æŠèŠ
- ãã®èšäºã®èª¬æ:RIPE NCC ããæ¬§å·ã»äžæ±å°åã«ãããã¬ãžã¹ããªã¬ããã³ã¹ãšå¶åºŠçµæžåŠã®åé¡ãšããŠãå°èŠæš¡äºæ¥è ã®äŸåã®èгç¹ããæ€èšŒãããŠããŸãã
- äž»ãªããŒã:ãããã¯ãŒã¯ãªãœãŒã¹ã®èšŒæ ; ã¬ãžã¹ããªã¬ããã³ã¹; å¶åºŠã®æ£åœæ§
- èæ¯:ã¬ããã³ã¹ / èª¿æ» / 欧å·ã»äžæ±
å°èŠæš¡äºæ¥è ã®äŸåã¯ããã°ãã°å ¬æ£æ§ã®åé¡ãšããŠèªãããŸããããã¯çããã衚çŸã§ããIPv4 æ¯æžåŸã®çµæžã«ãããŠãããã¯ãã©ã³ã¹ã·ãŒããéè»¢è³æ¬ãç¶ç¶æ§ã®åé¡ã§ãã倧æäºæ¥è ã¯ãã¬ãžã¹ããªã®æŽæ°é å»¶ãåžåãã移転æžé¡ã®æºåã«é¡§ååŒè·å£«ãéããã¢ãã¬ã¹äºåãç¶æããããªã·ãŒäŒè°ã«ã¹ã¿ãããæŽŸé£ããæ¯æãã®æ©æŠãåé¿ã§ããŸããå°èŠæš¡ãªã¢ã¯ã»ã¹ãããã€ããå°åãã¹ãã£ã³ã°äºæ¥è ããŸãã¯æŽå²çãªã¬ã¬ã·ãŒãã«ããŒã¯ãåãé å»¶ã管çäžã®ãã€ãºãšããŠåŠçã§ããŸããã圌ãã«ã¯åŸ æ©äžã®é¡§å®¢ãéµå®ãã¹ãéè¡å¥çŽãæ¢ã«è³Œå ¥ããæ©åšãå¥çŽæžã¿ã®ããŒã¿ã»ã³ã¿ãŒã©ãã¯ãå䜵ã¹ã±ãžã¥ãŒã«ããããã¯äžç¢ºå®ãª 1 ãæãä¹ãåããªãã»ã©èããã£ãã·ã¥ãããŒããããããããŸããã
RIPE NCC ã¯ããã®åé¡ãç ç©¶ããã®ã«æé©ãªå Žæã§ããããã¯åšèŸºçã§ããªããã°ãæ©èœäžå šã§ããããŸãããRIPE NCC ã¯ããªã©ã³ãã«æ ç¹ã眮ãæçããéå¶å©å£äœã§ã欧å·ãäžæ±ãããã³äžå€®ã¢ãžã¢ã®äžéšã«ãµãŒãã¹ãæäŸããŠããŸããã€ã³ã¿ãŒãããçªå·è³æºã®ã¬ãžã¹ããªãç¶æãã移転ãåŠçããRIPE ããŒã¿ããŒã¹ããµããŒãããRPKI ãµãŒãã¹ãéçšããéåŒã DNS å§ä»»ãæå¹ã«ããäŒå¡å¥çŽã管çããäŒè°ãšã¡ãŒãªã³ã°ãªã¹ãã«åºã¥ãããªã·ãŒæåãè²ãã§ããŸãããã®ãµãŒãã¹å°åã¯ãè£çŠãªæŽå²çäºæ¥è ããå°èŠæš¡ãããã¯ãŒã¯ãŸã§ã欧å·ã®æ³çèœåãšè匱ãªéè¡ã³ãªããŒãã¯ã©ãŠãéèŠãšå°æ¹ã®ã¢ã¯ã»ã¹ãããã€ããã¢ãã¬ã¹ãããŒã«ãŒããããŠç°ãªãã€ã³ã¿ãŒãããã§ç»é²ãéå§ãããæŽå²çãã«ããŒãå«ã¿ãŸãã
åé¡ã¯ãRIPE NCC ãæš©éã®æ€èšŒããããå¶è£ãç¡èŠããããªã·ãŒãæŸæ£ããææ°æãå é€ãããã¹ãŠã®ãªã¯ãšã¹ããå³åº§ã«åŠçãã¹ãã ãšããããšã§ã¯ãããŸããããããè¡ã£ãã¬ãžã¹ããªã¯ããã®ãµãŒãã¹åžå Žãæãªãã§ããããåé¡ã¯ãåºå®è²»ãæ¯é çã§ããå Žåãã¬ãžã¹ããªã®æ©æŠã®ååäœãéé²çã§ããããšã§ããææžèŠæ±ã24 ãæã®ç§»è»¢å¶éãã³ã³ãã©ã€ã¢ã³ã¹ã¬ãã¥ãŒãæ¯æãã®è€éããæé衚ã®å€äžããRPKI ãµãŒãã¹ã®åæ¢ããŸãã¯ã¡ãŒãªã³ã°ãªã¹ãã®ããªã·ãŒå€æŽã¯ãå°èŠæš¡äºæ¥è ãšå€§èŠæš¡äºæ¥è ãšã§ã¯çµæžçãªæå³ãç°ãªããŸããåãã«ãŒã«ã§ãã圢åŒçã«å¹³çã§ãã£ãŠãçµæžçã«ã¯äžå¹³çã§ããåŸãŸãã
IPv4 ã®åžå°æ§ã¯ããã®é察称æ§ã匷ããŸããRIPE NCC ã¯ã2019 幎 11 æã«æ®ãã® IPv4 ããŒã«ãæ¯æžãããŸãããçŸåšã®åŸ æ©ãªã¹ãã¡ã«ããºã ã¯ã驿 ŒãªããŒã«ã«ã€ã³ã¿ãŒãããã¬ãžã¹ããªã«ãååãããã¹ããŒã¹ããåäžã®/24 ãæäŸã§ããŸããããã¯å°èŠæš¡äºæ¥è ãæå°éã®ã«ãŒãã£ã³ã°å¯èœãªãã¬ãŒã³ã¹ã確ç«ããã®ã«åœ¹ç«ã¡ãŸãããæé·ãšã³ãžã³ã§ã¯ãããŸãããå°ããªãããããªã³ããè¶ ããå€§å¹ ãªæ¡å€§ã«ã¯ãéåžžãã¢ãã¬ã¹ç©ºéã®è³Œå ¥ããªãŒã¹ãäŒæ¥è²·åãã¢ãã¬ã¹å ±æã«ããæ¢åã¹ããŒã¹ã®æ¡åŒµãå¯èœãªå Žåã®é¡§å®¢ã® IPv6 ãžã®ç§»è¡ããŸãã¯éçšäžã®åŠ¥åã®å容ãå¿ èŠã§ããç¡æããŒã«ãæ¯æžãããšãã¬ãžã¹ããªããã»ã¹ã¯ãã¯ãäž»ã«å²ãæ¯ãã®äžæµã«ã¯ãããŸãããããã¯äºæ¥è ãè³Œå ¥ããªãŒã¹ãä¿è·ãè³é調éããŸãã¯åçåããªããã°ãªããªãè³æ¬ã®äžã«äœçœ®ããŸãã
ããããã¬ãžã¹ããªã®é ãããã»ã¹ãéè»¢è³æ¬ãžã®é ãã課çšãšããŠæ©èœããçç±ã§ããè«æ±æžã«ã¯å»¶æ»çšãšã¯æžãããŠããŸããã移転ããŒãžã§ã¯ãªãœãŒã¹ç§»è»¢ã¯ç¡æãšèšèŒããããããããŸãããããããäºæ¥è ã¯ãã¯ãæ¯æããŸããå°éå®¶å ±é ¬ã管çæéã顧客é¢ããæªäœ¿çšæ©åšãåçå»¶æããããŒã«ãŒå²åŒãæ¯æãåé¿ãäžç¢ºå®æ§ãã¬ãã¢ã ããã©ã³ã¹ã·ãŒãã¹ãã¬ã¹ã§æ¯æããŸããå€§èŠæš¡äºæ¥è ã¯ããããéæ¥è²»ãšããŠè² æ ããŸããå°èŠæš¡äºæ¥è ã¯æµåæ§ã·ã§ãã¯ãšããŠçµéšããŸãã
äŸåã¯çŽäºãèµ·ããåã«å§ãŸã
å°èŠæš¡ãããã¯ãŒã¯ã¯ãäœããããŸããããªããªããã£ãšåã«ãã¬ãžã¹ããªäŸåã«ãªããŸããäŸåã¯éåžžã®éçšã«ãã£ãŠçã¿åºãããŸããäžæµãããã€ãããã¢ãäžæ£å©çšåŠçãµãŒãã¹ã顧客ãååŒå ã誰ããªãœãŒã¹ã«å¯ŸããŠè²¬ä»»ãè² ãããç¥ãããã«ãæ£ç¢ºãªã¬ãžã¹ããªããŒã¿ãå¿ èŠã§ããLIR ããŒã¿ã«ã«ã¢ã¯ã»ã¹ããŠãªã¯ãšã¹ãã管çããå¿ èŠããããŸããçµè·¯èµ·ç¹ã®äž»åŒµãä¿¡é Œã§ãããã®ã«ããããã« RPKI ãå¿ èŠãªå ŽåããããŸããé»åã¡ãŒã«ããã®ã³ã°ã顧客ãµãŒãã¹ãããã³éçšè¡çããµããŒãããããã«éåŒã DNS ãå¿ èŠã§ããäžéšã®ãªãœãŒã¹ã§ã¯ãµãŒãã¹é¢ä¿ãŸãã¯ã¹ãã³ãµãŒã·ããå¥çŽãå¿ èŠã§ããææ°æã¯æ¯æãå¯èœã§ããç¶ããå¿ èŠããããŸããã¢ãã¬ã¹ç©ºéãè³Œå ¥ã売åŽãåç·šããå Žåã移転ããªã·ãŒã¯äºæž¬å¯èœã§ããå¿ èŠããããŸãã
æšæºãµãŒãã¹å¥çŽã¯ããã®é¢ä¿ã®äžéšãå¯èŠåããŸããããã«ã¯ãäŒå¡ã RIPE ããªã·ãŒãšæç¶ãææžã«åŸããæ å ±ãå®å šãã€æ£ç¢ºã«ä¿ã¡ãç£æ»ãšã»ãã¥ãªãã£ãã§ãã¯ã«ååãã矩åéåã®å Žåã®ééãŸãã¯ç»é²æ¹æ¶æç¶ããåãå ¥ããããšãæ±ããããŸããåãå¥çŽã¯ãçªå·è³æºã®ç»é²ã¯æææš©ãæ§æããããŸãæææš©ãä»äžãããã®ã§ã¯ãªããäŒå¡åäŒãšããŠã¯éåžžã®æ¹æ³ã§ RIPE NCC ã®è²¬ä»»ãå¶éããããšãæèšããŠããŸããã¬ãžã¹ããªãšã®é¢ä¿ã¯å¥çŽäžçãã§ãããéçšäžã®äŸåã¯åºç¯ã§ãã
å°èŠæš¡äºæ¥è ã«ãšã£ãŠããã®ã®ã£ããã¯éèŠã§ããå°å ISP ã«ã¯æ°åã®å å ¥è ãšèãè³æ¬äºç®ãããªããããããŸãããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã§ã¯ãä»®æ³åããã«ããã¡ã€ã¢ãŠã©ãŒã«ãèš±å¯ãªã¹ããã¡ãŒã«ã¬ãã¥ããŒã·ã§ã³ã顧客å¥çŽã«é¡§å®¢ã® IP å²ãåœãŠãçµã¿èŸŒãŸããŠããå ŽåããããŸããå°æ¹ã®ã¢ã¯ã»ã¹ãããã€ãã¯ãã¢ãã¬ã¹ã倿Žãããšæè¡è ã®ç§»åãé¡§å®¢å® å æ©åšã®å€æŽããµããŒãã³ãŒã«ãã«ãŒã¿ãŒã®æŽæ°ãå¿ èŠã«ãªããããã³ã³ãã¯ããªãããã¯ã«äŸåããŠããå ŽåããããŸããæŽå²çãã«ããŒã¯ãçŽé¢äžã§ã¯äŸ¡å€ããããããªã¢ãã¬ã¹ç©ºéãæã¡ãªããã移転ãèªèšŒãå°é£ã«ããä¹±éãªå±¥æŽãæ±ããŠããå ŽåããããŸãããããã®å Žåããã¬ãžã¹ããªã¯ãªãã·ã§ã³ã®ãœãããŠã§ã¢ãã³ããŒã§ã¯ãããŸãããããã¯çç£çè³ç£ã®èªç¥ããã管çè ã§ãã
