{"id":32724,"date":"2019-10-31T21:48:35","date_gmt":"2019-10-31T18:48:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\/"},"modified":"2019-10-31T21:48:35","modified_gmt":"2019-10-31T18:48:35","slug":"chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","title":{"rendered":"Mis on mis ja kes on kes DDoS kaitse turul","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u201ePoiss, kes meile veebilehe tegi, on juba DDoS kaitse seadistanud.\u201c<br \/>\n\u201eKuid meil on ju DDoS kaitse, miks veebileht kukkus?\u201c<br \/>\n\u201eK cuanto tuhandeid tahab Qrator?\u201c<\/p>\n<p>Et normaalselt vastata sellistele k\u00fcsimustele kliendilt\/\u00fclemuselt, oleks hea teada, mis peitub nime taga \u201eDDoS kaitse\u201c. Kaitses\u00fcsteemide valik meenutab pigem arsti poolt ravimite valimist kui IKEA-st laua valimist.<\/p>\n<p>Olen tegelenud veebilehtede hooldamisega 11 aastat, ellu j\u00e4\u00e4nud sadadest r\u00fcnnakutest toetatud teenustele, ja n\u00fc\u00fcd r\u00e4\u00e4gin natuke kaitse sisek\u00fcljest.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/hh\/qr\/ab\/hhqrabfc2kbsjf6aj3bmimutclu.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/8dcd7f2120dd49fa7d19c8e9a3dee354.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Regulaarsed r\u00fcnnakud. 350k req kokku, 52k req legaalsed<\/i><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nEsimesed r\u00fcnnakud ilmusid praktiliselt koos internetiga. DDoS fenomen hakkas massiliseks muutuma 2000. aastate l\u00f5pust (vaadake <noindex>www.cloudflare.com\/learning\/ddos\/famous-ddos-attacks<\/noindex>).<br \/>\nUmbes aastast 2015-2016 hakkasid peaaegu k\u00f5ik hostimispakkujad DDoS r\u00fcnnakute kaitsele, nagu ka enamus m\u00e4rgatavaid veebilehti konkurentsiv\u00f5imelistes valdkondades (tehke whois IP-de j\u00e4rgi saitidelt eldorado.ru, leroymerlin.ru, tilda.ws, n\u00e4ete kaitse operaatorite v\u00f5rke).<\/p>\n<p>Kui 10-20 aastat tagasi oli enamik r\u00fcnnakuid v\u00f5imalik t\u00f5rjuda serveris ise (hindake Lenta.ru s\u00fcsteemiadministraatori Maxim Moshkovi soovitusi 90-ndatest: <noindex><a rel=\"nofollow\" href=\"http:\/\/lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10\">lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10<\/a><\/noindex>), siis on praegu kaitseprobleemid muutunud keerukamaks.<\/p>\n<h2>DDoS-r\u00fcnnakute t\u00fc\u00fcbid kaitseoperaatori valiku vaatenurgast<\/h2>\n<h4>R\u00fcnnakud L3 \/ L4 tasemel (OSI mudeli j\u00e4rgi)<\/h4>\n<p> \u2014 UDP sp\u00e4mmi botiv\u00f5rgust (haavatud seadmetelt saadetakse palju p\u00e4ringuid r\u00fcnnatavale teenusele, serverid ummistavad \u00fchenduse);<br \/>\n \u2014 DNS\/NTP\/jne amplifikatsioon (haavatud seadmetelt saadetakse palju p\u00e4ringuid n\u00f5rkadele DNS\/NTP\/jne, saatja aadressi valeesitus, hulk pakette vastustega ummistab r\u00fcnnatava \u00fchenduse; nii tehakse t\u00e4nap\u00e4eval k\u00f5ige massilisemaid r\u00fcnnakuid internetis);<br \/>\n \u2014 SYN \/ ACK sp\u00e4mmin (r\u00fcnnatavatele serveritele saadetakse palju \u00fchenduse loomise p\u00e4ringuid, \u00fchenduste j\u00e4rjekord ummistub);<br \/>\n \u2014 r\u00fcnnakud pakettide fragmentatsiooniga, ping of death, ping flood (palun googeldage);<br \/>\n \u2014 jne.