{"id":53634,"date":"2019-12-06T00:00:00","date_gmt":"2019-12-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli"},"modified":"2020-02-18T14:01:34","modified_gmt":"2020-02-18T11:01:34","slug":"uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","title":{"rendered":"Zranitelnost umo\u017e\u0148uj\u00edc\u00ed zasahov\u00e1n\u00ed do TCP spojen\u00ed prov\u00e1d\u011bn\u00fdch prost\u0159ednictv\u00edm VPN tunnel\u016f.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byla publikov\u00e1na<\/a><\/noindex> Technika \u00fatoku (CVE-2019-14899), kter\u00e1 umo\u017e\u0148uje podvrhnout, zm\u011bnit nebo zam\u011bnit pakety v TCP p\u0159ipojen\u00edch proch\u00e1zej\u00edc\u00edch VPN tunely. Probl\u00e9m se dot\u00fdk\u00e1 syst\u00e9mu Linux, FreeBSD, OpenBSD, Android, macOS, iOS a dal\u0161\u00edch Unix-podobn\u00fdch syst\u00e9m\u016f. Linux podporuje mechanismus rp_filter (filtrace zp\u011btn\u00e9 cesty) pro IPv4, jeho\u017e zapnut\u00ed v re\u017eimu \u201eStrict\u201c neutralizuje tento probl\u00e9m. <\/p>\n

Metoda umo\u017e\u0148uje podvr\u017een\u00ed paket\u016f na \u00farovni TCP spojen\u00ed proch\u00e1zej\u00edc\u00edch \u0161ifrovan\u00fdm tunelem, ale neumo\u017e\u0148uje zasahovat do spojen\u00ed, kter\u00e1 pou\u017e\u00edvaj\u00ed dal\u0161\u00ed vrstvy \u0161ifrov\u00e1n\u00ed (nap\u0159\u00edklad TLS, HTTPS, SSH). Pou\u017eit\u00e9 \u0161ifrovac\u00ed algoritmy v VPN nejsou rozhoduj\u00edc\u00ed, nebo\u0165 podvr\u017een\u00e9 pakety p\u0159ich\u00e1zej\u00ed z extern\u00edho rozhran\u00ed a j\u00e1dro je zpracov\u00e1v\u00e1 jako pakety z VPN rozhran\u00ed. Nejpravd\u011bpodobn\u011bj\u0161\u00ed c\u00edlem \u00fatoku je zasahov\u00e1n\u00ed do neza\u0161ifrovan\u00fdch HTTP spojen\u00ed, ale nezapom\u00ednejme<\/a><\/noindex> i na mo\u017enost pou\u017eit\u00ed \u00fatoku k manipulaci s odpov\u011b\u010fmi DNS. <\/p>\n

\u00dasp\u011b\u0161n\u00e9 podvr\u017een\u00ed paket\u016f bylo demonstrov\u00e1no pro tunely vytv\u00e1\u0159en\u00e9 pomoc\u00ed OpenVPN, WireGuard a IKEv2\/IPSec. Probl\u00e9m se net\u00fdk\u00e1 Toru, proto\u017ee pou\u017e\u00edv\u00e1 SOCKS pro p\u0159esm\u011brov\u00e1n\u00ed provozu a vazbu na loopback rozhran\u00ed. Pro IPv4 je \u00fatok mo\u017en\u00fd, pokud je rp_filter p\u0159eveden do re\u017eimu \u201eLoose\u201c (sysctl net.ipv4.conf.all.rp_filter = 2). P\u016fvodn\u011b byl v mnoha syst\u00e9mech pou\u017e\u00edv\u00e1n re\u017eim \u201eStrict\u201c, ale od systemd 240<\/a><\/noindex>, vydan\u00e9ho v prosinci minul\u00e9ho roku, byl v\u00fdchoz\u00ed pracovn\u00ed re\u017eim nahrazen na \u201eLoose\u201c a tato zm\u011bna se odrazila v nastaven\u00ed v\u00fdchoz\u00edch hodnot mnoha distribuc\u00ed Linuxu.<\/p>\n

