æŠèŠ
- ããŒã¿ã»ã³ã¿ãŒã¢ãã¬ã¹éèŠã¯ããŒã¿ã»ã³ã¿ãŒå®¹ééèŠãšåãã§ã¯ãªããé»åäŸçµŠãããã©ãã¯ãã±ãŒãžããŸãã¯ãšããžãµã€ãã¯ã顧客ãäžæµãããã€ããã»ãã¥ãªãã£ãµãŒãã¹ãååŒçžæããä¿¡é Œã§ãããããªãã¯ãšã³ããã€ã³ãããã£ãŠåããŠæçšãšãªãã
- RIPE NCC å°åã§ã¯ãæ¯æžãã IPv4ãäžåè¡¡ãªã¬ã¬ã·ãŒä¿æãç§»è»¢äŸ¡æ ŒããªãŒã¹ãªãã·ã§ã³ã«ããããããªãã¯ã¢ãã¬ã¹ã®åšåº«ã¯ãã³ãã±ãŒã·ã§ã³ããã¹ãã£ã³ã°ããã¢ã¡ã¿ã«ãSaaS åãã€ã³ãã©ã«ãšã£ãŠé転è³éã®åé¡ãšãªãã
- IPv6 ã NAT ãååšããŠãã調éãã¡ã€ã«ãããŒãããŒã®èš±å¯ãªã¹ããã¡ãŒã«ã®è©äŸ¡ãå°çšã¢ãã©ã€ã¢ã³ã¹ãç£èŠããããŒãžããã¡ã€ã¢ãŠã©ãŒã«ãå ¬å ±ãµãŒãã¹ã®ç¶ç¶æ§ã¯äŸç¶ãšããŠå®å®ãããããªãã¯ã¢ãã¬ã¹ã«äŸåããŠãããããããã³ãã¯äŸç¶ãšã㊠IPv4 ãå¿ èŠãšããã
- ã¬ãžã¹ããªã®èšŒæ ã¯åãå ¥ãã®åºç€ã§ãããRIPE ããŒã¿ããŒã¹ã®èšé²ãä¿æè ã®æš©éãéåŒã DNSãabuse é£çµ¡å ãRPKI/ROAãçµè·¯èµ·ç¹ã®ä¿¡é Œæ§ããããã³ããè©å€ã®è² æ ãªãã«çšŒåã§ãããã©ããã倿ããã®ã«åœ¹ç«ã€ã
- ããŒã¿ã»ã³ã¿ãŒã¯ã¬ãžã¹ããªã§ã¯ãªãããã¢ãã¬ã¹åšåº«ãè©å€ã蚌æ ã«ãã£ãŠãã©ã®ããã³ããåãå ¥ããããæ¡åŒµãããç§»è¡ããããŸãã¯ã¯ãªãŒã³ã«éåºã§ããããæ±ºãŸãå Žåã鿥çãªã²ãŒãããŒããŒãšãªãã
- RIPE NCC ã¯ããŒã¿ã»ã³ã¿ãŒã®æé·ãèšç»ãã¹ãã§ã¯ãªããåžå°æ§ãéãã«æŽ»æ§åãç¶ç¶æ§ã顧客ã®ç§»åã«å¯Ÿããç§çæ¯é ã«å€æãããªãããã«ãå°åž³ãæ£ç¢ºã§ãäºæž¬å¯èœã§ãããŒã¿ãã«ãªãã®ã«ãã¹ãã§ããã
æ¬ èœããŠããå ¥åãå ¬é蚌æ ã§ãããªã³ããŒãã£ã³ã°ãã¥ãŒ
ããŒã¿ã»ã³ã¿ãŒã§æãæãããªåŸ ã¡è¡åã¯ãåžžã«é»ååŸ ã¡è¡åãšã¯éããªããããéããªåŸ ã¡è¡åã¯ãå¶æ¥ãã¹ã¯ãããããžã§ãã³ã°ããŒãããããã¯ãŒã¯ãšã³ãžãã¢ã®ã«ã¬ã³ããŒã®èåŸã«ãããããããªããã³ãã±ãŒã·ã§ã³ãããã€ããŒã¯ãæ¥ç¶æ§ã®è¯ãããŒã«å ã®ãã£ããããã販売ãããé»åäºçŽã¯å®äºããå·åŽãå©çšå¯èœã ãã¯ãã¹ã³ãã¯ãã®æ³šæã¯ä»®ãã確å®ã«ç§»è¡ããããã£ãªã¢ã®çžäºæ¥ç¶å®€ã¯ããã³ãã¬ãããæ¬æ Œçã«èŠããã ãã®éžæè¢ãæäŸããŠããããªã¢ãŒããã³ãã¯æåã®åºè·ãåãåãããšãã§ãããã±ãŒãžã¯ç©ççã«æºåå®äºã ã
次ã«ããã³ããããªãŒã¹ãå ¬å ±ãµãŒãã¹ã®åé¡ã«å€ãã質åããããæåã®ãã©ãã£ãã¯ã«å¯ŸããŠäœåã® IPv4 ã¢ãã¬ã¹ãæºåã§ãããïŒãããã¯ã¯ãªãŒã³ãïŒã©ã®ãã«ããŒã¬ã³ãŒãããã®ç¯å²ãèå¥ããã®ãïŒç§»è¡æéåã«éåŒã DNS ã倿Žã§ãããïŒROA ã¯æå³ããèµ·ç¹ããµããŒããããïŒã©ã® abuse ãã¹ã¯ãèŠæ ãåãåãã®ãïŒã¢ãã¬ã¹ã¯æ¢ã«ã¡ãŒã«å±¥æŽãã»ãã¥ãªãã£ã¬ããŒãããžãªãã±ãŒã·ã§ã³ãšã©ãŒã«ãã£ãŠæãªãããŠãããïŒé¡§å®¢ã 2 幎åŸã«éåºããå¿ èŠãããå Žåããã®ãµãŒãã¹ã®ãããªãã¯ãªé¡ãç§»åã§ãããããããšãå šãŠã®ãšã³ããã€ã³ãããããã€ããŒã®ããŒã«ã«éã蟌ããããã®ãïŒ
ãããããŒã¿ã»ã³ã¿ãŒå®¹éã 2 ã€ã®åžå Žã«åãããç¬éã§ããã1 ã€ç®ã¯æœèšå®¹éïŒã¡ã¬ã¯ãããã©ãã¯ãåºè·éãã»ãã¥ãªãã£ãå·åŽãé ç·ãçžäºæ¥ç¶ãç©çã¢ã¯ã»ã¹ã2 ã€ç®ã¯ã¢ãã¬ã¹å¯èœãšã³ããã€ã³ã容éïŒããã³ãã顧客ããµãã©ã€ã€ãŒãèŠå¶åœå±ãã»ãã¥ãªãã£ããŒã«ããã®ä»ã®ãããã¯ãŒã¯ã«ãµãŒãã¹ãå ¬éã§ããä¿¡é Œæ§ã®é«ããããªãã¯ãããã¯ãŒã¯ã¢ã€ãã³ãã£ãã£ã§ããããããã€ããŒã¯ 1 ã€ç®ãåããŠããŠã 2 ã€ç®ãååã§ãªãå Žåãããããããªããšãæœèšã¯æºåãæŽã£ãŠããŠããåçã¯ãŸã ãããªãã¯ã¢ãã¬ã¹ã®èšŒæ ãåŸ ã£ãŠããç¶æ ã«ãªãã
RIPE NCC å°åã§ã¯ãå¯éããã³ãã±ãŒã·ã§ã³ãããåœå¥ãã¹ãã£ã³ã°åžå ŽãäŒæ¥çšå°ãå ¬å ±éšéã®èª¿éããšããžã©ãã¯ãã€ã³ã¿ãŒããããšã¯ã¹ãã§ã³ãžãšã³ã·ã¹ãã ãé·ã IPv4 åé ã®æŽå²ãååšããããããã®ç·åŒµãå¯èŠåããããRIPE NCC ã¯ãšãŒããããäžæ±ãäžå€®ã¢ãžã¢ã®äžéšã管èœããããã® IPv4 ããªãŒããŒã«ã¯ 2019 å¹Žã«æ¯æžããããã®äŒå¡ãšããåºç¯ãªã³ãã¥ããã£ã«ã¯ãéä¿¡äºæ¥è ããã¹ãã£ã³ã°äºæ¥è ãã¯ã©ãŠãäŒæ¥ãäžè¬äŒæ¥ãå ¬å ±ãããã¯ãŒã¯ã倧åŠãã¬ãžã¹ããªãã»ãã¥ãªãã£äŒæ¥ãå°èŠæš¡ã¢ã¯ã»ã¹ãããã€ããŒãå«ãŸããããã®å°åã«ã¯å€§èŠæš¡ãã£ã³ãã¹ãšãæ§ãããªã¢ãã¬ã¹ç¯å²ãå°åãµãŒãã¹ã®å®è¡å¯èœæ§ãå·Šå³ããçãåœå åžå Žã®äž¡æ¹ãååšããã
ãããã£ãŠãããŒã¿ã»ã³ã¿ãŒã¢ãã¬ã¹éèŠã¯ãåçŽãªãµãŒããŒãããã®ã¢ãã¬ã¹æ°ã§ã¯ãªããããã¯ä¿¡é Œã§ããå ¬éå°éå¯èœæ§ãžã®éèŠã§ããããã¢ã¡ã¿ã«ãã¹ãã£ã³ã°äºæ¥è ã¯ã顧客ãã·ã³çšã«å°çšã® IPv4 ãå¿ èŠãšãããããããªããSaaS ããã³ãã¯ãAPI 顧客ã®ããã«å®å®ããéä¿¡å ã¢ãã¬ã¹ãå¿ èŠãšãããããããªãããããŒãžããã¡ã€ã¢ãŠã©ãŒã«ãããã€ããŒã¯ãã¢ãã©ã€ã¢ã³ã¹ãšããžçšã®ãããªãã¯ã€ã³ã¿ãŒãã§ã€ã¹ãå¿ èŠãšãããããããªããå ¬å ±ãµãŒãã¹å¥çŽæ¥è ã¯ãæ¿åºãã€ã€ãŒãç¶ç¶æ§ãã¡ã€ã«ã«èšé²ã§ããç¯å²ãå¿ èŠãšãããããããªãããã¹ãã£ã³ã°ãªã»ã©ãŒã¯ãããããã³ãã® abuse å±¥æŽãå¥ã®ããã³ãã®ã¡ãŒã«ãæ±æããªãããã«åé¢ãå¿ èŠãšãããããããªãããšããžã©ãã¯ã¯ã管çãç£èŠãDDoS è¿åã顧客ããŒã¿ã«ã«ååãªãããªãã¯ã¹ããŒã¹ã ããå¿ èŠãšãããããããªãããããã®å Žåããåžå°ãªã¢ãã¬ã¹ãéçšåšåº«ã«å€æãããã
ããã¯ã¯ã©ãŠãã¢ã«ãŠã³ãã顧客ã®ãããªãã¯ã¢ã€ãã³ãã£ãã£ãæ¯é ãã話ã§ã¯ãªãããŸããäž»ã«ã±ãŒãã«çµè·¯å€æŽããã¢ãªã³ã°ã®ååŠããŸãã¯ç§»è»¢ã®ã¯ããŒãžã³ã°æžé¡ã®è©±ã§ããªãããããã®ããŒãã¯ä»ã®å Žæã§éèŠã§ãããããŒã¿ã»ã³ã¿ãŒããŒãžã§ã³ã¯ãªã³ããŒãã£ã³ã°ãã¥ãŒããå§ãŸããããã¯ãç©ççã«å®æããããã«èŠãã補åãäŸç¶ãšããŠæ¬¡ã®é¡§å®¢ãåãå ¥ããããªãçç±ãåãããã®çãã¯ãIPv4 ã®åžå°æ§ãæ¿çã®èæ¯ããããŒã«ã®åçæ©æ¢°ãžãšç§»è¡ããããšã«ããã
æœèšå®¹éãšã¢ãã¬ã¹å¯èœãšã³ããã€ã³ãéèŠã¯ç°ãªã
ããŒã¿ã»ã³ã¿ãŒã¯ç©ççãªçŽæã販売ããããå€ãã®ããã³ãã¯å ¬ééçšé¢ãè³Œå ¥ãããæœèšå®¹éã¯ç®ã«èŠã枬å®å¯èœã ãèŠåŠã§ããèè³å¯èœã§ãä¿éºããããããåçæ®åœ±ã§ãã詊é転ã§ãããã¢ãã¬ã¹å¯èœãšã³ããã€ã³ãéèŠã¯ããŸãç®ã«èŠããªããããã¯é¡§å®¢ã®ã»ãã¥ãªãã£ã¢ã³ã±ãŒãã調éä»é²ãabuse ãšã¹ã«ã¬ãŒã·ã§ã³ãã¹ãã¡ãŒã«å°éæ§èšç»ãRPKI ãã§ãã¯ãéåŒã DNS èŠæ±ãèš±å¯ãªã¹ãã¹ãã¬ããã·ãŒããç§»è¡ã¹ã±ãžã¥ãŒã«ã«çŸãããã¢ã¯ãã£ããŒã·ã§ã³ãé»å®³ãããŸã§ãããã¯ãŒã¯ã®è©³çްã«èŠãããããçºèŠãé ããããšãå€ãã
ãã®åºå¥ãéèŠãªã®ã¯ãæœèšå®¹éã¯å€§ããªåäœã§æ¡åŒµã§ããäžæ¹ããããªãã¯ãšã³ããã€ã³ãã¯æ±ãã«ããåäœã§æ¶è²»ãããããã ãæ°ããããŒã«ã¯æ°åã®ãã£ããããã远å ã§ãããããã³ã㯠1 çµã®ãã¡ã€ã¢ãŠã©ãŒã«çšã«/29ããããŒãžãã¢ãã©ã€ã¢ã³ã¹ã¯ã©ã¹ã¿çšã«/27ã顧客åé¢çšã®å°ããŒã«æ°åããã¢ã¡ã¿ã«ããããžã§ãã³ã°çšã®ãã倧ããªç¯å²ããŸãã¯ç§»åäžã®äºåã¹ã€ã³ã°å®¹éãå¿ èŠãšãããããããªãã圢ç¶ã¯å¿ ãããäžèŽããªããã¢ãã¬ã¹åšåº«ã¯ãåã«ç·æ°ãšããŠæ°ããã®ã§ã¯ãªããéçšçšéã«åã£ããµã€ãºã§ä¿æããå¿ èŠãããã
