{"id":31067,"date":"2019-10-31T21:39:16","date_gmt":"2019-10-31T18:39:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\/"},"modified":"2019-10-31T21:39:16","modified_gmt":"2019-10-31T18:39:16","slug":"kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","title":{"rendered":"Kuidas v\u00f5tta oma v\u00f5rguinfrastruktuur kontrolli alla. Teine peat\u00fckk. Puhastamine ja dokumenteerimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>See artikkel on teine osa artiklite ts\u00fcklist \u00abKuidas v\u00f5tta v\u00f5rguinfrastruktuur oma kontrolli alla\u00bb. K\u00f5ikide artiklite sisu ja lingid leiate <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/447008\/\">siit<\/a><\/noindex><\/i>.<\/p>\n<p><img decoding=\"async\" alt=\"Kuidas v\u00f5tta oma v\u00f5rguinfrastruktuur kontrolli alla. Teine peat\u00fckk. Puhastamine ja dokumenteerimine\" src=\"\/wp-content\/uploads\/2019\/04\/7b8e020272ed52ef0a119714b0a5d58b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMeie eesm\u00e4rk sellel etapil on korda luua dokumentatsioonis ja seadistustes. <br \/>\nSelle protsessi l\u00f5ppedes peaksite saama vajaliku dokumentide komplekti ja v\u00f5rgu, mis on vastavalt neile konfigureeritud.<\/p>\n<p>Praegu me turvaauditi teemast ei r\u00e4\u00e4gi \u2013 sellele on p\u00fchendatud kolmas osa. <\/p>\n<p>Antud etapi \u00fclesande t\u00e4itmise keerukus varieerub kindlasti ettev\u00f5ttest ettev\u00f5ttesse.<\/p>\n<p>Ideaalne olukord on see, kui<\/p>\n<ul>\n<li>teie v\u00f5rk on loodud vastavalt projektile ja teil on t\u00e4ielik dokumentide komplekt<\/li>\n<li>teie ettev\u00f5ttes on rakendatud <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/post\/433614\/\">muudatuste kontrolli ja haldamise protsess<\/a><\/noindex> v\u00f5rgu<\/li>\n<li>selle protsessi kohaselt on teil olemas dokumendid (sh k\u00f5ik vajalikud skeemid), mis annavad t\u00e4ieliku \u00fclevaate aktuallsest olukorrast<\/li>\n<\/ul>\n<p>\nSel juhul on teie \u00fclesanne \u00fcsna lihtne. Peate uurima dokumente ja vaatama \u00fcle k\u00f5ik tehtud muudatused. <\/p>\n<p>Halvimal juhul on teil<\/p>\n<ul>\n<li>v\u00f5rk, mis on loodud ilma projektita, plaanita, ilma koosk\u00f5lastuseta, inseneride poolt, kellel pole piisavalt kvalifikatsiooni,<\/li>\n<li>kaootiliste, dokumenteerimata muudatustega, palju 'pr\u00fcgi' ja mitteoptimeeritud lahendustega<\/li>\n<\/ul>\n<p>\nOn selge, et teie olukord j\u00e4\u00e4b kuskile vahepeale, kuid kahjuks n\u00e4itab see skaala, et te t\u00f5en\u00e4oliselt olete l\u00e4hemal halvemale otsale.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Sel juhul peate suutma lugeda m\u00f5tteid, sest peate \u00f5ppima m\u00f5istma, mida \u2018disainerid\u2019 soovisid teha, taastama nende loogika, l\u00f5petama l\u00f5petamata t\u00f6\u00f6d ja eemaldama \u2018pr\u00fcgi\u2019. <br \/>\nJa loomulikult peate nende vigu k\u00f5rvaldamiseks, muutma (selle etapi jaoks niinimetatud minimaalselt) disaini ja muutma v\u00f5i uuesti looma skeeme. <\/p>\n<p>K\u00e4esolev artikkel ei pretendeeri kindlasti t\u00e4ielikkusele. Kirjeldan vaid \u00fcldiseid p\u00f5him\u00f5tteid ja peatun m\u00f5nede levinud probleemide peal, millega tuleks tegelema.