Mechanismus rp_filter se pou\u017e\u00edv\u00e1<\/a><\/noindex> pro dodate\u010dn\u00e9 ov\u011b\u0159en\u00ed cest proch\u00e1zej\u00edc\u00edch paket\u016f a prevenci spoofingu zdrojov\u00e9 adresy. P\u0159i nastaven\u00ed na hodnotu 0 nen\u00ed kontrola zdrojov\u00e9 adresy prov\u00e1d\u011bna a ka\u017ed\u00fd paket m\u016f\u017ee b\u00fdt bez omezen\u00ed p\u0159esm\u011brov\u00e1n mezi s\u00ed\u0165ov\u00fdmi rozhran\u00edmi. Re\u017eim 1 \u201eStrict\u201c zahrnuje kontrolu ka\u017ed\u00e9ho p\u0159ich\u00e1zej\u00edc\u00edho paketu na shodu s routovac\u00ed tabulkou, a pokud s\u00ed\u0165ov\u00e9 rozhran\u00ed, p\u0159es kter\u00e9 byl paket p\u0159ijat, nen\u00ed spojeno s optim\u00e1ln\u00ed trasou pro doru\u010den\u00ed odpov\u011bdi, paket je odm\u00edtnut. Re\u017eim 2 \u201eLoose\u201c uvol\u0148uje kontrolu, aby umo\u017enil pr\u00e1ci p\u0159i pou\u017eit\u00ed load balancer\u016f nebo asymetrick\u00e9ho routov\u00e1n\u00ed, kdy
\ncesta odpov\u011bdi m\u016f\u017ee proch\u00e1zet jin\u00fdm s\u00ed\u0165ov\u00fdm rozhran\u00edm, ne\u017e p\u0159es kter\u00e9 p\u0159i\u0161el p\u0159\u00edchoz\u00ed paket.<\/p>\n

V re\u017eimu \u201eLoose\u201c je p\u0159\u00edchoz\u00ed paket kontrolov\u00e1n na shodu s routovac\u00ed tabulkou, ale je pova\u017eov\u00e1n za platn\u00fd, pokud je zdrojov\u00e1 adresa dosa\u017eiteln\u00e1 p\u0159es jak\u00e9koli dostupn\u00e9 s\u00ed\u0165ov\u00e9 rozhran\u00ed. Navrhovan\u00fd \u00fatok je zalo\u017een na tom, \u017ee \u00fato\u010dn\u00edk m\u016f\u017ee poslat paket s podvr\u017eenou zdrojovou adresou, kter\u00e1 odpov\u00edd\u00e1 rozhran\u00ed VPN, a i kdy\u017e tento paket vstoup\u00ed do syst\u00e9mu p\u0159es extern\u00ed s\u00ed\u0165ov\u00e9 rozhran\u00ed, nikoli p\u0159es VPN, v re\u017eimu rp_filter \u201eLoose\u201c nebude takov\u00fd paket odm\u00edtnut. <\/p>\n

K proveden\u00ed \u00fatoku mus\u00ed \u00fato\u010dn\u00edk kontrolovat br\u00e1nu, p\u0159es kterou se u\u017eivatel p\u0159ipojuje k s\u00edti (nap\u0159\u00edklad prost\u0159ednictv\u00edm MITM \u00fatoku, kdy\u017e se ob\u011b\u0165 p\u0159ipojuje k bezdr\u00e1tov\u00e9mu p\u0159\u00edstupov\u00e9mu bodu ovl\u00e1dan\u00e9mu \u00fato\u010dn\u00edkem, nebo p\u0159es hacknut\u00ed routeru<\/a><\/noindex>). Kontrolov\u00e1n\u00edm br\u00e1ny, p\u0159es kterou je u\u017eivatel p\u0159ipojen k s\u00edti, m\u016f\u017ee \u00fato\u010dn\u00edk pos\u00edlat fale\u0161n\u00e9 pakety, kter\u00e9 budou vn\u00edm\u00e1ny ve kontextu s\u00ed\u0165ov\u00e9ho rozhran\u00ed VPN, ale odpov\u011bdi budou sm\u011brov\u00e1ny p\u0159es tunel.<\/p>\n

