{"id":36043,"date":"2019-10-31T22:09:19","date_gmt":"2019-10-31T19:09:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\/"},"modified":"2019-10-31T22:09:19","modified_gmt":"2019-10-31T19:09:19","slug":"kak-my-probivali-velikij-kitajskij-faervol-ch-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","title":{"rendered":"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ahoj!<br \/>\nKa\u017ed\u00fd dobr\u00fd p\u0159\u00edb\u011bh m\u00e1 sv\u016fj konec. A n\u00e1\u0161 p\u0159\u00edb\u011bh o tom, jak jsme vyvinuli \u0159e\u0161en\u00ed pro rychl\u00e9 p\u0159ekon\u00e1n\u00ed \u010d\u00ednsk\u00e9ho firewallu, nen\u00ed v\u00fdjimkou. Proto se s v\u00e1mi chci pod\u011blit o jeho posledn\u00ed \u010d\u00e1st, <strong>z\u00e1v\u011bre\u010dn\u00e1 \u010d\u00e1st<\/strong> na toto t\u00e9ma.<\/p>\n<p><\/p>\n<p>V p\u0159edchoz\u00ed \u010d\u00e1sti jsme hovo\u0159ili o mnoha testovac\u00edch stupn\u00edch, kter\u00e9 jsme vytvo\u0159ili, a jak\u00e9 v\u00fdsledky n\u00e1m p\u0159inesly. A skon\u010dili jsme t\u00edm, \u017ee by nebylo \u0161patn\u00e9 p\u0159idat <strong>CDN!<\/strong> pro lep\u0161\u00ed funk\u010dnost v na\u0161em sch\u00e9matu.<\/p>\n<p><\/p>\n<p>Pov\u00edm v\u00e1m, jak jsme testovali Alibaba Cloud CDN, Tencent Cloud CDN a Akamai, a na \u010dem jsme se nakonec rozhodli. No a samoz\u0159ejm\u011b shrneme.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)\" src=\"\/wp-content\/uploads\/2019\/07\/36f7d82cfee454fafa1b1528fc36c730.jpg\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2 id=\"alibaba-cloud-cdn\">Alibaba Cloud CDN<\/h2>\n<p><\/p>\n<p>Hostujeme na Alibaba Cloud, pou\u017e\u00edv\u00e1me IPSEC a CEN od nich. Je logick\u00e9, \u017ee bychom m\u011bli nejprve vyzkou\u0161et jejich \u0159e\u0161en\u00ed.<\/p>\n<p><\/p>\n<p>Alibaba Cloud m\u00e1 dva typy produkt\u016f, kter\u00e9 by n\u00e1m mohly vyhovovat: <strong>CDN<\/strong> a <strong>DCDN<\/strong>. Prvn\u00ed varianta p\u0159edstavuje klasick\u00fd CDN pro konkr\u00e9tn\u00ed dom\u00e9nu (subdom\u00e9nu). Druh\u00e1 varianta se rozkl\u00e1d\u00e1 jako <em>Dynamic Route for CDN<\/em> (naz\u00fdv\u00e1m to dynamick\u00fd CDN), kter\u00fd lze pou\u017e\u00edt v re\u017eimu Full-site (pro wildcard dom\u00e9ny), tak\u00e9 ukl\u00e1d\u00e1 statick\u00e9 soubory do cache a urychluje dynamick\u00fd obsah, co\u017e znamen\u00e1, \u017ee dynamika str\u00e1nky tak\u00e9 bude na\u010d\u00edt\u00e1na prost\u0159ednictv\u00edm rychl\u00fdch s\u00edt\u00ed poskytovatele. To je pro n\u00e1s d\u016fle\u017eit\u00e9, proto\u017ee m\u00e1me p\u0159ev\u00e1\u017en\u011b dynamick\u00fd web, na kter\u00e9m se pou\u017e\u00edv\u00e1 mnoho subdom\u00e9n, a l\u00e9pe se nastavuje CDN jednou pro \u201chv\u011bzdi\u010dku\u201d \u2014 *.semrushchina.cn.<\/p>\n<p><\/p>\n<p>Tento produkt jsme u\u017e vid\u011bli v d\u0159\u00edv\u011bj\u0161\u00edch f\u00e1z\u00edch na\u0161eho \u010d\u00ednsk\u00e9ho projektu, ale tehdy je\u0161t\u011b nefungoval, a v\u00fdvoj\u00e1\u0159i sl\u00edbili, \u017ee produkt brzy bude k dispozici pro v\u0161echny klienty. A stalo se.<\/p>\n<p><\/p>\n<p>V DCDN lze:<\/p>\n<p><\/p>\n<ul>\n<li>nastavit terminaci SSL se sv\u00fdm certifik\u00e1tem,<\/li>\n<li>zapnout akceleraci dynamick\u00e9ho obsahu,<\/li>\n<li>flexibiln\u011b nastavit cachov\u00e1n\u00ed statick\u00fdch soubor\u016f,<\/li>\n<li>prov\u00e1d\u011bt vymaz\u00e1n\u00ed cache,<\/li>\n<li>umo\u017enit webov\u00e9 sockety,<\/li>\n<li>zapnout kompresi a dokonce HTML Beautifier.