ã¢ãã¬ã¹å¯èœéèŠã«ã¯å質ççŽããããç¯å²ã¯æè¡çã«ã«ãŒãã£ã³ã°å¯èœã§ãã忥çã«åŒ±ãå Žåãããã以åã®ã¹ãã ããã«ãŠã§ã¢ã¬ããŒããå€ãéåŒãåã誀ã£ããžãªãã±ãŒã·ã§ã³ã匱ã abuse å±¥æŽãççŸããçµè·¯èµ·ç¹ã·ã°ãã«ãäžæçãªãã«ããŒæš©éã¯ãèŠå¶å¯Ÿè±¡é¡§å®¢ãžã®è²©å£²ãå°é£ã«ãããé«äŸ¡å€ããã³ãã¯ããããªãã¯ã¢ã€ãã³ãã£ãã£ã®ä¿®åŸ©ã«æéããããããããããå®äŸ¡ãªç¯å²ãæåŠãããããããªããå¥ã®ããã³ãã¯äœãªã¹ã¯è£œåã«åãç¯å²ãåãå ¥ãããããããªãããããã£ãŠãåžå°æ§ã¯åãªãéã§ã¯ãªããå質ã蚌æ ãé©å¿æ§ã§ããã
ã³ãã±ãŒã·ã§ã³ã¯ãã®åºå¥ãé®®æã«ããããªããªãããããã€ããŒãæçµçãªãµãŒãã¹ãªãã¬ãŒã¿ãŒãšã¯éããªãããã ãããã³ãã¯æ©åšãã¹ã¿ããããœãããŠã§ã¢ã顧客ãæã¡èŸŒããããŒã¿ã»ã³ã¿ãŒã¯ã¹ããŒã¹ãé»åãæ¥ç¶ãªãã·ã§ã³ããããŠãã°ãã°ã¢ãã¬ã¹æ¯æŽãæäŸãããããã³ãã¯èªèº«ã® ASNããããã€ããŒã®ãã©ã³ãžãããDDoS ãããã€ããŒããããŒãžãã«ãŒã¿ãŒããããªãã¯ã¯ã©ãŠããªã³ã¯ããŸãã¯ãããã®çµã¿åããã䜿çšã§ããã忥çãªè³ªåã¯ãããªãïŒå€çã¯èª°ã®èšŒæ ãèªèããã®ãïŒããã³ãããã¬ãã£ãã¯ã¹ãèµ·ç¹ãšãããå Žåãçµè·¯èµ·ç¹èªèšŒãæŽåããªããã°ãªããªãããããã€ããŒãç¯å²ãã¢ããŠã³ã¹ããå Žåã§ããããã³ãã¯å¥ç޿޿°ãabuse èŠæ ãéåºãä¹ãåãããšãã確信ãå¿ èŠã§ããã
ãã¢ã¡ã¿ã«ãã¹ãã£ã³ã°ã¯æãæç¢ºãªã¢ãã¬ã¹å€æåšã§ããããããã€ããŒã¯å°çšãã·ã³ã販売ãããã顧客ã¯ããããžã§ãã³ã°é床ã§ä»å±ãããããªãã¯ãšã³ããã€ã³ããæåŸ ããã補åãéçºè ãã»ãã¥ãªãã£äŒæ¥ãã²ãŒãã³ã°äŒç€Ÿãã¡ãã£ã¢ãã©ãããã©ãŒã ãäŒæ¥ã©ãã察象ãšãããªããã¢ãã¬ã¹ããŒã«ã¯ãã«ãã£ã«ã¡ã³ãã®äžéšãšãªããã¯ãªãŒã³ãªãããªãã¯ã¢ãã¬ã¹ããªããã¢ã¡ã¿ã«ãã·ã³ã¯åã補åã§ã¯ãªããããã¯ã€ã³ã¿ãŒãããçµæžãžã®åå ¥ãåŸ ã€éå±ã ã販売ã¢ãã«ãéããã°éãã»ã©ãã¢ãã¬ã¹äžè¶³ã®ã³ã¹ãã¯é«ããªãã
SaaS ãšãããŒãžããµãŒãã¹ã¯èšç®åäœãããã®ã¢ãã¬ã¹äœ¿çšæ°ãå°ãªããã䜿çšããã¢ãã¬ã¹ã¯ããææã«ãªãåŸããAPI 顧客ã¯éä¿¡å ç¯å²ãããã¯ããŠã³ããå¯èœæ§ããããéè¡ã¯ãµãã©ã€ã€ãŒãšã³ããã€ã³ããèšé²ãããããããªããã»ãã¥ãªãã£ããŒã ã¯æ¢ç¥ã®ãããªãã¯åãç£èŠãããããããªãã顧客ããŒã¿ã«ã¯ç£æ»ãéããŠç¶ç¶æ§ãå¿ èŠãšãããããããªãããããªãã¯ã¢ãã¬ã¹ã®å€æŽã¯ãé¢ä¿ããã¢ãã¬ã¹æ°ã«äžçžå¿ãªãã¹ãããã±ãããçµå¶é£ã®æžå¿µãåŒãèµ·ããå¯èœæ§ãããããã®ãããªããã³ãã«ãšã£ãŠãã¢ãã¬ã¹ã¯ä¿¡é Œã®ã¢ã³ã«ãŒã§ãããã³ã¢ãã£ãã£å ¥åã§ã¯ãªãã
ãšããžã©ãã¯ã¯å¥ã®ããªãšãŒã·ã§ã³ãå ããããšããžå±éã¯å°èŠæš¡ãããããªããããã®ãããªãã¯å°éå¯èœæ§ã¯ãå°åã³ã³ãã³ããç£èŠãã³ãã³ãã·ã¹ãã ã埩æ§ã¢ã¯ã»ã¹ã顧客ãã¬ã€ã¯ã¢ãŠããäœé å»¶ãµãŒãã¹ãDDoS è¿åããµããŒãã§ãããããã€ãã®åœå¥åžå Žã§ã¯ãå°æ°ã®ã¢ãã¬ã¹ããå°åãã¹ãã£ã³ã°äºæ¥è ããã¹ãŠãé æ¹ã®ãã£ã³ãã¹ã«æŒã蟌ã代ããã«ã顧客ã®è¿ãã§ä¿¡é Œã§ãããµãŒãã¹ãæäŸã§ãããã©ãããæ±ºå®ãããåžå°ãªå ¥åã¯èŠæš¡ãæ§ããã§ããå°åãžã®åœ±é¿ã¯å€§ããã
å®éçãªçµæãšããŠãããŒã¿ã»ã³ã¿ãŒéå¶è ã¯ã¢ãã¬ã¹å¯èœãšã³ããã€ã³ãéèŠãããã¢éèŠãšã¯å¥ã«èšç»ããå¿ èŠãããããã£ããããæ°ã«ããè²©å£²äºæž¬ã§ã¯äžååã ããããã€ããŒã¯ãã©ã®ããã³ãããããªã㯠IPv4 ãå¿ èŠãšããã©ããå ±æå¯èœããã©ããå°çšç¯å²ãå¿ èŠãšããã©ããè©å€ã«ææããã©ããèªèº«ã®ã¢ãã¬ã¹ç©ºéãæã¡èŸŒãããã©ããéåºæš©ãå¿ èŠãšããã©ããéåŒã DNS ãå¿ èŠãšããã©ãããã©ãã£ãã¯ç§»ååã«çµè·¯èµ·ç¹ãµããŒããå¿ èŠãšããããåããªããã°ãªããªãããã®åæãªãã§ã¯ãããŒã«ã¯ãã€ãã©ã€ã³äžã¯åãŸã£ãŠããããã«èŠããŠããã¢ã¯ãã£ããŒã·ã§ã³æã«å€±æããå¯èœæ§ãããã
IPv4 ã®åžå°æ§ãã¢ãã¬ã¹ãã©ãã¯ã«çµã³ã€ããéè»¢è³æ¬ã«å€ãã
IPv4 ãæ¯æžãããšããããªãã¯ã¢ãã¬ã¹ã¯ç¡æã®æè¡èšå®ã§ã¯ãªããéè»¢è³æ¬ã®ããã«æ¯ãèããããŒã¿ã»ã³ã¿ãŒéå¶è ããã¹ãã£ã³ã°äºæ¥è ããããŒãžããµãŒãã¹ãããã€ããŒã¯ãæçµéèŠã確å®ããåã«åšåº«ãååŸããªããã°ãªããªãããã®åšåº«ã«è³éãäŸçµŠããäºçŽããã¯ã¬ã³ãžã³ã°ããå²ãåœãŠãååããå°æ¥ã®åçãåæ»ããªãããã«ã©ãã ãã®éäŒåšåº«ãå¿ èŠããæ±ºå®ããå¿ èŠããããåžå°æ§ã³ã¹ãã¯ã©ãã¯ã«çµã³ã€ããŠããããªããªãããããªãã¯ãšã³ããã€ã³ãèšç»ãæŽããªããã°ãããã³ãã®ç©ççãããããªã³ããå®å šã«åçåã§ããªãããã ã
éè»¢è³æ¬ã®åé¡ã¯ã¿ã€ãã³ã°ããå§ãŸããããã³ããæ»ãããªæ²ç·ã§ã¢ãã¬ã¹ãèŠæ±ããããšã¯çšã ãæ¿åºç³»ãµãã©ã€ã€ãŒã¯æ°ã¶æé å»¶ããåŸãç¹å®ã®é±ã«åãæ¿ããå¿ èŠã«ãªãå Žåãããããã¢ã¡ã¿ã«é¡§å®¢ã¯å°ããªããŒã«ããå§ããæ¥éã«æ¡å€§ãããããããªããSaaS äŒæ¥ã¯äž»èŠé¡§å®¢ãããŒã¿ããŒã«ãªãã£ãæ±ããããã«ãªãŒãžã§ã³ã远å ãããããããªããã»ãã¥ãªãã£ã€ã³ã·ãã³ãã«ããããã©ãã£ãã¯ãåé¢ããããã«æ°ããç¯å²ãå¿ èŠã«ãªããããããªããç§»è¡ã§ã¯ã顧客ãèš±å¯ãªã¹ããæŽæ°ããéãæ°æ§ã®ã¢ãã¬ã¹ã䞊è¡çšŒåãããå¿ èŠããããããããªãããããã€ããŒãåããŒãºã確èªãããŠããè³Œå ¥ãŸãã¯ãªãŒã¹ããã®ã§ã¯ãåçæ©äŒãéãå¯èœæ§ãããã
åšåº«ãä¿æããã«ã¯ã³ã¹ããããããè³Œå ¥ããã¢ãã¬ã¹ã¯ãé»åå¥çŽãã¹ã¿ãããçžäºæ¥ç¶å®¹éãå¶æ¥ã«å ãŠãããã¯ãã®è³æ¬ãææããããªãŒã¹ãããã¢ãã¬ã¹ã¯çµåžžè²»çšãšæŽæ°ãªã¹ã¯ãçããå€ãç¯å²ã¯é£çµ¡å ã¡ã³ããã³ã¹ãéåŒã DNS ã¯ãªãŒã³ã¢ãããè©å€å¯Ÿå¿ãæã«ã¯äŒæ¥å±¥æŽã¬ãã¥ãŒãå¿ èŠãšããããããã€ããŒå²ãåœãŠããŒã«ã¯ã¯ãªãŒã³ã§ã»ã°ã¡ã³ãåãããç¶æ ãä¿ã€å¿ èŠããããè¿åŽãããç¯å²ã¯åå©çšåã«éé¢ãå¿ èŠã ãã¢ãã¬ã¹ãã¡ã€ã«ã¯åæã«ãã©ã³ã¹ã·ãŒãã§ããéçšãã¡ã€ã«ãšãªãã
圢ç¶ã®åé¡ãããã倧ããªéçŽæ°ãæã€ãããã€ããŒã§ããé©åãªæçãæ¬ ããŠããå¯èœæ§ããããäžéšã®é¡§å®¢ã¯ã¯ãªãŒã³ã«ã«ãŒãã£ã³ã°ã§ããé£ç¶ãããã¯ãå¿ èŠãšãããä»ã¯å±¥æŽãå ±æããªãè€æ°ã®å°ããŒã«ãå¿ èŠãšãããäžéšã¯ãããã€ããŒã®çŽæ¥ç®¡çäžã«ããç¯å²ãå¿ èŠãšãããä»ã¯èªèº«ã®ãã«ããŒæš©éãŸãã¯æç¢ºãªèªèšŒãã¹ãå¿ èŠãšãããäžéšã¯ç®¡ççšãšé¡§å®¢ãšã³ããªãã€ã³ãçšã«ã®ã¿ãããªã㯠IPv4 ãå¿ èŠãšããå éšã·ã¹ãã ã¯ãã©ã€ããŒãã¢ãã¬ã¹ãŸã㯠IPv6 ã䜿çšã§ããã誀ã£ã圢ç¶ã§è±å¯ãªåšåº«ã¯ãäŸç¶ãšããŠåçãé ãããå¯èœæ§ãããã
èªæã¯ã¢ãã¬ã¹ããŒã«ããªãŒããŒãããã³ã°ããããšã ãå ±æã€ãŒã°ã¬ã¹ãNATããããã·ã¬ã€ã€ãããŒããã©ã³ãµãŒããã©ã€ããŒãæ¥ç¶ã¯ãã¹ãŠ IPv4 ã®ç¯çŽã«åœ¹ç«ã€ããããã¯æçšãªããŒã«ã§ãããå€ãã®å Žåæ£ããããŒã«ã§ããããããããªãŒããŒãããã³ã°ã¯åžå°æ§ãé ããããã©ãŒãã³ã¹ãåž°å±ãéåºãªã¹ã¯ã«å€æãããããŸãã«å€ãã®ããã³ããåããããªãã¯ã¢ã€ãã³ãã£ãã£ãå ±æãããšãabuse èŠæ ã®åž°å±ãå°é£ã«ãªããã¡ãŒã«ã®è©å€ä¿è·ãé£ãããªãã顧客ãã°ãäžæçã«ãªããå°æ¥ã®ç§»åã«ã¯å€ãã®ãµãŒãã¹ã 1 ã€ã®ãããªãã¯ãã§ã€ã¹ããåãé¢ãå¿ èŠãçããã