Generov\u00e1n\u00edm toku fale\u0161n\u00fdch paket\u016f, ve kter\u00fdch je vkl\u00e1d\u00e1na IP adresa rozhran\u00ed VPN, se pokou\u0161ej\u00ed ovlivnit z\u0159\u00edzen\u00e9 spojen\u00ed, av\u0161ak vliv t\u011bchto paket\u016f lze sledovat pouze pasivn\u00ed anal\u00fdzou \u0161ifrovan\u00e9ho toku dat souvisej\u00edc\u00edho s provozem tunelu. K proveden\u00ed \u00fatoku je nutn\u00e9 zjistit p\u0159id\u011blenou IP adresu s\u00ed\u0165ov\u00e9ho rozhran\u00ed tunelu ze strany VPN a tak\u00e9 zjistit, \u017ee v sou\u010dasnosti existuje aktivn\u00ed spojen\u00ed s ur\u010dit\u00fdm hostitelem. <\/p>\n

Pro stanoven\u00ed IP virtu\u00e1ln\u00edho s\u00ed\u0165ov\u00e9ho rozhran\u00ed VPN se na syst\u00e9m ob\u011bti pos\u00edlaj\u00ed SYN-ACK pakety, p\u0159i\u010dem\u017e se postupn\u011b proch\u00e1zej\u00ed cel\u00fd rozsah virtu\u00e1ln\u00edch adres (nejprve se proch\u00e1zej\u00ed adresy pou\u017e\u00edvan\u00e9 ve VPN v\u00fdchoz\u00edm zp\u016fsobem, nap\u0159\u00edklad v OpenVPN se pou\u017e\u00edv\u00e1 pods\u00ed\u0165 10.8.0.0\/24). O existenci adresy lze usuzovat na z\u00e1klad\u011b p\u0159ijet\u00ed odpov\u011bdi s p\u0159\u00edznakem RST.<\/p>\n

Podobn\u00fdm zp\u016fsobem se ur\u010duje p\u0159\u00edtomnost spojen\u00ed s konkr\u00e9tn\u00ed str\u00e1nkou a \u010d\u00edslo portu na stran\u011b klienta \u2014 proch\u00e1zen\u00edm \u010d\u00edsel port\u016f se na u\u017eivatelskou stranu odes\u00edl\u00e1 SYN paket, jeho\u017e zdrojov\u00e1 adresa je IP str\u00e1nky a c\u00edlov\u00e1 adresa je virtu\u00e1ln\u00ed IP VPN. Serverov\u00fd port lze p\u0159edpokl\u00e1dat (80 pro HTTP), zat\u00edmco \u010d\u00edslo portu na stran\u011b klienta lze vypo\u010d\u00edtat proch\u00e1zen\u00edm, anal\u00fdzou intenzity ACK odpov\u011bd\u00ed v kombinaci s absenc\u00ed paketu s flagem RST.<\/p>\n

V t\u00e9to f\u00e1zi \u00fato\u010dn\u00edk zn\u00e1 v\u0161echny \u010dty\u0159i prvky spojen\u00ed (adresy\/port IP zdroje a adresu\/port IP c\u00edle), ale aby mohl vygenerovat fale\u0161n\u00fd paket, kter\u00fd syst\u00e9m ob\u011bti akceptuje, mus\u00ed \u00fato\u010dn\u00edk ur\u010dit \u010d\u00edsla sekvence a potvrzen\u00ed (seq a ack) TCP spojen\u00ed. K ur\u010den\u00ed t\u011bchto parametr\u016f \u00fato\u010dn\u00edk neust\u00e1le odes\u00edl\u00e1 fale\u0161n\u00e9 RST pakety, p\u0159i\u010dem\u017e proch\u00e1z\u00ed r\u016fzn\u00e1 \u010d\u00edsla sekvence, dokud nezaznamen\u00e1 odpov\u011bdn\u00ed ACK paket, jeho\u017e p\u0159\u00edjem nazna\u010duje, \u017ee \u010d\u00edslo le\u017e\u00ed v TCP okn\u011b. <\/p>\n