<\/li>\n<\/ul>\n<p><\/p>\n<p>Obecn\u011b plat\u00ed, \u017ee v\u0161e jak u velk\u00fdch a dosp\u011bl\u00fdch CDN poskytovatel\u016f.<\/p>\n<p><\/p>\n<p>Po ur\u010den\u00ed-Origin (to m\u00edsto, kam budou sm\u011b\u0159ovat edge servery CDN) je pot\u0159eba vytvo\u0159it CNAME pro hv\u011bzdi\u010dku, kter\u00e1 referencuje na <em>all.semrushchina.cn.w.kunluncan.com<\/em> (tento CNAME byl z\u00edsk\u00e1n v konzoli Alibaba Cloud), a CDN za\u010dne fungovat. <\/p>\n<p><\/p>\n<p>Podle v\u00fdsledk\u016f test\u016f n\u00e1m tento CDN hodn\u011b pomohl. Statistika je uvedena n\u00ed\u017ee.<\/p>\n<p><\/p>\n<p>\u0158e\u0161en\u00ed<br \/>\nUptime<br \/>\nMedi\u00e1n<br \/>\n75. percentile<br \/>\n95. percentile<\/p>\n<p>Cloudflare<br \/>\n86.6<br \/>\n18s<br \/>\n30s<br \/>\n60s<\/p>\n<p>IPsec<br \/>\n99.79<br \/>\n18s<br \/>\n21s<br \/>\n30s<\/p>\n<p>CEN<br \/>\n99.75<br \/>\n16s<br \/>\n21s<br \/>\n27s<\/p>\n<p>CEN\/IPsec + GLB<br \/>\n99.79<br \/>\n13s<br \/>\n16s<br \/>\n25s<\/p>\n<p><strong>Ali CDN + CEN\/IPsec + GLB<\/strong><br \/>\n<strong>99.75<\/strong><br \/>\n<strong>10s<\/strong><br \/>\n<strong>12.8s<\/strong><br \/>\n<strong>17.3s<\/strong><\/p>\n<p><\/p>\n<p>To jsou velmi dobr\u00e9 v\u00fdsledky, zvl\u00e1\u0161\u0165 kdy\u017e je porovn\u00e1me s t\u00edm, jak\u00e9 \u010d\u00edsla byla na za\u010d\u00e1tku. Ale v\u011bd\u011bli jsme, \u017ee prohl\u00ed\u017ee\u010dov\u00fd test americk\u00e9 verze na\u0161eho webu www.semrush.com se pr\u016fm\u011brn\u011b spou\u0161t\u00ed z USA za 8,3s (velmi p\u0159ibli\u017en\u00e1 hodnota). Je kam r\u016fst. O to v\u00edc, z\u016fstali n\u00e1m je\u0161t\u011b CDN poskytovatel\u00e9, kter\u00e9 bylo zaj\u00edmav\u00e9 otestovat.<\/p>\n<p><\/p>\n<p>Tak plynule p\u0159ech\u00e1z\u00edme k dal\u0161\u00edmu gigantu na \u010d\u00ednsk\u00e9m trhu \u2014 <strong>Tencent<\/strong>.<\/p>\n<p><\/p>\n<h2 id=\"tencent-cloud\">Tencent Cloud<\/h2>\n<p><\/p>\n<p>Tencent sv\u00e9 cloudov\u00e9 slu\u017eby teprve rozv\u00edj\u00ed \u2014 to je patrn\u00e9 z mal\u00e9ho mno\u017estv\u00ed produkt\u016f. P\u0159i jeho pou\u017eit\u00ed jsme cht\u011bli otestovat nejen jejich CDN, ale i celkov\u011b s\u00ed\u0165ovou infrastrukturu:<\/p>\n<p><\/p>\n<ul>\n<li>maj\u00ed n\u011bco podobn\u00e9ho jako CEN?<\/li>\n<li>jak u nich funguje IPSEC? Je to rychl\u00e9, jak\u00e1 je dostupnost?<\/li>\n<li>maj\u00ed u nich Anycast?<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)\" src=\"\/wp-content\/uploads\/2019\/07\/a0af3f5cff85056cb322e0a64ae079b5.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Tyto ot\u00e1zky rozebereme jednotliv\u011b.<\/p>\n<p><\/p>\n<h4 id=\"analog-cen\">Analog CEN<\/h4>\n<p><\/p>\n<p>Tencent m\u00e1 produkt <strong>Cloud Connect Network<\/strong> (<noindex><a rel=\"nofollow\" href=\"https:\/\/intl.cloud.tencent.com\/product\/ccn\">CCN<\/a><\/noindex>), kter\u00fd umo\u017e\u0148uje propojit VPC z r\u016fzn\u00fdch region\u016f, v\u010detn\u011b region\u016f uvnit\u0159 \u010c\u00edny a mimo ni. Produkt je nyn\u00ed ve vnit\u0159n\u00ed beta f\u00e1zi a je t\u0159eba vytvo\u0159it ticket s \u017e\u00e1dost\u00ed o p\u0159ipojen\u00ed. Od podpory jsme se dozv\u011bd\u011bli, \u017ee global-\u00fa\u010dty (nemluv\u00edme o ob\u010danech \u010c\u00edny a pr\u00e1vnick\u00fdch osob\u00e1ch) se nemohou \u00fa\u010dastnit beta testov\u00e1n\u00ed a v\u016fbec propojit region v \u010c\u00edn\u011b s regionem venku. 1-0 v prosp\u011bch Ali Cloud.