æŠèŠ
- æ¬çš¿ã®å 容:RIPE NCC ã¯ã欧å·ããã³äžæ±ã«ãããã¬ãžã¹ããªã¬ããã³ã¹ãšå¶åºŠçµæžåŠã®åé¡ãšããŠãæ¿çã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠã®èгç¹ããæ€èšŒãããã
- äž»ãªè«ç¹:ãããã¯ãŒã¯è³æºã®èšŒæ ; ã¬ãžã¹ããªã¬ããã³ã¹; å¶åºŠã®æ£åœæ§; ã³ã³ã»ã³ãµã¹ã®ææ
- èæ¯:ã¬ããã³ã¹ / èª¿æ» / 欧å·ã»äžæ±
éåžžãRIPE NCC ã¯éçšããç®ã«èŠããã·ã¹ãã ãéããŠæ€èšããããRIPE ããŒã¿ããŒã¹ãLIR ããŒã¿ã«ãIPv4 ããã³ IPv6 ã®ç»é²ãAS çªå·ç®¡çãè³æºç§»è»¢ãRPKIãéåŒã DNSãæž¬å®ãã©ãããã©ãŒã ãäŒåãäŒå¡ãµãŒãã¹ãªã©ã§ããããããã¯ããªãã¿ã®è¡šé¢ã«éããªããããŸãç®ç«ããªãæ©æ§ã¯ããã®äžæ®µäžã«ååšãããããã¯ãæ¯æžåŸçµæžã§åžå°ãªçªå·è³æºãæµéããéã«ãã¬ãžã¹ããªãäœããã¹ãããäœãèš±ãããäœãããªããã°ãªããªãããæ±ºå®ããæ¿ççå®ã·ã¹ãã ã§ããã
ãã®æ©æ§ã¯æ§ãããªåœ¢ãããŠãããã¯ãŒãã³ã°ã°ã«ãŒããã¡ãŒãªã³ã°ãªã¹ããå ¬éã¢ãŒã«ã€ããäŒåã»ãã·ã§ã³ãæ¿çææ¡ãè°é·å€æã圱é¿åæãã©ã¹ãã³ãŒã«ãã³ã³ã»ã³ãµã¹ã³ãŒã«ãªã©ããæããç«æ³åºãèŠå¶åœå±ãè³æ¬åžå Žåœå±ã®ããã«ã¯èŠããªããæãªããã®ã€ã³ã¿ãŒãããã®ããã ãããã¹ããè°è«ãå¿èåŒ·ãæ€èšããããŠåå è éã®ãããŸããªåæã§ããããããããã®çµæã¯ãã¢ãã¬ã¹è³æºã®èªèã移転ãããã¯ãèªèšŒãç£æ»ãå¯èŠåããããã¯ç§»åã®å°é£ããæ±ºå®ããããIPv4 ãåžå°ãªçç£è³æ¬ãšãªã£ãä»ãæ¿çã¡ãŒãªã³ã°ãªã¹ãã¯åãªãæè¡çãã©ãŒã©ã ã§ã¯ãªããªã£ãããããã¯ã¬ãžã¹ããªæš©åã®çç£é¢æ°ã®äžéšãšãªã£ãã®ã§ããã
ãæ¿çã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠããšãã衚çŸã¯ãå¶åºŠèªäœãããã¡ãªãããã«ããããšããã¡ãªãããŠãããããã¯åžå Žã§ã¯ãªãããåžå Žã³ã¹ããä¿®æ£ãããåœå®¶ã§ã¯ãªãããã¬ãžã¹ããªç»é²ã倿Žããéã«æ°éåœäºè ãåŸããªããã°ãªããªãã«ãŒã«ãäœããäŒå¡æç¥šã§ã¯ãªãããå®éã«äŒå¡ãææããããè£å€æã§ã¯ãªãããã©ã®ç°è°ãèªèãããç»é²ã®äžéšãšãªãããæ±ºå®ãããããã¹ãŠã®äººã«éãããŠããããææçŸ©ãªåå ã¯çšã§ããããã®æãéèŠãªæå ¥ç©ã¯åž¯åå¹ ã§ã¯ãªããæ³šæåã§ããã
RIPE NCC ã¯ããã®åé¡ãæ€èšããäžã§æãæçããäºäŸã§ãããããã¯æŒåçãªå€±æã§ã¯ãªãããã ãé·å¹Žã«ããããæè¡çã«æèœã§ããææžåãããå°åã€ã³ã¿ãŒãããã¬ãžã¹ããªã§ãããæ¬§å·ãäžæ±ãäžå€®ã¢ãžã¢ã®äžéšã«ãµãŒãã¹ãæäŸããŠãããç¬èªã®ææžç§ãã¡ã®æŽ»åã§ã¯ããµãŒãã¹å°åã®äŒå¡ã«ã€ã³ã¿ãŒãããçªå·è³æºãšé¢é£ãµãŒãã¹ãæäŸãããç¬ç«ããéå¶å©ã®äŒå¡çµç¹ã§ãããšèª¬æããŠããããµãŒãã¹ã®ããŒãžã«ã¯ãç»é²ãè³æºç§»è»¢ãRIPE ããŒã¿ããŒã¹ãRPKIãéåŒã DNSãK-rootãRIPE AtlasãRIPEstatãRISãRIPE IPmapãäŒåããã¬ãŒãã³ã°ãã³ãã¥ããã£ãµããŒããªã©ãã¬ãžã¹ããªæ©èœãšããåºç¯ãªãµãŒãã¹ãåæãããŠãããå ¬åŒèšé²ã¯ååã«åºç¯ã§ãããåºæ¬çãªæ§é ãæšæž¬ããããšãªãçµæžåŠãæ€èšããããšãå¯èœã§ããã
ãã®è³æã¯ãæ©é¢ãäœãèšããäœãããŠãããã®èšŒæ ãšèŠãªãã¹ãã§ãããè§£éã®æš©åšãšããŠã§ã¯ãªããRIPE NCC ãš RIPE ã³ãã¥ããã£ã¯åœç¶ã®ããšãªãããèªãã®ã¢ãã«ãéæŸæ§ãããã ã¢ããã®æ¿çãã³ã³ã»ã³ãµã¹ãäžç«æ§ã管çããµãŒãã¹ãšãã£ãèšèã§èª¬æããããããã®èšèã¯çã®çŸåŸ³ã衚ãããããããã¯çµæžåŠçãªåãã«çããŠããªããããé£ããåãã¯ãäœåå ã»é«å°éã»ããã¹ãããŒã¹ã®ããã»ã¹ããåžå°ãª IPv4 容éã®ç§»åãéçšäŸ¡å€ãçµè·¯ã»ãã¥ãªãã£ç¶æ ãéåŒã DNS å¶åŸ¡ãã¬ãžã¹ããªèªèã«åœ±é¿ãäžããã«ãŒã«ãæ£åœã«äœãåºãããã©ããã§ããã
åžå ŽåŽã®æ¹å€ã¯ãåãåããããå± å¿å°ã®æªãè§åºŠããææãããã¢ãã¬ã¹ãããŒã«ãŒããªãŒã¹æäŸè ãIPv4 ãè±å¯ã«æã€äºæ¥è ãã¬ãžã¹ããªæš©åã®æ¹å€è ã¯ããã°ãã°çªå·è³æºã¬ããã³ã¹ãã¬ãžã¹ããªãééã祚ãããã«ããã¯ã®åé¡ãšèŠãªããèªå·±ææã§ã®ãªãŒã¹ãšéçšç¶ç¶æ§ã¯ãã¬ãžã¹ããªã¬ãã«ã§ã®é²åºãžã®å¯Ÿå¿ã§ãããšäž»åŒµããè ãããããŸããIPv4 ã®åžå°æ§ãã¬ãžã¹ããªã®è£éæš©ãçµæžçæš©åã«å€ããæ°éã¬ãžã¹ããªã®æš©éã¯äžææ§ãç»é²æ£ç¢ºæ§ãã»ãã¥ãªãã£å ¬éã移転ç»é²ãç¶ç¶æ§ã«éå®ãããã¹ãã§ãããè³æ¬ç®¡çã«æ¡å€§ãã¹ãã§ãªããšäž»åŒµããè ãããããããã®è°è«ã¯å©å®³é¢ä¿ã«åºã¥ãããã®æçšæ§ã¯ãå ¬åŒã®èªå·±èª¬æããã°ãã°é¿ããåããæããããç¹ã«ãããæç¶ããæš©åãšãªããšãã誰ãã³ã¹ããè² ãã®ãïŒ
ã¡ãŒãªã³ã°ãªã¹ãã¯ããã®ã³ã¹ããç¡èŠã§ããã»ã©å°ããèŠããå Žæã§ãããæ¿çææ¡ã¯æ°æ®µèœããå§ãŸããããããªããå°æ°ã®äººã ããããè°è«ãããããããªããè°é·ãã³ã³ã»ã³ãµã¹ã倿ãããããããªããRIPE NCC ã圱é¿åæãå ¬è¡šãããããããªããã©ã¹ãã³ãŒã«æéãçµäºãããããããªãããããŠæ¿çãã¬ãžã¹ããªç°å¢ã§å®æœããããããããªãããã®äžé£ã®æµãã¯ãè³æ¬é åã«ã¯äŒŒãŠããªãããããããã®æ¿çã移転ãåŸ æ©ãªã¹ãã®é©æ Œæ§ãè³æºèªèšŒãå§ä»» RPKIãäžæç䜿çšãè¿·æè¡çºé£çµ¡å ãã¬ã¬ã·ãŒè³æºã®åãæ±ããã¬ãžã¹ããªå¯©æ»ã®ç¯å²ã«åœ±é¿ãäžãããªãã°ããã®é£éã¯è³æ¬ãªã¹ã¯ãé åããããšã«ãªããããã¯ãã©ã®åœäºè ãæ©æŠå°ãªãè³ç£é¡äŒŒã®éçšæå ¥ç©ãåãããããã©ã®åœäºè ãåŸ ããã°ãªããªããããããŠã©ã®ã³ã¹ãã宿œãŸã§é ããããŸãŸããæ±ºå®ããã®ã§ããã
ããã¯æ¿çã¡ãŒãªã³ã°ãªã¹ãã«å察ããè°è«ã§ã¯ãªããRIPE ã«ã¯æ¿çã«é¢ããå ¬éèšè«ãå¿ èŠã§ãããééçãªã¬ãžã¹ããªã¹ã¿ããã®æ¹ãæªãã ãããã¡ãŒãªã³ã°ãªã¹ãã¯ã¢ãŒã«ã€ããäœããæè¡çç°è«ã衚ã«åºããéäŒå¡ã«çºèšãèš±ããå ¬çèšæ¶ãä¿åãããè°è«ã¯ããçããããéèŠã§ãããæ¯æžåŸã®æ¿çã®çµæžçéã¿ã¯ãä»ãæ§æ¥ã®ãªã¹ãæåã®ä»£è¡šæ§ã®å®¹éãè¶ ããŠããããã®æåãæç€ºçãªçµæžçèŠåŸã远å ããªãéããããã¯ãã¯ãæããªãã
çç£é¢æ°ãšããŠã®ã¡ãŒãªã³ã°ãªã¹ã
RIPE ã®æ¿çãæ€èšããçµæžåŠè ã¯ããã³ãã¥ããã£ããšããèšèããå§ããã¹ãã§ã¯ãªããããŸãã«æãããããŸãã«ææ§ã§ãããæè¯ã®åºçºç¹ã¯çç£ã§ãããã©ã®ãããªæå ¥ç©ãæ¿çã·ã¹ãã ã«å ¥ããã©ã®ãããªç£åºç©ãçã¿åºãããã®ãïŒ
æå ¥ç©ã¯ãå°éçãªæ³šæåãæžãããèšèªãæç¶ãèšæ¶ãã¹ã¿ããåæãè°é·å€æãäŒåæéãå ¬éã¢ãŒã«ã€ããè©å€ã®ä¿¡é Œæ§ããããŠç¹°ãè¿ãããæ¹èšãéããŠååšãç¶ããæå¿ã§ãããç£åºç©ã¯åãªãæèŠã§ã¯ãªããç£åºç©ã¯ RIPE NCC ã宿œããªããã°ãªããªããããããªãæ¿çã«ãŒã«ã§ããããã®ã«ãŒã«ã¯ã移転ã®èªèã®ããæ¹ãèªèšŒæ©é¢ã®åãæ±ããã¢ãã¬ã¹ä¿æè ã®ããŒã¿ããŒã¹ãšã®çžäºäœçšãè¿åŽãããã¯ã®å²ãåœãŠæ¹æ³ãäžæç䜿çšã®çè§£ããããã¯ã¬ãžã¹ããªãµãŒãã¹ãè³æºé¢ä¿ã«ã©ãçµã³ã€ãããå€ãããã
RIPE æ¿ççå®ããã»ã¹ã¯ãçç£ãã§ãŒã³ãå¯èŠåãããããã«ããã°ãæ¿çè°è«ã¯ã¯ãŒãã³ã°ã°ã«ãŒãã§ãäž»ã«ã¡ãŒãªã³ã°ãªã¹ãäžãšäŒåã§è¡ããããææ¡äœæãã³ãã¥ããã£è°è«ãRIPE NCC ã«ãã圱é¿åæãèŠçŽããçµè«ãã©ã¹ãã³ãŒã«ã宿œãšããæ®µéãå®çŸ©ããŠãããéããã RIPE ã³ãã¥ããã£ãšãäºåå±ããã³å®æœã¬ãžã¹ããªãšããŠã® RIPE NCC ãåºå¥ãããã¯ãŒãã³ã°ã°ã«ãŒãè°é·ã«ã³ã³ã»ã³ãµã¹ã®æç¡ã倿ããäžå¿ç圹å²ãäžããŠãããRIPE NCC ã«åœ±é¿åæã®äœæãšåæãããæ¿çã®å®æœã«ããã圹å²ãäžããŠããããŸããæç¶ãã®é å®ã«çŠç¹ãåœãŠãç°è°ç³ãç«ãŠã®éãèŠå®ããŠããã
ãã®æ§é ã¯çå£ãªãã®ã§ãããããã¯ãŸããçµæžçãªãã£ã«ã¿ãŒã§ããããæ£ç¢ºãªæ¿çææžãèµ·èã§ãããšã³ãã£ãã£ã¯ãåã«ããžãã¹äžã®åé¡ã説æããããšããã§ããªãè ãããããã倧ããªåœ±é¿åãæã€ãã©ã®ã¯ãŒãã³ã°ã°ã«ãŒããéèŠããç¥ã£ãŠãããšã³ãã£ãã£ã¯ã宿œæ®µéã§åé¡ãçºèŠããè ããã圱é¿åã倧ãããé©åãªã¿ã€ãã³ã°ã§å¯Ÿå¿ã§ãããšã³ãã£ãã£ã¯ãã©ã¹ãã³ãŒã«åŸã«çŸããè ããã圱é¿åããããRIPE ã³ãã¥ããã£ã®ã³ã³ã»ã³ãµã¹ãš RIPE NCC äŒå¡ã®æç¥šã®éããçè§£ããŠãããšã³ãã£ãã£ã¯ãããããåãã ãšä»®å®ããè ããã圱é¿åããããéå»ã®æ¿çå±¥æŽãè§£éã§ãããšã³ãã£ãã£ã¯ãå®éã®æžå¿µã¯ãããã®ã®æŽç·ŽãããŠããªãæ°æã®å°èŠæš¡äºæ¥è ãšããŠçŸããè ããã圱é¿åãããã