å¥ã®èªæã¯ãåžå°æ§ã³ã¹ããåæãããã«äžæµã«æŒãä»ããããšã ããããã€ããŒã¯äœããã£ããããäŸ¡æ Œãæç€ºãããããªã㯠IPv4 ã«é«é¡ã課éã§ãããè¿ éãªãªã³ããŒãã£ã³ã°ã宣äŒããªãããéãã«ã¢ãã¬ã¹ãé 絊ã§ãããæŽæ°ãªã¹ã¯ã説æããã«ãªãŒã¹ç¯å²ãæäŸã§ãããå²ãåœãŠåŸã®è©å€ä¿®åŸ©ãããã³ãã®è²¬ä»»ã«ã§ãããæ¥åžžäœ¿çšã§ã¯å°çšã ããæå³ã®ããéåºã§ã¯ããŒã¿ãã«ã§ãªããå°çšããããªãã¯ã¢ãã¬ãã·ã³ã°ãæäŸã§ããããããã®éžæã¯åæ³ã§ãããæã«ã¯åççã§ããããããããã¯ãŸããåžå°æ§ãã¢ã¯ãã£ããŒã·ã§ã³ã«å¯Ÿããç§çéè¡æãšãªãæ¹æ³ã§ãããã
RIPE NCC ã®èšé²ãéèŠãªã®ã¯ãåžå°ãªå ¥åããããè°è«ãæžããããã ãæ£ç¢ºãªãã«ããŒããŒã¿ãæç¢ºãªçµç¹èšé²ãç¶æãããé£çµ¡å ãéåŒã DNS ãã¹ãçµè·¯èµ·ç¹èšŒæ ã¯åšåº«ããã䜿ããããããããããã€ããŒãåç¯å²ã«ã€ããŠããã¹ãŠã®ããã³ããã¢ããã¹ããªãŒã ãDDoS ãããã€ããŒããšã³ã¿ãŒãã©ã€ãºé¡§å®¢ã«äžãã説æããªããã°ãªããªãå Žåãã¢ãã¬ã¹åšåº«ã¯æµåæ§ã倱ããå°åž³ãéŠå°Ÿäžè²«ããŠããã°ãç¯å²ãããè¿ éã«è©äŸ¡ã§ããäžç¢ºå®æ§ãå°ãªã移転ã§ããããå°ãªãç¹æ³šä¿èšŒã§ãµãŒãã¹ãã¡ã€ã«ã«çµ±åã§ããã
éè»¢è³æ¬ã«ã¯ã¹ã€ã³ã°å®¹éãå«ãŸããããããããã€ããŒããå¥ã®ãããã€ããŒã«ç§»åããããã³ãã¯ããã°ãã°éè€ãå¿ èŠãšãããæ°ãããµãŒãã¹ããã¹ããããéãå€ããµãŒãã¹ã¯ç¶ç¶ããªããã°ãªããªãã顧客蚱å¯ãªã¹ãã¯åŸã ã«å€æŽããå¿ èŠããããã¡ãŒã«ã®è©å€ã¯ãŠã©ãŒãã³ã°ãå¿ èŠãããããªããç£èŠã·ã¹ãã ãæŽæ°ããå¿ èŠããããã»ãã¥ãªãã£ããŒã ã¯äžŠè¡ãã°ãå¿ èŠãšãããããããªããç§»è¡çšã®äºåã¢ãã¬ã¹ããªããã°ãããã³ãã¯æ¥ãªåãæ¿ãããããã€ããŒææã®ã€ãªãçã匷ãããããã¹ã€ã³ã°å®¹éãé«ãã€ãã®ã¯ãŸãã«ãããäžæçã ããã ããããã§ãç§»è¡ãå®å šãã©ãããå·Šå³ãåŸãã
ã¢ãã¬ã¹åšåº«ãéè»¢è³æ¬ãšããŠæ±ãããŒã¿ã»ã³ã¿ãŒã¯ããããéçãªãããã¯ãŒã¯ããŒã«ãšããŠæ±ãããŒã¿ã»ã³ã¿ãŒãšã¯ç°ãªãã ãããæ¬æ Œçãªéå¶è ã¯ãã©ã®ç¯å²ãã¯ãªãŒã³ã§ãã©ãããªãŒã¹ãããã©ãã移転å¯èœããã©ããå ¬å ±ãµãŒãã¹é¡§å®¢ã«é©ããŠããããã©ããã¡ãŒã«ã«å®å šããã©ãã修埩ãå¿ èŠãšããããã©ããéåŒã DNS å¶çŽãæã€ããã©ããçµè·¯èµ·ç¹èšŒæ ãæºåæžã¿ããææ¡ããŠãããçªå·ãåžå°ãªçµæžã§ã¯ããã®ãã¡ã€ã«ã¯å¶æ¥å©çã®äžéšãšãªãã
IPv6 ãš NAT ãããŒã¿ã»ã³ã¿ãŒã® IPv4 åé¡ãåãé€ããªãçç±
IPv4 æ¯æžã«å¯Ÿããæçœãªçã㯠IPv6 ã§ãããç¯çŽã®ããã®æçœãªãšã³ãžãã¢ãªã³ã°ããŒã«ã¯ NAT ã§ãããã©ã¡ããéèŠã ããããã忥çãªã¢ã¯ãã£ããŒã·ã§ã³ã«ãšã£ãŠéèŠãªæéã«ãããŠãã©ã¡ããããŒã¿ã»ã³ã¿ãŒã®ã¢ãã¬ã¹åé¡ãåãé€ããªããããã³ãã¯ã顧客ãããŒãããŒãã¢ãã©ã€ã¢ã³ã¹ãéè¡ãèŠå¶åœå±ãé»åã¡ãŒã«ã·ã¹ãã ãå€ããœãããŠã§ã¢ãã»ãã¥ãªãã£ã³ã³ãããŒã«ãäŸç¶ãšã㊠IPv4 ã«äŸåããäžçã§ãµãŒãã¹ãè³Œå ¥ããããããã€ããŒã¯ IPv6 åãã«èšèšãã€ã€ããæ¬¡ã®ã©ãã¯ã販売ããããã«ååãªä¿¡é Œã§ãã IPv4 ãå¿ èŠãšããã
IPv6 ãæã圹ç«ã€ã®ã¯ããµãŒãã¹ã®äž¡ãµã€ããçŸä»£çã§æèœãªç®¡çäžã«ããå Žåã ãå éšèšèšãæ°ãããã©ãããã©ãŒã ããšã³ãããŒãšã³ãã®å°éå¯èœæ§ãã¢ãã¬ã¹è¡çªãæãŸãªããã©ã€ããŒããããã¯ãŒã¯ãå°æ¥ã®å埩åã«åªããŠãããããã¯ããããçå£ãªããŒã¿ã»ã³ã¿ãŒæŠç¥ã®äžéšã§ããã¹ãã ãããããå€ãã®é¡§å®¢åããµãŒãã¹ã¯ãåçŽã« IPv4 æä»£ã®çµããã宣èšã§ããªãããµãã©ã€ã€ãŒããŒã¿ã«ãæ¯æãçµ±åããªã¢ãŒã管çããŒã«ãäžæ£é²æ¢ã·ã¹ãã ãVPN ã¢ãã©ã€ã¢ã³ã¹ãã¬ã¬ã·ãŒç£æ¥æ©åšãããŒãããŒãã¡ã€ã¢ãŠã©ãŒã«ã¯ããã°ãã° IPv4 äŸåã®ãŸãŸã§ãããããã³ãã®ãµãŒãã¹ã¯ãçæ³åããããããã¯ãŒã¯ã§ã¯ãªãããããååŒçžæã®ããã«æ©èœããªããã°ãªããªãã
NAT ã¯ã倿°ã®ãã©ã€ããŒããšã³ããã€ã³ãéã§ã¢ãã¬ã¹ãå ±æããããšã«ããããããªãã¯ã¢ãã¬ã¹ã®æ¶è²»ãåæžãããå€§èŠæš¡ã§ã¯äžå¯æ¬ ã§ãããããããNAT ã¯ç¡æã§ã¯ãªããåž°å±ã匱ããabuse åŠçãè€éã«ããå€ãã®é¡§å®¢ã 1 ã€ã®è©å€é¢ã«å§çž®ãããã°è² æ ãçã¿ã顧客蚱å¯ãªã¹ãã®æå³ã匱ããéåºã翻蚳æŒç¿ã«å€ããå¯èœæ§ãããããã£ãªã¢ã°ã¬ãŒã NAT ã¯ã¢ã¯ã»ã¹ãããã¯ãŒã¯ã§ã¯éŠŽæã¿æ·±ãããããŒã¿ã»ã³ã¿ãŒããã³ãã¯ãã°ãã°ããæ£ç¢ºãªã¢ã«ãŠã³ã¿ããªãã£ãå¿ èŠãšãããç é¢ãµãã©ã€ã€ãŒã決æžåŠçæ¥è ãæ¿åºå¥çŽæ¥è ã¯ããããªãã¯ã¢ã€ãã³ãã£ãã£ãé·ã abuse å±¥æŽãæã€æ··éããã€ãŒã°ã¬ã¹ããŒã«ã§ãããµãŒãã¹ãåãå ¥ããªããããããªãã
å°çšã¢ãã©ã€ã¢ã³ã¹ãæ®äœéèŠã説æããããããŒãžããã¡ã€ã¢ãŠã©ãŒã«ãããŒããã©ã³ãµãŒãVPN ã³ã³ã»ã³ãã¬ãŒã¿ãŒãDDoS ã€ã³ã¿ãŒãã§ã€ã¹ãç£èŠã³ã¬ã¯ã¿ãŒãé¡§å®¢åºæã®ã»ãã¥ãªãã£ã²ãŒããŠã§ã€ã¯ãã»ãšãã©ã®ãµãŒããŒããã©ã€ããŒããããã¯ãŒã¯ã®èåŸã«ããå Žåã§ãããã°ãã°ãããªãã¯ã¢ãã¬ã¹ãå¿ èŠãšããããããªãã¯ã¢ãã¬ã¹æ°ã¯å°ãªããããããªãããåã¢ãã¬ã¹ã«ä»éãã䟡å€ã¯é«ããããã³ãã¯ãããªã㯠IPv4 ãªãã§äœåãã®å éšããã»ã¹ãå®è¡ã§ããŠãã補åã䜿çšå¯èœã«ããããã«ä¿¡é Œã§ããå°æ°ã®ãããªãã¯ãšã³ããã€ã³ããäŸç¶ãšããŠå¿ èŠãšãããããããªãã
ã¡ãŒã«ã¯ããå³ããäŸã§ãããå€ãã®ããŒã¿ã»ã³ã¿ãŒã¯ãè©å€æå®³ãé«ãã€ãããã倧éã®ã¡ãŒã«ã¯ãŒã¯ããŒãã®ãµããŒãã奜ãŸãªããããããäžéšã®ãã¹ãã£ã³ã°äºæ¥è ãSaaS äŒæ¥ããšã³ã¿ãŒãã©ã€ãºããã³ãã¯äŸç¶ãšããŠå€åãã¡ãŒã«ãä¿¡é Œã§ããéç¥ãµãŒãã¹ãå¿ èŠãšãããã¡ãŒã«ã·ã¹ãã ã¯ã¢ãã¬ã¹å±¥æŽãèšæ¶ãããéåŒã DNSãSPFãDKIM ã¢ã©ã€ã¡ã³ããèŠæ çããã©ãã¯ãªã¹ãã¹ããŒã¿ã¹ãéèŠã§ãããæ°ãã«å²ãåœãŠããã IPv4 ç¯å²ã¯å€ãæå®³ãåŒãç¶ãå¯èœæ§ããããNAT å ±æããŒã«ã¯ 1 ããã³ãã®è¡åã倿°ã«æ¡æ£ãããå¯èœæ§ããããã¡ãŒã«ã«ããã IPv6 ãµããŒãã¯æ¹åããŠããããIPv4 ã®è©å€ã¯äŸç¶ãšããŠå€ãã®é¡§å®¢ã«ãšã£ãŠå°éæ§ãå·Šå³ããã
å ¬å ±éšéããã³èŠå¶å¯Ÿè±¡é¡§å®¢ã¯ããã«ä¿å®çã§ããã圌ãã¯ãã°ãã°èª¿éèšé²ãèªèšŒãã¡ã€ã«ããã³ããŒã¬ãã¥ãŒãç¶ç¶æ§æŒç¿ãã€ã³ã·ãã³ã察å¿ãã¬ã€ããã¯ã«éä¿¡å ã¢ãã¬ã¹ãåã蟌ããã¢ãã¬ã¹ã¯ã¹ãã¬ããã·ãŒãã®å°ããªãã£ãŒã«ããããããªããã倿Žã«ã¯éšéãè¶ ããæ¿èªãå¿ èŠã«ãªãå ŽåããããNAT ã¯æè¡çã«ã¯æ©èœããŠãä¿èšŒãã¹ãã«èœã¡ãå¯èœæ§ããããIPv6 ã¯ãµãŒãã¹ã®äžéšã§ã¯åãå ¥ãããã€ã€ããå¥çŽäžã®ç®¡çã¯äŸç¶ãšã㊠IPv4 éä¿¡å ã¢ãã¬ã¹ãæ±ãããããããªããããŒã¿ã»ã³ã¿ãŒãããã€ããŒã¯ãè³Œå ¥è ã®å®éã®ç£æ»ç°å¢ãæºãããªããã°ãªããªãã
ãã¢ãªã³ã°ããã³çžäºæ¥ç¶ã®åãæ±ºãã IPv4 éèŠãç¶æãããããã³ãã¯ãã£ãªã¢ãã¯ã©ãŠãããšã¯ã¹ãã§ã³ãžã顧客ãžã®ãã©ã€ããŒãæ¥ç¶ã泚æãããããããªããããã§ã€ã«ãªãŒããŒãç£èŠããªã¢ãŒãã¢ã¯ã»ã¹ã顧客ãªã³ããŒãã£ã³ã°ããããªã㯠API çšã«äŸç¶ãšããŠãããªãã¯ã¢ãã¬ã¹ãå¿ èŠãšãããçžäºæ¥ç¶ã¯éžæããããã©ãã£ãã¯ã®ã€ã³ã¿ãŒãããé²åºãæžããããå ¬å ±ãµãŒãã¹ã¢ã€ãã³ãã£ãã£ãæé€ããããã§ã¯ãªããå®éãããè±å¯ãªæ¥ç¶ç°å¢ã¯ãããå€ãã®ããã³ããåãªããµãŒããŒã«ãŒã ã§ã¯ãªãéçšæ ç¹ãšããŠããŒã«ã䜿çšãããããä¿¡é Œã§ãããããªãã¯ãšã³ããã€ã³ãã®éèŠãå¢å ããåŸãã
