{"id":29814,"date":"2019-10-31T21:32:09","date_gmt":"2019-10-31T18:32:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\/"},"modified":"2019-10-31T21:32:09","modified_gmt":"2019-10-31T18:32:09","slug":"razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","title":{"rendered":"Kohandatud vastus kommentaarile ning natuke venelaste elust.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>See innustas mind seda postitust kirjutama. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/443898\/#comment_19891124\">just see kommentaar.<\/a><\/noindex>.<\/p>\n<p>T\u00f5in selle siia:<\/p>\n<blockquote><p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> t\u00e4na kell 18:53.<\/p>\n<p>T\u00e4na \u00fcllatas mind teenusepakkuja. Koos s\u00fcsteemi blokeerimise uuendamisega sattus nende alla mail.ru. Hommikul helistasin klienditoe poole, nad ei suutnud midagi teha. Teenusepakkuja on v\u00e4ike ja ilmselt blokeerivad nad k\u00f5rgemad teenusepakkujad. M\u00e4rkasin ka, et k\u00f5ikide veebisaitide avamine on aeglustunud, kas on mingit vale DLP-d lisatud? Varem ei olnud ju mingeid ligip\u00e4\u00e4suprobleeme. RuNeti h\u00e4vitamine toimub just minu silme all...<\/p><\/blockquote>\n<p> Asi on selles, et me oleme ilmselt see teenusepakkuja \ud83d\ude41<\/p>\n<p>Ja t\u00f5epoolest, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> peaaegu arvasin mail.ru probleemide p\u00f5hjust (kuigi me keeldusime pikka aega sellesse uskuma).<\/p>\n<p>Eesootav jaguneb kaheks osaks:<\/p>\n<ol>\n<li>meie t\u00e4naste probleemide p\u00f5hjused mail.ru juures ja p\u00f5nev missioon nende leidmiseks.<\/li>\n<li>ISP-de olemasolu t\u00e4nastes reaalsustes, suver\u00e4\u00e4nse RuNeti stabiilsus.<\/li>\n<\/ol>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Probleemid mail.ru ligip\u00e4\u00e4setavusega<\/h3>\n<p>\nOh, see on \u00fcsna pikk lugu. <\/p>\n<p>K\u00fcsimus on selles, et riigi n\u00f5uete t\u00e4itmiseks (t\u00e4iendavalt teises osas) soetasime, seadistasime ja paigaldasime teatud seadmeid \u2014 nii keelatud ressursside filtreerimiseks kui ka NAT-\u00fclekannete tegemiseks. <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/NAT\">NAT-\u00fclekanded<\/a><\/noindex> tellijatele.<\/p>\n<p>M\u00f5ni aeg tagasi \u00fcmber ehitatud meie v\u00f5rguydin nii, et tellijate kogu liiklus kulges l\u00e4bi selle seadme rangelt soovitud suunal.<\/p>\n<p>M\u00f5ni p\u00e4ev tagasi l\u00fclitasime sellele seadmele keelatud ressursside filtreerimise (samaaegselt vanas s\u00fcsteemis) \u2014 esialgu tundus k\u00f5ik minevat h\u00e4sti.<\/p>\n<p>Edasi hakati j\u00e4rk-j\u00e4rgult l\u00fclitama erinevates osades tellijatele NAT-i sellele seadmele. Esialgu n\u00e4is samuti k\u00f5ik sujuvat.<\/p>\n<p>Aga t\u00e4na, l\u00fclitades seadmele NAT-i j\u00e4rgmisele osale tellijatest \u2014 hommikust alates saime teateid rohkete ligip\u00e4\u00e4smis- v\u00f5i osalise ligip\u00e4\u00e4smise kaebustega. <noindex><a rel=\"nofollow\" href=\"https:\/\/mail.ru\">mail.ru<\/a><\/noindex> ja teiste Mail Ru Groupi ressursside kohta.