<\/p>\n<p><\/p>\n<h4 id=\"ipsec\">IPSEC<\/h4>\n<p><\/p>\n<p>Nejji\u017en\u011bj\u0161\u00ed region Tencentu je \u2014 <em>Guangzhou<\/em>. Vytvo\u0159ili jsme tunel a spojili ho s regionem Hongkong v GCP (ten region byl ji\u017e dostupn\u00fd). Z\u00e1rove\u0148 jsme tak\u00e9 zvedli druh\u00fd tunel v Ali Cloud z Shenzhenu do Hongkongu. Uk\u00e1zalo se, \u017ee p\u0159es s\u00ed\u0165 Tencent je latence do Hongkongu obecn\u011b lep\u0161\u00ed (10ms) ne\u017e ze Shenzhenu do Hongkongu v Ali (120ms \u2014 co?). Ale to nijak nezrychlilo pr\u00e1ci webu, kter\u00fd byl nasm\u011brov\u00e1n na pr\u00e1ci p\u0159es Tencent a tento tunel, co\u017e samo o sob\u011b bylo p\u0159ekvapuj\u00edc\u00ed a znovu dokazovalo n\u00e1sleduj\u00edc\u00ed: latence \u2014 pro \u010c\u00ednu to nen\u00ed ukazatel, na kter\u00fd skute\u010dn\u011b stoj\u00ed za to se zam\u011b\u0159it p\u0159i v\u00fdvoji \u0159e\u0161en\u00ed pro p\u0159ekon\u00e1n\u00ed \u010d\u00ednsk\u00e9 firewallu.<\/p>\n<p><\/p>\n<h4 id=\"anycast-internet-acceleration\">Anycast Internet Acceleration<\/h4>\n<p><\/p>\n<p>Dal\u0161\u00ed produkt, kter\u00fd umo\u017e\u0148uje pracovat p\u0159es anycast IP \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/intl.cloud.tencent.com\/product\/aia\">AIA<\/a><\/noindex>. Ale nen\u00ed tak\u00e9 dostupn\u00fd pro glob\u00e1ln\u00ed \u00fa\u010dty, tak\u017ee o n\u011bm nebudu vypr\u00e1v\u011bt, ale m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 v\u011bd\u011bt, \u017ee takov\u00fd produkt existuje.<\/p>\n<p><\/p>\n<p>Test CDN v\u0161ak uk\u00e1zal docela zaj\u00edmav\u00e9 v\u00fdsledky. CDN od Tencentu nelze aktivovat na full-site, pouze na konkr\u00e9tn\u00edch dom\u00e9n\u00e1ch. Zalo\u017eili jsme dom\u00e9ny a pustili na n\u011b provoz:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)\" src=\"\/wp-content\/uploads\/2019\/07\/a4931750f0cb79fbae7ec1217eab4fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Uk\u00e1zalo se, \u017ee tento CDN m\u00e1 tuto funkci: <strong>Optimalizace mezin\u00e1rodn\u00edho provozu<\/strong>. Tato funkce by m\u011bla sni\u017eovat n\u00e1klady na pr\u016fchod provozu \u010d\u00ednskou firewallovou s\u00edt\u00ed. Jako <em>p\u016fvodn\u00ed<\/em> byla uvedena IP adresa Googlov\u00e9ho GLB (GLB anycast). T\u00edmto zp\u016fsobem jsme cht\u011bli zjednodu\u0161it architekturu projektu.<\/p>\n<p><\/p>\n<p>V\u00fdsledky byly velmi dobr\u00e9 \u2014 na \u00farovni Ali Cloud CDN, a m\u00edsty dokonce i lep\u0161\u00ed. Je to p\u0159ekvapuj\u00edc\u00ed, proto\u017ee v p\u0159\u00edpad\u011b \u00fasp\u011b\u0161n\u00fdch test\u016f bychom se mohli vzd\u00e1t v\u00fdznamn\u00e9 \u010d\u00e1sti infrastruktury, tunel\u016f, CEN, virtu\u00e1ln\u00edch server\u016f apod. <\/p>\n<p><\/p>\n<p>Radovali jsme se v\u0161ak jen kr\u00e1tce, nebo\u0165 se objevila probl\u00e9m: testy v Catchpoint selh\u00e1valy pro poskytovatele internetov\u00fdch slu\u017eeb China Mobile. Z jak\u00fdchkoli lokalit jsme dost\u00e1vali timeout p\u0159es CDN Tencent. Komunikace s technickou podporou nebyla k ni\u010demu. Asi den jsme se sna\u017eili tento probl\u00e9m vy\u0159e\u0161it, ale nic se nepoda\u0159ilo. <\/p>\n<p><\/p>\n<p>V t\u00e9 dob\u011b jsem byl v \u010c\u00edn\u011b, ale nedok\u00e1zal jsem naj\u00edt ve\u0159ejnou Wi-Fi s\u00ed\u0165 tohoto poskytovatele, abych se na probl\u00e9m pod\u00edval osobn\u011b. Jinak v\u0161e vypadalo rychle a dob\u0159e.<br \/>\nAv\u0161ak vzhledem k tomu, \u017ee oper\u00e1tor China Mobile pat\u0159\u00ed mezi t\u0159i nejv\u011bt\u0161\u00ed oper\u00e1tory, byli jsme nuceni vr\u00e1tit provoz na Ali CDN.