{"id":72062,"date":"2020-03-01T14:51:13","date_gmt":"2020-03-01T11:51:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker"},"modified":"2020-03-03T16:14:00","modified_gmt":"2020-03-03T13:14:00","slug":"sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","title":{"rendered":"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Informa\u010dn\u00ed bezpe\u010dnost se odd\u011blila od telekomunikac\u00ed jako samostatn\u00fd obor se svou specifikou a sv\u00fdm vybaven\u00edm. Existuje v\u0161ak m\u00e1lo zn\u00e1m\u00e1 t\u0159\u00edda za\u0159\u00edzen\u00ed, kter\u00e1 stoj\u00ed na pomez\u00ed telekomunikac\u00ed a informa\u010dn\u00ed bezpe\u010dnosti \u2013 <strong>brokeri s\u00ed\u0165ov\u00fdch paket\u016f <\/strong>(Network Packet Broker), tak\u00e9 naz\u00fdvan\u00ed z\u00e1t\u011b\u017eov\u00ed vyrovn\u00e1va\u010de, specializovan\u00e9\/m monitorovac\u00ed switche, agreg\u00e1tory provozu, Security Delivery Platform, Network Visibility a tak d\u00e1le. A my, jako rusk\u00fd v\u00fdrobce a v\u00fdvoj\u00e1\u0159 takov\u00fdch za\u0159\u00edzen\u00ed, bychom cht\u011bli o nich \u0159\u00edci v\u00edce.<\/p>\n<p><img decoding=\"async\" alt=\"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/4df6859dbb9973439686aa5c4e6f256c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Oblast pou\u017eit\u00ed a \u0159e\u0161en\u00e9 \u00fakoly<\/h3>\n<p>\nBrokeri s\u00ed\u0165ov\u00fdch paket\u016f jsou specializovan\u00e1 za\u0159\u00edzen\u00ed, kter\u00e1 na\u0161la nejv\u011bt\u0161\u00ed uplatn\u011bn\u00ed v syst\u00e9mech informa\u010dn\u00ed bezpe\u010dnosti. Tento typ za\u0159\u00edzen\u00ed je relativn\u011b nov\u00fd a m\u00e1lo zastoupen\u00fd v b\u011b\u017en\u00e9 s\u00ed\u0165ov\u00e9 infrastruktu\u0159e ve srovn\u00e1n\u00ed se switchemi, sm\u011brova\u010di atd. Pion\u00fdrem ve v\u00fdvoji tohoto typu za\u0159\u00edzen\u00ed byla americk\u00e1 spole\u010dnost Gigamon. V sou\u010dasnosti na tomto trhu p\u0159ibylo zna\u010dn\u011b v\u00edce hr\u00e1\u010d\u016f (v\u010detn\u011b podobn\u00fdch \u0159e\u0161en\u00ed od zn\u00e1m\u00e9ho v\u00fdrobce testovac\u00edch komplex\u016f \u2013 spole\u010dnosti IXIA), ale o existenci takov\u00fdch za\u0159\u00edzen\u00ed st\u00e1le v\u00ed jen \u00fazk\u00fd okruh profesion\u00e1l\u016f. Jak bylo uvedeno v\u00fd\u0161e, ani terminologie nen\u00ed jednozna\u010dn\u00e1: n\u00e1zvy se pohybuj\u00ed od \u201esyst\u00e9m\u016f zaji\u0161t\u011bn\u00ed pr\u016fhlednosti s\u00edt\u011b\u201c po jednoduch\u00e9 \u201evyrovn\u00e1va\u010de\u201c.<\/p>\n<p>P\u0159i v\u00fdvoji broker\u016f s\u00ed\u0165ov\u00fdch paket\u016f jsme se setkali s t\u00edm, \u017ee krom\u011b anal\u00fdzy sm\u011br\u016f rozvoje funkcionality a testov\u00e1n\u00ed v laborato\u0159\u00edch\/testovac\u00edch z\u00f3n\u00e1ch je nutn\u00e9 sou\u010dasn\u011b vysv\u011btlovat potenci\u00e1ln\u00edm z\u00e1kazn\u00edk\u016fm existenci takov\u00e9 t\u0159\u00eddy za\u0159\u00edzen\u00ed, proto\u017ee ne v\u0161ichni o nich v\u00ed.