{"id":35939,"date":"2019-10-31T22:07:41","date_gmt":"2019-10-31T19:07:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-my-probivali-velikij-kitajskij-faervol-ch-1\/"},"modified":"2019-10-31T22:07:41","modified_gmt":"2019-10-31T19:07:41","slug":"kak-my-probivali-velikij-kitajskij-faervol-ch-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-1","title":{"rendered":"Jak jsme p\u0159ekonali Velk\u00fd \u010d\u00ednsk\u00fd firewall (\u010d. 1)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ahoj v\u0161ichni!<\/p>\n<p><\/p>\n<p>Na spojen\u00ed Nikita \u2014 syst\u00e9mov\u00fd in\u017een\u00fdr z firmy <strong>SEMrush<\/strong>. Dnes v\u00e1m pov\u00edm, jak jsme \u010delili \u00fakolu zajistit stabilitu na\u0161ich slu\u017eeb semrush.com v \u010c\u00edn\u011b a jak\u00e9 probl\u00e9my jsme p\u0159i pln\u011bn\u00ed tohoto \u00fakolu za\u017eili (vzhledem k um\u00edst\u011bn\u00ed na\u0161eho datov\u00e9ho centra na v\u00fdchodn\u00edm pob\u0159e\u017e\u00ed USA).<\/p>\n<p><\/p>\n<p>Bude to velk\u00fd p\u0159\u00edb\u011bh rozd\u011blen\u00fd do n\u011bkolika \u010dl\u00e1nk\u016f. \u0158eknu, jak to v\u0161echno prob\u00edhalo u n\u00e1s: od zcela nefunk\u010dn\u00ed slu\u017eby v \u010c\u00edn\u011b a\u017e po \u00farove\u0148 v\u00fdkonu slu\u017eby na \u00farovni jej\u00ed americk\u00e9 verze pro Ameri\u010dany. Slibuji, \u017ee to bude zaj\u00edmav\u00e9 a u\u017eite\u010dn\u00e9. Tak\u017ee, jdeme na to.<\/p>\n<p><\/p>\n<h2 id=\"problemy-kitayskogo-interneta\">Probl\u00e9my \u010d\u00ednsk\u00e9ho internetu<\/h2>\n<p><\/p>\n<p>I ten nejvzd\u00e1len\u011bj\u0161\u00ed \u010dlov\u011bk od specifik s\u00edtov\u00e9 administrace aspo\u0148 jednou sly\u0161el o <strong>Velk\u00e9m \u010d\u00ednsk\u00e9m firewallu<\/strong>. Uu, zn\u00ed to skv\u011ble, \u017ee? Ale co to je, jak to vlastn\u011b funguje \u2014 to je docela slo\u017eit\u00e1 ot\u00e1zka. Na internetu je mo\u017en\u00e9 naj\u00edt spoustu \u010dl\u00e1nk\u016f v\u011bnovan\u00fdch tomuto t\u00e9matu, ale z technick\u00e9ho hlediska je za\u0159\u00edzen\u00ed tohoto firewallu nikde pops\u00e1no. Co\u017e nen\u00ed p\u0159ekvapuj\u00edc\u00ed. P\u0159izn\u00e1m se hned, po roce pr\u00e1ce nebudu moct p\u0159esn\u011b \u0159\u00edct, jak funguje, ale mohu vypr\u00e1v\u011bt o sv\u00fdch pozorov\u00e1n\u00edch a praktick\u00fdch z\u00e1v\u011brech. A za\u010dneme se spekulacemi o tomto firewallu.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Existuje spousta spekulac\u00ed o tomto firewallu. Poj\u010fme shrom\u00e1\u017edit ty nejz\u00e1sadn\u011bj\u0161\u00ed a nejzaj\u00edmav\u011bj\u0161\u00ed do jednoho seznamu:<\/p>\n<p><\/p>\n<ul>\n<li>Google, Facebook, Twitter a dal\u0161\u00ed podobn\u00e9 slu\u017eby jsou zablokov\u00e1ny a nefunguj\u00ed v \u010c\u00edn\u011b.<\/li>\n<li>Jak\u00fdkoli provoz, kter\u00fd jde MIMO \u010c\u00ednu a DO \u010c\u00edny, je analyzov\u00e1n a omezen pomoc\u00ed strojov\u00e9ho u\u010den\u00ed (v p\u0159\u00edpad\u011b podez\u0159el\u00e9ho provozu), co\u017e v\u00fdrazn\u011b zpomaluje jeho (provoz), kdy\u017e proch\u00e1z\u00ed hranic\u00ed.<\/li>\n<li>\u010c\u00ednsk\u00e9 tajn\u00e9 slu\u017eby rozbij\u00ed jak\u00fdkoli \u0161ifrovan\u00fd provoz, kter\u00fd proch\u00e1z\u00ed jejich firewallem.<\/li>\n<li>VPN tunely, IPSEC tunely jsou nestabiln\u00ed, padaj\u00ed a neust\u00e1le se blokuj\u00ed.<\/li>\n<li>\u010c\u00edm jednodu\u0161\u0161\u00ed \u0161ifrov\u00e1n\u00ed, t\u00edm jednodu\u0161\u0161\u00ed pass phrase pou\u017e\u00edvan\u00e1 pro autentikaci\/\u0161ifrov\u00e1n\u00ed provozu, t\u00edm rychleji proch\u00e1z\u00ed \u010d\u00ednsk\u00fdm firewallem.