<br \/>\nCelkov\u011b v\u0161ak bylo toto \u0159e\u0161en\u00ed pom\u011brn\u011b zaj\u00edmav\u00e9 a zaslou\u017e\u00ed si del\u0161\u00ed testov\u00e1n\u00ed a \u0159e\u0161en\u00ed t\u00e9to probl\u00e9mu.<\/p>\n<p><\/p>\n<h2 id=\"akamai\">Akamai<\/h2>\n<p><\/p>\n<p>Posledn\u00edm CDN poskytovatelem, kter\u00e9ho jsme testovali, je <strong>Akamai<\/strong>. Je to obrovsk\u00fd poskytovatel, kter\u00fd m\u00e1 svou s\u00ed\u0165 v \u010c\u00edn\u011b. Samoz\u0159ejm\u011b, \u017ee jsme jej nemohli opominout.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)\" src=\"\/wp-content\/uploads\/2019\/07\/34657ab2d5da8509285f5c99401b7603.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Od sam\u00e9ho za\u010d\u00e1tku jsme se s Akamai dohodli na zku\u0161ebn\u00ed dob\u011b, abychom mohli p\u0159epnout dom\u00e9nu a sledovat, jak bude fungovat v jejich s\u00edti. V\u00fdsledky v\u0161ech test\u016f pop\u00ed\u0161u ve form\u011b \"Co se n\u00e1m l\u00edbilo\" a \"Co se n\u00e1m nel\u00edbilo\", a tak\u00e9 uvedu v\u00fdsledky test\u016f.<\/p>\n<p><\/p>\n<p><strong>Co se n\u00e1m l\u00edbilo:<\/strong><\/p>\n<p><\/p>\n<ul>\n<li>Chlapci z Akamai byli velmi n\u00e1pomocn\u00ed ve v\u0161ech ot\u00e1zk\u00e1ch a podporovali n\u00e1s na v\u0161ech etap\u00e1ch testov\u00e1n\u00ed. Neust\u00e1le se sna\u017eili n\u011bco zlep\u0161it na sv\u00e9 stran\u011b. D\u00e1vali dobr\u00e9 technick\u00e9 rady.<\/li>\n<li>Akamai funguje p\u0159ibli\u017en\u011b o 10-15 % pomaleji ne\u017e na\u0161e \u0159e\u0161en\u00ed p\u0159es Ali Cloud CDN. \u00da\u017easn\u00e9 je, \u017ee v p\u0159\u00edpad\u011b Akamai jsme uv\u00e1d\u011bli IP adresu GLB, co\u017e znamen\u00e1, \u017ee provoz ne\u0161el p\u0159es na\u0161e \u0159e\u0161en\u00ed (potenci\u00e1ln\u011b se lze vzd\u00e1t \u010d\u00e1sti infrastruktury). Nicm\u00e9n\u011b v\u00fdsledky test\u016f uk\u00e1zaly, \u017ee tato varianta \u0159e\u0161en\u00ed je hor\u0161\u00ed ne\u017e na\u0161e aktu\u00e1ln\u00ed varianta (srovn\u00e1vac\u00ed v\u00fdsledky viz n\u00ed\u017ee).<\/li>\n<li>Testoval se jak Origin GLB, tak p\u016fvod v \u010c\u00edn\u011b. Ob\u011b varianty jsou p\u0159ibli\u017en\u011b stejn\u00e9.<\/li>\n<li>Existuje <em>Sure Route<\/em> (automatizovan\u00e9 optimalizace sm\u011brov\u00e1n\u00ed). M\u016f\u017eete si um\u00edstit testovac\u00ed objekt na Origin, a Edge servery Akamai se ho pokus\u00ed vyzvednout (b\u011b\u017en\u00fd GET). Pro tyto \u017e\u00e1dosti se m\u011b\u0159\u00ed rychlost a dal\u0161\u00ed metriky, na jejich\u017e z\u00e1klad\u011b s\u00ed\u0165 Akamai optimalizuje trasy, aby provoz sm\u011b\u0159oval rychleji na na\u0161e str\u00e1nky a bylo jasn\u00e9, \u017ee aktivace t\u00e9to funkce skute\u010dn\u011b v\u00fdznamn\u011b ovlivnila rychlost pr\u00e1ce webu.<\/li>\n<li>Verzov\u00e1n\u00ed konfigurace v webov\u00e9m rozhran\u00ed je skv\u011bl\u00e9. M\u016f\u017eete prov\u00e9st porovn\u00e1n\u00ed verz\u00ed, pod\u00edvat se na rozd\u00edly. Pod\u00edvat se na p\u0159edchoz\u00ed verze.<\/li>\n<li>Novou verzi lze nejprve nasadit pouze na Staging s\u00ed\u0165 Akamai \u2014 je to stejn\u00e1 s\u00ed\u0165 jako produk\u010dn\u00ed, ale tento postup nem\u00e1 vliv na skute\u010dn\u00e9 u\u017eivatele. Pro tento test je nutn\u00e9 prov\u00e9st spoofing DNS z\u00e1znam\u016f na m\u00edstn\u00edm po\u010d\u00edta\u010di.<\/li>\n<li>Velmi rychl\u00e1 rychlost na\u010d\u00edt\u00e1n\u00ed p\u0159es jejich s\u00ed\u0165 velk\u00e9 statiky, a pravd\u011bpodobn\u011b jak\u00fdchkoli jin\u00fdch soubor\u016f. Soubor z \"chladn\u00e9ho\" cache se vyb\u00edr\u00e1 mnohem rychleji ne\u017e stejn\u00fd soubor z \"chladn\u00e9ho\" cache Ali CDN. Ze \"hork\u00e9ho\" cache je rychlost u\u017e v\u00edcem\u00e9n\u011b stejn\u00e1.