{"id":32724,"date":"2019-10-31T21:48:35","date_gmt":"2019-10-31T18:48:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\/"},"modified":"2019-10-31T21:48:35","modified_gmt":"2019-10-31T18:48:35","slug":"chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","title":{"rendered":"Co je co a kdo je kdo na trhu ochrany p\u0159ed DDoS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u201eChlapec, kter\u00fd n\u00e1m d\u011blal web, u\u017e nastavil ochranu proti DDoS.\u201c
\n\u201eV\u017edy\u0165 m\u00e1me ochranu p\u0159ed DDoS, pro\u010d se str\u00e1nka zhroutila?\u201c
\n\u201eKolik tis\u00edc chce Qrator?\u201c<\/p>\n

Abychom mohli norm\u00e1ln\u011b odpov\u00eddat na takov\u00e9 ot\u00e1zky od z\u00e1kazn\u00edka\/nad\u0159\u00edzen\u00e9ho, bylo by dobr\u00e9 v\u011bd\u011bt, co se skr\u00fdv\u00e1 za n\u00e1zvem \u201eochrana proti DDoS\u201c. V\u00fdb\u011br ochrann\u00fdch slu\u017eeb v\u00edce p\u0159ipom\u00edn\u00e1 v\u00fdb\u011br l\u00e9ku l\u00e9ka\u0159em ne\u017e v\u00fdb\u011br stolu v IKEA.<\/p>\n

Pracuji na podpo\u0159e web\u016f 11 let, za\u017eil jsem stovky \u00fatok\u016f na slu\u017eby, kter\u00e9 spravuji, a te\u010f trochu pov\u00edm o vnit\u0159n\u00ed kuchyni ochrany.
\n\"Co<\/a><\/noindex>
\nPravideln\u00e9 \u00fatoky. 350 000 po\u017eadavk\u016f celkem, 52 000 po\u017eadavk\u016f legitimn\u00edch.<\/i>
\n<\/a><\/noindex>
\nPrvn\u00ed \u00fatoky se objevily prakticky sou\u010dasn\u011b s internetem. DDoS jako jev se stal masov\u00fdm od konce 2000. let (pod\u00edvejte se na www.cloudflare.com\/learning\/ddos\/famous-ddos-attacks<\/noindex>).
\nOd roku 2015-2016 t\u00e9m\u011b\u0159 v\u0161ichni poskytovatel\u00e9 hostingu p\u0159e\u0161li pod ochranu proti DDoS \u00fatok\u016fm, stejn\u011b jako v\u011bt\u0161ina v\u00fdrazn\u00fdch web\u016f v konkuren\u010dn\u00edch sektorech (ud\u011blejte whois podle IP web\u016f eldorado.ru, leroymerlin.ru, tilda.ws, uvid\u00edte s\u00edt\u011b ochrann\u00fdch oper\u00e1tor\u016f).<\/p>\n

Pokud p\u0159ed 10-20 lety v\u011bt\u0161ina \u00fatok\u016f mohla b\u00fdt odra\u017eena p\u0159\u00edmo na serveru (ocen\u011bte doporu\u010den\u00ed syst\u00e9mov\u00e9ho administr\u00e1tora Lenta.ru Maxima Mo\u0161kova z 90. let: lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10<\/a><\/noindex>), pak jsou dnes \u00fakoly ochrany slo\u017eit\u011bj\u0161\u00ed.<\/p>\n

Druhy DDoS \u00fatok\u016f z pohledu v\u00fdb\u011bru oper\u00e1tora ochrany<\/h2>\n