<\/p>\n<p>P\u0159ed 15-20 lety bylo v s\u00edti m\u00e1lo provozu a \u0161lo p\u0159ev\u00e1\u017en\u011b o m\u00e9n\u011b d\u016fle\u017eit\u00e1 data. Ale <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Jakob_Nielsen_(usability_consultant)#Contributions\">Nielsen\u016fv z\u00e1kon<\/a><\/noindex> v podstat\u011b opakuje <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%97%D0%B0%D0%BA%D0%BE%D0%BD_%D0%9C%D1%83%D1%80%D0%B0\">Moore\u016fv z\u00e1kon<\/a><\/noindex>: rychlost internetov\u00e9ho p\u0159ipojen\u00ed se ka\u017edoro\u010dn\u011b zvy\u0161uje o 50 %. Objem provozu rovn\u011b\u017e vytrvale roste (na grafu je uvedena progn\u00f3za z roku 2017 od spole\u010dnosti Cisco, zdroj Cisco Visual Networking Index: Forecast and Trends, 2017\u20132022):<\/p>\n<p><img decoding=\"async\" alt=\"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/1f17d80ded705b9d06781fbd96219847.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSpolu se zv\u00fd\u0161en\u00edm rychlosti roste d\u016fle\u017eitost cirkuluj\u00edc\u00ed informace (to zahrnuje obchodn\u00ed tajemstv\u00ed i proslul\u00e9 osobn\u00ed \u00fadaje) a celkov\u011b funk\u010dnost infrastruktury. <\/p>\n<p>Obor informa\u010dn\u00ed bezpe\u010dnosti se tedy tak\u00e9 za\u010dal vyv\u00edjet. Pr\u016fmysl na to reagoval vznikem cel\u00e9ho spektra za\u0159\u00edzen\u00ed pro hlubokou anal\u00fdzu provozu (DPI): od syst\u00e9m\u016f pro prevenci DDoS \u00fatok\u016f a\u017e po syst\u00e9my pro spr\u00e1vu bezpe\u010dnostn\u00edch ud\u00e1lost\u00ed, v\u010detn\u011b IDS, IPS, DLP, NBA, SIEM, Antimailware a tak d\u00e1le. Obvykle je ka\u017ed\u00fd z t\u011bchto prost\u0159edk\u016f software, kter\u00fd se instaluje na serverovou platformu. Ka\u017ed\u00fd program (analytick\u00e9 prost\u0159edky) je nav\u00edc instalov\u00e1n na svou vlastn\u00ed serverovou platformu: v\u00fdrobci softwaru jsou r\u016fzn\u00ed, a tak\u00e9 pro anal\u00fdzu na \u00farovni L7 je zapot\u0159eb\u00ed mno\u017estv\u00ed v\u00fdpo\u010detn\u00edch zdroj\u016f.<\/p>\n<p>P\u0159i budov\u00e1n\u00ed syst\u00e9mu informa\u010dn\u00ed bezpe\u010dnosti je nezbytn\u00e9 vy\u0159e\u0161it n\u011bkolik hlavn\u00edch \u00fakol\u016f:<\/p>\n<ul>\n<li>Jak\u00fdm zp\u016fsobem p\u0159en\u00e1\u0161et provoz z infrastruktury na analytick\u00e9 syst\u00e9my? (P\u016fvodn\u011b navr\u017een\u00e9 SPAN porty v modern\u00ed infrastruktu\u0159e ji\u017e nesta\u010d\u00ed ani co do po\u010dtu, ani co do v\u00fdkonu.)<\/li>\n<li>Jak\u00fdm zp\u016fsobem rozd\u011blovat provoz mezi r\u016fzn\u00e9 analytick\u00e9 syst\u00e9my?<\/li>\n<li>Jak\u00fdm zp\u016fsobem \u0161k\u00e1lovat syst\u00e9my v p\u0159\u00edpad\u011b nedostate\u010dn\u00e9ho v\u00fdkonu jednoho instance analyz\u00e1toru pro zpracov\u00e1n\u00ed ve\u0161ker\u00e9ho p\u0159\u00edchoz\u00edho provozu?<\/li>\n<li>Jak\u00fdm zp\u016fsobem monitorovat rozhran\u00ed 40G\/100G (a v bl\u00edzk\u00e9 budoucnosti i 200G\/400G), proto\u017ee analytick\u00e9 prost\u0159edky v sou\u010dasnosti podporuj\u00ed pouze rozhran\u00ed 1G\/10G\/25G?