äŸåã匷ãã®ã¯ãåºå£ã匱ãããã§ããéåžžã®ãã³ããŒã«äžæºãæã€é¡§å®¢ã¯ä¹ãæããããšãã§ããŸããRIPE å°åã®ä¿æè ã¯ãåããªãœãŒã¹é¢ä¿ã®ããã«åçŽã«å¥ã®ã¬ãžã¹ããªãéžã¶ããšã¯ã§ããŸãããäžéšã®ååŒã§ã¯ RIR é移転ãååšããäž¡æ¹ã®ã¬ãžã¹ããªã®æ¿èªãå¿ èŠã§ãããããã㯠RIPE NCC ã®ææ°æãæç¶ããæ³çç°å¢ããã®äžè¬çãªéãéã§ã¯ãããŸãããä¿æè ã¯ã販売ããªãŒã¹ãåæ§ç¯ãå Žåã«ãã£ãŠã¯ã¹ãã³ãµãŒLIR ã®å©çšããŸãã¯ãªãœãŒã¹ã®äœ¿çšåæ¢ãè¡ãããšãã§ããŸãããããã¯ããžãã¹ã€ãã³ãã§ããã容æãªåºå£ã§ã¯ãããŸããã
ãããã£ãŠãå°èŠæš¡äºæ¥è ã®äŸåã¯ã€ã³ãã©äžã®ãšã¯ã¹ããŒãžã£ãŒãšããŠåæãããªããã°ãªããŸãããå°èŠæš¡äŒæ¥ã¯ã管çãäžååã ããè匱ãªã®ã§ã¯ãããŸãããåã«ã¬ãžã¹ããªäŸåã®ãã£ãã·ã¥ãããŒãšç®¡çèœåã®æ¯çãé«ãå ŽåããããŸããå€§èŠæš¡äºæ¥è ã¯äºåã¢ãã¬ã¹ãšã¹ã¿ããã確ä¿ã§ããŸããå°èŠæš¡äºæ¥è ã¯é¡§å®¢ãæ±ããŠããŸãã
4 ã€ã®äºæ¥è ã4 ã€ã®ãã©ã³ã¹ã·ãŒã
å°èŠæš¡äºæ¥è ãšãã䟿å©ãªè¡šçŸã§ãããç°ãªããã©ã³ã¹ã·ãŒããé ããŠããŸããå°èŠæš¡ã¢ã¯ã»ã¹ãããã€ãã®çµæžã¯ããã¹ãã£ã³ã°äºæ¥è ãå°å ISPããŸãã¯æŽå²çã¬ã¬ã·ãŒãã«ããŒã®ãããšåãã§ã¯ãããŸãããRIPE NCC ã®ããªã·ãŒã¯ãé¡äŒŒã®ç®¡çã¬ããŒãéããŠãã¹ãŠã«åœ±é¿ãäžããå¯èœæ§ããããŸããã被害ã¯ç°ãªãå Žæã«çŸããŸãã
å°èŠæš¡ã¢ã¯ã»ã¹ãããã€ãã¯ã顧客ãµãŒãã¹ã®ç¶ç¶æ§ã«ãã£ãŠãšã¯ã¹ããŒãžã£ãŒããããŸãããã®ã¢ãã¬ã¹ç©ºéã¯ãäœå® ãŸãã¯ããžãã¹ã®å å ¥è ãNAT èšèšãé¡§å®¢å® å æ©åšãããŒã«ã«ã«ãŒãã£ã³ã°ããµããŒãã¹ã¯ãªãããåæ³çååãŸãã¯ãã®ã³ã°ã®çŸ©åã«çµã³ã€ããŠããŸããçãæ®ãããã«å·šå€§ãªãããã¯ã¯å¿ èŠãªããããããŸããããææãããããã¯ã®äºæž¬å¯èœãªå¶åŸ¡ãå¿ èŠã§ãããªã¹ã¯ã¯è¿œå IPv4 ã®è³Œå ¥äŸ¡æ Œã ãã§ã¯ãããŸãããã¢ãã¬ã¹ãç¶æããããšããéã®é¡§å®¢ã®æ··ä¹±ã®ã³ã¹ãã§ããCGNAT ã¯ã¢ãã¬ã¹å§åã軜æžã§ããŸããããã®ã³ã°è² è·ããã©ãã«ã·ã¥ãŒãã£ã³ã°ã®é£ãããæã«ã¯é¡§å®¢äžæºãå¢å ãããŸããã¬ãžã¹ããªã®é å»¶ã¯ãæ¢ã«è匱ãªãããã¯ãŒã¯å ã§ã®æé·ãå»¶æããããããå€ãã®å§çž®ã匷å¶ãããããå¯èœæ§ããããŸãã
å°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ãã¬ãã¥ããŒã·ã§ã³ãšå¯åºŠã«ãã£ãŠãšã¯ã¹ããŒãžã£ãŒããããŸããéãããã¢ãã¬ã¹ã®èåŸã«å€æ°ã®é¡§å®¢ãé 眮ããå ŽåããããŸããã¡ãŒã«ã¬ãã¥ããŒã·ã§ã³ãäžæ£å©çšå ±åããããã¯ãªã¹ãããžãªãã±ãŒã·ã§ã³ãéåŒã DNSã顧客蚱å¯ãªã¹ããçµè·¯èµ·ç¹ããŒã¿ã¯ãã¹ãŠãèªèããããµãŒãã¹å質ã«åœ±é¿ããŸããããŒã¿ã»ã³ã¿ãŒã®æ¡åŒµãæ°ãã顧客ã»ã°ã¡ã³ãããŸãã¯ãã€ãºã®å€ã顧客ãšã¯ãªãŒã³ãªé¡§å®¢ã®åé¢ã®ããã«ãã¢ãã¬ã¹ããªãŒã¹ãŸãã¯è³Œå ¥ããå¿ èŠãããå ŽåããããŸãã移転ã¹ã±ãžã¥ãŒã«ãäžç¢ºå®ãªå Žåãã¢ãã¬ã¹æå®èœåãæŽãåã«ããŒããŠã§ã¢ãšã©ãã¯ãžã®ã³ãããã¡ã³ããçºçããå¯èœæ§ããããŸãããããã¯ãæªãã¬ãã¥ããŒã·ã§ã³ãäžç¢ºå®ãªã¬ãžã¹ããªã¹ããŒã¿ã¹ã§å°çãããšããµãŒãã¹çµæžãæªåããŸãã
å°å ISP ã¯ãèŠæš¡ã®äžé£ç¶æ§ã«ãã£ãŠãšã¯ã¹ããŒãžã£ãŒããããŸããããŒã«ã«ã¢ã¯ã»ã¹ãããã€ãããã¯å€§ããããæ¢åã®éä¿¡äºæ¥è ããã¯å°ãããããããŸããããã¢ãªã³ã°ãããŒã«ã»ãŒã«ããšã³ã¿ãŒãã©ã€ãºãã¢ãã€ã«ããã¯ããŒã«ãå ¬å ±ã»ã¯ã¿ãŒããŸãã¯å°åããŒã¿ã»ã³ã¿ãŒã®èŠä»¶ã«çŽé¢ããŸããè²·åãå°åæé·ããŸãã¯ãµãŒãã¹ã»ã°ã¡ã³ããŒã·ã§ã³ã®ããã«ã¢ãã¬ã¹ç©ºéãå¿ èŠãªå ŽåããããŸãããã€ã¯ããªãã¬ãŒã¿ãããå€ãã®å¶åºŠçèœåãæã£ãŠããŸãããããã§ãäžççãªäºæ¥è ã®ããã«é å»¶ãåŠçããããšã¯ã§ããŸãããäŒæ¥ç»èšãéè¡ã¢ã¯ã»ã¹ããŸãã¯æ³çãšã¯ã¹ããŒãžã£ãŒãåœå¢ãè¶ããååŒã«æ©æŠãå ããåœã§éå¶ãããå¯èœæ§ããããŸããã¢ã ã¹ãã«ãã ã§ã¯æ¥åžžçã«èŠããã¬ãžã¹ããªããã»ã¹ããããã³ãã£ã¢åžå Žã§ã¯é«ãã€ãå¯èœæ§ããããŸãã
æŽå²çãŸãã¯ã¬ã¬ã·ãŒãã«ããŒã¯ãææžåãšãªãã·ã§ã³æ§ã«ãã£ãŠãšã¯ã¹ããŒãžã£ãŒããããŸãã倧åŠãäŒæ¥ãå ãµãŒãã¹ãããã€ããç ç©¶ãããã¯ãŒã¯ãå®¶æçµå¶ããŸãã¯äœå¹Žãåã«ã¢ãã¬ã¹ç©ºéãåãåã£ãæ¿ç¶äŒç€ŸãããããŸãããRPKIãéåŒã DNS ãµããŒãã移転ãåäœµæŽæ°ããŸãã¯å£²åŽãå¿ èŠã«ãªããŸã§ãèªåèªèº«ãã¢ãã¬ã¹åžå Žã®äž»äœãšã¯èããªããããããŸããããã®ãã©ã³ã¹ã·ãŒãã«ã¯æœåšçãªè³ç£ãå«ãŸããŠãããããããŸãããããã®è³ç£ã¯ãã¬ãžã¹ããªãšåžå Žã«ãšã£ãŠæ¿èªãã§ãŒã³ãååã«æç¢ºã§ããå Žåã«ã®ã¿æµåçã§ãããªã¹ã¯ã¯ãæŽå²çãªææ§ããçŸä»£ã®å²åŒã«ãªãããšã§ãã
ãããã®ã«ããŽãªã¯éè€ããŸãããå°èŠæš¡äŒæ¥ã«é¢ããäžè¬çãªèšèããªãäžååã§ãããã瀺ããŠããŸããã¢ã¯ã»ã¹ãããã€ãã¯é¡§å®¢ã®æ··ä¹±ãæããŠããŸãããã¹ãã£ã³ã°äºæ¥è ã¯ã¬ãã¥ããŒã·ã§ã³ãšããããžã§ãã³ã°ã®ããã«ããã¯ãæããŠããŸããå°å ISP ã¯æé·ã®é å»¶ãšè³é調éã®äžç¢ºå®æ§ãæããŠããŸããæŽå²çãã«ããŒã¯ãéã蟌ãããã䟡å€ãšåŒ±ã蚌æ ãæããŠããŸããçå£ãªæ¿çè°è«ã¯ãã©ã®ãã©ã³ã¹ã·ãŒãã«åœ±é¿ãäžããŠããããç¥ãã¹ãã§ãã
åºå®ææ°æãšäžå¹³çãªèœå
RIPE NCC ã® 2026 å¹Žã®æé衚ã¯ãLIR ã¢ã«ãŠã³ãããšã«å¹Žé 1,800 ãŠãŒãã®æ åºãèšå®ããŠããŸãããŸããç¹å®ã®ç¬ç«ãªãœãŒã¹å²ãåœãŠã«å¯ŸããŠãã¹ãã³ãµãŒLIR ãéããç¹å®ã®æŽå²ç㪠IPv4 ã¬ã³ãŒããå«ã㊠75 ãŠãŒãã該åœãã ASN å²ãåœãŠã« 50 ãŠãŒããç»é²æ 1,000 ãŠãŒããªã©ã®ææ°æãèšèŒãããŠããŸããçŽæ¥å¥çŽãæã€æŽå²çãã«ããŒã¯ãç¹å®ã®å Žåã®ç»é²æã«é¢ããç¹å®ã®äŸå€ãé€ãããã®å¹Žã® LIR 幎äŒè²»ãšåäžã®æéãæ¯æããŸãããããã®æ°åã¯ãå€§èŠæš¡ãããã¯ãŒã¯ã®äºç®ã§ã¯æ§ããã§ããå°èŠæš¡ãªãã®ã§ã¯èªåçã«æ§ããã§ã¯ãããŸããã
åé¡ã¯ãRIPE NCC ãç¡æã§ããã¹ããã©ããã§ã¯ãããŸãããæ£ç¢ºãªã¬ãžã¹ããªèšé²ãå®å šãªã·ã¹ãã ã移転åŠçãããŒã¿åè³ªäœæ¥ãRPKIãéåŒã DNSãæ³çã³ã³ãã©ã€ã¢ã³ã¹ããµããŒããããã³ç¶ç¶æ§ã«ã¯è³éãå¿ èŠã§ããã¬ãžã¹ããªãžã®è³éäžè¶³ã¯åœãã®ç¯çŽã§ããåé¡ã¯ãåºå®ãŸãã¯æºåºå®ã®ææ°æãäžå¹³çãªäŒå¡éã§ã©ã®ããã«æ©èœãããã§ãã
