ã¡ãã£ã¢èšäº
Cloudflareã®é害ãåå ã¯BGPã®èšå®ãã¹ãæ±äº¬ãå«ã19ã®äž»èŠããŒã¿ã»ã³ã¿ãŒãäžæãªãã©ã€ã³ã«
ããºãææ°ããŒã¯ 187
twitterã³ã¡ã³ã 57ä»¶äž 1ïœ57件
ãã人ãçŽããã®ãå¥ã®äººããŸãçŽããŠãã ãã ã«ããšããããšããã£ãããã
è
>ãããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãã
>ãããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãã
ãããã¯ãŒã¯ç³»ã®äœæ¥ã¯ããã°ããããŠããåæ ãããããšãå€ãããåå ãç¹å®ãã¥ãããŠç¹ã«æããããªã
ã¡ããã¡ããBGPã®èšå®ãã¹ã£ãŠããããã
BGPã¯è¡ãå
æ¡å
æ¿ã¿ãããªããã§ãæ±åé«éã§åå€å±æ¹é¢ãšæ±äº¬æ¹é¢ãéã«ç€ºããããããªããã ãããããã倧混乱ã«ãªããã
ãã°ã£ãç¶æ
ã«æ»ãã£ãŠãããªããŠçŸå Žç«ã§ããã»ã»ã»
BGPé¢é£ã ã£ããâŠå»å¹Žã®Facebookã®ä»¶ãBGP絡ã¿ã ã£ãïŒä»åã¯èªçã£ãœããã©ãä»ç€Ÿã®èšå®ãã¹ã®ãããããªé£ããã±ãŒã¹ãå«ããŠã«ãŒãã£ã³ã°åšããšDNSã¯é¬Œéã ããªâŠ -
ãã£ã±ãçµè·¯é害ããããŒãð
BGPã®èšå®ãã¹ã£ãŠæ°å¹Žã«äžåãããªã»ã»ã»
æšæ¥ã®ãããã¯ãŒã¯é害ã®åå ã¯ããããŒ
æšæ¥ã®Cloudfrareã®å€§èŠæš¡é害ã¯ãã£ã±ã«ãŒãã£ã³ã°ã ã£ããª
CDNãããã€ããŒã®ç±³Cloudflareã¯çºçãããããã¯ãŒã¯é害ã«ã€ããŠãåå ãçºè¡šãããBGPã®èšå®ãã¹ãåå ã§ãæ±äº¬ãå«ãå瀟ã®äž»èŠãª19ã®ããŒã¿ã»ã³ã¿ãŒã§é害ãçºçãããšãã
loudflareã®é害ãåå ã¯BGPã®èšå®ãã¹ æ±äº¬ãå«ã19ã®äž»èŠããŒã¿ã»ã³ã¿ãŒãäžæãªãã©ã€ã³ã«
loudflareã®é害ãåå ã¯BGPã®èšå®ãã¹ æ±äº¬ãå«ã19ã®äž»èŠããŒã¿ã»ã³ã¿ãŒãäžæãªãã©ã€ã³ã«
é害ã®çµç·¯ãæç³»åã§èšäºã«ãªã£ãŠããŸãããååŸ4æ42åãããã¯çã
ããð
â·While deploying a change to our prefix advertisement policies, a re-ordering of terms caused us to withdraw a critical subset of prefixes.