\u00datoky na \u00farovni L3 \/ L4 (podle modelu OSI)<\/h4>\n

\u2014 UDP flood z botnetu (p\u0159\u00edmo ze zasa\u017een\u00fdch za\u0159\u00edzen\u00ed je na c\u00edlovou slu\u017ebu pos\u00edl\u00e1no mnoho po\u017eadavk\u016f, servery zahlcuj\u00ed kan\u00e1l);
\n \u2014 DNS\/NTP\/atd. amplifikace (ze zasa\u017een\u00fdch za\u0159\u00edzen\u00ed je pos\u00edl\u00e1no mnoho po\u017eadavk\u016f na zraniteln\u00e9 DNS\/NTP\/atd., adresa odes\u00edlatele je podvr\u017eena, mraky paket\u016f s odpov\u011b\u010fmi na po\u017eadavky zahlcuj\u00ed kan\u00e1l toho, kdo je napad\u00e1n; takto prob\u00edhaj\u00ed nejmasivn\u011bj\u0161\u00ed \u00fatoky v sou\u010dasn\u00e9m internetu);
\n \u2014 SYN \/ ACK flood (na c\u00edlov\u00e9 servery je pos\u00edl\u00e1no mnoho po\u017eadavk\u016f na nav\u00e1z\u00e1n\u00ed spojen\u00ed, doch\u00e1z\u00ed k p\u0159ete\u010den\u00ed fronty spojen\u00ed);
\n \u2014 \u00fatoky s fragmentac\u00ed paket\u016f, ping of death, ping flood (pros\u00edm, hledejte);
\n \u2014 atd.<\/p>\n

Tyto \u00fatoky maj\u00ed za c\u00edl \u201ezahlcovat\u201c kan\u00e1l serveru nebo \u201eusmrtit\u201c jeho schopnost p\u0159ij\u00edmat nov\u00fd provoz.
\nA\u010dkoli se SYN\/ACK flood a amplifikace v\u00fdrazn\u011b li\u0161\u00ed, mnoh\u00e9 spole\u010dnosti s nimi bojuj\u00ed p\u0159ibli\u017en\u011b stejn\u011b dob\u0159e. Probl\u00e9my nast\u00e1vaj\u00ed s \u00fatoky z n\u00e1sleduj\u00edc\u00ed skupiny.<\/p>\n

\u00datoky na L7 (\u00farove\u0148 aplikace)<\/h4>\n

\u2014 http flood (pokud je napad\u00e1na webov\u00e1 str\u00e1nka nebo n\u011bjak\u00e9 http API);
\n \u2014 \u00fatok na zraniteln\u00e1 m\u00edsta webu (kter\u00e1 nemaj\u00ed cache, v\u00fdrazn\u011b zat\u011b\u017euj\u00ed server atd.).<\/p>\n

C\u00edlem je p\u0159im\u011bt server \"t\u011b\u017ece pracovat\", zpracov\u00e1vat mnoho \"zd\u00e1nliv\u011b skute\u010dn\u00fdch \u017e\u00e1dost\u00ed\" a z\u016fstat bez zdroj\u016f pro skute\u010dn\u00e9 \u017e\u00e1dosti.<\/p>\n

I kdy\u017e existuj\u00ed i jin\u00e9 \u00fatoky, tyto jsou nejb\u011b\u017en\u011bj\u0161\u00ed.<\/p>\n

V\u00e1\u017en\u00e9 \u00fatoky na \u00farovni L7 jsou vytv\u00e1\u0159eny unik\u00e1tn\u00edm zp\u016fsobem pro ka\u017ed\u00fd napaden\u00fd projekt.<\/p>\n

Pro\u010d 2 skupiny?<\/b>
\nProto\u017ee existuje mnoho t\u011bch, kte\u0159\u00ed dok\u00e1\u017e\u00ed dob\u0159e odr\u00e1\u017eet \u00fatoky na \u00farovni L3 \/ L4, ale bu\u010f se v\u016fbec nezab\u00fdvaj\u00ed ochranou na \u00farovni aplikace (L7), nebo si s nimi zat\u00edm porad\u00ed slab\u011bji ne\u017e alternativy.<\/p>\n

Kdo je kdo na trhu ochrany proti DDoS<\/h2>\n

\n(m\u016fj osobn\u00ed pohled)<\/p>\n

Ochrana na \u00farovni L3\/L4<\/h4>\n

K odr\u00e1\u017een\u00ed \u00fatok\u016f s amplifikac\u00ed (\"poh\u0159ben\u00ed\" kan\u00e1lu serveru) sta\u010d\u00ed \u0161irok\u00e9 kan\u00e1ly (mnoho z ochrann\u00fdch slu\u017eeb se p\u0159ipojuje k v\u011bt\u0161in\u011b velk\u00fdch p\u00e1te\u0159n\u00edch poskytovatel\u016f v \u010cesku a m\u00e1 kan\u00e1ly s teoretickou kapacitou p\u0159es 1 Tbit). Nezapom\u00ednejme, \u017ee velmi vz\u00e1cn\u00e9 \u00fatoky s amplifikac\u00ed trvaj\u00ed d\u00e9le ne\u017e hodinu. Pokud jste Spamhaus a nikdo v\u00e1s nem\u00e1 r\u00e1d \u2014 ano, mohou se sna\u017eit polo\u017eit kan\u00e1ly na n\u011bkolik dn\u00ed, i s rizikem pro dal\u0161\u00ed p\u0159e\u017eit\u00ed pou\u017e\u00edvan\u00e9ho sv\u011btov\u00e9ho botnetu. Pokud m\u00e1te jen internetov\u00fd obchod, i kdy\u017e to je mvideo.ru \u2014 1 Tbit b\u011bhem n\u011bkolika dn\u00ed nevid\u00edte velmi brzy (douf\u00e1m).<\/p>\n