æ£ããçµè«ã¯ IPv6 ã«å¯Ÿããæ²èŠ³è«ã§ã¯ãªããç§»è¡çµæžåŠã«å¯ŸããèŠåŸã§ãããIPv6 ãš NAT ã¯ç¯çŽããŒã«ã§ãããIPv4 ã®åžå°æ§ãã¢ã¯ãã£ããŒã·ã§ã³ãæ¯é ããªããªã£ã蚌æ ã§ã¯ãªããIPv6 ãç¡èŠããããŒã¿ã»ã³ã¿ãŒã¯å°æ¥ãå°é£ã«ããŠãããIPv6 ãåžå°ãª IPv4 ã®å¿ èŠæ§ãåãé€ããšæ³å®ããããŒã¿ã»ã³ã¿ãŒã¯çŸåšãå°é£ã«ããŠãããããã 2 ã€ã®èª€ãã®éã«ãã忥çãªæéãããRIPE NCC ã®å°åž³ã移転èªèã蚌æ ãµãŒãã¹ãæãéèŠã«ãªãå Žæã§ããã
ã¬ãžã¹ããªã®èšŒæ ãåãå ¥ãã®åºç€ã§ãã
ãããªãã¯ã¢ãã¬ã¹ã¯èšŒæ ã®å±€ãéããŠä¿¡é Œããããããã³ãã¯å¥çŽãæ°ã«ãããããããªããäžæµãããã€ãã¯çµè·¯ããªã·ãŒãæ°ã«ãããããããªããDDoS ãããã€ãã¯èµ·ç¹æš©éãš abuse å±¥æŽãæ°ã«ãããããããªãããšã³ã¿ãŒãã©ã€ãºé¡§å®¢ã¯èš±å¯ãªã¹ããšãµãã©ã€ã€ãŒèšé²ãæ°ã«ãããããããªããã¡ãŒã«åä¿¡è ã¯éåŒã DNS ãšè©å€ãæ°ã«ãããããããªããã»ãã¥ãªãã£ãã³ããŒã¯éå»ã®æåãæ°ã«ãããããããªããã¬ãžã¹ããªèšé²ã¯ãããã®è³ªåãã¹ãŠã解決ããããã§ã¯ãªããããããã®å€ããçµç¹åãããäžå¿çãªå ¬çã¢ã³ã«ãŒãæäŸããã
RIPE NCC å°åã§ã¯ãRIPE ããŒã¿ããŒã¹ããªãœãŒã¹ãã«ããŒèšé²ãé£çµ¡å ããŒã«ãéåŒã DNS ã®åãæ±ºããRPKI ãµããŒããåãå ¥ãåºç€ã®äžéšã圢æããããã«ããŒã¬ã³ãŒãã¯ãã¬ãžã¹ããªã·ã¹ãã ã§èª°ãèªèãããŠãããã瀺ããé£çµ¡å ããŒã¿ãš abuse ããŒã«ã¯ãèŠæ ã管çäžã®è³ªåãã©ãã«è¡ãã¹ããã瀺ããéåŒã DNS ã¯åœåããµãŒãã¹ã®äœ¿çšã«åããããRPKI ãš ROA ã¯ãã©ã®èµ·ç¹ ASN ããã¬ãã£ãã¯ã¹ãã¢ããŠã³ã¹ããæš©éãæã€ãã瀺ãã®ã«åœ¹ç«ã€ã移転èšé²ãšã¢ã«ãŠã³ãæš©éã¯ãååŒçžæãç¯å²ãç§»åãŸãã¯æŽæ°ã§ãããã©ãããçè§£ããã®ã«åœ¹ç«ã€ã
åèŠçŽ ã«ã¯åæ¥çãªå¹æããããæç¢ºãªãã«ããŒæš©éãæã€ããã³ãã¯ããèªä¿¡ãæã£ãŠäº€æžã§ãããææ°ã® abuse é£çµ¡å ãæã€ãããã€ããŒã¯ãåé¿çã«èŠããã«èŠæ ã«åçã§ãããéåŒã DNS ãæŽåããç¯å²ã¯ãã¡ãŒã«ãšã»ãã¥ãªãã£ãã§ãã¯ãããéãééã§ãããæå³ããèµ·ç¹ãšäžèŽãã ROA ã¯çµè·¯åãå ¥ãã®æ©æŠãæžããããšãã§ãããã¬ãžã¹ããªã§èªèããã移転ã¯ãè³é調éã顧客ä¿èšŒãéçšã«çµã¿èŸŒãããšãã§ããã蚌æ ã¯ä¿¡ããŠãããã³ã¹ããåæžããã
éããŸãçã§ãããå€ãèšé²ã¯ã¢ãã¬ã¹åšåº«ãçŽäºäžåšåº«ã«å€ãããå€ãååãåŒéããé£çµ¡å ã匱ãäŒæ¥ç¶ç¶æ§ããããŸããªå§ä»»æš©éãæã€ã¬ã¬ã·ãŒç¯å²ã¯ãçè«äžã¯äŸ¡å€ããã£ãŠãå®è·µã§ã¯é ããæç¢ºãªèªèšŒã®ãªããªãŒã¹ç¯å²ã¯ã顧客ããã«ããŒãååãæ€åã§ãããã©ãããå°ãããŸã§æ©èœãããããããªããäžè¬çãªéåŒãåãæã€ãããã€ããŒå²ãåœãŠããŒã«ã¯ãåçŽãª Web ãã©ãã£ãã¯ã«ã¯åé¡ãªããŠããèŠå¶å¯Ÿè±¡ã¢ããªã±ãŒã·ã§ã³ã«ã¯åŒ±ããæ¬ èœãŸãã¯ççŸããçµè·¯èµ·ç¹è¡šæã¯ããšã³ãžãã¢ãªã³ã°ããŒã ã«é å»¶ãšãªã¹ã¯ã®éžæã匷ããå¯èœæ§ãããã
è©å€ã¯ã¬ãžã¹ããªèšé²ã®æšªã«äœçœ®ãããã鿥çã«ããã«äŸåãããã»ãã¥ãªãã£ãã³ããŒãã¡ãŒã«ã·ã¹ãã ã顧客ã¯ãã¹ãŠã®ã¬ãžã¹ããªãã£ãŒã«ããèªãããã§ã¯ãªãããã¢ã«ãŠã³ã¿ããªãã£ãæ°ã«ãããabuse ã¬ããŒããå®éã®ãã¹ã¯ã«å±ããååããµãŒãã¹ãšäžèŽããçµè·¯èµ·ç¹èšŒæ ãéŠå°Ÿäžè²«ãããã«ããŒãèšé²ãä¿®æ£ã§ãããªããè©å€æå®³ã¯ç®¡çå¯èœã§ãããå ¬éèšé²ãä¹±éã§ããã°ã修埩ã¯é ããªããæªãå±¥æŽãæã€åžå°ãªã¢ãã¬ã¹ã¯åãªãæè¡çè² æ ã§ã¯ãªããåšåº«ã«ä»éããè©å€äžã®è² åµã§ããã
åãå ¥ãåºç€ã¯ããã§ãŒã³ã«è€æ°ã®åœäºè ãããå Žåã«ããéèŠã«ãªããã³ãã±ãŒã·ã§ã³ãããã€ããŒã¯ã¢ãã¬ã¹åšåº«ããªãŒã¹äŒç€Ÿã«ãã¢ããŠã³ã¹ããã£ãªã¢ã«ãã¹ã¯ã©ãã³ã°ã DDoS ãããã€ããŒã«ããµãŒãã¹éçšãããã³ãã«ãåãå ¥ããå ¬å ±éšéã®é¡§å®¢ã«äŸåãããããããªããååœäºè ã¯ãã¢ãã¬ã¹ç¯å²ãè匱ãªç§ççŽæã§ã¯ãªãããšãç¥ãããããã¬ãžã¹ããªå°åž³ã¯ãããã®éã®å¥çŽã代æ¿ãããã®ã§ã¯ãªããããã¯ãã©ãã£ãã¯ãåãåã«å¿ èŠãªç§çä¿èšŒã®æ°ãæžãããå ±éã®äºå®åºç€ãæäŸããã
ãã®å ±éåºç€ããèãå°åž³ã倧ããªçµæžç䟡å€ãæã¡åŸãçç±ã§ãããRIPE NCC ã¯ãããŒã¿ã»ã³ã¿ãŒããã³ããæé·ã«å€ãããã©ãããæ±ºå®ãã¹ãã§ã¯ãªããããžãã¹ã¢ãã«ãã©ã³ã¯ä»ãããããæµè¡ã®ç£æ¥ç®æšã«åŸã£ãŠåžå°ãªçªå·ãå²ãåœãŠãã¹ãã§ã¯ãªãããã®äŸ¡å€ã¯ãä»è ãäŸåããã®ã«ååå®å®ããå ¬ç蚌æ ãç¶æããããšã«ãããå°åž³ãæ£ç¢ºã§ãéè£éçã§ãããŒã¿ãã«ã§ããã°ãæ°éåžå Žã¯ãã¹ãŠã®ã¢ãã¬ã¹åé¡ãäºåœéã®åã®è©Šç·Žã«å€æããããšãªãæææ±ºå®ã§ããã
ãçµè·¯åãå ¥ãããšãããã¬ãŒãºãèŠç¹ãæããŠãããçµè·¯ã¯æè¡çã«ã¢ããŠã³ã¹ããããããããªãããä»ã®ãããã¯ãŒã¯ããªã¹ã¯ã·ã¹ãã ã«ãã£ãŠãåãå ¥ããããªããã°ãªããªããRPKI ãš ROA ã¯ä¿¡é Œã®å®å šãªçè«ã§ã¯ãªãããããã¯éèŠãªèšŒæ å±€ã§ãããéåŒã DNS ã¯çŸåŸ³ã®ä¿èšŒã§ã¯ãªããåœåãšè²¬ä»»ã®å±€ã§ãããabuse é£çµ¡å ã¯çœ°ã§ã¯ãªããå¿çå±€ã§ããããã«ããŒã¬ã³ãŒãã¯å¶æ¥èš±å¯èšŒã§ã¯ãªããã¹ãã¥ã¯ãŒãã·ããå±€ã§ãããããããå ±ã«ãªã£ãŠãããŒã¿ã»ã³ã¿ãŒããã³ãããããã€ããŒã®ç§çä¿èšŒã ãã«äŸåããã«å¯èŠåãããããšãå¯èœã«ããå ¬ç蚌æ ã圢æããã
ããŒã¿ã»ã³ã¿ãŒã¯éæ¥çãªã²ãŒãããŒããŒã«ãªã
ããŒã¿ã»ã³ã¿ãŒã¯ã¬ãžã¹ããªã§ã¯ãªããã°ããŒãã«ã«äžæãªçªå·ãªãœãŒã¹ãäœæããããã§ã¯ãªããäžç«ãªå ¬çæ©é¢ãè£ ãã¹ãã§ããªããããããåžå°ãªã¢ãã¬ã¹åšåº«ãã©ã®ããã«ããã±ãŒãžåããäŸ¡æ Œä»ãããææžåããããã³ãã«çµã³ã€ããããæ±ºå®ããããã鿥çãªã²ãŒãããŒããŒã«ãªãã誰ãå°çšãããªãã¯ç¯å²ãåãåãã誰ãå ±æããªããã°ãªããªããã誰ãã¢ãã¬ã¹ç©ºéãæã¡èŸŒãããã誰ãéåŒã DNS ãµããŒããåŸããã誰ãçµè·¯èµ·ç¹æ¯æŽãåãããã誰ãè©å€ä¿®åŸ©ãè² ããã誰ãç¶ç¶æ§ãæã£ãŠéåºã§ããããéžæããã
ãã®ã²ãŒãããŒãã³ã°ã¯åžžã«ä¹±çšçãšã¯éããªãããããã€ããŒã¯èªèº«ã®ãããã¯ãŒã¯ãä»ã®ããã³ããè©å€ãå®ããªããã°ãªããªããé«ãªã¹ã¯é¡§å®¢ãæåŠããåžå°ãª IPv4 ãé 絊ãã匷å㪠abuse æç¶ããèŠæ±ããå°çšç¯å²ã«èª²éãããããããªããåçŽãªè£œåã«ã¯å ±æããŒã«ã奜ã¿ãææãªãµãŒãã¹ã«ã¯ããã¯ãªãŒã³ãªç¯å²ã確ä¿ãããããããªãããããã¯éåžžã®åæ¥ç倿ã§ãããåé¡ã¯ãåžå°æ§ã³ã¹ããé ãããããŒã¿ããªãã£ãèªåŒµããããŸãã¯èšŒæ ãããã³ããäŸåãäŸ¡æ Œä»ãã§ããªãã»ã©å³ãã管çãããå Žåã«çããã
ãªã³ããŒãã£ã³ã°ãæåã®éã§ãããããã³ãã¯ç©ççããŒã«ã«ã¯åãå ¥ããããŠãããããªãã¯ãããã¯ãŒã¯é¢ã«ã¯ãŸã åãå ¥ããããªããããããªãããããã€ããŒã¯ IPv4 ãå²ãåœãŠãåã«æ£åœåãæ±ãããããããªããNAT ã®äœ¿çšãããã³ãã«èŠæ±ãããããããªãã远å ã®ãããªãã¯ã¢ãã¬ã¹ã«å¯ŸããŠããå€ã課éãããããããªããéåŒã DNS ã®å§ä»»ãæåŠãããããããªããæ¯æããŸãã¯ã¢ã«ãŠã³ãã¬ãã¥ãŒåŸãŸã§çµè·¯èµ·ç¹ãµããŒããé ããããããããªããåæ±ºå®ã¯ããèªäœã§åŒè·å¯èœãããããªããéåçã«ã¯ãããã³ããèªèº«ã®ãµãŒãã¹ã販売ã§ãããã©ãããæ±ºå®ããã
æ¡åŒµã第äºã®éã§ãããããå€ãã®ã¯ãªãŒã³ãª IPv4 ãå ¥æã§ããªããã¢ã¡ã¿ã«ãã¹ãã£ã³ã°äºæ¥è ã¯ãã©ãã¯ãšé»åãå©çšå¯èœã§ãè²©å£²ãæžéããããåŸãªããããããªããSaaS ãããã€ããŒã¯å°çšãšã³ããã€ã³ããèŠæ±ãã顧客ãæããªããã°ãªããªããããããªããå ¬å ±ãµãŒãã¹äŸçµŠæ¥è ã¯åŸ©æ§ãµã€ãã远å ã§ããªããããããªããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ããã倧ããªäŒæ¥ãããå€ãã®ã¢ãã¬ã¹åšåº«ãæã€ããããã倧ããªãã©ãããã©ãŒã ãžæŒããããããããããªãããã®ããã«ãåžå°æ§ã¯ç£æ¥æ§é ã«åœ±é¿ãäžãããããå€ãä¿æããã匷åãªè³é調éããªãŒã¹ç¯å²ãžã®ããè¯ãã¢ã¯ã»ã¹ãæã€ãããã€ããŒã«æå©ã«åãåŸãã
