{"id":36043,"date":"2019-10-31T22:09:19","date_gmt":"2019-10-31T19:09:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\/"},"modified":"2019-10-31T22:09:19","modified_gmt":"2019-10-31T19:09:19","slug":"kak-my-probivali-velikij-kitajskij-faervol-ch-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","title":{"rendered":"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tere!<br \/>\nIgas headruvad head lood l\u00f5ppevad. Ja meie lugu sellest, kuidas me leiutasime Hiina tulem\u00fc\u00fcri kiire l\u00e4bimise lahenduse, ei ole erand. Seet\u00f5ttu kiirustan jagama teiega viimast, <strong>l\u00f5petavat osa<\/strong> sellel teemal.<\/p>\n<p><\/p>\n<p>Eelmises osas r\u00e4\u00e4kisime paljusid meie loodud teststandardeid ja milliseid tulemusi need andsid. Ja me peatume sellel, et oleks tore lisada <strong>CDN!<\/strong> meie skeemi elavdamiseks.<\/p>\n<p><\/p>\n<p>R\u00e4\u00e4gin teile, kuidas me testisime Alibaba Cloud CDN-i, Tencent Cloud CDN-i ja Akamai-d ning millele l\u00f5puks otsustasime. Ja loomulikult teeme kokkuv\u00f5tte.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)\" src=\"\/wp-content\/uploads\/2019\/07\/36f7d82cfee454fafa1b1528fc36c730.jpg\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2 id=\"alibaba-cloud-cdn\">Alibaba Cloud CDN<\/h2>\n<p><\/p>\n<p>Me oleme hostitud Alibaba Cloudis, kasutame IPSEC-i ja CEN-i samalt. Seet\u00f5ttu on m\u00f5istlik esmalt proovida nende lahendusi.<\/p>\n<p><\/p>\n<p>Alibaba Cloudil on kaks t\u00fc\u00fcpi toodet, mis v\u00f5iksid meile sobida: <strong>CDN<\/strong> ja <strong>DCDN<\/strong>. Esimene variant on klassikaline CDN konkreetse domeeni (alamdomeeni) jaoks. Teine variant de\u0161ifreeritakse kui <em>Dynamic Route for CDN<\/em> (ma kutsun seda d\u00fcnaamiliseks CDN-iks), seda saab aktiveerida Full-site re\u017eiimis (wildcard domeenide jaoks), see salvestab staatikat ja kiirendab d\u00fcnaamilist sisu, see t\u00e4hendab, et ka lehe d\u00fcnaamika laaditakse tasemel kiirete v\u00f5rgu pakkumise kaudu. See on meie jaoks oluline, kuna meie veebisait on peamiselt d\u00fcnaamiline, seal on kasutusel palju alamdomeene ja on mugavam seadistada CDN kord \u00fche korra \u201et\u00e4he\u201d jaoks \u2014 *.semrushchina.cn.<\/p>\n<p><\/p>\n<p>Oleme seda toodet varem meie Hiina projekti etappides n\u00e4inud, kuid siis ei t\u00f6\u00f6tanud see veel ja arendajad lubasid, et toode on kohe k\u00f5ikidele klientidele kergesti kergesti k\u00e4tte saadav. Ja see on n\u00fc\u00fcd kergesti kergesti k\u00e4tte saadav.<\/p>\n<p><\/p>\n<p>DCDN-is saab:<\/p>\n<p><\/p>\n<ul>\n<li>seada SSL-terminatsiooni oma sertifikaadiga,<\/li>\n<li>aktiveerida d\u00fcnaamilise sisu kiirenduse,<\/li>\n<li>paindlikult seadistada staatiliste failide vahem\u00e4lu,<\/li>\n<li>teha vahem\u00e4lu puhastamine,<\/li>\n<li>edastada veebip\u00f5hised sokid,<\/li>\n<li>aktiveerida kompressioon ja isegi HTML ilustaja.<\/li>\n<\/ul>\n<p><\/p>\n<p>\u00dches\u00f5naga, k\u00f5ik nagu suurte ja t\u00f5siste CDN-teenuse pakkujate juures.