ã©ã®ãããªå¶åºŠã«ããã£ã«ã¿ãŒã¯ååšãããåé¡ã¯ãRIPE ã«ãããããããšã§ã¯ãªããåé¡ã¯ããã®çµæãçŸåšãçµæžçã«ä»¥åããéããªã£ãŠããããšã ãæœ€æ²¢ãªæä»£ã«ãããŠã¯ãæ¿ççå®ã¯ãã°ãã°ãçž®å°ãã€ã€ãäŸç¶ãšããŠç®¡ççã«å²ãåœãŠãããŠããããŒã«ããã®åé ãèŠå®ããŠãããIPv4 æ¯æžåŸã¯ãæ¿ççå®ã¯ãŸããŸãããã§ã«ãããã¯ãŒã¯ã«çµã¿èŸŒãŸããäŒæ¥ååŒããªãŒã¹å¥çŽãçµè·¯ã»ãã¥ãªãã£æ±ºå®ãè³ç£èšäžèšç»ã«çµã¿èŸŒãŸããè³æºãå·¡ãèªèå±€ãèŠå®ããããã«ãªã£ãŠããã
ãã®ãããã¡ãŒãªã³ã°ãªã¹ãã¯ããã®æåãèªãããã以äžã«ãè³æ¬åžå Žã®ã«ãŒã«åœ¢æã®å Žã«è¿ããªã£ãŠãããããã¯äŸ¡æ Œã決ããªããã¢ãã¬ã¹ãããã¯ãã·ã§ãŒããããªããæææš©ã宣èšããªããããããè³æºã®ä¿æã売åŽããªãŒã¹ãèªèšŒãå·¡ããªã¹ã¯ãã¬ãã¢ã ãå€ããããããã§ååã ã
å€ããªã¹ãæåã¯ãæè¡çã¡ãªãããäºæ¥è çµéšãå¿è匷ãããã¹ãè°è«ããã£ãšããããæ£åœæ§ã®è² æ ãæ ããäžçåãã«èšèšãããŠãããæ°ããªåžå°æ§çµæžã¯ã远å ã®åããèŠæ±ããããã®ã«ãŒã«ã¯ã©ã®ãããªåžå Žå¹æãããããã®ãããããŠãã®å¹æãåœããåãšããããšãã誰ãè°è«ã«åå ããŠããªãã£ãã®ãïŒ
ã³ã³ã»ã³ãµã¹ã¯çšå°åå ã®çµæžã§ãã
ã³ã³ã»ã³ãµã¹ã¯å æ¬çãªèšèã«èããããå®éã«ã¯ãããã¯çšå°åå ã®çµæžã§ãããé 絊ãããè³æºã¯ã¢ãã¬ã¹ç©ºéã§ã¯ãªããããã¯ãè°è«ã圢æããã®ã«åå广çã«åå ã§ãã人ã ã®æ³šæåã§ããã
RIPE ã®æ¿çããŒãžã¯ããã®ã¢ãã«ãæã匷åãªåœ¢ã§æç€ºããŠããããããã¯ãé·å¹Žã«ããã確ç«ããããå ¬éãããããã ã¢ããã®ãã³ã³ã»ã³ãµã¹ã«åºã¥ãè°è«ãšæææ±ºå®ã®ããã»ã¹ã説æããŠãããæ¿ççå®ã¯ã¯ãŒãã³ã°ã°ã«ãŒãã®ã¡ãŒãªã³ã°ãªã¹ãäžãš RIPE äŒåã§è¡ãããäŒåãšã¡ãŒãªã³ã°ãªã¹ãã¯èª°ã«ã§ãéãããŠãããã¢ãŒã«ã€ããšè°äºé²ã¯å ¬éãããæ¿çãææ¡ããããã« RIPE NCC ã®äŒå¡ã§ããå¿ èŠãã宿çã«äŒåã«åºåžããå¿ èŠããªãããšããŠãããããã¯è²Žéãªã¢ãŒããã¯ãã£ã§ãããããã¯ãå€ãã®æ°éã€ã³ãã©æ©é¢ãããããã»ã¹ãå¯èŠåãããéšå€è ã«çºèšãèš±ããç°è«ãèšé²ãããæ¿çãåãªãå·è¡åœ¹å¡ã®æ©èœã«ãªãããšãé²ãã
ããããå ¬éã¯äžã€ã®åãã«ããçããŠããªããæã¯åœ¢åŒçã«éé ãããŠãããïŒ ããã«ã¯çããŠããªãã誰ããé©åãªèšèªã§ãé©åãªæç¶ãã®ã¿ã€ãã³ã°ã§ã説åŸåãæã€ã«è¶³ãååãªå±¥æŽãæã£ãŠãç¹°ãè¿ããããéãæããäœè£ããããã«ã¯çããŠããªãã
广çãªåå ã®ã³ã¹ãã¯é«ããããããŒããè°è«ãããŠããããšãç¥ããæ¿çææžãçè§£ããéçšé åãçè§£ãã忥äžã®åž°çµãçè§£ããé©åãªã¯ãŒãã³ã°ã°ã«ãŒããç¹å®ãããã®æåã建èšçãšèŠãªãããŒã³ã§æžããæ¹èšåŸã«æ»ããå Žåã«ãã£ãŠã¯äŒåã«åºåžããRIPE NCC ã®åœ±é¿åæãèªã¿ãèŠçŽããšã©ã¹ãã³ãŒã«äžã«å¿çãããã€æ²é»ãåãå ¥ããšè§£éãããããç¥ããã°ãªããªããäžå¯èœã§ã¯ãªããå®ãããªãã
ãã®ã³ã¹ãã¯äžåçã«åé ãããŠãããæ¬§å·ã®å€§èŠæš¡äºæ¥è ã¯ãæ¿çã«äººãå²ãåœãŠãããšãã§ãããã¯ã©ãŠããã©ãããã©ãŒã ã¯ãåŒè·å£«ããããã¯ãŒã¯ã¢ãŒããã¯ããå ¬å ±æ¿çã¹ã¿ããã«çžè«ã§ããããããŒã«ãŒã¯ãæ å ±ãããžãã¹ã®äžéšã§ããããã移転æ¿çã®è©³çްã远跡ã§ãããRIPE ã«é·ãé¢ãããšã³ãã£ãã£ã¯ãã©ã®ç°è«ãçå£ã«åãæ¢ããããããç¥ã£ãŠãããå°æ¹ã®å°èŠæš¡ ISPãäœæåŸåžå Žã®ãã¹ãã£ã³ã°äŒæ¥ãäžæ±ã®æ°èŠåå ¥è ãå°äººæ°ã®å€§åŠãããã¯ãŒã¯ããªãŒã¹ã¢ãã¬ã¹ã®å©çšè ãã¢ãã¬ã¹ä¿æè ã®äžæµã«ãã顧客ã¯ããã®ãããªèœåãæããªããããããªãã圌ãã¯çµæãæ·±ãæžå¿µããªããããåççã«æ²é»ãå®ããããããªãã
ãããã£ãŠãæ²é»ã¯ææ§ã§ãããããã¯åæãæå³ãããããããªããç²åŽãæå³ãããããããªããæ å ±äžè¶³ãæå³ãããããããªããèšèªã®å£ãæå³ãããããããªããé¢ä¿è ãè³æ¬ãžã®åœ±é¿ãåŸã«ãªã£ãŠåããŠçè§£ããããšãæå³ãããããããªããå ¬ã®å Žã§è«ããã³ã¹ããæåŸ ãããå©çãäžåã£ãããšãæå³ãããããããªããçé¢ç®ãªå¶åºŠã¯ãæ²é»ã匱ã蚌æ ãšããŠæ±ãã¹ãã§ãããåºç¯ãªåæãšããŠã§ã¯ãªãã
åå ã®çšå°æ§ã¯ãRIPE ã®éåŸ³çæ¬ é¥ã§ã¯ãªããããã¯æ§é çæ¡ä»¶ã§ãããã¡ãŒãªã³ã°ãªã¹ãã¯åžžé£ãã¬ãŒã€ãŒã«å ±ãããããžãã¹ãªã¹ã¯ãæ¿çèšèªã«å€æã§ããè ã«å ±ãããæç¶ãèšæ¶ãæã€è ã«å ±ãããæä¹ åã«å ±ãããæç¶çãªå©çšè ãé ããŠããå察è ãå ·äœçã ããªã¹ãã®èšèªã«ç¿»èš³ãããŠããªãæžå¿µãæã€äººã ã眰ããã
ã ãããããIPv4 åžå°æä»£ã®ã³ã³ã»ã³ãµã¹ã«ã¯çµæžçè£è¶³ãå¿ èŠãªã®ã ãã¢ã¯ãã£ããªãšã³ãã£ãã£éã®ã³ã³ã»ã³ãµã¹ã¯äŸç¶æçšã§ããããããã移転ããªãŒã¹ãRPKIãéåŒã DNSãç£æ»ãã¬ã¬ã·ãŒè³æºããããã¯ã¬ãžã¹ããªãµãŒãã¹é©æ Œæ§ã«åœ±é¿ãäžããæ¿çã¯ãäžåšã®å©å®³ãç¹å®ãã¹ãã§ããã誰ã圱é¿ãåããå¯èœæ§ãé«ããïŒ ã©ã®åœäºè ãé«ãåå ã³ã¹ããè² ããïŒ å°èŠæš¡äºæ¥è ã«ã®ããããã³ã¹ãã¯äœãïŒ è²·ãæã売ãæããªãŒã¹æäŸè ããªãŒã¹å©çšè ãäžæµã®é¡§å®¢ã«ã®ããããã³ã¹ãã¯äœãïŒ ã©ã®ã³ã¹ããäžåéãã®ã³ã³ãã©ã€ã¢ã³ã¹è² æ ã§ãã©ããç¶ç¶çãªäžç¢ºå®æ§ãçã¿åºãã®ãïŒ
ã³ã³ã»ã³ãµã¹ã¯ãèªãã®èšŒæ ã®éçãèªãããšãã«æã匷åã§ãããã¢ã¯ãã£ããªå°æ°æŽŸãã¬ããªãã¯ã«ãã£ãŠåœ±é¿ãåããçµæžå šäœã§ãããã®ããã«æ±ããããšããæã匱ããªãã
ã³ãã¥ããã£ãäŒå¡ããããŠæ¬ èœããçµæž
RIPE ã®å¶åºŠçæ§é ã¯ããã°ãã°ç§°è³ããããã°ãã°ææ§ãªéèŠãªåºå¥ã瀺ããŠãããRIPE ã³ãã¥ããã£ã¯éãããŠãããRIPE NCC ã¯äŒå¡åäŒã§ãããã¬ãžã¹ããªãµãŒãã¹ãéå¶ããªããã³ãã¥ããã£ãæ¯ããäºåå±ã§ãããäŒå¡ã¯åäŒã«åå ããæéãæ¯æããäŒå¡æš©ãè¡äœ¿ãããæ¿çã³ãã¥ããã£ã¯äŒå¡ã«éå®ãããªãããã®éæŸæ§ã¯åŒ·ã¿ã§ãããããã¯ãŸãã代衚æ§ã«é¢ããæ··ä¹±ã®æºã§ãããã
æ¿ççå®ã¯äŒå¡æç¥šã®ããã«ã¯æ©èœããªããéäŒå¡ãæ¿çãææ¡ã§ãããç ç©¶è ãé¡§å®¢ãæ¹è©å®¶ãäºæ¥è ãå åŸæ¥å¡ããããŒã«ãŒãã³ã³ãµã«ã¿ã³ãããããã¯é¢å¿ã®ãã誰ããã¯ãŒãã³ã°ã°ã«ãŒãã®ãªã¹ãã«åå ã§ãããããã¯ããã»ã¹ãææäŒå¡ããåºããããåæã«ãææäŒå¡ã«å¯Ÿãã説æè²¬ä»»ã匱ããå¯èœæ§ãããããªããªããã³ã³ã»ã³ãµã¹ãçã¿åºã人ã ããæéè² æ ãéçšãªã¹ã¯ãè² ã人ã ãšã¯ç°ãªããããããªãããã ã
éããŸãçã§ãããRIPE NCC ã®äŒå¡ã¯ã圱é¿ãåããçµæžå šäœã代衚ããŠããããã§ã¯ãªããäŒå¡ãè³æºã®èªèãããä¿æè ã§ãããããããªãããã¢ãã¬ã¹ã¯ãæ¿çã¢ãŒã«ã€ãã«ã¯æ±ºããŠçŸããªã顧客ãåäŒç€Ÿããã¹ãã£ã³ã°ãµãŒãã¹ããªãŒã¹å±éãäžæµãããã¯ãŒã¯ãå ¬çæ©é¢ãéèŠã¢ããªã±ãŒã·ã§ã³ãæ¯ããŠãããããããªãããªãŒã¹å©çšè ã¯ãã¬ãžã¹ããªäžã®æ£åŒãªå°äœãæããã«è³æºã«äŸåããŠãããããããªããéè¡ãè²·åæ¡ä»¶ã®è²·ãæã¯ãæ¿çã«åå ããã«ã¬ãžã¹ããªãªã¹ã¯ãè©äŸ¡ããŠãããããããªããéåŒã DNS ã®é害ã RPKI ã®æ··ä¹±ã«ãã£ãŠåœ±é¿ãåãã顧客ã¯ãã©ã®ã¯ãŒãã³ã°ã°ã«ãŒãã®ã¹ã¬ãããé©åãªã«ãŒã«ã圢æããããæ±ºããŠç¥ããªããããããªãã
ããã¯ãåäžã®éžæåºã©ãã«ãéžã¶ããšã«ãã£ãŠæ£åœæ§ã®åé¡ã解決ã§ããªãããšãæå³ãããã³ãã¥ããã£ã§ã¯äžååã ããªããªãããã¯ã圱é¿ãåããå©çšè ã§ã¯ãªããªã¹ãäžã®ã¢ã¯ãã£ããªãšã³ãã£ãã£ãæãå¯èœæ§ãããããã ãäŒå¡ã§ã¯äžååã ããªããªãäŒå¡ã¯åœ±é¿ãåãããã¹ãŠã®åœäºè ã§ã¯ãªããäŒå¡æç¥šã¯äž»ã«è©³çŽ°ãªæ¿çææžã§ã¯ãªãåäŒã®ã¬ããã³ã¹ã«åããããŠããããã ããµãŒãã¹å°åã§ã¯äžååã ããªããªããµãŒãã¹å°åã¯å°çãšãããã¯ãŒã¯äŸåã§ããã䞻暩çãªéžææ°ã§ã¯ãªãããã ãã€ã³ã¿ãŒãããã§ã¯äžååã ããªããªãããã¯åºãããŠãã¬ãžã¹ããªåºæã®è£éæš©ãèªããããšãã§ããªãããã ã