éåºã第äžã®éã§ãããããã³ãã®ãããªãã¯ã¢ã€ãã³ãã£ãã£ãå®å šã«ãããã€ããŒã®ããŒã«å ã«ããå Žåãé¢è±ã«ã¯ã³ã¹ãããããã顧客蚱å¯ãªã¹ããéåŒã DNSãã€ã³ã·ãã³ãå±¥æŽãè©å€ãç£èŠèšé²ã®ãã¹ãŠã倿Žããå¿ èŠããããããããªããããã³ããèªèº«ã®ç©ºéãæã¡èŸŒãã§ããããçµè·¯èµ·ç¹èšŒæ ããããã€ããŒã®ãµããŒãã«äŸåããŠããå Žåãéåºã«ã¯äŸç¶ãšããŠèª¿æŽãå¿ èŠãããããªãããããã€ããŒãæç¢ºãªåŒãç¶ããã¹ãªãã«ãªãŒã¹ç¯å²ã䜿çšããŠããå Žåãããã³ãã¯ç¶ç¶æ§ãè³åãã§ããææã§ã¯ãªãã£ãããšãçºèŠãããããããªããéåºã³ã¹ãã¯å¶çºçãªå¯äœçšã§ã¯ãªããããã¯ã¢ãã¬ã¹åžå°æ§ã亀æžåã«å€ããäžã€ã®æ¹æ³ã§ããã
DDoS ãšã»ãã¥ãªãã£ãµãŒãã¹ãå¥ã®éã远å ãããå€ãã®ããã³ãã¯ã¹ã¯ã©ãã³ã°ãWeb ã¢ããªã±ãŒã·ã§ã³ä¿è·ããããŒãžããã¡ã€ã¢ãŠã©ãŒã«ãã»ãã¥ãªãã£ç£èŠãå¿ èŠãšããããããã®ãµãŒãã¹ã¯ãã°ãã°ãããªãã¯ã¢ãã¬ã¹ã®èª¿æŽãçµè·¯å€æŽãGRE ãã³ãã«ãBGP ã»ãã·ã§ã³ãéåŒã DNS ãã§ãã¯ã顧客æ€èšŒãè©å€ã¬ãã¥ãŒãå¿ èŠãšãããã¢ãã¬ã¹èšŒæ ãã»ãã¥ãªãã£ãµãŒãã¹ãšçµ±åã§ããããŒã¿ã»ã³ã¿ãŒã¯ãããã³ããããè¿ éã«ã¢ã¯ãã£ããŒãã§ãããä¿¡é Œã§ãã蚌æ ãæç€ºã§ããªãããã³ãã¯ããããã€ããŒææã®ã»ãã¥ãªãã£ãã³ãã«ãžãšæŒããããããããããªããããã§ãåé¡ã¯äžæ£è¡çºã§ã¯ãªããåãå ¥ãã«å¿ èŠãªèšŒæ ã誰ã管çãããã§ããã
ãšã³ã¿ãŒãã©ã€ãºé¡§å®¢ãéèŠåŽããæçµã®éãäœããããã³ãã¯ããŒã¿ã»ã³ã¿ãŒã䜿çšããæºåãã§ããŠããŠããèªèº«ã®é¡§å®¢ããããŸããªã¢ãã¬ã¹èšç»ãæåŠãããããããªãã倧å£è³Œå ¥è ã¯å®å®ãããšã³ããã€ã³ããabuse é£çµ¡å ãç¶ç¶æ§æç¶ããããŒã¿æåšå°ä¿èšŒãã€ã³ã·ãã³ã察å¿ãã¹ãæ±ãããããŒã¿ã»ã³ã¿ãŒãããã€ããŒã¯è³Œå ¥è ã®äŒè°ã«ååžããªããããããªããããã®ã¢ãã¬ã¹ããªã·ãŒãããã³ããå¿çã§ãããã©ãããæ±ºå®ãããããŒã«ã¯å®å šã«ã¯å¶åŸ¡ã§ããªãä¿¡é Œã®ããã®åä»ãã¹ã¯ãšãªãã
å¶åºŠçæ£åœæ§ã¯ããããã®ç§çãªéãå ¬çå°åž³ã®ä»£æ¿ç©ãšãªãã®ãé²ãããšã«ããã£ãŠãããããŒã¿ã»ã³ã¿ãŒã¯åšåº«ã管çãåžå°æ§ã«äŸ¡æ Œãä»ããããšãã§ããããããã³ãã®ãããªãã¯ã¢ã€ãã³ãã£ãã£ã説æã§ããå¯äžã®åœäºè ãšãªãã¹ãã§ã¯ãªããã¬ãžã¹ããªã¯ãã©ã³ããŒã«ãªãããšãªã蚌æ ãç¶æã§ãããå¥å šãªå¢çã¯åçŽã§ããïŒæ°éãããã€ããŒã¯äœã販売ããããæ±ºå®ããå ¬çå°åž³ã¯ã¹ãã¥ã¯ãŒãã·ãããæš©éãã«ãŒãã£ã³ã°èšŒæ ãããã³ããäžæçãã«ãã£ãŠéã蟌ããããªãã»ã©ååã«ããŒã¿ãã«ã«ããã
移転ããªãŒã¹ãè©å€ãåžå°æ§ã³ã¹ãã®è² æ è ãæ±ºãã
ããŒã¿ã»ã³ã¿ãŒã® IPv4 éèŠã®ãµãã©ã€ãã§ãŒã³ã¯ãç§»è»¢ãæ§ä¿æããªãŒã¹å¥çŽãååããŒã«ãå éšç¯çŽãéããŠæµãããåçµè·¯ã¯åã質åã«ç°ãªãæ¹æ³ã§çããïŒåžå°æ§ã®ã³ã¹ãã誰ãè² æ ããã®ãïŒã¢ãã¬ã¹ãè³Œå ¥ãããããã€ããŒã¯è³æ¬ã³ã¹ããåæããããã匷åãªç®¡çãåŸãããªãŒã¹ãããããã€ããŒã¯çµåžžã³ã¹ããšæŽæ°ãªã¹ã¯ãè² ããèªèº«ã®ç©ºéãæã¡èŸŒãããã³ãã¯ç®¡çè² æ ãè² ããããŒã¿ããªãã£ãç¶æãããå ±æããŒã«ãåãå ¥ãã顧客ã¯ãäŸåãè©å€é²åºãéåºæ©æŠãéããŠåŸã§æ¯æãã
移転ã¯ããããã€ããŒãç¶ç¶çãªéèŠãèŠèŸŒãå Žåã®èä¹ æ§ã®ããçµè·¯ã§ãããæªäœ¿çšã®ã¢ãã¬ã¹ç©ºéãããæç¢ºãªæš©éãšé·ãèšç»æéãæã€ããŒã¿ã»ã³ã¿ãŒåšåº«ã«å€æã§ãããRIPE NCC å°åã§ã¯ã移転ããªã·ãŒãšã¬ãžã¹ããªèªèããããå¯èœã«ããã®ã«åœ¹ç«ã€ããããã移転ã¯éæ³ã®ããã«å³åº§ã«äœ¿çšå¯èœãªåšåº«ãçã¿åºãããã§ã¯ãªããç¯å²ã«ã¯ãã¥ãŒããªãžã§ã³ã¹ããã«ããŒæ€èšŒãé¢é£äŒç€Ÿéã®åæãé£çµ¡å æŽæ°ãéåŒã DNS ç§»è¡ãã«ãŒãã£ã³ã°å€æŽãè©å€ä¿®åŸ©ãå¿ èŠãããããªããã¢ãã¬ã¹ãããã®äŸ¡æ Œã¯ã³ã¹ãã®ç®ã«èŠããéšåã«ãããªãã
ã¬ã¬ã·ãŒãŸãã¯å€ãäŒæ¥ä¿æã¯ãåãçç±ã§é åçã§ããå°é£ã§ããããããã¯å€§ãããã¯ãªãŒã³ã§ãååã«æŽ»çšãããŠããªããããããªããããããå€ãèšé²ãæã®äŒæ¥åãäžåšã®ã¹ã¿ãããäžæçãªå éšæš©éãå®å šã«ææžåãããããšã®ãªãäŸåé¢ä¿ãæ±ããŠããå ŽåããããããŒã¿ã»ã³ã¿ãŒè³Œå ¥è ã¯æœåšçåšåº«ãèŠããããããªãããçå£ãªé¡§å®¢ã¯æš©éãã§ãŒã³ãäŸåããã®ã«ååã¯ãªãŒã³ãã©ãããå°ããã ãããã¢ãã¬ã¹å±¥æŽãå€ããã°å€ãã»ã©ãå°åž³ã¯èšæ¶ã䜿çšå¯èœãªèšŒæ ã«å€ããæ¹æ³ãšããŠäŸ¡å€ãé«ãŸãã
ãªãŒã¹ã¯æè»ã§ãããäžç¢ºå®ãªéèŠãäžæçãããžã§ã¯ããã¹ã€ã³ã°å®¹éããã©ã€ã¢ã«é¡§å®¢ãå£ç¯çã¯ãŒã¯ããŒãããããã€ããŒãæä¹ çåšåº«ãè³Œå ¥ããåã®æé·æéããµããŒãã§ãããå°èŠæš¡äºæ¥è ãéå°ãªè³æ¬ãææããã®ãé¿ããã®ã«åœ¹ç«ã€ããŸããåžå°æ§ãé ããè匱æ§ã«å€ããå¯èœæ§ããããèªèããããã«ããŒãå¥ã®å Žæã«æ®ã£ãŠããå Žåã誰ãéåŒã DNS ã管çããã®ãïŒèª°ã ROA ãäœæãŸãã¯å€æŽããã®ãïŒèª°ã abuse ã«å¿çããã®ãïŒé¡§å®¢å¥çŽäžã«ãªãŒã¹ãçµäºãããã©ããªãã®ãïŒããã³ãã¯èªèº«ã®é¡§å®¢ã«ãã®åãæ±ºããé瀺ã§ããã®ãïŒãªãŒã¹äœ¿çšãã移転ãŸãã¯çœ®ãæããžã®ææžåããããã¹ã¯ããã®ãïŒ
ç§»è»¢äŸ¡æ ŒãäžæãããšãªãŒã¹ã®èªæãå¢ãã販売å§åäžã®ãããã€ããŒã¯ãããå®äŸ¡ã§è¿ éãªåãæ±ºãã奜ã¿ãç¶ç¶æ§ã®åé¡ãçºçããªãããšãé¡ããããããªããäœãªã¹ã¯çšéã§ã¯åççãããããªããå ¬å ±ãµãŒãã¹é¡§å®¢ãèŠå¶å¯Ÿè±¡ããã³ããå°çšã€ã³ãã©ã販売ãã補åã«ãšã£ãŠã¯å±éºã§ãããåé¡ã¯ãªãŒã¹äœ¿çšãã®ãã®ã§ã¯ãªããåé¡ã¯ããªãŒã¹ããããããªãã¯ã¢ã€ãã³ãã£ãã£ãããããã€ããŒä¿æãŸãã¯ããã³ãä¿æã®ç©ºéãšåãç¶ç¶æ§ããããã®ããã«è²©å£²ããããšã§ãããåžå°æ§ã³ã¹ãã¯æ¶ãå»ã£ãŠã¯ããªããããã¯æŽæ°ãšèšŒæ ãªã¹ã¯ã«ç§»ãããã®ã ã
è©å€ãäŸçµŠãåçåã§ãããã©ãããæ±ºå®ããã以åã® abuse ã«ãã£ãŠæ±æããããªãŒã¹ãŸãã¯ç§»è»¢ãããã¯ã¯ãææãªäœ¿çšã®åã«æ°é±éããæ°ã¶æã®ã¯ãªãŒã³ã¢ãããå¿ èŠãããããªãããžãªãã±ãŒã·ã§ã³ã誀ã£ãåœãæããããããªããéåŒãåããŸã å€ããµãŒãã¹ãèšåããŠãããããããªããã»ãã¥ãªãã£ãã³ããŒãéå»ã®ã€ã³ã·ãã³ãã®ããã«ãã®ç¯å²ã«ãã©ã°ãç«ãŠããããããªããã¡ãŒã«ãããã€ããŒããã©ãã£ãã¯ãçµããããããªããäœãèŠåºãäŸ¡æ Œããã¹ã¿ããæéã顧客é å»¶ã修埩ãå«ãŸãããšé«ãã€ãå¯èœæ§ãããããããã£ãŠãæ¬æ ŒçãªããŒã¿ã»ã³ã¿ãŒåšåº«æ¿çã¯ãåãªãååŸã§ã¯ãªãè©å€ããªã¢ãŒãžããå§ãŸãã
åšåº«æ¿çã¯ãŸãã誰ãæè¯ã®åšåº«ãåŸãããæ±ºå®ããããããã€ããŒã¯å ¬å ±éšéããã³ãããšã³ã¿ãŒãã©ã€ãº SaaSãéè顧客ããããŒãžãã»ãã¥ãªãã£ãµãŒãã¹ãã¡ãŒã«ã«ææãªã¯ãŒã¯ããŒãã®ããã«ã¯ãªãŒã³ãªç¯å²ã確ä¿ãããããããªãããããã€ãºã®å€ã顧客ãåé¢ãããããŒã«ã«çœ®ããããããªããå°çšãããªãã¯ç¯å²ã«å¯ŸããŠãããžãããããé«ãçµåžžæéãèŠæ±ãããããããªããèªèº«ã®ç©ºéãæã¡èŸŒãŸãªãéããã¢ãã¬ã¹ãå€ãå¿ èŠãšãã顧客ãæããããããªãããããã®æ±ºå®ã¯ããŒã¿ã»ã³ã¿ãŒå éšã®ã¢ãã¬ã¹çµæžã§ããããããã¯ç§çãªäŸ¡æ Œä»ããšãªã¹ã¯ã«ãŒã«ãéããŠåžå°ãªãããªãã¯å ¥åãé åããã