<\/p>\n<p><\/p>\n<p>P\u00e4rast seda, kui Origin (koht, kuhu CDN-i serva serverid l\u00e4hevad) on m\u00e4\u00e4ratud, j\u00e4\u00e4b alles luua CNAME t\u00e4he jaoks, mis suunab <em>all.semrushchina.cn.w.kunluncan.com<\/em> (see CNAME saadi Alibaba Cloudi konsoolist), ja CDN hakkab t\u00f6\u00f6tama. <\/p>\n<p><\/p>\n<p>Testide tulemuste kohaselt aitas see CDN meid v\u00e4ga. Statistika on toodud allpool.<\/p>\n<p><\/p>\n<p>Lahendus<br \/>\nAeg<br \/>\nMediaan<br \/>\n75. percentiil<br \/>\n95. percentiil<\/p>\n<p>Cloudflare<br \/>\n86.6<br \/>\n18s<br \/>\n30s<br \/>\n60s<\/p>\n<p>IPsec<br \/>\n99.79<br \/>\n18s<br \/>\n21s<br \/>\n30s<\/p>\n<p>CEN<br \/>\n99.75<br \/>\n16s<br \/>\n21s<br \/>\n27s<\/p>\n<p>CEN\/IPsec + GLB<br \/>\n99.79<br \/>\n13s<br \/>\n16s<br \/>\n25s<\/p>\n<p><strong>Ali CDN + CEN\/IPsec + GLB<\/strong><br \/>\n<strong>99.75<\/strong><br \/>\n<strong>10s<\/strong><br \/>\n<strong>12.8s<\/strong><br \/>\n<strong>17.3s<\/strong><\/p>\n<p><\/p>\n<p>Need to ensure the content fits the target audience. That's a great result, especially compared to the initial figures. However, we knew that the browser test of the American version of our website www.semrush.com averages about 8.3s from the US (a very close estimate). There's still room for improvement. Additionally, there were CDN providers we were interested in testing.<\/p>\n<p><\/p>\n<p>This smoothly leads us to another giant in the Chinese market \u2014 <strong>Tencent<\/strong>.<\/p>\n<p><\/p>\n<h2 id=\"tencent-cloud\">Tencent Cloud<\/h2>\n<p><\/p>\n<p>Tencent is still developing its cloud \u2014 this is evident from the limited number of products. During our usage, we wanted to test not only their CDN but also their overall network infrastructure:<\/p>\n<p><\/p>\n<ul>\n<li>do they have something similar to CEN?<\/li>\n<li>how does IPSEC work for them? Is it fast, what\u2019s the uptime?<\/li>\n<li>do they have Anycast?<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)\" src=\"\/wp-content\/uploads\/2019\/07\/a0af3f5cff85056cb322e0a64ae079b5.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Let's break down these questions separately.<\/p>\n<p><\/p>\n<h4 id=\"analog-cen\">CEN Analog<\/h4>\n<p><\/p>\n<p>Tencent has a product <strong>Cloud Connect Network<\/strong> (<noindex><a rel=\"nofollow\" href=\"https:\/\/intl.cloud.tencent.com\/product\/ccn\">CCN<\/a><\/noindex>), which allows connecting VPCs from different regions, both within China and externally. The product is currently in internal beta, and a ticket must be created to request access. From support, we learned that global accounts (not related to Chinese citizens or legal entities) cannot participate in the beta testing program and, in general, cannot connect a region inside China to a region outside. 1-0 in favor of Ali Cloud.