<\/p>\n<p>Hakkasime kontrollima: midagi kuskil <i>m\u00f5nikord<\/i>, <i>harva<\/i> saadab <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D1%82%D0%B0%D0%BA%D0%B0_TCP_Reset\">TCP RST<\/a><\/noindex> vastuseks mail.ru v\u00f5rkudele esitatud p\u00e4ringutele. Veelgi enam \u2014 saadetakse vale hallatud (ilma ACK-ta), selgelt kunstlik TCP RST. N\u00e4iteks n\u00e4gi see v\u00e4lja umbes nii:<\/p>\n<p><img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/2ce762c44e86b97125806a27d91da1f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/c7041cf0ae273666fe9bb36ff236710f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/c594ee9e5f1c7127ac849c6b7afcd5d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMuidugi, esimesed m\u00f5tted olid uue varustuse \u00fcle: hirmutav DPI, usaldust temasse ei olnud, kes teab, mida ta v\u00f5ib veel teha \u2014 sest TCP RST on blokeerimistarkvaras \u00fcsna levinud asi.<\/p>\n<p>Eeldamine <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> selle \u00fcle, et keegi \u00fclemine filtri, t\u00f5status samuti \u2014 kuid see l\u00fckati kohe k\u00f5rvale.<\/p>\n<p>Esiteks, meie \u00fclesse loomingud on piisavalt normaalsed, et sellise asja all ei kannataks \ud83d\ude42<\/p>\n<p>Teiseks, me oleme \u00fchendatud mitme <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A2%D0%BE%D1%87%D0%BA%D0%B0_%D0%BE%D0%B1%D0%BC%D0%B5%D0%BD%D0%B0_%D0%B8%D0%BD%D1%82%D0%B5%D1%80%D0%BD%D0%B5%D1%82-%D1%82%D1%80%D0%B0%D1%84%D0%B8%D0%BA%D0%BE%D0%BC\">IX<\/a><\/noindex> Moskvasse ning liiklus mail.ru-ni l\u00e4heb t\u00f5epoolest nende kaudu \u2014 ja neil pole mingit kohustust ega mingit muud motiivi, et liiklust filtreerida.<\/p>\n<p>J\u00e4rgmine p\u00e4evapoolne osa kulus sellele, mida tavaliselt nimetatakse \u0161amaanit\u00f6\u00f6ks \u2014 koos seadme tarnijaga, kelle eest oleme t\u00e4nulikud, ei j\u00e4tnud nad meid maha \ud83d\ude42<\/p>\n<ul>\n<li>filtreerimine l\u00fclitati t\u00e4ielikult v\u00e4lja<\/li>\n<li>NAT l\u00fclitati v\u00e4lja uue skeemi j\u00e4rgi<\/li>\n<li>testarvuti viidi eraldi isoleeritud \u00f5hku<\/li>\n<li>IP-aadress muutus<\/li>\n<\/ul>\n<p>\nTeise p\u00e4eva poole eraldati virtuaalmasin, mis p\u00e4\u00e4seb internetti tavakasutaja skeemi j\u00e4rgi, ning sellele ja seadmele anti juurdep\u00e4\u00e4s tarnija esindajatele. \u0160amaanit\u00f6\u00f6 j\u00e4tkus \ud83d\ude42<\/p>\n<p>L\u00f5ppude l\u00f5puks kinnitas edasim\u00fc\u00fcja, et riistvara ei ole selles s\u00fc\u00fcdi: rst'id tulevad kusagilt k\u00f5rgemalt.<\/p>\n<p><b class=\"spoiler_title\">M\u00e4rkus<\/b><i>Siin v\u00f5ib keegi \u00f6elda: aga oleks ju palju lihtsam teha dump mitte testarvutist, vaid k\u00f5rgemalt DPI-lt?<\/p>\n<p>Kahjuks pole 40+ gbps dump'i (ja isegi lihtsalt mirror'ima) tegemine sugugi triviaalne.<\/i><\/p>\n<p>P\u00e4rast seda, juba \u00f5htul, ei j\u00e4\u00e4nud midagi muud \u00fcle, kui naasta ebatavalise filtreerimise oletuse juurde kusagil k\u00f5rgemal.<\/p>\n<p>Vaatasin, milline IX praegu s\u00f5idab MRG v\u00f5rkudesse ja lihtsalt sulgesin BGP-seansid. Ja \u2014 imet! \u2014 k\u00f5ik normaliseerus koheselt \ud83d\ude41<\/p>\n<p>\u00dchelt poolt on v\u00e4ga kahju, et probleemi leidmiseks kulus terve p\u00e4ev, kuigi see lahendati viie minutiga.<\/p>\n<p>Teiselt poolt:<\/p>\n<p> \u2014 minu m\u00e4letamist m\u00f6\u00f6da on see pretsedenditut asjaolu. Nagu ma juba varem mainisin \u2014 IX-ide <i>t\u00f5esti<\/i> ei ole mingit m\u00f5tet filtreerida transiitliiklust. Neil on seda tavaliselt sadu gigabite \/ terabite sekundis. Ma lihtsalt viimase hetkeni ei osanud midagi sellist t\u00f5siselt kaaluda.