RIPE NCC ã¯ãããã®åæ¥çé åãéžæããããšã¯ã§ããªããããããã¹ãã§ããªãããã®åœ¹å²ã¯ãåºç€ãšãªã蚌æ ããåžå°æ§ã³ã¹ããèŠããããã«ãªãã»ã©ååã«ä¿¡é Œã§ãããã®ã«ããããšã§ããã移転ãäºæž¬å¯èœã«èªèããããã«ããŒæš©éãæç¢ºã§ãããéåŒã DNS å§ä»»ãåé¿å¯èœãªãããŸãããªãã«ç§»åã§ããçµè·¯èµ·ç¹èšŒæ ãç§»è¡ã«éã«åãããã«å€æŽã§ããabuse é£çµ¡å ãææ°ã§ããç¶ãããªããè³Œå ¥è ããªãŒã¹äŒç€Ÿãããã³ãã顧客ã¯ããæ£çŽã«åãæ±ºããäŸ¡æ Œä»ãã§ãããé ããã³ã¹ããããç§çæ¯é ãæã匷ãæé·ããå Žæã§ããã
å ¬å ±ãµãŒãã¹é¡§å®¢ãã¢ãã¬ã¹ç¶ç¶æ§ããµãŒãã¹æ¡ä»¶ã«å€ãã
å ¬å ±ãµãŒãã¹é¡§å®¢ã¯ãããŠã³ã¿ã€ã ãåãã³ããªã³ã°ãåãªã忥çäžäŸ¿ã§ã¯ãªããããå©å®³ãå€ãããå°æ¹èªæ²»äœããŒã¿ã«ãç é¢ãµãã©ã€ã€ãŒãç·æ¥éä¿¡ãã³ããŒãç ç©¶ãããã¯ãŒã¯ãåŠæ ¡ãã©ãããã©ãŒã ãæž¯æ¹Ÿã·ã¹ãã ãéèŒžäºæ¥è ãå ¬çäºæ¥å¥çŽæ¥è ãæ¿åºã€ã³ãã°ã¬ãŒã¿ãŒã¯ãã¹ãã¬ã¹äžã§ãå°éå¯èœã§ããç¶ããªããã°ãªããªããã¹ãåã€ã³ãã©ã«äŸåãããããããªãããµãŒãã¹ã¯éåžžã®ã³ãã±ãŒã·ã§ã³ããŒã«ã«ååšãããããããªããããã®ç¶ç¶æ§ãžã®æåŸ ã¯éåžžã§ã¯ãªãããããªãã¯ã¢ãã¬ã¹ã®èšŒæ ããµãŒãã¹çŽæã®äžéšãšãªãã
ãããã®é¡§å®¢ã¯ãã°ãã°åœ¢åŒçãªèšèªã§åçŽãªè³ªåãããããµãŒãã¹ã¯ã©ã®ãããªãã¯ã¢ãã¬ã¹ã䜿çšããã®ãïŒèª°ããããã管çããã®ãïŒå¥çŽæéäžãããã¯å®å®ããŠãããïŒã€ã³ã·ãã³ãã¯ã©ã®ããã«å ±åãããã®ãïŒãããã€ããŒã¯åŸ©æ§ãµã€ãããµããŒãã§ãããïŒããŒã¿ã»ã³ã¿ãŒããã£ãªã¢ã倿Žãããã©ããªãã®ãïŒäžæµã®ãã¹ãŠã®æ©é¢ããã¡ã€ã¢ãŠã©ãŒã«ãæŽæ°ããããšãªããµãŒãã¹ãç§»åã§ãããïŒéåŒã DNS ãš abuse é£çµ¡å ã¯ç¶æãããŠãããïŒçµè·¯èµ·ç¹èšŒæ ã¯æå³ããèšèšããµããŒãããŠãããïŒãããã®è³ªåã¯ç®¡ççã«èãããããããã¯ãããã€ããŒãåãå ¥ãå¯èœãã©ãããæ±ºå®ããã
å ¬å ±èª¿éã¯æå³ããäŸåãå¢å¹ ãããå¯èœæ§ããããå ¥æã¯ã¢ãã¬ã¹ã®ããŒã¿ããªãã£ãæå®ããã«ããã¹ãåãµãŒãã¹ã䞻暩çãã±ãŒã·ã§ã³ãå°åãµããŒãããŒã ãå埩åã®äž»åŒµãè©äŸ¡ãããããããªãããããšèœæãµãã©ã€ã€ãŒã¯ããããè¿ éã§ãããããããã€ããŒå²ãåœãŠã® IPv4 ã䜿çšããããµãŒãã¹ã皌åãããæ©é¢ãç é¢ãåŠæ ¡ãå¥çŽæ¥è ããšã³ããã€ã³ããèšé²ãããæ°å¹ŽåŸããããªãã¯ã¢ã€ãã³ãã£ãã£ããµãŒãã¹ãã®ãã®ã§ã¯ãªããã¹ãã£ã³ã°ãã§ãŒã³ã«å±ãããããéåºãå°é£ã«ãªããåœåã®èª¿éã¯ã¢ãã¬ã¹ã®è€éããåé¿ããããšã§æéãç¯çŽããããéžæè¢ã®æžå°ãšãã代åãæã£ãã
ç¶ç¶æ§åé¡ã¯ãRIPE NCC å°åå ã®å°èŠæš¡ç®¡èœåºåãšãšããžåžå Žã«ãšã£ãŠç¹ã«æ·±å»ã§ãããå°èŠæš¡ãªåœå ãã¹ãã£ã³ã°äºæ¥è ã¯ãæ§ãããªæœèšããå ¬å ±ãŠã§ããµã€ããå»çãµãã©ã€ã€ãŒãæè²ã·ã¹ãã ãå°å äŒæ¥ããµããŒããããããããªãããã®ã¢ãã¬ã¹åšåº«ã¯çããããããªãã移転åžå Žãžã®ã¢ã¯ã»ã¹ã¯å€§èŠæš¡ãªãšãŒããããã£ã³ãã¹ã®ããããã匱ããããããªãããã®é¡§å®¢ã¯èªèº«ã®çªå·ãªãœãŒã¹ã管çããã¹ã¿ãããæ¬ ããããããªãããã®ãããªåžå Žã§ã¯ãã¯ãªãŒã³ã§ããŒã¿ãã«ã§ååã«ææžåãããã¢ãã¬ã¹ç¯å²ãããã®ãµã€ãºä»¥äžã«å€§ããªå ¬å ±ç䟡å€ãæã¡åŸãã
NAT ã®å§åã¯ç¶ç¶æ§ãšè¡çªããå¯èœæ§ããããIPv4 äžè¶³äžã®ãããã€ããŒã¯ãããå€ãã®ããã³ããå ±æã€ãŒã°ã¬ã¹ã®èåŸã«æŒã蟌ã¿ãããªããããããªããåçŽãªãµãŒãã¹ã§ã¯ãããã¯ãã°ãã°åãå ¥ãå¯èœã§ãããå ¬å ±ãµãŒãã¹é¡§å®¢ã«ãšã£ãŠã¯ãå ±æã€ãŒã°ã¬ã¹ã¯ç£æ»ã®æç¢ºæ§ãšã€ã³ã·ãã³ã察å¿ã匱ããå¯èœæ§ãããã倿°ã®ãµãŒãã¹ãåããããªãã¯ã¢ãã¬ã¹ããçŸããå ŽåãèŠæ ããã©ãã¯ãªã¹ãã€ãã³ããã»ãã¥ãªãã£ã³ã³ãããŒã«ãç¡é¢ä¿ã®ãµãŒãã¹ã«åœ±é¿ãäžããå¯èœæ§ãããããããã€ããŒã¯å éšãã°ãç¶æãããããããªãããå€çã¯ããçã衚é¢ãèŠããå ¬å ±ãµãŒãã¹é¡§å®¢ã¯ãã°ãã°ããå¯èŠçãªåé¢ãå¿ èŠãšããã
éåºãšã¹ã€ã³ã°å®¹éã¯ç¶ç¶æ§ã®äžéšã§ãããå ¬å ±ãµãŒãã¹ã¯ãããç¯å²ããªãã«ããŠå¥ã®ç¯å²ããªã³ã«ããããšã§åžžã«ç§»åã§ããããã§ã¯ãªããæ©é¢ããã¡ã€ã¢ãŠã©ãŒã«ãæŽæ°ãããµãã©ã€ã€ãŒã·ã¹ãã ãæ°ãããšã³ããã€ã³ãããã¹ãããDNS 倿ŽãäŒæãããã«ããã¹ã¯ããŠãŒã¶ãŒã«èª¬æããã»ãã¥ãªãã£ããŒã ããã°ãæ¯èŒããéãéè€ãå¿ èŠãããããªããããŒã¿ã»ã³ã¿ãŒãŸãã¯ãã¹ãã£ã³ã°äºæ¥è ã¯ãç§»è¡ããµããŒãããã®ã«ååãªäºåã®ãããªãã¯ã¢ãã¬ã¹å®¹éãæããªããã°ãªããªããã¹ã€ã³ã°åšåº«ããªããããã€ããŒã¯ãæå³ããã«é¡§å®¢ãéã蟌ããå¯èœæ§ãããã
RIPE NCC ã®å ¬çå°åž³ã¯ãããã®é¡§å®¢ã鿥çã«æ¯æŽããããµãŒãã¹ãããã€ããŒãšããã³ãã«ãã¹ãã¥ã¯ãŒãã·ãããé£çµ¡å¯èœæ§ãéåŒã DNS 管çãçµè·¯èµ·ç¹æå³ãç€ºãæ¹æ³ãæäŸãããæ¿åºã«ãã¹ãã£ã³ã°ã®èª¿éæ¹æ³ãæç€ºããããã§ã¯ãªããå埩åãä¿èšŒããããã§ã¯ãªããããããèšé²ãæ£ç¢ºã§ããŒã¿ãã«ã§ããã°ã調éããŒã ã¯ããè¯ã質åãããããšãã§ããïŒãµãã©ã€ã€ãŒã¯ã¢ãã¬ã¹èšŒæ ã管çããŠããããç§»åã§ããããåé¢ã§ãããããã¹ãã£ã³ã°å¥çŽãå€ãã£ããã©ããªããïŒããããã°ãåžå°æ§ã¯ç®ã«èŠããªãå¶çŽã§ã¯ãªããé瀺ãããéçšãªã¹ã¯ã«ãªãã
å°èŠæš¡äºæ¥è ãšãã€ããŒã¹ã±ãŒã«ãã£ã³ãã¹ã¯åãã¢ãã¬ã¹çµæžã«çŽé¢ããªã
ããŒã¿ã»ã³ã¿ãŒã®ã¢ãã¬ã¹éèŠã¯ããã°ãã°ãã¹ãŠã®ãããã€ããŒãåãåžå°æ§ã«çŽé¢ãããã®ããã«è«ãããããããã§ã¯ãªãããã€ããŒã¹ã±ãŒã«ãã£ã³ãã¹ãå€§èŠæš¡ãªãã£ãªã¢äžç«æœèšãåœå ã³ãã±ãŒã·ã§ã³äŒæ¥ãå°åãã¹ãã£ã³ã°äºæ¥è ããããŒãžããµãŒãã¹ãããã€ããŒããšããžã©ãã¯éå¶è ã¯ãç°ãªãã¢ãã¬ã¹çµæžã«äœãã§ãããåãæ¯æžãã IPv4 äžçãå ±æããŠããããè³é調éãåšåº«ã¢ã¯ã»ã¹ããšã³ãžãã¢ãªã³ã°ã®æ·±ããé¡§å®¢æ§æã亀æžåãç°ãªãã
ãã€ããŒã¹ã±ãŒã«ããã³éåžžã«å€§èŠæš¡ãªãã£ã³ãã¹ã¯ãã¢ãã¬ã¹æ¥åãå€ãã®é¡§å®¢ãšããŒã ã«åæ£ã§ãããå€ãä¿æããããŒã«ãŒé¢ä¿ã匷åãªç§»è»¢åžå Žã¢ã¯ã»ã¹ãè©å€ç®¡çã®ããã®å éšããŒã«ãæçãã RPKI å®è·µããã£ãªã¢ãžã®åœ±é¿åãã»ãã¥ãªãã£ã¹ã¿ãããæã€ãããããªããåçåºç€ã倧ãããããäºååšåº«ã®ä¿æãæ£åœåã§ããããŸãããããªã㯠IPv4 ãç¯çŽããã¢ãŒããã¯ãã£ãžé¡§å®¢ãèªå°ããããšãã§ãããåžå°æ§åé¡ã¯çŸå®ã ããèŠæš¡ã«ãã£ãŠç·©åãããŠããã
å€§èŠæš¡ã³ãã±ãŒã·ã§ã³ããã¯äžéçãªäœçœ®ãå ãããã¯ã©ãŠããã©ãããã©ãŒã ã§ã¯ãªããããããªããããšã¯ã¹ãã§ã³ãžããã£ãªã¢ãã³ã³ãã³ããããã¯ãŒã¯ãã»ãã¥ãªãã£ãããã€ããŒããšã³ã¿ãŒãã©ã€ãºé¡§å®¢ã®è¿ãã«äœçœ®ãããã¢ãã¬ã¹ããªã·ãŒã¯ã©ã®ããã³ããæé·ãããã«åœ±é¿ãäžãåŸããã¯ãªãŒã³ãªåšåº«ãšäºæž¬å¯èœãªèšŒæ ãæã€ããã¯ããããŒãžããã¹ãã£ã³ã°äºæ¥è ããã¢ã¡ã¿ã«ãã©ãããã©ãŒã ãèŠå¶å¯Ÿè±¡é¡§å®¢ãåŒãã€ããããšãã§ãããã¢ãã¬ã¹åšåº«ãåŸåãã«ããããã¯äŸç¶ãšããŠé»åãšã¹ããŒã¹ã販売ã§ãããããããªããããã䟡å€ã®é«ãããã³ãã¯ãªã³ããŒãã£ã³ã°äžã«æ©æŠãæããã ãããå¯éããåžå Žã§ã¯ãã¢ãã¬ã¹å³å¿æ§ã補åå·®å¥åèŠå ã«ãªãã