Googleã以åãããããé害ã§ãä»åã¯åŸ©æ§äœæ¥ãçµ±å¶ãšããªããŠé
延ããã£ãœããBGP, ASæããšã€ã³ã¿ãŒãããâ網âã ã£ãŠäºãå確èªããããããª
Twitterã§ã¯å€ãã®æè¡è
ïŒITæ¥ç人ãïŒ"ã€ã³ã¿ãŒããããå£ããã®ïŒ"ïŒ"äžçŽã®å€§äºä»¶ãããªãã§ãã"ãšã¯ãããã§ããŠïŒããæ³ããŠã€ã³ã°ãžã£ã³ããèªãã§ãã人ãããããããããšããããïŒãªãã ãå®å¿ãã(^^)
MCPã«ãããåºæã®ãã¹ããšãããã€ã®æé ãèŠçŽãããšãã¢ãŒããã¯ãã£ã®èŠçŽããããŒã«ããã¯ã®èªååã®æ¹åãªã©ã«åãçµã
Discordãªã©åºç¯å²ã«äžå
·åãCloudflareé害ã¯é害èæ§åäžã«åããäœæ¥ãã¹ãåå
BGPã®èšå®ãã¹ã§éä¿¡é害ã£ãŠã©ããã§ããããŸããããïŒ
埩æ§ã®ã
Cloudflareã®å ±åã«ãããšé害ã¯BGPïŒBorder Gateway ProtocolïŒã®èšå®ãã¹ãåå ã§ãããã«ããæ±äº¬ããŒã¿ã»ã³ã¿ãŒãå«ãå瀟ã®äž»èŠãª19ã®ããŒã¿ã»ã³ã¿ãŒã§é害ãçºçãã
èšå®ãé害åã«æ»ããã®ã«ããããããã«é害ç¶æ
ã«æ»ããŠããŸã£ããšããããããããšããã£ã±ãèµ·ããŠããŸãã®ãã
BGPã®èšå®ãã¹ã ã£ãã®ãã»ã»ã»ãææ¥ã¯æã身ã ãªãããã
é ç®ã«çŽæ¥å¡åžããŠçºæ¯ãä¿ãå€çšè¬ïŒ
ãããã·ãžã«ã15ïŒ ã
ðœ
ãããã·ãžã«ã15ïŒ ã
ðœ
èšå®ãã¹ã§ããŒããéåžžãããã¯ãŒã¯ããåãé¢ãããŠèšå®å€æŽã§ããªããªã£ãæã®èŸãããããã
å°çã®ç¡éã«ãŒã â ããããã¯ãŒã¯ãšã³ãžãã¢Aãå
ã«æ»ããèšå®ãå¥ã®ãšã³ãžãã¢BCD(ryãæ°ã¥ããããã«å
ããŠé害åçºãæ£çº <
H29ã«ãåããããªã€ã³ã·ãã³ãããããŒããããã§ãã£ããããªã
Cloudflareã®ä»¶ãæç§æžã«èŒããããªå€±æäºäŸã§é¢çœãã£ã
âãããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸã
âãããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸã
ãã°ãšãããããBGPèšå®ãã¹ãšã
ãã¯ãŒãïŒ
æšæ¥ã®æ¯éšãšãã®é害ã®è©³çŽ°ã§ãŠãã
>äœæ¥ã«æéãããã£ãŠããŸã£ãèŠå ãšããŠããããããã¯ãŒã¯ãšã³ãžãã¢ãå
ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å
ã«æ»ãäœæ¥ãããŠé害ç¶æ
ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãã
ãŸãã¯é€ ã€ãã£ãŠå¥Žã ãª
ãŸãã¯é€ ã€ãã£ãŠå¥Žã ãª
ãã¹ã®ç¹å®å«ããŠå¯Ÿå¿ãéãã
èšå®ãã¹ã£ãŠèãã ãã§èãçããªã
ãããã¯ãŒã¯ã¯1æåã1åèªã1è¡ã解éãã¹ã²ãšã€ãäŒéãã¹ã²ãšã€ã§ååäœã®éã軜ãé£ãã§äººã®åœã«ããå±ããããªãäžçã ããæã
ä»åã®æ°çŸãæ°ååã®äžã®äžçã§ä»äºããŠãŠãããžããã©ã
ãããã¯ãŒã¯ã¯1æåã1åèªã1è¡ã解éãã¹ã²ãšã€ãäŒéãã¹ã²ãšã€ã§ååäœã®éã軜ãé£ãã§äººã®åœã«ããå±ããããªãäžçã ããæã
ä»åã®æ°çŸãæ°ååã®äžã®äžçã§ä»äºããŠãŠãããžããã©ã
ã®é害ãåå ã¯BGPã®èšå®ãã¹ æ±äº¬ãå«ã19ã®äž»èŠããŒã¿ã»ã³ã¿ãŒãäžæãªãã©ã€ã³ã«