<\/p>\n<p> \u2014 uskumatult soodne kokkujooks: uus keeruline riistvara, millele ei ole suurt usaldust ja mille kohta ei ole selge, mida oodata \u2014 just sobiv ressursside blokeerimiseks, sealhulgas TCP RST-dega<\/p>\n<p>Praegu otsib selle interneti vahetuse NOC probleemi. Nende s\u00f5nul (ja ma usun neile) ei ole neil mingit spetsiaalselt rakendatud filtreerimiss\u00fcsteemi. Aga t\u00e4nu taevasse, edasine missioon \u2014 ei ole enam meie probleem \ud83d\ude42<\/p>\n<p>See oli v\u00e4ike katse \u00f5igustada end, palume m\u00f5ista ja andestada \ud83d\ude42<\/p>\n<p>P.S.: ma ei nimeta tahtlikult ei DPI\/NAT tootjat ega IX-d (mul ei ole tegelikult ka nende vastu erilisi kaebusi, peamine \u2014 m\u00f5ista, mis toimus)<\/p>\n<h3>T\u00e4nane (nagu ka eilne ja \u00fcle-eilne) reaalsus interneti pakkuja vaatepunktist<\/h3>\n<p>\nViimased n\u00e4dalad olen veetnud, p\u00f5hjalikult \u00fcmber struktuureides v\u00f5rgu tuuma, tehes hulga manipuleerimisi 'live' keskkonnas, riskides oluliselt puudutada aktiivset kasutajatrafikut. Arvestades eesm\u00e4rke, tulemusi ja k\u00f5iki neid tagaj\u00e4rgi \u2014 on see vaimselt p\u00e4ris keeruline. Eriti j\u00e4lle, kuulates suurep\u00e4raseid k\u00f5nesid r\u00fcnnaku stabiilsuse kaitsmisest, suver\u00e4\u00e4nsusest jne.<\/p>\n<p>Selles jaotises p\u00fc\u00fcan ma r\u00e4\u00e4kida t\u00fc\u00fcpilise Interneti-teenuse pakkuja v\u00f5rgu tuuma \"evolutsioonist\" viimase k\u00fcmne aasta jooksul.<\/p>\n<p><b>K\u00fcmme aastat tagasi.<\/b><\/p>\n<p>Neil \u00f5nnelikel aegadel v\u00f5is teenuse pakkuja v\u00f5rgu tuum olla sama lihtne ja usaldusv\u00e4\u00e4rne kui kork:<\/p>\n<p><img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/06c455b9debf27799451d9f29a12a4a9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSellel v\u00e4ga, v\u00e4ga lihtsustatud joonisel puuduvad maanteed, ringid, IP\/MPLS marsruutimine.<\/p>\n<p>Selle olemus oli selles, et kasutajate liiklus j\u00f5udis l\u00f5puks tuuma l\u00fclitamiseni \u2014 kust see suundus <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Broadband_remote_access_server\">BNG<\/a><\/noindex>, kust tavaliselt \u2014 tagasi tuuma l\u00fclitisse ja edasi \u00abv\u00e4lja\u00bb \u2014 l\u00e4bi \u00fche v\u00f5i mitme border gateway's internetti.<\/p>\n<p>Sarnast skeemi on v\u00e4ga, v\u00e4ga lihtne reserveerida nii L3 (d\u00fcnaamiline marsruutimine) kui ka L2 (MPLS) tasemel.<\/p>\n<p>Saate paigaldada N+1 mida iganes: juurdep\u00e4\u00e4su servereid, l\u00fcliteid, piiri \u2014 ja neid reserveerida automaatseks veaparandamiseks.<\/p>\n<p><b>M\u00f5ne aasta p\u00e4rast<\/b> oli k\u00f5igile Venemaal selge, et nii ei saa enam elada: on vaja kiiresti kaitsta lapsi interneti saasta m\u00f5ju eest.<\/p>\n<p>Tekkis vajadus kiiresti leida viise kasutajate liikluse filtreerimiseks.<\/p>\n<p>Siin on erinevaid l\u00e4henemisviise.<\/p>\n<p>Halvemal \u2014 midagi paigutatakse 'risti': kasutajaliikluse ja interneti vahele. Selle 'midagi' kaudu kulgev liiklus anal\u00fc\u00fcsitakse ja n\u00e4iteks suunatakse abonendile vale pakett koos redirectiga.<\/p>\n<p>Natuke paremal juhul \u2014 kui liiklusmaht v\u00f5imaldab \u2014 saab teha v\u00e4ikese triki: suunata filtreerimisele ainult kasutajatelt v\u00e4ljuv liiklus ainult neile aadressidele, mida on vaja filtreerida (selleks saab kasutada kas registris n\u00e4idatud IP-aadresse v\u00f5i t\u00e4iendavalt resolverida registris olevaid domeene).