:701 47764:41100 47764:41103 47764:50077
      Origin-AS validity: not-found

Metric ya localpref kwa njia hizi za Kirusi haizingatiwi, yaani, njia ni mbaya zaidi ikilinganishwa na za kigeni!

Aidha, kuna marufuku kwa upande wa Mail.Ru Group usambazaji wa viambishi vyako kwa VimpelCom kupitia waendeshaji wa Urusi!

RETN.NET (http://lg.retn.net/):
Matangazo kutoka kwa Mail.RU Group yanaonyesha jumuiya 3216:65535.
Kuondolewa kwa LG RETN.NETinet.0: maeneo 762737, njia 1734826 (762708 hai, 222780 kushikilia, 277 zimefichwa)
94.100.176.0/20 (ingizo 1, 1 lilitangazwa)
*Upendeleo wa BGP: 170/-201
...
...
Njia ya AS: 47764 I
Njia ya AS: Imerekodiwa
Jumuiya: 3216:65535 9002:64667 9002:65530
...

VimpelCom haikubali njia zilizowekwa alama na jumuiya kama hiyo kwenye mtandao wake. Dondoo kutoka kwa RIPE DB juu ya AS3216:
...
remarks: Internal comminuties are assigned only internally.
remarks: They are in range 3216:0000-3216:4999 and 3216:6000-3216:65535
remarks: and are always deleted from incoming updates at the border
remarks: routers.
...
Kwa mwelekeo wa Rostelecom (http://lg.ip.rt.ru), Mail.RU Group inatoa njia sawa kutoka kwa jumuiya 12389:8350.
Kuondolewa kwa LG Rostelecom94.100.176.0/20 kupitia 217.107.65.1 kwenye eth0.9 [sr2 2019-06-13] * (100/?) [AS47764i]
Aina: BGP unicast univ
BGP.asili: IGP
BGP.as_njia: 47764
BGP.next_hop: 213.59.207.78
BGP.med: 0
BGP.local_pref: 850
BGP.jamii: (12389,1) (12389,1100) (12389,1105) (12389,1277) (12389,8350) (12389,8380) (47764,1) (47764,40000).
BGP.originator_id: 213.59.207.78
BGP.cluster_list: 95.167.88.79 95.167.88.49 95.167.88.17

Kulingana na maingizo ya RIPE DB ya kitu as12389, jumuiya hii inamaanisha "usitangaze kwa mtandao wa as3216":...
remarks: | 12389:835y When advertising to GoldenTelecom (AS3216) |
...
remarks: | ...y=0 - do not advertise |
...
Vile vile kuelekea MTS (http://lg.mtu.ru):Kuondolewa kwa LG MTSIngizo la jedwali la uelekezaji la BGP la 94.100.176.0/20, toleo la 161717219
Njia: (2 zinapatikana, bora #1, chaguo-msingi la jedwali)
Njia nyingi: eBGP
Imetangazwa kwa vikundi vya sasisho:
6
47764, (imepokelewa na kutumika)
195.34.52.77 (metric 16) kutoka 195.34.52.181 (195.34.52.181)
Asili IGP, metric 0, localpref 140, halali, ndani, bora zaidi
Jumuiya: 8359:2120 8359:2150 8359:5500 8359:55277
Mwanzilishi: 195.34.52.77, Orodha ya Nguzo: 83.59.83.59
47764, (imepokelewa na kutumika)
195.34.52.77 (metric 16) kutoka 195.34.52.182 (195.34.52.182)
Asili IGP, metric 0, localpref 140, halali, ndani
Jumuiya: 8359:2120 8359:2150 8359:5500 8359:55277
Mwanzilishi: 195.34.52.77, Orodha ya Nguzo: 83.59.2.77

Jumuiya 8359:2120 inamaanisha:...
remarks: 8359:212x when announcing to Sovam (Beeline)
...
remarks: x=0 - do not announce
...
Huwezi kuangalia matangazo ya Mail.RU Group katika mwelekeo wa Megafon - ya mwisho haina Glass ya Kuangalia.

Hebu tuangalie AS47541 (VKONTAKTE-SPB-AS).

Pato ni kubwa mno.

 Router: a9922-e-5
Command: show ip bgp 81.211.56.202


Last switch-over Thu Apr  5 04:25:09 2018: 1 year, 10 weeks, 6 hours, 9 minutes ago

