{"id":95258,"date":"2020-09-27T07:42:43","date_gmt":"2020-09-27T05:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost"},"modified":"2020-09-27T07:42:43","modified_gmt":"2020-09-27T05:42:43","slug":"hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","title":{"rendered":"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/338fdf28dfed6654cfdad13538de2954.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V prvn\u00edch dvou kvart\u00e1lech roku 2020 se po\u010det DDoS \u00fatok\u016f zv\u00fd\u0161il t\u00e9m\u011b\u0159 t\u0159ikr\u00e1t, p\u0159i\u010dem\u017e 65 % z nich tvo\u0159\u00ed primitivn\u00ed pokusy o \"zat\u011b\u017eovac\u00ed testy\", kter\u00e9 snadno \"odpoj\u00ed\" bezbrann\u00e9 weby mal\u00fdch e-shop\u016f, f\u00f3r, blog\u016f a m\u00e9di\u00ed.<\/p>\n<p><\/p>\n<p>Jak vybrat hosting, kter\u00fd je chr\u00e1n\u011bn\u00fd p\u0159ed DDoS \u00fatoky? Na co si d\u00e1t pozor a na co se p\u0159ipravit, abyste se nedostali do nep\u0159\u00edjemn\u00e9 situace?<\/p>\n<p><\/p>\n<p>(O\u010dkov\u00e1n\u00ed proti \"\u0161ed\u00e9mu\" marketingu uvnit\u0159)<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dostupnost a rozmanitost n\u00e1stroj\u016f pro prov\u00e1d\u011bn\u00ed DDoS \u00fatok\u016f nut\u00ed majitele online slu\u017eeb p\u0159ij\u00edmat odpov\u00eddaj\u00edc\u00ed opat\u0159en\u00ed pro \u010delen\u00ed t\u00e9to hrozb\u011b. Ochranu p\u0159ed DDoS \u00fatoky byste m\u011bli zv\u00e1\u017eit je\u0161t\u011b p\u0159ed prvn\u00edm selh\u00e1n\u00edm, a to nikoli pouze jako sou\u010d\u00e1st opat\u0159en\u00ed pro zv\u00fd\u0161en\u00ed odolnosti infrastruktury, ale ji\u017e v dob\u011b v\u00fdb\u011bru m\u00edsta pro um\u00edst\u011bn\u00ed (hostingov\u00e9ho poskytovatele nebo datov\u00e9ho centra).<\/p>\n<p><\/p>\n<p>DDoS \u00fatoky jsou klasifikov\u00e1ny podle p\u0159\u00edslu\u0161nosti protokol\u016f, jejich\u017e zranitelnosti jsou zneu\u017e\u00edv\u00e1ny, na \u00farovn\u011b modelu otev\u0159en\u00e9ho syst\u00e9mov\u00e9ho propojen\u00ed (OSI):<\/p>\n<p><\/p>\n<ul>\n<li>kan\u00e1lov\u00e1 (L2), <\/li>\n<li>s\u00ed\u0165ov\u00e1 (L3), <\/li>\n<li>transportn\u00ed (L4),<\/li>\n<li>aplikace (L7). <\/li>\n<\/ul>\n<p><\/p>\n<p>Z pohledu ochrann\u00fdch syst\u00e9m\u016f je mo\u017en\u00e9 je shrnout do dvou skupin: \u00fatoky na \u00farovni infrastruktury (L2-L4) a na \u00farovni aplikace (L7). To souvis\u00ed se sekvenc\u00ed prov\u00e1d\u011bn\u00ed algoritm\u016f anal\u00fdzy provozu a v\u00fdpo\u010detn\u00ed slo\u017eitost\u00ed: \u010d\u00edm hloub\u011bji nahl\u00ed\u017e\u00edme do IP paket\u016f, t\u00edm v\u00edce v\u00fdpo\u010detn\u00edch zdroj\u016f je pot\u0159eba.<\/p>\n<p><\/p>\n<p><em>Vizu\u00e1ln\u011b je optimalizace v\u00fdpo\u010dt\u016f p\u0159i zpracov\u00e1n\u00ed provozu v re\u00e1ln\u00e9m \u010dase t\u00e9matem pro samostatn\u00fd soubor \u010dl\u00e1nk\u016f. A nyn\u00ed si p\u0159edstavme, \u017ee existuje ur\u010dit\u00fd cloudov\u00fd poskytovatel s podm\u00edn\u011bn\u011b neomezen\u00fdmi v\u00fdpo\u010detn\u00edmi zdroji, kter\u00fd m\u016f\u017ee zajistit ochranu webov\u00fdch str\u00e1nek p\u0159ed \u00fatoky na \u00farovni aplikac\u00ed (v\u010detn\u011b <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/web\">zdarma<\/a><\/noindex><\/strong>).