<\/p>\n<p><\/p>\n<h4 id=\"ipsec\">IPSEC<\/h4>\n<p><\/p>\n<p>The southernmost region for Tencent is \u2014 <em>Guangzhou<\/em>. We set up a tunnel and connected it with the Hong Kong region in GCP (at that time this region had already become available). We also simultaneously raised a second tunnel in Ali Cloud from Shenzhen to Hong Kong. It turned out that the latency through Tencent\u2019s network to Hong Kong is generally better (10ms) than from Shenzhen to Hong Kong in Ali (120ms \u2014 what?). However, this did not speed up the website's operation routed through Tencent and this tunnel, which in itself was an astonishing fact and once again proved the following: latency \u2014 for China, this is not a metric that really deserves attention during the development of a solution for passing through the Chinese firewall.<\/p>\n<p><\/p>\n<h4 id=\"anycast-internet-acceleration\">Anycast Internet Acceleration<\/h4>\n<p><\/p>\n<p>Another product that allows functioning through anycast IP \u2014 <noindex><a rel=\"nofollow\" href=\"https:\/\/intl.cloud.tencent.com\/product\/aia\">AIA<\/a><\/noindex>. However, it is also unavailable to global accounts, so I won't elaborate on it, but knowing that such a product exists may be useful.<\/p>\n<p><\/p>\n<p>However, the CDN test showed quite interesting results. Tencent\u2019s CDN cannot be enabled for the full site, only for specific domains. We set up domains and directed traffic to them:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)\" src=\"\/wp-content\/uploads\/2019\/07\/a4931750f0cb79fbae7ec1217eab4fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>It turned out that this CDN has such a function: <strong>Piiri\u00fclese Liikluse Optimeerimine<\/strong>. See funktsioon peaks v\u00e4hendama kulusid, kui liiklus l\u00e4bib Hiina tulem\u00fc\u00fcri. N\u00e4iteks <em>Origin<\/em> oli m\u00e4rkida Google'i GLB (GLB anycast) IP-aadress. Seel\u00e4bi soovisime lihtsustada projekti arhitektuuri.<\/p>\n<p><\/p>\n<p>Tulemused olid v\u00e4ga head \u2014 Ali Cloud CDNi tasemel ja kohati isegi paremad. See on \u00fcllatav, kuna testide eduka tulemuse korral v\u00f5iks osad infrastruktuuri, tunnelite, CEN-i, virtuaalmasinate jne osadest loobuda. <\/p>\n<p><\/p>\n<p>Meie r\u00f5\u00f5m ei kestnud kaua, kuna ilmnes probleem: testid Catchpoints kukkusid l\u00e4bi interneti teenuse pakkuja China Mobile jaoks. K\u00f5igest asukohast saime aega v\u00e4lja CDN Tencentiga. Kirjavahetus tehnilise toega ei viinud kuhugi. Umbes \u00f6\u00f6p\u00e4eva \u00fcritasime seda probleemi lahendada, kuid ei saanud midagi korda. <\/p>\n<p><\/p>\n<p>Olin sel hetkel Hiinas, kuid ei suutnud leida avalikku Wi-Fi-d selle teenusepakkuja v\u00f5rgus, et veenduda probleemis isiklikult. Muud n\u00e4isid k\u00f5ik kiired ja head.<br \/>\nKuid kuna China Mobile on \u00fcks kolmest suurimast operaatorist, olime sunnitud liikluse tagasi suunama Ali CDN-i.<br \/>\nKuid kokkuv\u00f5ttes oli see \u00fcsna huvitav lahendus, mis v\u00e4\u00e4rib pikemat testimist ja selle probleemi t\u00f5rkeotsingut.<\/p>\n<p><\/p>\n<h2 id=\"akamai\">Akamai<\/h2>\n<p><\/p>\n<p>Viimane CDN-teenuse pakkuja, keda testisime, on <strong>Akamai<\/strong>. See on suur teenusepakkuja, kellel on oma v\u00f5rk Hiinas. Loomulikult ei saanud me temast \u00fcle vaadata.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)\" src=\"\/wp-content\/uploads\/2019\/07\/34657ab2d5da8509285f5c99401b7603.