<\/p>\n<h2>Dokumentide kogum<\/h2>\n<p><\/p>\n<blockquote><p>Alustame n\u00e4itest.<\/p>\n<p>Allpool on toodud m\u00f5ned dokumendid, mida on tavaks koostada ettev\u00f5ttes Cisco Systems projekteerimise k\u00e4igus.<\/p>\n<p><b>CR<\/b> \u2013 Klientide n\u00f5uded, n\u00f5uded kliendi (tehniline \u00fclesanne).<br \/>\nKoostatakse koost\u00f6\u00f6s kliendiga ja m\u00e4\u00e4ratleb v\u00f5rgu n\u00f5uded.<\/p>\n<p><b>HLD<\/b> \u2013 K\u00f5rgetasemeline Disain, k\u00f5rgetasemeline disain vastavalt v\u00f5rgu n\u00f5uetele (CR). Dokument selgitab ja p\u00f5hjendab valitud arhitektuurilisi lahendusi (topoloogia, protokollid, seadmete valik, ...). HLD ei sisalda disainiga seotud \u00fcksikasju, n\u00e4iteks kasutatavaid liideseid ja IP-aadresse. Samuti ei arutata konkreetset seadme konfiguratsiooni. See dokument on pigem m\u00f5eldud, et selgitada kliendi tehnilisele juhtkonnale disaini p\u00f5hikontseptsioone.<\/p>\n<p><b>LLD<\/b> \u2013 Madalatasemeline disain, madalama taseme disain k\u00f5rgema taseme (HLD) alusel. <br \/>\nSee peab sisaldama k\u00f5iki \u00fcksikasju, mis on vajalikud projekti elluviimiseks, n\u00e4iteks teavet seadmete \u00fchendamise ja konfigureerimise kohta. See on t\u00e4ielik juhend disaini elluviimiseks. See dokument peab andma piisavalt teavet selle rakendamiseks isegi v\u00e4hem kvalifitseeritud personali poolt. <\/p>\n<p>M\u00f5ned, n\u00e4iteks IP-aadressid, AS-numbrid, f\u00fc\u00fcsilise \u00fchenduse skeem (kaabeldus), v\u00f5ib \"v\u00e4lja kanda\" eraldi dokumentidesse, nagu <b>NIP<\/b> (V\u00f5rgu rakenduskava).<\/p>\n<p>V\u00f5rgu loomine algab nende dokumentide koostamisest ja toimub nende alusel, seej\u00e4rel kontrollitakse (testitakse) klientide poolt vastavust disainile.<\/p><\/blockquote>\n<p>\nMuidugi, erinevatel integratoritel, erinevates klientides ja erinevates riikides v\u00f5ivad projektdokumentatsiooni n\u00f5uded olla erinevad. Kuid sooviks v\u00e4ltida formaalsusi ja k\u00e4sitleda k\u00fcsimust sisuliselt. See etapp ei ole projekteerimise, vaid korrastamise teemal ning me vajame oma \u00fclesannete t\u00e4itmiseks piisavalt dokumente (skeeme, tabeleid, kirjeldusi ...). <\/p>\n<p>Ja minu arvates on olemas teatud absoluutne miinimum, ilma milleta ei ole v\u00f5imalik t\u00f5husalt v\u00f5rku kontrollida.<\/p>\n<p>Need dokumendid on:<\/p>\n<ul>\n<li>f\u00fc\u00fcsilise \u00fchenduse skeem (cabling) (ajakirja)<\/li>\n<li>v\u00f5rgu skeem v\u00f5i skeemid, mis sisaldavad olulist L2\/L3 teavet<\/li>\n<\/ul>\n<p><\/p>\n<h2>F\u00fc\u00fcsilise \u00fchenduse skeem<\/h2>\n<p>\nM\u00f5nedes v\u00e4ikestes ettev\u00f5tetes on seadmete paigaldamise ja f\u00fc\u00fcsilise \u00fchenduse (cabling) t\u00f6\u00f6d v\u00f5rguinseneride vastutusalas. <\/p>\n<p>Sellisel juhul lahendatakse \u00fclesanne osaliselt j\u00e4rgmise l\u00e4henemisega. <\/p>\n<ul>\n<li>Kasutage liidese kirjelduse abil selle k\u00fclge \u00fchendatud seadmeid.