åºå®æéã«ã¯ç®¡çäžã®å©ç¹ããããŸããã·ã³ãã«ã§ãã䜿çšéã®æž¬å®æ¹æ³ããããç¶ç¶çãªè«äºãé¿ããŸããäŒå¡å¹³çã®èããæ¯æããŸããææ°æãç¹å®ã®ååŒã«å¯æ¥ã«çµã³ã€ããŠããªãå ŽåãæŽ»åãåå²ãããé ãããããã€ã³ã»ã³ãã£ããæžããããšãã§ããŸããããããåºå®ææ°æã¯ãäŒå¡ã®æ¯æãèœåãå€§å¹ ã«ç°ãªãå Žåãéé²çã§ãã1,800 ãŠãŒãã¯ãåœå¶ã®æŽå²çéä¿¡äºæ¥è ãã¯ã©ãŠããã©ãããã©ãŒã ããŸãã¯å€åœç±äŒæ¥ã«ãšã£ãŠã¯åãã«è¶³ããªããããããŸãããäœæåŸåžå Žã®å°èŠæš¡ ISPãã³ãã¥ããã£ã¢ã¯ã»ã¹ãããã€ããé貚å®ã«çŽé¢ããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ããŸãã¯ãªãœãŒã¹é¢é£ã®åçãå°ãªãæŽå²çãã«ããŒã«ãšã£ãŠã¯éèŠãããããŸããã
ææ°æã¯ãŸãããã³ãã«ãè³Œå ¥ããŸããã¬ãžã¹ããªã®äžå¿çãªæ©èœã¯ãããåºç¯ãªåäŒæŽ»åãäŒè°ã枬å®ãµãŒãã¹ããã¬ãŒãã³ã°ãã³ãã¥ããã£ãµããŒãã察å€é¢äžãšå ±åããŸãããã®æŽ»åã®äžéšã¯å°èŠæš¡äºæ¥è ã«ãšã£ãŠäŸ¡å€ããããŸãããã¬ãŒãã³ã°ã¯åœ¹ç«ã€ãããããŸãããæž¬å®ãµãŒãã¹ã¯å¯èŠæ§ãåäžããããããããŸãããäŒè°ã¯å°éç¥èãžã®ã¢ã¯ã»ã¹ãæäŸãããããããŸãããããããè«æ±æžã®çŸ©åçæ§è³ªã¯åæãå€ããŸããå°èŠæš¡äºæ¥è ã¯ãäž»ã«å®å®ããç»é²ã移転ã®äºæž¬å¯èœæ§ãRPKIãéåŒã DNSãããã³åºæ¬çãªãµããŒããå¿ èŠãšãããããããŸãããææ°æãããåºç¯ãªå¶åºŠçãšã³ã·ã¹ãã ã«è³éãæäŸããå Žåãäºæ¥è ã¯èªåã䜿çšããªããããããªãç¯å²ã«å¯ŸããŠæ¯æã£ãŠããŸãã
ããã¯æªæã®äž»åŒµã§ã¯ãããŸãããæçããäŒå¡åäŒã¯ãåœç¶ã®ããšãªãããµãŒãã¹ãã¹ã¿ãããå§å¡äŒãã€ãã³ããå ¬ç圹å²ãçºå±ãããŸããåé¡ã¯ãåžå°è³æºã®ã¬ãžã¹ããªã§ã¯ãäŒå¡ã¯éåžžã®æ¶è²»è ãšããŠãã³ãã«ãè©äŸ¡ã§ããªãããšã§ããããåºç¯ãªç¯å²ã«åæããªãå Žåã§ããåºæ¬çãªç»é²ãå¿ èŠã§ããå°èŠæš¡äºæ¥è ãã¬ãžã¹ããªèªå®ã«äŸåããã°ããã»ã©ãæ£åŒãªéåºæš©ã«ãã£ãŠææ°æãæå¶ããããšãå°ãªããªããŸãã
ç·äŒã¢ãã«ã¯ãäŒå¡ã«æé衚ãšé¢é£æ±ºè°ã«é¢ããæç¥šæš©ãäžããŸããããã¯çã®èª¬æè²¬ä»»ã¡ã«ããºã ã§ããããã¯å¹³çãªçµæžççºèšæš©ãšåãã§ã¯ãããŸãããå°ä»»ã®æ¿çã¹ã¿ãããæéãè±èªåããŸãã¯ç§»åèœåãäžè¶³ããŠããå°èŠæš¡äºæ¥è ã¯ãæéãªãã·ã§ã³ãç ç©¶ããããäŒè°ã«åºåžããããå§ä»»ç¶ãåå¡ãããã§ããªããããããŸããã倧æäŒå¡ã¯ãããã§ããŸãã圢åŒçå¹³çã¯å®è³ªçãªé察称æ§ãšå ±åãåŸãŸãã
æéèšèšã®ããã®è©Šéç³ã¯ãå䟡ã®çå®ã§ããã¹ãã§ããäŒå¡ã¯ã幎éè² æ ã®ã©ã®éšåãæ¬è³ªçãªã¬ãžã¹ããªãã©ã®éšåãçµè·¯ã»ãã¥ãªãã£ãµãŒãã¹ãã©ã®éšåãæ³åã»ã³ã³ãã©ã€ã¢ã³ã¹äœæ¥ãã©ã®éšåãäŒå¡ãµããŒããã©ã®éšåãããåºç¯ãªå¶åºŠç掻åã«è³éãæäŸããŠãããã確èªã§ããã¹ãã§ãããã®æç¢ºãããªããã°ãå°èŠæš¡äºæ¥è ã¯ãå¿ èŠãªä¿¡é Œæ§ã®ããã«æ¯æã£ãŠããã®ããå¿ èŠãªé¢ä¿ã«ãã³ãã«ãããå¶åºŠçç¯å²ã®ããã«æ¯æã£ãŠããã®ããç¥ãããšãã§ããŸããã
移転é å»¶ã¯éè»¢è³æ¬ãžã®èª²çš
IPv4 移転ããªã·ãŒã¯ããã°ãã°åžå Žã®é 管工äºãšããŠè°è«ãããŸããå°èŠæš¡äºæ¥è ã«ãšã£ãŠã¯ãããã¯éè»¢è³æ¬ã§ããè³Œå ¥è ã¯ã顧客ãšå¥çŽãããããµãŒãã¹ãéå§ããããã©ãã¯ãéãããããã©ãã£ãã¯ã¯ã©ã¹ãåé¢ããããããé«äŸ¡ãª NAT æ¡åŒµãåé¿ãããããåã«ãã¢ãã¬ã¹ãå¿ èŠãªå ŽåããããŸãã売ãæã¯ã嵿š©è ã«æ¯æããããã¢ããã°ã¬ãŒãã®è³éã調éãããããäºæ¥ã©ã€ã³ããæ€éããããããŸãã¯ãã£ãã·ã¥ãããŒã®å±æ©ãä¹ãåãããã«ã売åŽåå ¥ãå¿ èŠãšãããããããŸãããããŒã«ã«ãããã¯ãŒã¯ãè²·åããäŒç€Ÿã¯ãè²·åããã¢ãã¬ã¹ãéçšèšç»ã«çµ±åããåã«ãã¬ãžã¹ããªã®æ¿èªãå¿ èŠãªå ŽåããããŸãããããã£ãŠãé å»¶ã¯äžç«çãªæéã§ã¯ãããŸãããããã¯åçµãããè³æ¬ã§ãã
RIPE NCC ã®ç§»è»¢ãã¬ãŒã ã¯ãŒã¯ã¯ãæ£åœãªãªãœãŒã¹ä¿æè ããããªã·ãŒãšå¶éã«åŸã£ãŠãIPv4ãIPv6ãASN ã®å®å šãŸãã¯éšåãããã¯ã移転ããããšãèš±å¯ããŸãã移転㯠RIPE ããŒã¿ããŒã¹ã«åæ ãããªããã°ãªããŸãããåœåã®ä¿æè ã¯ãå®äºãããŸã§è²¬ä»»ãè² ãç¶ããŸããRIPE NCC ã®å ¬é移転ããŒãžã¯ãŸãããªãœãŒã¹ç§»è»¢ã¯ç¡æã§ãããšè¿°ã¹ãŠããŸããå°èŠæš¡äºæ¥è ã«ãšã£ãŠãç§»è»¢ææ°æããªãããšã¯æè¿ãã¹ãããšã§ããäžå®å šã§ããäž»ãªã³ã¹ãã¯ã忥çåæãšèªç¥ãããã¬ãžã¹ããªæŽæ°ãšã®éã®ã®ã£ããã§ãã
ãã®ã®ã£ããã«ã¯ããã€ãã®èŠçŽ ããããŸããææžã¯çŸåšã®æš©éãšæ³çååšã蚌æããªããã°ãªããŸãããäŒç€Ÿç»èšã¯æè¿ã®ãã®ã§ãªããã°ãªããªãå ŽåããããŸããå䜵ãè²·åã®ã±ãŒã¹ã§ã¯ãäºæ¥å€æŽãè£ä»ããæ³çææžãå¿ èŠã§ããã³ã³ãã©ã€ã¢ã³ã¹ãã§ãã¯ãé©çšãããå ŽåããããŸããIPv4 ã 16 ããã ASN ãªã©ã®åžå°è³æºã¯ãå²ãæ¯ãã移転ããŸãã¯ç¹å®ã®äŒç€Ÿæ§é 倿Žã®åé åŸã24 ãæã®å¶éãåããå ŽåããããŸããRIR é移転ã«ã¯äž¡æ¹ã®ã¬ãžã¹ããªã®æ¿èªãå¿ èŠã§ãããçžææ¹ã®ããªã·ãŒã«äŸåããŸããåèŠçŽ ã«ã¯çç±ããããŸããããããäžç·ã«ãªã£ãŠãã¹ã±ãžã¥ãŒã«ãªã¹ã¯ãçã¿åºããŸãã
ã¹ã±ãžã¥ãŒã«ãªã¹ã¯ã¯é察称ã§ãã倧æè³Œå ¥è ã¯ãè€æ°ã®ååŒãç¶æããäºåèœåãä¿æããããäžæçã«ãªãŒã¹ããããšãã§ããŸããå°èŠæš¡è³Œå ¥è ã¯ãå€ãã®å Žåãåäžã®ååŒãåäžã®æ¡åŒµèšç»ãåäžã®éè¡å£åº§ãæã£ãŠããŸãã移転ãäºæ³ããé·ãããããšãäŒæ¥ã¯æªäœ¿çšã®æ©åšã®ä»£éãæ¯æãã顧客ã倱ããã€ãªãèè³ãå»¶é·ãããããé«äŸ¡ãªãªãŒã¹ã¢ãã¬ã¹ãåãå ¥ããå¯èœæ§ããããŸãã倧æå£²ãæã¯ãããè¯ãè²·ãæãåŸ ã€ããšãã§ããŸããå°èŠæš¡å£²ãæã¯ãæžé¡æç¶ããåŠçããããè¿ éã«æ±ºæžã§ãããããŒã«ãŒã®å²åŒãåãå ¥ãããããããŸããã
ãããããã»ã¹çµ±èšãéèŠã§ããçç±ã§ããå®äºãã移転ã®ãªã¹ãã¯ãäœãåãããã瀺ããŸãããããã¯ãæŸæ£ãããååŒãè³é調éã®é å»¶ãäžç¢ºå®æ§ã®ããã«åãå ¥ããããå²åŒããªãŒã¹ã«è¿œãããããã±ãŒã¹ããŸãã¯åºå®è²»ãé«ãããããã«éå§ãããªãå°èŠæš¡ååŒã瀺ããŸãããæåããå®äºã®ã¿ãæ°ãããªãã°ãã¬ãžã¹ããªã¯å¹ççã«èŠãããããããŸãããå€ãã®æ£åœãªååŒãå¯èŠåãããåã«æ¶æ» ããå Žåãå°èŠæš¡äºæ¥è åžå Žã¯äŸç¶ãšããŠéå¹ççãããããŸããã