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Alates algusest leppisime Akamaiga kokku testiperioodis, et saaksime domeeni vahetada ja n\u00e4ha, kuidas see nende v\u00f5rgus t\u00f6\u00f6tab. K\u00f5ik testimise tulemused kirjeldan ma osas \u201cMida meeldis\u201d ja \u201cMida ei meeldinud\u201d, samuti annan testide tulemused.<\/p>\n<p><\/p>\n<p><strong>Mida meeldis:<\/strong><\/p>\n<p><\/p>\n<ul>\n<li>Akamai t\u00f6\u00f6tajad aitasid meid v\u00e4ga k\u00f5igis k\u00fcsimustes ja toetasid meid k\u00f5ikidel testimise etappidel. Nad p\u00fc\u00fcdsid pidevalt paremini teha oma poole pealt. Andsid h\u00e4id tehnilisi n\u00f5uandeid.<\/li>\n<li>Akamai t\u00f6\u00f6tab umbes 10-15% aeglasemalt kui meie lahendus Ali Cloud CDN kaudu. Muljetavaldav on see, et Akamai jaoks m\u00e4\u00e4rasime originaali IP-aadressi GLB, st liiklus ei l\u00e4inud meie lahenduse l\u00e4bi (potentsiaalselt oleks v\u00f5imalik loobuda osast infrastruktuurist). Kuid siiski n\u00e4itas testide tulemused, et see lahendus on halvem kui meie praegune variant (v\u00f5rdlevad tulemused allpool).<\/li>\n<li>Testiti nii GLB originaali kui ka originaali Hiinas. M\u00f5lemad variandid olid enam-v\u00e4hem samad.<\/li>\n<li>Jah <em>Sure Route<\/em> (automaatne marsruutimise optimeerimine). Saate paigutada katseobjekti Originisse ning Akamai Edge serverid proovivad selle k\u00e4tte saada (tavaline GET). Nende p\u00e4ringute jaoks m\u00f5\u00f5detakse kiirus ja muud m\u00f5\u00f5dikud, mille p\u00f5hjal Akamai v\u00f5rgustik optimeerib marsruute, et liiklus meie saidile kulgeks kiiremini ja oleks selgelt n\u00e4ha, et selle funktsiooni kasutuselev\u00f5tt on t\u00f5eliselt m\u00f5jutanud saidi laadimise kiirust.<\/li>\n<li>Konfiguratsiooni versioonimine veebiliideses on suurep\u00e4rane. Saate teha versioonide vahel v\u00f5rreldes, vaadata erinevusi. Vaadata eelnevaid versioone.<\/li>\n<li>Saate uusi versioone alustada esmalt ainult Akamai Staging v\u00f5rgus \u2014 see on samasugune v\u00f5rk nagu tootmisv\u00f5rk, kuid see tee ei m\u00f5juta reaalset kasutajat. Selle testi jaoks on vajalik DNS-kirjete petmine kohalikul masinal.<\/li>\n<li>Eriti kiire laadimiskiirus nende v\u00f5rgu kaudu suure staatika ja t\u00f5en\u00e4oliselt ka teiste failide jaoks. Fail k\u00fclmast vahem\u00e4lust saadakse mitu korda kiiremini kui sama fail Ali CDN k\u00fclmast vahem\u00e4lust. Kuumast vahem\u00e4lust on kiirus enam-v\u00e4hem sama.<\/li>\n<\/ul>\n<p><\/p>\n<p><strong>Ali CDN test:<\/strong><\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@shenzhen1:~# curl -o \/dev\/null -w@curl_time https:\/\/en.semrushchina.cn\/my_reports\/build\/scripts\/simpleInit.js?v=1551879212\n  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\n                                 Dload  Upload   Total   Spent    Left  Speed\n100 5757k    0 5757k    0     0   513k      0 --:--:--  0:00:11 --:--:--  526k\ntime_namelookup:  0.004286\ntime_connect:  0.030107\ntime_appconnect:  0.117525\ntime_pretransfer:  0.117606\ntime_redirect:  