å°èŠæš¡äºæ¥è ã¯æãå³ããçµæžã«çŽé¢ãããå¿ èŠãªã¢ãã¬ã¹åšåº«ã¯ããããããããªãããã¹ã¿ããæéãããããã³ã¢ãã¬ã¹ãããã®ã³ã¹ããé«ããªãå¯èœæ§ããããåœå åžå Žã«ãµãŒãã¹ãæäŸããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ãå°æ¥ã®æé·ã®ããã«åå㪠IPv4 ãè³Œå ¥ããè³æ¬ãæ¬ ããããããªãããªãŒã¹ã¯é åçãããããªãããçå£ãªé¡§å®¢ã«ãšã£ãŠãªãŒã¹èšŒæ ã¯åŒ±ããããããªãã移転ã¯å¯èœãããããªããããã¥ãŒããªãžã§ã³ã¹ãšèšé²ã¯ãªãŒã³ã¢ããã貎éãªã¹ã¿ããæéãæ¶è²»ããå¯èœæ§ããããabuse åŠçãšéåŒã DNS ãµãŒãã¹ã¯å°æ°ã®äººã«äŸåãããããããªããåäžã®æ±æãããç¯å²ã顧客ããŒã¹ã®å€§éšåã«æå®³ãäžããå¯èœæ§ãããã
ãšããžæœèšã¯å¥ã®èª²é¡ã远å ããããããã¯ãã°ãã°ãµãŒãã¹ã顧客ãå ¬å ±ãããã¯ãŒã¯ãç£æ¥ãµã€ããã¡ãã£ã¢ãŠãŒã¶ãŒãå°å äŒæ¥ã®è¿ãã«çœ®ãããã«ååšããããã®äŸ¡å€ã¯å Žæãšè¿æ¥æ§ã§ããã巚倧ãªèŠæš¡ã§ã¯ãªãããããããããªã㯠IPv4 ã¯é»åããã¡ã€ããŒã»ã©ããŒã«ã«ã§ã¯ãªãããããã€ããŒã¯ææãªãšããžãµã€ããæã£ãŠããŠããããã³ãåé¢ã埩æ§çšéããµããŒãããã¢ãã¬ã¹åšåº«ãæ¬ ããããããªããåœãŸãã¯å°åã®é¡§å®¢ã¯ãé æ¹äŸåãé¿ããããã«ãŸãã«ããŒã«ã«ãã¹ãã£ã³ã°ãæããããããªããããããªãã¯ã¢ãã¬ã¹åšåº«ãäŸç¶ãšããŠè匱ãªå€éšå¥çŽãéããŠæ¥ãããšãçºèŠããã ããããããªãã
RIPE NCC å°åã®å€æ§æ§ã¯ãããã®éããæ¡å€§ããã西ãšãŒãããã®ããã¯æ·±ããšã³ã·ã¹ãã ãšç§»è»¢åžå Žã®å°éç¥èãæã€ãäžéšã®äžæ±ããã³äžå€®ã¢ãžã¢åžå Žã¯æ¥éãªããžã¿ã«æé·ã䞻暩çãã¹ãã£ã³ã°ãžã®éå¿ãå°èŠæš¡ãããã€ããŒãã¯ãªãŒã³ãªåšåº«ãç²åŸããããã®æçãããã¹ãå°ãªããäžéšã®åœã¯åŒ·ãå ¬å ±éšééèŠãããããéãããå°åã¢ãã¬ã¹æµåæ§ããæããªããäžéšã®äºæ¥è ã¯ãå°åäŸçµŠãèãå Žåã§ããšãŒãããåŒã®èšŒæ ãæåŸ ããè¶å¢é¡§å®¢ã«ãµãŒãã¹ãæäŸãããåäžã®å¶åºŠçã«ãŒã«ããããã®åžå Žã§ç°ãªãçµæãããããåŸãã
å°èŠæš¡äºæ¥è ãèªåçã«ãã髿œã§ããããã§ã¯ãªããå€§èŠæš¡ãã£ã³ãã¹ãèªåçã«çãããããã§ããªããå¶åºŠçãªãã€ã³ãã¯äº€æžåã«é¢ãããã®ã§ãããåžå°æ§ã¯ãåšåº«ãæã€äŒæ¥ããããªãã¯ã¢ãã¬ã¹å³å¿æ§ãç«¶äºåªäœã«å€ããããšãå¯èœã«ãããããã¯èšç»ãšè¯ãã¹ãã¥ã¯ãŒãã·ããã«å ±ããããšãã§ããããŸãã蚌æ ãç§»åããã®ãå°é£ãªå Žåãå€ãä¿æè ãšãã倧ããªãã©ãããã©ãŒã ãå®çããåŸããæ£ç¢ºã§äºæž¬å¯èœã§éè£éçãªã¬ãžã¹ããªå°åž³ã¯ãå°èŠæš¡äºæ¥è ã容æã«åžåã§ããªãç§ç亀æžè² æ ãæžãããããå°èŠæš¡äºæ¥è ãæãå©ããã
AI ãšé«å¯åºŠèšç®ã¯ãã®æèã«çœ®ãããã¹ãã§ãããé«å¯åºŠ GPU ããŒã«ã¯èšå€§ãªé»åãšã¹ããŒã¹ãæ¶è²»ãåŸãããIPv4 éèŠãã¢ã¯ã»ã©ã¬ãŒã¿ãŒãšäžå¯Ÿäžã§ã¹ã±ãŒã«ããããã§ã¯ãªãããã¬ãŒãã³ã°ã¯ã©ã¹ã¿ãŒã¯å°æ°ã®ãããªãã¯ãµãŒãã¹ã®ã¿ãé²åºãããããããªããã¢ãã¬ã¹éèŠã¯ç®¡çãã¬ãŒã³ã顧客ããŒã¿ã«ãAPI ãšã³ããªãã€ã³ããç£èŠãã¢ãã©ã€ã¢ã³ã¹ãšããžããªã¢ãŒãã¢ã¯ã»ã¹ãããã³ãåé¢ã顧客ããµãŒãã¹ã«å°éãç£æ»ã§ããããšã®èšŒæããæ¥ããå€§èŠæš¡ãã£ã³ãã¹ã§ã¯ããããã®ããŒãºã¯æçããããŒã«ã«åžåããåŸããå°èŠæš¡ AI ã€ã³ãã©ãããã€ããŒã«ãšã£ãŠã¯ãããŒããŠã§ã¢ãèšçœ®ãããŠããŠããã¯ãªãŒã³ãªãããªãã¯ãšã³ããã€ã³ãã®äžè¶³ã販売ãé ãããå¯èœæ§ãããã
ãã匱ãã¬ãžã¹ããªç°å¢ããã®æ¯èŒæèšã¯èŠæãã¹ããã®ã§ãããã¬ãžã¹ããªã®ä¿¡é Œãäœãå Žåãããã³ãããã£ãªã¢ã顧客ãã¢ãã¬ã¹èšŒæ ã容æã«ä¿¡é Œã§ããªããããç©ççãã¹ãã£ã³ã°æè³ãå®å šãªåçã«çµã³ã€ããªãå¯èœæ§ããããRIPE NCC å°åã¯ãã®ç«å Žã«ã¯ãªãããã®å°åž³ãšã³ãã¥ããã£æ©é¢ã¯å®è³ªçã«åŒ·ãããããæèšã¯æ®ãïŒãããªãã¯ã¢ã€ãã³ãã£ãã£ãæ€èšŒã§ããªããã°ãããŒã¿ã»ã³ã¿ãŒè³æ¬ã¯äžå®å šã§ãããã¬ãžã¹ããªèšŒæ ãåªããŠããã°ããã»ã©ãç§çåžå°æ§ãã¢ã¯ãã£ããŒã·ã§ã³ãã¥ãŒãæ¯é ãã«ãããªãã
RIPE NCC ã¯ããŒã«ãèšç»ããããšãªãå°åž³ã匷åãã¹ãã§ãã
RIPE NCC ã«ãšã£ãŠå»ºèšçãªãã¹ãã¯ãããŒã¿ã»ã³ã¿ãŒã®æé·ãå²ãåœãŠããããã©ããã§ã¯ãªããããŒã«ã®ãã©ã³ããŒããã¹ãã£ã³ã°ããžãã¹ã¢ãã«ã®å¯©å€ãããã³ãéèŠã®è£éæ¿èªè ãIPv4 ã®åœ±ã®ç£æ¥çã«ãªãã¹ãã§ã¯ãªããããã§ã¯åžå°æ§ãå ¬çå®å䞻矩ã«å€ããã ãããããè¯ã圹å²ã¯ããçããããæ°žç¶çã§ããïŒå°åž³ãæ£ç¢ºã§ãäºæž¬å¯èœã§ãããŒã¿ãã«ã«ä¿ã¡ãç§çåžå°æ§ã容æã«ç§çæ¯é ã«ãªããªãããã«ããããšã
æ£ç¢ºãã第äžã®èŠä»¶ã§ããããã«ããŒèšé²ãé£çµ¡å ãçµç¹ããŒã¿ãéåŒã DNS ã®åãæ±ºãããªãœãŒã¹ã¹ããŒã¿ã¹ã¯ãããã³ããšååŒçžæã誰ãèªèãããæš©éãæã€ããçè§£ã§ããã»ã©ååã«ã¯ãªãŒã³ã§ããã¹ãã ãæ£ç¢ºãã¯ãã¹ãŠã®å·äžé¡§å®¢ãé²åºããããšãæå³ããªãã責任é£éãæšæž¬ã«äŸåãã¹ãã§ãªãããšãæå³ããããããã€ããŒä¿æãããã³ãä¿æããªãŒã¹ã移転ããã空éã䜿çšããããŒã¿ã»ã³ã¿ãŒã¯ãè³Œå ¥è ããšã«ç¹æ³šã®ä¿¡é Œã»ã¬ã¢ããŒãçã¿åºãããšãªãããã®ã¹ããŒã¿ã¹ã説æã§ããã¹ãã§ããã
äºæž¬å¯èœãªç§»è»¢èªèã第äºã®èŠä»¶ã§ããã移転ã¯ããŒã¿ã»ã³ã¿ãŒæé·ã®äŸçµŠçµè·¯ã ããã¿ã€ãã³ã°ãšèšŒæ ã管çå¯èœãªå Žåã«ã®ã¿äŸ¡å€ãããããããã€ããŒãšããã³ãã¯ãã©ã®ãããªèšŒæãå¿ èŠããæš©éãã©ã®ããã«ãã§ãã¯ãããããéåŒã DNS ãšçµè·¯èµ·ç¹å³å¿æ§ãã©ã®ããã«èª¿æŽã§ããããã¬ã¬ã·ãŒãŸãã¯å€ãä¿æãè£éçãªé©ããªãã«çŸè¡èšé²ã«åã蟌ããããç¥ãå¿ èŠããããäºæž¬å¯èœæ§ã¯ã¢ãã¬ã¹åšåº«ã«ä»éããéè»¢è³æ¬ããã«ãã£ãäžããã
蚌æ ã®ããŒã¿ããªãã£ã第äžã®èŠä»¶ã§ãããè¯å¥œãªèšé²ãç¶æããããã³ãã¯ãåãå ¬ç蚌æ ãããŒã¿ã»ã³ã¿ãŒããã£ãªã¢ãDDoS ãããã€ããŒããšã³ã¿ãŒãã©ã€ãºé¡§å®¢ãã¯ã©ãŠã飿¥ãµãŒãã¹ã«ããã£ãŠäœ¿çšã§ããã¹ãã§ãããããã«ã¯ãã¹ãŠã®æ°éãããã€ããŒãããããç¯å²ãåãå ¥ããå¿ èŠã¯ãªããæåŠãé å»¶ããããŸããã§ã¯ãªãå®éã®ãªã¹ã¯ã«åºã¥ããããã¬ãžã¹ããªèšŒæ ãååã«å€èªå¯èœã§ããããšãå¿ èŠã§ãããããŒã¿ãã«ãªèšŒæ ã¯ç§çã²ãŒãããŒãã³ã°ã«å¯Ÿããå¶åºŠçåçã§ããã
éåŒã DNS ã®ç¶ç¶æ§ã¯ç¹å¥ãªæ³šæã«å€ããããã°ãã°å°ããªéçšã¿ã¹ã¯ãšããŠæ±ãããããã¡ãŒã«ãã»ãã¥ãªãã£ãå ¬å ±éšéä¿èšŒã顧客移è¡ã«ãããŠéèŠã§ããã責任åœäºè ã¯æç¢ºã§ããã¹ãã ãåŒãç¶ãã®ã¿ã€ãã³ã°ã¯äºæž¬å¯èœã§ããã¹ãã ãå§ä»»ãã¹ãå€ãåãæ±ºãã«éã蟌ããããã¹ãã§ã¯ãªããå°çšãããªãã¯ã¢ã€ãã³ãã£ãã£ã«æ¯æãããã顧客ããåãæ¿ãäžã«éåŒã DNS ãäžåšã®ãªãŒã¹äŒç€ŸãåŒéããé£çµ¡å ã«äŸåããŠããããšãçºèŠãã¹ãã§ã¯ãªãã
RPKI ãš ROA ã®ã¿ã€ãã³ã°ãåæ§ã®èŠåŸãå¿ èŠãšãããçµè·¯èµ·ç¹èšŒæ ã¯ã¢ã¯ãã£ããŒã·ã§ã³ã«ã¬ã³ããŒãšäžèŽããªããã°ãªããªããããã³ããèµ·ç¹ã倿ŽããããDDoS ãããã€ããŒã䜿çšããããããŒã«éãç§»åãããããããã€ããŒã®ã¢ããŠã³ã¹ããèªèº«ã® ASN ã«ç§»è¡ããå Žåã蚌æ ã¯ãµãŒãã¹ãé²åºãããåã«æºåãããŠããªããã°ãªããªããRIPE NCC ã¯ãã¹ãŠã®çµè·¯ãã£ã«ã¿ãŒãç§çããªã·ãŒã管çã§ããªãããèªèšŒããããããŸãã§ãªãããæç¢ºã§ä¿¡é Œã§ããããã»ã¹ããµããŒãã§ãããããŒã¿ã»ã³ã¿ãŒçµæžã«ãããŠãé ã ROA ã¯æžé¡äžã®é å»¶ã§ã¯ãªããé ããåçãšãªãåŸãã