移転é å»¶ã顧客ãžã®çŽæãšçžäºäœçšããå Žåãéè»¢è³æ¬ãžã®èª²çšã¯ç¹ã«å³ãããã®ã§ããå°çšç°å¢ã販売ãããã¹ãã£ã³ã°äºæ¥è ã¯ãããŒã³ãæ¥ãŸã§ã«ã¢ãã¬ã¹ãå¿ èŠãšãããããããŸãããã¢ã¯ã»ã¹ãããã€ãã¯ãèªæ²»äœå¥çŽãäŒæ¥å±éãæ±ããŠãããããããŸãããå°å ISP ã¯ãåŸ æ©äžã®ããŒã«ã»ãŒã«é¡§å®¢ãæ±ããŠãããããããŸãããæŽå²çãã«ããŒã¯ãæ¯æããã¬ãžã¹ããªå®äºã«äŸåãã販売å¥çŽãç· çµããå¯èœæ§ããããŸããã¬ãžã¹ããªãã¹ã±ãžã¥ãŒã«çµç€ã§è¿œå ææžãèŠæ±ããå Žåãæ³çè«çã¯æå¹ã§ãããªããããã£ãã·ã¥ãããŒãžã®åœ±é¿ã¯å³ãããã®ã«ãªãåŸãŸãã
çãã¯ç²ç®çãªé床ã§ã¯ãããŸãããäžæ£ãªç§»è»¢ãåœé ææžãäºãããæš©éã¯ãå°èŠæš¡äºæ¥è ãå«ã誰ã«ãšã£ãŠãæå®³ã§ããçãã¯äºæž¬å¯èœãªé床ã§ãïŒæšæºçãªèšŒæ ã®æåŸ ãæ©æã®èŠåãæç¢ºãªé å»¶ã«ããŽãªãå®å šæåºåŸã®ç®æšæéæ ããããŠè»œåŸ®ãªææžäžã®æ¬ é¥ãšæ·±å»ãªæš©éåé¡ãåºå¥ããææ®µã§ããäºæž¬å¯èœæ§ã¯é床ãšåãããã䟡å€ããããŸãããªããªããããã«ãã£ãŠå°èŠæš¡äŒæ¥ã¯ã®ã£ããã«è³éã調éã§ããããã§ãã
ææžè² æ ã¯åºå®è²»
ã¬ãžã¹ããªã®ææžåã¯ããã°ãã°åè³ªç®¡çææ®µãšããŠæ±ãããŸããããã¯ç¢ºãã«ããã§ããããã¯ãŸãåºå®è²»ã§ããæè¿ã®äŒç€Ÿç»èšãèªå¯ããã眲åãåäœµææžãç¶ç¶æ§ã®èšŒæãå®è³ªçææè ã®æç¢ºåããŸãã¯ä¿®æ£ãããé£çµ¡å ã®èŠæ±ã¯ã瀟å åŒè·å£«ãšæ³åç§æžã¹ã¿ãããæã€å€§äŒæ¥ã«ãšã£ãŠã¯å®¹æãããããŸãããå°èŠæš¡äºæ¥è ã«ãšã£ãŠã¯ãããžã§ã¯ãã«ãªãåŸãŸãã
è² æ ã¯æ³åã«ãã£ãŠç°ãªããŸããäžéšã®äŒç€Ÿç»èšã¯ããžã¿ã«ã§è¿ éãè±èªã§å©çšå¯èœã§ããä»ã®ãã®ã¯é ããçŽããŒã¹ã§ãæ¿æ²»çã«æ··ä¹±ããŠãããç¹å®ã®èšèªã§ãããèªèšŒã«è²»çšãããããŸããäžéšã®åœã ã¯ãæŠäºãå¶è£ãé åçŽäºããŸãã¯è¡æ¿æ©èœäžå šãçµéšããŠããŸããäžéšã®å°èŠæš¡äºæ¥è ã¯ãåç§°ã倿Žããããè³ç£ãçžç¶ããããéå ¬åŒã«å䜵ããããåç· åœ¹ã倿Žããããå€ãèšé²ãçŽå€±ãããããŠããŸãããããã®ã©ãããã¬ãžã¹ããªã匱ã䞻匵ãåãå ¥ããã¹ãããšãæå³ããããã§ã¯ãããŸãããããã¯ã匷åãªäž»åŒµã蚌æããã³ã¹ããå€§å¹ ã«ç°ãªãããšãæå³ããŸãã
æŽå²çãã«ããŒã¯æãæ·±å»ãªããŒãžã§ã³ã«çŽé¢ããŠããŸãã圌ãã®èšé²ã¯ãã€ã³ã¿ãŒããããå°ãããå²ãåœãŠæ £è¡ãããã€ã³ãã©ãŒãã«ã§ãçŸåšã®ã³ã³ãã©ã€ã¢ã³ã¹æåŸ ãååšããªãã£ããšãã«äœæãããå¯èœæ§ããããŸããæŽå²çãããã¯ã«ã¯äŸ¡å€ããããããããŸãããã䟡å€ã¯æš©éã蚌æããèœåã«äŸåããŸããã¬ãžã¹ããªãæŽå²çæèãèªèããã«çŸä»£ã®ææžæåŸ ãé©çšããå Žåãæ£åœãªè³æ¬ã¯éæµåçã«ãªãå¯èœæ§ããããŸãã峿 Œããªãã«ãã¹ãŠã®å€ã䞻匵ãåãå ¥ããå Žåãäžæ£ã®ãªã¹ã¯ãé«ãŸããŸãããã©ã³ã¹ã¯åŸ®åŠã§çµæžçã«éèŠã§ãã
ç£æ»ãšããŒã¿å質ã¬ãã¥ãŒã¯ãåæ§ã®åºå®è²»åé¡ãçã¿åºããŸããã¬ãžã¹ããªã«ã¯æ£ç¢ºãªããŒã¿ãå¿ èŠã§ããæéåãã®é£çµ¡å ãæŸæ£ãããçµç¹ã誀ã£ãã¡ã³ãããŒãäžæ£ç¢ºãªå²ãåœãŠã¯å°åž³ã匱ããŸããããããããŒã¿åè³ªäœæ¥ãã©ã®ããã«å®æœãããããéèŠã§ããååçãªä¿®æ£èŠæ±ã¯ãå°èŠæš¡äºæ¥è ã«ãµãŒãã¹ã®åªå€±ãæããããå·è¡å§¿å¢ãšã¯ç°ãªããŸããå°èŠæš¡äŒæ¥ã¯ãäžæ£ãé ããŠããããã§ã¯ãªããåãã¹ã¿ããã顧客ãã«ãŒãã£ã³ã°ãè«æ±ãæžé¡ãæ±ã£ãŠããããã«ã察å¿ãé ãããå¯èœæ§ããããŸãã
ééããã³ç»é²æ¹æ¶æç¶ãã¯ãäžå®ãåççã§ããçç±ã瀺ããŠããŸããæšæºãµãŒãã¹å¥çŽã®çµäºã¯ãRIPE NCC ããRIPE ããŒã¿ããŒã¹å ã®ãªãœãŒã¹ã¬ã³ãŒããç¶æããæš©éãLIR ããŒã¿ã«ãžã®ã¢ã¯ã»ã¹ãRPKI ãµãŒãã¹ã®äœ¿çšãå«ããµãŒãã¹ã忢ããã¬ã³ãŒããæ¹æ¶ããRPKI èšŒææžã倱å¹ãããå¯èœæ§ããããŸãããããã®æš©éã¯æ·±å»ãªã±ãŒã¹ã«å¿ èŠã§ãããããã¯ãŸãããšã¹ã«ã¬ãŒã·ã§ã³ãã¹ãæç¢ºã§ãªãå Žåãéåžžã®ææžæ©æŠãåç¶ã®å±æ©ã®ããã«æããããããšãæå³ããŸãã
æè¯ã®å¶åºŠèšèšã¯ã段éçã§ã修埩å¿åã§ã蚌æ ã«åºã¥ããŠããŸããå°èŠæš¡äºæ¥è ã¯ãèŠæ±ãæ¥åžžçãªããŒã¿è¡çãæ·±å»ãªã³ã³ãã©ã€ã¢ã³ã¹åé¡ãæš©éçŽäºãæ¯æãåé¡ããŸãã¯æœåšçãªééã±ãŒã¹ã®ãããã§ããããç¥ãã¹ãã§ããããŒã¿ã«äžã®åãã¡ãã»ãŒãžãããããã¹ãŠã®æå³ãæã€ã¹ãã§ã¯ãããŸãããã¬ãžã¹ããªãæ£ç¢ºãªèšé²ãæããªãã°ãäºå®ããšã¹ã«ã¬ãŒã·ã§ã³ãæ£åœåãããŸã§ãä¿®æ£ãã·ã³ãã«ã§è åšã®ãªããã®ã«ãã¹ãã§ãã
ãããã£ãŠãææžèšèšã¯åžå Žèšèšã§ãããããŸããªèŠä»¶ã¯ãã¹ãŠãå®å šã«éå¶ããããã«å¿ èŠãªæå°èŠæš¡ãå¢å ãããŸããæç¢ºãªãã§ãã¯ãªã¹ãã¯ãã¹ãŠãããæžå°ãããŸãã
å°çãåºå®è²»ãåå¢ããã
å°èŠæš¡äºæ¥è ã®äŸåã¯ãäººå¡æ°ãåçã ãã®åé¡ã§ã¯ãããŸãããããã¯ãŸããäºæ¥è ãã©ãã«äœçœ®ããŠãããã®åé¡ã§ããããŸããRIPE NCC ã®ãµãŒãã¹å°åã¯ãéè¡ã·ã¹ãã ãææžåæ £è¡ãèšèªãèŠå¶æåãçºæ¿ãªã¹ã¯ãå°æ¿åŠçå¶éãžã®ãšã¯ã¹ããŒãžã£ãŒãç°ãªãåœã ãã«ããŒããŠããŸãããããã£ãŠãåãã«ãŒã«ãç°ãªãå°åã³ã¹ããæã¡åŸãŸãã
é貚ã¯åé¡ã®éå°è©äŸ¡ãããéšåã§ãããŠãŒã建ãŠã®äŒè²»ãå°éãµãŒãã¹è«æ±æžã¯ããŠãŒãåã®äºæ¥è ã«ãšã£ãŠäºæž¬å¯èœã§ããããã¯ãåçãçŸå°é貚ã§ããå°èŠæš¡äºæ¥è ã«ãšã£ãŠã¯å€åãåŸãŸããçºæ¿ã¬ãŒããæ¥æ¿ã«å€åããå Žåã幎åã«ç®¡çå¯èœã«èŠããäŒè²»ãããèŠçã«ãªãå¯èœæ§ããããŸããçŸå°éè¡ãæµ·å€ééãå²ãåœãŠããã远å ã®ã³ã³ãã©ã€ã¢ã³ã¹ææžãèŠæ±ãããããå Žåãæ¯æãèªäœãäœæ¥ã«ãªããŸãã絶察é¡ã¯ã¢ã ã¹ãã«ãã ããã¯å°ããèŠãããããããŸããããã£ãã·ã¥ãããŒãžã®å±æçãªåœ±é¿ã¯çŸå®çãããããŸããã
äŒæ¥ææžåãåãå°çãæã£ãŠããŸããã¬ãžã¹ããªã¯åççã«æè¿ã®äŒç€Ÿç»èšãèŠæ±ãããããããŸãããããã€ãã®æ³åã§ã¯ããããã®ææžã¯ãªã³ã©ã€ã³ã§æ°åã§å ¥æã§ããŸããä»ã®æ³åã§ã¯ãçŸå°ã®äºçŽãå ¬èšŒã翻蚳ãèªèšŒããŸãã¯å® é 䟿ã®é å»¶ãå¿ èŠã§ããäŒç€Ÿãåç§°ãææè ã倿Žããå Žåãææžãã§ãŒã³ã¯ããã«å°é£ã«ãªãå¯èœæ§ããããŸããåœãçŽäºãå¶åºŠåŽ©å£ã®åœ±é¿ãåããŠããå Žåãåªåã¯äžåè¡¡ã«ãªãå¯èœæ§ããããŸããã¬ãžã¹ããªã¯åŒ±ãææžãåãå ¥ããå¿ èŠã¯ãããŸãããããæè¿ã®ææ¬ãæäŸããŠãã ããããã©ãã§ãåãè² æ ã衚ãããã§ã¯ãªãããšãçè§£ãã¹ãã§ãã