<\/em><\/p>\n<p><\/p>\n<h4 id=\"3-glavnyh-voprosa-dlya-opredeleniya-stepeni-zaschischennosti-hostinga-ot-ddos-atak\">3 hlavn\u00ed ot\u00e1zky pro ur\u010den\u00ed \u00farovn\u011b ochrany hostingu p\u0159ed DDoS \u00fatoky<\/h4>\n<p><\/p>\n<p>Pod\u00edvejme se na podm\u00ednky poskytov\u00e1n\u00ed slu\u017eby ochrany p\u0159ed DDoS \u00fatoky a Smlouvu o \u00farovni slu\u017eeb (Service Level Agreement, SLA) poskytovatele hostingu. Obsahuj\u00ed odpov\u011bdi na n\u00e1sleduj\u00edc\u00ed ot\u00e1zky:<\/p>\n<p><\/p>\n<ul>\n<li><strong>jak\u00e1 technick\u00e1 omezen\u00ed uv\u00e1d\u00ed poskytovatel slu\u017eby<\/strong>? <\/li>\n<li><strong>co se stane, kdy\u017e z\u00e1kazn\u00edk p\u0159es\u00e1hne tato omezen\u00ed? <\/strong> <\/li>\n<li><strong>jak\u00fdm zp\u016fsobem poskytovatel hostingu implementuje ochranu p\u0159ed DDoS \u00fatoky (technologie, \u0159e\u0161en\u00ed, dodavatel\u00e9)?<\/strong> <\/li>\n<\/ul>\n<p><\/p>\n<p>Pokud jste tuto informaci nena\u0161li, m\u016f\u017ee to b\u00fdt d\u016fvod bu\u010f k zamy\u0161len\u00ed nad v\u00e1\u017enost\u00ed poskytovatele slu\u017eeb, nebo k organizaci z\u00e1kladn\u00ed ochrany proti DDoS (L3-4) vlastn\u00edmi silami. Nap\u0159\u00edklad si objednat fyzick\u00e9 p\u0159ipojen\u00ed k s\u00edti specializovan\u00e9ho poskytovatele ochrany.<\/p>\n<p><\/p>\n<p><strong>D\u016fle\u017eit\u00e9!<\/strong> Ned\u00e1v\u00e1 smysl poskytovat ochranu proti \u00fatok\u016fm na \u00farovni aplikac\u00ed pomoc\u00ed Reverse Proxy, pokud v\u00e1\u0161 hostingov\u00fd poskytovatel nedok\u00e1\u017ee zajistit ochranu proti \u00fatok\u016fm na \u00farovni infrastruktury: s\u00ed\u0165ov\u00e9 za\u0159\u00edzen\u00ed bude p\u0159et\u00ed\u017een\u00e9 a stane se nedostupn\u00fdm, v\u010detn\u011b pro proxy servery cloudov\u00e9ho poskytovatele (obr. 1).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/5a6948855d9743ca3709d0ee3feb2224.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr. 1. P\u0159\u00edm\u00fd \u00fatok na s\u00ed\u0165 hostingov\u00e9ho poskytovatele<\/em><\/p>\n<p><\/p>\n<p>A nenechte se p\u0159esv\u011bd\u010dit, \u017ee skute\u010dn\u00e1 IP adresa serveru je skryta za cloudem poskytovatele ochrany, a proto nen\u00ed mo\u017en\u00e9 ji \u00fato\u010dit p\u0159\u00edmo. V dev\u00edti p\u0159\u00edpadech z deseti nebude \u00fato\u010dn\u00edkovi d\u011blat probl\u00e9m nal\u00e9zt skute\u010dnou IP adresu serveru nebo alespo\u0148 s\u00edt\u011b hostingov\u00e9ho poskytovatele, aby \"polo\u017eil\" cel\u00fd datov\u00e9 centrum.<\/p>\n<p><\/p>\n<h3 id=\"kak-deystvuyut-hakery-v-poiskah-realnogo-ip-adresa\">Jak hacke\u0159i hledaj\u00ed skute\u010dnou IP adresu<\/h3>\n<p><\/p>\n<p>Pod spoilerem \u2014 n\u011bkolik metod pro vyhled\u00e1v\u00e1n\u00ed skute\u010dn\u00e9 IP adresy (uv\u00e1d\u011bny pro informativn\u00ed \u00fa\u010dely).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 1: Hled\u00e1n\u00ed v otev\u0159en\u00fdch zdroj\u00edch<\/b><\/p>\n<p>Hled\u00e1n\u00ed m\u016f\u017eete za\u010d\u00edt pomoc\u00ed online slu\u017eby<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/\"> Intelligence X<\/a><\/noindex>: hled\u00e1 informace v dark webu, na platform\u00e1ch pro sd\u00edlen\u00ed dokument\u016f, zpracov\u00e1v\u00e1 data Whois, \u00faniky ve\u0159ejn\u00fdch dat a mnoho dal\u0161\u00edch zdroj\u016f.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/c21ad1de4da970843797ecfaac790770.