K odr\u00e1\u017een\u00ed \u00fatok\u016f s SYN\/ACK floodem, fragmentac\u00ed paket\u016f atd. je t\u0159eba hardwarov\u00e9 nebo softwarov\u00e9 syst\u00e9my pro detekci a od\u0159ez\u00e1v\u00e1n\u00ed takov\u00fdch \u00fatok\u016f.
\nTakov\u00e9 za\u0159\u00edzen\u00ed vyr\u00e1b\u00ed mnoho (Arbor, existuj\u00ed \u0159e\u0161en\u00ed od Cisco, Huawei, softwarov\u00e9 implementace od Wanguard atd.), mnoho p\u00e1te\u0159n\u00edch oper\u00e1tor\u016f ji\u017e takov\u00e9 za\u0159\u00edzen\u00ed nainstalovalo a prod\u00e1v\u00e1 slu\u017eby ochrany proti DDoS (v\u00edm o instalac\u00edch od Rostelekom, MegaFon, TTK, MTS, v podstat\u011b u v\u0161ech velk\u00fdch poskytovatel\u016f, to d\u011blaj\u00ed i hostitel\u00e9 se svou ochranou a-la OVH.com, Hetzner.de, s ochrannou v ihor.ru jsem se s\u00e1m setkal). N\u011bkter\u00e9 firmy vyv\u00edjej\u00ed sv\u00e1 softwarov\u00e1 \u0159e\u0161en\u00ed (technologie jako DPDK umo\u017e\u0148uj\u00ed zpracov\u00e1vat provoz des\u00edtkami gigabit\u016f na jednom fyzick\u00e9m x86 stroji).<\/p>\n

Mezi zn\u00e1m\u00fdmi poskytovateli jsou v\u0161ichni schopn\u00ed pom\u011brn\u011b efektivn\u011b zvl\u00e1dat L3\/L4 DDoS \u00fatoky. Nyn\u00ed ne\u0159eknu, kdo m\u00e1 nejvy\u0161\u0161\u00ed maxim\u00e1ln\u00ed kapacitu kan\u00e1lu (to jsou neve\u0159ejn\u00e9 informace), ale obvykle to nen\u00ed tak d\u016fle\u017eit\u00e9 a rozd\u00edl je pouze v tom, jak rychle ochrana zas\u00e1hne (okam\u017eit\u011b nebo b\u011bhem n\u011bkolika minut v\u00fdpadku projektu, jako v p\u0159\u00edpad\u011b Hetzner).
\nOt\u00e1zka je, jak kvalitn\u011b se to prov\u00e1d\u00ed: \u00fatok s amplifikac\u00ed lze odr\u00e1\u017eet blokov\u00e1n\u00edm provozu ze zem\u00ed s nejv\u011bt\u0161\u00edm mno\u017estv\u00edm \u0161kodliv\u00e9ho provozu, nebo je mo\u017en\u00e9 pouze odstran\u011bn\u00ed skute\u010dn\u011b nadbyte\u010dn\u00e9ho provozu.
\nNa z\u00e1klad\u011b m\u00e9 zku\u0161enosti v\u0161ak v\u0161echny v\u00e1\u017en\u00e9 subjekty na trhu s t\u00edmto nemaj\u00ed probl\u00e9my: Qrator, DDoS-Guard, Kaspersky, G-Core Labs (d\u0159\u00edve SkyParkCDN), ServicePipe, Stormwall, Voxility atd.
\nS ochranou od oper\u00e1tor\u016f jako Rostelecom, Megafon, TTK, Beeline jsem se nesetkal, podle recenz\u00ed koleg\u016f tyto slu\u017eby poskytuj\u00ed pom\u011brn\u011b kvalitn\u011b, ale zat\u00edm se ob\u010das projevuje nedostatek zku\u0161enost\u00ed: n\u011bkdy je pot\u0159eba n\u011bco doladit prost\u0159ednictv\u00edm podpory oper\u00e1tora ochrany.
\nN\u011bkte\u0159\u00ed oper\u00e1to\u0159i nab\u00edzej\u00ed samostatnou slu\u017ebu \"ochrany p\u0159ed \u00fatoky na \u00farovni L3\/L4\" nebo \"ochrana kan\u00e1l\u016f\", ta stoj\u00ed mnohem m\u00e9n\u011b ne\u017e ochrana na v\u0161ech \u00farovn\u00edch.<\/p>\n