<\/li>\n<\/ul>\n<p><\/p>\n<p>To je to, co se n\u00e1m poda\u0159ilo zjistit o t\u011bchto spekulac\u00edch:<\/p>\n<p><\/p>\n<ul>\n<li>Google, Facebook, Twitter a dal\u0161\u00ed podobn\u00e9 slu\u017eby jsou skute\u010dn\u011b zablokovan\u00e9 (v\u00e1\u0161 K.O.), ale mnoho technick\u00fdch dom\u00e9n Google, nap\u0159\u00edklad, nen\u00ed zak\u00e1z\u00e1no a funguje (t\u0159eba gstatic.com). Odtud vypl\u00fdv\u00e1 z\u00e1v\u011br: nen\u00ed t\u0159eba bez rozmyslu likvidovat v\u0161echny Google a jin\u00e9, zd\u00e1nliv\u011b zablokovan\u00e9, zdroje.<\/li>\n<li>Jak\u00fdkoliv provoz, kter\u00fd p\u0159ech\u00e1z\u00ed hranici, skute\u010dn\u011b p\u0159id\u00e1v\u00e1 k \u010dasu zna\u010dn\u00fd delay. Pod\u00edvejte se na dva v\u00fdsledky. Jedna str\u00e1nka, jeden web, jednoduch\u00fd GET. <em>curl<\/em>Prvn\u00ed m\u011b\u0159en\u00ed z \u010c\u00edny (kr\u00e1sn\u00e9 m\u011bsto \u0160en-\u010den). Druh\u00e9 m\u011b\u0159en\u00ed zven\u010d\u00ed z Hongkongu (m\u00e1 suverenitu a mezi n\u00edm a sv\u011btem nen\u00ed firewall). Vzd\u00e1lenost mezi m\u011bsty je p\u0159\u00edm\u00e1 asi 30-40 km.<\/li>\n<\/ul>\n<p><\/p>\n<pre><code class=\"bash\">nikita@china-shenzhen:~# curl -o \/dev\/null -w@curl_time \"https:\/\/www.semrush.com\/info\/ebay.com\"\n  % Celkem    % P\u0159ijato % Xferd  Pr\u016fm\u011brn\u00e1 rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Dload  Upload   Celkem   Str\u00e1veno   Zb\u00fdv\u00e1  Rychlost\n100  381k    0  381k    0     0  71824      0 --:--:--  0:00:05 --:--:-- 82832\ntime_namelookup:  0.004500\ntime_connect:  0.169342\ntime_appconnect:  0.723189\ntime_pretransfer:  0.723499\ntime_redirect:  0.000000\ntime_starttransfer:  1.532912\n----------\ntime_total:  5.443407\n----------\nsize_download:  390968 Bytes\nspeed_download:  71824.000B\/s\n\nnikita@china-hongkong:~# curl -o \/dev\/null -w@curl_time \"https:\/\/www.semrush.com\/info\/ebay.com\"\n  % Celkem    % P\u0159ijato % Xferd  Pr\u016fm\u011brn\u00e1 rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Dload  Upload   Celkem   Str\u00e1veno   Zb\u00fdv\u00e1  Rychlost\n100  319k    0  319k    0     0  2555k      0 --:--:-- --:--:-- --:--:-- 2573k\ntime_namelookup:  0.029366\ntime_connect:  0.030742\ntime_appconnect:  0.047310\ntime_pretransfer:  0.047388\ntime_redirect:  0.000000\ntime_starttransfer:  0.120793\n----------\ntime_total:  0.124871\n----------\nsize_download:  326755 Bytes\nspeed_download:  2616740.000B\/s<\/code><\/pre>\n<p><\/p>\n<p>Vezm\u011bte na v\u011bdom\u00ed <strong>time_connect<\/strong>. A celkov\u011b vid\u00edte v\u00fdsledek: firewall p\u0159id\u00e1v\u00e1 4 zbyte\u010dn\u00e9 sekundy, co\u017e je ohromn\u011b dlouho.<\/p>\n<p><\/p>\n<ul>\n<li>VPN a IPSEC tunely skute\u010dn\u011b \u010dasto padaj\u00ed. O tom budu hovo\u0159it pozd\u011bji a podrobn\u011bji. VPN servery pou\u017e\u00edvan\u00e9 u\u017eivateli jsou v pr\u016fb\u011bhu \u010dasu blokov\u00e1ny (v\u011bt\u0161inou b\u011bhem jednoho dne po zah\u00e1jen\u00ed pou\u017e\u00edv\u00e1n\u00ed). <\/li>\n<li>Existuje n\u00e1zor, z\u00edskan\u00fd od lid\u00ed \u017eij\u00edc\u00edch v \u010c\u00edn\u011b, \u017ee \u010d\u00edm jednodu\u0161\u0161\u00ed je \u0161ifrov\u00e1n\u00ed provozu, t\u00edm rychleji proch\u00e1z\u00ed hranici, proto\u017ee je snadn\u00e9 pochopit, \u017ee v n\u011bm nen\u00ed nic nez\u00e1konn\u00e9ho. A stejn\u011b tak \u201e\u010dist\u00fd\u201c provoz dost\u00e1v\u00e1 v\u00edce \u0161\u00ed\u0159ky p\u00e1sma a rychlosti, zat\u00edmco \u201e\u0161pinav\u00fd\u201c provoz, ve kter\u00e9m nic nen\u00ed rozli\u0161iteln\u00e9, m\u00e1 naopak pomalej\u0161\u00ed pr\u016fchod. Pro p\u0159\u00edklad uvedu curl do <em>ifconfig.co<\/em> protokolem HTTPS a HTTP. <\/li>\n<\/ul>\n<p><\/p>\n<pre><code class=\"bash\">curl -o \/dev\/null -w@curl_time \"https:\/\/ifconfig.co\/\"\n  % Celkem    % P\u0159ijato % Xferd  Pr\u016fm\u011brn\u00e1 rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Dload  Upload   Celkem   Str\u00e1veno    Zb\u00fdv\u00e1  Rychlost\n100    13  100    13    0     0      2      0  0:00:06  0:00:05  0:00:01     3\ntime_namelookup:  0.004305\ntime_connect:  0.397465\ntime_appconnect:  5.149305\ntime_pretransfer:  5.149393\ntime_redirect:  0.000000\ntime_starttransfer:  5.568847\n----------\ntime_total:  5.568893\n----------\nsize_download:  13 Bytes\nspeed_download:  2.000B\/s\n\ncurl -o \/dev\/null -w@curl_time \"http:\/\/ifconfig.co\/\"\n  % Celkem    % P\u0159ijato % Xferd  Pr\u016fm\u011brn\u00e1 rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Dload  Upload   Celkem   Str\u00e1veno    Zb\u00fdv\u00e1  Rychlost\n100    13  100    13    0     0     28      0 --:--:-- --:--:-- --:--:--    28\ntime_namelookup:  0.004282\ntime_connect:  0.212457\ntime_appconnect:  0.000000\ntime_pretransfer:  0.212484\ntime_redirect:  0.000000\ntime_starttransfer:  0.450565\n----------\ntime_total:  0.450620\n----------\nsize_download:  13 Bytes\nspeed_download:  28.000B\/s<\/code><\/pre>\n<p><\/p>\n<p>Rozd\u00edl 5 sekund v celkov\u00e9m \u010dase na\u010d\u00edt\u00e1n\u00ed 13 bajt\u016f. P\u0159i opakov\u00e1n\u00ed testu lze pozorovat, \u017ee GET na HTTP kon\u010d\u00ed prakticky v\u017edy ve stejn\u00e9m \u010dase, zat\u00edmco u HTTPS str\u00e1nka n\u011bkdy odpov\u00edd\u00e1 za 3, 5, 10 a dokonce 17 sekund. N\u011bkdy se objevuj\u00ed chyby SSL:<\/p>\n<p><\/p>\n<p><code>Nezn\u00e1m\u00e1 chyba SSL protokolu v p\u0159ipojen\u00ed k ifconfig.co:443.<\/code><\/p>\n<p><\/p>\n<p>Tak\u017ee, co m\u00e1me:<\/p>\n<p><\/p>\n<ul>\n<li>Probl\u00e9my, kter\u00e9 zp\u016fsobuje \u010d\u00ednsk\u00e1 firewall, popsan\u00e9 v\u00fd\u0161e.<\/li>\n<li>Pinky do extern\u00edch zdroj\u016f a uvnit\u0159 tunel\u016f ob\u010das ztr\u00e1cej\u00ed spojen\u00ed.<\/li>\n<li>Latence mezi dv\u011bma m\u00edsty se neust\u00e1le m\u011bn\u00ed, \u010dasto je prost\u011b nep\u0159edv\u00eddateln\u00e1. P\u0159i spojov\u00e1n\u00ed r\u016fzn\u00fdch m\u011bst\/region\u016f o\u010dek\u00e1v\u00e1\u0161, \u017ee na z\u00e1klad\u011b geografick\u00e9 polohy region\u016f bude zpo\u017ed\u011bn\u00ed men\u0161\u00ed, ale dost\u00e1v\u00e1\u0161 zcela opa\u010dnou situaci. <\/li>\n<li>Internet a komunika\u010dn\u00ed kan\u00e1ly funguj\u00ed jednou rychle, jednou pomalu. Existuje zde ur\u010dit\u00e1 z\u00e1vislost na denn\u00ed dob\u011b a dni v t\u00fddnu, ale ne v\u017edy.<\/li>\n<li>DNS dotazy do extern\u00edho sv\u011bta z \u010c\u00edny ob\u010das p\u0159ekra\u010duj\u00ed povolen\u00fd timeout.<\/li>\n<\/ul>\n<p><\/p>\n<p>Obraz se r\u00fdsuje jako \"vynikaj\u00edc\u00ed\". <\/p>\n<p><\/p>\n<p>Datov\u00e9 centrum, jak jsem ji\u017e zm\u00ednil, m\u00e1me na v\u00fdchod\u011b USA, a cel\u00fd SEMrush se skl\u00e1d\u00e1 z des\u00edtek vz\u00e1jemn\u011b propojen\u00fdch produkt\u016f, backend\u016f, frontend\u016f, datab\u00e1z\u00ed, a to v\u0161e v datov\u00e9m centru a cloudech. P\u0159ed n\u00e1mi, jako t\u00fdmem syst\u00e9mov\u00fdch administr\u00e1tor\u016f, byla stanovena \u00faloha s mal\u00fdmi n\u00e1roky rychle za\u010d\u00edt pracovat v \u010c\u00edn\u011b.<\/p>\n<p><\/p>\n<p>Museli jsme odpov\u011bd\u011bt na d\u016fle\u017eitou ot\u00e1zku: Je mo\u017en\u00e9 obej\u00edt se s mal\u00fdmi n\u00e1roky a vy\u0159e\u0161it v\u0161echny probl\u00e9my spojen\u00e9 s \u010d\u00ednsk\u00fdm internetem a firewallem na \u00farovni s\u00edt\u011b\/cloud\/server\u016f?