{"id":33661,"date":"2019-10-31T21:54:01","date_gmt":"2019-10-31T18:54:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii\/"},"modified":"2019-10-31T21:54:01","modified_gmt":"2019-10-31T18:54:01","slug":"kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","title":{"rendered":"Jak pochopit, kdy proxy l\u017eou: ov\u011b\u0159ov\u00e1n\u00ed fyzick\u00fdch lokalizac\u00ed s\u00ed\u0165ov\u00fdch proxy pomoc\u00ed algoritmu aktivn\u00ed geolokace","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Jak<\/a><\/noindex><\/p>\n

Lid\u00e9 po cel\u00e9m sv\u011bt\u011b pou\u017e\u00edvaj\u00ed komer\u010dn\u00ed proxy, aby skryli svou skute\u010dnou polohu nebo identitu. To m\u016f\u017ee slou\u017eit k r\u016fzn\u00fdm \u00fa\u010del\u016fm, v\u010detn\u011b p\u0159\u00edstupu k blokovan\u00fdm informac\u00edm nebo zaji\u0161t\u011bn\u00ed soukrom\u00ed. <\/p>\n

Ale jak p\u0159esn\u00ed jsou poskytovatel\u00e9 t\u011bchto proxy, kdy\u017e tvrd\u00ed, \u017ee jejich servery jsou um\u00edst\u011bny v ur\u010dit\u00e9 zemi? To je z\u00e1sadn\u00ed ot\u00e1zka, na kter\u00e9 z\u00e1le\u017e\u00ed, zda mohou ur\u010dit\u00ed klienti, kte\u0159\u00ed se ob\u00e1vaj\u00ed o ochranu osobn\u00edch \u00fadaj\u016f, dan\u00fd slu\u017ebu skute\u010dn\u011b vyu\u017e\u00edvat.<\/p>\n

Skupina americk\u00fdch v\u011bdc\u016f z univerzit Massachusetts, Carnegie Mellon a Stony Brook zve\u0159ejnila studie<\/a><\/noindex>, p\u0159i \u010dem\u017e zkoumali skute\u010dnou polohu server\u016f sedmi popul\u00e1rn\u00edch proxy poskytovatel\u016f. P\u0159ipravili jsme shrnut\u00ed hlavn\u00edch v\u00fdsledk\u016f.<\/a><\/noindex><\/p>\n

\u00davod<\/h2>\n

\nProvozovatel\u00e9 proxy \u010dasto neposkytuj\u00ed \u017e\u00e1dn\u00e9 informace, kter\u00e9 by mohly potvrdit p\u0159esnost jejich tvrzen\u00ed o um\u00edst\u011bn\u00ed server\u016f. Datab\u00e1ze IP-to-location obvykle potvrzuj\u00ed reklamn\u00ed tvrzen\u00ed t\u011bchto spole\u010dnost\u00ed, nicm\u00e9n\u011b existuje mnoho d\u016fkaz\u016f o chyb\u00e1ch v t\u011bchto datab\u00e1z\u00edch.<\/p>\n

V r\u00e1mci v\u00fdzkumu ameri\u010dt\u00ed v\u011bdci hodnotili polohu 2269 proxy server\u016f, kter\u00e9 spravuje sedm proxy spole\u010dnost\u00ed a jsou um\u00edst\u011bny ve 222 zem\u00edch a teritori\u00edch. Anal\u00fdza uk\u00e1zala, \u017ee minim\u00e1ln\u011b t\u0159etina v\u0161ech server\u016f nen\u00ed v zem\u00edch, kter\u00e9 spole\u010dnosti uv\u00e1d\u011bj\u00ed ve sv\u00fdch marketingov\u00fdch materi\u00e1lech. M\u00edsto toho se nach\u00e1zej\u00ed v zem\u00edch s levn\u00fdm a spolehliv\u00fdm hostingem: v \u010cesku, N\u011bmecku, Nizozemsku, Velk\u00e9 Brit\u00e1nii a USA.<\/p>\n