<\/li>\n<\/ul>\n<p><\/p>\n<p><strong>Ali CDN test:<\/strong><\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@shenzhen1:~# curl -o \/dev\/null -w@curl_time https:\/\/en.semrushchina.cn\/my_reports\/build\/scripts\/simpleInit.js?v=1551879212\n  % Celkem    % P\u0159ijato % P\u0159enosu  Pr\u016fm\u011brn\u00e1 Rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Stahov\u00e1n\u00ed  Nahr\u00e1v\u00e1n\u00ed   Celkem   Str\u00e1veno    Zb\u00fdv\u00e1  Rychlost\n100 5757k    0 5757k    0     0   513k      0 --:--:--  0:00:11 --:--:--  526k\ntime_namelookup:  0.004286\ntime_connect:  0.030107\ntime_appconnect:  0.117525\ntime_pretransfer:  0.117606\ntime_redirect:  0.000000\ntime_starttransfer:  0.840348\n----------\ntime_total:  11.208119\n----------\nsize_download:  5895467 Bytes\nspeed_download:  525999.000B\/s<\/code><\/pre>\n<p><\/p>\n<p><strong>Akamai test:<\/strong><\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@shenzhen1:~# curl -o \/dev\/null -w@curl_time https:\/\/www.semrushchina.cn\/my_reports\/build\/scripts\/simpleInit.js?v=1551879212\n  % Celkem    % P\u0159ijato % P\u0159enosu  Pr\u016fm\u011brn\u00e1 Rychlost   \u010cas    \u010cas     \u010cas  Aktu\u00e1ln\u00ed\n                                 Stahov\u00e1n\u00ed  Nahr\u00e1v\u00e1n\u00ed   Celkem   Str\u00e1veno    Zb\u00fdv\u00e1  Rychlost\n100 5757k    0 5757k    0     0  1824k      0 --:--:--  0:00:03 --:--:-- 1825k\ntime_namelookup:  0.509005\ntime_connect:  0.528261\ntime_appconnect:  0.577235\ntime_pretransfer:  0.577324\ntime_redirect:  0.000000\ntime_starttransfer:  1.327013\n----------\ntime_total:  3.154850\n----------\nsize_download:  5895467 Bytes\nspeed_download:  1868699.000B\/s<\/code><\/pre>\n<p><\/p>\n<p>V\u0161imli jsme si, \u017ee situace z v\u00fd\u0161e uveden\u00e9ho p\u0159\u00edkladu z\u00e1vis\u00ed na r\u016fzn\u00fdch faktorech. V dob\u011b psan\u00ed tohoto bodu jsem provedl test znovu. V\u00fdsledky pro ob\u011b platformy byly p\u0159ibli\u017en\u011b stejn\u00e9. To n\u00e1m \u0159\u00edk\u00e1, \u017ee internet v \u010c\u00edn\u011b, i pro velk\u00e9 oper\u00e1tory a cloudov\u00e9 poskytovatele, se ob\u010das chov\u00e1 r\u016fzn\u011b.<\/p>\n<p><\/p>\n<p>Ke p\u0159edchoz\u00edmu bodu p\u0159id\u00e1v\u00e1m velk\u00e9 plus pro Akamai: zat\u00edmco u Ali jsou viditeln\u00e9 skoky vysok\u00e9ho v\u00fdkonu a velmi n\u00edzk\u00e9 latence (to plat\u00ed jak pro Ali CDN, tak pro Ali CEN a Ali IPSEC), u Akamai poka\u017ed\u00e9, kdy\u017e testuji jejich s\u00ed\u0165, v\u0161echno funguje stabiln\u011b.<br \/>\nAkamai skute\u010dn\u011b m\u00e1 velk\u00e9 pokryt\u00ed v \u010c\u00edn\u011b a spolupracuje s mnoha poskytovateli.<\/p>\n<p><\/p>\n<p><strong>Co se mi nel\u00edbilo:<\/strong><\/p>\n<p><\/p>\n<ul>\n<li>Nel\u00edb\u00ed se mi webov\u00e9 rozhran\u00ed a pracovn\u00ed sch\u00e9ma - jsou naprosto z\u00e1kladn\u00ed. Ale v z\u00e1sad\u011b si na to \u010dlov\u011bk zvykne (asi).<\/li>\n<li>V\u00fdsledky test\u016f jsou hor\u0161\u00ed ne\u017e na na\u0161\u00ed platform\u011b.<\/li>\n<li>Chybovost p\u0159i testech je vy\u0161\u0161\u00ed ne\u017e na na\u0161\u00ed platform\u011b (uptime je ni\u017e\u0161\u00ed).<\/li>\n<li>Nemaj\u00ed vlastn\u00ed DNS servery v \u010c\u00edn\u011b. Odtud poch\u00e1z\u00ed mnoho chyb v testech kv\u016fli timeout\u016fm p\u0159i resolvov\u00e1n\u00ed DNS.