<\/li>\n<li>haldirge administratiivselt k\u00f5ik \u00fchendamata v\u00f5rgu seadmete portid<\/li>\n<\/ul>\n<p>\nSee annab teile v\u00f5imaluse, isegi juhul, kui link on probleemne (kui sellel liidese ei t\u00f6\u00f6ta cdp v\u00f5i lldp), kiiresti kindlaks teha, mis on seotud selle portiga.<br \/>\nSamuti n\u00e4ete kergesti, millised portid on h\u00f5ivatud ja millised on vabad, mis on vajalik uue v\u00f5rgu seadmete, serverite v\u00f5i t\u00f6\u00f6jaamade \u00fchendamise planeerimiseks. <\/p>\n<p>Aga selge on, et kui kaotate juurdep\u00e4\u00e4su seadmele, siis kaotate ka juurdep\u00e4\u00e4su sellele teabele. Lisaks ei saa te sellist olulist teavet nagu see, milline seade, milline on selle voolutarve, kui palju porte on, millises rack'is see asub, millised seal on patch-paneelid ja kuhu (millises rack'is\/patch-paneelis) nad on \u00fchendatud, protokollida. Seega on ikka veel lisadokumendid (mitte ainult seadmete kirjeldused) v\u00e4ga kasulikud.<\/p>\n<p>Ideaalne lahendus on kasutada rakendusi, mis on loodud sellise teabe t\u00f6\u00f6tlemiseks. Kuid v\u00f5ite piirduda ka lihtsate tabelitega (n\u00e4iteks Excelis) v\u00f5i kuvada teavet, mida peate vajalikuks L1\/L2 skeemidel.<\/p>\n<blockquote><p>Oluline!<\/p>\n<p>V\u00f5rgutehnik v\u00f5ib muidugi \u00fcsna h\u00e4sti tunda struktuursete kaablite s\u00fcsteemide, rackide t\u00fc\u00fcpide, katkematute toiteallikate, k\u00fclmade ja kuumade koridoride erip\u00e4rasid ning teha ka \u00f5iget maandust, ... just nagu ta v\u00f5ib tunda elementaarosakeste f\u00fc\u00fcsikat v\u00f5i C++. Kuid tuleb m\u00f5ista, et k\u00f5ik see ei ole tema teadmiste valdkond. <\/p>\n<p>Seet\u00f5ttu on hea praktika, et seadmete paigaldamise, \u00fchendamise, t\u00f6\u00f6kindluse s\u00e4ilitamise ja f\u00fc\u00fcsilise \u00fchendamisega seotud \u00fclesannete lahendamiseks oleksid olemas kas spetsialiseeritud osakonnad v\u00f5i eraldatud inimesed. T\u00fc\u00fcpiliselt on andmekeskustes need andmekeskuse insenerid, kontoris aga help-desk. <\/p>\n<p>Kui teie ettev\u00f5ttes on sellised osakonnad, siis f\u00fc\u00fcsilise \u00fchenduse logimise k\u00fcsimused ei kuulu teie \u00fclesannete hulka ning saate piirduda ainult liidese kirjeldamise ja kasutamata portide haldamisega.<\/p><\/blockquote>\n<h2>V\u00f5rguskeemid<\/h2>\n<p>\nPole \u00fchtset l\u00e4henemist skeemide joonistamiseks.<\/p>\n<p>K\u00f5ige olulisem on, et skeemid peaksid andma aru sellest, kuidas liiklus liigub, l\u00e4bi milliste loogiliste ja f\u00fc\u00fcsiliste elementide teie v\u00f5rgus.<\/p>\n<p>F\u00fc\u00fcsiliste elementide all m\u00f5tleme<\/p>\n<ul>\n<li>aktiivsetele seadmetele<\/li>\n<li>aktiivsete seadmete liidestele\/portidele<\/li>\n<\/ul>\n<p>\nLoogilised \u2014 <\/p>\n<ul>\n<li>loogilised seadmed (N7K VDC, Palo Alto VSYS, \u2026)<\/li>\n<li>VRF <\/li>\n<li>VLAN-id<\/li>\n<li>alamliidesed<\/li>\n<li>tunnelid<\/li>\n<li>alad<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nSamuti, kui teie v\u00f5rk ei ole t\u00e4iesti elementaarne, koosneb see erinevatest segmentidest. <br \/>\nPiem\u0113ram<\/p>\n<ul>\n<li>andmekeskus<\/li>\n<li>interneti<\/li>\n<li>WAN<\/li>\n<li>eem access<\/li>\n<li>kontori LAN<\/li>\n<li>DMZ<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nM\u00f5istlik on omada mitmeid skeeme, mis annavad nii \u00fcldise \u00fclevaate (kuidas liiklus liigub nende segmentide vahel) kui ka iga eraldi segmenti selgitavat detailset kirjeldust.