<\/li>\n<\/ul>\n<p>\nA n\u00e1sleduj\u00edc\u00ed souvisej\u00edc\u00ed \u00fakoly:<\/p>\n<ul>\n<li>Jak\u00fdm zp\u016fsobem minimalizovat ne\u017e\u00e1douc\u00ed provoz, kter\u00fd nevy\u017eaduje zpracov\u00e1n\u00ed, ale dost\u00e1v\u00e1 se na analytick\u00e9 prost\u0159edky a spot\u0159ebov\u00e1v\u00e1 jejich zdroje?<\/li>\n<li>Jak\u00fdm zp\u016fsobem zpracov\u00e1vat enkapsulovan\u00e9 pakety a pakety se slu\u017eebn\u00edmi \u0161t\u00edtky za\u0159\u00edzen\u00ed, jejich\u017e p\u0159\u00edprava na anal\u00fdzu se ukazuje b\u00fdt bu\u010f n\u00e1ro\u010dn\u00e1 na zdroje, nebo zcela nerealizovateln\u00e1?<\/li>\n<li>Jak\u00fdm zp\u016fsobem vylou\u010dit z anal\u00fdzy \u010d\u00e1st provozu, kter\u00e1 nepodl\u00e9h\u00e1 regulaci bezpe\u010dnostn\u00ed politikou (nap\u0159\u00edklad provoz mana\u017eera)?<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/21453d662b8507eb2479065c9f879a87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nJak je v\u0161em zn\u00e1mo, popt\u00e1vka vytv\u00e1\u0159\u00ed nab\u00eddku, a v reakci na tyto pot\u0159eby za\u010dali vznikat broke\u0159i s\u00ed\u0165ov\u00fdch paket\u016f.<\/p>\n<h3>Obecn\u00fd popis broker\u016f s\u00ed\u0165ov\u00fdch paket\u016f<\/h3>\n<p>\nBrokery s\u00ed\u0165ov\u00fdch paket\u016f funguj\u00ed na \u00farovni paket\u016f, a v tom jsou podobn\u00e9 b\u011b\u017en\u00fdm switch\u016fm. Hlavn\u00ed rozd\u00edl od switch\u016f spo\u010d\u00edv\u00e1 v tom, \u017ee pravidla pro distribuci a agregaci provozu v brokerech s\u00ed\u0165ov\u00fdch paket\u016f jsou zcela ur\u010dena nastaven\u00edmi. V brokerech s\u00ed\u0165ov\u00fdch paket\u016f neexistuj\u00ed standardy pro vytv\u00e1\u0159en\u00ed tabulek p\u0159epos\u00edl\u00e1n\u00ed (MAC tabulek) a protokol\u016f v\u00fdm\u011bny s jin\u00fdmi switchemi (nap\u0159\u00edklad STP), a proto je rozsah mo\u017en\u00fdch nastaven\u00ed a rozum\u011bn\u00fdch pol\u00ed v nich mnohem \u0161ir\u0161\u00ed. Broker m\u016f\u017ee rovnom\u011brn\u011b rozd\u011blit provoz z jednoho nebo v\u00edce vstupn\u00edch port\u016f na ur\u010den\u00fd rozsah v\u00fdstupn\u00edch port\u016f s funkc\u00ed rovnom\u011brn\u00e9ho zat\u00ed\u017een\u00ed na v\u00fdstupu. Lze stanovit pravidla pro kop\u00edrov\u00e1n\u00ed, filtrov\u00e1n\u00ed, klasifikaci, deduplikaci a modifikaci provozu. Tato pravidla mohou b\u00fdt aplikov\u00e1na na r\u016fzn\u00e9 skupiny vstupn\u00edch port\u016f brokera s\u00ed\u0165ov\u00fdch paket\u016f, a tak\u00e9 aplikov\u00e1na postupn\u011b za sebou ve samotn\u00e9m za\u0159\u00edzen\u00ed. D\u016fle\u017eitou v\u00fdhodou paketov\u00e9ho brokera je schopnost zpracov\u00e1n\u00ed provozu p\u0159i pln\u00e9 rychlosti toku a zachov\u00e1n\u00ed integrity sessions (v p\u0159\u00edpad\u011b vyva\u017eov\u00e1n\u00ed z\u00e1t\u011b\u017ee na n\u011bkolik stejnorod\u00fdch syst\u00e9m\u016f DPI).