<\/p>\n<p>Need r\u00fcnnakud sihivad \u00abummistada\u00bb serveri kanalit v\u00f5i \u00abtappa\u00bb selle v\u00f5imet uut liiklust vastu v\u00f5tta.<br \/>\nKuigi SYN\/ACK r\u00fcnnakud ja amplifikatsioon erinevad oluliselt, suudavad paljud ettev\u00f5tted nendega v\u00f5rdselt h\u00e4sti toime tulla. Probleemid tekivad j\u00e4rgmise grupi r\u00fcnnakutega.<\/p>\n<h4>R\u00fcnnakud L7 (rakendustasandil)<\/h4>\n<p> \u2014 http flood (kui r\u00fcnnatakse veebisaiti v\u00f5i m\u00f5nda http API-d);<br \/>\n \u2014 r\u00fcnnakute haavatavatele kohtadele saidil (millel pole vahem\u00e4lu, mis koormavad saiti v\u00e4ga palju jne).<\/p>\n<p>Eesm\u00e4rk on sundida serverit 'raske t\u00f6\u00f6' tegema, t\u00f6\u00f6tlema palju 'nagu t\u00f5elisi p\u00e4ringuid' ja j\u00e4\u00e4ma ressursita tegelike p\u00e4ringute jaoks.<\/p>\n<p>Kuigi on ka teisi r\u00fcnnakuid, on need k\u00f5ige levinumad.<\/p>\n<p>T\u00f5sised r\u00fcnnakud L7 tasemel on loodud ainulaadselt iga r\u00fcnnatava projekti jaoks.<\/p>\n<p><b>Miks kaks r\u00fchma?<\/b><br \/>\nSest on palju neid, kes oskavad h\u00e4sti kaitsta r\u00fcnnakute eest L3\/L4 tasemel, kuid ei v\u00f5ta \u00fcldse rakendustasandi (L7) kaitset v\u00f5i suudavad sellega tegeleda n\u00f5rgemalt kui alternatiivid.<\/p>\n<h2>Kes on kes DDoS kaitse turul<\/h2>\n<p>\n(minu isiklik arvamus)<\/p>\n<h4>Kaitse L3\/L4 tasemel<\/h4>\n<p>Amplifitseeritud r\u00fcnnakute t\u00f5rjumiseks (serveri kanali \"koormus\") on piisavad laiad kanalid (paljud kaitses\u00fcsteemid on \u00fchendatud Venemaa enamike suurte selgroo pakkujatega ja neil on kanalid, mille teoreetiline maht on \u00fcle 1 Tbit). Pea meeles, et v\u00e4ga haruldased amplifitseeritud r\u00fcnnakud kestavad kauem kui tund. Kui oled Spamhaus ja k\u00f5ik sind ei armasta \u2014 jah, nad v\u00f5ivad proovida kanaleid mitu p\u00e4eva v\u00e4lja l\u00fclitada, isegi kasutatava maailmakuulsa botneti edasise elluj\u00e4\u00e4mise riskiga. Kui sul on lihtsalt veebipood, isegi kui see on mvideo.ru \u2014 1 Tbit mitme p\u00e4eva jooksul ei n\u00e4e sa v\u00e4ga varsti (loodan).<\/p>\n<p>SYN\/ACK \u00fclekoormuse, pakettide fragmentatsiooni jms r\u00fcnnakute t\u00f5rjumiseks on vajalik varustus v\u00f5i tarkvaras\u00fcsteemid selliste r\u00fcnnakute tuvastamiseks ja t\u00f5kestamiseks.<br \/>\nSelliseid seadmeid tootavad paljud (Arbor, lahendused on olemas Cisco, Huawei, Wanguardi tarkvaralised lahendused jne), paljud suuremad operaatorid on need juba installeerinud ja pakuvad DDoS-i kaitse teenuseid (tean installatsioonidest Rostelecomis, MegaFonis, TTK-s, MTS-is, p\u00f5him\u00f5tteliselt k\u00f5igis suurtel teenusepakkujatel, sama teeb ka hostimine oma kaitsega nagu OVH.com, Hetzner.de, olen ise kohanud kaitset ihor.ru-s). M\u00f5ned ettev\u00f5tted arendavad oma tarkvaralahendusi (tehnoloogiad nagu DPDK v\u00f5imaldavad t\u00f6\u00f6delda k\u00fcmneid gigabite liiklust \u00fche f\u00fc\u00fcsilise x86 masina peal).