æçšãªåãã¯ããçããæ¿çããã»ã¹ã¯ãããããçããã«ãŒã«ãæ£åœåããã®ã«ååãªã圱é¿ãåããå©å®³ã«é¢ããæ å ±ãçã¿åºããŠãããïŒ
RIPE NCC ã«ã¯åœ¹ç«ã€ãããããªãããŒã«ããããæ¿çããã»ã¹ã«ã¯ RIPE NCC ã®åœ±é¿åæãå«ãŸããŠãããã¬ãžã¹ããªã·ã¹ãã ãã¢ãã¬ã¹éçšãã¯ãŒã¯ããŒããæ³çåé¡ãå®è£ ãžã®åœ±é¿ãè°è«ããããšãã§ãããããã¯è²Žéã ããåžå Žåœ±é¿åæãšã¯åãã§ã¯ãªããããæ¿çã¯ãæ³çã«åŒ·å¶å¯èœãã€éçšäžå®çŸå¯èœã§ãããªããã移転ã³ã¹ããå¢å ãããæµåæ§ãäœäžãããå€§èŠæš¡ä¿æè ãžã®äŸåãé«ãããªãŒã¹ãäžéæã«ããå°èŠæš¡äºæ¥è ãäžå©ã«ããããã㯠RIPE å°åã®è³æºã«å¯Ÿãããªã¹ã¯ãã¬ãã¢ã ãåŒãäžããå¯èœæ§ãããã
ãããã£ãŠãRIPE ã³ãã¥ããã£ãš RIPE NCC äŒå¡ã®åºå¥ã¯ãå瀌çãªçŸåŸ³ãšããŠã§ã¯ãªããèšèšäžã®åé¡ãšããŠæ±ãããã¹ãã§ãããéãããæ¿çã¯çµæžçãããã³ã°ã«çµã³ã€ããããªããã°ãªããªããäŒå¡ã¬ããã³ã¹ã¯ã³ã¹ãèŠåŸã«çµã³ã€ããããªããã°ãªããªããã¬ãžã¹ããªã®å®æœã¯çãæš©éã«çµã³ã€ããããªããã°ãªããªãããããã®çµã³ã€ãããªããã°ããã®åºå¥ã¯ã責任ãã«ããŽãªãŒã®éã«èœã¡èŸŒãå Žæã«ãªããããªããã³ãã¥ããã£ãæ¿çãäœãåºãããRIPE NCC ãããã宿œãããäŒå¡ãæ©é¢ã«è³éãæäŸãããåžå Žãã³ã¹ããè² æ ããã誰ãå šäœã®å¹æã«è²¬ä»»ãããã®ãã誰ã«ãèŠããªãã
IPv4 ã®åžå°æ§ãæ¿çã®æå³ãå€ãã
äžå¿çãªçµæžçæçµ¶ã¯ãIPv4 ã®æ¯æžã§ãããIPv4 æ¯æžã«é¢ãã RIPE NCC ã®ããŒãžã«ããã®çµç·¯ã瀺ãããŠãããRIPE NCC ã®æŽå²ã®å€§éšåã«ãããŠãããŒã«ã«ã€ã³ã¿ãŒãããã¬ãžã¹ããªã¯ããããã¯ãŒã¯èšç»ãªã©ã®ææžãæåºããã°ãå¿ èŠã«å¿ã㊠IPv4 ã¢ãã¬ã¹ãåãåãããšãã§ããã2012 幎㫠RIPE NCC ãæåŸã®/8 ã«éãããšããæ¿çã¯å LIR ã/22ãããªãã¡ 1024 ã¢ãã¬ã¹ã«å¶éããã2019 幎 11 æãRIPE NCC ã¯æ®ãã® IPv4 ããŒã«ãæ¯æžããããçŸåšã®åŸ æ©ãªã¹ãã¢ãã«ã§ã¯ããŸã IPv4 å²ãæ¯ããåããŠããªã驿 Œãª LIR ããå°æ¥ååãããã¢ãã¬ã¹ãã/24 ãèŠæ±ã§ããã
ãã®çµç·¯ã¯éåžžãè³æºæ¯æžãšããŠèª¬æããããããã¯ãŸããæ¿ççµæžåŠã«ãããæ§é çå€åã§ããããæ¯æžåã¯ãå²ãæ¯ãåºæºãææžåãç¯çŽãå ¬å¹³æ§ã«é¢ããæ¿çè«äºããçž®å°ããå ±æããŒã«ãžã®ã¢ã¯ã»ã¹ãèŠå®ããŠãããæ¯æžåŸã¯ãæ¿çè«äºããæ¢ã«æ°éãããã¯ãŒã¯ãæ°éå¥çŽã®äžã«ååšããè³æºã®èªèãããå°äœãšç§»åæ§ãããŸããŸãèŠå®ããããã«ãªã£ãŠããã
ãã®éãã¯æ ¹æ¬çã§ãããå²ãæ¯ãæä»£ã®æ¿çã¯ãã¬ãžã¹ããªããŸã é åžããããŒã«ãæã£ãŠãããããç¶æš©çã§ãããããåžå°æ§æä»£ã®æ¿çã¯ãã¬ãžã¹ããªã®äž»ããæš©åãæ°ããªæœ€æ²¢ããäžããããšã§ã¯ãªããããããæ éã§ãªããã°ãªããªããããã¯ãæ¢ã«äœ¿çšãããŠããè³æºãèªèããé å»¶ãããå¶çŽããèªèšŒãããããã¯è€éåããããšã§ãããåŸ æ©ãªã¹ããã/24 ãåãåããäž»äœãå®ããã«ãŒã«ã¯é 絊ã«ãŒã«ã§ãããæ¢åã® IPv4 ãããã¯ã®ç§»è»¢ã«åœ±é¿ãäžããã«ãŒã«ã¯è³æ¬ç§»åã«ãŒã«ã§ãããRPKI èªèšŒã®æ £è¡ãå€ããã«ãŒã«ã¯éçšã»ãã¥ãªãã£ç¶æ ã«åœ±é¿ãããéåŒã DNS ã®å¶åŸ¡ã倿Žããã«ãŒã«ã¯ãµãŒãã¹ã®ä¿¡é Œæ§ãšè©å€ã«åœ±é¿ãããã¬ãžã¹ããªã®ç¢ºèªã倿Žããã«ãŒã«ã¯ååŒã®ç¢ºå®æ§ã«åœ±é¿ããã
æ¿çèšèªã¯æè¡çãªãŸãŸã§ãããããçµæžçæ¬è³ªã¯å€ãã£ããIPv4 ã¢ãã¬ã¹ç©ºéã¯ä»ãçç£è³æ¬ãšããŠæ©èœããŠããããªããªãããã¯ãåçãçããµãŒãã¹ã顧客ç¶ç¶æ§ããã¹ãã£ã³ã°ãã¯ã©ãŠãéçšãçµè·¯è©äŸ¡ãå°éæ§ãååŸäŸ¡å€ãç§»è¡ãªãã·ã§ã³ãæ¯ããããã ãã¬ãžã¹ããªããã®äŸ¡å€ã®ãã¹ãŠãåµé ããŠããããã§ã¯ãªããäºæ¥è ãšåžå°æ§ãããããŠãããããããã¬ãžã¹ããªã®èªèã¯ã䟡å€ã®å®çŸã容æã«ãããå°é£ã«ããããããã
ã ãããããã¡ãŒãªã³ã°ãªã¹ãã®æ¿çã¯ä»ãè³æ¬ç°å¢ã®äžã«äœçœ®ã¥ãããããããææ¡ã¯ãäŸ¡æ Œã«èšåããã«æµåæ§ãå€ããããç«¶äºã«èšåããã«åžå Žæ§é ãå€ããããèŠæš¡ã«èšåããã«å°èŠæš¡äºæ¥è ã®äº€æžåãå€ãããããªãŒã¹å¥çŽã«èšåããã«ãªãŒã¹ã®ã€ã³ã»ã³ãã£ããå€ããããè³ç£ã®èšèã䜿ããã«ãããã¯ã®ãªã¹ã¯ãã¬ãã¢ã ãå€ãããã
æçãã察å¿ã¯ãRIPE ã«æææš©ã®ã¬ããªãã¯ãæ¡çšãããã匷ããããšã§ã¯ãªããæææš©ã®æ³çèšèªã¯æ§ã ã§ãããã¬ãžã¹ããªã«ã¯é床ãªåçŽåãé¿ããçç±ããããæçãã察å¿ã¯ãæ¿çã®åž°çµãæ£çŽã«æ±ãããšã§ãããããã«ãŒã«ãè³æ¬ã®äœ¿çšã«åœ±é¿ãããªããã¬ãžã¹ããªãã¬ãžã¹ããªã§ããç¶ãããšããŠããããã¯è³æ¬äœ¿çšãšããŠåæãããªããã°ãªããªãã
ããã¯ãŸããå ¬åŒã®æ¿çå±¥æŽããå²ãæ¯ãæä»£ã®æ¬èœããã®æçšæ§ãè¶ ããŠä¿åããããã«äœ¿ãããã¹ãã§ã¯ãªãããšãæå³ãããç¯çŽãå ¬å¹³æ§ãéçŽã¯ãããªãŒããŒã«ã®åé ãäžå¿åé¡ã ã£ããšãã«ã¯éèŠã ã£ãããããã¯ãåå空éãäžæ£é²æ¢ãšãã£ãéå®çãªæèã§ã¯äŸç¶éèŠã§ããããããã¯ãã¢ãã¬ã¹åžå Žã®åãã«å¯Ÿããäžè¬çãªé埳ç䞻匵ã«ãªã£ãŠã¯ãªããªããæœ€æ²¢æä»£ã®èšèªã䜿ã£ãŠåžå°æä»£ã®è£éæš©ãæ£åœåããã¬ãžã¹ããªã¯ãå°åž³ããã²ãŒãããŒããŒãžãšæŒæµããã ããã
ç§»è»¢ã¯æç¶ããè³æ¬é åãšããŠé²åããã
RIPE NCC ã®ç§»è»¢ã«ãŒã«ã¯ãæç¶ããããã«è³æ¬é åã«ãªããã瀺ããŠãããIP ã¢ãã¬ã¹ãš AS çªå·ã®ç§»è»¢ã«é¢ããææžã¯ãRIPE NCC ã IPv4ãIPv6ãAS çªå·ã®ç§»è»¢ãèªããã€ä¿é²ããè³æºç§»è»¢ã¯ç¡æã§ããããšã瀺ããŠãããè³æºç§»è»¢ããªã·ãŒã¯ãæ£åœãªè³æºä¿æè ã¯ãããªã·ãŒãšå¶éã«åŸãããããã¯å šäœãŸãã¯äžéšã移転ã§ãã移転㯠RIPE ããŒã¿ããŒã¹ã«åæ ãããªããã°ãªããªããšèŠå®ããŠããã
ããã¯å¿ èŠã§ããã移転ãèªèã§ããªãã¬ãžã¹ããªã¯åžå Žãåçµãããã ãããæ€èšŒãªãã«ç§»è»¢ãèªèããã¬ãžã¹ããªã¯äžæ£ãæãã ããããããã£ãŠç§»è»¢ããã»ã¹ã¯å€å žçãªå°åž³æ©èœã§ãããããã¯ãèªèãããä¿æè ãè¡åæš©éãè³æºã®ç¶æ ãè²å人ãé¢é£ããå¶éãå ¬éã¬ãžã¹ããªã®æŽæ°ã確èªããã
ããããIPv4 æ¯æžåŸã¯ããã®å°åž³æ©èœã¯è³æ¬æ±ºæžã§ããããè²·ãæã¯ãã¬ãžã¹ããªèªèã倿Žããããšãã«ã®ã¿æ¯æããããããªãã売ãæã¯ãæŽæ°ãŸã§è²¬ä»»ãè² ãç¶ãããããããªãããããŒã«ãŒã¯ãã¬ãžã¹ããªããã»ã¹ãäžå¿ã«ãšã¹ã¯ããŒãæ§ç¯ãããããããªããäŒæ¥è²·åè ã¯ãç§»è»¢æŽæ°ãã¯ããŒãžã³ã°æ¡ä»¶ãšèŠãªããããããªãããªãŒã¹æäŸè ã¯ãæå³çã«ç§»è»¢ãé¿ããèªèãããä¿æãçµåžžåå ¥ã¢ãã«ã®åºç€ãšããŠç¶æãããããããªããæç¶ãäžã®ã«ãŒã«ã¯äžã€äžã€ãããããã®éžæã®çµæžæ§ãå€ããã
åžå°è³æºã«å¯Ÿãã 24 ã¶æã®å¶éãããã®æãæãããªäŸã§ããã峿ã®å販ãåŸ æ©ãªã¹ãã®è£å®ååŒã人çºçãªå転çãææ¢ãããããããã¯æ£åœãªé¢å¿äºã§ãããããããããã¯è³æ¬ãåºå®ãããä¿æè ã¯ã移転ãäŒæ¥æ§é ã®å€æŽåŸã«è³æºãç§»åãããããšã劚ãããããããããªããè²·ãæã¯ãå°æ¥ã®åºå£ãå¶çŽãããããã«è³æºãå²ãåŒããããããªããèŠå¢ã«ããäŒæ¥ã¯ãè¿ éã«å£²åŽã§ããªããããããªãããªã¹ãã©ã¯ãã£ãªã³ã°ã¯ã¿ã€ãã³ã°ãªã¹ã¯ãçã¿åºããããããªãã移転ã®åœ¢åŒçãªç§»åæ§ãå¶éãããããã売åŽããããªãŒã¹ãé åçã«ãªããããããªãã
èšãããã®ã¯ããã®ã«ãŒã«ãå¿ ç¶çã«æªããšããããšã§ã¯ãªããããã¯æµåæ§ããªã·ãŒã§ãããšããããšã ããã®ããã«åæãããã¹ãã§ãããåã«ä¹±çšé²æ¢ãå ¬å¹³æ§ã®ããªã·ãŒãšããŠæ±ãã¡ãŒãªã³ã°ãªã¹ãã®è°è«ã¯ãåžå Žå¹æãèŠèœãšããŠãããã©ãã ãã®æ£åœãªååŒãé å»¶ããã®ããã«ãŒã«ãäŸ¡æ Œãå€ããã®ããäŸå€ã¯æç¢ºããM&A ã®æ±ãã¯äºæž¬å¯èœãããªãŒã¹ãžã®ä»£æ¿ã¯å¢å ããããã³ã¹ããå°èŠæš¡ä¿æè ã«äžåè¡¡ã«ã®ãããããããšãã£ãããšãåãã¹ãã§ããã
移転ããªã·ãŒã¯ãŸããå®çŸãã移転ã®çµ±èšã ãã§ã¯äžååãªçç±ã瀺ããŠãããRIPE NCC ã¯ç§»è»¢æ å ±ãå ¬éããŠããããã®éææ§ã¯è²Žéã§ãããããããå®çŸãã移転ã¯åžå Žã®ç®ã«èŠããéšåã«éããªããé ããéšåã«ã¯ãç³è«åã«æŸæ£ãããååŒãææžã«ãŒãã£ã³ã«ãã£ãŠé å»¶ããç³è«ããªãŒã¹ã«è»¢æãããæ¡ä»¶ãäºææ§ã®ãªãããªã·ãŒã«ãã£ãŠãããã¯ããã RIR éç§»åãåºå®è²»ãé«ãããããã«å ¬åŒããã»ã¹ã«æ±ºããŠå ¥ããªãå°èŠæš¡äºæ¥è ãå«ãŸããã