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pokud se podle ur\u010dit\u00fdch znak\u016f (HTTP hlavi\u010dky, \u00fadaje Whois atd.) poda\u0159ilo ur\u010dit, \u017ee ochrana webu je zaji\u0161t\u011bna pomoc\u00ed Cloudflare, m\u016f\u017eete za\u010d\u00edt hledat skute\u010dnou IP adresu pomoc\u00ed<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/?did=734ac30d-caa9-4348-94ad-106cd5f940c2\"> seznamu<\/a><\/noindex>, kter\u00fd obsahuje p\u0159ibli\u017en\u011b 3 miliony IP adres web\u016f um\u00edst\u011bn\u00fdch za Cloudflare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/7dd9d053df67a5020a0a450f80a719e9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pomoc\u00ed SSL certifik\u00e1tu a slu\u017eby<noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\"> Censys<\/a><\/noindex> m\u016f\u017eete naj\u00edt spoustu u\u017eite\u010dn\u00e9ho, v\u010detn\u011b skute\u010dn\u00e9 IP adresy webu. Chcete-li vytvo\u0159it dotaz na v\u00e1\u0161 zdroj, p\u0159ejd\u011bte na kartu Certifik\u00e1ty a zadejte:<\/p>\n<p><\/p>\n<p><strong>_parsed.names: jm\u00e9no<em>webu AND tags.raw: trusted<\/em><\/strong><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/49861124ca4859d8f8a65b0c45187e00.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pro hled\u00e1n\u00ed IP adres server\u016f vyu\u017e\u00edvaj\u00edc\u00edch SSL certifik\u00e1t, bude nutn\u00e9 ru\u010dn\u011b proch\u00e1zet rozbalovac\u00ed seznam s n\u011bkolika n\u00e1stroji (karta \u201eProzkoumat\u201c, pak vyb\u00edr\u00e1me \u201eIPv4 Hosts\u201c).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 2: DNS<\/b><\/p>\n<p>Hled\u00e1n\u00ed v historii zm\u011bn DNS z\u00e1znam\u016f \u2014 star\u00fd, osv\u011bd\u010den\u00fd zp\u016fsob. P\u0159edchoz\u00ed IP adresa webu m\u016f\u017ee nazna\u010dit, na jak\u00e9m hostingu (nebo v jak\u00e9m datov\u00e9m centru) se nach\u00e1zel. Mezi online slu\u017ebami se u\u017eivatelsky p\u0159\u00edjemn\u00e9 vyzna\u010duj\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/viewdns.info\/iphistory\/\">ViewDNS<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\/\">SecurityTrails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>P\u0159i zm\u011bn\u011b nastaven\u00ed nebude web ihned pou\u017e\u00edvat IP adresu cloudov\u00e9 ochrany nebo CDN, ale n\u011bjakou dobu bude pracovat p\u0159\u00edmo. V tomto p\u0159\u00edpad\u011b existuje pravd\u011bpodobnost, \u017ee online slu\u017eby pro uchov\u00e1v\u00e1n\u00ed historie zm\u011bn IP adres obsahuj\u00ed informace o p\u016fvodn\u00ed adrese webu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/8aef85b97315f67ef857a9fea2c3884c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pokud nejsou k dispozici nic krom\u011b n\u00e1zvu star\u00e9ho DNS serveru, lze pomoc\u00ed speci\u00e1ln\u00edch utilit (dig, host nebo nslookup) dot\u00e1zat IP adresu podle dom\u00e9nov\u00e9ho jm\u00e9na webu, nap\u0159\u00edklad:<\/p>\n<p><\/p>\n<p><strong>_dig @n\u00e1zev_star\u00e9ho_dns_serveru n\u00e1zev<em>webu<\/em><\/strong><\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 3: email<\/b><\/p>\n<p>My\u0161lenka metody spo\u010d\u00edv\u00e1 v tom, \u017ee pomoc\u00ed kontaktn\u00edho formul\u00e1\u0159e \/ registrace (nebo jin\u00fdm zp\u016fsobem, kter\u00fd umo\u017e\u0148uje iniciovat odesl\u00e1n\u00ed e-mailu) z\u00edskat e-mail na svou elektronickou po\u0161tu a zkontrolovat hlavi\u010dky, zejm\u00e9na pole \u201eReceived\u201c.