{"id":38090,"date":"2019-10-31T22:21:36","date_gmt":"2019-10-31T19:21:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\/"},"modified":"2019-10-31T22:21:36","modified_gmt":"2019-10-31T19:21:36","slug":"eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","title":{"rendered":"CacheBrowseri katse: Hiina tulem\u00fc\u00fcri \u00fcletamine ilma proksita sisuhalduse abil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/467201\/\"><img decoding=\"async\" alt=\"CacheBrowseri katse: Hiina tulem\u00fc\u00fcri \u00fcletamine ilma proksita sisuhalduse abil\" src=\"\/wp-content\/uploads\/2019\/09\/730c423783cdac5ddd8fef02d1e0bb72.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><i>Pilt: <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/photos\/pY_AZJfdbHQ\">Unsplash<\/a><\/noindex><\/i><\/p>\n<p>T\u00e4na jagatakse internetis suurt osa sisust CDN-v\u00f5rkude kaudu. Vaatamata sellele on uurimustest, kuidas erinevad tsensorid oma m\u00f5ju sellistes v\u00f5rkudes levitavad. Massachusettsi \u00dclikooli teadlased <noindex><a rel=\"nofollow\" href=\"https:\/\/people.cs.umass.edu\/~amir\/papers\/CacheBrowser.pdf\">anal\u00fc\u00fcsisid<\/a><\/noindex> v\u00f5imalikke meetodeid CDN-sisu blokeerimiseks Hiina ametiv\u00f5imude praktikate n\u00e4itel ning t\u00f6\u00f6tasid v\u00e4lja blokeeringute \u00fcletamise t\u00f6\u00f6riista.<\/p>\n<p>Oleme koostanud \u00fclevaate peamistest j\u00e4reldustest ja tulemustest selle eksperimendi kohta.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Sissejuhatus<\/h2>\n<p>\nTsensuur on globaalne oht s\u00f5navabadusele internetis ja vabale juurdep\u00e4\u00e4sule teabele. Suures osas on see v\u00f5imalik seet\u00f5ttu, et internet on laenatud 70ndate telefoniv\u00f5rkudest mudeli \"l\u00f5pust l\u00f5puni suhtlemise\". See v\u00f5imaldab blokeerida juurdep\u00e4\u00e4su sisule v\u00f5i kasutajate kommunikatsioonile ilma t\u00f5siste j\u00f5upingutusteta v\u00f5i kuludeta lihtsalt IP-aadressi alusel. Siin on m\u00f5ned viisid, kuidas blokeerida isegi selle aadressi, mis sisaldab keelatud sisu, kuigi ka kasutajate v\u00f5imalustele seda teada saada manipuleeritakse DNS-iga.<\/p>\n<p>Kuid interneti areng on toonud kaasa ka uusi viise teabe levitamiseks. \u00dcks neist on vahem\u00e4lu sisu kasutamine j\u00f5udluse parandamiseks ja suhtluse kiirendamiseks. T\u00e4nap\u00e4eval t\u00f6\u00f6tlevad CDN-teenusepakkujad m\u00e4rkimisv\u00e4\u00e4rset hulka kogu maailma liiklusest \u2013 juhtiv ettev\u00f5te selles valdkonnas Akamai teenib kuni 30% globaalsetest staatilisest veebiliiklusest. <\/p>\n<p>CDN-v\u00f5rk on hajutatud s\u00fcsteem, mis on m\u00f5eldud veebisisu edastamiseks maksimaalse kiiruseni. T\u00fc\u00fcpiline CDN-v\u00f5rk koosneb serveritest erinevates geograafilistes punktides, mis vahem\u00e4lustavad sisu, et edastada seda kasutajatele, kes asuvad sellele serverile k\u00f5ige l\u00e4hemal. See v\u00f5imaldab oluliselt parandada veebikommunikatsiooni kiirus.<\/p>\n<p>Lisaks l\u00f5ppkasutajate teenindamise kvaliteedi parandamisele aitab CDN-majutus sisuloome loojatel oma projekte skaleerida, v\u00e4hendades infrastruktuuri koormust.