<\/p>\n<p>Zachov\u00e1n\u00ed integrity sessions spo\u010d\u00edv\u00e1 v p\u0159enosu v\u0161ech paket\u016f relace transportn\u00ed \u00farovn\u011b (TCP\/UDP\/SCTP) na jeden port. To je d\u016fle\u017eit\u00e9, proto\u017ee syst\u00e9my DPI (obvykle jde o software b\u011b\u017e\u00edc\u00ed na serveru p\u0159ipojen\u00e9m k v\u00fdstupn\u00edmu portu paketov\u00e9ho brokera) analyzuj\u00ed obsah provozu na \u00farovni aplikac\u00ed, a v\u0161echny pakety odes\u00edlan\u00e9\/p\u0159ij\u00edman\u00e9 jednou aplikac\u00ed mus\u00ed p\u0159ich\u00e1zet na stejn\u00fd instance analyz\u00e1toru. Pokud se pakety jedn\u00e9 relace ztrat\u00ed nebo rozd\u011bl\u00ed mezi r\u016fzn\u00e9 za\u0159\u00edzen\u00ed DPI, ocitne se ka\u017ed\u00e9 jednotliv\u00e9 za\u0159\u00edzen\u00ed DPI v situaci, kter\u00e1 je podobn\u00e1 \u010dten\u00ed ne\u00fapln\u00e9ho textu, tedy jednotliv\u00fdch slov z n\u011bj. A pravd\u011bpodobn\u011b text nepochop\u00ed.<\/p>\n<p>Tak\u017ee, orientov\u00e1ny na syst\u00e9my informa\u010dn\u00ed bezpe\u010dnosti, brokery s\u00ed\u0165ov\u00fdch paket\u016f maj\u00ed funkce, kter\u00e9 pom\u00e1haj\u00ed p\u0159ipojit k vysokorychlostn\u00edm telekomunika\u010dn\u00edm s\u00edt\u00edm softwarov\u00e9 komplexy DPI a sn\u00ed\u017eit jejich z\u00e1t\u011b\u017e: prov\u00e1d\u011bj\u00ed p\u0159edb\u011b\u017en\u00e9 filtrov\u00e1n\u00ed, klasifikaci a p\u0159\u00edpravu provozu pro zjednodu\u0161en\u00ed n\u00e1sledn\u00e9ho zpracov\u00e1n\u00ed. <\/p>\n<p>Krom\u011b toho, jeliko\u017e brokeri s\u00ed\u0165ov\u00fdch paket\u016f poskytuj\u00ed \u0161irokou \u0161k\u00e1lu statistik a \u010dasto jsou p\u0159ipojeni k r\u016fzn\u00fdm bod\u016fm s\u00edt\u011b, nach\u00e1zej\u00ed tak\u00e9 sv\u00e9 m\u00edsto p\u0159i diagnostice probl\u00e9m\u016f s funk\u010dnost\u00ed samotn\u00e9 s\u00ed\u0165ov\u00e9 infrastruktury.<\/p>\n<h3>Z\u00e1kladn\u00ed funkce broker\u016f s\u00ed\u0165ov\u00fdch paket\u016f<\/h3>\n<p>\nN\u00e1zev \u201especializovan\u00e9\/monitorovac\u00ed switche\u201c vznikl od z\u00e1kladn\u00edho \u00fa\u010delu: shrom\u00e1\u017edit provoz z infrastruktury (obvykle pomoc\u00ed pasivn\u00edch optick\u00fdch odbo\u010dek TAP a\/nebo SPAN port\u016f) a rozd\u011blit jej mezi prost\u0159edky anal\u00fdzy. Mezi r\u016fzn\u00e9 typy syst\u00e9m\u016f se provoz zrcadl\u00ed (duplikuje), mezi stejn\u00fdmi typy se vyva\u017euje. V z\u00e1kladn\u00ed funkce obvykle pat\u0159\u00ed filtrov\u00e1n\u00ed podle pol\u00ed a\u017e do L4 (MAC, IP, TCP\/UDP port atd.) a agregace n\u011bkolika slab\u011b zat\u00ed\u017een\u00fdch kan\u00e1l\u016f do jednoho (nap\u0159\u00edklad pro zpracov\u00e1n\u00ed na jednom syst\u00e9mu DPI). <\/p>\n<p>Tato funkce zabezpe\u010duje \u0159e\u0161en\u00ed z\u00e1kladn\u00edho \u00fakolu \u2014 p\u0159ipojen\u00ed syst\u00e9m\u016f DPI k s\u00ed\u0165ov\u00e9 infrastruktu\u0159e. Brokery r\u016fzn\u00fdch v\u00fdrobc\u016f, kter\u00e9 se omezuj\u00ed na z\u00e1kladn\u00ed funk\u010dnost, zabezpe\u010duj\u00ed zpracov\u00e1n\u00ed a\u017e 32 rozhran\u00ed 100G na 1U (v\u00edce