æ¿çãªã¹ãã移転ã«ãŒã«ãèŠå®ããªããã°ãªããªãã®ã§ããã°ãããè¯ãããã»ã¹ããŒã¿ãå¿ èŠã§ãããåŠçæéã®äžå€®å€ãå¯©æ»æéã®ååžãäžè¬çãªé å»¶çç±ãææžã«ãŒãã£ã³ã®åæ°ãå¶è£é¢é£ã®é å»¶ã24 ã¶æå¶éã®å¹æãæŸæ£ãããç³è«ã®ã«ããŽãªãŒãªã©ãããã°ãè°è«ã¯ããéžè©±çã§ãªããªãã ãããæ©å¯æ§ã¯ç¡ç¥ãèŠæ±ããªããæ©æŠã«é¢ããéèšããŒã¿ã¯ãæ¹å€è ãšæè·è ã®åæ¹ãåŸããã ããã
æç¶ãã¯ãåžå°è³æºãç§»åã§ãããã©ãããæ±ºå®ãããšããè³æ¬é åã§ãããRIPE ã®æ¿çæåã¯ãããæç¢ºã«è¿°ã¹ãã¹ãã§ããã
ãªãŒã¹ã¯æ£åŒãªã¬ãžã¹ããªãšåžå Žã®çŸå®ãåºäŒãå°ç¹ã§ãã
IPv4 ãªãŒã¹ã¯ãã¬ãžã¹ããªã®åœ¢åŒçãªäžçãšåžå Žã®çŸå®ãæãé¡èã«åå²ããå Žæã§ãããã¬ãžã¹ããªã¯èªèãããä¿æè ã瀺ãããšãã§ãããéçšäžã®äœ¿çšãã«ãŒãã£ã³ã°ãè¿·æè¡çºåŠçã顧客äŸåãçµæžçå©çã¯ãç§çå¥çŽã®äžã§å¥ã®å Žæã«ååšãããããã®åå²ã¯ãªã¹ã¯ã䌎ããããããã¯è²¬ä»»ãäžæç¢ºã«ããRPKI ãè€éã«ããéåŒã DNS ã®æ©æŠãçã¿ãè¿·æè¡çºå¯Ÿå¿ãããå°é£ã«ããå¯èœæ§ãããããŸããçµæžçã«åççã§éçšäžå¹ççã§ãããããã
ãªãŒã¹ãååšããã®ã¯ãåžå°æ§ãäžæç䜿çšã«äŸ¡æ Œãçã¿åºãããã§ãããã¢ãã¬ã¹ç©ºéã®è³Œå ¥ã¯è³æ¬éçŽçã§ãããéèŠã¯äžç¢ºå®ãããããªããæ°èŠ ISP ã¯ã顧客åºç€ã®æé·ãè³Œå ¥ãæ£åœåãããã©ããåãããªããã¡ã«ã容éãå¿ èŠãšãããããããªãããã¹ãã£ã³ã°äŒæ¥ã¯åŒŸåæ§ãå¿ èŠãšãããããããªããã»ãã¥ãªãã£ãµãŒãã¹ã¯ã¢ãã¬ã¹ã®å€æ§æ§ãå¿ èŠãšãããããããªããã¢ãã¬ã¹ãè±å¯ã«æã€ä¿æè ã¯ã売åŽãããåå ¥ã奜ããããããªãããªãŒã¹å©çšè ã¯ãã¬ãžã¹ããªã¬ãã«ã®é²åºãäžæµã«ä¿ã€ããšã奜ããããããªãã移転å¶éããéäŒå®¹éãæŽ»çšããå®éçãªæ¹æ³ãšããŠãªãŒã¹ãéžã°ãããããããªãã
æ¿çã¡ãŒãªã³ã°ãªã¹ãã¯ããªãŒã¹ãäºã€ã®æ¹æ³ã§æ±ãããšãã§ãããå²ãæ¯ãæä»£ã®èŠç¯ããã®éžè±ãšããŠé埳åããããšãã§ããããããã¯ãéçšäžã®æç¢ºããå¿ èŠãšããåžå°æ§æä»£ã®å©çšã¢ãã«ãšããŠæ±ãããšãã§ãããåè ã¯åžå Žã圱ã«è¿œããããåŸè ã¯å°åž³ãæ¹åããã
ã¬ãžã¹ããªã¯ããªãŒã¹äŸ¡æ Œãç§çãªåæ¥æ¡ä»¶ãèŠå¶ããå¿ èŠã¯ãªããããã¯ã第äžè ã«åœ±é¿ãäžããäºå®ã«é¢å¿ãæã€ã¹ãã§ãããè¿·æè¡çºã®ããã«èª°ã«é£çµ¡ã§ãããã誰ã ROA ãäœæãŸãã¯èŠæ±ã§ãããã誰ãéåŒã DNS ã管çãããããªãŒã¹çµäºæã®ã¯ãªãŒã³ã¢ããã«èª°ã責任ãè² ãããã©ã®éçšãŠãŒã¶ãŒã該åœããå Žåã«å¯èŠåãããããå¶è£å¯Ÿè±¡è ãè©æ¬ºç䞻匵ãé¢äžããŠãããã©ããããããã¯å°åž³ã®é¢å¿äºã§ããããããã¯ããªãŒã¹åžå Žã«å¯Ÿãã忥çåæãšã¯å¥ç©ã§ããã
ãªãŒã¹ã¯ãŸãã圢åŒçãªä»£è¡šæ§ã®éçãé²ãã«ããããªãŒã¹å©çšè ã¯ãã°ãã°ã¬ãžã¹ããªã®ããªã·ãŒã«åœ±é¿ãããããã¬ãžã¹ããªã®é¢ä¿ã«ã¯ååšããªãããªãŒã¹ç©ºéã䜿çšããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ãROA ã®å€æŽãéåŒã DNS ã®æŽæ°ããªãŒã¹æäŸè ã«äŸåãããããããªããå°å ISP ã¯ãè³Œå ¥ãé«ãããããã«ãªãŒã¹ãããããããªããäžæµã®é¡§å®¢ã¯ããµãŒãã¹ã®å質ã ããèŠãŠãã¬ãžã¹ããªäŸåãèŠãªããããããªããæ¿ç倿ŽããªãŒã¹ããããªã¹ã¯ã®é«ããã®ã«ããã°ãã³ã¹ãã¯ãã¡ãŒãªã³ã°ãªã¹ãäžã®ç°è«ãšããŠã§ã¯ãªãã忢ã颚è©çŽäºãæŽæ°ãã¬ãã¢ã ãããå³ããå¥çŽæ¡ä»¶ãšããŠçŸãããããããªãã
ã ããããããªãŒã¹ã¯åžå°æ§æä»£ã®æ¿çã«ãããŠå¿ é ã®èæ ®äºé ã§ããã¹ãã ã移転ãèªèšŒãéåŒã DNSãé£çµ¡å èŠä»¶ãä¿æè 矩åã«åœ±é¿ãäžãããããªãææ¡ãããããäžæç䜿çšããªãŒã¹å±éã«ã©ã®ããã«åœ±é¿ããããåãã¹ãã§ãããããã¯æ£åœãªãªãŒã¹ãããã¯ãªãŒã³ã«ãããïŒ ãªãŒã¹ãäžéæåããããïŒ å€§èŠæš¡ãªãŒã¹æäŸè ãžã®äŸåãé«ãããïŒ å°èŠæš¡äºæ¥è ã«ãšã£ãŠã¢ãã¬ã¹å®¹éã®ååŸã³ã¹ããå¢å€§ããããïŒ å¯èŠæ§ããªã¹ã¯ãé«ããããã«ãä¿æè ãéçšäºå®ã®æŽæ°ãæ ãã€ã³ã»ã³ãã£ããçã¿åºããïŒ
ãªã¹ãã¯ãã¬ãžã¹ããªäžã®åœ¢åŒçãªä¿æè ãå¯äžã®åœ±é¿ãåããåœäºè ã§ãããšèŠãªããªãã°ããããã®åãã«çããããšã¯ã§ããªããåžå°æ§çµæžã«ãããŠã¯ã䜿çšãšä¿æã¯åå²ãããæ¿çã®æ£åœæ§ã¯ããã®åå²ãèªèããããšã«ããã£ãŠããã
RPKI ãšéåŒã DNS ã¯ãªã¹ãã®æ±ºå®ãéçšäžã®å¶åŸ¡ã«å€ãã
ã¡ãŒãªã³ã°ãªã¹ãã®çµæžçå°çšã¯ã移転å¯èœæ§ã«ãšã©ãŸããªããããã¯çµè·¯ã»ãã¥ãªãã£ãååé¢é£ã®éçšã«ãåã¶ãRPKI ãšéåŒã DNS ã¯ãè£ é£Ÿçãªã¬ãžã¹ããªãµãŒãã¹ã§ã¯ãªãããããã¯ãçµè·¯ã®åãå ¥ããã¡ãŒã«ã·ã¹ãã ã®äºæž¬å¯èœãªåäœããµãŒãã¹ãžã®ä¿¡é Œãä¿æè ã®ç®¡çã®ä¿¡é Œæ§ã«åœ±é¿ãäžãããéçšäžã®ã¬ããŒã§ããã
RIPE NCC ã®RPKIããŒãžã§ã¯ãè³æºä¿æè ããèªèº«ãä¿æããã€ã³ã¿ãŒãããçªå·è³æºãåæããããžã¿ã«èšŒææžãèŠæ±ã§ããã·ã¹ãã ã説æããŠãããããã«ãã£ãŠè³æºãå°åã€ã³ã¿ãŒãããã¬ãžã¹ããªã«ãã£ãŠç»é²ãããããšã®æ€èšŒå¯èœãªèšŒæãæäŸãããããã®èšŒæã¯çµè·¯èµ·ç¹èªå¯ãš BGP èµ·ç¹æ€èšŒãæ¯ãããã¬ãžã¹ããªã¯çµè·¯ã»ãã¥ãªãã£ãã§ãŒã³ã®äžéšãšãªãããããã£ãŠãèªèšŒã«é¢ããæ¿çæ±ºå®ã¯åãªãå éšç®¡çã§ã¯ãªãã
å§ä»» RPKI èªèšŒå±ããªã·ãŒ2025-02 ã®å®æœãããã®ç¹ã瀺ããŠãããRIPE NCC ã®æ¿ç宿œç¶æ³ããŒãžã«ããã°ããã®ææ¡ã¯ 2025 幎 10 æ 15 æ¥ã«ã«ãŒãã£ã³ã°ã¯ãŒãã³ã°ã°ã«ãŒãã«ãã£ãŠåãå ¥ããããæŽæ°ãããèªèšŒãµãŒãã¹æ¡ä»¶ã 2026 幎 5 æã«å ¬éãã 2026 幎 6 æã«çºå¹ããRIPE NCC ã¯å§ä»» CA äºæ¥è ãç£èŠããéç¥åŸ 90 æ¥é£ç¶ããŠæ©èœããŠããªãå§ä»» CA ã«é¢é£ããèšŒææžã倱å¹ããããæè¡çè«çã¯æããã ãé·æéæ©èœããŠããªãå§ä»» CA ã¯ãå©çšåœäºè ã«è² æ ãããããšã³ã·ã¹ãã ã匱ãããã
çµæžåŠçãªæèšããŸãæç¢ºã§ãããã¯ãŒãã³ã°ã°ã«ãŒãã®ããªã·ãŒã¯ãèªèãããè³æºãå·¡ãèšŒææžã®ç¶æ ã倿Žããã¬ãžã¹ããªã®ã¢ã¯ã·ã§ã³ãèªå¯ããããããã¯æ£ãããããããªããããããããã¯ã¡ãŒãªã³ã°ãªã¹ãã®ã³ã³ã»ã³ãµã¹ãéçšäžã®å¶åŸ¡ã«ãªãããããšã蚌æããŠããããã®ãããªå¶åŸ¡ãååšããå Žåãããã»ã¹ã¯åã«éãããŠãã以äžã®ãã®ã§ãªããã°ãªããªããããã¯æ£ç¢ºã§ã蚌æ ã«åºã¥ãã芳å¯å¯èœã§ãç¶ç¶æ§ã«é æ ®ãããã®ã§ãªããã°ãªããªãã
éåŒã DNS ãåæ§ã®æèšãå«ãã§ãããRIPE NCC ã®éåŒã DNSã«é¢ããææžã§ã¯ãéåŒãå§ä»»ã¯ RIPE ããŒã¿ããŒã¹ãéããŠç®¡çãããéåŒã DNS ãŸãŒã³ã®çæã«äœ¿çšããããšèª¬æãããŠãããéåŒã DNS ã¯ãè©å€ãã¡ãŒã«é ä¿¡ã蚺æãè¿·æè¡çºã®è¿œè·¡ãéçšäžã®ä¿¡é Œãšçµã³ã€ããŠããã誰ãéåŒã DNS ã管çã§ããããå§ä»»ãã©ã®ããã«æ€èšŒããããããšã©ãŒãã©ã®ããã«ä¿®æ£ããããã«åœ±é¿ããããªã·ãŒã宿œã«ãŒã«ã¯ãå®éã®åæ¥äžã®åž°çµãããããããã
ãããã®ãµãŒãã¹ã¯ãå°åž³ãšã²ãŒãããŒããŒã®åºå¥ãå ·äœçãªãã®ã«ãããå°åž³ã¯éçšäžã®çå®ãèšé²ãå ¬éãããæš©éã®ããåœäºè ã RPKI ãéåŒã DNS ã確å®ã«ç®¡çããã®ãå©ãããæç¢ºãªäºåãšéå®çãªææžçããã£ãŠãæä»£é ããŸãã¯å±éºãªç¶æ ãä¿®æ£ãããã²ãŒãããŒããŒã¯ãåããµãŒãã¹äŸåãããåºç¯ãªè¡çºã«å¯Ÿããã¬ãã¬ããžãšããŠå©çšãããéãã¯ããŒã«ã«ããã®ã§ã¯ãªããã«ãŒã«ã®æ¯äŸæ§ãšäºæž¬å¯èœæ§ã«ããã®ã ã
æ¿çãªã¹ãã¯ã決å®ãã»ãã¥ãªãã£ç¶æ ã«è§Šããå Žåã«ã¯ç¹ã«æ éã§ããã¹ãã ãäžè¬çãªèšèã§è°è«ãããšã³ãã£ãã£ã¯ãçµè·¯åªå€±ãæä»£é ãã® ROAãå§ä»» CA ã®é害ãéåŒã DNS ã®ãšã©ãŒãã¡ãŒã«é ä¿¡ãžã®åœ±é¿ããããã°ããè ã§ã¯ãªããããããªããå°èŠæš¡äºæ¥è ã«ã¯ RPKI å°éã®ã¹ã¿ãããããªããããããªãããªãŒã¹å©çšè 㯠ROA 倿ŽããªãŒã¹æäŸè ã«é Œããããããªããäžæµã®é¡§å®¢ã¯ãèªåãã¡ã®åæ¢ãããªã·ãŒã宿œããŸãã¯èª€äŒéã«èµ·å ããã®ããç¥ããªããããããªãã
