{"id":52438,"date":"2019-11-08T00:00:00","date_gmt":"2019-11-07T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube"},"modified":"2020-02-18T14:00:09","modified_gmt":"2020-02-18T11:00:09","slug":"udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","title":{"rendered":"UDP Flood Google'ilt v\u00f5i kuidas mitte j\u00e4tta k\u00f5iki YouTube'ist ilma","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c «IP DOS poliitika<\/b>«.
\nP\u00e4rast eelnevaid katsumusi ja juhendiga tutvumist seadistasin re\u017eiimis Pass-and-Log<\/b>, et vaadata, milline on v\u00e4ljaanne ja selle seadistuse kahtlane kasulikkus.
\nM\u00f5ne p\u00e4eva p\u00e4rast (et statistika koguneks, muidugi, mitte et oleksin unustanud) vaatasin logisid ja tantsides k\u00e4si plaksutades \u2014 kirjeid oli kogunenud enam kui piisavalt. Tundus, et v\u00f5iks ju lihtsasti edasi minna \u2014 l\u00fclita poliitika sisse, et blokeerida k\u00f5ik, kes sp\u00e4mmi saadavad, skaneerivad, seadistavad poolikuna<\/b> seansse, millel on \u00fcks tunni pikkune keeld, ja maga rahulikult, teades, et piir on lukus. Kuid 34. eluaasta on \u00fcletanud nooruslikku maksimumi ja kuskil peanaha taga kostus n\u00f5rk h\u00e4\u00e4lekene: \u00abAga vaatame, kelle aadresse meie armastatud tulem\u00fc\u00fcr on tuvastanud kui pahatahtlikke sp\u00e4mmi saatjaid? Nii lihtsalt, m\u00f5tte m\u00e4ngimiseks.\u00bb
\n<\/a><\/noindex>
\nAlustame saadud andmete anal\u00fc\u00fcsimist anomaaliate nimekirjast. K\u00e4itan aadresse l\u00e4bi lihtsa skripti Powershell<\/b> ja silmad j\u00e4\u00e4vad pidama tuttavatele t\u00e4htedele google<\/b>. <\/p>\n

\"UDP
\n
\nH\u00f5\u00f5run silmi, pilgutan viis minutit, et veenduda, et mulle ei tundunud \u2014 t\u00f5epoolest, nende hulgas, keda tulem\u00fc\u00fcr pidas pahatahtlikuks sp\u00e4mmi saatjaks, r\u00fcnnakut\u00fc\u00fcp \u2014 udp tulv<\/b>, aadressid, mis kuuluvad headuse korporatsioonile. <\/p>\n

\"UDP
\n\"UDP
\n\"UDP
\n\"UDP
\n
\n\u0427\u0435\u0448\u0443 \u0432 \u0437\u0430\u0442\u044b\u043b\u043a\u0435, \u043f\u043e\u043f\u0443\u0442\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0437\u0430\u0445\u0432\u0430\u0442 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430. \u0412 \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u0440\u043e\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0440\u0430\u0434\u0443\u0436\u043d\u044b\u0435 \u043c\u044b\u0441\u043b\u0438: \u00ab\u041a\u0430\u043a \u0442\u0430\u043a, \u0447\u0442\u043e-\u0442\u043e \u0438\u043d\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0432 \u0441\u043a\u043e\u0443\u043f\u0435 Google? \u0418 \u044d\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u044f? \u0414\u0430 \u044d\u0442\u043e \u0436, \u044d\u0442\u043e \u0436 \u2014 \u043d\u0430\u0433\u0440\u0430\u0434\u044b, \u043f\u043e\u0447\u0435\u0441\u0442\u0438 \u0438 \u043a\u0440\u0430\u0441\u043d\u0430\u044f \u043a\u043e\u0432\u0440\u043e\u0432\u0430\u044f \u0434\u043e\u0440\u043e\u0436\u043a\u0430, \u0438 \u0441\u0432\u043e\u0435 \u043a\u0430\u0437\u0438\u043d\u043e \u0441 \u0431\u043b\u0435\u043a\u0434\u0436\u0435\u043a\u043e\u043c \u0438, \u043d\u0443 \u0432\u044b \u043f\u043e\u043d\u044f\u043b\u0438…\u00bb<\/p>\n

L\u00e4hen saadud faili l\u00e4bi Wireshark<\/b>-iga.
\nJah, t\u00f5epoolest, aadressilt, mis kuulub Google <\/b>paukavad UDP paketid 443 portilt minu seadmes juhuslikule portile.
\nAga, oota\u2026 Protokoll vahetub UDP<\/b> . Tundub, et GQUIC<\/b>.
\nSemen Semeny\u010d\u2026<\/p>\n