<\/p>\n<p>Kuna t\u00e4nap\u00e4evastes v\u00f5rkudes v\u00f5ib olla palju loogilisi tasemeid, on hea (kuid mitte kohustuslik) l\u00e4henemine erinevate skeemide loomine erinevate tasemete jaoks. N\u00e4iteks katte l\u00e4henemise korral v\u00f5ivad need olla j\u00e4rgmised skeemid:<\/p>\n<ul>\n<li>kate<\/li>\n<li>L1\/L2 alus<\/li>\n<li>L3 alus<\/li>\n<\/ul>\n<p>\nLoomulikult on k\u00f5ige olulisem skeem, ilma milleta ei ole v\u00f5imalik m\u00f5ista teie disaini ideed, marsruutimise skeem.<\/p>\n<h4>Marsruutimise skeem<\/h4>\n<p>\nMinimaalselt peaks sellel skeemil olema kajastatud<\/p>\n<ul>\n<li>millised marsruutimise protokollid ja kus neid kasutatakse<\/li>\n<li>peamised andmed marsruutimise protokolli seadistuste kohta (area\/AS number\/router-id\/\u2026)<\/li>\n<li>millistel seadmetel toimub \u00fcmberjaotamine<\/li>\n<li>kus toimub marsruutide filtreerimine ja agregatsioon<\/li>\n<li>teave vaike marsruudi kohta <\/li>\n<\/ul>\n<p>\nSamuti on sageli kasulik L2 skeem (OSI).<\/p>\n<h4>L2 skeem (OSI)<\/h4>\n<p>\nSellel skeemil v\u00f5ib olla kajastatud j\u00e4rgmised andmed:<\/p>\n<ul>\n<li>millised VLAN-id<\/li>\n<li>millised portid on trunk-portid<\/li>\n<li>millised portid on kogutud ether-channel'i (port channel), virtuaalport channel'i<\/li>\n<li>millised STP protokollid ja millistel seadmetel neid kasutatakse<\/li>\n<li>peamised STP seaded: root\/root backup, STP hind, porta prioritiseerimine<\/li>\n<li>t\u00e4iendavad STP seaded: BPDU valvamine\/filter, juure valvamine...<\/li>\n<\/ul>\n<p><\/p>\n<h2>T\u00fc\u00fcpilised vead projekteerimisel<\/h2>\n<p><\/p>\n<blockquote><p>Halva l\u00e4henemisviisi n\u00e4ide v\u00f5rgu ehitamiseks.<\/p>\n<p>V\u00f5tame lihtsa n\u00e4ite lihtsa b\u00fcroov\u00f5rgu ehitamisest.<\/p>\n<p>Olles \u00f5petanud telekommunikatsiooni tudengeid, v\u00f5in \u00f6elda, et tegelikult omab iga\u00fchel tudengist, kes on l\u00e4binud minu kursuse, keskmiselt teisel semestril vajalikud teadmised lihtsa b\u00fcroo LAN-i seadistamiseks.<\/p>\n<p>Mis on keeruline, et \u00fchendada l\u00fclitid, seadistada VLAN, SVI liideseid (L3 l\u00fclitite puhul) ja kirjutada staatiline marsruutimine?<\/p>\n<p>K\u00f5ik t\u00f6\u00f6tab.<\/p>\n<p>Kuid samas j\u00e4\u00e4vad k\u00f5rvale k\u00fcsimused, mis on seotud <\/p>\n<ul>\n<li>turvalisus<\/li>\n<li>varundamisega<\/li>\n<li>v\u00f5rgu skaaleerimisega<\/li>\n<li>t\u00f5hususe<\/li>\n<li>l\u00e4bipaistvusega<\/li>\n<li>usaldusv\u00e4\u00e4rsusega<\/li>\n<li>\u2026<\/li>\n<\/ul>\n<p>\nAeg-ajalt kuulen v\u00e4idet, et b\u00fcroov\u00f5rk on midagi v\u00e4ga lihtsat ja tavaliselt kuulen seda inseneridelt (ja juhtidelt), kes tegelevad millegagi, aga mitte v\u00f5rkudega, ning nad \u00fctlevad seda nii kindlalt, et \u00e4rge imestage, kui LAN-i teevad inimesed, kellel on ebapiisav praktika ja teadmised ning see tehakse enam-v\u00e4hem nendega vigadega, mida ma kirjeldan veidi allpool.