{"id":32724,"date":"2019-10-31T21:48:35","date_gmt":"2019-10-31T18:48:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\/"},"modified":"2019-10-31T21:48:35","modified_gmt":"2019-10-31T18:48:35","slug":"chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","title":{"rendered":"Mis on mis ja kes on kes DDoS-i kaitse turul","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00abPoiss, kes meie saiti tegi, on juba DDoS-i kaitse seadistanud.\u00bb<br \/>\n\u00abMeil on ju DDoS-i kaitse, miks sait maas on?\u00bb<br \/>\n\u00abKui palju tahab Qrator?\u00bb<\/p>\n<p>Kuidas nendele tellija\/v\u00e4\u00e4rikuse k\u00fcsimustele normaalselt vastata, oleks hea teada, mis peitub nime \u00abDDoS-i kaitse\u00bb taga. Kaitses\u00fcsteemide valik meenutab rohkem arstiga ravimi valimist kui IKEA-st laua valimist.<\/p>\n<p>Olen veebisaitide hooldamisega tegelenud 11 aastat, kogenud sadu r\u00fcnnakuid hallatavate teenuste vastu, ja n\u00fc\u00fcd natuke r\u00e4\u00e4gin kaitse sisemisest poolest.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hh\/qr\/ab\/hhqrabfc2kbsjf6aj3bmimutclu.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS-i kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/8dcd7f2120dd49fa7d19c8e9a3dee354.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Regulaarsed r\u00fcnnakud. 350k req kokku, 52k req legitiimsed<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nEsimesed r\u00fcnnakud ilmusid praktiliselt koos internetiga. DDoS kui n\u00e4htus sai massiliseks 2000. aastate l\u00f5pus (vaata <noindex>www.cloudflare.com\/learning\/ddos\/famous-ddos-attacks<\/noindex>).<br \/>\nUmbes alates 2015-2016 aastast on praktiliselt k\u00f5ik hostinguteenuse pakkujad asunud DDoS-i r\u00fcnnakute kaitse alla, nagu ka enamus m\u00e4rkimisv\u00e4\u00e4rseid saite konkurentsi valdkondades (tee whois IP veebisaitide eldorado.ru, leroymerlin.ru, tilda.ws ja n\u00e4ed kaitsealuste operaatorite v\u00f5rke).<\/p>\n<p>Kui 10-20 aastat tagasi v\u00f5is enamik r\u00fcnnakutest serveris tagasi l\u00fckata (hindake s\u00fcsteemiadministraatori Lenta.ru Maxim Moshkovi soovitusi 90ndatest: <noindex><a rel=\"nofollow\" href=\"http:\/\/lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10\">lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10<\/a><\/noindex>), siis on kaitse\u00fclesanded muutunud keerulisemaks.<\/p>\n<h2>DDoS r\u00fcnnakute t\u00fc\u00fcbid kaitseoperaatori valiku vaatenurgast<\/h2>\n<h4>R\u00fcnnakud L3 \/ L4 tasemel (OSI mudeli j\u00e4rgi)<\/h4>\n<p> \u2014 UDP \u00fclekoormus botnetist (otse nakkushaigetest seadmetest saadetakse palju p\u00e4ringuid r\u00fcnnatavale teenusele, serversse koormatakse kanale);<br \/>\n \u2014 DNS\/NTP\/ jne amplifikatsioon (nakkushaigetest seadmetest saadetakse palju p\u00e4ringuid haavatavatele DNS\/NTP\/ jne, saatja aadress v\u00f5ltsitakse, suur hulk vastusepakette koormab r\u00fcnnatavale kanale; nii toimub enamik kaasaegseid interneti massilisi r\u00fcnnakuid);<br \/>\n \u2014 SYN \/ ACK \u00fclekoormus (r\u00e4nnatavad serverid saavad palju p\u00e4ringuid \u00fchenduse loomise kohta ja see p\u00f5hjustab \u00fchenduste j\u00e4rjekorra \u00fclekoormuse);<br \/>\n \u2014 paketifragmenteerimise r\u00fcnnakud, ping of death, ping flood (googeldage palun);<br \/>\n \u2014 jne.