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/582a31569f5274619ab869d1c8a8263a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V hlavi\u010dce e-mailu se \u010dasto nach\u00e1z\u00ed skute\u010dn\u00e1 IP adresa MX z\u00e1znamu (server pro v\u00fdm\u011bnu elektronick\u00e9 po\u0161ty), kter\u00e1 m\u016f\u017ee b\u00fdt v\u00fdchoz\u00edm bodem pro hled\u00e1n\u00ed dal\u0161\u00edch c\u00edlov\u00fdch server\u016f.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">N\u00e1stroje pro automatizaci hled\u00e1n\u00ed<\/b><\/p>\n<p>Software pro vyhled\u00e1v\u00e1n\u00ed IP za ochranou Cloudflare v\u011bt\u0161inou funguje na t\u0159ech \u00faloh\u00e1ch:<\/p>\n<p><\/p>\n<ul>\n<li>skanov\u00e1n\u00ed chybn\u00e9 konfigurace DNS, pomoc\u00ed DNSDumpster.com;<\/li>\n<li>sko\u010den\u00ed podle datab\u00e1ze Crimeflare.com;<\/li>\n<li>hled\u00e1n\u00ed subdom\u00e9n metodou slovn\u00edkov\u00e9ho prohled\u00e1v\u00e1n\u00ed. <\/li>\n<\/ul>\n<p><\/p>\n<p>Hled\u00e1n\u00ed subdom\u00e9n se \u010dasto ukazuje jako nejefektivn\u011bj\u0161\u00ed mo\u017enost ze v\u0161ech t\u0159\u00ed \u2014 vlastn\u00edk webu mohl chr\u00e1nit hlavn\u00ed web, zat\u00edmco subdom\u00e9ny nechal pracovat p\u0159\u00edmo. Pro ov\u011b\u0159en\u00ed je nejjednodu\u0161\u0161\u00ed pou\u017e\u00edt <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/m0rtem\/CloudFail\">CloudFail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Krom\u011b toho existuj\u00ed utility ur\u010den\u00e9 pouze pro hled\u00e1n\u00ed subdom\u00e9n pomoc\u00ed slovn\u00edkov\u00e9ho prohled\u00e1v\u00e1n\u00ed a vyhled\u00e1v\u00e1n\u00ed v otev\u0159en\u00fdch zdroj\u00edch, nap\u0159\u00edklad: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/aboul3la\/Sublist3r\">Sublist3r<\/a><\/noindex> nebo <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/darkoperator\/dnsrecon\">dnsrecon<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Jak prob\u00edh\u00e1 hled\u00e1n\u00ed v praxi<\/b><\/p>\n<p>Jako p\u0159\u00edklad vezmeme web seo.com, kter\u00fd pou\u017e\u00edv\u00e1 Cloudflare, a kter\u00fd nalezneme pomoc\u00ed zn\u00e1m\u00e9 slu\u017eby <noindex><a rel=\"nofollow\" href=\"https:\/\/trends.builtwith.com\/websitelist\/Cloudflare\">builtwith<\/a><\/noindex> (umo\u017e\u0148uje jak ur\u010dovat technologie \/ enginy \/ CMS, na kter\u00fdch web funguje, tak i naopak \u2013 hledat weby podle pou\u017e\u00edvan\u00fdch technologi\u00ed). <\/p>\n<p><\/p>\n<p>P\u0159i p\u0159echodu na kartu \u201eIPv4 Hosts\u201c slu\u017eba zobraz\u00ed seznam hostitel\u016f pou\u017e\u00edvaj\u00edc\u00edch certifik\u00e1t. Abyste na\u0161li pot\u0159ebn\u00fd, hledejte IP adresu s otev\u0159en\u00fdm portem 443. Pokud p\u0159esm\u011brov\u00e1v\u00e1 na po\u017eadovanou str\u00e1nku, \u00fakol je spln\u011bn, v opa\u010dn\u00e9m p\u0159\u00edpad\u011b je nutn\u00e9 p\u0159idat do hlavi\u010dky \u201eHost\u201c HTTP po\u017eadavku dom\u00e9nov\u00e9 jm\u00e9no webu (nap\u0159\u00edklad *curl -H \"Host: n\u00e1zev_str\u00e1nky\" *<em><noindex><a rel=\"nofollow\" href=\"https:\/\/IP_adresa\">https:\/\/IP_adresa<\/a><\/noindex><\/em>).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/9886563fefefdf94f663086ee038a037.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V na\u0161em p\u0159\u00edpad\u011b hled\u00e1n\u00ed v datab\u00e1zi Censys nic nep\u0159ineslo, jdeme d\u00e1l.