<\/p>\n<h2>CDN-sisu tsenseerimine<\/h2>\n<p>\nKuigi CDN-i liiklus moodustab juba m\u00e4rkimisv\u00e4\u00e4rse osa kogu internetis edastatavast teabest, on siiani v\u00e4ga v\u00e4he uuringuid selle kohta, kuidas reaalses maailmas tsensuurijad selle t\u00f5kestamisega toime tulevad. <\/p>\n<p>Uuringu autorid alustasid tsenseerimise tehnikate uurimisest, mida saab rakendada CDN-i suhtes. Seej\u00e4rel uurisid nad Hiina ametiv\u00f5imude rakendatavaid tegelikke meetodeid. <\/p>\n<p>Esiteks r\u00e4\u00e4gime v\u00f5imalikest tsenseerimise meetoditest ja nende rakendamise v\u00f5imalustest CDN-i kontrollimiseks.<\/p>\n<h2>Filtrimine IP j\u00e4rgi<\/h2>\n<p>\nSee on k\u00f5ige lihtsam ja odavam interneti tsenseerimise tehnika. Selle l\u00e4henemisviisi rakendamisel m\u00e4\u00e4rab tsensor musta nimekirja IP-aadressid, mis levitavad keelatud sisu. Seej\u00e4rel l\u00f5petavad kontrollitud internetipakkujad pakettide edastamise sellistele aadressidele. <\/p>\n<p>IP-p\u00f5hine blokkeerimine on \u00fcks levinumaid meetodeid interneti tsenseerimiseks. Enamus kaubanduslikest v\u00f5rguseadmetest on varustatud funktsioonidega selliste blokeeringute teostamiseks, ilma et selleks oleks vajalikud t\u00f5sised arvutuslikud kulutused.<\/p>\n<p>Kuid see meetod ei sobi h\u00e4sti CDN-liikluse blokeerimiseks teatud tehnoloogia omaduste t\u00f5ttu:<\/p>\n<ul>\n<li><b>Jaotatud vahem\u00e4lu<\/b> \u2013 parima sisu k\u00e4ttesaadavuse tagamiseks ja toimivuse optimeerimiseks, CDN-v\u00f5rgud salvestavad kasutaja sisu suure hulga edge-serverite peal, mis asuvad geograafiliselt jaotatud asukohtades. Selleks, et filtreerida sellist sisu IP alusel, peab tsensor teadma k\u00f5igi edge-serverite aadresse ja lisama need musta nimekirja. See kahjustab meetodi peamisi omadusi, kuna selle peamine eelis on see, et tavap\u00e4rases skeemis \u00fche serveri blokeerimine v\u00f5imaldab \u201ekatkestada\u201c juurdep\u00e4\u00e4su keelatud sisule korraga suurele hulgale inimestele.<\/li>\n<li><b>Jagatud IP<\/b> \u2013 kaubanduslikud CDN-teenuse pakkujad jagavad oma infrastruktuuri (st edge-serverid, kaardistamiss\u00fcsteem jne) mitme kliendi vahel. Seet\u00f5ttu laaditakse keelatud CDN-sisu samadelt IP-aadressidelt, mis ei ole keelatud. Seega toob iga IP-filterdamise katse kaasa selle, et blokeeritud saab olema ka suur hulk saite ja sisu, mis ei huvita tsensoreid. <\/li>\n<li><b>K\u00f5rgete d\u00fcnaamiliste IP-de m\u00e4\u00e4ramine<\/b> \u2013 koormuse tasakaalu optimeerimiseks ja teenuse kvaliteedi parandamiseks toimub edge-serverite ja l\u00f5ppkasutajate kaardistamine v\u00e4ga kiiresti ja d\u00fcnaamiliselt. N\u00e4iteks v\u00e4rskendab Akamai tagastatavaid IP-aadresse iga minuti j\u00e4rel. See muudab peaaegu v\u00f5imatuks IP-aadresside seostamise keelatud sisuga.<\/li>\n<\/ul>\n<p><\/p>\n<h2>DNS-sekkumine<\/h2>\n<p>\nPeale IP-filterimise on veel \u00fcks populaarne tsenseerimise viis DNS-sekkumine. See l\u00e4henemine t\u00e4hendab tsenseerijate tegevusi, mille eesm\u00e4rgiks on takistada kasutajatel keelatud sisuga ressursside IP-aadresside avastamist. See t\u00e4hendab sekkumist domeeninimede m\u00e4\u00e4ratlemise tasandil. Selle saavutamiseks on mitmeid viise, sealhulgas DNS-\u00fchenduste \u00fclev\u00f5tmine, DNS-s\u00fcstimise tehnika kasutamine ja DNS-p\u00e4ringute blokeerimine keelatud saitidele.