<\/p>\n<p>Need r\u00fcnnakud on suunatud serveri kanali \u201e\u00fclekoormamisele\u201c v\u00f5i selle suutmatusest uut liiklust vastu v\u00f5tta.<br \/>\nKuigi SYN \/ ACK \u00fclekoormus ja amplifikatsioon erinevad oluliselt, t\u00f5itlevad paljud ettev\u00f5tted nendega suhteliselt v\u00f5rdselt. Probleemid tekivad j\u00e4rgmise grupi r\u00fcnnakutega.<\/p>\n<h4>L7 r\u00fcnnakud (rakendustasand)<\/h4>\n<p> \u2014 http \u00fclekoormus (kui r\u00fcnnatakse veebisaiti v\u00f5i m\u00f5nda http API-d);<br \/>\n \u2014 r\u00fcnnakute suunamine saidi haavatavatesse kohtadesse (mis ei oma vahem\u00e4lu, mis koormavad s\u00fcsteemi v\u00e4ga tugevalt, jne.).<\/p>\n<p>Eesm\u00e4rk on sundida serverit \u00abraskelt t\u00f6\u00f6tama\u00bb, t\u00f6\u00f6tlema palju \u00abn\u00e4iliselt reaalseid p\u00e4ringuid\u00bb ja j\u00e4\u00e4ma t\u00f5eliste p\u00e4ringute jaoks ressurssideta.<\/p>\n<p>Kuigi on ka teisi r\u00fcnnakute liike, on need \u2014 k\u00f5ige levinumad.<\/p>\n<p>T\u00f5siseid L7 taseme r\u00fcnnakuid luuakse ainulaadselt iga r\u00fcnnatava projekti jaoks.<\/p>\n<p><b>Miks kaks r\u00fchma?<\/b><br \/>\nSest on palju neid, kes oskavad h\u00e4sti L3 \/ L4 taseme r\u00fcnnakute vastu kaitsta, kuid kas ei paku \u00fcldse rakendustaseme (L7) kaitset, v\u00f5i suudavad nad sellega seni vaevalt hakkama saada.<\/p>\n<h2>Kes on turul DDoS-kaitsega seotud<\/h2>\n<p>\n(minu isiklik arvamus)<\/p>\n<h4>Kaitse L3 \/ L4 tasemel<\/h4>\n<p>Et t\u00f5rjuda amplifikatsiooni r\u00fcnnakuid (\u00abserveri kanali \u00fclekoormamine\u00bb) piisab laiadest kanalitest (paljud kaitseteenused \u00fchendavad end suurte peavoolu teenusepakkujatega Venemaal ja omavad kanaleid, mille teoreetiline maht on \u00fcle 1 Tbit). \u00c4rge unustage, et v\u00e4ga haruldased amplifikatsiooni r\u00fcnnakud kestavad kauem kui tund. Kui olete Spamhaus ja keegi teid ei armasta \u2014 jah, v\u00f5ivad proovida teie kanaleid mitu p\u00e4eva kinni panna isegi riskides teie maailmavaltise botneti elluj\u00e4\u00e4misega. Kui teil on lihtsalt veebipood, isegi kui see on mvideo.ru \u2014 1 Tbit te n\u00e4ete alles v\u00e4ga hiljem (loodetavasti).<\/p>\n<p>Et tavap\u00e4raste SYN \/ ACK \u00fcleujutuste, pakettide fragmenteerimise jms r\u00fcnnakute t\u00f5rjumiseks on vajalik varustus v\u00f5i tarkvaras\u00fcsteemid selliste r\u00fcnnakute tuvastamiseks ja eraldamiseks.<br \/>\nSellist varustust tootavad paljud (Arbor, Cisco ja Huawei-l on lahendusi, tarkvaralahendusi pakuvad Wanguard jne), paljud peavoolu teenusepakkujad on selle juba paigaldanud ja pakuvad DDoS-kaitse teenuseid (ma tean paigaldustest Rostelecomis, Megafonis, TTK-s, MTS-is, p\u00f5him\u00f5tteliselt k\u00f5igis suurtes teenusepakkujates, sama teevad ka hostimise teenusepakkujad, kes pakuvad kaitset la-la OVH.com, Hetzner.de, olen ise t\u00f6\u00f6tanud kaitsega ihor.ru). M\u00f5ned ettev\u00f5tted arendavad oma tarkvaralahendusi (tehnoloogiad nagu DPDK v\u00f5imaldavad \u00fcksikute f\u00fc\u00fcsiliste x86 masinate peal t\u00f6\u00f6delda liiklust k\u00fcmnete gigabitite ulatuses).