RPKI ãšéåŒã DNS ã«ãšã£ãŠãçµæžç圱é¿ã¯éçšäžã®åœ±é¿ã§ãããæœè±¡çã«æè¡çã«å¥å šãªããªã·ãŒã§ãã£ãŠããäžå¹³çãªè² æ ã課ããããå€§èŠæš¡äºæ¥è ã«ã¯å®¹æã§ããå°èŠæš¡ãããã¯ãŒã¯ã«ã¯å°é£ãããããªããæçããèªååãæã€äºæ¥è ãåªéãããããããªããã¬ã€ãã©ã€ã³ãæç¢ºã§ããã°ãªãŒã¹ãããå®å šã«ããè²¬ä»»ãææ§ã§ããã°ãããªã¹ã¯ãé«ãããããããªããã°ããŒãã«ãªä¿¡é Œã®ç¹ç©ãæ¹åããäžæ¹ã§ã屿çãªæ éã¢ãŒããå¢ãããããããªãã
ãã®ãããªéžæã«ã¯ãéãããæ¿çè°è«ãå¿ èŠã§ãããããã¯ååã§ã¯ãªãããªã¹ãã¯ãæªçœ®ã䌎ãã¹ãã§ãããäºåæéãæ éã«ããŽãªãåŸ©æ§æéãèšŒææžãå§ä»»ãžã®åœ±é¿ãç°è°ç³ãç«ãŠããµããŒãã®çµè·¯ã宿œåŸã®ã€ã³ã·ãã³ã蚌æ ãªã©ã§ãããããããªããã°ãã³ãã¥ããã£ã¯æ¿çææžãèŠãŠããäžæ¹ã§ãåžå Žã¯å¶åŸ¡è¡šé¢ãçµéšããã
æ¿çææã¯é°è¬ãå¿ èŠãšããªã
ã¡ãŒãªã³ã°ãªã¹ãã·ã¹ãã ã«ãããæ¿çææã¯ããã£ãã«ç§å¯ã®èšç»ã®ããã«ã¯èŠããªããããã¯ãããŠããèœåã«èŠãããåã人ã ããã°ãã°çŸããã圌ãã¯æŽå²ãç¥ã£ãŠããã圌ãã¯çŽ æ©ãæžããã圌ãã¯è°é·ã®æåŸ ãã¹ã¿ããã®èšèªãäŒåã®ããŒã¹ã蚱容ãããç°è«ã®ã¹ã¿ã€ã«ãç¥ã£ãŠããã圌ãã¯ãèªåãã¡ã®å¥œãŸããçµæããç¶ç¶æ§ãæè¡çå ç¢æ§ã管çãä¹±çšå¯Ÿçãã»ãã¥ãªãã£è¡çã管çäžã®åçŽãã®ããã«èŠããããšãã§ãããä»ã®äººã ã¯ããã倧ããªçµæžçé²åºãæã¡ãªãããæç¶ãäžã®ç¿ç床ãäœããããããªãã
ããã¯çç£ã³ã¹ãã«ããææã§ããã説åŸåã®ããæ¿çå¯äžãçã¿åºãã³ã¹ããæãäœãåœäºè ããããå€ãã®åœ±é¿åãåŸããåå ã³ã¹ããæãé«ãåœäºè ããçµæã«å¯Ÿããããå€ãã®ãªã¹ã¯ãè² ãããªã¹ããéãããŠãããããé察称æ§ã¯ç®ã®åã«é ãããã誰ãå°èŠæš¡äºæ¥è ãæé€ããªãã£ãã誰ãéãã€ãã£ãã¹ããŒã«ãŒã®å·çãæ¢ããªãã£ãã誰ããªãŒã¹å©çšè ã®è³ŒèªãçŠããªãã£ãã誰ãå¿ãããããã¯ãŒã¯ãšã³ãžãã¢ã«å察ãããªãšèšããªãã£ããæã¯éãããŠãããããã§ã泚æåã®çµæžãåå è ãéžå¥ããã®ã§ããã
最沢æä»£ã®æè¡æåã«ãããŠã¯ããã®éžå¥ã¯èš±å®¹ã§ãããããããªããåžžé£ã®åå è ã¯ããã°ãã°ãããã¯ãŒã¯ç¶æã«æãæè³ããŠãã人ã ã ã£ããåžå°æ§æä»£ã®è³æ¬ç°å¢ã«ãããŠã¯ã宿çãªåå ã¯çµæžçå©çãšäžèŽããããã¢ãã¬ã¹ãè±å¯ã«æã€ä¿æè ããããŒã«ãŒãå€§èŠæš¡ãããã¯ãŒã¯ãã¬ãžã¹ããªå éšè ãã»ãã¥ãªãã£ã³ãã¥ããã£ãæ¿çã³ã³ãµã«ã¿ã³ããæ¿åºãçµç¹ã®åžžé£ã¯ãããããèªãã®ãªã¹ã¯ãäœæžãããããã¯èªãã®ã¬ãã¬ããžãé«ããã«ãŒã«ãæ±ãããããããªããçµæãæªãããã«ã圌ããæªæãæã£ãŠè¡åããå¿ èŠã¯ãªãã
ææã¯ãã¬ãŒãã³ã°ã«ãã£ãŠãäœçšããããææ©é²æ¢ãšããŠæç€ºãããææ¡ã¯ãæ¢ã«ã¹ããŒã¹ãä¿æããæ¢åŸæš©è ã«æå©ã«ãªããããããŒã¿å質ãšããŠæç€ºãããææ¡ã¯ãå°èŠæš¡ãããã¯ãŒã¯ã®ã³ã³ãã©ã€ã¢ã³ã¹ã³ã¹ããå¢å€§ãããããã»ãã¥ãªãã£è¡çãšããŠæç€ºãããææ¡ã¯ãå€§èŠæš¡ãããã¯ãŒã¯ããã容æã«èªååããéçšè² æ ãçã¿åºããããã³ãã¥ããã£ã®å ¬å¹³æ§ãšããŠæç€ºãããææ¡ã¯ãæµåæ§ãå¶éããããåžå Žã®çŸå®ãšããŠæç€ºãããææ¡ã¯ãä¹±çšãè©æ¬ºãéå°è©äŸ¡ããããåé¡ã®åœåããã©ã®ç°è«ãæ£åœã«èŠãããã«åœ±é¿ããã
RIPE ã®ã³ã³ã»ã³ãµã¹ã¢ãã«ã¯ãåçŽãªç¥šæ°ãããçç±ã®ããç°è«ãéèŠãããããããã«å¯ŸããŠè匱ã§ãããããã¯ãã°ãã°åŒ·ã¿ã§ãããæè¡çããã»ã¹ã¯ãäœå質ãªã³ã¡ã³ãã®æŽªæ°Žã«ãã£ãŠåããããã¹ãã§ã¯ãªããããããããã¯å質ãã¹ãããèªèãããã¹ã¿ã€ã«ã§å質ãçã¿åºãèœåã®äžå¹³çãèæ ®ããªããã°ãªããªãããšãæå³ãããããã«ãŒã«ãååŸè³é調éãããå°é£ã«ãããšããå°èŠæš¡äºæ¥è ã®äž»åŒµã¯ãæ¿çå±¥æŽã®æ çµã¿ã§è¿°ã¹ãããŠããªããŠããçµæžçã«éèŠãããããªããROA å¿çæéã«é¢ãããªãŒã¹å©çšè ã®æžå¿µã¯ããªãŒã¹å©çšè ãç»é²ãããä¿æè ã§ãªããŠãéèŠãããããªãããããŒã«ãŒã®ç°è«ã¯èªå·±å©ççã§ãããªãããå®éã®ååŒæ©æŠãæããã«ãããããããªãã
æ²»çæ³ã¯å°éç¥èãå¹³æºåããããšã§ã¯ãªããå°éç¥èã¯å¿ èŠã§ãããæ²»çæ³ã¯ãæ¿çèšé²ãå°éç¥èãšå©å®³ãåé¢ããäžåšã®ã³ã¹ãããããã³ã°ããããšãèŠæ±ããããšã§ããããã®ã«ãŒã«ãæ¡çšãããã°èª°ãå©çãåŸãã®ãïŒ å€±æããã°èª°ãå©çãåŸãã®ãïŒ èª°ãæ²é»ããŠããå¯èœæ§ãé«ããïŒ ã©ã®äž»åŒµãæè¡çã§ãã©ããæ³çã§ãã©ããçµæžçã§ãã©ããä¿®èŸçãïŒ å®æœåŸã«ãææ¡ã®ä»®å®ãå蚌ãã蚌æ ã¯äœãïŒ
æã匷åãªæ¿çæåã¯ãææãªã¹ã¯ãåŠå®ãããã®ã§ã¯ãªãããããèšèšã«çµã¿èŸŒããã®ã§ããã
圱é¿åæã¯å€éšã³ã¹ããæž¬å®ãã¹ãã§ãã
圱é¿åæã®äœæã«ããã RIPE NCC ã®åœ¹å²ã¯ãæ¿çããã»ã¹ã®äžã§æãæçšãªç¹åŸŽã®äžã€ã§ãããããã¯ãªã¹ãã空èãªè°è«ãããã®ãé²ããRIPE NCC ããææ¡ãã¬ãžã¹ããªã·ã¹ãã ãéçšãã¯ãŒã¯ããŒããæ³çãªã¹ã¯ã宿œèšç»ã«ã©ã圱é¿ãããã説æããããšãå¯èœã«ããããã®æ¯æŽã¯ããã©ã³ãã£ã¢ã®è°è«ãéçšããªã·ãŒã«å€ããéã«äžå¯æ¬ ã§ããã
ããããæ¯æžåŸã®ç°å¢ã¯ãããåºç¯ãªåœ±é¿æŠå¿µãèŠæ±ããã宿œäžã®åœ±é¿ã¯åžå Žãžã®åœ±é¿ãšåãã§ã¯ãªããããããªã·ãŒã¯ãRIPE NCC ã«ãšã£ãŠå®æœãç°¡åã§ãã£ãŠããåžå Žã«ãšã£ãŠã¯ã³ã¹ããé«ããããããªããã·ã¹ãã ã®ããããªä¿®æ£ããå¿ èŠãšããã«ãè²·ãæã®äžç¢ºå®æ§ãé«ãããããããªãã倧ããªæ³çé害ããªããŠããå°èŠæš¡äºæ¥è ã®è² æ ãå¢ãããããããªãã管çäžã¯ãªãŒã³ã§ãããªãããæ£åœãªæŽ»åãéå ¬åŒãªçµè·¯ã«è¿œããããããããªãã
移転å¶éãèããŠã¿ãããRIPE NCC ã¯ãããŒã¿ããŒã¹ãã©ã°ããµããŒãããã»ã¹ãæŽæ°ãããã¬ã€ãã©ã€ã³ã§ããã宿œã§ãããããããªããå€éšã³ã¹ãã«ã¯ãæµåæ§ã®äœäžã圱é¿ãåãããããã¯ã®ãã£ã¹ã«ãŠã³ãããªãŒã¹ã®å¢å ãããé«ããããŒã«ãŒææ°æãå¶éãå·¡ãæ³çãªä»çµã¿ãå°èŠæš¡äŒæ¥ã«ãšã£ãŠã®ååŒæžå°ãå«ãŸãããããããã®ã³ã¹ããåæããããªããã°ãæ¿çèšé²ã¯äžå®å šã§ããã
é£çµ¡å ããŒã¿ããªã·ãŒãèããŠã¿ãããããè¯ãããŒã¿ã¯ä¹±çšãè©æ¬ºãæžãããããããã¯ãŸããã³ã³ãã©ã€ã¢ã³ã¹è² æ ãçã¿ãå°èŠæš¡äºæ¥è ãå ¬çå§åã«ãããããµããŒããã±ãããå¢ããããšã¹ã«ã¬ãŒã·ã§ã³ãæããŠäžéšã®ä¿æè ãèšé²æŽæ°ã«æ¶æ¥µçã«ãªããããããªããæ£å³ã®çµæã¯èšèšæ¬¡ç¬¬ã§ãããæ£ç¢ºããšããèšèã®çŸåŸ³ã«ããã®ã§ã¯ãªãã
RPKI ããªã·ãŒãèããŠã¿ãããã»ãã¥ãªãã£è¡çã¯äŸ¡å€ããããããããèšŒææžã®å€æŽã¯ã«ãŒãã£ã³ã°ãèªååãå§ä»»ã¢ãã«ããªãŒã¹æ¯æŽã«åœ±é¿ãäžããããå€§èŠæš¡ãããã¯ãŒã¯ã«ãšã£ãŠå®¹æãªããªã·ãŒããã¬ã¬ã·ãŒã·ã¹ãã ãæã€è³æºä¿æè ãæåæŽæ°ã«äŸåãããªãŒã¹å©çšè ã«ãšã£ãŠã¯å°é£ãããããªãã
å€éšã³ã¹ãåæã¯ãRIPE NCC ããã¹ãŠã®åžå Žã®ç«å Žãæ¯èªããããšãèŠæ±ããªããããã¯ãæ¿çèšé²ãçµæžçãã¬ãŒããªããè¿°ã¹ãããšãèŠæ±ãããåžå Žã圢äœãããªã·ãŒã®æçãã圱é¿èŠæžã¯ã移転ã¿ã€ã ã©ã€ã³ãæµåæ§ããªãŒã¹ã€ã³ã»ã³ãã£ããå°èŠæš¡äºæ¥è è² æ ãã¬ã¬ã·ãŒè³æºã®ç¢ºå®æ§ãRIR éäºææ§ãRPKI ç¶æ ãéåŒã DNS éçšãã¬ãžã¹ããªã¯ãŒã¯ããŒãã蚎èšãªã¹ã¯ã宿œåŸæž¬å®ãžã®äºæ³ããã圱é¿ãç¹å®ãã¹ãã§ããã
ãã®ãããªåæã¯ RIPE NCC ããä¿è·ããã ãããã¬ãžã¹ããªãæ¿çæ¡æåã«ã³ã¹ããæç€ºçã«ããã°ãåŸã®çŽäºã宿œãæ£æçãšèŠãªããªã¹ã¯ãäœæžãããããªãã¡ãçµæžçè² æ ãç¹å®ãããã³ãã¥ããã£ããããè¡¡éããã«ãŒã«ãéå®ãããæž¬å®ã«ãã£ãŠä»®å®ãæ£ããã£ããã瀺ãããããšèšãããããã¯ãåã«ããã»ã¹ãå ¬éãããŠãããšèšããããããã匷åãªæ£åœæ§ã®äž»åŒµã§ããã
æ¿çã·ã¹ãã ã¯ãŸããæ©å¯æ§ãèš±ãå Žåã«ã¯ãæ©æŠã«é¢ããããå€ãã®éèšããŒã¿ãå ¬éãã¹ãã§ãããå®çŸããç§»è»¢ã¯æçšã ããåžå Žã¯é å»¶ãææžã«ãŒãã£ã³ã®åæ°ãæŸæ£ãããç³è«ãçºåãããå¶éãå¶è£é¢é£ã®ãããã¯ãRIR éã®ã¿ã€ã ã©ã€ã³ãRPKI ååäºè±¡ãäžæç䜿çšã®ãã¿ãŒã³ãçè§£ããå¿ èŠããããã¡ãŒãªã³ã°ãªã¹ãã¯ééãªãéžè©±ãè°è«ã§ãããéèšããŒã¿ãè°è«ãåŸããã