ãªãã»ã©ð€
BGPã®èšå®ãã¹ïŒ
倧èŠæš¡é害ã¯BGP絡ã¿ã®ç¢ºçé«ã
BGPïŒCDNãªã©ã䜿ãåºå¹¹åŽã®ãããã³ã«ïœ
ã«ããã»ã©ã«ããâŠð€
ãããããµãŒãã¹ãå©çšããŠãããµãŒãã¹ã§é害ãçºçããå ŽåããŠãŒã¶ãŒã«å¯Ÿãã責任ã£ãŠã©ããªãã®ããªãå©çšèŠçŽã§åé¿ããŠããã§ã¯ãããã©ã
ãããããã¯ãŒã¯ãšã³ãžãã¢ãå
ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å
ã«æ»ãäœæ¥ãããŠé害ç¶æ
ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãããã
ãšã·ïŒã足ããªã
ãšã·ïŒã足ããªã
人çãã¹ã ã£ãã®ãð€ð€
æšæ¥ã®é害ãBGPã®èšå®ãã¹ãšãªâŠæç³»åã§è²ã
ãšãŸãšãŸã£ãŠãã詳ããèšäºãæ
åœè
éã®é£æºäžè¶³ã§ããŒã«ããã¯ã«äžåºŠå€±æããŠãããšããã®ããã€ãã€ãããã€ã
å°çã ãª
ãäœæ¥ã«æéãããã£ãŠããŸã£ãèŠå ãšããŠããããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãããããã
ãäœæ¥ã«æéãããã£ãŠããŸã£ãèŠå ãšããŠããããããã¯ãŒã¯ãšã³ãžãã¢ãå ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å ã«æ»ãäœæ¥ãããŠé害ç¶æ ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãããããã
åå ã¯BGPã®Policyèšå®ãã¹ã£ãŠã®ã¯æ®å¿µã ãã©ããã®åŸã®åãæ»ããããå¥ã®ãšã³ãžãã¢ãæ°ã¥ãããŸãé害ç¶æ
ã«æ»ããããã¡ãã£ãšãããããªïœ
Googleãšãã§ãåããããªãã¹ã¯éå»ã«ãããŸããããæ¹ããŠBGPã®éçšã¯é£ããã§ããã>ãã¹ã£ãæã®åœ±é¿ç¯å²ãå端ãªãïŒ
æšæ¥ã®ãã°ããŒãã«ãªã€ã³ãã©ã ããªã
ïŒç±³Cloudflareã¯ã2022幎6æ21æ¥ååŸ(æ¥æ¬æé)ã«çºçãããããã¯ãŒã¯é害ã«ã€ããŠã®å ±åãå
¬é / å ±åã«ãããšé害ã¯BGP(Border Gateway Protocol)ã®èšå®ãã¹ãåå
>ãããããã¯ãŒã¯ãšã³ãžãã¢ãå
ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å
ã«æ»ãäœæ¥ãããŠé害ç¶æ
ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºãã
ãªãŠã
ãªãŠã
å®ã«èå³æ·±ãã§ããª
éäžã®å ±åæžã®åèš³ãã»ãŒã«ãŒèªãšåããŠããŠç¬ã
> ãããããã¯ãŒã¯ãšã³ãžãã¢ãå
ã«æ»ããèšå®ããå¥ã®ãšã³ãžãã¢ãæ°ã¥ããããã«å
ã«æ»ãäœæ¥ãããŠé害ç¶æ
ã«åŸ©åž°ããŠããŸãããšãã£ãããšãæ£çºããããã
(ŽÏ`)
(ŽÏ`)
ãããã¬ãã«ã®æè¡è
ãèµ·ããããã¹ã«ã±ãã€ããããšã¯åºæ¥ããã£ããã
Cloudflare ã®é害ã®ä»¶ãåå ãå€æ
ãããªæãã§è¿ éã«å¯Ÿå¿ã§ããã®ãããã
ãããªæãã§è¿ éã«å¯Ÿå¿ã§ããã®ãããã
30åã§åå ç¹å®ã1æé以å
ã«åŸ©æ§äœæ¥å®äºãæ£åžžåŸ©åž°ãŸã§ã¯2æéåã»ã©
ãã¹ãåå ãšã¯ããããªã«ããŒãèŠäºã«æã£ãã
ãã¹ãåå ãšã¯ããããªã«ããŒãèŠäºã«æã£ãã
æšæ¥DiscordãPixivã«æ¥ç¶åºæ¥ãªããªã£ã件ãåå ãåãã£ãŠããŸãããã