éè¡ããã³ã³ã³ãã©ã€ã¢ã³ã¹ã®ãšã¯ã¹ããŒãžã£ãŒãå°ççã«ç°ãªããŸããé«ãªã¹ã¯ç°å¢ãŸãã¯ãã®è¿ãã«äœçœ®ããå°èŠæš¡äºæ¥è ã¯ãå°åçã«éèŠã§ãããæ³çã«ãµãŒãã¹å¯èœãããããŸãããããã«ãããããããé å»¶ããæ¯æããæ éãªååŒçžæã远å ã®éè¡è³ªåã移転åžå Žã§ã®å²åŒã«çŽé¢ããå¯èœæ§ããããŸããæ³ççŠæ¢ããªããŠããèªèããããªã¹ã¯ã®ããã«è³Œå ¥è ãèºèºãããããããŸãããæ³ççŠæ¢ãšäžè¬çãªãªã¹ã¯èªèãåºå¥ããªãã¬ãžã¹ããªããã»ã¹ã¯ããããæªåãããå¯èœæ§ããããŸããäºæ¥è ã¯ãã®å Žæã®ããã«äºåºŠæ¯æããŸãïŒäžåºŠã¯ç§çåžå Žã§ãäžåºŠã¯å¶åºŠçäžç¢ºå®æ§ãéããŠã
ããªã·ãŒåå ãå°ççã«åã£ãŠããŸããäŒè°ãžã®åºåžãã¡ãŒãªã³ã°ãªã¹ãã®ãã©ããŒãã¬ããã³ã¹ãžã®åå ã¯ãã¹ã¿ãããšæ è²»äºç®ãæã€äŒå¡ã«ãšã£ãŠãã容æã§ãããªã¢ãŒãåå ã¯åœ¹ç«ã¡ãŸãããæéãèšèªãæç¶ãäžã®èªä¿¡ã®ã³ã¹ããæé€ããŸãããå°èŠæš¡åžå Žã®äŒå¡ã¯ãã«ãŒãã£ã³ã°ããŒãã«ã§ã¯å¯èŠçãããããŸããããããªã·ãŒåœ¢æã§ã¯ã»ãŒäžå¯èŠã§ããææ°æã移転ãRPKIããŸãã¯ééã«é¢ããã«ãŒã«ãäž»ã«äœå°èœåãæã€äººã ã«ãã£ãŠåœ¢æãããå ŽåãçµæãšããŠçããããã»ã¹ã¯ãæå³ããããŠããå€§èŠæš¡ã§äžå€®ã®åžå Žã®ä»®å®ãåæ ããå¯èœæ§ããããŸãã
å°èŠæš¡äºæ¥è ã®äŸåã¯ãäŒæ¥èŠæš¡ã ããèŠãŠãçè§£ã§ããŸãããå®å®ããåžå Žã®å°èŠæš¡äºæ¥è ãšã髿©æŠåžå Žã®å°èŠæš¡äºæ¥è ã¯ãç°ãªããªã¹ã¯ã«çŽé¢ããŸããåºå®æéãææžèŠæ±ã移転é å»¶ããŸãã¯ã¡ãŒãªã³ã°ãªã¹ãã®è°è«ã«ã¯ãå°çç乿°ããããŸããRIPE NCC ã®æ£åœæ§ã¯ãçµ±äžåºæºãæŸæ£ããããšãªããã®ä¹æ°ãèªèããããšã«ããã£ãŠããŸããçµ±äžåºæºã¯ããã²ãããé²ããã䟡å€ããããŸããç²ç®çãªçµ±äžã¯åãã§ã¯ãããŸãããæè¯ã®ã¢ãã«ã¯ãç°ãªã蚌æçµè·¯ãèæ ®ããå®è·µçãªã¬ã€ãã³ã¹ã䌎ããçµ±äžãããçµææåŸ ã§ãã
æš©éæ€èšŒã¯å³æ ŒãªãŸãŸã§ãããªãããã¬ãžã¹ããªã¯ç®¡èœãèæ ®ãã蚱容å¯èœãªææžã®äŸãå ¬è¡šã§ããŸããæ¯æã矩åã¯ç¢ºåºãããŸãŸã§ãããªãããã¬ãžã¹ããªã¯ãããã¯ãããæ¯æããã£ãã«ãšæåŠãåºå¥ããŸãã移転ã«ãŒã«ã¯å ±éã®ãŸãŸã§ãããªãããåŠçããŒã¿ã¯ç¹å®ã®å°åãããé·ãé å»¶ãçµéšããŠãããã©ãããæããã«ããŸããããªã·ãŒè°è«ã¯éããããŸãŸã§ãããªããã圱é¿ããŒãã¯å°ççããã³å°èŠæš¡äºæ¥è ãžã®åœ±é¿ãç¹å®ããŸãããããã¯æ§ãããªèª¿æŽã§ãããèŠåããå®éã«ãµãŒãã¹ãæäŸããå°åã«ãµãŒãã¹ã§ããå¶åºŠã«å€ããŸãã
RPKI ãšéåŒã DNS ãäŸåãéçšåãã
ã¬ãžã¹ããªäŸåã¯ã移転ã®èªç¥ã ãã«é¢ãããªãã°ååã«æ·±å»ã§ããRPKI ãšéåŒã DNS ã¯ãããéçšåããŸãããããã¯äŒå¡ã¹ããŒã¿ã¹ãã¬ãžã¹ããªã¬ã³ãŒãããµãŒãã¹ã¢ã¯ã»ã¹ããçµè·¯ã»ãã¥ãªãã£ãã¡ãŒã«ã¬ãã¥ããŒã·ã§ã³ããã®ã³ã°ãäžæ£å©çšå¯Ÿå¿ã顧客éçšã«çµã³ã€ããŸãã
RIPE NCC ã® RPKI ãµãŒãã¹ã¯ã驿 Œãªä¿æè ãä¿æãããªãœãŒã¹ããªã¹ãããããžã¿ã«èšŒææžãèŠæ±ããããšãå¯èœã«ããŸãããããã®èšŒææžã¯ãçµè·¯èµ·ç¹èªèšŒãš BGP èµ·ç¹æ€èšŒããµããŒãããŸããå®éã«ã¯ãRPKI ã¯ä»ã®ãããã¯ãŒã¯ãçµè·¯ã®èµ·ç¹ãæåŸ ããããã®ã§ãããã©ããã倿ããã®ãå©ããŸããå€§èŠæš¡ãããã¯ãŒã¯ã¯ãå°ä»»ã®çµè·¯ã»ãã¥ãªãã£ã¹ã¿ãããæã¡ãROA ç¶æ ãç£èŠãããšã©ãŒã«å¯Ÿããåé·æ§ãæ§ç¯ãããããããŸãããå°èŠæš¡äºæ¥è ã¯ãå°æ°ã®åŸæ¥å¡ãšããŒã¿ã«ã¢ã¯ã»ã¹ã«äŸåãããããããŸãããèšŒææžãŸã㯠ROA ã®åé¡ã¯ãçµå¶é£ãã¬ãžã¹ããªé¢é£ã®åå ãçè§£ããåã«ã顧客ã«åœ±é¿ãäžããã€ã³ã·ãã³ãã«ãªãå¯èœæ§ããããŸãã
éåŒã DNS ã¯ããŸã話é¡ã«ãªããŸããããçµæžçã«é¢é£ãããç¶ããŸããRIPE NCC ã¯éåŒãå§ä»»ãç»é²ãã管çåºç€ãšã㊠RIPE ããŒã¿ããŒã¹ã䜿çšããŠéåŒã DNS ãŸãŒã³ãçæããŸããéåŒã DNS ã¯ãé»åã¡ãŒã«ã®å°éæ§ãã»ãã¥ãªãã£ãã°ãã¬ãã¥ããŒã·ã§ã³ãã§ãã¯ã顧客ãã©ãã«ã·ã¥ãŒãã£ã³ã°ãããã³äžéšã®ã³ã³ãã©ã€ã¢ã³ã¹ã·ã¹ãã ã«åœ±é¿ããŸããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ã顧客ãèŠæ ãèšããšãã«åããŠéåŒã DNS ã®å¶åŸ¡ãéèŠã§ããããšãçºèŠãããããããŸãããå°èŠæš¡ã¢ã¯ã»ã¹ãããã€ãã¯ãå§ä»»ã®åé¡ããµãŒãã¹çµ±åãäžæããããŸã§ããããæ¥åžžæ¥åãšèŠãªããããããŸãããã¬ã¬ã·ãŒãã«ããŒã¯ãå€ããããã¯ã®åšãã«ã©ãã ãã®éçšç¶æ ãèç©ãããŠããããçè§£ããŠããªããããããŸããã
ééæç¶ãã«ããããããŒã¿ããŒã¹ä¿å®æš©éãLIR ããŒã¿ã«ã¢ã¯ã»ã¹ãRPKI ãµãŒãã¹ã®åªå€±ãžã®èšåã¯ããããã£ãŠé«åœ±é¿ã®ã¬ããŒã§ããåé¡ã¯ãRIPE NCC ãæ±ºããŠèšŒææžã倱å¹ããããããµãŒãã¹ã忢ãã¹ãã§ã¯ãªãããšã§ã¯ãããŸãããé倧ãªäžæ£ãæ³çå·®æ¢åœä»€ãæªè§£æ±ºã®æš©éåé¡ããŸãã¯æ°žç¶çãªäžéµå®ã¯ãæªçœ®ãå¿ èŠãšããå¯èœæ§ããããŸããåé¡ã¯æ¯äŸæ§ã§ããè«æ±çŽäºãæ¥åžžç£æ»ãææžé å»¶ããŸãã¯ãããŸããªæ¯æãåé¡ããäžçšæã«çµè·¯ã»ãã¥ãªãã£ãŸãã¯éåŒã DNS ã®äžå®å®æ§ã«æ³¢åãã¹ãã§ã¯ãããŸããã
å°èŠæš¡äºæ¥è ã«ãšã£ãŠãéçšäžã®ãã€ãã¹é¢ã¯åžåãããå°é£ã§ããå€§èŠæš¡äºæ¥è ã¯ããã³ããŒããã¢ã瀟å ããŒã ã«é»è©±ã§ããŸããå°èŠæš¡ãããã¯ãŒã¯ã¯ã顧客ãã±ãããåŠçããå¯äžã®ãšã³ãžãã¢ããããªããããããŸãããçµè·¯ãç¡å¹ã«ãªã£ãããé£çµ¡å ãæŽæ°ã§ããªããªã£ãããéåŒã DNS ã倱æãããã移転ã RPKI ã¹ã±ãžã¥ãŒã«ã®ææ§ããçã¿åºããããããšãäºæ¥è ã¯é¡§å®¢ã®ä¿¡é Œãæ¥éã«å€±ãå¯èœæ§ããããŸããã¬ãžã¹ããªã®å éšã«ããŽãªã¯ãµãŒãã¹ç¶æ ãããããŸããã顧客ã®ã«ããŽãªã¯ãã€ã³ã¿ãŒããããèœã¡ãŠãããã§ãã
ããã«ãããç¶ç¶æ§ã®åé¢ãäžå¯æ¬ ã«ãªããŸããRPKI ãšéåŒã DNS ã¯ãæ³åŸãšæè¡çå®å šæ§ãèš±ãéããéåžžã®åæ¥çãŸãã¯ç®¡çäžã®çŽäºããä¿è·ãããã¹ãã§ããéç¥ã¯æç¢ºã§ãæéä»ãã§ãå ·äœçã§ããã¹ãã§ããæ¹åæé ã¯å°èŠæš¡ããŒã ã«ãšã£ãŠå®è·µçã§ããã¹ãã§ããã¡ã³ããŒåŽã®ããŒã«ã¯ç¶æ ãå¯èŠåãã¹ãã§ããå°èŠæš¡äºæ¥è ã¯ãã¬ãžã¹ããªã®åé¡ãçµè·¯æ€èšŒãéåŒãå§ä»»ã«åœ±é¿ãäžããå¯èœæ§ããããã©ããããæ£åšããææžããæšæž¬ããå¿ èŠããã£ãŠã¯ãªããŸããã
RIPE NCC ã®éçšãµãŒãã¹ã䟡å€ãããã®ã«ãªãã°ãªãã»ã©ãããããæ¢åã«ãªãããšãèš±ããªããããããæ³šæããªããã°ãªããŸãããçµè·¯ã»ãã¥ãªãã£ãžã®äŸåã¯ãã¬ãžã¹ããªã®è¬èããå¢ãã¹ãã§ããããã®ææ¡åãå¢ãã¹ãã§ã¯ãããŸããã