å€éšã³ã¹ãã®æž¬å®ããªããã°ãæ¿çã¡ãŒãªã³ã°ãªã¹ãã¯ãåŸã«ãªã£ãŠç§çã«ã³ã¹ãã衚é¢åããã«ãŒã«ãçã¿åºããããã¯æªãçµæžåŠã§ãããæªãã¬ããã³ã¹ã§ããã
æéãæ³šæåããããŠçµç¹ã®ç¯å²
äžèŠãããšãäŒè²»ã¯æ¿çã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠã§ã¯ãªããåäŒã¬ããã³ã¹ã®åé¡ã§ãããå®éã«ã¯ããããã¯åãæ³šæåã®åžå°æ§ãšçµç¹ã®ç¯å²ã®åé¡ã«ãã£ãŠçµã³ã€ããŠããã
RIPE NCC ã®2026 幎æéäœç³»ã¯ãLIR ã¢ã«ãŠã³ããããå¹Žé¡ 1,800 ãŠãŒããç¬ç«å²ãåœãŠããã³ ASN ã®æéãå®ããŠãããç»é²æãå«ãããŸããçŽæ¥ãµãŒãã¹å¥çŽãçµã¶ã¬ã¬ã·ãŒã€ã³ã¿ãŒãããè³æºä¿æè ã®è«æ±åŠçã«ã€ããŠã説æããŠãããæ£ç¢ºãªæ°åã¯å¹Žããšã«å€ãããäŒå¡ã¯åäŒããã»ã¹ãéããŠæéäœç³»ã«æç¥šãããããã§éèŠãªã®ã¯èšç®ã§ã¯ãªããéèŠãªã®ã¯ãæéé¢ä¿ããèªèããããµãŒãã¹ã®ç¶ç¶æ§ãæãä¿æè ããã°ãã°ç¶æããªããã°ãªããªãã¬ãžã¹ããªé¢ä¿ã«çµã³ã€ããŠããããšã§ããã
åå ã«ã¯ããèªäœã®ã³ã¹ãããããæéã ãå€§èŠæš¡äºæ¥è ã¯ãééçæéãšæ³šæåã®ã³ã¹ãã®äž¡æ¹ãæ¯æãããšãã§ãããäŒåã«ã¹ã¿ãããæŽŸé£ãããªã¹ãã賌èªããç·äŒã§æç¥šããæéäœç³»ã远跡ããããªã·ãŒã远跡ããRIPE NCC ã®ãã±ããã«å¯Ÿå¿ãããå°èŠæš¡äºæ¥è ã¯ééçæéãæ¯æããŠããå®è³ªçãªæ¿ç察å¿èœåãæ¬ ããããããªãããã®é察称æ§ã¯æ£åœæ§ã®åé¡ãçããåºå®è²»ã§æãå§è¿«ãããŠããäŒå¡ããããããæ£åœåããã«ãŒã«ã圢äœãèœåãæãäœããããããªãã
ãã㯠RIPE NCC ã«éã£ãããšã§ã¯ãªããããããæåŸæ Œå·®ã倧ãããå¶è£ãªã¹ã¯ã«ãããããçŽäºã®åœ±é¿ãåãããããã¯ãŒã¯ãé貚ã¹ãã¬ã¹ãå°èŠæš¡ ISPãç ç©¶ãããã¯ãŒã¯ãå€§èŠæš¡äºæ¥è ãã°ããŒãã«ãã©ãããã©ãŒã ãæ··åšããå°åã§ã¯ãããé¡èã§ãããåãæéãšåãæ¿çãªã¹ãè² æ ãããã®å°åå šäœã§åãããšãæå³ããããã§ã¯ãªãã
å¶åºŠäžã®ãã€ã³ãã¯åçŽã§ãããã¬ãžã¹ããªé¢ä¿ãçµæžçã«å¿ èŠãšãããå Žåãããã«ä»éããå¿ é ããã±ãŒãžã¯å³æ Œãªå¯©æ»ã«å€ãããäžæ žçãªè²¬åã¯ãç»é²ãããŒã¿ããŒã¹ã®å®å šæ§ãçªå·è³æºç®¡çã移転決æžãéåŒã DNSãRPKIãç¶ç¶æ§ã«çµã³ã€ããŠãããšãã«æã匷åã§ãããããåºç¯ãªäŒåããã¬ãŒãã³ã°ã枬å®ãã©ãããã©ãŒã ãã³ãã¥ããã£ã€ã³ãã©ã¯äŸ¡å€ãããã®ãããããªãããããããã³ãã¥ããã£ã®é埳çãªãŒã©ã®äžã«é ãããã¹ãã§ã¯ãªãã
æ¿çã¡ãŒãªã³ã°ãªã¹ãã¯ã鿥çã«ãã®ããã±ãŒãžã®å®çŸ©ãå©ãããã³ãã¥ããã£æŽ»åãèªæçã«æ£åœåãããã®ãšããŠæ±ãæåã¯ãåºç¯ãªçµç¹çç¯å²ã«å¯ŸããŠããå¯å®¹ãããããªããèª°ãæ¯æãã誰ãåå ããããåãæåã¯ãå°åž³ã®æ¬è³ªçæ©èœãšããªãã·ã§ãã«ãŸãã¯åºç¯ã«æ©æµããããããµãŒãã¹ãšã®éã®ããæç¢ºãªåé¢ãèŠæ±ãããããããªããæéäœç³»ã¯æ¿çãªã¹ãäžã§æžãããããã§ã¯ãªããããªã¹ãã®æåã¯ãæ©é¢ãäœãæ¬è³ªçãšèŠãªãããšããèãã圢äœãã
ãã®çµã³ã€ãã¯éæ¹åã«ãåããäŒå¡ããæ©é¢ãé«ã³ã¹ãã§ãæ¿ççµæãåžžé£ã®åå è ã«ãã£ãŠåœ¢äœãããŠãããšæããã°ãããã«é¢è±ãããããããªããé¢è±ã¯æ¿çãªã¹ãã®ä»£è¡šæ§ãããã«äœäžããããäœåå ã®åè¡¡ãçºå±ãããã¢ã¯ãã£ããªåžžé£ãæ¿çã圢äœããäžè¬äŒå¡ã¯æ¯æãåžåããäžæºã¯ã«ãŒã«ãæéãèŠçã«ãªããšãã«åããŠåŽåºãããæ©é¢ã¯æ²é»ãèŠãŠããããŠæããèŠãã
æãå¥å šãªåè¡¡ã¯ãæç€ºçãªã³ã¹ãé åã§ãããã©ã®ãµãŒãã¹ãå°åž³ã«äžå¯æ¬ ãïŒ ã©ããã³ãã¥ããã£ã€ã³ãã©ãïŒ ã©ããå šäŒå¡ã«å©çããããããïŒ ã©ããäž»ã«ã¢ã¯ãã£ããªåå è ã«å©çããããããïŒ ã©ããç°ãªãè³é調éãå¯èœãïŒ ã©ã®æ¿çææ¡ãäŒå¡ã®ã¯ãŒã¯ããŒããå¢ãããïŒ ã©ãã RIPE NCC ã®ã¯ãŒã¯ããŒããå¢ããããããã£ãŠæéå§åãé«ãããïŒ ã©ã®ã«ãŒã«ãå°èŠæš¡äºæ¥è ã«ããéãåºå®è²»ã課ããïŒ
ã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠã¯ã財æ¿çµæžåŠããåãé¢ããªããæç¶ãã¯æéãæ¶è²»ããã宿œã¯éãæ¶è²»ãããåžå°æ§ã¯äž¡æ¹ã®å©å®³ãå¢å€§ãããã
å°èŠæš¡äºæ¥è ã¯ã¹ãã¬ã¹ãã¹ãã§ãã
å°èŠæš¡äºæ¥è ã¯ãå ¬éããã»ã¹ãå®è³ªçãåã«åœ¢åŒçããé²ãã«ããã圌ãã¯æ¿çãæåãšããŠãããã³ã¹ããšããŠèªèããå¯èœæ§ãæãé«ããšã³ãã£ãã£ã§ããã圌ãã¯ã¬ãžã¹ããªãå¿ èŠãšããããæ¿çå°ä»»ã®ã¹ã¿ãããããªããããããªããéããã IPv4 容éããªãŒã¹ç©ºéãå°èŠæš¡ãªç§»è»¢ãã¹ãã³ãµãŒè³æºãæ é㪠RPKI ãµããŒãã«äŸåããŠãããããããªãããŠãŒã建ãŠã®æéãæ³çææžãå¶è£ãã£ã«ã¿ãªã³ã°ãéè¡æ©æŠãäŒååºåžã®ããã®ç§»åã倧ããªè² æ ãšãªãåžå Žã§äºæ¥ãå¶ãã§ãããããããªãã
RIPE å°åã¯çµæžçã«äžå質ã§ããã西欧ã®å€§èŠæš¡äºæ¥è ã«ãšã£ãŠäºçްãªã«ãŒã«ããäœæåŸãããã¯æ¿æ²»çã«ææãªç°å¢ã®å°èŠæš¡äºæ¥è ã«ãšã£ãŠã¯éè·ãšãªããããæ¿çã®åžžé£ãè§£éããã®ã« 1 æéãããèŠä»¶ããæ°èŠäŒå¡ã«ã¯æ°æ¥ããããããããªããå€§äŒæ¥ãåŒè·å£«ã«å§ããææžã«ãŒãã£ã³ããå°èŠæš¡ ISP ã®äž»ä»»ãšã³ãžãã¢ããããã¯ãŒã¯ç®¡çããéžããããããããªããã¢ã¯ãã£ããªåå è ãéãããŠãããšæããäŒåã®è°è«ããæ³šæåãå²ãäœè£ã®ãªãäºæ¥è ã«ã¯èŠããªããããããªãã
ãã®é察称æ§ã¯ãåžå°æ§æ¿çã«ãããŠæãéèŠã§ãããå°èŠæš¡äºæ¥è ã¯ãåã«ããªãŒããŒã«ãã倧ã㪠IPv4 å²ãæ¯ããèŠæ±ããããšã¯ã§ããªããè³Œå ¥ããªãŒã¹ãããã㯠CGNAT ã§ã¢ãã¬ã¹ãããããããå¿ èŠããããããããªããè³Œå ¥ã«ã¯è³æ¬ãšç§»è»¢ãžã®ä¿¡é Œãå¿ èŠã§ããããªãŒã¹ã«ã¯ãä¿æè ãçµè·¯èªå¯ãéåŒã DNSãè¿·æè¡çºèª¿æŽãæŽæ°ãžã®ä¿¡é Œãå¿ èŠã§ãããCGNAT ã¯ãã°è² è·ãã¢ããªã±ãŒã·ã§ã³åé¡ã顧客ã®äžæºãçã¿åºããããæ¿çã®æ©æŠãã¡ãã¥ãŒãå€ããã
移転ã«ãŒã«ãäžç¢ºãã§ããã°ãå°èŠæš¡äºæ¥è ã¯åžæãããããé·ããªãŒã¹ãããããããªãããªãŒã¹ã«é¢ããã¬ã€ãã©ã€ã³ã匱ããã°ããªã¹ã¯ã®é«ãæ¡ä»¶ãåãå ¥ãããããããªããRPKI ã®è²¬ä»»ãäžæç¢ºã§ããã°ããªãŒã¹æäŸè ãäžæµãããã€ãã«äŸåãããããããªããéåŒã DNS ã®å¶åŸ¡ãé ããã°ããµãŒãã¹ã®è©å€ãæãªããããããããªããæ¿çãªã¹ãããããã®åé¡ãèãåããªããã°ãçµæãšããŠã®ã«ãŒã«ã¯æè¡çã«äžç«ã«èŠããªãããå€§èŠæš¡ãªä»²ä»è ãžã®äŸåãé«ãããããããªãã
å°èŠæš¡äºæ¥è ã¯ãŸããå ¬ã®å Žã§ã®çºèšã«é¢ããå¶çŽã«çŽé¢ãããå€§äŒæ¥ã¯ãæ¿ççãªç«å Žã«äŒŽã颚è©ãªã¹ã¯ãåžåã§ãããå°èŠæš¡äºæ¥è ã¯ãå ¬ã®ã³ã¡ã³ããäºæ¥èšç»ãã¢ãã¬ã¹éèŠãå¶è£ãªã¹ã¯ã財åäžã®åŒ±ãããªãŒã¹äŸåããµãã©ã€ã€ãŒãšã®çŽäºãé²åãããããšãæãããããããªãããããããšæ¿çèšé²ã¯ããŸãã«æãé©åãªã¬ãžã¹ããªãå¿ èŠãšãã人ã ãéå°è©äŸ¡ããããšã«ãªãã
èšèšäžã®é©åãªå¯Ÿå¿ã¯ãç¹å¥ãªåŒè·ã§ã¯ãªããããã¯åºå®è²»åæã§ãããæ¿çææ¡ã¯ãã³ã¹ããåºå®çãå€åçããåãã¹ãã§ãããåºå®ã®ææžè² æ ãåºå®ã®äŒåè² æ ãåºå®ã®æè¡èŠä»¶ãåºå®ã®æ³çäžç¢ºå®æ§ã¯ãäžè¬ã«éé²çã§ããããããã¯ãã«ãŒã«ãçããé©çšãããŠããå°èŠæš¡äŒæ¥ã«ããéãã®ããããã圢åŒçãªã«ãŒã«ã®å¹³çã¯ãè² æ ã®å¹³çãæå³ããªãã
RIPE NCC ãš RIPE ã³ãã¥ããã£ã¯ãå°èŠæš¡äºæ¥è ãžã®åœ±é¿ããã€ã¹ããŒã¯ã¹ææ¡ã®æšæºã«ããŽãªãŒãšããããšã§ãæ£åœæ§ãåäžããããããã®ã«ãŒã«ã¯ã5 人㮠ISP ã«ã©ã圱é¿ãããïŒ å°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã«ïŒ ã¹ãã³ãµãŒå¯Ÿè±¡ã®ãšã³ããŠãŒã¶ã«ïŒ ãªãŒã¹å©çšè ã«ïŒ æ¿çå°ä»»ã¹ã¿ããã®ããªãã¬ã¬ã·ãŒè³æºä¿æè ã«ïŒ å¶è£å¯Ÿè±¡åœãéè¡å¶çŽã®ããå°åã®ãããã¯ãŒã¯ã«ïŒ çããäžæã§ããã°ãæ¿çèšé²ã¯ããè¿°ã¹ãã¹ãã§ããã
ã¬ãžã¹ããªã®é·æçãªæ£åœæ§ã¯ãå€§èŠæš¡äºæ¥è ããããä¹ãããªãèœåã«ãã£ãŠå€æãããªãã圌ãã¯ã»ãšãã©ã©ããªãã®ã§ãä¹ãããªãããããã¯ãæç¶ãäžã®ç¹æš©ãªãã«äºæ¥è ã«ãšã£ãŠå ¬åŒã®éãäŸç¶ãšããŠå©çšå¯èœãã©ããã«ãã£ãŠå€æãããã ããã