rozhran\u00ed se fyzicky nevejde na p\u0159edn\u00ed panel 1U). Nicm\u00e9n\u011b neumo\u017e\u0148uj\u00ed sn\u00ed\u017eit z\u00e1t\u011b\u017e na prost\u0159edky anal\u00fdzy a pro slo\u017eitou infrastrukturu nemohou zabezpe\u010dit ani po\u017eadavky na z\u00e1kladn\u00ed funkci: relace rozd\u011blen\u00e1 do n\u011bkolika tunel\u016f (nebo opat\u0159en\u00e1 MPLS zna\u010dkami) se m\u016f\u017ee rozbalancovat na r\u016fzn\u00e9 instance analyz\u00e1toru a celkov\u011b vypadnout z anal\u00fdzy. <\/p>\n<p>Krom\u011b p\u0159id\u00e1n\u00ed rozhran\u00ed 40\/100G a t\u00edm p\u00e1dem zv\u00fd\u0161en\u00ed v\u00fdkonu se brokeri s\u00ed\u0165ov\u00fdch paket\u016f aktivn\u011b vyv\u00edjej\u00ed v oblasti poskytov\u00e1n\u00ed z\u00e1sadn\u011b nov\u00fdch mo\u017enost\u00ed: od vyva\u017eov\u00e1n\u00ed podle vlo\u017een\u00fdch hlavi\u010dek tunel\u016f a\u017e po de\u0161ifrov\u00e1n\u00ed provozu. Bohu\u017eel, takov\u00e9 modely se nemohou py\u0161nit v\u00fdkonem v terabitech, ale umo\u017e\u0148uj\u00ed vytvo\u0159it skute\u010dn\u011b kvalitn\u00ed a technicky \u201ekr\u00e1sn\u00fd\u201c syst\u00e9m informa\u010dn\u00ed bezpe\u010dnosti, v n\u011bm\u017e ka\u017ed\u00fd analytick\u00fd prost\u0159edek zaru\u010den\u011b z\u00edsk\u00e1v\u00e1 pouze pot\u0159ebn\u00e9 informace v nejvhodn\u011bj\u0161\u00ed podob\u011b pro anal\u00fdzu.<\/p>\n<h3>Roz\u0161\u00ed\u0159en\u00e9 funkce broker\u016f s\u00ed\u0165ov\u00fdch paket\u016f<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/874e5b6372a2e532d86966d1c7fe4ba1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<strong>1.<\/strong> Uveden\u00e9 v\u00fd\u0161e <strong>vyva\u017eov\u00e1n\u00ed podle vlo\u017een\u00fdch hlavi\u010dek v tunelovan\u00e9m provozu.<\/strong><\/p>\n<p>Pro\u010d je to d\u016fle\u017eit\u00e9? Zva\u017eme 3 aspekty, kter\u00e9 mohou b\u00fdt kritick\u00e9 spole\u010dn\u011b nebo jednotliv\u011b:<\/p>\n<ul>\n<li>zaji\u0161t\u011bn\u00ed rovnom\u011brnosti vyva\u017eov\u00e1n\u00ed p\u0159i mal\u00e9 \u010detnosti tunel\u016f. V p\u0159\u00edpad\u011b, \u017ee na bodu p\u0159ipojen\u00ed informa\u010dn\u00edch bezpe\u010dnostn\u00edch syst\u00e9m\u016f jsou pouze 2 tunely, nebude mo\u017en\u00e9 je rozd\u011blit podle extern\u00edch hlavi\u010dek na 3 serverov\u00e9 platformy a zachovat relaci. V tomto p\u0159\u00edpad\u011b se provoz v s\u00edti p\u0159en\u00e1\u0161\u00ed nerovnom\u011brn\u011b a sm\u011brov\u00e1n\u00ed ka\u017ed\u00e9ho tunelu do samostatn\u00e9ho zpracov\u00e1n\u00ed vy\u017eaduje nadbyte\u010dnou kapacitu tohoto zpracovatele;<\/li>\n<li>zaji\u0161t\u011bn\u00ed integrity relac\u00ed a tok\u016f v\u00edcesessionov\u00fdch protokol\u016f (nap\u0159\u00edklad FTP a VoIP), jejich\u017e pakety se ocitly v r\u016fzn\u00fdch tunelech. Slo\u017eitost s\u00ed\u0165ov\u00e9 infrastruktury neust\u00e1le nar\u016fst\u00e1: z\u00e1lohov\u00e1n\u00ed, virtualizace, zjednodu\u0161en\u00ed spr\u00e1vy a tak d\u00e1le. Na jedn\u00e9 stran\u011b to zvy\u0161uje spolehlivost