äŸå管çãšããŠã®ãªãŒã¹
IPv4 ã®ãªãŒã¹ã¯ããã°ãã°åžå Žã®åé¿çãšèŠãªãããŸããå°èŠæš¡äºæ¥è ã«ãšã£ãŠãããã¯äŸå管çã§ããããŸããã¢ãã¬ã¹ç©ºéãè³Œå ¥ããã«ã¯ãè³æ¬ã移転ã¹ã±ãžã¥ãŒã«ãææžãã³ã³ãã©ã€ã¢ã³ã¹ãã§ãã¯ãRIR é調æŽãé·æçãªãã©ã³ã¹ã·ãŒãã³ãããã¡ã³ããå¿ èŠãªå ŽåããããŸãããªãŒã¹ã¯ããéããåæè²»çšãå®ããããæè»ã§ããããã¯ãŸããè³è²žäººãèªç¥ãããä¿æè ã§ããç¶ããå Žåãã¬ãžã¹ããªé¢é£ã®ãšã¯ã¹ããŒãžã£ãŒãéå¶äŒç€Ÿããé ãããããšãã§ããŸãã
ããã«ã¯å®çšçãªé åããããŸããå°èŠæš¡ãã¹ãã£ã³ã°äºæ¥è ã¯ããããã¯ãè³Œå ¥ããã®ã§ã¯ãªãã顧客ãããžã§ã¯ãã®ããã«ã¢ãã¬ã¹ããªãŒã¹ãããããããŸãããå°å ISP ã¯ãIPv6 ã®æ¡çšã移転ã®ç¢ºå®æ§ãåŸ ã€éãæ¡åŒµäžã«ãªãŒã¹ãããããããŸãããå°èŠæš¡ã¢ã¯ã»ã¹ãããã€ãã¯ã顧客ã CGNAT ã®èåŸã§é床ã«å§çž®ããã®ãé¿ããããã«ããªãŒã¹å®¹éã䜿çšãããããããŸãããæŽå²çãã«ããŒã¯ãäžç¢ºå®ãªåžå Žã§è²©å£²ããã®ã§ã¯ãªããäœå°ã¢ãã¬ã¹ããªãŒã¹ãããããããŸããã責任ãæç¢ºãªå Žåããã®åãæ±ºãã¯å¹ççã§ããåŸãŸãã
ãªãŒã¹ã¯ãŸããæ°ããªäŸåãçã¿åºããŸããåãæã¯ãè³è²žäººã®ã¬ãžã¹ããªã¹ããŒã¿ã¹ãæ¯æãç¶æ³ãæ³çãšã¯ã¹ããŒãžã£ãŒãçµè·¯èªèšŒãäžæ£å©çšåŠçãããã³å¥çŽäžã®ä¿¡é Œæ§ã«äŸåããŸããè³è²žäººãæ¯é æš©ã倱ã£ãããROA ãç¶æã§ããªãã£ãããéåŒã DNS ã誀ã£ãŠç®¡çããããçŽäºã®å¯Ÿè±¡ã«ãªã£ãããããšãåãæã®é¡§å®¢ã¯èŠããå¯èœæ§ããããŸããåãæããããã¯ãä¹±çšããå Žåãè³è²žäººã®ã¬ãã¥ããŒã·ã§ã³ãæãªãããŸããã¬ãžã¹ããªããªãŒã¹ãçãã®ç®ã§èŠãªãããã責任ã«é¢ããæç¢ºãªã«ãŒã«ãæäŸããªãå Žåãäž¡åœäºè ã¯äžç¢ºå®æ§ã«çŽé¢ããŸãã
èãã¯ãRIPE NCC ããã¹ãŠã®ãªãŒã¹ãèŠå¶ãã¹ãã ãšããããšã§ã¯ãããŸãããããã¯ã¬ãžã¹ããªã忥è£å€å®ã«å€ããŠããŸãã§ããããèãã¯ãçŽæ¥ä¿æãé«äŸ¡ãé ãããŸãã¯ãªã¹ã¯ãããå Žåã«ãªãŒã¹ãæé·ãããšããããšã§ããå ¬åŒã®ç§»è»¢ããã³äŒå¡åçµè·¯ãäºæž¬å¯èœã§ããã°ããªãŒã¹ã¯ããžãã¹ã¢ãã«ãšããŠç«¶äºããŸããå ¬åŒçµè·¯ãäžéæã§ããã°ããªãŒã¹ã¯é²åŸ¡çãªæ§é ã«ãªããŸãããã®åºå¥ã¯éèŠã§ãã
å°èŠæš¡äºæ¥è ã¯ãè³Œå ¥ã®éè»¢è³æ¬ã移転ã®åºå®è²»ãè² æ ã§ããªãããã«ããã°ãã°ãªãŒã¹ããŸããããã¯ç¡è²¬ä»»ã®èšŒæ ã§ã¯ãããŸãããããã¯ãã©ã³ã¹ã·ãŒãå¶çŽã®èšŒæ ã§ããçŽæ¥ä¿æã®æ©æŠãæžããããšãªããªãŒã¹ãé埳çã«å€æããã¬ãžã¹ããªã¯ãå°èŠæš¡äºæ¥è ãããéææ§ã®äœãåãæ±ºãã«è¿œãããã§ããããèšé²ã®èª¿æŽãRPKI 責任ãäžæ£å©çšé£çµ¡å ãéåŒã DNS ã®æåŸ ãä¿é²ããã¬ãžã¹ããªã¯ããªãŒã¹ãããèªã¿ãããããŸãã
åžå Žã®ãã¹ãã¯ã·ã³ãã«ã§ãïŒãªãŒã¹ã¯ãªã¹ã¯ãæç¢ºã«ããããé ããïŒRIPE NCC ã®åœ¹å²ã¯ãæ£ç¢ºãªèšé²ãšéçšäžã®èª¬æè²¬ä»»ãç¶æããããšã§ãããå°èŠæš¡äºæ¥è ã®è³æ¬æ§é ãå²ãåœãп代ã®åºæºã§çŸçã«å¿å°ãããã©ãããæ±ºå®ããããšã§ã¯ãããŸããã
ããªã·ãŒã¡ãŒãªã³ã°ãªã¹ãã¯äœå°èœåã«å ±ãã
RIPE ã®ããªã·ãŒçå®ã¯ããªãŒãã³ã§ããã ã¢ããã§ãããã¯ãŒãã³ã°ã°ã«ãŒããã¡ãŒãªã³ã°ãªã¹ããäŒè°ãäžå¿ã«æ§ç¯ãããŠããŸãããã®éæŸæ§ã¯çã®å¶åºŠçè³ç£ã§ãã誰ã§ãè°è«ã远跡ãã倿Žãææ¡ããã¢ãŒã«ã€ããèªãããšãã§ããŸããããªã·ãŒè°è«ã«åå ããããã« RIPE NCC ã®äŒå¡ã§ããå¿ èŠã¯ãããŸãããééçãªèŠå¶ãšæ¯èŒãããšãããã¯åŒ·ã¿ã§ãã
ããã¯ãŸããæ³šç®ã®åžå Žã§ããããŸããåå ã«ã¯ãæéãèšèªã®èªä¿¡ãæè¡ç芪ãã¿ãæç¶ãäžã®èšæ¶ãå ¬ã«è°è«ããææ¬²ãå¿ èŠã§ããå€§èŠæš¡äºæ¥è ãã³ã³ãµã«ã¿ã³ãããããŒã«ãŒãã¬ãžã¹ããªã®ããã©ã³ãå°ä»»ã®æ¿çå£äœã¯ããããã®ãªãœãŒã¹ãããå€ãæã£ãŠããŸããå°èŠæš¡äºæ¥è ã¯ããã°ãã°ããã§ã¯ãããŸããã圌ãã¯ãããªã·ãŒããã§ã«è«æ±æžã移転é å»¶ãæåŠãããèŠæ±ããŸãã¯éçšã€ã³ã·ãã³ãã«ãªã£ããšãã«ã®ã¿äŒè©±ã«åå ãããããããŸããã
ããã¯éèŠã§ãããªããªããæ¯æžåŸã®ããªã·ãŒã¯ãã¯ãããŒã«ããã®å ¬æ£ãªå²ãåœãŠã ãã§ã¯ãªãããã§ããããã¯æµåæ§ãææ°æãRPKIãéåŒã DNSã移転ãã³ã³ãã©ã€ã¢ã³ã¹ãç£æ»ãæŽå²çèšé²ãééãªã¹ã¯ã«åœ±é¿ããŸããã¡ãŒãªã³ã°ãªã¹ãã®æ±ºå®ã¯ãå°èŠæš¡äºæ¥è ã®ãã©ã³ã¹ã·ãŒããå€ããå¯èœæ§ããããŸãã24 ãæã®ç§»è»¢å¶éã¯ãåææ©æ¿çãšããŠè°è«ãããªããã販売䟡å€ã®æžå°ãšããŠçµéšããããããããŸãããæé衚決è°ã¯ãåäŒè²¡æ¿ã®åé¡ãšããŠè°è«ãããªãããåºå®è²»ãšããŠçµéšããããããããŸãããRPKI 倱å¹ããªã·ãŒã¯æè¡çã«æ£ãããããããŸããããçµè·¯ã»ãã¥ãªãã£ã¹ã¿ãããæ¬ ãå°èŠæš¡ããŒã ã«ãšã£ãŠéçšäžæžå¿µããããããããŸããã
åé¡ã¯ã掻åçãªäººã ãéåæ³ã§ããããšã§ã¯ãããŸããã圌ãã¯ä»äºãããŠããŸããåé¡ã¯ãå¶åºŠçããã»ã¹ãå¯èŠçãªåå ãã圱é¿ãåããåžå Žã®åæãšæ··åããå¯èœæ§ãããããšã§ããå°èŠæš¡äºæ¥è ã®æ²é»ã¯ãããŸãã§ããããã¯åæãæå³ãããããããŸããããŸããç²åŽã人å¡äžè¶³ãèšèªã®å£ãå ¬ã®äžäžèŽãžã®æãããŸãã¯æè¡çã«èŠããã«ãŒã«ãçµæžççµæãããããããšã®åãªãç¡ç¥ãæå³ãããããããŸããã
RIPE NCC ãš RIPE ã³ãã¥ããã£ã¯ãéæŸæ§ãæŸæ£ããããšãªããããæ¹åã§ããŸããåžå°è³æºã«åœ±é¿ãäžããããªã·ãŒææ¡ã«ã¯ãæç¢ºãªçµæžç圱é¿ããŒããå«ãŸããã¹ãã§ãïŒå°èŠæš¡ LIRãã¢ã¯ã»ã¹ãããã€ãããã¹ãã£ã³ã°äºæ¥è ãæŽå²çãã«ããŒãã¹ãã³ãµãŒLIRãåãæãè³Œå ¥è ãžã®äºæ³ããã圱é¿ãäºæ³ãããåºå®è²»ã移転ãšãªãŒã¹ãšã®äºæ³ãããçžäºäœçšãå®è£ è² è·ãããã³å®è£ åŸã«åéãããããŒã¿ã圱é¿åæã¯æåŠæš©ã§ãã£ãŠã¯ãªããŸãããããã¯å¯èŠæ§ã®ããã®ããŒã«ã§ããã¹ãã§ãã
ç·äŒã«ãåæ§ã®åå åé¡ããããŸããäŒå¡ã¯çäºäŒéžæãæéè¡šãæ±ºè°ã«æç¥šã§ããŸããããããæç¥šèœåã¯ãšã¯ã¹ããŒãžã£ãŒãšåçã§ã¯ãããŸãããå€§äŒæ¥ãšåãåºæ¬æéãæ¯æãå°èŠæš¡äºæ¥è ã¯ãäºç®ææžãç ç©¶ããäŒè°ã«åºåžããå§ä»»ç¶ãçµç¹ããçäºäŒåè£ãè©äŸ¡ããèœåãã¯ããã«å°ãªãå¯èœæ§ããããŸããåäŒã®æ£åŒãªæ§é ã¯ãããæå³ã§æ°äž»çã§ããå¥ã®æå³ã§ã¯ãããã¯äœå°èœåã«å ±ããŸãã