N\u00e1sledn\u011b \u00fato\u010dn\u00edk ov\u011b\u0159uje spr\u00e1vnost ur\u010den\u00ed odes\u00edl\u00e1n\u00edm paket\u016f se stejn\u00fdm \u010d\u00edslem a sleduje p\u0159\u00edjem ACK odpov\u011bd\u00ed, p\u0159i\u010dem\u017e n\u00e1sledn\u011b ur\u010duje p\u0159esn\u00e9 \u010d\u00edslo aktu\u00e1ln\u00ed sekvence. \u00dakol je zt\u00ed\u017een t\u00edm, \u017ee odpov\u011bdi jsou odes\u00edl\u00e1ny uvnit\u0159 \u0161ifrovan\u00e9ho tunelu a jejich anal\u00fdza v zachycen\u00e9m toku dat je mo\u017en\u00e1 jen nep\u0159\u00edm\u00fdmi metodami. Skute\u010dnost odesl\u00e1n\u00ed ACK paketu adresovan\u00e9ho VPN serveru klientem je ur\u010dena na z\u00e1klad\u011b velikosti a zpo\u017ed\u011bn\u00ed \u0161ifrovan\u00fdch odpov\u011bd\u00ed, kter\u00e9 koreluj\u00ed s odesl\u00e1n\u00edm fale\u0161n\u00fdch paket\u016f. Nap\u0159\u00edklad pro OpenVPN \u0161ifrovan\u00fd paket o velikosti 79 umo\u017e\u0148uje p\u0159esn\u011b usoudit, \u017ee uvnit\u0159 je obsa\u017eena ACK potvrzen\u00ed.<\/p>\n

P\u0159edt\u00edm, ne\u017e bude ochrana proti \u00fatoku p\u0159id\u00e1na do j\u00e1dra opera\u010dn\u00edho syst\u00e9mu, jako do\u010dasn\u00e1 metoda blokov\u00e1n\u00ed probl\u00e9mu se doporu\u010duje<\/a><\/noindex> pomoc\u00ed paketov\u00e9ho filtru v \u0159et\u011bzci \u201epreroute\u201c blokovat pr\u016fchod paket\u016f, ve kter\u00fdch je jako c\u00edlov\u00e1 adresa uvedena virtu\u00e1ln\u00ed IP adresa tunelu.<\/p>\n

iptables -t raw -I PREROUTING ! -i wg0 -d 10.182.12.8 -m addrtype ! --src-type LOCAL -j DROP<\/p>\n

nebo pro nftables<\/p>\n

nft add table ip raw
\n nft add chain ip raw prerouting '{ type filter hook prerouting priority 0; }'
\n nft add rule ip raw prerouting 'iifname != \u201ewg0\u201c ip daddr 10.182.12.8 fib saddr type != local drop'<\/p>\n

Pro ochranu p\u0159i pou\u017e\u00edv\u00e1n\u00ed tunel\u016f s adresami IPv4 sta\u010d\u00ed p\u0159epnout rp_filter do re\u017eimu \u201eStrict\u201c (\u201esysctl net.ipv4.conf.all.rp_filter = 1\u201c). Z pohledu VPN lze metodu ur\u010dov\u00e1n\u00ed \u010d\u00edsla sekvence blokovat p\u0159id\u00e1n\u00edm dodate\u010dn\u00e9ho vypln\u011bn\u00ed k \u0161ifrovan\u00fdm paket\u016fm, co\u017e zp\u016fsob\u00ed, \u017ee v\u0161echny pakety budou m\u00edt stejnou velikost. <\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043f\u0440\u043e\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux, FreeBSD, OpenBSD, Android, macOS, iOS \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. Linux \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c rp_filter (reverse path filtering) \u0434\u043b\u044f IPv4, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u0440\u0435\u0436\u0438\u043c «Strict» \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53634","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost, kter\u00e1 umo\u017e\u0148uje proniknout do TCP spojen\u00ed prov\u00e1d\u011bn\u00fdch p\u0159es VPN tunely | ProHoster","description":"Byla zve\u0159ejn\u011bna technika \u00fatoku (CVE-2019-14899), kter\u00e1 umo\u017e\u0148uje podm\u011bnit, zm\u011bnit nebo vlo\u017eit pakety.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043a\u043b\u0438\u043d\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-14899), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-pozvolyayushhaya-vklinivatsya-v-tcp-soedineniya-osushhestvlyaemye-cherez-vpn-tunneli","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-05T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53634","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 08:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:21:20","updated":"2026-01-24 08:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=53634"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/53634\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=53634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=53634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=53634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}