<\/p>\n<p><\/p>\n<p>Za\u010dali jsme z\u00edsk\u00e1n\u00edm <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F_ICP\"><strong>ICP<\/strong>-licence<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h2 id=\"icp-licenziya\">ICP-licence<\/h2>\n<p><\/p>\n<p>Abychom mohli um\u00edstit na\u0161i slu\u017ebu v r\u00e1mci \u010c\u00edny (pevninsk\u00e1 \u010c\u00edna) a prov\u00e1d\u011bt testy, mus\u00edme nejprve z\u00edskat ICP-licenci pro dom\u00e9nu.<\/p>\n<p><\/p>\n<p>Pokud je provoz va\u0161eho webu terminov\u00e1n na \u00fazem\u00ed Mainland China a va\u0161e dom\u00e9na nem\u00e1 licenci ICP, bude v\u00e1\u0161 provoz na stran\u011b poskytovatele\/hostingu blokov\u00e1n. Zaj\u00edmav\u00e9 je, \u017ee do ICP licence je zaps\u00e1n konkr\u00e9tn\u00ed poskytovatel, a\u0165 u\u017e je to Cloudflare nebo Alibaba Cloud. Proto, pokud jste z\u00edskali ICP licenci pro Cloudflare a hostovali sv\u016fj web u nich, pozd\u011bji se \u201ebeze\u0161v\u011b\u201c p\u0159em\u00edstit na Alibaba Cloud v\u00e1m nebude mo\u017en\u00e9. Budete muset do t\u00e9to licence p\u0159idat dal\u0161\u00ed hosting.<\/p>\n<p><\/p>\n<p>Z\u00edsk\u00e1n\u00edm ICP licence na dom\u00e9nu jsme byli schopni vym\u00fd\u0161let a realizovat konkr\u00e9tn\u00ed technick\u00e9 n\u00e1pady a \u0159e\u0161en\u00ed.<\/p>\n<p><\/p>\n<h2 id=\"testirovanie-resheniy\">Testov\u00e1n\u00ed \u0159e\u0161en\u00ed<\/h2>\n<p><\/p>\n<p>Ale ne\u017e se pust\u00edme do vytv\u00e1\u0159en\u00ed variant staging\u016f, lad\u011bn\u00ed a optimalizace webu a jeho rychlosti, je t\u0159eba vybrat n\u00e1stroj pro jeho testov\u00e1n\u00ed, abychom vid\u011bli, jak\u00e9 na\u0161e kroky zlep\u0161uj\u00ed nebo naopak zhor\u0161uj\u00ed fungov\u00e1n\u00ed webu.<\/p>\n<p><\/p>\n<p>N\u00e1\u0161 n\u00e1stroj pro testov\u00e1n\u00ed by m\u011bl spl\u0148ovat dv\u011b hlavn\u00ed po\u017eadavky:<\/p>\n<p><\/p>\n<ul>\n<li>mus\u00ed m\u00edt mo\u017enost spou\u0161t\u011bt testy z \u010c\u00edny,<\/li>\n<li>mus\u00ed m\u00edt prohl\u00ed\u017ee\u010dov\u00e9 testy.<\/li>\n<\/ul>\n<p><\/p>\n<p>Tak jsme na\u0161li <noindex><a rel=\"nofollow\" href=\"https:\/\/www.catchpoint.com\/\">Catchpoint<\/a><\/noindex>! Maj\u00ed skv\u011bl\u00e9 pokryt\u00ed testovac\u00edmi body po cel\u00e9m sv\u011bt\u011b. V \u010c\u00edn\u011b lze pomoc\u00ed tohoto n\u00e1stroje spou\u0161t\u011bt testy tak\u00e9 z 100500 provinci\u00ed. V ka\u017ed\u00e9 z nich je n\u011bkolik r\u016fzn\u00fdch poskytovatel\u016f + mo\u017enost prov\u00e1d\u011bt <strong>Backbone<\/strong>-testy (n\u011bco jako virtu\u00e1ln\u00ed stroj v datacentru) a <strong>Lastmile<\/strong>-testy (maxim\u00e1ln\u011b se bl\u00ed\u017e\u00edc\u00ed podm\u00ednk\u00e1m u\u017eivatel\u016f, aka pracovn\u00ed stanice). Posledn\u00ed typ test\u016f je dra\u017e\u0161\u00ed.<\/p>\n<p><\/p>\n<p>Uzav\u0159en\u00edm ro\u010dn\u00ed smlouvy (m\u00e9n\u011b nelze) jsme se pustili do studov\u00e1n\u00ed n\u00e1stroje. P\u0159izn\u00e1m se, \u017ee jsme byli p\u0159\u00edjemn\u011b p\u0159ekvapeni jeho funkcionalitou. Lze spou\u0161t\u011bt:<\/p>\n<p><\/p>\n<ul>\n<li>DNS testy,<\/li>\n<li>Web testy (prohl\u00ed\u017ee\u010dov\u00e9, jednoduch\u00e9 GET\/POST, simulace mobiln\u00edho klienta atd.),<\/li>\n<li>Transak\u010dn\u00ed ov\u011b\u0159en\u00ed (nap\u0159\u00edklad p\u0159ihl\u00e1\u0161en\u00ed),<\/li>\n<li>API testy,<\/li>\n<li>Ping, traceroute, NTP atd.<\/li>\n<\/ul>\n<p><\/p>\n<p>V\u0161echno se ned\u00e1 vyjmenovat. A co je nejd\u016fle\u017eit\u011bj\u0161\u00ed, ka\u017ed\u00fd test lze pom\u011brn\u011b dob\u0159e p\u0159izp\u016fsobit, p\u0159id\u00e1n\u00edm bal\u00ed\u010dku hlavi\u010dek a dal\u0161\u00edch parametr\u016f. V\u00fdsledkem je obrovsk\u00e9 mno\u017estv\u00ed informac\u00ed, kter\u00e9 pln\u011b popisuj\u00ed v\u00e1\u0161 test. Pokud jde o to, co je pro n\u00e1s nejzaj\u00edmav\u011bj\u0161\u00ed (prohl\u00ed\u017ee\u010dov\u00e9 testy), v\u00fdsledek zahrnuje:<\/p>\n<p><\/p>\n<ul>\n<li>Connect, Wait, Load, SSL, DNS time,<\/li>\n<li>TTFB, TTLB, Document complete, Render time, DOM load,<\/li>\n<li>Response (n\u011bco bl\u00edzk\u00e9ho k Time To First Byte), Webpage Response (n\u011bco bl\u00edzk\u00e9ho k Time To Last Byte),<\/li>\n<li>Jak\u00e9koliv percentile, Average, Median time<\/li>\n<li>A tak d\u00e1le.