<\/p>\n<p>See on v\u00e4ga efektiivne blokeerimisviis, kuid seda on v\u00f5imalik \u00fcletada, kui kasutada mittestandardeid DNS-resolutsiooni meetodeid, n\u00e4iteks out-of-band kanaleid. Seet\u00f5ttu kombineerivad tsenseerijad tavaliselt DNS-blokeeringud IP-filterimisega. Kuid, nagu \u00fclalpool mainitud, ei ole IP-filterimine efektiivne CDN-sisu tsenseerimisel.<\/p>\n<h2>URL-de ja m\u00e4rks\u00f5nade filtreerimine DPI abil <\/h2>\n<p>\nKaasaegne varustus, mis j\u00e4lgib v\u00f5rgu aktiivsust, v\u00f5ib anal\u00fc\u00fcsida konkreetseid URL-e ja m\u00e4rks\u00f5nu edastatavates andmepakettides. Seda tehnoloogiat tuntakse kui DPI (s\u00fcgav paketianal\u00fc\u00fcs). Sellised s\u00fcsteemid tuvastavad keelatud s\u00f5nade ja ressursside mainimisi, mille j\u00e4rel sekkutakse veebikommunikatsiooni. L\u00f5pptulemusena lihtsalt loobitakse paketid. <\/p>\n<p>See meetod on t\u00f5hus, kuid keerukam ja ressursimahukam, kuna see n\u00f5uab k\u00f5igi andmepakettide defragmentimist, mis edastatakse teatud voogude raames. <\/p>\n<p>CDN-sisu saab kaitsta sellise filtreerimise eest samamoodi nagu \"tavaline\" sisu \u2013 m\u00f5lemal juhul aitab kr\u00fcpteerimise (st HTTPS) kasutamine.<\/p>\n<p>Lisaks DPI kasutamisele h\u00e4kitud v\u00f5tmes\u00f5nade v\u00f5i URL-ide leidmiseks, saab neid t\u00f6\u00f6riistu kasutada ka t\u00e4iustatud anal\u00fc\u00fcsi jaoks. Selliste meetodite hulka kuuluvad online\/offline liikluse statistiline anal\u00fc\u00fcs ja identifitseerimise protokollide anal\u00fc\u00fcs. Need meetodid on \u00e4\u00e4rmiselt ressursimahukad ja hetkel puuduvad t\u00f5endid nende kasutamise kohta tsensuurijate seas piisavas mahus.<\/p>\n<h2>Enesetsensuur CDN-teenusepakkujatele<\/h2>\n<p>\nKui tsensuurijaks on riik, siis on tal k\u00f5ik v\u00f5imalused keelata kohalike seadustega, mis reguleerivad juurdep\u00e4\u00e4su sisule, mittekuuluvate CDN-teenusepakkujate tegevus riigis. Enesetsensuurile ei saa kuidagi vastu seista \u2013 seet\u00f5ttu, kui CDN-teenusepakkuja on huvitatud tegevusest mingis riigis, peab ta j\u00e4rgima kohalikke seadusi, isegi kui need piiravad s\u00f5navabadust.<\/p>\n<h2>Kuidas Hiina tsenseerib CDN-sisu<\/h2>\n<p>\nSuure Hiina tulem\u00fc\u00fcr peetakse p\u00f5hjendatult k\u00f5ige efektiivsemaks ja arenenumaks s\u00fcsteemiks interneti tsensuuri tagamiseks. <\/p>\n<h3>Uuringu metodoloogia<\/h3>\n<p>\nTeadlased viisid katseid l\u00e4bi Hiinas asuvas Linux-node'is. Neil oli juurdep\u00e4\u00e4s ka mitmele arvutile v\u00e4ljaspool riiki. Alguses kontrollisid uurijad, et node allub tsensuurile, mis on sarnane sellele, mida kogevad teised Hiina kasutajad \u2013 selleks proovisid nad avada mitmeid keelatud saite. Nii kinnitati sama tsensuuri taset. <\/p>\n<p>Hiinas blokeeritud CDN-i veebisaitide nimekiri saadi saidilt GreatFire.org. Seej\u00e4rel anal\u00fc\u00fcsiti, kuidas iga juhtumi korral blokeerimine toimus. <\/p>\n<p>Avatud andmete kohaselt on ainsaks suureks CDN-turu m\u00e4ngijaks, kellel on Hiinas oma infrastruktuur, Akamai. Teised uuringus osalenud teenusepakkujad on: CloudFlare, Amazon CloudFront, EdgeCast, Fastly ja SoftLayer.<\/p>\n<p>Katsetuste k\u00e4igus tuvastasid teadlased Akamai edge-serverite aadressid riigis ning proovisid seej\u00e4rel saada nende kaudu vahem\u00e4llu salvestatud lubatud sisu. Keelatud sisule ligi ei saadud (tagastati viga HTTP 403 Forbidden) \u2013 on ilmne, et ettev\u00f5te rakendab enesetsensuuri, et s\u00e4ilitada v\u00f5imalus riigis tegutseda. Samas, riigist v\u00e4ljaspool on nendele ressurssidele ligip\u00e4\u00e4s olnud avatud.