<\/li>\n<li>Nepo\u00adskytuj\u00ed sv\u00e9 IP rozsahy -&gt; nen\u00ed mo\u017enost zapisovat spr\u00e1vn\u011b <em>set_real_ip_from<\/em> na na\u0161ich serverech.<\/li>\n<\/ul>\n<p><\/p>\n<p>Metodika (~3626 b\u011bh\u016f; v\u0161echny metriky krom\u011b Uptime v ms; statistika za jedno \u010dasov\u00e9 obdob\u00ed):<\/p>\n<p><\/p>\n<p>CDN poskytovatel<br \/>\nMedi\u00e1n<br \/>\n75%<br \/>\n95%<br \/>\nOdpov\u011b\u010f<br \/>\nOdpov\u011b\u010f webov\u00e9 str\u00e1nky<br \/>\nUptime<br \/>\n. Vytvo\u0159te A-z\u00e1znam blog a ur\u010dete pro n\u011bj n\u011bjakou fiktivn\u00ed IP (to je ofici\u00e1ln\u00ed<br \/>\nP\u0159ipojen\u00ed<br \/>\n\u010cek\u00e1n\u00ed<br \/>\nNa\u010dten\u00ed<br \/>\nSSL<\/p>\n<p>Ali CDN<br \/>\n9195<br \/>\n10749<br \/>\n17489<br \/>\n1,715<br \/>\n10,745<br \/>\n99.531<br \/>\n57<br \/>\n17<br \/>\n927<br \/>\n479<br \/>\n200<\/p>\n<p>Akamai<br \/>\n9783<br \/>\n11887<br \/>\n19888<br \/>\n2,352<br \/>\n11,550<br \/>\n98.980<br \/>\n424<br \/>\n91<br \/>\n1408<br \/>\n381<br \/>\n50<\/p>\n<p><\/p>\n<p>Rozd\u011blen\u00ed podle Percentilu (v ms):<\/p>\n<p><\/p>\n<p>Percentil<br \/>\nAkamai<br \/>\nAli CDN<\/p>\n<p>10<br \/>\n7,092<br \/>\n6,942<\/p>\n<p>20<br \/>\n7,775<br \/>\n7,583<\/p>\n<p>30<br \/>\n8,446<br \/>\n8,092<\/p>\n<p>40<br \/>\n9,146<br \/>\n8,596<\/p>\n<p>50<br \/>\n9,783<br \/>\n9,195<\/p>\n<p>60<br \/>\n10,497<br \/>\n9,770<\/p>\n<p>70<br \/>\n11,371<br \/>\n10,383<\/p>\n<p>80<br \/>\n12,670<br \/>\n11,255<\/p>\n<p>90<br \/>\n15,882<br \/>\n13,165<\/p>\n<p>100<br \/>\n91,592<br \/>\n91,596<\/p>\n<p><\/p>\n<p>Z\u00e1v\u011br je takov\u00fd: varianta s Akamai je \u017eivotaschopn\u00e1, ale ned\u00e1v\u00e1 stejn\u00e9 ukazatele stability a rychlosti jako na\u0161e vlastn\u00ed \u0159e\u0161en\u00ed v kombinaci s Ali CDN.<\/p>\n<p><\/p>\n<h2 id=\"malenkie-zametki\">Mal\u00e9 pozn\u00e1mky<\/h2>\n<p><\/p>\n<p>N\u011bkter\u00e9 body nebyly za\u0159azeny do vypr\u00e1v\u011bn\u00ed, ale cht\u011bl bych o nich napsat tak\u00e9.<\/p>\n<p><\/p>\n<h3 id=\"pekin--tokio-i-gonkong\">Peking + Tokio a Hongkong<\/h3>\n<p><\/p>\n<p>Jak jsem ji\u017e zm\u00ednil v\u00fd\u0161e, testovali jsme IPSEC tunel do Hongkongu (HK). Ale tak\u00e9 jsme testovali CEN do HK. Stoj\u00ed o n\u011bco m\u00e9n\u011b a bylo zaj\u00edmav\u00e9, jak bude fungovat mezi m\u011bsty vzd\u00e1len\u00fdmi ~100 km. Zaj\u00edmav\u00e9 bylo, \u017ee latence mezi t\u011bmito m\u011bsty byla o 100 ms vy\u0161\u0161\u00ed ne\u017e v na\u0161\u00ed p\u016fvodn\u00ed variant\u011b (do Tchaj-wanu). Rychlost a stabilita byly tak\u00e9 lep\u0161\u00ed pro Tchaj-wan. Nakonec jsme ponechali HK jako z\u00e1lo\u017en\u00ed region IPSEC.<\/p>\n<p><\/p>\n<p>Krom\u011b toho jsme zkusili nastavit takovou instalaci:<\/p>\n<p><\/p>\n<ul>\n<li>terminace klient\u016f v Pekingu,<\/li>\n<li>IPSEC a CEN do Tokia,<\/li>\n<li>v Ali CDN byl uveden jako origin server v Pekingu.<\/li>\n<\/ul>\n<p><\/p>\n<p>Toto sch\u00e9ma nebylo tak stabiln\u00ed, i kdy\u017e rychlost\u00ed v z\u00e1sad\u011b nijak nevy\u010dn\u00edvalo proti na\u0161emu \u0159e\u0161en\u00ed. Co se tunelu t\u00fd\u010de, vid\u011bl jsem ob\u010dasn\u00e9 v\u00fdpadky, i kdy\u017e by m\u011bl b\u00fdt CEN stabiln\u00ed. Proto jsme se vr\u00e1tili k p\u016fvodn\u00edmu sch\u00e9matu a zru\u0161ili tuto stage.<\/p>\n<p><\/p>\n<p>N\u00ed\u017ee uv\u00e1d\u00edm statistiky o latenci mezi r\u016fzn\u00fdmi regiony podle r\u016fzn\u00fdch kan\u00e1l\u016f. Mo\u017en\u00e1 to bude n\u011bkoho zaj\u00edmat.