<\/li>\n<\/ul>\n<p><\/p>\n<p>Tyto metriky n\u00e1m skv\u011ble pom\u00e1haj\u00ed vid\u011bt zm\u011bny a pochopit, zda do\u0161lo ke zlep\u0161en\u00ed. V podstat\u011b jsme se zam\u011b\u0159ili na <strong>Response, Webpage Response, Median, 75 a 95 Percentiles<\/strong>. <\/p>\n<p><\/p>\n<p>D\u016fle\u017eit\u00e1 ot\u00e1zka, kter\u00e1 visela ve vzduchu od sam\u00e9ho za\u010d\u00e1tku: <strong>m\u016f\u017eeme v\u011b\u0159it Catchpoint?<\/strong>? \u041e\u0442\u0440\u0430\u0436\u0430\u0435\u0442 \u043b\u0438 \u044d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0430\u0439\u0442\u0430 \u0432 \u041a\u0438\u0442\u0430\u0435 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u0433\u043e\u0440\u043e\u0434\u043e\u0432 \u0438\u043b\u0438 \u0436\u0435 \u044d\u0442\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043a\u0430\u043a\u043e\u0439-\u0442\u043e \u0442\u0435\u0441\u0442 \u0432 \u0432\u0430\u043a\u0443\u0443\u043c\u0435, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043d\u0438\u0447\u0435\u0433\u043e \u043e\u0431\u0449\u0435\u0433\u043e \u0441 real user experience?<br \/>\nTo je velk\u00fd probl\u00e9m, proto\u017ee v Rusku je prakticky nemo\u017en\u00e9 p\u0159esn\u011b zjistit, jak funguj\u00ed webov\u00e9 str\u00e1nky z \u010c\u00edny. P\u0159i pou\u017eit\u00ed socks-proxy na virtu\u00e1ln\u00edm stroji trv\u00e1 na\u010dten\u00ed str\u00e1nky n\u011bkolik minut, co\u017e je pro testov\u00e1n\u00ed naprosto nep\u0159ijateln\u00e9, tak\u017ee jedinou mo\u017enost\u00ed ru\u010dn\u00edho testov\u00e1n\u00ed z\u016fst\u00e1v\u00e1 curl a jednoduch\u00e9 GET z konzole s m\u011b\u0159en\u00edm \u010dasu. Tento test je u\u017eite\u010dn\u00fd, proto\u017ee dobr\u00e9 odr\u00e1\u017e\u00ed rychlost s\u00ed\u0165ov\u00e9ho \u0159e\u0161en\u00ed, a pokud m\u00e1me i prohl\u00ed\u017ee\u010dov\u00e9 testy, je to je\u0161t\u011b lep\u0161\u00ed.<\/p>\n<p><\/p>\n<p>Pozd\u011bji jsme sami cestovali do \u010c\u00edny a ujistili se, \u017ee <strong>Catchpoint m\u016f\u017ee b\u00fdt d\u016fv\u011bryhodn\u00fd, pom\u011brn\u011b p\u0159esn\u011b odr\u00e1\u017e\u00ed skute\u010dn\u00e9 rychlosti.<\/strong><\/p>\n<p><\/p>\n<h2 id=\"cloudflare-china-network\">Cloudflare China Network<\/h2>\n<p><\/p>\n<p>Jeliko\u017e pro hlavn\u00ed dom\u00e9nu semrush.com \u00fasp\u011b\u0161n\u011b pou\u017e\u00edv\u00e1me Cloudflare, rozhodli jsme se okam\u017eit\u011b vyzkou\u0161et jejich funkci zvanou <noindex><a rel=\"nofollow\" href=\"https:\/\/www.cloudflare.com\/network\/china\/\">China Network<\/a><\/noindex>. Tato mo\u017enost je aktivov\u00e1na pouze pro enterprise str\u00e1nky na zvl\u00e1\u0161tn\u00ed \u017e\u00e1dost a za zvl\u00e1\u0161tn\u00ed poplatek. Tak\u00e9 je dostupn\u00e1 pouze pro weby, kter\u00e9 maj\u00ed odpov\u00eddaj\u00edc\u00ed ICP licenci, kde jako poskytovatel je uveden Cloudflare. Po jej\u00edm aktivaci se pro web st\u00e1v\u00e1 dostupn\u00fd \"\u010d\u00ednsk\u00fd CDN\" od Cloudflare - provoz z \u010d\u00ednsk\u00fdch region\u016f je sm\u011brov\u00e1n do nejbli\u017e\u0161\u00edch PoP (Points of Presence) CF, a pot\u00e9 je distribuov\u00e1n jeho s\u00edt\u011bmi nebo s\u00edt\u011bmi poskytovatel\u016f\/partner\u016f k originu. <\/p>\n<p><\/p>\n<p>Sch\u00e9ma tohoto testovac\u00edho st\u00e1nku je uvedeno n\u00ed\u017ee.