z pohledu p\u0159enosu dat, na druh\u00e9 stran\u011b zt\u011b\u017euje pr\u00e1ci informa\u010dn\u011b-bezpe\u010dnostn\u00edch syst\u00e9m\u016f. I p\u0159i dostate\u010dn\u00e9 kapacit\u011b analyz\u00e1tor\u016f pro zpracov\u00e1n\u00ed vyhrazen\u00e9ho kan\u00e1lu s tunely se probl\u00e9m ukazuje jako ne\u0159e\u0161iteln\u00fd, proto\u017ee \u010d\u00e1st paket\u016f u\u017eivatelsk\u00e9 relace se p\u0159en\u00e1\u0161\u00ed jin\u00fdm kan\u00e1lem. A\u010dkoli se v n\u011bkter\u00fdch infrastruktur\u00e1ch je\u0161t\u011b sna\u017e\u00ed o integritu relac\u00ed, v\u00edcesessionov\u00e9 protokoly mohou sm\u011b\u0159ovat zcela r\u016fzn\u00fdmi cestami;<\/li>\n<li>vyva\u017eov\u00e1n\u00ed p\u0159i existenci MPLS, VLAN, individu\u00e1ln\u00edch \u0161t\u00edtk\u016f za\u0159\u00edzen\u00ed atd. Nej\u0161t\u011bd\u0159eji tunely, ale p\u0159esto z\u00e1kladn\u00ed funk\u010dn\u00ed vybaven\u00ed m\u016f\u017ee toto p\u0159en\u00e1\u0161en\u00e9 \u00fadaje ch\u00e1pat nikoli jako IP a vyva\u017eovat podle MAC adres, co\u017e op\u011btovn\u011b naru\u0161uje rovnom\u011brnost vyva\u017eov\u00e1n\u00ed nebo integritu relac\u00ed.<\/li>\n<\/ul>\n<p>\nBroker s\u00ed\u0165ov\u00fdch paket\u016f analyzuje extern\u00ed hlavi\u010dky a postupn\u011b p\u0159ech\u00e1z\u00ed k ukazatel\u016fm a\u017e k nejvno\u0159en\u011bj\u0161\u00ed IP hlavi\u010dce a vyva\u017euje ji\u017e na jej\u00edm z\u00e1klad\u011b. V\u00fdsledkem je, \u017ee tok\u016f se st\u00e1v\u00e1 podstatn\u011b v\u00edce (tedy je mo\u017en\u00e9 je v\u00edc rovnom\u011brn\u011b rozlo\u017eit na v\u00edce platforem) a syst\u00e9m DPI dost\u00e1v\u00e1 v\u0161echny pakety relace a v\u0161echny souvisej\u00edc\u00ed relace v\u00edcesessionov\u00fdch protokol\u016f.<\/p>\n<p><strong>2. Modifikace provozu.<\/strong><br \/>\nJedna z nej\u0161ir\u0161\u00edch funkc\u00ed s mnoha mo\u017enostmi a variantami jejich pou\u017eit\u00ed:<\/p>\n<ul>\n<li>odstran\u011bn\u00ed payloadu, v tomto p\u0159\u00edpad\u011b se na prost\u0159edek anal\u00fdzy p\u0159en\u00e1\u0161ej\u00ed pouze hlavi\u010dky paket\u016f. To je relevantn\u00ed pro analytick\u00e9 n\u00e1stroje nebo typy provozu, u nich\u017e obsah paket\u016f nehraje roli nebo nen\u00ed analyzovateln\u00fd. Nap\u0159\u00edklad u \u0161ifrovan\u00e9ho provozu mohou b\u00fdt zaj\u00edmav\u00e1 parametrick\u00e1 data v\u00fdm\u011bny (kdo, s k\u00fdm, kdy a kolik), zat\u00edmco payload p\u0159edstavuje v podstat\u011b odpad, zab\u00edraj\u00edc\u00ed kan\u00e1l a v\u00fdpo\u010detn\u00ed prost\u0159edky analyz\u00e1toru. Jsou mo\u017en\u00e9 variace, kdy je payload o\u0159\u00edznut, po\u010d\u00ednaje zadan\u00fdm posunem \u2013 to poskytuje analyz\u00e1tor\u016fm dodate\u010dn\u00fd prostor.<\/li>\n<li>detunelov\u00e1n\u00ed, tedy odstran\u011bn\u00ed hlavi\u010dek, kter\u00e9 ozna\u010duj\u00ed a identifikuj\u00ed tunely. C\u00edlem je sn\u00ed\u017eit z\u00e1t\u011b\u017e na analytick\u00e9 n\u00e1stroje a zv\u00fd\u0161it jejich \u00fa\u010dinnost. Detunelov\u00e1n\u00ed m\u016f\u017ee prob\u00edhat na z\u00e1klad\u011b pevn\u00e9ho posunu nebo dynamickou anal\u00fdzou hlavi\u010dek a ur\u010den\u00edm posunu pro ka\u017ed\u00fd paket.