<\/p>\n<p>Tuntud m\u00e4ngijatest suudavad L3\/L4 DDoS r\u00fcnnakuid t\u00f5husalt peatada k\u00f5ik. Ma ei \u00fctle, kellel on suurem maksimaalne kanali maht (see on insider-teave), kuid tavaliselt pole see nii oluline, vahe on ainult selles, kui kiiresti kaitse t\u00f6\u00f6le hakkab (kas kohe v\u00f5i m\u00f5ne minuti jooksul, nagu Hetzneris).<br \/>\nK\u00fcsimus on selles, kui kvaliteetselt seda tehakse: amplifikatsiooni r\u00fcnnaku saab peatada, blokeerides liikluse riikidest, kus on k\u00f5ige rohkem kahjulikku liiklust, v\u00f5i saab \u00e4ra visata ainult t\u00f5eliselt liigse liikluse.<br \/>\nKuid minu kogemuste p\u00f5hjal saavad k\u00f5ik t\u00f5sised turu m\u00e4ngijad selle probleemideta hakkama: Qrator, DDoS-Guard, Kaspersky, G-Core Labs (endine SkyParkCDN), ServicePipe, Stormwall, Voxility jne.<br \/>\nOlen kokku puutunud vaid m\u00f5ne operaatori, n\u00e4iteks Rostelecomi, MegaFoni, TTK ja Beeline'i teenustega. Kaaslaste arvamuste kohaselt pakuvad nad neid teenuseid piisavalt kvaliteetselt, kuid vahepeal tuleb siiski tunda kogemuse puudust: m\u00f5nikord tuleb toe kaudu midagi veel timmida.<br \/>\nM\u00f5nedel operaatoritel on eraldi teenus \"L3\/L4 tasandi r\u00fcnnakute kaitse\" v\u00f5i \"kanalite kaitse\", mis on palju odavam kui kaitse k\u00f5igil tasanditel.<\/p>\n<p><b class=\"spoiler_title\">Kuidas suudab mitte-magistraalne operaator r\u00fcnnakuid sadade Gbit-suudelt tagasi peegeldada, kui tal pole oma kanaleid?<\/b>Kaitseoperaator v\u00f5ib \u00fchenduda mistahes suure operaatoriga ja peegeldada r\u00fcnnakuid \"tema kulul\". Kanali eest tuleb maksta, kuid k\u00f5iki neid sadu Gbit-suusid ei pruugi vajaduse korral \u00e4ra kasutada, seega on sellel juhul kanalite kulude m\u00e4rkimisv\u00e4\u00e4rne v\u00e4hendamine v\u00f5imalik, mist\u00f5ttu j\u00e4\u00e4b skeem toimima.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/l0\/nv\/70\/l0nv70ydhaz69tiqttecs0ug1_w.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/795ec832a500ceda40b72b7a9e27976a.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Selliseid aruandeid said L3\/L4 kaitseseltsist olen regulaarselt saanud, toetades hosting-teenuse pakkuja s\u00fcsteeme.<\/i><\/p>\n<h4>L7-taseme (rakendus) kaitse<\/h4>\n<p>L7-taseme (rakendus) r\u00fcnnakud suudavad pidevalt ja kvaliteetselt t\u00f5rjuda r\u00fcnnakut.<br \/>\nMul on tegelikult piisavalt suur kogemus<br \/>\n \u2014 Qrator.net;<br \/>\n \u2014 DDoS-Guard;<br \/>\n \u2014 G-Core Labs;<br \/>\n \u2014 Kaspersky.<\/p>\n<p>Nad k\u00fcsivad tasu iga puhta megabiti eest, megabit maksab umbes paar tuhat rubla. Kui teil on v\u00e4hemalt 100 Mbit puhast liiklust \u2014 oh. Kaitse on v\u00e4ga kallis. V\u00f5in j\u00e4rgnevates artiklites r\u00e4\u00e4kida, kuidas rakendusi projekteerida, et kulusid kaitsekanalite mahtude osas oluliselt kokku hoida.<br \/>\nReaalne \"m\u00e4etipp\" \u2014 Qrator.net, teised j\u00e4\u00e4vad neile alla. Qrator on minu praktikas ainus, kes pakub peaaegu nulli valesid h\u00e4ireid, kuid samas on nende teenus mitmeid kordi kallim kui teiste turu m\u00e4ngijate omi.<\/p>\n<p>Teised operaatorid pakuvad samuti kvaliteetset ja stabiilset kaitset. Paljud teenused, mida me toetame (sealhulgas v\u00e4ga tuntud meie riigis!), on DDoS-Guard, G-Core Labs kaitse all ja on tulemusega t\u00e4iesti rahul.