Anal\u00fdza um\u00edst\u011bn\u00ed server\u016f<\/h2>\n

\nKomer\u010dn\u00ed poskytovatel\u00e9 VPN a proxy mohou ovlivnit p\u0159esnost datab\u00e1z\u00ed IP-to-location \u2013 spole\u010dnosti maj\u00ed mo\u017enost manipulovat, nap\u0159\u00edklad k\u00f3dy lokalit v n\u00e1zvech router\u016f. V\u00fdsledkem jsou marketingov\u00e9 materi\u00e1ly, kter\u00e9 mohou uv\u00e1d\u011bt velk\u00e9 mno\u017estv\u00ed dostupn\u00fdch lokalit pro u\u017eivatele, zat\u00edmco ve skute\u010dnosti, aby u\u0161et\u0159ily n\u00e1klady a zv\u00fd\u0161ily spolehlivost, jsou servery fyzicky um\u00edst\u011bny v mal\u00e9m po\u010dtu zem\u00ed, a\u010dkoli datab\u00e1ze IP-to-location tvrd\u00ed opak.<\/p>\n

Pro ov\u011b\u0159en\u00ed skute\u010dn\u00e9 polohy server\u016f v\u00fdzkumn\u00edci pou\u017eili algoritmus aktivn\u00ed geolokace. Ten hodnotil roundtrip paketu, kter\u00fd byl odesl\u00e1n k serveru a dal\u0161\u00edm zn\u00e1m\u00fdm hostitel\u016fm na internetu. <\/p>\n

P\u0159itom na pingu odpov\u00eddalo m\u00e9n\u011b ne\u017e 10 % testovan\u00fdch proxy, a spustit jak\u00fdkoliv software pro m\u011b\u0159en\u00ed na samotn\u00e9m serveru z jasn\u00e9ho d\u016fvodu v\u011bdci nemohli. M\u011bli pouze mo\u017enost odes\u00edlat pakety p\u0159es proxy, tak\u017ee roundtrip do jak\u00e9hokoliv bodu v prostoru p\u0159edstavuje sou\u010det \u010dasu, b\u011bhem kter\u00e9ho paket dojde od testovac\u00edho hostitele k proxy a od proxy k adres\u00e1tu.<\/p>\n

\"Jak
\n
\nV pr\u016fb\u011bhu v\u00fdzkumu byl vyvinut specializovan\u00fd software zalo\u017een\u00fd na \u010dty\u0159ech algoritmech aktivn\u00ed geolokace: CBG, Octant, Spotter a hybridn\u00ed Octant\/Spotter. K\u00f3d \u0159e\u0161en\u00ed je dostupn\u00e1<\/a><\/noindex> na GitHubu.<\/p>\n

Jeliko\u017e se nedalo spolehnout na datab\u00e1ze IP-to-location, v\u00fdzkumn\u00edci pro experimenty pou\u017eili seznam kotvic\u00edch hostitel\u016f RIPE Atlas \u2013 informace v t\u00e9to datab\u00e1zi jsou dostupn\u00e9 online, neust\u00e1le se aktualizuj\u00ed a zdokumentovan\u00e9 lokace jsou spr\u00e1vn\u00e9. V\u00edce ne\u017e to, hostitel\u00e9 ze seznamu si navz\u00e1jem neust\u00e1le pos\u00edlaj\u00ed ping sign\u00e1ly a aktualizuj\u00ed \u00fadaje o roundtrip v ve\u0159ejn\u00e9 datab\u00e1zi.<\/p>\n

Vyvinut\u00e9 v\u011bdeck\u00fdmi \u0159e\u0161en\u00edmi p\u0159edstavuje webov\u00e1 aplikace, kter\u00e1 vytv\u00e1\u0159\u00ed zabezpe\u010den\u00e9 (HTTPS) TCP p\u0159ipojen\u00ed p\u0159es nezabezpe\u010den\u00fd port HTTP 80. Pokud server tento port neposlouch\u00e1, dojde po jednom po\u017eadavku k poru\u0161e. Pokud v\u0161ak server tento port poslouch\u00e1, prohl\u00ed\u017ee\u010d obdr\u017e\u00ed SYN-ACK odpov\u011b\u010f s paketem TLS ClientHello. To vyvol\u00e1 chybu protokolu, a prohl\u00ed\u017ee\u010d zobraz\u00ed chybu, ale teprve po druh\u00e9m roundtripu. <\/p>\n