<\/p>\n<p><\/p>\n<p>DNS vyhled\u00e1v\u00e1n\u00ed provedeme p\u0159es slu\u017ebu<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\"> https:\/\/securitytrails.com\/dns-trails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/e762727ac47c4f4bb705d5518f224ffd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>P\u0159i proch\u00e1zen\u00ed adres uveden\u00fdch v seznamech DNS server\u016f pomoc\u00ed n\u00e1stroje CloudFail nach\u00e1z\u00edme funk\u010dn\u00ed zdroje. V\u00fdsledek bude p\u0159ipraven ji\u017e za n\u011bkolik sekund.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/3625eeafe5a0e8ea411ebab1ddd32fd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pou\u017eit\u00edm pouze ve\u0159ejn\u011b dostupn\u00fdch dat a jednoduch\u00fdch n\u00e1stroj\u016f jsme ur\u010dili skute\u010dnou IP adresu webov\u00e9ho serveru. Zbytek je pro \u00fato\u010dn\u00edka technika.<\/p>\n<p><\/p>\n<p>Vra\u0165me se k v\u00fdb\u011bru poskytovatele hostingu. Abychom posoudili u\u017eite\u010dnost slu\u017eby pro z\u00e1kazn\u00edka, prozkoumejme mo\u017en\u00e9 zp\u016fsoby ochrany proti DDoS \u00fatok\u016fm.<\/p>\n<p><\/p>\n<h3 id=\"kak-hosting-provayder-stroit-svoyu-zaschitu\">Jak poskytovatel hostingu buduje svou ochranu<\/h3>\n<p><\/p>\n<ol>\n<li>Vlastn\u00ed syst\u00e9m ochrany s filtra\u010dn\u00edm vybaven\u00edm (obr\u00e1zek 2).<br \/>\nVy\u017eaduje p\u0159\u00edtomnost:<br \/>\n1.1. Za\u0159\u00edzen\u00ed pro filtraci provozu a licence na software;<br \/>\n1.2. Intern\u00ed specialisty pro jeho podporu a provoz;<br \/>\n1.3. P\u0159\u00edstupov\u00e9 kan\u00e1ly k internetu, kter\u00e9 budou dostate\u010dn\u00e9 pro p\u0159\u00edjem \u00fatok\u016f;<br \/>\n1.4. V\u00fdznamnou p\u0159edplacenou \u0161\u00ed\u0159ku p\u00e1sma pro p\u0159\u00edjem \"odpadn\u00edho\" provozu.<br \/>\n<img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/c6fe101febc11741280a4f8a37121cd2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Obr\u00e1zek 2. Vlastn\u00ed syst\u00e9m ochrany poskytovatele hostingu<\/em><br \/>\nPokud budeme pova\u017eovat popsan\u00fd syst\u00e9m za prost\u0159edek ochrany proti modern\u00edm DDoS \u00fatok\u016fm v \u0159\u00e1du stovek Gbps, takov\u00fd syst\u00e9m bude st\u00e1t velmi velk\u00e9 pen\u00edze. M\u00e1 poskytovatel hostingu takovou ochranu? Je p\u0159ipraven platit za \"odpadn\u00ed\" provoz? Je z\u0159ejm\u00e9, \u017ee takov\u00fd ekonomick\u00fd model je pro poskytovatele ztr\u00e1tov\u00fd, pokud nejsou ve tarifech zohledn\u011bny dodate\u010dn\u00e9 platby.<\/li>\n<li>Reverse Proxy (pouze pro webov\u00e9 str\u00e1nky a n\u011bkter\u00e9 aplikace). Navzdory cel\u00e9 \u0159ad\u011b <noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/manual\/category\/udalennaya-zashita-sajtov#110\">v\u00fdhod<\/a><\/noindex>, poskytovatel negarantuje ochranu p\u0159ed p\u0159\u00edm\u00fdmi DDoS \u00fatoky (viz obr\u00e1zek 1). Poskytovatel\u00e9 hostingu \u010dasto nab\u00edzej\u00ed takov\u00e9 \u0159e\u0161en\u00ed jako panaceu, p\u0159i\u010dem\u017e p\u0159en\u00e1\u0161ej\u00ed odpov\u011bdnost na poskytovatele ochrany.<\/li>\n<li>Slu\u017eby specializovan\u00e9ho cloudov\u00e9ho poskytovatele (vyu\u017eit\u00ed jeho filtra\u010dn\u00ed s\u00edt\u011b) pro ochranu proti DDoS \u00fatok\u016fm na v\u0161ech \u00farovn\u00edch OSI (obr\u00e1zek 3).<br \/>\n<img decoding=\"async\" alt=\"Hosting s plnou ochranou p\u0159ed DDoS \u00fatoky \u2013 m\u00fdtus nebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/446b8deca30efd73f4768a4ba41e2c47.