Fri Jun 14 10:34:20.791 MSK
BGP routing table entry for 81.211.0.0/17
Versions:
  Process           bRIB/RIB  SendTblVer
  Speaker          913059757   913059757
Last Modified: May 21 05:20:38.536 for 1y03w
Paths: (6 available, best #4)
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  Path #1: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.235 (metric 31) from 87.240.191.235 (87.240.191.235)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #2: Received by speaker 0
  Not advertised to any peer
  1299 1273 3216 3216
    87.240.191.248 (metric 31) from 87.240.191.248 (87.240.191.248)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 1299:431 1299:4000 1299:20000 1299:20002 1299:20200 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41111 47541:50078
  Path #3: Received by speaker 0
  Not advertised to any peer
  174 6762 3216 3216
    87.240.191.249 (metric 31) from 87.240.191.249 (87.240.191.249)
      Origin IGP, metric 5000, localpref 150, valid, internal
      Received Path ID 0, Local Path ID 0, version 0
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
  Path #4: Received by speaker 0
  Advertised to update-groups (with more than one peer):
    0.2 
  Advertised to peers (in unique update groups):
    188.93.60.188   
  174 6762 3216 3216
    149.6.169.113 from 149.6.169.113 (38.28.1.236)
      Origin IGP, metric 5000, localpref 150, valid, external, best, group-best
      Received Path ID 0, Local Path ID 0, version 913059757
      Community: 174:21100 174:22005 47541:701 47541:41100 47541:41108 47541:50078
      Origin-AS validity: not-found
  Path #5: Received by speaker 0
  Not advertised to any peer
  1273 1273 3216 3216
    195.89.114.197 from 195.89.114.197 (195.2.1.107)
      Origin IGP, metric 5005, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 1273:12752 3216:2001 3216:2999 3216:4100 47541:701 47541:41100 47541:41110 47541:50078
      Origin-AS validity: not-found
  Path #6: Received by speaker 0
  Not advertised to any peer
  3356 3356 3216 3216 3216
    213.242.69.69 from 213.242.69.69 (4.69.177.130)
      Origin IGP, metric 5000, localpref 150, valid, external
      Received Path ID 0, Local Path ID 0, version 0
      Community: 3216:2001 3216:2999 3216:4100 3356:2 3356:22 3356:100 3356:123 3356:503 3356:2067 47541:701 47541:41100 47541:41107 47541:50078
      Origin-AS validity: not-found

AS-PATH inaelekeza kwa AS174 - Cogent (Mail.RU uplink, Tier1), kisha AS6762 - Telecom Italia (VimpelCom uplink). Upendeleo wa Mitaa ni 150 kila mahali, lakini hii inatumika kwa viungo vyote vya nje, bila kujali sera zilizoandikwa.

Hebu tuangalie AS47542 (VKONTAKTE-MSK-CDN-AS).

 Router: mx960-m9-0
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.222  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.251  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Na kutoka kwa router ya pili: 

 Router: mx960-m9-1
Command: op lg-sh-bgp prefix 81.211.56.202


0.0.0.0/0                LP:151       MED:        NH:87.240.191.224  AS path: 47541 I
Communities: 
Accepted Best

 
0.0.0.0/0                LP:151       MED:        NH:95.142.204.250  AS path: 47541 I
Communities: 
Accepted
Inactive-reason: Interior > Exterior > Exterior via Interior

Njia chaguo-msingi pekee (0.0.0.0/0). Hali hii ilielezewa na mfanyakazi wa Mail.RU Group uchoyo, ambayo ninamshukuru. Kwa kifupi: sehemu ya Moscow ya mtandao wa VKontakte ni sehemu ya caching (na sio kuzalisha), ambayo kazi yake ni kuongeza kasi ya upakiaji wa maudhui maarufu, yanayohitajika. Kutunza watumiaji, ndio.

Ikiwa hakuna njia ya mtandao fulani, basi mtandao huu hautumiwi na seva za caching. Hii inamaanisha kuwa uboreshaji wa kasi ya upakuaji haufanyi kazi, na watumiaji wanateseka. Lakini hapa tunahitaji kusisitiza kwamba watumiaji sio wetu tu, bali pia wale wa VimpelCom.

Hitimisho:

  1. Kutoka VimpelCom, trafiki kuelekea Mail.RU Group inasambazwa kawaida. Hakuna uelekezaji upya bandia kupitia upotoshaji wa Mapendeleo ya Ndani uligunduliwa
  2. Mail.RU Group inachunguza upotoshaji na viambishi awali vya VimpelCom. Njia zilizopo kuelekea mtandao wa VimpelCom kupitia waendeshaji wa Urusi zina vipaumbele vya chini ikilinganishwa na njia kupitia waendeshaji wa Tier1 wa kigeni.
  3. Wasimamizi wa jumuiya wa BGP wameongezwa kwa njia zinazotumwa kwa waendeshaji wa Urusi (MTS, Rostelecom, RETN.NET) na Mail.RU Group ili kuzuia kuenea kwao kuelekea VimpelCom.

Kwa nini Mail.RU Group inatanguliza njia kupitia Ulaya? Kwa nini Mail.RU Group inakataza miunganisho mifupi ya Kirusi ya ndani na VimpelCom?

Je, ni nafuu kwao? Kuendesha trafiki kupitia njia za kigeni na kulipa Tirvans kwa fedha za kigeni?
Au kuna hamu ya kuendesha trafiki mbali zaidi ili kuichukua sio rahisi sana, huh?
Hili halijulikani kwa mhandisi wa mtandao...

Chanzo: mapenzi.com

Nunua upangishaji wa kuaminika wa tovuti zilizo na ulinzi wa DDoS, seva za VPS VDS πŸ”₯ Nunua upangishaji wa tovuti unaoaminika kwa ulinzi wa DDoS, seva za VPS VDS | ProHoster