å°åž³ãšã²ãŒãããŒããŒã®å¢çç·ã¯æ¿çã貫ããŠãã
RIPE NCC ã¬ããã³ã¹ã«ãããæãæçšãªåºå¥ã¯ãå ¬ç察ç§çãäŒå¡å¯Ÿã³ãã¥ããã£ãæè¡çå¯Ÿåæ¥çã§ã¯ãªããããã¯å°åž³å¯Ÿã²ãŒãããŒããŒã§ããã
å°åž³ã¯äžææ§ãç¶æããèªèãããä¿æãèšé²ããé£çµ¡å ãšç»é²ããŒã¿ãå ¬éããèªå¯ããã倿ŽããµããŒãããéåŒã DNS ãæäŸããRPKI ãæå¹ã«ããåœé ããã移転ãé²ããçŽäºãéé¢ããåžå Žãæ©èœããã®ã«ååãªä¿¡é Œã§ããæ å ±ãæäŸãããã²ãŒãããŒããŒã¯ãå°åž³ãäœãåºãäŸåæ§ãå©çšããŠãããžãã¹ã¢ãã«ã倿ããæ£åœãªç§»åãé ãããçµç¹çç¯å²ãæ¡å€§ãããããã¯å€ãã³ãã¥ããã£èŠç¯ãåžå°è³æ¬ã«å¯Ÿããåºç¯ãªè£éæš©ã«è»¢æããã
åãçµç¹ãæã«äž¡æ¹ãè¡ããªããã°ãªããªãããšããããã¬ãžã¹ããªã¯ãåœé 移転ãèåœã®æš©é䞻匵ãå±éºãªã»ã©ã«æä»£é ãã®ã»ãã¥ãªãã£ç¶æ ãæ³ççŠæ¢äºé ããã§ãã¯ããªããã°ãªããªããåé¡ã¯ããã®ç®¡çãçã蚌æ ã«åºã¥ãããŸãŸã§ãããããããšãçµç¹ã®éåžžã®å§¿å¢ã«ãªããã§ããã
æ¿çã¯ããã®ç·ãåŒãããå Žæã§ããã移転ã«ãŒã«ã¯ãæš©éãæ€èšŒãè©æ¬ºã鲿¢ãããªãã°ãå°åž³ä¿è·ãšãªããããã¬ãžã¹ããªãä¿è·ããããã«å¿ èŠãªèšŒæ ãè¶ ããŠåžå Žè¡åãå¶åŸ¡ãããªãã°ãããã¯ã²ãŒãããŒãã³ã°ãšãªããRPKI ã«ãŒã«ã¯ãä¿¡é Œãã§ãŒã³ãä¿åãäºåãäžãããªãã°ãå°åž³ä¿è·ãšãªããããèªèšŒãç¡é¢ä¿ã®çŽäºã«å¯Ÿããã¬ãã¬ããžãšãªããªãã°ãã²ãŒãããŒãã³ã°ãšãªããéåŒã DNS ã«ãŒã«ã¯ãæ£ç¢ºãªå§ä»»ãç¶æãããªãã°ãå°åž³ä¿è·ãšãªããããéçšäžã®å¶åŸ¡ã忥çåãæ±ºãã«å§åããããããã«äœ¿ããããªãã°ãã²ãŒãããŒãã³ã°ãšãªããæéããªã·ãŒã¯å°åž³ã«è³éãæäŸã§ãããå¿ é ããã±ãŒãžãã³ã¹ãèŠåŸãªãã«æ¡å€§ãããªãã°ãããã¯ã²ãŒãããŒããŒã®éè¡æãšãªãã
ã¡ãŒãªã³ã°ãªã¹ãã®æç¶ãã¯ããã®ç·ãæç¢ºã«ããããšããææ§ã«ããããšãã§ãããææ¡ããã«ãŒã«ã®ã©ã®éšåãå°åž³ãä¿è·ããã©ã®éšåãåžå Žè¡åãå¶éããã®ãã瀺ããšããç·ã¯æç¢ºã«ãªãããã¹ãŠã管çãå®å®æ§ãã³ãã¥ããã£ãã»ãã¥ãªãã£ãšããŠèšè¿°ããããšããç·ã¯ææ§ã«ãªãã
ã ãããããå ¬åŒã®èšèªã¯çµæžåŠçãªç¿»èš³ãå¿ èŠãšããããããã ã¢ãããã¯ãè°è«ãã©ã®ããã«é²ãã¹ãããè¿°ã¹ããçµæãšããŠã®ã«ãŒã«ãæ¯äŸçãã©ããã¯è¿°ã¹ãªãããã³ã³ã»ã³ãµã¹ãã¯ãã¢ã¯ãã£ããªåå è ã劚ãã«ãªãç°è«ãç¶æããªãã£ãããšãè¿°ã¹ããäžåšã®åœäºè ãåæãããšã¯è¿°ã¹ãªããã管çãã¯ãè³æºãéèŠã§ããããšãè¿°ã¹ããæš©éã®éçãå®çŸ©ããªãããæè¡çå ç¢æ§ãã¯ãã«ãŒã«ãæè¡çã«çã«ããªã£ãŠãããããããªãããšãè¿°ã¹ããåé ã³ã¹ãã解決ããªãã
å°åž³å¯Ÿã²ãŒãããŒããŒã®åºå¥ã¯ãRIPE NCC ã«æµå¯Ÿçã§ã¯ãªãããã㯠RIPE NCC ã®æ£åœæ§ãä¿è·ããææ®µã§ãããæš©éãçããéæã§ã枬å®å¯èœãªã¬ãžã¹ããªã¯ãããŒãšèšããšãã§ããä¿¡é Œã«å€ããã ãããæš©éãåºç¯ã§ãä¿®èŸçã§ãè©äŸ¡ãé£ããã¬ãžã¹ããªã¯ãã»ãšãã©ã®å Žåã€ãšã¹ãšèšããšãã§ããããªã¹ã¯å±€ãšããŠæ±ãããã ããã
ãããã£ãŠãæ¿çãªã¹ãã¯ãç¯å²ã®èŠåŸãæç€ºãããå Žãšãªãã¹ãã§ããããã€ã¹ããŒã¯ã¹ã®ææ¡ã¯ãã¹ãŠãåçŽãªåãã«çããã¹ãã§ããããã®ã«ãŒã«ããªããã°ãå°åž³ã®ã©ã®ãããªæ£ç¢ºãªæ¬ é¥ãçããã®ãïŒ ãã®çãã匱ããã°ããã®ã«ãŒã«ã¯ã¬ãžã¹ããªã®å¿ èŠæ§ã§ã¯ãªããããããå¶åºŠçãªéžå¥œã§ããã
ç°è°ç³ãç«ãŠã¯æç¶ãã®éçã瀺ã
RIPE ã®æ¿çããã»ã¹ã«ã¯ç°è°ç³ãç«ãŠã®éãå«ãŸããŠãããããã¯éèŠã§ãããããã¯ãè°é·ã®æ±ºå®ãæç¶ãäžã®çµè«ãäºããããããšãèªããŠãããããããç°è°ç³ãç«ãŠã®ååšã¯ãŸããã·ã¹ãã ã®éçãé²ãã«ããã
ç°è°ç³ãç«ãŠããã»ã¹ã¯ãææžåãããæç¶ããå®ãããããè°é·ãæç¶ãäžã®èª€ããç¯ããããã³ã³ã»ã³ãµã¹ã³ãŒã«ãé©åã«è¡ããããããããã¯ã¯ãŒãã³ã°ã°ã«ãŒããææ¡ãèŠåéãã«æ±ã£ãããåãããšãã§ãããäžåšã®å°èŠæš¡äºæ¥è ãçµæžçã«éå°ä»£è¡šãããŠãããã移転å¶éããªãŒã¹äŸåãé«ããããRPKI ã«ãŒã«ãå°èŠæš¡ä¿æè ã«åºå®è² æ ãçã¿åºãããããããã¯ããªã·ãŒã®åžå Žã³ã¹ããæè¡çãã¬ãŒãã³ã°ã«ãã£ãŠé ãããŠãããããšãã£ãåãã«çããããšã¯ã¯ããã«äžåŸæã§ããã
ããã¯ç°è°ç³ãç«ãŠã®æ¬ é¥ã§ã¯ãªããããã¯ã«ããŽãªãŒã®éçã§ãããç°è°ç³ãç«ãŠã¯äžè¬ã«ãæç¶ãã®å ¬å¹³æ§ãä¿è·ããããã«èšèšãããŠãããç¬ç«ããçµæžç審æ»ãè¡ãããã§ã¯ãªããå¯äžã®æ£åŒãªã»ãŒããã£ããããæç¶ã審æ»ã§ãããªãã°ãæ¿çããã»ã¹èªäœããã¯ããŒãžã³ã°åã«çµæžåæãå«ãŸãã°ãªããªãããããªããã°ãããããªã·ãŒã¯æç¶ãäžæå¹ã§ãããªããçµæžçã«éå°æ€èšããããŸãŸãšãªãããã®æ¬ é¥ãäºãèªç¶ãªå Žãååšããªãããšã«ãªãã
è¿·æè¡çºçšã¡ãŒã«ããã¯ã¹ã®æ€èšŒã«é¢ãã 2019-04 ã®ç°è°ç³ãç«ãŠã¯ãRIPE ã®ããã»ã¹ãäºããä¿®æ£ããããããšãæãåºãããæçšãªäºäŸã§ãããåé¡ã¯ç§»è»¢åžå Žã®ã«ãŒã«ã§ã¯ãªãã£ãããæç¶ãäžã®åé¡ãéèŠã§ãããç°è°ç³ãç«ãŠãæ¿çã®è»éã«åœ±é¿ãäžãããããšã瀺ãããããã¯å¶åºŠã匷åãããããã¯åžå°æ§ã®ããåºç¯ãªåé¡ã解決ããªããããã»ã¹ã¯å€éšã³ã¹ããæž¬å®ããªããŠããç°è°ç³ãç«ãŠå¯èœã§ã¯ããããã
ããæ·±ãåé¡ã¯ãæ¯æžåŸã®æ¿çããã°ãã°æ¡æ£çãã€é å»¶çãªæå®³ãçã¿åºãããšã§ããã移転å¶éã¯ç¹å®ã®åœäºè ã«å³åº§ã«å®³ãåãŒããªããããããªããããã¯ãã£ãããšäŸ¡æ Œãå€ãããããããªãããªãŒã¹ã«é¢ããææ§ãã¯ãç°è°ç³ãç«ãŠå¯èœãªåäžã®æå®³ãçãŸãªããããããªããããã¯åžå Žå šäœã®å¥çŽãªã¹ã¯ãé«ãããããããªããRPKI è² æ ã¯ãäºæ¥è ã«ããèªååã倱æããåŸã«ãªã£ãŠåããŠå¯èŠåããããããããªããå°èŠæš¡äºæ¥è ãžã®è² æ ã¯ãæ£åŒãªç°è°ã§ã¯ãªããäžåå ãšããŠçŸãããããããªãããã®ãããªæå®³ã«å¯ŸããŠãç°è°ç³ãç«ãŠã¯åŒ±ãããŒã«ã§ããããªããªãã³ã¹ãã¯åäžã®æç¶ãäžã®æ¬ é¥ãšããŠçŸããªãããã ã
ã ãããããæ¿çèŠåŸã¯äžæµã§ãããããã°ãªããªããã©ã¹ãã³ãŒã«ã®åã«ãåžå°è³æºã移転ãäžæç䜿çšãRPKIãéåŒã DNSãç£æ»ã驿 Œæ§ãã¬ã¬ã·ãŒã¹ããŒã¿ã¹ã«åœ±é¿ããæ¿çã«ã€ããŠã¯ãåžå Žåœ±é¿åæãèšé²ã«å«ããã¹ãã§ãããè°é·ã¯ãã³ã³ã»ã³ãµã¹ãååšãããã©ããã ãã§ãªããã©ã®ãããªçµæžçç°è«ãæ®ã£ãŠããããªãããããçµè«ãå€ãããå€ããªãããèŠçŽãã¹ãã§ãããRIPE NCC ã®åœ±é¿åæã¯ã宿œã³ã¹ããšå€éšã³ã¹ããåºå¥ãã¹ãã§ããã宿œåŸã®ã¬ãã¥ãŒã¯ãã«ãŒã«ãäºæ³éãã«æ©èœãããã©ãããæ€èšŒãã¹ãã§ããã
ç°è°ç³ãç«ãŠã¯å¿ èŠã§ãããããã¯ååã§ã¯ãªããåžå°æ§æä»£ã®ã¬ãžã¹ããªã¯ãäž»èŠãªã³ã¹ããäžåšã®åœäºè éã«åæ£ãããåžå Žã®äžç¢ºå®æ§ã§ãããããããªãå Žåã«ãäºåŸçãªæç¶ãä¿®æ£ã«äŸåããããšã¯ã§ããªãã
ããè¯ãã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠ
ããè¯ã RIPE ã¡ãŒãªã³ã°ãªã¹ãã®çµæžåŠã¯ãæ¢åã®æåã廿¢ãããã®ã§ã¯ãªããããã¯ãæåãçŸåšæŽ»åããŠããç°å¢ã«ã€ããŠãããæ£çŽãªãã®ã«ããã ããã
ãã€ã¹ããŒã¯ã¹ãªææ¡ã¯ãçµæžå¹æã«é¢ããã»ã¯ã·ã§ã³ãå«ãã¹ãã§ãããããã¯ãIPv4 移転ãåŸ æ©ãªã¹ãã«ãŒã«ãäžæç䜿çšãRPKIãéåŒã DNSãã¬ãžã¹ããªãµãŒãã¹é©æ Œæ§ãã¬ã¬ã·ãŒè³æºã®åãæ±ããç£æ»ãäŒå¡çŸ©åã«åœ±é¿ããææ¡ã«å¯ŸããŠèŠæ±ãããã¹ãã§ããããã®ã»ã¯ã·ã§ã³ã§ã¯ã圱é¿ãåããã¯ã©ã¹ãäºæ³ãããåžå Žè¡åãå°èŠæš¡äºæ¥è ã®è² æ ã宿œè² æ ãä»£æ¿æ¡ã枬å®å¯èœãªåææ¡ä»¶ãç¹å®ãã¹ãã§ããã
RIPE NCC ã®åœ±é¿åæã¯ãå€éšãªã¹ã¯ã«é¢ããã»ã¯ã·ã§ã³ãå«ãã¹ãã§ãããã¬ãžã¹ããªãåžå Žäºæž¬è ã«ãªãå¿ èŠã¯ãªãããæãããªåœ±é¿ãããªãã¡ç§»è»¢é å»¶ãææžè² æ ãäºææ§åé¡ããªãŒã¹ç©ºéãžã®åœ±é¿ãçµè·¯ã»ãã¥ãªãã£éçšãéåŒã DNS 責任ãå¶è£ãšã®çžäºäœçšããµããŒãè² è·ã蚎èšãªã¹ã¯ãç¹å®ããããšã¯ã§ãããRIPE NCC ã蚌æ ãæ¬ ããŠããå Žåã«ã¯ããããæç¢ºã«è¿°ã¹ãã¹ãã§ããã