0.000000\ntime_starttransfer:  0.840348\n----------\ntime_total:  11.208119\n----------\nsize_download:  5895467 Bytes\nspeed_download:  525999.000B\/s<\/code><\/pre>\n<p><\/p>\n<p><strong>Akamai test:<\/strong><\/p>\n<p><\/p>\n<pre><code class=\"bash\">root@shenzhen1:~# curl -o \/dev\/null -w@curl_time https:\/\/www.semrushchina.cn\/my_reports\/build\/scripts\/simpleInit.js?v=1551879212\n  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current\n                                 Dload  Upload   Total   Spent    Left  Speed\n100 5757k    0 5757k    0     0  1824k      0 --:--:--  0:00:03 --:--:-- 1825k\ntime_namelookup:  0.509005\ntime_connect:  0.528261\ntime_appconnect:  0.577235\ntime_pretransfer:  0.577324\ntime_redirect:  0.000000\ntime_starttransfer:  1.327013\n----------\ntime_total:  3.154850\n----------\nsize_download:  5895467 Bytes\nspeed_download:  1868699.000B\/s<\/code><\/pre>\n<p><\/p>\n<p>Oleme m\u00e4rganud, et eelneva n\u00e4ite olukord s\u00f5ltub erinevatest teguritest. Selle punkti kirjutamise hetkel tegin testi veel kord. M\u00f5lema platvormi tulemused osutusid enam-v\u00e4hem sarnaseks. See n\u00e4itab meile, et Hiinas k\u00e4itub internet isegi suurte operaatorite ja pilveteenuse pakkujate seas aeg-ajalt erinevalt.<\/p>\n<p><\/p>\n<p>Lisadesin eelmainitud punktile suure plussina Akamai kohta: kui Ali puhul on n\u00e4htavad sellised k\u00f5rge j\u00f5udluse ja v\u00e4ga madala latentsusega t\u00fckid (see kehtib nii Ali CDN, Ali CEN kui ka Ali IPSEC kohta), siis Akamai puhul, iga kord, kui ma nende v\u00f5rku testin, t\u00f6\u00f6tab k\u00f5ik stabiilselt.<br \/>\nAkamai'l on t\u00f5epoolest suur katvus Hiinas ja nad t\u00f6\u00f6tavad paljude teenusepakkujatega.<\/p>\n<p><\/p>\n<p><strong>Mida me ei meeldi:<\/strong><\/p>\n<p><\/p>\n<ul>\n<li>Ma ei meeldi veebiliides ega t\u00f6\u00f6korraldus \u2014 need on nullid. Kuid p\u00f5him\u00f5tteliselt harjub \u00e4ra (ilmselt).<\/li>\n<li>Testide tulemused on halvemad kui meie omal platvormil.<\/li>\n<li>Vigu testide k\u00e4igus on rohkem kui meie platvormil (\u00fclevaatus on madalam).<\/li>\n<li>Hiinas ei ole oma DNS-servereid. Seet\u00f5ttu on testides palju vigu, kuna DNS-i lahendamise aeg on \u00fcletas.<\/li>\n<li>Ei paku oma IP-aadresse -&gt; ei ole v\u00f5imalik kirja panna korrektseid <em>set_real_ip_from<\/em> meie serverites.<\/li>\n<\/ul>\n<p><\/p>\n<p>Metrika (~3626 testi; k\u00f5ik metoodikad, v\u00e4lja arvatud \u00fclevus, on ms; statistika \u00fches ajavahemikus):<\/p>\n<p><\/p>\n<p>CDN teenusepakkuja<br \/>\nMediaan<br \/>\n75%<br \/>\n95%<br \/>\nVastus<br \/>\nVeebilehe vastus<br \/>\nAeg<br \/>\nDNS<br \/>\n\u00dchenda<br \/>\nOota<br \/>\nLaadi<br \/>\nSSL<\/p>\n<p>Ali CDN<br \/>\n9195<br \/>\n10749<br \/>\n17489<br \/>\n1,715<br \/>\n10,745<br \/>\n99.531<br \/>\n57<br \/>\n17<br \/>\n927<br \/>\n479<br \/>\n200<\/p>\n<p>Akamai<br \/>\n9783<br \/>\n11887<br \/>\n19888<br \/>\n2,352<br \/>\n11,550<br \/>\n98.980<br \/>\n424<br \/>\n91<br \/>\n1408<br \/>\n381<br \/>\n50<\/p>\n<p><\/p>\n<p>Jaotamine percentiili