\"UDP
\n
\nKoheselt meenub ettekandja HighLoad <\/b>Aleksander Tobol<\/u> \u00abUDP<\/b> vastu TCP<\/b> \u0438\u043b\u0438 \u0431\u0443\u0434\u0443\u0449\u0435\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430»(link<\/a><\/noindex>).
\n\u00dchest k\u00fcljest tuleb kerge pettumus \u2014 ei autasusid, ega tunnustusi. Teiselt poolt on probleem selge, j\u00e4\u00e4b ainult v\u00e4lja m\u00f5elda, kuhu ja kui s\u00fcgavale kaevata.
\nM\u00f5ni minut suhtlemist Heategevuskorporatsiooniga - ja k\u00f5ik saab \u00f5igesse kohta. P\u00fc\u00fcdes parandada sisu edastamise kiirus, ettev\u00f5te Google <\/b>veel 2012. aastal kuulutas v\u00e4lja protokolli QUIC<\/b>, mis v\u00f5imaldab k\u00f5rvaldada suure osa TCP puudustest (jah, jah, jah, nendes artiklites - Prrr<\/a><\/noindex><\/b> ja Kaks<\/a><\/noindex><\/b> r\u00e4\u00e4gitakse t\u00e4iesti revolutsioonilisest l\u00e4henemisest, kuid olgem ausad, tahaksime, et kassipiltide laadimine toimuks kiiremini, mitte teie revolutsioonide ja edusammude jutud). Kuidas edasine uurimine n\u00e4itas, on paljud organisatsioonid n\u00fc\u00fcd sarnasele edastamise variandile \u00fcle minemas.
\nProbleem minu ja, ma arvan, mitte ainult minu puhul selgus olevat see, et pakette tuleb l\u00f5puks t\u00f5eliselt palju ja tulem\u00fc\u00fcr peab neid kui r\u00fcnnakut.
\nLahendusi osutus olevat v\u00e4he:
\n1. Lisada suvandid' DoS poliitika<\/b> tulem\u00fc\u00fcris, aadresside ulatus Google<\/b>. Ainult m\u00f5tleminen v\u00f5imalikest aadresside ulatustest, silm hakkas n\u00e4rviliselt p\u00f5ksuma - m\u00f5te l\u00fckatud tagasi kui jabur.
\n2. T\u00f5sta \u00e4ratustaseme udp tormipoliitika<\/b> \u2014 samuti mitte ideaalne, aga kui keegi t\u00f5eliselt pahatahtlik l\u00e4bi p\u00e4\u00e4seb.
\n3. Keelata kontaktid sisev\u00f5rgust UDP <\/b>. Tundub, et 443 <\/b>v\u00e4lissoost.
\nLugedes t\u00e4iendavalt rakendamise ja integreerimise kohta QUIC <\/b>ja Google Chrome<\/b> otsustati viimane variant teostada. Asi on selles, et k\u00f5ikjal armastatud ja halastamatult (ei saa aru, miks, oleks parem, kui see v\u00e4ljakutsuv punapea Firefox<\/b>-kandmine max. 810 tundi ilus, Google Chrome<\/b> alguses p\u00fc\u00fcab luua \u00fchendust oma lemmik QUIC<\/b>, kuid kui imet ei juhtu, naaseb ta t\u00f5estatud meetodite juurde nagu TLS<\/b>, kuigi tunneb selle \u00fcle suurt piinlikkust. <\/p>\n

Loome tulem\u00fc\u00fcris teenuse salvestuse QUIC<\/b>:<\/p>\n

\"UDP
\n
\nSeame \u00fcles uue reegli ja paigutame selle kuskile k\u00f5rgemale j\u00e4rjestuses.<\/p>\n

\"UDP
\n
\nP\u00e4rast reegli aktiveerimist anomaaliate nimekirjas rahu ja rahu, v\u00e4lja arvatud t\u00f5eliselt pahatahtlikud rikkumised.<\/p>\n

\"UDP
\n
\nAit\u00e4h k\u00f5igile t\u00e4helepanu eest.<\/p>\n

Kasutatud ressursid:<\/b><\/u>
\n1.Aleksandr Toboly raport<\/a><\/noindex>
\n2.QUIC protokolli kirjeldus ettev\u00f5ttelt Infopulse<\/a><\/noindex>
\n3.Vikipeedia<\/a><\/noindex>
\n4. Fortineti KB<\/a><\/noindex>
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c «IP DOS policy«. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043b\u0430\u0441\u043e\u043a \u0438 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0441 \u043c\u0430\u043d\u0443\u0430\u043b\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Pass-and-Log, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0430 \u0432\u044b\u0445\u043b\u043e\u043f \u0438 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52438","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47UDP torm Google'ilt v\u00f5i kuidas mitte j\u00e4tta k\u00f5iki Youtube'ist ilma | ProHoster","description":"\u00dchel kaunil kevad\u00f5htul, kui koju minek ei olnud soovitav, ja pidev elujanu s\u00fcgas ja p\u00f5letas nagu kuum raud, tekkis idee uurida ahvatlevat funktsiooni tulem\u00fc\u00fcri all nimega.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47UDP Flood \u043e\u0442 Google \u0438\u043b\u0438 \u043a\u0430\u043a \u043d\u0435 \u043b\u0438\u0448\u0438\u0442\u044c \u0432\u0441\u0435\u0445 Youtube | ProHoster","og:description":"\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-07T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52438","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:43:24","updated":"2026-01-24 03:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=52438"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52438\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=52438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=52438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=52438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}