<\/p>\n<p><\/p>\n<p><em>IPsec<\/em><br \/>\nAli cn-beijing  GCP asia-northeast1 \u2014 193ms<br \/>\nAli cn-shenzhen  GCP asia-east2 \u2014 91ms<br \/>\nAli cn-shenzhen  GCP us-east4 \u2014 200ms<\/p>\n<p><\/p>\n<p><em>CEN<\/em><br \/>\nAli cn-beijing  Ali ap-northeast-1 \u2014 54ms (!)<br \/>\nAli cn-shenzhen  Ali cn-hongkong \u2014 6ms (!)<br \/>\nAli cn-shenzhen  Ali us-east1 \u2014 216ms<\/p>\n<p><\/p>\n<h3 id=\"obschaya-informaciya-pro-internet-v-kitae\">Obecn\u00e9 informace o internetu v \u010c\u00edn\u011b<\/h3>\n<p><\/p>\n<p>Jako dopln\u011bk k probl\u00e9m\u016fm s internetem popsan\u00fdm na za\u010d\u00e1tku, v prvn\u00ed \u010d\u00e1sti \u010dl\u00e1nku.<\/p>\n<p><\/p>\n<ul>\n<li>Internet v \u010c\u00edn\u011b funguje pom\u011brn\u011b rychle uvnit\u0159.\n<ul>\n<li>Z\u00e1v\u011br je zalo\u017een na testov\u00e1n\u00ed ve\u0159ejn\u00fdch Wi-Fi s\u00edt\u00ed na r\u016fzn\u00fdch m\u00edstech, kde jsou tyto s\u00edt\u011b pou\u017e\u00edv\u00e1ny velk\u00fdm po\u010dtem lid\u00ed.<\/li>\n<li>Rychlost stahov\u00e1n\u00ed a nahr\u00e1v\u00e1n\u00ed na servery uvnit\u0159 \u010c\u00edny byla p\u0159ibli\u017en\u011b 20 Mbit\/s a 5-10 Mbit\/s respektive.<\/li>\n<li>Rychlost k server\u016fm mimo \u010c\u00ednu je prost\u011b zanedbateln\u00e1, m\u00e9n\u011b ne\u017e 1 Mbit\/s.<\/li>\n<\/ul>\n<\/li>\n<li>Internet v \u010c\u00edn\u011b nen\u00ed p\u0159\u00edli\u0161 stabiln\u00ed.\n<ul>\n<li>N\u011bkdy se webov\u00e9 str\u00e1nky mohou otv\u00edrat rychle, n\u011bkdy pomalu (ve stejnou dobu dne v r\u016fzn\u00e9 dny), za p\u0159edpokladu, \u017ee se konfigurace nem\u011bn\u00ed. To jsme pozorovali na p\u0159\u00edkladu semrushchina.cn. M\u016f\u017ee to b\u00fdt p\u0159i\u010d\u00edt\u00e1no Ali CDN, kter\u00fd tak\u00e9 funguje tak nebo onak v z\u00e1vislosti na \u010dase dne, poloze hv\u011bzd atd.<\/li>\n<\/ul>\n<\/li>\n<li>Mobiln\u00ed internet prakticky v\u0161ude 4G nebo 4G+. Funguje v metru, v\u00fdtaz\u00edch \u2014 zkr\u00e1tka v\u0161ude.<\/li>\n<li>To, \u017ee \u010d\u00edn\u0161t\u00ed u\u017eivatel\u00e9 v\u011b\u0159\u00ed pouze dom\u00e9n\u00e1m v z\u00f3n\u011b .cn, je m\u00fdtus. Zjistili jsme to p\u0159\u00edmo od u\u017eivatel\u016f.\n<ul>\n<li>M\u016f\u017eete vid\u011bt, jak <noindex><a rel=\"nofollow\" href=\"http:\/\/baidu.cn\">http:\/\/baidu.cn<\/a><\/noindex> p\u0159esm\u011brov\u00e1v\u00e1 na www.baidu.com (tak\u00e9 v pevninsk\u00e9 \u010c\u00edn\u011b).<\/li>\n<\/ul>\n<\/li>\n<li>Mnoho zdroj\u016f je skute\u010dn\u011b blokov\u00e1no. Zjednodu\u0161en\u011b: google.com, Facebook, Twitter. Ale mnoho googleov\u00fdch zdroj\u016f funguje (samoz\u0159ejm\u011b, ne na v\u0161ech Wi-Fi a VPN nen\u00ed pou\u017eita (na stran\u011b routeru tak\u00e9, to je jist\u00e9).<\/li>\n<li>Mnoho 'technick\u00fdch' dom\u00e9n blokovan\u00fdch korporac\u00ed tak\u00e9 funguje. To znamen\u00e1, \u017ee nen\u00ed v\u017edy nutn\u00e9 nezodpov\u011bdn\u011b odstra\u0148ovat v\u0161echny google a dal\u0161\u00ed zd\u00e1nliv\u011b blokovan\u00e9 zdroje. Je t\u0159eba hledat n\u011bjak\u00fd seznam zak\u00e1zan\u00fdch dom\u00e9n.<\/li>\n<li>Maj\u00ed pouze t\u0159i hlavn\u00ed internetov\u00e9 oper\u00e1tory: China Unicom, China Telecom, China Mobile. Existuj\u00ed i men\u0161\u00ed, ale jejich pod\u00edl na trhu je nepatrn\u00fd.