<\/p>\n<p>K\u00f5ik tuntud m\u00e4ngijad teavad enam-v\u00e4hem, kuidas L3\/L4 DDoS-r\u00fcnnakut t\u00f5husalt tagasi t\u00f5rjuda. Ma ei oska praegu \u00f6elda, kellel on maksimaalne kanaliv\u00f5imekus (see on siseteave), kuid tavaliselt pole see nii oluline, ja erinevus seisneb vaid selles, kuiv\u00f5rd kiiresti kaitse t\u00f6\u00f6le hakkab (koheselt v\u00f5i m\u00f5ne minuti p\u00e4rast, nagu Hetzneris).<br \/>\nK\u00fcsimus on selles, kui kvaliteetselt seda tehdakse: K\u00fcllastumise r\u00fcnnakut saab t\u00f5rjuda, blokeerides liikluse riikidest, kus on k\u00f5ige rohkem kahjulikku liiklust, v\u00f5i saab visata minema ainult t\u00f5eliselt liigse liikluse.<br \/>\nAga selle p\u00f5hjal, mida ma olen kogenud, saavad k\u00f5ik t\u00f5sised turu m\u00e4ngijad sellega probleemideta hakkama: Qrator, DDoS-Guard, Kaspersky, G-Core Labs (endine SkyParkCDN), ServicePipe, Stormwall, Voxility jne.<br \/>\nMa ei ole kokku puutunud selliste operaatoritega nagu Rossotelecom, Megafon, TTK, Beeline, kolleegide arvustuste j\u00e4rgi pakuvad nad neid teenuseid piisavalt kvaliteetselt, kuid praegu kajastub perioodiliselt kogemuse puudus: vahel peab midagi ettev\u00f5tte toetuse kaudu veel kohandama.<br \/>\nM\u00f5nedel operaatoritel on eraldi teenus \"L3\/L4 taseme r\u00fcnnakute kaitse\", v\u00f5i \"kanalite kaitse\", mis maksab palju v\u00e4hem kui kaitse k\u00f5igil tasanditel.<\/p>\n<p><b class=\"spoiler_title\">Kuidas mitte-maanteeteenuse pakkuja suudab tagasi t\u00f5rjuda r\u00fcnnakud sadu Gbit, tal ju polnud oma kanaleid?<\/b>Kaitseoperaator saab \u00fchendada mistahes suurte teenusepakkujatega ja t\u00f5rjuda r\u00fcnnakud \"tema arvel\". Kanali eest tuleb maksta, kuid k\u00f5ik need sajad Gbit ei ole alati kasutuses, on v\u00f5imalusi kanalihindade olulisteks langetamiseks, seega skeem j\u00e4\u00e4b toimivaks.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/l0\/nv\/70\/l0nv70ydhaz69tiqttecs0ug1_w.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS-i kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/795ec832a500ceda40b72b7a9e27976a.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Selliseid aruandeid \u00fclemise L3\/L4 kaitse kohta sain ma regulaarselt, toetades hostinguteenuse pakkujat.<\/i><\/p>\n<h4>Kaitse L7 tasemel (rakendustasand)<\/h4>\n<p>L7 taseme (rakendustasand) r\u00fcnnakute t\u00f5rjumiseks oskavad kvaliteetselt ja stabiilselt hakkama saada vaid \u00fcksikud.<br \/>\nMul on p\u00e4ris suur kogemus.<br \/>\n \u2014 Qrator.net;<br \/>\n \u2014 DDoS-Guard;<br \/>\n \u2014 G-Core Labs;<br \/>\n \u2014 Kaspersky.<\/p>\n<p>Nad v\u00f5tavad tasu iga puhta megabiti eest, megabit maksab umbes mitmeid tuhandeid rubla. Kui teil on v\u00e4hemalt 100 Mbit puhast liiklust \u2014 oh. Kaitse tuleb v\u00e4ga kallis. V\u00f5in j\u00e4rgmistes artiklites r\u00e4\u00e4kida, kuidas projekteerida rakendusi, et kaitsekanalite v\u00f5imekuse pealt palju raha kokku hoida.<br \/>\nT\u00f5eline \u00abm\u00e4etip\u00bb on Qrator.net, teised j\u00e4\u00e4vad neist maha. Qrator on ainus, kes minu praktikas pakub peaaegu nullpoli t\u00e4psust, kuid nad on samal ajal mitu korda kallimad kui teised turuosalised.