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/95\/i0\/ap\/95i0api3gqlvnmwnk-3l8byibqq.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/7d82c33c3859c08139104f9d4df2f04d.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Qratori t\u00f5rjuda r\u00fcnnakud<\/i><\/p>\n<p>On ka kogemusi v\u00e4ikeettev\u00f5tete kaitses\u00fcsteemidega nagu cloud-shield.ru, ddosa.net ja nende sarnastega. Kindlasti ma ei soovita, kuna kogemus pole just suur, aga r\u00e4\u00e4gin nende t\u00f6\u00f6p\u00f5him\u00f5tetest. Nende kaitse hind on sageli 1\u20132 korda madalam kui suurte m\u00e4ngijate juures. Reegliks on, et nad ostavad osalist kaitset (L3\/L4) kelleltki suuremast ettev\u00f5ttest ning loovad juurde oma kaitse k\u00f5rgematel tasemetel. See v\u00f5ib olla \u00fcsna t\u00f5hus ja saate head teenust odavamalt, kuid need on siiski v\u00e4iksed ettev\u00f5tted, palun arvestage sellega.<\/p>\n<h4>Mis on keeruline r\u00fcnnakute peegeldamisel L7 tasemel?<\/h4>\n<p>Kuna k\u00f5ik rakendused on ainulaadsed, tuleb lubada neile kasulikku liiklust ja blokeerida kahjulik. Kahjuks ei \u00f5nnestu alati robotite eraldamine, mist\u00f5ttu tuleb kasutada palju, t\u00f5eliselt PALJU liikluse puhastamise astmeid.<\/p>\n<p>Kunagi piisab nginx-testcookie moodulist (<noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/kyprizel\/testcookie-nginx-module\">https:\/\/github.com\/kyprizel\/testcookie-nginx-module<\/a><\/noindex>), ja seda on siiani piisavalt, et peegeldada suurt hulka r\u00fcnnakuid. Kui t\u00f6\u00f6tasin hostimise valdkonnas, kehtestasime L7 kaitse just nginx-testcookiele.<br \/>\nKahjuks on r\u00fcnnakud muutunud keerukamateks. testcookie kasutab JavaScripti baasil botide kontrollimisi, ent paljud kaasaegsed botid suudavad need edukalt l\u00e4bida.<\/p>\n<p>R\u00fcndavad botiv\u00f5rgustikud on samuti unikaalsed ning iga suure botiv\u00f5rgustiku erip\u00e4ra tuleb arvesse v\u00f5tta.<br \/>\nTugevdus, otse r\u00fcnnak botiv\u00f5rgustikest, liikluse filtreerimine erinevatest riikidest (erinev filtreerimine erinevates riikides), SYN\/ACK r\u00fcnnakud, pakettide fraktsioneerimine, ICMP, http r\u00fcnnakud \u2014 rakenduse\/http tasandil saab v\u00e4lja m\u00f5elda piiramatult erinevaid r\u00fcnnakuid.<br \/>\nKokkuv\u00f5ttes v\u00f5ib kanalite kaitse, spetsialiseeritud seadmed liikluse puhastamiseks, spetsiaalne tarkvara ja iga kliendi jaoks kohandatud filtreerimise s\u00e4tted v\u00f5tta sadu ja tuhandeid filtreerimistasemete tasemeid.<br \/>\nSelle \u00f5igeks haldamiseks ja erinevate kasutajate jaoks filtreerimise seadete korrektseks kohandamiseks on vajalik suur kogemus ja kvalifitseeritud personali olemasolu. Isegi suur operaator, kes otsustab pakkuda kaitseteenuseid, ei saa \u201elihtsalt raha visata probleemile\u201d: kogemusi tuleb saada langenud saitidel ja vale positiivsete tuvastuste kaudu seaduslikul liikluses.<br \/>\nR\u00fcndekaitse operaatoritel puudub nupp \u00abDDoS-vastane\u00bb; on olemas mitmesuguseid t\u00f6\u00f6riistu, millega tuleb osata toime tulla.