<\/p>\n<p>Oma ajal kirjutasin nende eesm\u00e4rkide saavutamiseks lihtsa <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ircop\/nfq_filter\">mini-dpi<\/a><\/noindex> \u2014 kuigi isegi keel ei p\u00f6\u00f6rdu selle nii nimetamise \u00fcle. See on v\u00e4ga lihtne ja mitte eriti j\u00f5udlane \u2014 kuid see v\u00f5imaldas meil ja k\u00fcmnetel (kui mitte sadadele) teistel teenusepakkujatel mitte v\u00e4lja panna kohe miljoneid t\u00f6\u00f6stuslike DPI-s\u00fcsteemide peale, vaid andis m\u00f5ned lisanduvad aastad aega.<\/p>\n<p><b class=\"spoiler_title\">Muide, tollaste ja praeguste DPI kohta<\/b>Tuleb m\u00e4rkida, et paljude jaoks, kes ostsid toona turul olemasolevad DPI-s\u00fcsteemid, on need juba ammu k\u00f5rvale heidetud. Need ei ole sarnaste \u00fclesannete t\u00e4itmiseks sobivad: sadu tuhandeid aadresse, k\u00fcmneid tuhandeid URL-e.<\/p>\n<p>Samas on kodumaised tootjad selle turu kaalutlustega oluliselt t\u00f5usnud. Ma ei r\u00e4\u00e4gi riistvarast \u2014 see on k\u00f5igile selge, kuid tarkvara \u2014 see, mis on DPI-s k\u00f5ige t\u00e4htsam \u2014 v\u00f5ib-olla t\u00e4naseks ei ole see maailmas k\u00f5ige arenenum, kuid a) areneb m\u00e4rgatavalt kiires tempos ja b) on pakendihinna poolest \u2014 lihtsalt v\u00f5rreldamatu v\u00e4lismaiste konkurentidega.<\/p>\n<p>Tahaksin uhkust tunda, kuid see teeb natuke kurvaks =)<\/p>\n<p>N\u00fc\u00fcd n\u00e4gi k\u00f5ik v\u00e4lja nii:<\/p>\n<p><img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/d4b36c9f02fbbe7d36e9dc81fb1fe9ed.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Veel paar aastat hiljem<\/b> olid k\u00f5ikidel juba revideerijad; ressursid registris kasvasid j\u00e4rjest enam. Teatud vana varustuse jaoks (n\u00e4iteks cisco 7600) muutus 'k\u00fclgfiltide' skeem lihtsalt rakendamatuks: marsruutide arv 76-l platvormil on piiratud umbes \u00fcheksa saja tuhande l\u00e4hedale, samas kui IPv4 marsruutide arv on t\u00e4na juba l\u00e4henemas 800 tuhandele. Ja kui lisada ipv6... Ja veel... kui palju seal on? 900000 eraldi aadressi rkn-is blokeeritud? =)<\/p>\n<p>Keegi on liikunud kogu peamise liikluse peegeldamise skeemi suunas filtriserverisse, mis peab anal\u00fc\u00fcsima kogu voogu ja kui midagi kahtlast avastatakse, saatma m\u00f5lemale poole (saatajale ja vastuv\u00f5tjale) RST.<\/p>\n<p>Kuid mida rohkem on liiklust, seda v\u00e4hem on selline skeem rakendatav. Iga v\u00e4ikese viivituse korral t\u00f6\u00f6tlemisel \u2013 peegeldatud liiklus lihtsalt m\u00f6\u00f6dub m\u00e4rkamatult, ja teenusepakkuja saab trahvi protokolli.<\/p>\n<p>\u00dcha rohkem teenusepakkujaid on sunnitud paigaldama DPI-s\u00fcsteeme erineva usaldusv\u00e4\u00e4rsuse tasemega maanteede l\u00f5ikudele.<\/p>\n<p><b>Aasta v\u00f5i kaks tagasi<\/b> kuuldavasti on praktiliselt k\u00f5ikelt FSB hakanud n\u00f5udma seadmete t\u00f5elist paigaldamist <noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/osobennosti-i-otlichiya-sorm\/\">SORM<\/a><\/noindex> (varem said enamus teenusepakkujatest hakkama koosk\u00f5lastamisega ametiasutustega <i>SORM-kava<\/i> \u2013 operatiivtegevuste kava, et vajadusel midagi kuskil leida)<\/p>\n<p>Peale raha (mitte nii, et \u00fclevalt iga hind on suurt, kuid ikkagi \u2013 miljoneid), n\u00f5udis SORM paljusid edasiseid manipulatsioone v\u00f5rgus.