j\u00e4rgi (ms):<\/p>\n<p><\/p>\n<p>Percentiil<br \/>\nAkamai<br \/>\nAli CDN<\/p>\n<p>10<br \/>\n7,092<br \/>\n6,942<\/p>\n<p>20<br \/>\n7,775<br \/>\n7,583<\/p>\n<p>30<br \/>\n8,446<br \/>\n8,092<\/p>\n<p>40<br \/>\n9,146<br \/>\n8,596<\/p>\n<p>50<br \/>\n9,783<br \/>\n9,195<\/p>\n<p>60<br \/>\n10,497<br \/>\n9,770<\/p>\n<p>70<br \/>\n11,371<br \/>\n10,383<\/p>\n<p>80<br \/>\n12,670<br \/>\n11,255<\/p>\n<p>90<br \/>\n15,882<br \/>\n13,165<\/p>\n<p>100<br \/>\n91,592<br \/>\n91,596<\/p>\n<p><\/p>\n<p>Kokkuv\u00f5tteks: Akamai variant on eluj\u00f5uline, kuid ei anna sama stabiilsuse ja kiiruse n\u00e4itajaid, nagu meie enda lahendus koos Ali CDN-iga.<\/p>\n<p><\/p>\n<h2 id=\"malenkie-zametki\">V\u00e4ikesed m\u00e4rkmed<\/h2>\n<p><\/p>\n<p>M\u00f5ned punktid ei mahtunud jutustusse, kuid soovisin neist ka kirjutada.<\/p>\n<p><\/p>\n<h3 id=\"pekin--tokio-i-gonkong\">Pekingi + Tokyo ja Hongkong<\/h3>\n<p><\/p>\n<p>Nagu ma juba eespool mainisin, testisime IPSEC tunnelit Hongkongi (HK) suunal. Kuid testisime ka CENi HK suunal. See on veidi odavam ja oli huvitav n\u00e4ha, kuidas see t\u00f6\u00f6tab linnade vahel, mille kaugus on ~100 km. Huvitav oli, et latentsus nende linnade vahel on 100 ms k\u00f5rgem kui meie algvariandi puhul (Taiwani suunal). Kiirus ja stabiilsus oli samuti parem Taiwani puhul. L\u00f5puks j\u00e4tsime HK backup IPSEC piirkonnaks.<\/p>\n<p><\/p>\n<p>Lisaks proovisime \u00fcles seada sellise paigalduse:<\/p>\n<p><\/p>\n<ul>\n<li>klientide l\u00f5petamine Pekingis,<\/li>\n<li>IPSEC ja CEN Tokyo suunal,<\/li>\n<li>Ali CDN-is anti Pekingi server originaalserveriks.<\/li>\n<\/ul>\n<p><\/p>\n<p>See skeem polnud nii stabiilne, kuigi kiiruselt ei j\u00e4\u00e4nud meie lahendusest maha. Mis puudutab tunnelit, siis n\u00e4gin perioodilisi katkeid isegi CEN-i puhul, mis pidi olema stabiilne. Seet\u00f5ttu naasime vana skeemi juurde ja lagundasime selle st stage.<\/p>\n<p><\/p>\n<p>Allpool on statistika latentsuse kohta erinevate piirkondade vahel erinevate kanalite kaudu. V\u00f5ib-olla on see kellelegi huvitav.<\/p>\n<p><\/p>\n<p><em>IPsec<\/em><br \/>\nAli cn-beijing &lt;&#8212;&gt; GCP asia-northeast1 \u2014 193ms<br \/>\nAli cn-shenzhen &lt;&#8212;&gt; GCP asia-east2 \u2014 91ms<br \/>\nAli cn-shenzhen &lt;&#8212;&gt; GCP us-east4 \u2014 200ms<\/p>\n<p><\/p>\n<p><em>CEN<\/em><br \/>\nAli cn-beijing &lt;&#8212;&gt; Ali ap-northeast-1 \u2014 54ms (!)<br \/>\nAli cn-shenzhen &lt;&#8212;&gt; Ali cn-hongkong \u2014 6ms (!)<br \/>\nAli cn-shenzhen &lt;&#8212;&gt; Ali us-east1 \u2014 216ms<\/p>\n<p><\/p>\n<h3 id=\"obschaya-informaciya-pro-internet-v-kitae\">\u00dclevaade internetist Hiinas<\/h3>\n<p><\/p>\n<p>Lisaks artikli alguses kirjeldatud internetiprobleemidele.<\/p>\n<p><\/p>\n<ul>\n<li>Internet Hiinas t\u00f6\u00f6tab siseriiklikult \u00fcsna kiiresti.\n<ul>\n<li>J\u00e4reldus on tehtud avalike Wi-Fi v\u00f5rkude testimise p\u00f5hjal erinevates asukohtades, kus neid v\u00f5rgus kasutab palju inimesi.<\/li>\n<li>Siseriiklike serverite allalaadimis- ja \u00fcleslaadimiskiirus oli umbes 20 Mbit\/s ja 5-10 Mbit\/s vastavalt.