<\/p><\/blockquote>\n<p><\/p>\n<h4>Iseloomulikud L1 (OSI) taseme disainivead<\/h4>\n<p><\/p>\n<ul>\n<li>Kui te siiski vastutate ka SKS-i eest, on \u00fcks ebameeldivamaid p\u00e4randusi, mis teile v\u00f5imalik, see hajameelne ja l\u00e4bim\u00f5tlemata kommutatsioon.<\/li>\n<\/ul>\n<p>\nSamuti kuuluks L1 t\u00fc\u00fcpi vigu varustuse ressursse, mida kasutatakse, n\u00e4iteks,<\/p>\n<ul>\n<li>piisav l\u00e4bilaskev\u00f5ime<\/li>\n<li>ebapiisav TCAM seadmetes (v\u00f5i selle ebaefektiivne kasutamine)<\/li>\n<li>ebapiisav j\u00f5udlus (tihti viitab tulem\u00fc\u00fcridele)<\/li>\n<\/ul>\n<p><\/p>\n<h4>Iseloomulikud L2 (OSI) taseme disainivead<\/h4>\n<p>\nTihti, kui puudub hea arusaam STP toimimisest ja sellega kaasnevatest potentsiaalsetest probleemidest, \u00fchendatakse l\u00fclitid kaootiliselt, vaikeparameetritega, ilma STP t\u00e4iendava h\u00e4\u00e4lestamiseta. <\/p>\n<p>Kaasnevad tulemused on tihti j\u00e4rgmised<\/p>\n<ul>\n<li>suur STP v\u00f5rgu diameeter, mis v\u00f5ib p\u00f5hjustada broudcast-torme <\/li>\n<li>STP juur m\u00e4\u00e4ratakse juhuslikult (MAC-aadressi p\u00f5hjal) ja liiklusteed on suboptimaalsed<\/li>\n<li>pordid, mis on \u00fchendatud hostide juurde, ei ole seadistatud kui edge (portfast), mis viib STP \u00fclekalkuleerimisele l\u00f5ppjaamade sisse- ja v\u00e4ljal\u00fclitamisel<\/li>\n<li>v\u00f5rk ei ole segmenteeritud L1\/L2 tasemel, mis t\u00e4hendab, et probleemid m\u00f5ne l\u00fclitiga (n\u00e4iteks j\u00f5u\u00fclekoormus) viivad STP topoloogia \u00fcmberarvutamiseni ja liikluse peatamiseni k\u00f5ikides VLANides k\u00f5ikidel l\u00fclititel (sealhulgas kriitilises teeninduskontinuiteti osas).<\/li>\n<\/ul>\n<p><\/p>\n<h4>L3 (OSI) projekteerimise vead<\/h4>\n<p>\nM\u00f5ned t\u00fc\u00fcpilised algajate v\u00f5rguspetsialistide vead:<\/p>\n<ul>\n<li>sagedane (v\u00f5i ainult) staatilise marsruutimise kasutamine<\/li>\n<li>ebasobivate marsruutimisprotokollide kasutamine antud disainile<\/li>\n<li>ebasobiv loogiline v\u00f5rgu segmentatsioon<\/li>\n<li>ebasobiv adresseerimisruumi kasutamine, mis ei v\u00f5imalda marsruutide agregatsiooni<\/li>\n<li>varumarsruutide puudumine<\/li>\n<li>default gateway'i reservatsiooni puudumine<\/li>\n<li>as\u00fcmmeetriline marsruutimine marsruutide \u00fcmberkorraldamisel (v\u00f5ib olla kriitiline NAT\/PAT, stateful tulem\u00fc\u00fcride korral)<\/li>\n<li>MTU probleemid<\/li>\n<li>marsruutide \u00fcmberkorraldamisel liigub liiklus l\u00e4bi teiste turvazoonide v\u00f5i isegi teiste tulem\u00fc\u00fcride, mis viib selle liikluse kadumiseni<\/li>\n<li>topoloogia halb skaleeritavus<\/li>\n<\/ul>\n<p><\/p>\n<h2>Disaini kvaliteedi hindamise kriteeriumid<\/h2>\n<p>\nR\u00e4\u00e4kides optimaalsusest\/ mitteoptimaalsusest, peame m\u00f5istma, milliste kriteeriumide alusel saame seda hinnata. Minu arvates on k\u00f5ige olulisemad (aga mitte k\u00f5ik) kriteeriumid (ja nende selgitused marsruutimisprotokollide kontekstis):<\/p>\n<ul>\n<li>skaleeritavus (scalability)<br \/>\n N\u00e4iteks, kui otsustate lisada veel \u00fche andmekeskuse. Kui lihtne on teil seda teha?