å°èŠæš¡äºæ¥è ã¯ãä¿è·äž»çŸ©çãªæ¿çä¿è·ãå¿ èŠãšããŠããŸããã圌ãã¯ãèªåãã¡ã®æéãšéè»¢è³æ¬ãåžå°ã§ãããã®ããã«æžãããæ¿çãå¿ èŠãšããŠããŸããããã¯ãããå°ãªãé ããåºå®è²»ãçµæžç圱é¿ã®ããæç¢ºãªèŠçŽããããŠäžåšã®äŒå¡ãåŸã§çµæãè©äŸ¡ã§ããããã«ããããã»ã¹ããŒã¿ãæå³ããŸãã
亀æžåãšäžç¢ºå®æ§ã®äŸ¡æ Œ
äŸååé¡ã¯äº€æžã«ãããŠå¯èŠåãããŸããã¬ãžã¹ããªããã»ã¹ãäžç¢ºå®ãªå Žåãå°èŠæš¡äºæ¥è ãåã®ããç«å Žã§äº€æžããããšã¯ãã£ãã«ãããŸãããã¢ãã¬ã¹ãè³Œå ¥ããå Žåã売ãæã¯ãã倧ããªé èšéãããå³ããã¯ããŒãžã³ã°æ¡ä»¶ãèŠæ±ãããããããŸããã売åŽããå Žåãè²·ãæã¯ææžãªã¹ã¯ã«å¯ŸããŠå²åŒãé©çšãããããããŸããããªãŒã¹ããå Žåãè³è²žäººã¯å¶éçãªæ¡ä»¶ã課ããããããŸããããããŒã«ãŒãå©çšããå ŽåããããŒã«ãŒã¯ãäºæ¥è èªèº«ã§ããã»ã¹ãåç¬ã§ããã²ãŒãã§ããªãããããã倧ããªäŸ¡å€ã®åãåãç²åŸãããããããŸãããã¹ãã³ãµãŒLIR ãå¿ èŠãªå Žåãã¹ãã³ãµãŒã®éçšäžããã³å¥çŽäžã®æ¡ä»¶ãéèŠã§ãã
äžç¢ºå®æ§ã¯ãå¿èãšããã»ã¹ç¥èãæã€åœäºè ã«äº€æžåãã·ãããããŸããããã¯éåžžãå°èŠæš¡äºæ¥è ã§ã¯ãããŸããã倧æã¢ãã¬ã¹è³Œå ¥è ã¯ãåé¡ã®ãããããã¯ãèŠéãããšãã§ããŸãããã£ãã·ã¥ãããŒã®å§åäžã«ããå°èŠæš¡å£²ãæã¯ã容æã«åŸ ã€ããšãã§ããŸãããå€§èŠæš¡è³è²žäººã¯åãæã亀代ãããããšãã§ããŸããå°èŠæš¡åãæã¯ãæ¢ã«ããããžã§ãã³ã°ããã顧客ã®ããã«ç¶ç¶æ§ãå¿ èŠãšãããããããŸããããããŒã«ãŒã¯åæã«è€æ°ã®æ©äŒãåŠçã§ããŸããå°èŠæš¡äºæ¥è 㯠1 ã€ããæã£ãŠããªããããããŸããã
ããããææ°æããŒãã§ãã£ãŠããã¬ãžã¹ããªã®äžéææ§ãåé 广ãæã€çç±ã§ããRIPE NCC ã¯ç§»è»¢èªäœã«æéãè«æ±ããªããããããŸããããç§çåžå Žã¯äžç¢ºå®æ§ã«èª²éããŸããäŸ¡æ Œã¯ãå²åŒãåŒè·å£«è²»çšããšã¹ã¯ããŒæ¡ä»¶ããããŒã«ãŒããŒãžã³ããªãŒã¹ãã¬ãã¢ã ã«çŸããŸãããããã¯ç§çãªåååŒã®åé¡ã ãšèšããããªããŸãããããã¯ããã§ãããæºå ¬å ±çãªã¬ãžã¹ããªããã»ã¹ã«ãã£ãŠåœ¢æãããŠããŸããã¬ãžã¹ããªçµè·¯ãæç¢ºã§ããã°ã亀æžã¯äŸ¡æ Œãšè©å€ã«çŠç¹ãåœãŠãŸããã¬ãžã¹ããªçµè·¯ãäžéæã§ããã°ã亀æžã¯èª°ãäžç¢ºå®æ§ãçãæ®ãããã«ã€ããŠã§ãã
åãè«çãå䜵ãšè²·åã«ãåœãŠã¯ãŸããŸããå€§èŠæš¡ã°ã«ãŒãã«å£²åŽããå°å ISP ã¯ãè³éèª¿éæ¥ããåã«ååŒãå®äºããå¿ èŠããããããããŸãããã¢ãã¬ã¹ãªãœãŒã¹ã®èªèãäžç¢ºå®ãªå Žåãè²·ãæã¯äŸ¡æ Œã®äžéšãçä¿ããããè£åãèŠæ±ããããäºæ¥ãå²ãåŒããããããããããŸããã飿¥ãããã¯ãŒã¯ãè²·åããå°èŠæš¡äºæ¥è ã¯ãã¢ãã¬ã¹èšé²ãäºæ¥ã«è¿œéãããšããä¿èšŒãå¿ èŠãšãããããããŸãããææžåããããŸããªå Žåããããã¯ãŒã¯è³ç£ãšé¡§å®¢ãçŸå®ã®ãã®ã§ãã£ãŠããååŒã¯å€±æããå¯èœæ§ããããŸããã¬ãžã¹ããªããã»ã¹ã¯è²·åè³é調éã®èŠçŽ ã«ãªããŸãã
å°èŠæš¡äºæ¥è ã¯ãŸããçŽäºæã«ãã匱ãç«å Žã«ãããŸããã¬ãžã¹ããªã®æ±ºå®ãäžæç¢ºãªå Žåã倧æäŒå¡ã¯åé¡ããšã¹ã«ã¬ãŒã·ã§ã³ããåŒè·å£«ãéããã¹ã¿ãããšã³ãã¥ãã±ãŒã·ã§ã³ããã³ãã¥ããã£ã®æ³šç®ãéããããšãã§ããŸããå°èŠæš¡äºæ¥è ã¯ãã©ã®ãã£ãã«ãéèŠããç¥ããªãã£ãããå ¬ã«è°è«ããããšãç¶æ³ãæªåãããããšãæããããããããããŸãããæ£åŒãªç°è°ç³ç«çµè·¯ã¯ãå®è·µçã§ãæé ã§ãçè§£å¯èœã§ããå Žåã«ã®ã¿æçšã§ãã
çµæžåŠã¯ã·ã³ãã«ã§ããäžç¢ºå®æ§ã¯ååŒå¯èœãªååã§ããè³æ¬ãæã€è ã¯ããã«å¯Ÿããä¿è·ãè³Œå ¥ããŸããæããªãè ã¯ãã®ããã«å²åŒã§å£²ããŸããäžç¢ºå®æ§ãäœæžããã¬ãžã¹ããªã¯ã亀æžåã®äžå¹³çãäœæžããŸãã
責任å¶éãšå¶åºŠäžã®è¬èã
RIPE NCC ã®å¥çŽäžã®è²¬ä»»å¶éã¯çè§£ã§ããŸããäŒå¡ã¬ãžã¹ããªã¯ããã¹ãŠã®ãããã¯ãŒã¯ã«ããã¢ãã¬ã¹ç©ºéã®äœ¿çšããçãããã¹ãŠã®äžæµã®æå€±ãåççã«ä¿éºããããšã¯ã§ããŸãããäŒå¡ã®äºæ¥ã顧客ããŸãã¯ã¢ãã¬ã¹ä¿æã®äŸ¡å€ã¯ã幎äŒè²»ãã¯ããã«è¶ ããå¯èœæ§ããããŸããç¡é責任ã¯ç¶æäžå¯èœã§ãããã
ããããå¶éããã責任ã¯ã¬ããã³ã¹èŠç¯ãå€ããŸããã¬ãžã¹ããªã®äžæ¹ãªã¹ã¯ãäžéä»ãã§ããäžæ¹ã§ãäŒå¡ã®éçšãªã¹ã¯ã倧ããå Žåãã¬ãžã¹ããªã¯çãæš©éãæç¢ºãªããã»ã¹ã匷åºãªç¶ç¶æ§åºæºã§è£åããªããã°ãªããŸãããäœã責任ã䌎ãåºç¯ãªè£éã¯å±éºãªçµã¿åããã§ãã
ããã¯å°èŠæš¡äºæ¥è ã«ãšã£ãŠç¹ã«éèŠã§ãããªããªãã圌ãã¯åäžã®ã¬ãžã¹ããªæ±ºå®ã«å¯ŸããŠåæ£ã§ããªãããã§ããå€§èŠæš¡ã°ã«ãŒãã¯ãè€æ°ã®åäŒç€Ÿãå°åããããã¯ãã¢ãã¬ãã·ã³ã°æŠç¥ãæã€ããšãã§ããŸããå°èŠæš¡ãããã¯ãŒã¯ã¯ãåäžã® LIR ã¢ã«ãŠã³ããåäžã®ã¹ãã³ãµãŒé¢ä¿ãåäžã® IPv4 ãããã¯ããŸãã¯åäžã®ç§»è»¢ã«äŸåããå¯èœæ§ããããŸããã¬ãžã¹ããªã®æ±ºå®ã誀ã£ãŠãããé ãã£ãããããšããã¡ãŒãžã¯äºæ¥è ã®ãã©ã³ã¹ã·ãŒãã«æ¯ããŠå€§ãããªãåŸãŸããå¥çŽäžã®ææžã¯äºæ¥ãå埩ããªããããããŸããã
æ£ãã察å¿ã¯ãRIPE NCC ã«ããããçµæã«å¯ŸããŠè²¡åç責任ãè² ãããããšã§ã¯ãããŸãããããã¯ãã¬ãžã¹ããªæ©èœãçãã審æ»å¯èœã«ä¿ã€ããšã§ããè£éã¯å®¢èгçãªããŒãºã«çµã³ã€ããããã¹ãã§ãïŒéè€äž»åŒµã®é²æ¢ãæš©éã®æ€èšŒãææåã®ããæ³åŸã®éµå®ãèåœããŒã¿ã®ä¿®æ£ãã»ãã¥ãªãã£ã®ä¿è·ãå°åž³ã®ä¿åãããã¯ããžãã¹ã¢ãã«ã«å¯Ÿããé埳ç倿ããªãŒã¹ãžã®åºç¯ãªçæãç¹å®å°åãžã®æŒ ç¶ãšããäžå¿«æããŸãã¯æž¬å®å¯èœãªåå ã®ãªãè£éçé å»¶ã«ãŸã§åã¶ã¹ãã§ã¯ãããŸããã
é倧ãªçµæãå¯èœãªå Žåãããã»ã¹ã«ã¯éç¥ãã«ããŽãªåºæã®çç±ãå®è·µçãªææžã¹ããããäžäœã¬ãã¥ãŒãžã®ãšã¹ã«ã¬ãŒã·ã§ã³ããããŠæ³åŸãèš±ãå Žåã®æåŸã®æ€èšŒæžã¿ç¶æ ã®ä¿æãå«ãŸããã¹ãã§ããããã¯ããèªäœã®ããã®å®å䞻矩ã§ã¯ãããŸãããããã¯ééç責任ã®ä»£æ¿ã§ãã
å¶åºŠäžã®è¬èãã¯åŒ±ãã§ã¯ãããŸããã被害ãåããäŒå¡ãæã€éãããææžãèªèããã¬ãžã¹ããªã¯ã移転ãRPKIãéåŒã DNSãééãããã³æ¯æãç¶ç¶æ§ã«åœ±é¿ãäžããè¡åã«ããæ éã§ããã¹ãã§ãããã®æ éãã¯ã¬ãžã¹ããªãšäŒå¡ã®äž¡æ¹ãä¿è·ããŸããããã¯ãæè¡çå¶åºŠãéèåžå Žã®äžä¿¡ã®å¯Ÿè±¡ã«ãªããªã¹ã¯ãäœæžããŸãã
å°èŠæš¡äºæ¥è ã«é æ ®ããèšèšãæ±ãããã®
å°èŠæš¡äºæ¥è ã«é æ ®ããã¬ãžã¹ããªãšã¯ãå°èŠæš¡äŒæ¥ã«åœŒããæããã¹ãŠã®çµæãäžããã¬ãžã¹ããªã§ã¯ãããŸãããããã¯åºå®è²»ããã£ãã·ã¥ãããŒã®ã¿ã€ãã³ã°ãéçšäžã®äŸåãçè§£ããã¬ãžã¹ããªã§ããããã¯äºæž¬å¯èœæ§ãã®ãã®ããµãŒãã¹ãšããŠæ±ããŸãã