<\/p>\n<p>Infrastruktuurita teenusepakkujad Hiinas ei rakenda kohalikele kasutajatele enesetsensuuri. <\/p>\n<p>Muude teenusepakkujate puhul osutus k\u00f5ige sagedamini kasutatuks blokeerimismeetodiks DNS-i filtreerimine \u2013 blokeeritud veebisaitidele esitatud p\u00e4ringud suunatakse valele IP-aadressile. Samuti ei blokeeri tulem\u00fc\u00fcr ise CDN-i edge-servereid, kuna need salvestavad nii keelatud kui ka lubatud teavet. <\/p>\n<p>Ja kui avatud liikluse korral saavad ametiv\u00f5imud blokeerida \u00fcksikute veebilehtede juurde p\u00e4\u00e4semise DPI abil, siis HTTPS-i kasutamisel saavad nad keelata juurdep\u00e4\u00e4su kogu domeenile. See toob kaasa ka lubatud sisu blokeerimise.<\/p>\n<p>Hiinas on ka oma CDN-teenusepakkujad, sealhulgas HiinaCache, ChinaNetCenter ja CDNetworks. K\u00f5ik need ettev\u00f5tted j\u00e4rgivad riigi seadusi ja blokeerivad keelatud sisu.<\/p>\n<h2>CacheBrowser: blokeeringute \u00fcletamise t\u00f6\u00f6riist CDN-iga<\/h2>\n<p>\nAnal\u00fc\u00fcs n\u00e4itas, et tsensoreil on suhteliselt raske blokeerida CDN-sisu. Seet\u00f5ttu otsustasid teadlased minna edasi ja v\u00e4lja t\u00f6\u00f6tada t\u00f6\u00f6riist, mis \u00fcletaks veebiblokeeringud, ilma et kasutataks proksitehnoloogiat. <\/p>\n<p>T\u00f6\u00f6riista p\u00f5hiidee on see, et tsensoreid on sunnitud sekkuma DNS-i t\u00f6\u00f6se, et blokkeerida CDN-sisu, kuid CDN-sisu laadimiseks ei ole tegelikult vajalik domeeninimede lahendamine. Seega v\u00f5ib kasutaja saada vajalikku sisu otse edge-serverilt, kus see on juba vahem\u00e4llu salvestatud. <\/p>\n<p>Alloleval diagrammil on kujutatud s\u00fcsteemi \u00fclesehitust. <\/p>\n<p><img decoding=\"async\" alt=\"CacheBrowseri katse: Hiina tulem\u00fc\u00fcri \u00fcletamine ilma proksita sisuhalduse abil\" src=\"\/wp-content\/uploads\/2019\/09\/07d32c2f2118c8e2b8a09a6913ff978b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKasutaja arvutisse installitakse klienditarkvara, et sisu juurde p\u00e4\u00e4seda, kasutatakse tavalist brauserit. <\/p>\n<p>URL-i v\u00f5i osa juba n\u00f5utud sisust k\u00fcsides saadab brauser p\u00e4ringu kohalikku DNS-s\u00fcsteemi (LocalDNS), et saada hostingu IP-aadress. Tavaline DNS-p\u00e4ring tehakse ainult nende domeenide jaoks, mida veel LocalDNS-i andmebaasis ei ole. Scraper moodul j\u00e4lgib pidevalt n\u00f5utud URL-e ja otsib potentsiaalselt blokeeritud domeeninimesid. Seej\u00e4rel p\u00f6\u00f6rdub Scraper Resolver mooduli poole, et lahendada uuesti avastatud blokeeritud domeene, mille see moodul t\u00e4idab ja lisab kirje LocalDNS-i. Seej\u00e4rel puhastatakse brauseri DNS-vaheldus, et eemaldada olemasolevad DNS-kirjed blokeeritud domeeni jaoks.<\/p>\n<p>Kui Resolver moodul ei suuda m\u00f5ista, milliseks CDN-teenuse pakkujaks domeen kuulub, palub ta abi Bootstrapper moodulilt.<\/p>\n<h2>Kuidas see praktikas t\u00f6\u00f6tab<\/h2>\n<p>\nToote kliendirakendus on rakendatud Linuxile, kuid seda on lihtne portida ka Windowsile. Brauserina kasutatakse tavalist Mozilla<br \/>\nFirefoxi. Scraper ja Resolver moodulid on kirjutatud Pythonis, ning Customer-to-CDN ja CDN-to-IP andmebaasid on salvestatud .txt-failides. LocalDNS-i andmebaasiks on tavaline fail \/etc\/hosts Linuxis.