<\/p>\n<p><\/p>\n<p>Pro n\u00e1s je to skv\u011bl\u00e1 volba. T\u00edmto se druh\u00fd dom\u00e9n bude tak\u00e9 chr\u00e1n\u011bn Cloudflare, co\u017e nezvy\u0161uje po\u010det \u0159e\u0161en\u00ed pou\u017e\u00edvan\u00fdch ve firm\u011b a t\u00e9m\u011b\u0159 nekomplikuje infrastrukturn\u00ed strukturu.<\/p>\n<p><\/p>\n<p>Spustili jsme prohl\u00ed\u017ee\u010dov\u00e9 testy a zde jsou v\u00fdsledky:<\/p>\n<p><\/p>\n<p>\u010cerven\u00e9 koso\u010dtverce znamenaj\u00ed selh\u00e1n\u00ed test\u016f. Selh\u00e1n\u00ed dole jsou DNS chyby (\u010dasov\u00fd limit p\u0159ekladu). Selh\u00e1n\u00ed naho\u0159e jsou \u010dasov\u00e9 limity.<\/p>\n<p><\/p>\n<p><em>Uptime: 86.6<br \/>\nMedian: 18s<br \/>\n75 Percentile: 29.3s<br \/>\n95 Percentile: 60s<\/em><\/p>\n<p><\/p>\n<p>Medi\u00e1n se po odstran\u011bn\u00ed zat\u00ed\u017een\u00ed <em>reCaptcha<\/em> (slu\u017eba od Googlu, kter\u00e1 je v \u010c\u00edn\u011b zablokov\u00e1na), sn\u00ed\u017eil z 28 na 18 sekund. Ale st\u00e1le to jsou hrozn\u00e9 hodnoty, kdy\u017e vezmeme v \u00favahu, \u017ee stejn\u00fd test pro semrush.com (ze Spojen\u00fdch st\u00e1t\u016f) m\u011bl m\u00e9n\u011b ne\u017e 10 sekund pro 95 % u\u017eivatel\u016f (ze Spojen\u00fdch st\u00e1t\u016f) na tu samou str\u00e1nku (statika + dynamika).<\/p>\n<p><\/p>\n<p>Do ka\u017ed\u00e9ho testu se lze p\u0159ihl\u00e1sit a prohl\u00e9dnout si ho <em>Waterfall<\/em> a dal\u0161\u00ed podrobn\u011bj\u0161\u00ed parametry. Za\u010dali jsme zkoumat p\u0159\u00ed\u010diny chyb, a pokud je ohledn\u011b timeout\u016f situace v\u00edcem\u00e9n\u011b jasn\u00e1: internet v \u010c\u00edn\u011b se \"to skl\u00e1d\u00e1, to rozkl\u00e1d\u00e1\", kv\u016fli \u010demu\u017e je rychlost p\u0159ipojen\u00ed a na\u010d\u00edt\u00e1n\u00ed zdroj\u016f ze zahrani\u010d\u00ed nestabiln\u00ed a r\u016fzn\u00e1, tak n\u00e1s DNS chyby zna\u010dn\u011b p\u0159ekvapily. Zjistili jsme, \u017ee <em>PoP<\/em> u Cloudflare skute\u010dn\u011b nach\u00e1zej\u00ed v \u010c\u00edn\u011b, adresa webu se p\u0159ev\u00e1d\u00ed na jeden anycast IP, ale pou\u017e\u00edvaj\u00ed se americk\u00e9 DNS servery, co\u017e znamen\u00e1, \u017ee DNS dotazy mus\u00ed proch\u00e1zet hranic\u00ed, proto n\u011bkdy selh\u00e1vaj\u00ed.<\/p>\n<p><\/p>\n<p>Po up\u0159esn\u011bn\u00ed t\u00e9to ot\u00e1zky u CF se uk\u00e1zalo, \u017ee <strong>nemaj\u00ed vlastn\u00ed DNS servery v \u010c\u00edn\u011b<\/strong>, a kdy budou \u2014 zat\u00edm nen\u00ed zn\u00e1mo.<\/p>\n<p><\/p>\n<p>Proto jsme se rozhodli testovat pouze DNS Cloudflare a zm\u011bnili jsme mechanismus fungov\u00e1n\u00ed Cloudflare pro na\u0161i str\u00e1nku na re\u017eim \u201c<strong>Pouze DNS<\/strong>\u201d. To je takov\u00fd re\u017eim, kdy Cloudflare nepro\u0161uje provoz p\u0159es sebe, a tedy neposkytuje DDoS ochranu, CDN a dal\u0161\u00ed funkce, a pracuje v re\u017eimu b\u011b\u017en\u00e9ho DNS serveru. <\/p>\n<p><\/p>\n<p>Tento stand je schematicky zn\u00e1zorn\u011bn na n\u00e1sleduj\u00edc\u00edm obr\u00e1zku. Na obr\u00e1zku jsou zohledn\u011bny nov\u011b z\u00edskan\u00e9 znalosti o tom, \u017ee DNS servery Cloudflare jsou za firewallem.<\/p>\n<p><\/p>\n<p>V Catchpoint jsme spustili jednoduch\u00e9 GET testy (ne prohl\u00ed\u017ee\u010dov\u00e9), kter\u00e9 uk\u00e1zaly spoustu selh\u00e1n\u00ed. P\u0159\u00ed\u010dinou jich byly st\u00e1le ty sam\u00e9 DNS chyby.<\/p>\n<p><\/p>\n<p>Za\u010dali jsme ladit tyto chyby pomoc\u00ed <em>dig<\/em> a zjistili jsme, \u017ee p\u0159i prvn\u00edm dotazu je adresa ur\u010dena spr\u00e1vn\u011b, ale p\u0159i opakovan\u00e9m dotazu dost\u00e1v\u00e1me poka\u017ed\u00e9 <em>SERVFAIL<\/em> a <em>nenalezeno<\/em>. Odkud se to vzalo?