Ukuvuza Komzila we-BGP Kuholela Ekunqamukeni Okukhulu Ku-inthanethi

Inkampani ye-Cloudflare eshicilelwe bika ngesigameko sayizolo, esiholele ekutheni amahora amathathu Kusukela ngo-13:34 kuya ku-16:26 (MSK), kube nezinkinga zokufinyelela izinsiza eziningi kunethiwekhi yomhlaba wonke, okuhlanganisa nengqalasizinda ye-Cloudflare, Facebook, Akamai, Apple, Linode, ne-Amazon AWS. Izinkinga kwingqalasizinda ye-Cloudflare, ehlinzeka nge-CDN yamasayithi ayizigidi eziyi-16, kubhekwe kusukela ngo-14:02 kuya ku-16:02 (MSK). I-Cloudflare ilinganisela ukuthi cishe i-15% yethrafikhi yomhlaba wonke yalahleka ngesikhathi sokuvalwa.

Inkinga yaba kubangelwa ukuvuza komzila nge-BGP, lapho iziqalo ezingaba yizinkulungwane ezingama-20 zamanethiwekhi angu-2400 zaqondiswa kabusha ngokungalungile. Umthombo wokuvuza kwaba ngumhlinzeki we-DQE Communications, osebenzise isofthiwe I-BGP Optimizer ukuthuthukisa umzila. I-BGP Optimizer yephula iziqalo ze-IP zibe ezincane, isibonelo, ihlukanisa u-104.20.0.0/20 ibe ngu-104.20.0.0/21 kanye no-104.20.8.0/21, futhi ngenxa yalokho, i-DQE Communications igcine inombolo enkulu yemizila ethile ohlangothini lwayo edlulayo. imizila ejwayeleke kakhulu (okungukuthi esikhundleni semizila ejwayelekile eya e-Cloudflare, kwasetshenziswa imizila eyimbudumbudu eya kuma-subnets athile e-Cloudflare).

Le mizila yamaphuzu ikhangiswe kwelinye lamakhasimende (Allegheny Technologies, AS396531) nalo elixhumene ngomunye umhlinzeki. I-Allegheny Technologies isakaza imizila eyamukelwe komunye umhlinzeki wezokuthutha (Verizon, AS701). Ngenxa yokuntuleka kokuhlunga okufanele kwezimemezelo ze-BGP kanye nomkhawulo wenani leziqalo, i-Verizon yacosha lesi simemezelo futhi yasakaza iziqalo ezitholiwe eziyizinkulungwane ezingu-20 kuyo yonke i-inthanethi. Iziqalo ezingalungile, ngenxa yobumbudumbudu bazo, zibonwe njengezibaluleke kakhulu, njengoba umzila othile unokubaluleka okuphezulu kunokuvamile.

Ngenxa yalokho, ithrafikhi yamanethiwekhi amaningi amakhulu yaqala ukudluliswa ku-Verizon kuya kumhlinzeki omncane we-DQE Communications, engakwazi ukuphatha ukukhuphuka kwethrafikhi, okuholele ekuweni (umphumela uqhathaniswa nokushintsha ingxenye yomgwaqo onguthelawayeka ophithizelayo ngomgwaqo wezwe. ).

Ukuvimbela izigameko ezifanayo ukuthi zenzeke esikhathini esizayo
kunconyiwe:

• Sebenzisa ukuqinisekiswa izimemezelo ezisekelwe ku-RPKI (Ukuqinisekiswa Kwemvelaphi ye-BGP, kuvumela ukuthola izimemezelo kuphela kubanikazi benethiwekhi);
• Khawulela inombolo enkulu yeziqalo ezamukelwe kuzo zonke izikhathi ze-EBGP (ukusetha isiqalo esiphezulu kuzosiza ukulahla ngokushesha ukudluliselwa kweziqalo eziyizinkulungwane ezingu-20 phakathi neseshini eyodwa);
• Sebenzisa ukuhlunga okusekelwe kurejista ye-IRR (I-Internet Routing Registry, inquma AS ukuthi umzila weziqalo ezinikeziwe ovunyelwe ngawo);
• Sebenzisa izilungiselelo zokuphika ezizenzakalelayo ('ukuphika okuzenzakalelayo') okunconywe ku-RFC 8212 kumarutha;
• Misa ukusetshenziswa budedengu kwezilungiseleli ze-BGP.

Source: opennet.ru