第äžã®èŠä»¶ã¯ã¿ã€ã ã©ã€ã³ã®éææ§ã§ãã移転ãM&Aãå±¥æŽæŽæ°ãæ¯æãæ©æŠãã³ã³ãã©ã€ã¢ã³ã¹ã¬ãã¥ãŒã®ããã»ã¹ã¯ãæç¶ãèšè¿°ã ãã§ãªããå ¬éãããã¿ã€ã ã©ã€ã³ååžãæã€ã¹ãã§ããå°èŠæš¡äºæ¥è ã¯ãå¿ èŠãªææžã ãã§ãªããå¯èœæ§ã®ããç¯å²ãç¥ãå¿ èŠããããŸããã¿ã€ããŒãå®å šãªèŠæ±ã§ã®ã¿éå§ããå Žåãã¬ãžã¹ããªã¯å®çšçãªæå³ã§ãå®å šããå®çŸ©ããèŠæ±ãå®å šã§ãªãå Žåã«è¿ éã«ç³è«è ã«éç¥ãã¹ãã§ãã
第äºã®èŠä»¶ã¯ã«ããŽãªã®æç¢ºãã§ããè¿œå æ å ±ãèŠæ±ããã¡ãã»ãŒãžã¯ããã®åé¡ãæ¥åžžçãªããŒã¿ä¿®æ£ãæš©éæ€èšŒãã³ã³ãã©ã€ã¢ã³ã¹ãã£ã«ã¿ãªã³ã°ãèåœè¡šç€ºã®çããæ¯æãæ©æŠãããªã·ãŒå¶éããŸãã¯æœåšçãªééã®ãããã§ãããã瀺ãã¹ãã§ããäŒå¡ã¯å£èª¿ããæ·±å»åºŠãæšæž¬ããå¿ èŠããã£ãŠã¯ãªããŸãããã«ããŽãªã®æç¢ºãã¯ãããã¯ãæžãããå°èŠæš¡äºæ¥è ãéãããæ³šæãå²ãåœãŠãããšãå¯èœã«ããŸãã
第äžã®èŠä»¶ã¯ç¶ç¶æ§ã®åé¢ã§ããRPKIãéåŒã DNSãããŒã¿ããŒã¹ä¿å®æš©éã¯ãæ³åŸãšæè¡çå®å šæ§ãèš±ãéããéåžžã®ã¬ãã¥ãŒãæ¯æããã©ãã«ã·ã¥ãŒãã£ã³ã°ãææžä¿®æ£äžã«ä¿æãããã¹ãã§ããé«åœ±é¿ãµãŒãã¹ã圱é¿ãåããå¯èœæ§ãããå ŽåãäŒå¡ã¯å ·äœçãªéç¥ãšæ¹åã¹ããããåãåãã¹ãã§ããéçšäžã®æ··ä¹±ã¯æåŸã®ææ®µã§ããã¹ãã§ããã管çäžã®åå°ã§ãã£ãŠã¯ãªããŸããã
第åã®èŠä»¶ã¯æ©èœå¥ã®ææ°æéææ§ã§ããäŒå¡ã¯ãæ¬è³ªçãªã¬ãžã¹ããªéçšã®ã³ã¹ãããããåºç¯ãªæŽ»åãšã¯å¥ã«èŠãããšãã§ããã¹ãã§ããããã¯ãã¹ãŠã®ãµãŒãã¹ããªãã·ã§ã³ã«ãªãããšãèŠæ±ãããã®ã§ã¯ãããŸãããããã¯ãã³ãã«ã«ã€ããŠã®æ£çŽããèŠæ±ããŸããå°èŠæš¡äºæ¥è ã¯ãèªåãäŸåããå°åž³ãã»ãã¥ãªãã£ãç¶ç¶æ§ã®ã³ã¹ããèŠãããšãã§ããå Žåããã容æã«ææ°æãåãå ¥ãããããããŸããã
第äºã®èŠä»¶ã¯ããªã·ãŒåœ±é¿ã®èŠåŸã§ãã移転å¯èœæ§ãææ°æãRPKIãéåŒã DNSãç£æ»ãééãæ³çãã£ã«ã¿ãªã³ã°ããŸãã¯æŽå²çãªãœãŒã¹ã«åœ±é¿ãäžããææ¡ã¯ãå°èŠæš¡ã¢ã¯ã»ã¹ãããã€ãããã¹ãã£ã³ã°äºæ¥è ãå°å ISPãæŽå²çãã«ããŒãžã®äºæ³ããã圱é¿ãè¿°ã¹ãã¹ãã§ããåæã¯å®è£ åŸã«æŽæ°ãããã¹ãã§ãã圱é¿ãäžç¢ºå®ã§ããå Žåãããè¿°ã¹ãŠæž¬å®ãããã¹ãã§ãã
第å ã®èŠä»¶ã¯å®è·µçãªç°è°ç³ç«ã§ããå°èŠæš¡äºæ¥è ã¯ãäºå®èª€èªã«ç°è°ãå±ããããäžäœã¬ãã¥ãŒãæ±ãããããããã«ãå ¬ã®çŽäºãé«äŸ¡ãªåŒè·å£«ããŸãã¯å éšç¥èãå¿ èŠãšãã¹ãã§ã¯ãããŸãããç°è°ç³ç«çµè·¯ã¯ãå¯èœãªéããµãŒãã¹ãä¿æããæçšãªã¬ãã«ã®å ·äœæ§ãäŒŽãæžé¢ã«ããçç±ãæäŸãã¹ãã§ãã
ãããã®ãããã颚å€ããã§ã¯ãããŸãããããã¯åžå°è³æºã¬ãžã¹ããªã«é©çšãããéåžžã®å¶åºŠçµæžåŠã§ããäºæ¥è ãå°èŠæš¡ã§ããã°ããã»ã©ãäºæž¬å¯èœæ§ã¯ãã䟡å€ãããã®ã«ãªããŸãã
å°èŠæš¡äºæ¥è äŸåã®ç£èŠãã€ã³ã
第äžã®ç£èŠãã€ã³ãã¯ãææ°æã®åœ¢åŒçå¹³çãšçµæžçè² æ ã®éã®ã®ã£ããã§ããRIPE NCC ã®æé衚ã¯ãåç®äžã®å¹Žéæ åºé¡ã ãã§å€æãããã¹ãã§ã¯ãªãããããè³éæäŸãããã³ãã«ãšãå°èŠæš¡äºæ¥è ããã®ãã³ãã«ãçè§£ã圱é¿ãäžããèœåã«ãã£ãŠå€æãããã¹ãã§ãã矩åçãªææ°æããããæç¢ºãªã³ã¹ãåé¢ãªãã«åºç¯ãªå¶åºŠçç¯å²ã«è³éãæäŸãç¶ããå Žåãå°èŠæš¡äºæ¥è ã¯è©äŸ¡ã§ããªãåºå®è²»è² æ ãè² ãããšã«ãªããŸãã
第äºã®ç£èŠãã€ã³ãã¯ç§»è»¢ã¿ã€ã ã©ã€ã³ã§ããåžå Žã¯å®äºãã移転ã®ãªã¹ã以äžã®ãã®ãå¿ èŠãšããŠããŸããé å»¶ãè¿œå ææžèŠæ±ãæåŠãåŸ æ©æéã®åœ±é¿ãã³ã³ãã©ã€ã¢ã³ã¹ã¬ãã¥ãŒãRIR éãããã¯ãM&A ã®è€éããå¯èœãªå Žåã®æŸæ£ãããèŠæ±ã«é¢ããéèšããŒã¿ãå¿ èŠã§ããé å»¶ãçšã§ããã°ãããŒã¿ã¯ä¿¡é Œã匷åããã§ããããé »ç¹ã§ããã°ãããŒã¿ã¯ã©ãã§æ¹é©ãå¿ èŠãã瀺ãã§ããããããŒã¿ããªããã°ãå°èŠæš¡äºæ¥è ã¯ç§çååŒã«ãããŠäžç¢ºå®æ§ãã¬ãã¢ã ãæ¯æãç¶ããã§ãããã
æ¯æãæ©æŠã¯ç¬¬äžã®ç£èŠãã€ã³ãã§ããRIPE NCC ã®å°åã§ã¯ãéè¡ã¢ã¯ã»ã¹ãšæ³çãšã¯ã¹ããŒãžã£ãŒãéåžžã®è«æ±æžãç¶ç¶æ§ãªã¹ã¯ã«å€ããå¯èœæ§ããããŸããã¬ãžã¹ããªã¯ãæ¯æãæåŠãšåæ³çãªæ¯æãã®ã«ãŒãã£ã³ã°äžèœãã©ã®ããã«åºå¥ããŠãããããéèšçã«ç€ºãã¹ãã§ããæ¯æããã©ãã«ã·ã¥ãŒãã£ã³ã°äžã®ãµãŒãã¹ä¿æã¯ãå°èŠæš¡äºæ¥è ã«ãšã£ãŠåé¡ã§ããã瀌åã§ã¯ãããŸããã
第åã®ç£èŠãã€ã³ãã¯ãéçšã¬ãã¬ããžå¹æã§ããRPKIãéåŒã DNSãããŒã¿ããŒã¹ã¢ã¯ã»ã¹ãLIR ããŒã¿ã«æš©éã¯ãéåžžã®ç®¡çäžã®çŽäºã«ãããèšæã®å§åãã€ã³ãã«ãªã£ãŠã¯ãªããŸãããããå€ãã®ãããã¯ãŒã¯ãçµè·¯èµ·ç¹æ€èšŒã«äŸåããã«ã€ããŠãã¬ãžã¹ããªãµãŒãã¹å€æŽã¯é¡§å®¢ãžã®åœ±é¿ãç²åŸããŸããå°èŠæš¡äºæ¥è ã¯ãæç¢ºãªéç¥ãææžçµè·¯ãç¶ç¶æ§ä¿è·ãå¿ èŠãšããŠããŸãã
ããªã·ãŒåå ã¯ç¬¬äºã®ç£èŠãã€ã³ãã§ããã¡ãŒãªã³ã°ãªã¹ãã®éæŸæ§ã¯ãäœå°èœåãæ¬ ã人ã ã®ä»£è¡šãšæ··åãããã¹ãã§ã¯ãããŸãããçµæžç圱é¿ããŒããšå®è£ åŸææšã¯ãRIPE ã®ããªã·ãŒæåãæŸæ£ããããšãªããå°èŠæš¡äºæ¥è ã®ã³ã¹ããå¯èŠåããå®çšçãªæ¹æ³ã§ãã
第å ã®ç£èŠãã€ã³ãã¯ãªãŒã¹ãšã¹ãã³ãµãŒåžå Žã§ããçŽæ¥ä¿æãããŸãã«ãé«äŸ¡ãé ãããŸãã¯äžç¢ºå®ã§ããããã«ãå°èŠæš¡äºæ¥è ããŸããŸããªãŒã¹ãŸãã¯ã¹ãã³ãµãŒã«äŸåããå Žåãããã¯äŸåãç§çå¥çŽã«ç§»è¡ããŠãã蚌æ ã§ããã¬ãžã¹ããªã¯åé¿çãé埳çã«å€æãã¹ãã§ã¯ãããŸãããå ¬åŒçµè·¯ã®ã©ã®æ©æŠããã®åé¿çãé åçã«ããã®ããèªåãã¹ãã§ãã
æåŸã®ç£èŠãã€ã³ãã¯ãå°èŠæš¡äºæ¥è ãå§åäžã«ãããšããRIPE NCC ãçãå°åž³ãšããŠæ¯ãèãããåºç¯ãªéçªãšããŠæ¯ãèããã§ããçãå°åž³ã¯æš©éãæ€èšŒããæ£ç¢ºãªèšé²ãä¿æããå®å šãªç§»è»¢ããµããŒãããä¿¡é Œã§ãã RPKI ãšéåŒã DNS ãç¶æããæ³ãšè£éãåºå¥ããã¿ã€ã ã©ã€ã³ã枬å®å¯èœã«ããŸããéçªã¯åãæç¶ãã䜿çšããŸãããäŒå¡ãçµæãã¿ã€ã ã©ã€ã³ãææžã«ã€ããŠäžç¢ºå®ãªãŸãŸã«ããŸããå€§èŠæš¡äºæ¥è ã«ãšã£ãŠãäžç¢ºå®æ§ã¯ã³ã¹ããããããŸããå°èŠæš¡äºæ¥è ã«ãšã£ãŠãããã¯åç¶ã®å±æ©ã«ãªãåŸãŸãããããå°èŠæš¡äºæ¥è äŸåã®çµæžåŠã§ãïŒåæ ã§ã¯ãªããæãé ãããã»ã¹ãä»è ã®éè»¢è³æ¬å±æ©ã«ãªãåŸãå¶åºŠãžã®é察称çãªãšã¯ã¹ããŒãžã£ãŒã§ãã