<\/p>\n<p>Ja veel \u00fcks n\u00e4ite.<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ya\/wr\/mq\/yawrmqrp_xyx2o_nlg_hqeogl30.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/545b53b7701bc8f06388bb5469e857f1.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>Kaitseta server blokeeriti hostimise pakkuja poolt r\u00fcnnaku ajal, mille mahuks oli 600 Mbit.<\/i><br \/>\n<i>(\u201eTraffic'i kadumist\u201c ei olnud tunda, kuna r\u00fcnnatud oli ainult \u00fcks veebileht, mis eemaldati serverist ajutiselt ja blokeering eemaldati tunni jooksul).<\/i><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habrastorage.org\/webt\/ty\/b_\/2b\/tyb_2baae8seawlsujllodb5kd0.png\"><img decoding=\"async\" alt=\"Mis on mis ja kes on kes DDoS kaitse turul\" src=\"\/wp-content\/uploads\/2019\/04\/746502a8cb635a5ee097ef680fd24c0c.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<i>See sama server on kaitstud. R\u00fcndajad \u201et\u00fcdisid \u00e4ra\u201c \u00fche p\u00e4eva kestnud r\u00fcnnakute j\u00e4rel. R\u00fcnnak ise osutus mitte k\u00f5ige tugevamaks.<\/i><\/p>\n<p>L3\/L4 r\u00fcnnakud ja kaitse on lihtsamad, need s\u00f5ltuvad peamiselt kanalite tugevusest, r\u00fcnnakute tuvastamise ja filtreerimise algoritmidest.<br \/>\nL7 r\u00fcnnakud on keerulisemad ja originaalsemad, need s\u00f5ltuvad r\u00fcnnatud rakendusest, r\u00fcndajate v\u00f5imalustest ja fantaasiast. Kaitse nende vastu n\u00f5uab s\u00fcgavaid teadmisi ja kogemusi, ning tulemus ei pruugi olla kohene ja mitte 100% kindel. Seni ei ole Google v\u00e4lja m\u00f5elnud uut tehisintellekti kaitseks.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/southbridge\/blog\/450092\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32724","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:48:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:48:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mis on mis ja kes on kes DDoS-kaitse turul | ProHoster","description":"\u00abPoiss, kes meie veebilehte tegi, on juba DDoS-kaitse seadistanud.\u00bb \u00abMeil on ju DDoS-kaitse, miks veebileht kokku kukkus?\u00bb \u00abKui palju tuhandeid tahab Qrator?\u00bb Et sellistele k\u00fcsimustele kliendi\/juhi juures \u00f5igesti vastata, oleks hea teada, mis peitub nimetuse \u201eDDoS-kaitse\u201d taga. Kaitseteenuste valik meenutab pigem arsti m\u00e4\u00e4ratud ravimi valikut kui IKEA-st laua valimist. Mina","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster","og:description":"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:35+00:00","article:modified_time":"2019-10-31T18:48:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 12:16:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:53:25","updated":"2026-01-21 12:16:55"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=32724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32724\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/24508"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=32724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=32724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=32724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}