ã¯ãŒãã³ã°ã°ã«ãŒãè°é·ã¯ãã³ã³ã»ã³ãµã¹å ±åãããçµæžçã«èªã¿ããããã¹ãã§ãããå ±åæžã¯ãåã«ç°è«ãåŠçããããšè¿°ã¹ãã¹ãã§ã¯ãªããæªè§£æ±ºã®éèŠãªç°è«ããæè¡çãæ³çãéçšçãçµæžçãåããç¹å®ãããªãããããé²å±ã劚ããã«ã¯äžååã ã£ãã®ãã瀺ãã¹ãã§ãããããã¯ã³ã³ã»ã³ãµã¹ãç¶æãã€ã€ãèšé²ãç°è«ãå¹³åŠåããã®ãé²ãã
åžå Žã圢äœãæ¿çã®ã©ã¹ãã³ãŒã«éç¥ã¯ãå¹³æãªéçšçèšèªã§æžãããã¹ãã§ãããå°èŠæš¡äºæ¥è ããäœãå€ããã®ããã©ã®ãããªè¡åãèŠæ±ããããããã©ã®ååŒã圱é¿ãåããããã©ã®ãããªãµããŒãçµè·¯ãååšããããçè§£ã§ããããã«ãã¹ãã§ãããç®çã¯ãã£ã³ããŒã³ã匵ãããšã§ã¯ãªããã€ã³ãµã€ããŒã®æ å ±åªäœãæžããããšã§ããã
宿œåŸã®ã¬ãã¥ãŒã¯ãåžå°æ§æä»£ã®æ¿çã«ãšã£ãŠåžžæ ãšãªãã¹ãã§ããã宿œãã 6 ã¶æã12 ã¶æã24 ã¶æåŸã«ãRIPE NCC ãšé¢ä¿ã¯ãŒãã³ã°ã°ã«ãŒãã¯ãå©çšå¯èœãªèšŒæ ãæ€èšãã¹ãã§ããããµããŒããã±ããã移転ã¿ã€ã ã©ã€ã³ãæŸæ£ãããç³è«ãRPKI ãéåŒã DNS ã®ã€ã³ã·ãã³ããææžã«ãŒãã£ã³ã®åæ°ãå°èŠæš¡äºæ¥è ããå ±åãããè² æ ãäžæç䜿çšã®åœ±é¿ãäºæãã¬ã€ã³ã»ã³ãã£ããªã©ã§ãããèªãã®äºæž¬ã決ããŠæ€èšŒããªãæ¿çãªã¹ãã¯ãåŠç¿ããçµç¹ã§ã¯ãªãã
ãªãŒã¹ãšéçšå§ä»»ã¯ãéåžžã®åžå Žã®äºå®ãšããŠæ±ãããã¹ãã§ãããæ¿çã¯ãèªèãããä¿æãšéçšç䜿çšãåºå¥ããéçšç䜿çšãšåæ¥ç責任ãåºå¥ãã¹ãã§ãããããã¯ãåãªãŒã¹å¥çŽã忥å¥çŽãšããŠã¬ãžã¹ããªã«ç»é²ãããããšãªããã«ãŒãã£ã³ã°ãRPKIãéåŒã DNSãè¿·æè¡çºã®è²¬ä»»ã®å¯èŠæ§ãæ¹åãã¹ãã§ãããç®æšã¯ãäžæç䜿çšãååšããªããµããããããšã§ã¯ãªãã圱ã®éšåããããªã¹ã¯ã®å°ãªããã®ã«ããããšã§ããã
ããã»ã¹ã¯ãŸãããã€æ¿çãå°åž³ã®ä¿è·ã§ããããã€ãããåžå Žã®å¶åŸ¡ã§ãããã瀺ãã¹ãã§ãããããçšåºŠã®åžå Žå¶åŸ¡ã¯æ£åœåãããããã©ãã«ãéèŠã§ããã®ã¯ãããã管çã®èšèªã«ãã¹ãŠã®ä»äºããããã®ãé²ãããã ãã¬ãžã¹ããªãè³æ¬ç§»åãå¶éãããªãã°ããªããã®å¶éãå¿ èŠãã€æ¯äŸçã§ããããè¿°ã¹ãã¹ãã§ããã
ãããã®æ¹é©ã¯æ¥é²çã§ã¯ãªãããããã¯ãé©åãªæž¬å®åäœã䜿çšããããšã®å¶åºŠçãªç䟡ç©ã§ãããã¡ãŒãªã³ã°ãªã¹ãã®ã¹ã¬ããã¯ãã¢ã¯ãã£ããªçºèšè ã®åå ãæž¬å®ãããããã¯èªåçã«çµæžçé²åºã枬å®ããããã§ã¯ãªãããã®ããšãç¥ãæ¿çããã»ã¹ã¯ãããè¯ãã«ãŒã«ãçã¿åºãã ããã
æ¿çã¡ãŒãªã³ã°ãªã¹ãçµæžåŠã®ç£èŠãã€ã³ã
第äžã®ç£èŠãã€ã³ãã¯ã移転é¢é£ã®ææ¡ã«æµåæ§åæãå«ãŸããŠãããã©ããã§ãããæ¿çã IPv4 è³æºã®ç§»åã«åœ±é¿ãããªãã°ãèšé²ã¯ã¿ã€ã ã©ã€ã³ãååŒãªã¹ã¯ãããã¯ã€ã³å¹æãRIR éã®ç§»åæ§ãå°èŠæš¡è³Œå ¥è ã®ã¢ã¯ã»ã¹ããªãŒã¹ãžã®ä»£æ¿ã«ã€ããŠè«ããã¹ãã§ããããããã®èšèããªããã°ããªã¹ãã¯ãåžå°æ§æä»£ã®åžå Žã統治ããªãããããŸã å²ãæ¯ãæä»£ã®èšèªã話ããŠããã
第äºã®ç£èŠãã€ã³ãã¯ãRIPE ããªãŒã¹ãšäžæç䜿çšãã©ã®ããã«æ±ããã§ãããæçããããã»ã¹ã¯ãé埳åã«ãã£ãŠåžå Žãæ¶ãå»ãããšã¯ããªãã ãããããã¯ãã«ãŒãã£ã³ã°ãRPKIãéåŒã DNSãè¿·æè¡çºå¯Ÿå¿ããªãŒã¹çµäºæã®ã¯ãªãŒã³ã¢ããã®ããã«ãã©ã®ãããªéçšäºå®ãå¯èŠåãããå¿ èŠãããããåãã忥æ¡ä»¶ã¯ç§çãªãŸãŸã«ããŠããããããªã¹ãããªãŒã¹ãäž»ã«éé¿ãšããŠæ±ãã°ãæ£åœãªäœ¿çšã¯ããèŠãã«ãããªãããªãŒã¹ãç¡å®³ãšããŠæ±ãã°ãä¹±çšãšè²¬ä»»ãªã¹ã¯ãå¢å€§ãããçç£çãªäžåºžã¯ãéçšçãªæç¢ºãã§ããã
第äžã®ç£èŠãã€ã³ãã¯ãå°èŠæš¡äºæ¥è ã«é¢ãã蚌æ ã§ããããã€ã¹ããŒã¯ã¹ãªæ¿çã®ããããã«ã€ããŠãèšé²ã®äžã§å°èŠæš¡äºæ¥è ãæ¢ããã¹ããŒã¬ã³ãšããŠã§ã¯ãªããã³ã¹ãèšç®ãšããŠãã«ãŒã«ã¯ã©ãã ãã®æéãæžé¡äœæ¥ãæ³çç¥èãè±èªåãžã®ä¿¡é Œãèªååãæ¿çèšæ¶ãèŠæ±ãããïŒ åºå®è²»ãå¢ãããïŒ å€§èŠæš¡ãªä»²ä»æ¥è ãããé åçã«ãããïŒ ã¬ãžã¹ããªãšã®çŽæ¥çãªé¢ä¿ãããåšå§çã«ãããïŒ çããè°è«ãããŠããªããã°ããã®ããã»ã¹ã¯èªãã®éé²ç广ãéå°è©äŸ¡ããŠããã
第åã®ç£èŠãã€ã³ãã¯ãRPKI ã®ã¬ããã³ã¹ã§ãããå§ä»» CA ããªã·ãŒã®å®æœã¯ãã¡ãŒãªã³ã°ãªã¹ãã®ã³ã³ã»ã³ãµã¹ãã»ãã¥ãªãã£ç¶æ ãžã®ä»å ¥ãèªå¯ãããããšã瀺ããŠãããå°æ¥ã® RPKI ããªã·ãŒã¯ãäºåãå埩çµè·¯ãæ éææšãäŸåå¹æãæ¯äŸæ§ã«ãã£ãŠå€æãããã¹ãã§ããããããã¯ãŒã¯ãèµ·ç¹æ€èšŒã«äŸåããã°ããã»ã©ããã®ã¬ã€ã€ã«ãããæ¿çãªã¹ãã®éžæã¯ã€ã³ãã©èŠå¶ã®æ§çžã垯ã³ãã ããã
第äºã®ç£èŠãã€ã³ãã¯ãéåŒã DNS ãšããŒã¿ããŒã¹ç®¡çã§ããã管ççã«èŠãã倿Žããè©å€ãé ä¿¡æ§ããã©ãã«ã·ã¥ãŒãã£ã³ã°ã顧客ã®ä¿¡é Œã«åœ±é¿ããããæ¿çè°è«ãèšé²ã®æ£ç¢ºããšããžãã¹ã¢ãã«äžã®å§åãåºå¥ããŠãããããŸãæ£åŒãªä¿æè ã§ã¯ãªãéçšçå©çšè ãèæ ®ãããŠããããç£èŠããã
第å ã®ç£èŠãã€ã³ãã¯ãæéè°è«ãšæ¿çåå ã®é¢ä¿ã§ãããäŒå¡ãã矩åçæéãå°åž³ã®æ¬è³ªçæ©èœã«è³éãæäŸããŠããã®ãããããšãåºç¯ãªçµç¹çéå¿ã«è³éãæäŸããŠããã®ãããŸããŸãåãããã«ãªãã°ãæ¿çãªã¹ãã®æ£åœæ§ã¯è²¡æ¿æ¿æ²»ã«å·»ã蟌ãŸããã ãããç©æ¥µçãªåå ãæãã¬ãžã¹ããªã¯ãäŒå¡ã«æ±ããæéãšééãå°åž³ã®äŸ¡å€ã«èŠåã£ãŠããããšã瀺ããã°ãªããªãã
第äžã®ç£èŠãã€ã³ãã¯ãã³ã³ã»ã³ãµã¹ã®èšèªã§ãããè°é·ãã¹ã¿ãããåå è ããã³ãã¥ããã£ãæ¿çãæ¯æããŠããããšèšããšããèªè ã¯ãã©ã®ã³ãã¥ããã£ãçŸããã®ããã©ã®éå±€ãäžåšã ã£ãã®ããã©ã®ãããªçµæžçç°è«ãæ®ã£ãŠããã®ããèšé²ã«ããŒã¿ãããã®ããããšãåã«èä¹ åãããã ããªã®ããåãã¹ãã§ãããã³ã³ã»ã³ãµã¹ã¯æçšãªèšŒæ ã§ãããããã¯çœçŽå§ä»»ç¶ã§ã¯ãªãã
ç¬¬å «ã®ç£èŠãã€ã³ãã¯ã宿œåŸã®ã¬ãã¥ãŒã§ãããæçã®æã匷åãªå åã¯ãäž»èŠãªæ¿çãææ¡è ã®æåŸ éãã«æ©èœãããã©ãããäœç³»çã«æž¬å®ããããšã§ããããå¶éã¯ä¹±çšãæžãããã®ãããããšãåã«ç§»è»¢ãé ãããã®ãïŒ RPKI ã«ãŒã«ã¯ãäžåè¡¡ãªåæ¢ãªãã«ä¿¡é Œæ§ãåäžããããïŒ é£çµ¡å ããŒã¿ã®ã«ãŒã«ã¯ãã¢ã¯ã»ã¹æ§ãæ¹åãããããããšãèšé²æŽæ°ãžã®ææãé«ãããïŒ åŸ æ©ãªã¹ãã«ãŒã«ã¯å°èŠæš¡äºæ¥è ãå©ãããããããšãæ°ããªã²ãŒã ãçã¿åºãããïŒ çµæãæž¬å®ããããšãæåŠããæ¿çæåã¯ãã¢ãŒã«ã€ãã«éå°ãªæš©åšãè² ãããããšã«ãªãã
第ä¹ã®ç£èŠãã€ã³ãã¯ãRIPE NCC ãåé¿çãããå®äŸ¡ãªå°åž³ãç¶æã§ãããã©ããã§ããã移転ãèªèšŒãéåŒã DNSãã¬ãžã¹ããªæŽæ°ã®å ¬åŒçµè·¯ãäºæž¬å¯èœã§ããã°ãåžå Žåå è ã¯ããã䜿ãã ãããããããäžæçãé å»¶ããããã¯æ¿æ²»çã«ãã¬ãŒãã³ã°ãããŠããã°ãåžå Žã¯ãªãŒã¹æ§é ã仲ä»è ãéå ¬åŒãªå§ä»»ããªã¹ã¯ãã£ã¹ã«ãŠã³ãã«ãã£ãŠãããè¿åããã ãããåé¿çã¯ãå ¬åŒçµè·¯ã«å¯Ÿããåžå Žã®æç¥šã§ããã
æåŸã®ç£èŠãã€ã³ãã¯ãçµç¹ã®è¬èãã§ãããRIPE ã®ã¡ãŒãªã³ã°ãªã¹ãã¯ãéãããŠãããã¢ãŒã«ã€ããããæè¡çã«çé¢ç®ã§ããããã«äŸ¡å€ãããããããã¯ããã®æ§ãããªåœ¢åŒããåžå°ãªçç£è³æ¬ã«å¯Ÿããåºç¯ãªå¶åŸ¡ãæ£åœåããããã«äœ¿ããããšãã«å±éºã«ãªããRIPE NCC ã«ãšã£ãŠã®åé¡ã¯ãæ¿çããã»ã¹ãéãããŠãããã©ããã§ã¯ãªãããã®ããã»ã¹ããæ³šæåã®äŸ¡æ Œã广çãªåå ã®åžå°æ§ãäŒå¡ã®å£°ãšåœ±é¿ãåããçµæžã®åæãšã®éãããããŠåã«æç¶ãçã«èŠããã«ãŒã«ãããããè³æ¬äžã®åž°çµãçè§£ããŠãããã©ããã§ããã
RIPE NCC ã¯ããã壮倧ã«èŠããæ¿çã·ã¹ãã ãå¿ èŠãšããŠããªããããçããããæž¬å®ãããã³ã¹ãã«é¢ããŠããæç€ºçãªãã®ãå¿ èŠãšããŠãããIPv4 æœ€æ²¢ã®æä»£ã«ã¯ãã¡ãŒãªã³ã°ãªã¹ãã¯ãã£ãšããããæè¡çã³ã¢ã³ãºãšããŠæ±ãããšãã§ãããIPv4 åžå°ã®æä»£ã«ã¯ãããã¯ãè³ç£é¡äŒŒã®è³æºãçµè·¯ã»ãã¥ãªãã£ç¶æ ãåžå Žã®ä¿¡é Œã«åœ±é¿ãäžããã«ãŒã«ã®ããã®å¶åºŠççç£ãã§ãŒã³ã§ãããRIPE ã¢ãã«ã®å°æ¥ã®æ£åœæ§ã¯ããã®çç£ãã§ãŒã³ãèŠåŸããå°åž³ããŒã«ã§ããç¶ãããããããã¯æ³šæåã®åžå°æ§ãã²ãŒãããŒããŒæš©åã«å€ããæ§ãããªææ®µãšãªããã©ããã«ããã£ãŠããã