\"Jak
\n
\nT\u00edmto zp\u016fsobem m\u016f\u017ee webov\u00e1 aplikace zm\u011b\u0159it \u010das jednoho nebo dvou roundtrip\u016f. Podobn\u00e1 slu\u017eba byla realizov\u00e1na ve form\u011b programu spou\u0161t\u011bn\u00e9ho z p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku.<\/p>\n

\u017d\u00e1dn\u00fd z testovan\u00fdch poskytovatel\u016f neuv\u00e1d\u00ed p\u0159esn\u00e9 um\u00edst\u011bn\u00ed sv\u00fdch proxy server\u016f. V nejlep\u0161\u00edm p\u0159\u00edpad\u011b se zmi\u0148uj\u00ed o m\u011bstech, ale \u010dast\u011bji je k dispozici pouze informace o zemi. I kdy\u017e se m\u011bsto zmi\u0148uje, mohou nastat p\u0159\u00edpady \u2013 nap\u0159\u00edklad v\u00fdzkumn\u00edci zkoumali konfigura\u010dn\u00ed soubor jednoho ze server\u016f nazvan\u00e9ho usa.new-york-city.cfg, kter\u00fd obsahoval pokyny pro p\u0159ipojen\u00ed k serveru nazvan\u00e9mu chicago.vpn-provider.example. Tak\u017ee je mo\u017eno s ur\u010ditou p\u0159esnost\u00ed potvrdit pouze p\u0159\u00edslu\u0161nost serveru k konkr\u00e9tn\u00ed zemi.<\/p>\n

V\u00fdsledky<\/h2>\n

\nNa z\u00e1klad\u011b test\u016f pomoc\u00ed algoritmu aktivn\u00ed geolokace se v\u00fdzkumn\u00edk\u016fm poda\u0159ilo potvrdit um\u00edst\u011bn\u00ed 989 z 2269 IP adres. V p\u0159\u00edpad\u011b 642 se to nepoda\u0159ilo, a 638 se ur\u010dit\u011b nach\u00e1z\u00ed mimo tu zemi, kde by m\u011bly b\u00fdt podle uji\u0161t\u011bn\u00ed proxy slu\u017eeb. V\u00edce ne\u017e 400 z t\u011bchto fale\u0161n\u00fdch adres se ve skute\u010dnosti nach\u00e1z\u00ed na jednom kontinentu se vyhl\u00e1\u0161enou zem\u00ed. <\/p>\n

\"Jak<\/a><\/noindex><\/p>\n

Spr\u00e1vn\u00e9 adresy se nach\u00e1zej\u00ed v zem\u00edch, kter\u00e9 se nej\u010dast\u011bji pou\u017e\u00edvaj\u00ed k um\u00edst\u011bn\u00ed server\u016f (po kliknut\u00ed se obr\u00e1zek otev\u0159e v pln\u00e9 velikosti)<\/i><\/p>\n

Podez\u0159el\u00e9 hosty bylo mo\u017en\u00e9 nal\u00e9zt u ka\u017ed\u00e9ho ze sedmi testovan\u00fdch poskytovatel\u016f. V\u00fdzkumn\u00edci po\u017e\u00e1dali spole\u010dnosti o koment\u00e1\u0159e, ale v\u0161echny se odm\u00edtly vyj\u00e1d\u0159it.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u044e\u0434\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u0432\u043e\u0435 \u0438\u0441\u0442\u0438\u043d\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041d\u043e \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0433\u0434\u0430 \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435? \u042d\u0442\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441, \u043e\u0442 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25350,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33661","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak poznat, kdy proxy l\u017eou: verifikace fyzick\u00fdch lokalizac\u00ed s\u00ed\u0165ov\u00fdch proxy pomoc\u00ed algoritmu aktivn\u00ed geolokace | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u043a\u0441\u0438 \u043b\u0433\u0443\u0442: \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u043e\u043a\u0430\u0446\u0438\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:01+00:00","article:modified_time":"2019-10-31T18:54:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33661","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:35:32","updated":"2026-01-21 16:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=33661"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33661\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/25350"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=33661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=33661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=33661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}