Jak dok\u00e1\u017ee nebodyslu\u017eebn\u00ed poskytovatel odr\u00e1\u017eet \u00fatoky o st\u011bn\u00e1ch Gbps, v\u017edy\u0165 nem\u00e1 vlastn\u00ed kan\u00e1ly?<\/b>Ochrann\u00fd oper\u00e1tor se m\u016f\u017ee p\u0159ipojit k jak\u00e9mukoli z velk\u00fdch poskytovatel\u016f a odr\u00e1\u017eet \u00fatoky \u201ena jeho n\u00e1klady\u201c. Za kan\u00e1l se bude muset platit, ale ne v\u0161echny tyto stovky Gbps budou v\u017edy vyu\u017e\u00edv\u00e1ny, existuj\u00ed mo\u017enosti zna\u010dn\u00e9ho sn\u00ed\u017een\u00ed n\u00e1klad\u016f na kan\u00e1ly v tomto p\u0159\u00edpad\u011b, tak\u017ee sch\u00e9ma z\u016fst\u00e1v\u00e1 funk\u010dn\u00ed.
\n\"Co<\/a><\/noindex>
\nPravideln\u011b jsem obdr\u017eel takov\u00e9 zpr\u00e1vy z vy\u0161\u0161\u00ed \u00farovn\u011b L3\/L4 ochrany p\u0159i podpo\u0159e syst\u00e9mu hostingov\u00e9ho poskytovatele.<\/i><\/p>\n

Ochrana na \u00farovni L7 (\u00farove\u0148 aplikace)<\/h4>\n

\u00datoky na \u00farovni L7 (\u00farove\u0148 aplikace) dok\u00e1\u017eou stabiln\u011b a kvalitn\u011b odr\u00e1\u017eet jen jednotlivce.
\nM\u00e1m dostate\u010dn\u011b velk\u00e9 zku\u0161enosti s
\n \u2014 Qrator.net;
\n \u2014 DDoS-Guard;
\n \u2014 G-Core Labs;
\n \u2014 Kaspersky.<\/p>\n

Oni si \u00fa\u010dtuj\u00ed poplatek za ka\u017ed\u00fd megabit \u010dist\u00e9ho provozu, megabit stoj\u00ed kolem n\u011bkolika tis\u00edc rubl\u016f. Pokud m\u00e1te alespo\u0148 100 Mbit \u010dist\u00e9ho provozu \u2014 to je probl\u00e9m. Ochrana bude velmi drah\u00e1. Mohu v dal\u0161\u00edch \u010dl\u00e1nc\u00edch \u0159\u00edci, jak navrhnout aplikace, aby se na kapacit\u011b ochrann\u00fdch kan\u00e1l\u016f u\u0161et\u0159ilo zna\u010dn\u011b.
\nSkute\u010dn\u00fd 'kr\u00e1l hory' \u2014 Qrator.net, ostatn\u00ed za nimi zaost\u00e1vaj\u00ed. Qrator jsou zat\u00edm jedin\u00ed v m\u00e9 praxi, kdo poskytuje t\u00e9m\u011b\u0159 nulov\u00e9 procento fale\u0161n\u00fdch poplach\u016f, ale jsou n\u011bkolikr\u00e1t dra\u017e\u0161\u00ed ne\u017e ostatn\u00ed hr\u00e1\u010di na trhu.<\/p>\n