<\/p>\n<p>Teised operaatorid pakuvad samuti kvaliteetset ja stabiilset kaitset. Paljud teenused, mida toetame (sh v\u00e4ga tuntud riigis!), on kaitstud DDoS-Guard, G-Core Labs poolt ning on t\u00e4iesti rahul saadud tulemustega.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/95\/i0\/ap\/95i0api3gqlvnmwnk-3l8byibqq.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS-i kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/7d82c33c3859c08139104f9d4df2f04d.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Qratori poolt peatatud r\u00fcnnakud<\/i><\/p>\n<p>Mul on ka kogemus v\u00e4ikeste kaitseoperaatoritega nagu cloud-shield.ru, ddosa.net, neid on tuhandeid. Ei soovitaks neid otseselt, kuna kogemus on mitte v\u00e4ga suur, aga jutustan nende t\u00f6\u00f6p\u00f5him\u00f5tetest. Nende kaitsehind on sageli 1-2 korda madalam kui suurte m\u00e4ngijate omad. Reeglina ostavad nad osalist kaitset (L3\/L4) m\u00f5nelt suurelt m\u00e4ngijalt ja loovad oma kaitse k\u00f5rgematel tasanditel. See v\u00f5ib olla t\u00e4iesti efektiivne ja saate hea teenuse v\u00e4hem raha eest, kuid nad on siiski v\u00e4ikesed ettev\u00f5tted v\u00e4ikese t\u00f6\u00f6tajaskonnaga, palun arvestage sellega.<\/p>\n<h4>Millised on r\u00fcnnakute peegeldamise keerukused L7 tasemel?<\/h4>\n<p>K\u00f5ik rakendused on unikaalsed, ja peab lubama nende jaoks kasulikku liiklust ja blokeerima kahjulikku. Kindlatest botidest lahti saada ei \u00f5nnestu alati, seega tuleb kasutada mitmeid, t\u00f5eliselt PALJU filtreerimise astmeid.<\/p>\n<p>Kunagi piisab nginx-testcookie moodulist (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kyprizel\/testcookie-nginx-module\">https:\/\/github.com\/kyprizel\/testcookie-nginx-module<\/a><\/noindex>), ja seda jagub endiselt paljude r\u00fcnnakute peegeldamiseks. Kui t\u00f6\u00f6tasin hostingu valdkonnas, ehitasin L7 kaitse just nginx-testcookie peale.<br \/>\nKahjuks on r\u00fcnnakud muutunud keerulisemaks. testcookie kasutab botide kontrollimiseks JS-p\u00f5hiseid teste, aga paljud kaasaegsed botid saavad need edukalt l\u00e4bida.<\/p>\n<p>R\u00fcndavad botiv\u00f5rgud on samuti unikaalsed, ja tuleb arvestada iga suurte botiv\u00f5rkude erip\u00e4radega.<br \/>\nAmplifikatsioon, otsene botiv\u00f5rgu r\u00fcnnak, liikumise filtreerimine erinevatest riikidest (erinev filtreerimine erinevatele riikidele), SYN\/ACK r\u00fcnnakud, pakettide fragmenteerimine, ICMP, http r\u00fcnnakud; samas tasemel rakenduses\/http-s saab v\u00e4lja m\u00f5elda piiramatult erinevaid r\u00fcnnakuid.<br \/>\nKokkuv\u00f5ttes v\u00f5ivad kanalite kaitse, spetsialiseeritud seadmed liikluse filtreerimiseks, spetsiaalne tarkvara ja iga kliendi jaoks t\u00e4iendavad filtreerimise seadistused ulatuda k\u00fcmnete ja sadade filtreerimise tasemeteni.<br \/>\nSelle \u00f5igesti hakkama saamiseks ja filtritavade seadeid erinevatele kasutajatele kohandamiseks on vajalik suur kogemus ja kvalifitseeritud t\u00f6\u00f6tajad. Ieven suurtel operaatoritel, kes on otsustanud pakkuda kaitseteenuseid, ei saa \"probleemi raha peale visates\" lahendada: kogemusi tuleb hankida leiduvalt veebilehtedelt ja valeh\u00e4iretest legaalsel liiklusel.