<\/p>\n<p>L\u00f5ppkokkuv\u00f5ttes on blokeeritud URL j\u00e4rgmine <noindex><a rel=\"nofollow\" href=\"https:\/\/blocked.com\/\">blocked.com<\/a><\/noindex> skript saab IP-aadressi edge-serverist failist \/etc\/hosts ja saadab HTTP GET p\u00e4ringu, et p\u00e4\u00e4seda juurde BlockedURL.html koos HTTP-p\u00e4iste v\u00e4ljadega Host:<\/p>\n<pre><code class=\"bash\">blocked.com\/ ja User-Agent: Mozilla\/5.0 (Windows NT 5.1; rv:14.0) Gecko\/20100101 Firefox\/14.0.1<\/code><\/pre>\n<p>\nBootstrapperi moodul on rakendatud tasuta t\u00f6\u00f6riista digwebinterface.com abil. Seda DNS-i lahendajat ei saa blokeerida ning see vastab DNS-p\u00e4ringutele paljude geograafiliselt jaotatud DNS-serverite nimel erinevates v\u00f5rgupiirkondades.<\/p>\n<p>Selle t\u00f6\u00f6riista abil suutsid teadlased oma Hiina nodest p\u00e4\u00e4seda Facebooki \u2013 kuigi sotsiaalmeedia on Hiinas juba ammu blokeeritud.<\/p>\n<p><img decoding=\"async\" alt=\"CacheBrowseri katse: Hiina tulem\u00fc\u00fcri \u00fcletamine ilma proksita sisuhalduse abil\" src=\"\/wp-content\/uploads\/2019\/09\/f33cf0e1544785bdb84234a4ac39f727.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>Kokkuv\u00f5te<\/h2>\n<p>\nEksperiment n\u00e4itas, et probleeme, millega tsensorid silmitsi seisavad, p\u00fc\u00fcdes blokeerida CDN-sisu, saab kasutada blokeeringute \u00fcmbers\u00f5itmise s\u00fcsteemi loomiseks. Selline t\u00f6\u00f6riist v\u00f5imaldab blokeeringutest m\u00f6\u00f6da minna isegi Hiinas, kus toimib \u00fcks tugevamaid online-tsensuuri s\u00fcsteeme.<\/p>\n<h2>Seonduvad artiklid <noindex><a rel=\"nofollow\" href=\"https:\/\/infatica.io\">residentproksid<\/a><\/noindex> \u00e4ri jaoks:<\/h2>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/460509\/\">Kuidas residentproksid aitavad \u00e4riasjade ajamisel: Infatica reaalsed kasutusjuhtumid andmete kaevandamise valdkonnas<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/461537\/\">Anal\u00fc\u00fcs. Kuidas SOCKS-proksi t\u00f6\u00f6tab: plussid, miinused, erinevused teiste tehnoloogiate vastu<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/454442\/\">Kuidas valida \u00e4riks m\u00f5eldud proxy-v\u00f5rku: 3 praktilist n\u00f5uannet<\/a><\/noindex><\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/467201\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435: Unsplash \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CDN-\u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0446\u0435\u043d\u0437\u043e\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438. \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u0430 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 CDN-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u041a\u0438\u0442\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u041c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0441 \u0433\u043b\u0430\u0432\u043d\u044b\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28594,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38090","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435: Unsplash \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CDN-\u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0446\u0435\u043d\u0437\u043e\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438. \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u0430 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 