<\/li>\n<li>odstran\u011bn\u00ed \u010d\u00e1sti hlavi\u010dek paket\u016f: MPLS zna\u010dek, VLAN, specifick\u00fdch pol\u00ed extern\u00edho za\u0159\u00edzen\u00ed.<\/li>\n<li>maskov\u00e1n\u00ed \u010d\u00e1sti hlavi\u010dek, nap\u0159\u00edklad maskov\u00e1n\u00ed IP adres za \u00fa\u010delem anonymizace provozu.<\/li>\n<li>p\u0159id\u00e1n\u00ed provozn\u00edch informac\u00ed do paketu: \u010dasov\u00e9 zna\u010dky, vstupn\u00ed port, zna\u010dky t\u0159\u00eddy provozu atd.<\/li>\n<\/ul>\n<p>\n<strong>3. Deduplicace<\/strong> \u2013 \u010di\u0161t\u011bn\u00ed od opakovan\u00fdch paket\u016f provozu, kter\u00e9 jsou p\u0159ed\u00e1v\u00e1ny k analytick\u00fdm prost\u0159edk\u016fm. Opakuj\u00edc\u00ed se pakety obvykle vznikaj\u00ed z d\u016fvod\u016f p\u0159ipojen\u00ed k infrastruktu\u0159e \u2013 provoz m\u016f\u017ee proch\u00e1zet n\u011bkolika anal\u00fdzami a b\u00fdt zrcadlen s ka\u017ed\u00fdm z nich. Tak\u00e9 doch\u00e1z\u00ed k opakovan\u00e9mu odes\u00edl\u00e1n\u00ed nedoru\u010den\u00fdch TCP paket\u016f, ale pokud jich je hodn\u011b, jsou to sp\u00ed\u0161e ot\u00e1zky k monitorov\u00e1n\u00ed kvality s\u00edt\u011b, a ne k informa\u010dn\u00ed bezpe\u010dnosti v n\u00ed.<\/p>\n<p><strong>4. Roz\u0161\u00ed\u0159en\u00e9 funkce filtrov\u00e1n\u00ed <\/strong>\u2013 od vyhled\u00e1v\u00e1n\u00ed konkr\u00e9tn\u00edch hodnot podle zadan\u00e9ho posunu po signaturn\u00ed anal\u00fdzu cel\u00e9ho paketu.<\/p>\n<p><strong>5. Generace NetFlow\/IPFIX<\/strong> \u2013 sb\u011br \u0161irok\u00e9ho spektra statistik o proch\u00e1zej\u00edc\u00edm provozu a jeho p\u0159enos k analytick\u00fdm prost\u0159edk\u016fm.<\/p>\n<p><strong>6. De\u0161ifrov\u00e1n\u00ed SSL provozu,<\/strong> funguje za podm\u00ednky p\u0159edchoz\u00edho nahr\u00e1n\u00ed certifik\u00e1tu a kl\u00ed\u010d\u016f do brokeru s\u00ed\u0165ov\u00fdch paket\u016f. Nicm\u00e9n\u011b to umo\u017e\u0148uje v\u00fdrazn\u011b odleh\u010dit analytick\u00fdm prost\u0159edk\u016fm. <\/p>\n<p>Existuje je\u0161t\u011b mnoho u\u017eite\u010dn\u00fdch a marketingov\u00fdch funkc\u00ed, ale hlavn\u00ed z\u0159ejm\u011b byly uvedeny.<\/p>\n<p>Rozvoj syst\u00e9m\u016f detekce (napaden\u00ed, DDoS \u00fatoky) v syst\u00e9mech jejich prevence, stejn\u011b jako zaveden\u00ed aktivn\u00edch prost\u0159edk\u016f DPI, vy\u017eadoval zm\u011bnu zapojen\u00ed z pasivn\u00edho (p\u0159es TAP nebo SPAN porty) na aktivn\u00ed (\u201ev p\u0159eru\u0161en\u00ed\u201c). Tato okolnost zv\u00fd\u0161ila po\u017eadavky na spolehlivost (proto\u017ee selh\u00e1n\u00ed v takov\u00e9m p\u0159\u00edpad\u011b vede k naru\u0161en\u00ed funk\u010dnosti cel\u00e9 s\u00edt\u011b, nikoli pouze ke ztr\u00e1t\u011b kontroly nad informa\u010dn\u00ed bezpe\u010dnost\u00ed) a vedla k v\u00fdm\u011bn\u011b optick\u00fdch odbo\u010dek za