<br \/>\nKaitseoperaatoritel ei ole nuppu \"DDos r\u00fcnnaku t\u00f5rjumiseks\", on palju erinevaid t\u00f6\u00f6riistu, mida tuleb osata kasutada.<\/p>\n<p>Ja veel \u00fcks n\u00e4ide.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ya\/wr\/mq\/yawrmqrp_xyx2o_nlg_hqeogl30.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS-i kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/545b53b7701bc8f06388bb5469e857f1.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Kaitseta server blokeeriti teenusepakkuja poolt r\u00fcndes, mille maht oli 600 Mbit.<\/i><br \/>\n<i>(\"Liikluse kadumist\" ei t\u00e4heldatud, kuna r\u00fcnnatud oli ainult \u00fcks veebileht, see eemaldati ajutiselt serverist ja blokeering eemaldati tunni jooksul).<\/i><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ty\/b_\/2b\/tyb_2baae8seawlsujllodb5kd0.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS-i kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/746502a8cb635a5ee097ef680fd24c0c.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>See sama server on kaitstud. R\u00fcndajad \"andis alla\" p\u00e4rast p\u00e4eva kestev r\u00fcnnakutele. R\u00fcnnak ise osutus mitte k\u00f5ige tugevamaks.<\/i><\/p>\n<p>L3\/L4 r\u00fcnnakud ja kaitse on lihtsamad, peamiselt s\u00f5ltuvad need kanalite laiustest, r\u00fcnnakute tuvastamise ja filtreerimise algoritmidest.<br \/>\nL7 r\u00fcnnakud on keerulisemad ja originaalsemad, need s\u00f5ltuvad r\u00fcnnaku sihtrakendusest, r\u00fcndavate isikute v\u00f5imalustest ja fantaasiast. Nende vastu kaitsmine n\u00f5uab suurt teadlikkust ja kogemust, ning tulemus ei pruugi olla kohene ega kindlasti mitte 100%. Seni pole Google leidnud uut tehisintellekti, mis kaitseks.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/southbridge\/blog\/450092\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32724","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:48:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:48:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mis on mis ja kes on kes DDos kaitse turul | ProHoster","description":"\"Poiss, kes meile veebilehe tegi, on juba seadnud DDos kaitse.\" \"Meil peaks olema DDos kaitse, miks veebileht maas on?\" \"Kuipalju tahab Qrator?\" Kuidas neile k\u00fcsimustele korralikult vastata.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster","og:description":"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:35+00:00","article:modified_time":"2019-10-31T18:48:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 12:16:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:53:25","updated":"2026-01-21 12:16:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=32724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32724\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/24508"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=32724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=32724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=32724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}