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Obr\u00e1zek 3. Komplexn\u00ed ochrana proti DDoS \u00fatok\u016fm pomoc\u00ed specializovan\u00e9ho poskytovatele<\/em><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/network-protection\">\u0158e\u0161en\u00ed<\/a><\/noindex> p\u0159edpokl\u00e1d\u00e1 hlubokou integraci a vysokou m\u00edru technick\u00e9 kompetence obou stran. P\u0159enos slu\u017eeb filtrace provozu na outsourcing umo\u017e\u0148uje poskytovateli hostingu sn\u00ed\u017eit cenu p\u0159idan\u00fdch slu\u017eeb pro z\u00e1kazn\u00edka.<\/li>\n<\/ol>\n<p><\/p>\n<p><strong>D\u016fle\u017eit\u00e9!<\/strong> \u010c\u00edm podrobn\u011bji budou pops\u00e1ny technick\u00e9 specifikace poskytovan\u00e9 slu\u017eby, t\u00edm v\u011bt\u0161\u00ed bude \u0161ance po\u017eadovat jejich spln\u011bn\u00ed nebo n\u00e1hradu v p\u0159\u00edpad\u011b v\u00fdpadku.<\/p>\n<p><\/p>\n<p>Krom\u011b t\u0159\u00ed z\u00e1kladn\u00edch metod existuje mnoho kombinac\u00ed a variant. P\u0159i v\u00fdb\u011bru hostingu je pro z\u00e1kazn\u00edka d\u016fle\u017eit\u00e9 pamatovat na to, \u017ee rozhodnut\u00ed ovlivn\u00ed nejen velikost garantovan\u011b blokovan\u00fdch \u00fatok\u016f a p\u0159esnost filtrace, ale tak\u00e9 rychlost reakce a informa\u010dn\u00ed hodnotu (seznam blokovan\u00fdch \u00fatok\u016f, celkov\u00e1 statistika atd.).<\/p>\n<p><\/p>\n<p>Pamatujte, \u017ee jen mal\u00e9 mno\u017estv\u00ed poskytovatel\u016f hostingu na sv\u011bt\u011b dok\u00e1\u017ee zajistit p\u0159ijatelnou \u00farove\u0148 ochrany samostatn\u011b; ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f je kl\u00ed\u010dem spolupr\u00e1ce a technick\u00e1 gramotnost. Znalost z\u00e1kladn\u00edch princip\u016f ochrany proti DDoS \u00fatok\u016fm tak umo\u017en\u00ed vlastn\u00edkovi webu nenalet\u011bt na marketingov\u00e9 triky a nekoupit si \"ko\u010dku v pytli\".<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ddosguard\/blog\/520302\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2020 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e DDoS-\u0430\u0442\u0430\u043a \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 65% \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u00ab\u043d\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u00ab\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u00bb \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u0431\u043b\u043e\u0433\u043e\u0432, \u0421\u041c\u0418. \u041a\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0445\u043e\u0441\u0442\u0438\u043d\u0433? \u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u043c \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438? [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hosting s komplexn\u00ed ochranou proti DDoS \u00fatok\u016fm \u2013 m\u00fdtus nebo realita | ProHoster","description":"Za prvn\u00ed dva.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-27T05:42:43+00:00","article:modified_time":"2020-09-27T05:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:00:57","updated":"2022-09-27 17:53:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=95258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/95259"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=95258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=95258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=95258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}