optick\u00e9 bypass (aby se vy\u0159e\u0161il probl\u00e9m z\u00e1vislosti funk\u010dnosti s\u00edt\u011b na funk\u010dnosti syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti), ale hlavn\u00ed funk\u010dnost a jej\u00edm po\u017eadavk\u016fm z\u016fstaly stejn\u00e9. <\/p>\n<p>Vyvinuli jsme DS Integrity Brokery s\u00ed\u0165ov\u00fdch paket\u016f s rozhran\u00edmi 100G, 40G a 10G od konstrukce a sch\u00e9matu a\u017e po vestav\u011bn\u00fd software. P\u0159i\u010dem\u017e na rozd\u00edl od jin\u00fdch broker\u016f paket\u016f jsou funkce modifikace a vyva\u017eov\u00e1n\u00ed podle vno\u0159en\u00fdch hlavi\u010dek tunel\u016f u n\u00e1s realizov\u00e1ny hardwarov\u011b, p\u0159i pln\u00e9 rychlosti port\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2013 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/a7f08a061eb707ef8264158b6d1362bc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsol\/blog\/490252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u041d\u043e \u0435\u0441\u0442\u044c \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0438 \u0438\u043d\u0444\u043e\u0431\u0435\u0437\u0430 \u2013 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker), \u043e\u043d\u0438 \u0436\u0435 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435\/\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u043e\u0440\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, Security Delivery Platform, Network Visibility \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0418 \u043d\u0430\u043c, \u043a\u0430\u043a \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0438 \u0438\u0437\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72063,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-01T11:51:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:14:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Modern\u00ed \u0159e\u0161en\u00ed pro budov\u00e1n\u00ed syst\u00e9m\u016f informa\u010dn\u00ed bezpe\u010dnosti \u2014 brokery s\u00ed\u0165ov\u00fdch paket\u016f (Network Packet Broker) | ProHoster","description":"Informa\u010dn\u00ed bezpe\u010dnost se odd\u011blila od telekomunikac\u00ed jako samostatn\u00fd obor se svou specifikou a sv\u00fdm za\u0159\u00edzen\u00edm.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster","og:description":"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:13+00:00","article:modified_time":"2020-03-03T13:14:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72062","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-10-04 07:02:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/72062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=72062"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/72062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/72063"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=72062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=72062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=72062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}