I ostatn\u00ed oper\u00e1to\u0159i nab\u00edzej\u00ed kvalitn\u00ed a stabiln\u00ed ochranu. Mnoho slu\u017eeb, kter\u00e9 podporujeme (v\u010detn\u011b velmi zn\u00e1m\u00fdch v zemi!), je chr\u00e1n\u011bno DDoS-Guard, G-Core Labs a jsou s dosa\u017een\u00fdmi v\u00fdsledky zcela spokojeni.
\n\"Co<\/a><\/noindex>
\n\u00datoky odra\u017een\u00e9 Qrator<\/i><\/p>\n

M\u00e1m tak\u00e9 zku\u0161enosti s men\u0161\u00edmi ochrann\u00fdmi oper\u00e1tory jako cloud-shield.ru, ddosa.net, je jich tis\u00edce. Rozhodn\u011b je doporu\u010dovat nebudu, proto\u017ee zku\u0161enosti nejsou velk\u00e9, pov\u00edm v\u00e1m o principech jejich \u010dinnosti. N\u00e1klady na ochranu u nich b\u00fdvaj\u00ed \u010dasto o 1-2 \u0159\u00e1dy ni\u017e\u0161\u00ed ne\u017e u velk\u00fdch hr\u00e1\u010d\u016f. V\u011bt\u0161inou kupuj\u00ed slu\u017ebu \u010d\u00e1ste\u010dn\u00e9 ochrany (L3\/L4) od n\u011bkoho z v\u011bt\u0161\u00edch hr\u00e1\u010d\u016f a d\u011blaj\u00ed vlastn\u00ed ochranu proti \u00fatok\u016fm na vy\u0161\u0161\u00edch \u00farovn\u00edch. To m\u016f\u017ee b\u00fdt docela efektivn\u00ed + m\u016f\u017eete dostat dobrou slu\u017ebu za m\u00e9n\u011b pen\u011bz, ale st\u00e1le se jedn\u00e1 o mal\u00e9 firmy s mal\u00fdm person\u00e1lem, pros\u00edm, vezm\u011bte to v \u00favahu.<\/p>\n

V \u010dem spo\u010d\u00edv\u00e1 slo\u017eitost odr\u00e1\u017een\u00ed \u00fatok\u016f na \u00farovni L7?<\/h4>\n

V\u0161echny aplikace jsou jedine\u010dn\u00e9 a je t\u0159eba povolit pro n\u011b u\u017eite\u010dn\u00fd provoz a blokovat \u0161kodliv\u00fd. Jednozna\u010dn\u011b se ne v\u017edy poda\u0159\u00ed odfiltrovat boty, proto je t\u0159eba pou\u017e\u00edt mnoho, skute\u010dn\u011b MNOHO stup\u0148\u016f \u010di\u0161t\u011bn\u00ed provozu.<\/p>\n

Kdysi sta\u010dil modul nginx-testcookie (https:\/\/github.com\/kyprizel\/testcookie-nginx-module<\/a><\/noindex>), a ten st\u00e1le sta\u010d\u00ed k odra\u017een\u00ed velk\u00e9ho mno\u017estv\u00ed \u00fatok\u016f. Kdy\u017e jsem pracoval v hostingov\u00e9m pr\u016fmyslu, L7 ochranu jsem budoval pr\u00e1v\u011b na nginx-testcookie.
\nBohu\u017eel, \u00fatoky se staly slo\u017eit\u011bj\u0161\u00edmi. testcookie pou\u017e\u00edv\u00e1 kontroly bot\u016f na z\u00e1klad\u011b JS, a mnoh\u00e9 modern\u00ed boty je um\u00ed \u00fasp\u011b\u0161n\u011b proj\u00edt.<\/p>\n