<\/p>\n<ul>\n<li>SORM peab n\u00e4gema kasutajate \u00abhallid\u00bb aadresse enne nat-\u00fclekanne<\/li>\n<li>SORM-il on piiratud arv v\u00f5rgu liideseid<\/li>\n<\/ul>\n<p>\nSeet\u00f5ttu pidime me konkreetselt p\u00f5hikoodi korralikult \u00fcmber tegema \u2014 lihtsalt selleks, et suunata kasutajate liiklus juurdep\u00e4\u00e4sus\u00fcsteemide serveritesse kuskil \u00fches kohas. Selleks, et peegeldada seda mitme lingiga SORM-iga.<\/p>\n<p>Ehk siis, v\u00e4ga lihtsustatult, oli (vasakul) vs on (paremal):<\/p>\n<p><img decoding=\"async\" alt=\"Kohandatud vastus kommentaarile ning natuke venelaste elust.\" src=\"\/wp-content\/uploads\/2019\/03\/0c6af5715ba59eda722309292c6f6735.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Praegu<\/b> enamikelt teenusepakkujatelt n\u00f5utakse ka SORM-3 rakendamist \u2014 mis h\u00f5lmab muu hulgas ka NAT-\u00fclekannete logimist.<\/p>\n<p>Nende eesm\u00e4rkide saavutamiseks pidime eelnevalt esitatud skeemile lisama ka eraldi varustuse NAT-i jaoks (just see, millest jutt oli esimese osa ajal). Lisaks pidime seda lisama kindlas j\u00e4rjekorras: kuna SORM peab liiklust \u201en\u00e4gema\u201c enne aadresside edastamist \u2014 liiklus peab minema rangelt j\u00e4rgmiselt: kasutajad -&gt; \u00fchends\u00fcsteem, p\u00f5hikood -&gt; juurdep\u00e4\u00e4sus\u00fcsteemide serverid -&gt; SORM -&gt; NAT -&gt; \u00fchends\u00fcsteem, p\u00f5hikood -&gt; internet. Selle saavutamiseks pidime liiklusvooge s\u00f5na otseses m\u00f5ttes \u201etagurpidi\u201c p\u00f6\u00f6rama, mis oli samuti \u00fcsna keeruline.<\/p>\n<p>Kokkuv\u00f5tteks, aastatega on keskmise teenusepakkuja tuumastruktuur oluliselt keerulisemaks muutunud, lisades mitmeid rikkepunkte (nii riistvaras kui ka \u00fchendusliinides). Tegelikult t\u00e4hendavad n\u00f5udmised 'n\u00e4ha k\u00f5ike' selle 'k\u00f5ik' kokku toomist \u00fchte punkti.<\/p>\n<p>Arvan, et seda saab t\u00e4iesti selgelt projitseerida praegustele algatustele rikka interneti suver\u00e4\u00e4nsuse, kaitse, stabiliseerimise ja t\u00e4iustamise osas \ud83d\ude42<\/p>\n<p>Ees ootab veel Yarovaya.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444274\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c: kaleman \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 18:53 \u041c\u0435\u043d\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043d\u0435\u0433\u043e \u043f\u043e\u0434 \u0431\u0430\u043d \u043f\u043e\u043f\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u0438\u043a mail.ru \u0421 \u0443\u0442\u0440\u0430 \u0434\u0435\u0440\u0433\u0430\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u043c\u043e\u0433\u0443\u0442. \u041f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439, \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0432\u0438\u0434\u0438\u043c\u043e \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b. \u0415\u0449\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-29814","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c: kaleman \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 18:53 \u041c\u0435\u043d\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043d\u0435\u0433\u043e \u043f\u043e\u0434 \u0431\u0430\u043d \u043f\u043e\u043f\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u0438\u043a mail.ru \u0421 \u0443\u0442\u0440\u0430 \u0434\u0435\u0440\u0433\u0430\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u043c\u043e\u0433\u0443\u0442. \u041f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439, \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0432\u0438\u0434\u0438\u043c\u043e \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b. \u0415\u0449\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0420\u0424 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c: kaleman \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 18:53 \u041c\u0435\u043d\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043d\u0435\u0433\u043e \u043f\u043e\u0434 \u0431\u0430\u043d \u043f\u043e\u043f\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u0438\u043a mail.ru \u0421 \u0443\u0442\u0440\u0430 \u0434\u0435\u0440\u0433\u0430\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u043c\u043e\u0433\u0443\u0442. \u041f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439, \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0432\u0438\u0434\u0438\u043c\u043e \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b. \u0415\u0449\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:32:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:32:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00dcksikasjalik vastus kommentaarile ning veidi ka teenusepakkujate elust Venemaal | ProHoster","description":"Just see kommentaar inspireeris mind seda postitust kirjutama. Toon selle siin: kaleman t\u00e4na kell 18:53. T\u00e4na r\u00f5\u00f5mustas mind teenusepakkuja. Koos veebilehtede blokeerimise s\u00fcsteemi v\u00e4rskendamisega sattus blokki mail.ru postkast. Hommikul helistasin tehnilisse abi, ei saanud midagi teha. Teenusepakkuja on v\u00e4ike ja ilmselt blokeerivad nad k\u00f5rgemaid teenusepakkujaid. M\u00e4rkasin ka, et k\u00f5igi veebilehtede avamine on aeglustunud.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0420\u0424 | ProHoster","og:description":"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c: kaleman \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 18:53 \u041c\u0435\u043d\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043d\u0435\u0433\u043e \u043f\u043e\u0434 \u0431\u0430\u043d \u043f\u043e\u043f\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u0438\u043a mail.ru \u0421 \u0443\u0442\u0440\u0430 \u0434\u0435\u0440\u0433\u0430\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u043c\u043e\u0433\u0443\u0442. \u041f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439, \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0432\u0438\u0434\u0438\u043c\u043e \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b. \u0415\u0449\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442","og:url":"https:\/\/prohoster.info\/et\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:32:09+00:00","article:modified_time":"2019-10-31T18:32:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"29814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 22:35:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:48:50","updated":"2026-01-20 22:35:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/29814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=29814"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/29814\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=29814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=29814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=29814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}