<\/li>\n<li>Kiirus v\u00e4liskanalites on lihtsalt minimaalne, v\u00e4hem kui 1 Mbit\/s.<\/li>\n<\/ul>\n<\/li>\n<li>Internet Hiinas ei ole eriti stabiilne.\n<ul>\n<li>M\u00f5nikord avanevad veebilehed kiiresti, m\u00f5nikord aeglaselt (sama aja jooksul eri p\u00e4evadel), tingimusel et seadistused ei muutu. Oleme seda t\u00e4heldanud n\u00e4iteks semrushchina.cn n\u00e4itel. Seda v\u00f5ib seostada Ali CDN-iga, mis t\u00f6\u00f6tab samuti perioodiliselt kiiruselt, s\u00f5ltuvalt p\u00e4evast, t\u00e4htede asendist jne.<\/li>\n<\/ul>\n<\/li>\n<li>Mobiilne internet on praktiliselt igal pool 4G v\u00f5i 4G+. Signaal on olemas metroos, liftides \u2014 l\u00fchidalt, pea igal pool.<\/li>\n<li>Kuna Hiina kasutajad usuvad ainult .cn domeenidesse \u2014 on m\u00fc\u00fct. Oleme seda otse kasutajatelt v\u00e4lja uurinud.\n<ul>\n<li>Saab n\u00e4ha, kuidas <noindex><a rel=\"nofollow\" href=\"http:\/\/baidu.cn\">http:\/\/baidu.cn<\/a><\/noindex> redirectib www.baidu.com (t\u00f5epoolest ka mandri-Hiinas).<\/li>\n<\/ul>\n<\/li>\n<li>Paljud ressursid on t\u00f5epoolest blokeeritud. Lihtsalt: google.com, Facebook, Twitter. Kuid paljud Google'i ressursid t\u00f6\u00f6tavad (muidugi mitte k\u00f5ikides Wi-Fi v\u00f5rkudes ning VPN ei ole sel juhul kasutamisel (ka ruuteri poolel, see on kindel).<\/li>\n<li>Paljud blokeeritud ettev\u00f5tete \"tehnilised\" domeenid t\u00f6\u00f6tavad samuti. See t\u00e4hendab, et k\u00f5iki Google'i ja muid n\u00e4iliselt blokeeritud ressursse ei pruugi valimatult eemaldada. Tuleb otsida m\u00f5ni keelatud domeenide nimekiri.<\/li>\n<li>Neil on vaid kolm peamist internetiteenuse pakkujat: China Unicom, China Telecom, China Mobile. On ka m\u00f5ned v\u00e4iksemad, kuid nende osakaal turul on ebaoluline.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"bonus-itogovaya-shema-resheniya\">Boonus: l\u00f5plik lahenduste skeem<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Kuidas me l\u00f5hkusime Suurt Hiina Tuli(Tule) (osa 3)\" src=\"\/wp-content\/uploads\/2019\/07\/ec9c09dbbad1c3f002920d875a5079d7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2 id=\"itog\">Kokkuv\u00f5te<\/h2>\n<p><\/p>\n<p>Aasta on m\u00f6\u00f6dunud projekti k\u00e4ivitamisest. Alustasime sellest, et meie veebisait keeldus Hiinas normaalselt t\u00f6\u00f6tamast, GET curliga kestsid laadimised 5,5 sekundit. <\/p>\n<p><\/p>\n<p>Siis, neid n\u00e4itajaid esimesel lahendusel (Cloudflare):<\/p>\n<p><\/p>\n<p>Lahendus<br \/>\nAeg<br \/>\nMediaan<br \/>\n75. percentiil<br \/>\n95. percentiil<\/p>\n<p>Cloudflare<br \/>\n86.6<br \/>\n18s<br \/>\n30s<br \/>\n60s<\/p>\n<p><\/p>\n<p>J\u00f5udsime selliste tulemusteni (eelmise kuu statistika):<\/p>\n<p><\/p>\n<p>Lahendus<br \/>\nAeg<br \/>\nMediaan<br \/>\n75. percentiil<br \/>\n95. percentiil<\/p>\n<p>Ali CDN + CEN\/IPsec + GLB<br \/>\n99.86<br \/>\n8.8s<br \/>\n9.5s<br \/>\n13.7s<\/p>\n<p><\/p>\n<p>Kuidas n\u00e4ha, 100% t\u00f6\u00f6aega pole veel saavutatud, kuid me midagi v\u00e4lja m\u00f5tleme ja siis r\u00e4\u00e4gime teile tulemustest uues artiklis :)<\/p>\n<p><\/p>\n<p>Kes, kes luges k\u00f5ik kolm osa l\u00f5puni \u2014 respekte. Loodan, et see oli teile sama huvitav kui mulle, kui ma seda tegin.