\u00dato\u010dn\u00e9 botnety jsou tak\u00e9 jedine\u010dn\u00e9 a je t\u0159eba zohlednit specifika ka\u017ed\u00e9ho velk\u00e9ho botnetu.
\nAmplitudace, p\u0159\u00edm\u00fd flood z botnetu, filtrov\u00e1n\u00ed provozu z r\u016fzn\u00fdch zem\u00ed (r\u016fzn\u00e9 filtrov\u00e1n\u00ed pro r\u016fzn\u00e9 zem\u011b), SYN\/ACK flood, fragmentace paket\u016f, ICMP, http flood, p\u0159i\u010dem\u017e na \u00farovni aplikace\/http lze vym\u00fd\u0161let neomezen\u00fd po\u010det r\u016fzn\u00fdch \u00fatok\u016f.
\nCelkov\u011b na \u00farovni ochrany kan\u00e1l\u016f, specializovan\u00e9ho vybaven\u00ed pro \u010di\u0161t\u011bn\u00ed provozu, speci\u00e1ln\u00edho softwaru a dal\u0161\u00edch nastaven\u00ed filtrov\u00e1n\u00ed pro ka\u017ed\u00e9ho klienta m\u016f\u017ee b\u00fdt des\u00edtky a stovky \u00farovn\u00ed filtrov\u00e1n\u00ed.
\nAby spr\u00e1vn\u011b \u0159e\u0161it tento probl\u00e9m a spr\u00e1vn\u011b ladit nastaven\u00ed filtrace pro r\u016fzn\u00e9 u\u017eivatele, je pot\u0159eba velk\u00e1 zku\u0161enost a kvalifikovan\u00ed pracovn\u00edci. Ani velk\u00fd oper\u00e1tor, kter\u00fd se rozhodne poskytovat slu\u017eby ochrany, nem\u016f\u017ee \"hloup\u011b h\u00e1zet pen\u00edze na probl\u00e9m\": zku\u0161enosti je t\u0159eba z\u00edsk\u00e1vat na le\u017e\u00edc\u00edch webech a fale\u0161n\u00fdch aktivac\u00edch na legitimn\u00edm trafficu.
\nPro oper\u00e1tora ochrany neexistuje tla\u010d\u00edtko \"odv\u00e9st DDoS\", ale je na v\u00fdb\u011br z mnoha n\u00e1stroj\u016f, kter\u00e9 je t\u0159eba um\u011bt spr\u00e1vn\u011b vyu\u017e\u00edvat.<\/p>\n

A je\u0161t\u011b jeden bonusov\u00fd p\u0159\u00edklad.
\n\"Co<\/a><\/noindex>
\nServer bez ochrany byl zablokov\u00e1n hostitelem p\u0159i \u00fatoku o kapacit\u011b 600 Mbit.<\/i>
\n(\"Ztr\u00e1ta\" trafficu nen\u00ed patrn\u00e1, proto\u017ee byl napaden pouze jeden web, ten byl na chv\u00edli ze serveru odstran\u011bn a blokace byla zru\u0161ena do hodiny).<\/i>
\n\"Co<\/a><\/noindex>
\nTent\u00fd\u017e server je pod ochranou. \u00dato\u010dn\u00edci se \"vzali\" po 24 hodin\u00e1ch odra\u017een\u00fdch \u00fatok\u016f. Samotn\u00fd \u00fatok se uk\u00e1zal b\u00fdt ne nejsiln\u011bj\u0161\u00ed.<\/i><\/p>\n

\u00datoky a ochrana L3\/L4 jsou v\u00edce trivi\u00e1ln\u00ed, z\u00e1vis\u00ed hlavn\u011b na \u0161\u00ed\u0159ce kan\u00e1l\u016f, algoritmech detekce a filtraci \u00fatok\u016f.
\n\u00datoky L7 jsou slo\u017eit\u011bj\u0161\u00ed a origin\u00e1ln\u011bj\u0161\u00ed, z\u00e1vis\u00ed na napaden\u00e9 aplikaci, schopnostech a fantazii \u00fato\u010dn\u00edk\u016f. Ochrana p\u0159ed nimi vy\u017eaduje velk\u00e9 znalosti a zku\u0161enosti, p\u0159i\u010dem\u017e v\u00fdsledek nemus\u00ed b\u00fdt okam\u017eit\u00fd a ne v\u017edy stoprocentn\u00ed. Dokud Google nevymysl\u00ed dal\u0161\u00ed neuronovou s\u00ed\u0165 pro ochranu.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32724","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Co je co a kdo je kdo na trhu ochrany proti DDoS | ProHoster","description":"\"Chlapec, kter\u00fd n\u00e1m d\u011blal web, u\u017e nastavil ochranu proti DDoS.\" \"M\u011bli jsme ochranu proti DDoS, pro\u010d web spadl?\" \"Kolik tis\u00edc chce Qrator?\" Abychom mohli po\u0159\u00e1dn\u011b odpov\u011bd\u011bt na takov\u00e9 ot\u00e1zky.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster","og:description":"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:35+00:00","article:modified_time":"2019-10-31T18:48:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 12:16:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:53:25","updated":"2026-01-21 12:16:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/32724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=32724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/32724\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/24508"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=32724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=32724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=32724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}