<\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nHost semrushchina.cn nenalezen: 2(SERVFAIL)\nroot@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nHost semrushchina.cn nenalezen: 2(SERVFAIL)\nroot@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nHost semrushchina.cn nenalezen: 2(SERVFAIL)\nroot@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nHost semrushchina.cn nenalezen: 2(SERVFAIL)<\/code><\/pre>\n<p><\/p>\n<p>P\u0159i p\u0159\u00edm\u00e9m dotazu na NS servery Cloudflare takov\u00e9 chyby nejsou:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@iZwz97n2wgbp61qucbfrjsZ:~# for i in `seq 1 2`; do host semrushchina.cn ray.ns.cloudflare.com.; done\nPou\u017e\u00edv\u00e1m server dom\u00e9ny:\nN\u00e1zev: ray.ns.cloudflare.com.\nAdresa: 173.245.59.138#53\nAlias: \n\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nPou\u017e\u00edv\u00e1m server dom\u00e9ny:\nN\u00e1zev: ray.ns.cloudflare.com.\nAdresa: 173.245.59.138#53\nAlias: \n\nsemrushchina.cn m\u00e1 adresu 220.170.186.192\nsemrushchina.cn m\u00e1 adresu 220.170.186.192<\/code><\/pre>\n<p><\/p>\n<p>Tak\u017ee probl\u00e9m je na stran\u011b \"lok\u00e1ln\u00edho\" DNS serveru nebo serveru poskytovatele.<br \/>\nDal\u0161\u00ed vy\u0161et\u0159ov\u00e1n\u00ed uk\u00e1zalo, \u017ee <em>SERVFAIL<\/em> na rozli\u0161en\u00ed dost\u00e1v\u00e1me <em>AAAA<\/em>-z\u00e1znamy. <\/p>\n<p><\/p>\n<p>Zjistilo se, \u017ee p\u0159i dotazu u Cloudflare <em>AAAA<\/em>-z\u00e1znam, kter\u00fd v dom\u00e9n\u011b neexistuje, Cloudflare odpov\u00eddal <em>A<\/em>-z\u00e1znamem, co\u017e je chyba a nesoulad s RFC. Z tohoto d\u016fvodu to m\u00edstn\u00edmu resolveru (<em>x.x.x.x<\/em>) se nel\u00edbilo a odpov\u00eddal <em>SERVFAIL<\/em>. V n\u00ed\u017ee uveden\u00e9m protokolu je toto chov\u00e1n\u00ed jasn\u011b vid\u011bt:<\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@iZwz97n2wgbp61qucbfrjsZ:~# dig -t AAAA semrushchina.cn @x.x.x.x\n\n; &lt;&gt; DiG 9.10.3-P4-Ubuntu &lt;&gt; -t AAAA semrushchina.cn @x.x.x.x\n;; glob\u00e1ln\u00ed mo\u017enosti: +cmd\n;; Dost\u00e1v\u00e1me odpov\u011b\u010f:\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: SERVFAIL, id: 55467\n;; p\u0159\u00edznaky: qr rd ra; DOTAZ: 1, ODPOV\u011a\u010e: 0, AUTORITY: 0, P\u0158IDAN\u00c9: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: verze: 0, p\u0159\u00edznaky:; udp: 4096\n;; OT\u00c1ZKOV\u00c1 SEKCE:\n;semrushchina.cn.               IN      AAAA\n\n;; \u010cas dotazu: 334 ms\n;; SERVER: x.x.x.x#53(x.x.x.x)\n;; KDY: \u00dat 14. srpna 23:38:50 CST 2018\n;; MSG SIZE rcvd: 44\n\nroot@iZwz97n2wgbp61qucbfrjsZ:~# dig -t AAAA semrushchina.cn @dana.ns.cloudflare.com.\n\n; &lt;&gt; DiG 9.10.3-P4-Ubuntu &lt;&gt; -t AAAA semrushchina.cn @dana.ns.cloudflare.com.\n;; glob\u00e1ln\u00ed mo\u017enosti: +cmd\n;; Dost\u00e1v\u00e1me odpov\u011b\u010f:\n;; -&gt;&gt;HEADER&lt;&lt;- opcode: QUERY, status: NOERROR, id: 63944\n;; p\u0159\u00edznaky: qr aa rd; DOTAZ: 1, ODPOV\u011a\u010e: 1, AUTORITY: 0, P\u0158IDAN\u00c9: 1\n;; UPOZORN\u011aN\u00cd: vy\u017eadov\u00e1na rekurze, ale nen\u00ed dostupn\u00e1\n\n;; OPT PSEUDOSECTION:\n; EDNS: verze: 0, p\u0159\u00edznaky:; udp: 512\n;; OT\u00c1ZKOV\u00c1 SEKCE:\n;semrushchina.cn.               IN      AAAA\n\n;; ODPOV\u011a\u010e SEKCE:\nsemrushchina.cn.        300     IN      A       220.170.186.192\n\n;; \u010cas dotazu: 185 ms\n;; SERVER: 173.245.58.105#53(173.245.58.105)\n;; KDY: \u00dat 14. srpna 23:43:03 CST 2018\n;; MSG SIZE rcvd: 60\n<\/code><\/pre>\n<p><\/p>\n<p>Odeslali jsme bug report Cloudflare a oni to opravili po n\u011bjak\u00e9 dob\u011b. Uk\u00e1zalo se, \u017ee je to zaj\u00edmav\u00e9: v tuto chv\u00edli v \u010c\u00edn\u011b st\u00e1le nen\u00ed podpora IPv6, tak\u017ee Cloudflare nemohl p\u0159i odpov\u011bdi na po\u017eadavek poskytnout svou IPv6 adresu <em>AAAA<\/em>-z\u00e1znam\u016f. Nakonec se to vy\u0159e\u0161ilo tak, \u017ee pro \u010c\u00ednu za\u010dal Cloudflare odpov\u00eddat <em>NODATA<\/em> na takov\u00e9 po\u017eadavky.