abuse é£çµ¡å¯èœæ§ãã¢ãã¬ã¹äŸ¡å€ã®äžéšã§ããããã¹ãã£ã³ã°ã§äœ¿çšããããããªãã¯ã¢ãã¬ã¹ã¯èŠæ ãåŒãå¯ããããããã®ã¯æ£åœã§ããããã®ã¯èª€è§£ã§ããããã®ã¯èªååããããããã®ã¯æªæããããèŠæ ãåãåã転éã§ãããããã€ããŒã¯ãããŒã«å ã®ãã¹ãŠã®äººã®è©å€ãå®ããé£çµ¡å ãå€ããããã€ããŒã¯èªèº«ã®åšåº«ãæžäŸ¡ããé£äººã«è² æ ãããããRIPE NCC ã®åœ¹å²ã¯ãã¹ãŠã®èŠæ ãåãç· ãŸãããšã§ã¯ãªããè©å€ã·ã¹ãã ãšé¡§å®¢ããã¢ã«ãŠã³ã¿ããªãã£ã®ãããã¹ãã£ã³ã°ãšæŸçœ®ãããèšé²ãåºå¥ã§ãããããååãªé£çµ¡èŠåŸãä¿ã€ããšã§ããã
ãªãŒã¹èšŒæ ã«ã¯æ éãªäžééãå¿ èŠã§ãããé床ã«äŸµå ¥çãªç»é²ã¯æ£åœãªæè»æ§ãå·ããå¯èœæ§ãããã蚌æ ãå°ãªããããšããªãŒã¹ãããåžå°æ§ãæ°žç¶çãªæ¯é ãè£ ãããšãèš±ããæçšãªåºæºã¯ãç§çãªåæ¥æ¡ä»¶ãé²åºããããšã§ã¯ãªããæš©éãå§ä»»ãçµè·¯èµ·ç¹èš±å¯ãçµäºãªã¹ã¯ããçå£ãªããã³ããäŸ¡æ Œä»ãã§ããã»ã©æç¢ºã«ããããšã§ãããå ¬å ±ãµãŒãã¹è³Œå ¥è ã¯ãªãŒã¹äŒç€Ÿã®å©å¹ ãèŠãå¿ èŠã¯ãªãããµãŒãã¹èåŸã®ãããªãã¯ã¢ã€ãã³ãã£ãã£ãå¥çŽæéãçãå»¶ã³ããããã©ãããç¥ãå¿ èŠãããã
ããã³ã䜿çšã®èšŒæ ããéèŠæ¿èªäœå¶ã«ãªãããšãªãããæç¢ºã§ããã¹ãã ãããŒã¿ã»ã³ã¿ãŒãããã€ããŒã¯ãèšé²ãšé¡§å®¢ãã¡ã€ã«ã«ãããŠããããã€ããŒã€ã³ãã©ã顧客å°çšäœ¿çšãäžæçç§»è¡äœ¿çšããªãŒã¹äœ¿çšãããã³ãä¿æç©ºéãåºå¥ããæ¹æ³ãå¿ èŠãšãããç®çã¯ãããã³ããã¢ãã¬ã¹ã«å€ãããã©ããã RIPE NCC ã«æ±ºå®ãããããšã§ã¯ãªããç®çã¯ãéè¡ãçåºãDDoS ãããã€ããŒãäžæµããšã³ã¿ãŒãã©ã€ãºè³Œå ¥è ãã誰ã倿Žãè¡ãããããã©ãã£ãã¯ã害ãåãŒããå Žåã«èª°ãçããããå°ããéã®æ··ä¹±ãæžããããšã§ãããæ³šææ·±ãéå®ããããµãŒãã¹åºæã®ã¹ããŒã¿ã¹ã©ãã«ã¯ã忥æ¡ä»¶ãéå ¬éã«ä¿ã¡ãªããæ€èšŒã³ã¹ããäžããããšãã§ããã
ã¬ã¬ã·ãŒããã³å€ãä¿æã«ã¯ãåãå ¥ããããåçã®èšŒæãå¿ èŠã§ãããé·ãäŒæ¥å²ãéããŠä¿æãããç¯å²ã¯çŸä»£ã®æžé¡ã«ãã¡ããšé©åããªããããããªãããæ°ãããªãŒã¹ãããããŒã«ãããã¯ãªãŒã³ã§èä¹ æ§ããããããããªããããŒã¿ã»ã³ã¿ãŒéå¶è ãŸãã¯ããã³ããä¿¡é Œã§ãã蚌æ ãéããŠç¶ç¶æ§ãæš©éãé£çµ¡çµ±å¶ãã«ãŒãã£ã³ã°æå³ã瀺ãããªãããã®èšŒæã¯äžå¿ èŠãªè£éã匷ããããšãªã䜿çšå¯èœã§ããã¹ãã ããã€ã³ãã¯ãæŽå²ãæ°èŠå²ãåœãŠãã¡ã€ã«ã«äŒŒãŠããªãããšã眰ããããšã§ã¯ãªããå€ããåæ³çãªäŸçµŠãçŸè¡ãµãŒãã¹ã«ããããããšã§ããã
é å»¶ã¡ããªã¯ã¹ã¯é ããããã«ããã¯ãå¯èŠåããã ãããéåŒã DNS åŒãç¶ããã¢ã«ãŠã³ãæš©éæŽæ°ã移転èªèãçµè·¯èµ·ç¹å€æŽãé£çµ¡å ä¿®åŸ©ãæ¥åžžçã«ç§»è¡æéãéããªããã¢ãã¬ã¹çµæžã¯ãã®å€±æãåæ»ããã©ãã¯ãå»¶æããã顧客ç«ã¡äžãããªãŒã¹ãããã€ãªãçãšããŠè¡šçŸããã ãããéèšå ±åã¯ææãªååŒãé²åºããå¿ èŠã¯ãªããããŒã¿ã»ã³ã¿ãŒã«ãšã£ãŠéèŠãªã¬ãžã¹ããªäŸåã®å€æŽãæéãšãšãã«ããäºæž¬å¯èœã«ãªã£ãŠããã®ãããããšãããé«äŸ¡ã«ãªã£ãŠããã®ãã瀺ãããšãã§ãããåžå°ãªç°å¢ã§ã¯ãæéã¯äŸ¡æ Œã§ããã
ç¶ç¶æ§ãããããã¹ãŠã®è©³çްã«ãããæéãšãªãã¹ãã§ãããããã³ãã¯ã¢ãã¬ã¹èšç»ããã£ãªã¢å€æŽãDDoS ãããã€ããŒå€æŽãããŒã«éã®ç§»åããªãŒã¹äŒç€Ÿã®é害ãäŒæ¥åç·šãé¡§å®¢ç£æ»ãçãå»¶ã³ããããã©ãããç¥ãã¹ãã§ããããããã€ããŒã¯ã©ãã¯ããµãŒãã¹å¯èœå®¹éãšããŠè²©å£²ããåã«ãã©ã®èšŒæ ãæºåãããŠããªããã°ãªããªãããç¥ãã¹ãã§ããã顧客ã¯ãããªãã¯ãšã³ããã€ã³ããå¥çŽæéã«å¯ŸããŠååå®å®ããŠãããã©ãããç¥ãã¹ãã§ãããå°åž³ã¯ãã¹ãŠã®çµæãä¿èšŒã§ããªãããäŸåã圢æãããåã«ç¶ç¶æ§ããã¹ãå¯èœã«ããããšãã§ããã
åãããšã NAT ãšç¯çŽã«ãåœãŠã¯ãŸããRIPE NCC ã¯ããããªã㯠IPv4 ãžã®ãã¹ãŠã®èŠæ±ãç¡é§ãšããŠæ±ãããšãªããå¹ççãªäœ¿çšãš IPv6 å±éã奚å±ãã¹ãã§ãããããŒã¿ã»ã³ã¿ãŒã«ã¯ããã³ãåé¢ãå°çšã¢ãã©ã€ã¢ã³ã¹ã顧客ãšã³ããã€ã³ããabuse åé¢ãã¡ãŒã«è©å€ãã¹ã€ã³ã°å®¹éã«å¯Ÿããæ£åœãªããŒãºããããç¯çŽã®ã¬ããªãã¯ã¯ããããªãã¯ã¢ã€ãã³ãã£ãã£ã®éçšäŸ¡å€ãç¡èŠããå Žåã«æå®³ã«ãªããããè¯ãã¹ã¿ã³ã¹ã¯èšŒæ ã«åºã¥ãããšã ïŒã¢ãã¬ã¹èšç»ãã¢ã«ãŠã³ã¿ããªãã£ãããŒã¿ããªãã£ãå¹ççãªäœ¿çšããµããŒãããŠãããã©ãããåãããã¹ãŠã®ãããªã㯠IPv4 éèŠãé埳çã«çããããã©ãããåããªãã
å¶åºŠçæ£åœæ§ã¯éè£éæ§ã«ããã£ãŠãããåžå°æ§ã¯åãæããã¬ãžã¹ããªæç¶ããäºæž¬äžèœãæ¿æ²»çããŸãã¯é床ã«é埳åãããŠããããã«èŠãããªããã¢ãã¬ã¹åšåº«ãæã€æ°éã¢ã¯ã¿ãŒã¯å©çãåŸãã ããããªããªã顧客ã¯å ¬çããã»ã¹ãé¿ãããããã€ããŒç®¡çã®ä»£æ¿æ¡ãåãå ¥ããããã ãæç¶ããèããäžç«çã§ä¿¡é Œã§ãããªããå°åž³ã¯å°æ°ã«ãã£ãŠä¿æãããéã§ã¯ãªããå€ãã®åœäºè ã®ããã®ããŒã«ã§ããç¶ããããããå ¬ç調æŽãšè³æ¬æ¯é ã®éãã§ããã
ãã¹ãã¯å®çšçãªãã®ã«ã§ãããããŒã¿ã»ã³ã¿ãŒé¢é£ã®ã¬ãžã¹ããªå€æŽã¯é å»¶ã«ã€ããŠæž¬å®ãããŠãããïŒéåŒã DNS åŒãç¶ãã¯ç§»è¡æéã«ãšã£ãŠååäºæž¬å¯èœãïŒçµè·¯èµ·ç¹æŽæ°ã¯ã¢ã¯ãã£ããŒã·ã§ã³ãšå®¹æã«æŽåãããïŒãã«ããŒèšé²ã¯ãã¥ãŒããªãžã§ã³ã¹ã®ããã«ååææ°ãïŒå€ãä¿æã¯æ£æçãªæ©æŠãªãã«ã¯ãªãŒã³ãªæš©éã«å埩å¯èœãïŒå°èŠæš¡äºæ¥è ã¯å€§èŠæš¡ãªã¢ããã€ã¶ãªãŒããŒã ãéãããšãªããªãŒã¹ãšç§»è»¢ã®èšŒæ ãçè§£ã§ãããïŒå ¬å ±ãµãŒãã¹é¡§å®¢ã¯ãã¹ãåãµãŒãã¹ãããŒã¿ãã«ãªã¢ãã¬ã¹èšŒæ ãæã€ãã©ãããå°ãããããïŒãããã®è³ªåã¯ããŒã¿ã»ã³ã¿ãŒã®æé·ãèšç»ããªãããããã¯åžå°ãªå ¥åãããé ãã«ããããã
ãããã£ãŠãRIPE NCC ã®ããŒã¿ã»ã³ã¿ãŒã¢ãã¬ã¹éèŠãžã®æã匷åãªè²¢ç®ã¯ãæ£ç¢ºãã䌎ãæå¶ã§ããããã©ã³ã¯ãã«ããã¢ã ã¹ãã«ãã ããã³ãã³ãããã€ãã¯ã«ã·ã£ã¯ããããªãŒããã€ã¹ã¿ã³ããŒã«ãã¹ããã¯ãã«ã ãã¢ã«ããã€ã«ã©ãã ãã®ã©ãã¯ãååšãã¹ãããç¥ã£ãŠãããµãããã¹ãã§ã¯ãªãããã¢ã¡ã¿ã«ãSaaSãã³ãã±ãŒã·ã§ã³ããšããžãã¹ãã£ã³ã°ãå ¬å ±éšé埩æ§ã®ã©ãã IPv4 ã®åªããäœ¿çšæ³ã§ããããæ±ºå®ãã¹ãã§ã¯ãªãããããã®åžå Žãèªèº«ã®ã³ã¹ããæããã«ããããšãå¯èœã«ããå°åž³ãç¶æãã¹ãã§ãããå°åž³ãæ£ç¢ºã§ããã°ãã¢ãã¬ã¹åžå°æ§ã¯äŸç¶ãšããŠé«äŸ¡ã ããå¯èŠçã§ãããããŒã¿ãã«ã§ããã°ãããã³ãã¯ç§»åã§ãããäºæž¬å¯èœã§ããã°ãå°èŠæš¡äºæ¥è ã¯èšç»ã§ãããéè£éçã§ããã°ãå ¬å ±ã®ä¿¡é Œãç§çã²ãŒãããŒãã³ã°ã«ãªããªãã
ããŒã¿ã»ã³ã¿ãŒã®è²©å£²åŸ ã¡è¡åã¯æ¶ããªãã ãããé»åã¯äŸç¶ãšããŠåžå°ã ããããã¡ã€ããŒã¯äŸç¶ãšããŠéèŠã ãããçžäºæ¥ç¶ã¯äŸç¶ãšããŠæéããããã ãããIPv6 ã¯é²æ©ãç¶ããNAT ã¯ç¯çŽããŒã«ã§ããç¶ããã ããããããããã¹ãã£ã³ã°æé·ã®æ¬¡ã®ãµã€ã¯ã«ã§ã¯ãå€ãã®ã©ãã¯ããããªãã¯ã¢ãã¬ã¹åšåº«ãšãããåãå ¥ãå¯èœã«ãã蚌æ ãåŸ ã€ããšã«ãªããRIPE NCC ã®ä»äºã¯ãããã®ã©ãã¯ãåããããšã§ã¯ãªãããããã®èåŸã«ããå ¬çèšé²ãååã«è¯å¥œã§ããç¶ããåžå°ãª IPv4 ãã¢ã¯ãã£ããŒã·ã§ã³ãç¶ç¶æ§ãéåºã«å¯Ÿããéããªèª²çšã«ãªããªãããã«ããããšã§ããã