<\/p>\n<p><\/p>\n<h3 id=\"ps-predyduschie-chasti\">P.S. Eelnevad osad<\/h3>\n<p><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458602\/\">Osa 1<\/a><\/noindex><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/458840\/\">Osa 2<\/a><\/noindex><\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/semrush\/blog\/459024\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u043f\u0435\u0448\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u044e\u0449\u0435\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043d\u0430 \u044d\u0442\u0443 \u0442\u0435\u043c\u0443. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u0431\u044b\u043b\u043e \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043d\u043e \u043f\u0440\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0441\u0442\u0435\u043d\u0434\u043e\u0432, \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u043c\u0438, \u0438 \u043a\u0430\u043a\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u043d\u0438 \u0434\u0430\u043b\u0438. \u0418 \u043c\u044b \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b\u043b\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26947,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36043","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.3) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:09:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:09:19+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas me murdsime l\u00e4bi Suure Hiina Tuleruumi (osa 3) | ProHoster","description":"Tere! Igal heale lool on oma l\u00f5pp. Ja meie lugu sellest, kuidas me leiutasime lahenduse Hiina Suure Tuleruumi kiireks l\u00e4bimiseks, ei ole erand.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u043b\u0438 \u0412\u0435\u043b\u0438\u043a\u0438\u0439 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0424\u0430\u0435\u0440\u0432\u043e\u043b (\u0447.3) | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442! \u041b\u044e\u0431\u044b\u0435 \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0418 \u043d\u0430\u0448\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043c\u044b \u043f\u0440\u0438\u0434\u0443\u043c\u044b\u0432\u0430\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0424\u0430\u0435\u0440\u0432\u043e\u043b\u0430, \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-my-probivali-velikij-kitajskij-faervol-ch-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:19+00:00","article:modified_time":"2019-10-31T19:09:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36043","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:46:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:51:23","updated":"2026-01-22 01:46:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36043"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36043\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/26947"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}