<\/p>\n<p><\/p>\n<p>Tak\u017ee chyby DNS v testech Catchpoint se v\u00fdrazn\u011b sn\u00ed\u017eily, ale ne zcela. \u010casov\u00e9 limity tak\u00e9 nezmizely:<\/p>\n<p><\/p>\n<p>A za\u010dali jsme hledat jin\u00e9 \u0159e\u0161en\u00ed. <\/p>\n<p><\/p>\n<p>V dal\u0161\u00ed \u010d\u00e1sti v\u00e1m pov\u00edm, jak jsme testovali \u010d\u00ednsk\u00e9 cloudov\u00e9 slu\u017eby <strong>Alibaba Cloud<\/strong>, jak jsme d\u00edky trochu &#171;magii&#187; Nginx dok\u00e1zali rychle vytv\u00e1\u0159et PoC (Proof of Concept) \u0159e\u0161en\u00ed, jak jsme vytv\u00e1\u0159eli Multi-Cloud \u0159e\u0161en\u00ed, z nich\u017e jedno nakonec v\u00fdrazn\u011b pomohlo zrychlit pr\u00e1ci slu\u017eby z \u010c\u00edny.<\/p>\n<p><\/p>\n<p><strong>Z\u016fsta\u0148te na p\u0159\u00edjmu!<\/strong><\/p>\n<p><\/p>\n<h3 id=\"sleduyuschie-chasti\">Dal\u0161\u00ed \u010d\u00e1sti<\/h3>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458840\/\">\u010c\u00e1st 2<\/a><\/noindex><\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458602\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0441\u0432\u044f\u0437\u0438 \u041d\u0438\u043a\u0438\u0442\u0430 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 S\u0415Mrush. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u0432\u0430\u043c \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434 \u043d\u0430\u043c\u0438 \u0432\u0441\u0442\u0430\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 semrush.com \u0432 \u041a\u0438\u0442\u0430\u0435, \u0438 \u0441 \u043a\u0430\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043c\u044b \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (\u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0430 \u043d\u0430 \u0432\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0431\u0435\u0440\u0435\u0436\u044c\u0435 \u0421\u0428\u0410). \u042d\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f, \u0440\u0430\u0437\u0431\u0438\u0442\u0430\u044f \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35939","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0441\u0432\u044f\u0437\u0438 \u041d\u0438\u043a\u0438\u0442\u0430 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 S\u0415Mrush.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.1) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0441\u0432\u044f\u0437\u0438 \u041d\u0438\u043a\u0438\u0442\u0430 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 S\u0415Mrush.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:07:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:07:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d.1) | ProHoster","description":"Ahoj v\u0161ichni! Tady Nikita \u2014 syst\u00e9mov\u00fd in\u017een\u00fdr z firmy SEMrush.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.1) | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0441\u0432\u044f\u0437\u0438 \u041d\u0438\u043a\u0438\u0442\u0430 \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 S\u0415Mrush.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:07:41+00:00","article:modified_time":"2019-10-31T19:07:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35939","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:21:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:53:31","updated":"2026-01-22 01:21:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35939","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=35939"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35939\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=35939"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=35939"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=35939"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}