CDN-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u041a\u0438\u0442\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u041c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0441 \u0433\u043b\u0430\u0432\u043d\u044b\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 CacheBrowser: \u043e\u0431\u0445\u043e\u0434 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435: Unsplash \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CDN-\u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0446\u0435\u043d\u0437\u043e\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438. \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u0430 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 CDN-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u041a\u0438\u0442\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u041c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0441 \u0433\u043b\u0430\u0432\u043d\u044b\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:36+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:36+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperiment CacheBrowser: Hiina tulem\u00fc\u00fcri \u00fcletamine ilma proxy\u2019ta sisu vahem\u00e4llu salvestamise abil | ProHoster","description":"Pilt: Unsplash T\u00e4na levitatakse suur osa kogu veebisisust CDN-v\u00f5rkude abil. Samas on v\u00e4he uuritud, kuidas erinevad tsensorid oma m\u00f5ju nendele v\u00f5rkudele jagavad. Massachusettsi \u00fclikooli teadlased anal\u00fc\u00fcsisid v\u00f5imalikku CDN-sisu blokeerimise meetodeid Hiina ametiv\u00f5imude praktika n\u00e4itel ning t\u00f6\u00f6tasid v\u00e4lja selliste blokeeringute \u00fcletamiseks m\u00f5eldud t\u00f6\u00f6riista. Oleme koostanud \u00fclevaatliku materjali peamistest j\u00e4reldustest ja","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 CacheBrowser: \u043e\u0431\u0445\u043e\u0434 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 | ProHoster","og:description":"\u0418\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435: Unsplash \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CDN-\u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0446\u0435\u043d\u0437\u043e\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438. \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u0430 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 CDN-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u041a\u0438\u0442\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u041c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0441 \u0433\u043b\u0430\u0432\u043d\u044b\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:36+00:00","article:modified_time":"2019-10-31T19:21:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38090","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:26:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:15:23","updated":"2026-01-23 20:26:14"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38090","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38090"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38090\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/28594"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38090"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38090"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}