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"bonus-itogovaya-shema-resheniya\">Bonus: kone\u010dn\u00e1 sch\u00e9ma \u0159e\u0161en\u00ed<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Jak jsme p\u0159ekonali Velkou \u010d\u00ednskou firewall (\u010d. 3)\" src=\"\/wp-content\/uploads\/2019\/07\/ec9c09dbbad1c3f002920d875a5079d7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2 id=\"itog\">V\u00fdsledek<\/h2>\n<p><\/p>\n<p>Uplynul rok od spu\u0161t\u011bn\u00ed projektu. Za\u010dali jsme t\u00edm, \u017ee na\u0161e str\u00e1nka prost\u011b odm\u00edtala fungovat norm\u00e1ln\u011b z \u010c\u00edny a prost\u011b GET curl trval 5,5 sekundy. <\/p>\n<p><\/p>\n<p>Pot\u00e9, s takov\u00fdmi v\u00fdsledky p\u0159i prvn\u00edm \u0159e\u0161en\u00ed (Cloudflare):<\/p>\n<p><\/p>\n<p>\u0158e\u0161en\u00ed<br \/>\nUptime<br \/>\nMedi\u00e1n<br \/>\n75. percentile<br \/>\n95. percentile<\/p>\n<p>Cloudflare<br \/>\n86.6<br \/>\n18s<br \/>\n30s<br \/>\n60s<\/p>\n<p><\/p>\n<p>Nakonec jsme dos\u00e1hli takov\u00fdch v\u00fdsledk\u016f (statistika za posledn\u00ed m\u011bs\u00edc):<\/p>\n<p><\/p>\n<p>\u0158e\u0161en\u00ed<br \/>\nUptime<br \/>\nMedi\u00e1n<br \/>\n75. percentile<br \/>\n95. percentile<\/p>\n<p>Ali CDN + CEN\/IPsec + GLB<br \/>\n99.86<br \/>\n8.8s<br \/>\n9.5s<br \/>\n13.7s<\/p>\n<p><\/p>\n<p>Jak vidno, uptime 100 % se zat\u00edm nepoda\u0159ilo dos\u00e1hnout, ale n\u011bco vymysl\u00edme a pak v\u00e1m o v\u00fdsledc\u00edch pov\u00edme v nov\u00e9m \u010dl\u00e1nku :)<\/p>\n<p><\/p>\n<p>Respekt tomu, kdo do\u010detl v\u0161echny t\u0159i \u010d\u00e1sti a\u017e do konce. Douf\u00e1m, \u017ee v\u00e1s to bavilo stejn\u011b jako m\u011b, kdy\u017e jsem to psal.<\/p>\n<p><\/p>\n<h3 id=\"ps-predyduschie-chasti\">P.S. P\u0159edchoz\u00ed \u010d\u00e1sti<\/h3>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458602\/\">\u010c\u00e1st 1<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458840\/\">\u010c\u00e1st 2<\/a><\/noindex><\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/459024\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u043f\u0435\u0448\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0435\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u043f\u0440\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0441\u0442\u0435\u043d\u0434\u043e\u0432, \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u043c\u0438, \u0438 \u043a\u0430\u043a\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043d\u0438 \u0434\u0430\u043b\u0438. \u0418 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b\u043b\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26947,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36043","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.3) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:09:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:09:19+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak jsme prolomili Velk\u00fd \u010d\u00ednsk\u00fd firewall (\u010d. 3) | ProHoster","description":"Ahoj! Ka\u017ed\u00fd dobr\u00fd p\u0159\u00edb\u011bh m\u00e1 sv\u016fj konec. A n\u00e1\u0161 p\u0159\u00edb\u011bh o tom, jak jsme vym\u00fd\u0161leli \u0159e\u0161en\u00ed pro rychl\u00fd pr\u016fchod \u010c\u00ednskou firewallem, nen\u00ed v\u00fdjimkou.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.3) | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:19+00:00","article:modified_time":"2019-10-31T19:09:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36043","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:46:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:51:23","updated":"2026-01-22 01:46:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36043"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36043\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/26947"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}