<\/li>\n<li>haldamise mugavus (managability)<br \/>\n Kui h\u00f5lpsasti ja ohutult sujuvad operatiivsed muudatused, n\u00e4iteks uue v\u00f5rgu teavitamine v\u00f5i marsruutide filtreerimine?<\/li>\n<li>saadavus (availability)<br \/>\n Mis protsent ajast suudab teie s\u00fcsteem pakkuda n\u00f5utud teenuse taset?<\/li>\n<li>turvalisus (security)<br \/>\n Kui kaitstud on edastatud andmed?<\/li>\n<li>hind<\/li>\n<\/ul>\n<p><\/p>\n<h2>Muutused<\/h2>\n<p>\nPeamine p\u00f5him\u00f5te sel etapil v\u00f5iks v\u00e4ljenduda valemiga '\u00e4ra tee kahju'.<br \/>\nSeet\u00f5ttu, isegi kui te pole t\u00e4iesti n\u00f5us disaini ja valitud rakendusega (konfiguratsiooniga), ei ole alati m\u00f5istlik muudatusi teha. M\u00f5istlik l\u00e4henemine on k\u00f5ikide tuvastatud probleemide liigitamine kahe parameetri alusel: <\/p>\n<ul>\n<li>kui kergesti saab seda probleemi lahendada<\/li>\n<li>kui suurrisk see kujutab endast<\/li>\n<\/ul>\n<p>\nEsiteks tuleb k\u00f5rvaldata k\u00f5ik, mis praegu alandab pakutava teenuse taset lubatust madalamale, nagu n\u00e4iteks probleemid, mis p\u00f5hjustavad pakettide kaotust. Seej\u00e4rel k\u00f5rvalda need probleemid, mis on kergemad ja ohutumaid k\u00f5rvaldada, j\u00e4rjestades neid vastavalt riskide t\u00f5sidusele (alustades probleemidest, mis disainide v\u00f5i konfiguratsioonide t\u00f5ttu kannavad suuremaid riske kuni v\u00e4iksemateni).<\/p>\n<p>Perfektsionism sel etapil v\u00f5ib olla kahjulik. Viige disain rahuldavasse seisundisse ja s\u00fcnkroniseerige v\u00f5rgukonfiguratsioon vastavalt sellele.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/434750\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0446\u0438\u043a\u043b\u0430 \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c. \u041d\u0430\u0448\u0430 \u0446\u0435\u043b\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u2014 \u043d\u0430\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u0435\u0442\u044c, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043d\u0438\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043c\u044b [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23042,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31067","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0446\u0438\u043a\u043b\u0430 \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c. \u041d\u0430\u0448\u0430 \u0446\u0435\u043b\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u2014 \u043d\u0430\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u0435\u0442\u044c, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043d\u0438\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043c\u044b\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0413\u043b\u0430\u0432\u0430 \u0432\u0442\u043e\u0440\u0430\u044f. \u0427\u0438\u0441\u0442\u043a\u0430 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0446\u0438\u043a\u043b\u0430 \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c. \u041d\u0430\u0448\u0430 \u0446\u0435\u043b\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u2014 \u043d\u0430\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u0435\u0442\u044c, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043d\u0438\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043c\u044b\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:39:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:39:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas oma v\u00f5rgu infrastruktuuri kontrolli alla v\u00f5tta. Teine peat\u00fckk. Puhastamine ja dokumenteerimine | ProHoster","description":"See artikkel on teine osa artiklite sarjast \"Kuidas oma v\u00f5rgu infrastruktuuri kontrolli alla v\u00f5tta\". K\u00f5igi artiklite sisu ja lingid leiate siit. Meie eesm\u00e4rk sel etapil on korrastada dokumentatsioon ja konfiguratsioon. Selle protsessi l\u00f5puks peaks teil olema vajalik dokumendikomplekt ja v\u00f5rk, mis on nendele vastavalt konfigureeritud. Praegu oleme","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0413\u043b\u0430\u0432\u0430 \u0432\u0442\u043e\u0440\u0430\u044f. \u0427\u0438\u0441\u0442\u043a\u0430 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 | ProHoster","og:description":"\u042d\u0442\u0430 \u0441\u0442\u0430\u0442\u044c\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0442\u043e\u0440\u043e\u0439 \u0432 \u0446\u0438\u043a\u043b\u0435 \u0441\u0442\u0430\u0442\u0435\u0439 \u00ab\u041a\u0430\u043a \u0432\u0437\u044f\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u00bb. \u0421\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u0446\u0438\u043a\u043b\u0430 \u0438 \u0441\u0441\u044b\u043b\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c. \u041d\u0430\u0448\u0430 \u0446\u0435\u043b\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u2014 \u043d\u0430\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0443 \u0432\u0430\u0441 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u0435\u0442\u044c, \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u043d\u0438\u043c\u0438. \u0421\u0435\u0439\u0447\u0430\u0441 \u043c\u044b","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-vzyat-setevuyu-infrastrukturu-pod-svoj-kontrol-glava-vtoraya-chistka-i-dokumentirovanie","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:39:16+00:00","article:modified_time":"2019-10-31T18:39:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31067","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 04:22:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:24:13","updated":"2026-01-21 04:22:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31067","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31067"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31067\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23042"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31067"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31067"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31067"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}