{"id":74655,"date":"2020-03-19T08:42:34","date_gmt":"2020-03-19T05:42:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh"},"modified":"2020-03-19T08:42:34","modified_gmt":"2020-03-19T05:42:34","slug":"kogda-linux-conntrack-vam-bolshe-ne-tovarishh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","title":{"rendered":"Kui Linuxi conntrack ei ole enam teie s\u00f5ber","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kui Linuxi conntrack ei ole enam teie s\u00f5ber\" src=\"\/wp-content\/uploads\/2020\/03\/588a169e5cfe0714694b8d7ff03985d1.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>\u00dchenduse j\u00e4lgimine (\u201econntrack\u201c) on Linuxi tuuma v\u00f5rgustiku virna peamine funktsioon. See v\u00f5imaldab tuumal j\u00e4lgida k\u00f5iki loogilisi v\u00f5rgu\u00fchendusi v\u00f5i vooge ja seel\u00e4bi tuvastada k\u00f5ik paketid, mis moodustavad iga vooge, et neid saaks j\u00e4rjestikuste t\u00f6\u00f6tlemiseks kokku koguda.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Conntrack on oluline tuuma funktsioon, mida kasutatakse mitmetes p\u00f5hijuhtumites:<\/p>\n<p><\/p>\n<ul>\n<li>NAT toetub conntrack'i teabele, v\u00f5imaldades tal t\u00f6\u00f6delda k\u00f5iki pakette \u00fchest voogust \u00fchtemoodi. N\u00e4iteks kui pod p\u00f6\u00f6rdub Kubernetes\u2019e teenuse poole, kasutab kube-proxy koormuse tasakaalustaja NAT-i, et suunata liiklust konkreetse pod\u2019i poole klastris. Conntrack salvestab, et teatud \u00fchenduse korral tuleb k\u00f5ik teenuse IP aadressile saadetud paketid suunata samasse pod'i, ning et tagasi saadetavad paketid backend'i pod'ist peavad NAT\u2019i kaudu liikuma tagasi pod'i, kust p\u00e4rines p\u00e4ring.<\/li>\n<li>Riistvara tulem\u00fc\u00fcrid, nagu Calico, toetuvad conntrack'i teabele, et lisada \u201evastutav\u201c liiklus lubatud nimekirja. See v\u00f5imaldab teil koostada v\u00f5rgu poliitika, mis \u00fctleb: \u201eluba minu pod\u2019il \u00fchenduda mis tahes kaug- IP aadressiga\u201c, ilma et oleks vaja kirjutada poliitikat vastutava liikluse selgeks lubamiseks. (Ilma selleta peaksite lisama palju v\u00e4hem turvalise reegli \u201eluba pakette minu pod'i mistahes IP-lt\u201c.)<\/li>\n<\/ul>\n<p><\/p>\n<p>Lisaks t\u00f5stab conntrack tavaliselt s\u00fcsteemi j\u00f5udlust (v\u00e4hendades protsessori aega ja paketidelay'd), kuna ainult esimene paket voos<br \/>\npeab l\u00e4bima kogu v\u00f5rgu virna t\u00f6\u00f6tlemise, et m\u00e4\u00e4rata, mida selle paketiga teha. Vaadake postitust \u201e<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tigera.io\/blog\/comparing-kube-proxy-modes-iptables-or-ipvs\/\">Kube-proxy re\u017eiimide v\u00f5rdlemine<\/a><\/noindex>\u201c, et n\u00e4ha n\u00e4idet, kuidas see t\u00f6\u00f6tab.<\/p>\n<p><\/p>\n<p>Siiski on conntrack'il oma piirangud...<\/p>\n<p><\/p>\n<h3 id=\"itak-gde-vse-poshlo-ne-tak\">Nii et kus k\u00f5ik valesti l\u00e4ks?<\/h3>\n<p><\/p>\n<p>Conntrack'i tabelil on kohandatav maksimaalne suurus ja kui see t\u00e4itub, hakkavad \u00fchendused tavaliselt t\u00f5rkeid v\u00f5i katkestusi saama. Enamiku rakenduste liikluse t\u00f6\u00f6tlemiseks piisab tabelis vabast ruumist ega muutu kunagi probleemiks. Siiski on mitmeid stsenaariume, kus tasub m\u00f5elda conntrack'i tabeli kasutamisele:<\/p>\n<p><\/p>\n<ul>\n<li>Ilmselt k\u00f5ige silmatorkavam juhtum on see, kui teie server k\u00e4sitleb erakordselt suurt arvu samal ajal aktiivseid \u00fchendusi. N\u00e4iteks, kui teie conntrack tabel on seadistatud 128k kirje jaoks, kuid teil on &gt; 128k samaaegset \u00fchendust, siis kindlasti seisate silmitsi probleemiga!<\/li>\n<li>Veidi v\u00e4hem ilmne juhtum: kui teie server k\u00e4sitleb v\u00e4ga suurt arvu \u00fchendusi sekundis. Isegi kui \u00fchendused on l\u00fchiajalised, j\u00e4lgib Linux neid teatud aja jooksul (vaikimisi 120 s). N\u00e4iteks, kui teie conntrack tabel on seadistatud 128 000 kirje jaoks ja proovite t\u00f6\u00f6delda 1100 \u00fchendust sekundis, \u00fcletavad need conntrack tabeli suurust, isegi kui \u00fchendused on v\u00e4ga l\u00fchiajalised (128k \/ 120s = 1092 \u00fchendust \/ s).<\/li>\n<\/ul>\n<p><\/p>\n<p>On mitmeid ni\u0161ityype rakendusi, mis kuuluvad nende kategooriate alla. Lisaks, kui teil on palju pahatahtlikke isikuid, v\u00f5ib teie serveri conntrack tabeli t\u00e4itmine paljude poolavatud \u00fchendustega olla osa teenuset\u00f5kestamise (DoS) r\u00fcnnakust. M\u00f5lemal juhul v\u00f5ib conntrack teie s\u00fcsteemis kitsaskohaks kujuneda. M\u00f5nel juhul v\u00f5ib conntrack tabeli parameetrite seadistamine olla piisav, et rahuldada teie vajadusi - suurendades suurust v\u00f5i v\u00e4hendades conntrack ajakulu (kuid kui teete seda valesti, v\u00f5ib teil olla suuri raskusi). Teistel juhtudel tuleb aggressiivse liikluse jaoks conntrackist \u00fcmber minna.<\/p>\n<p><\/p>\n<h4 id=\"realnyy-primer\">Reaalne n\u00e4ide<\/h4>\n<p><\/p>\n<p>Toome konkreetsena n\u00e4ite: \u00fcks suur SaaS teenusepakkuja, kellega me t\u00f6\u00f6tasime, omas mitmeid memcached servereid hostides (mitte virtuaalmasinates), kus iga\u00fcks t\u00f6\u00f6tles 50k+ l\u00fchiajalist \u00fchendust sekundis.<\/p>\n<p><\/p>\n<p>Nad katsetasid conntrack konfiguratsiooni, suurendades tabelite suurusi ja l\u00fchendades j\u00e4lgimisaega, kuid konfiguratsioon oli ebastabiilne, oluliselt suurenes m\u00e4lutarbimine, mis oli probleem (\u00fche GiB-i ulatuses!), ja \u00fchendused olid nii l\u00fchikesed, et conntrack ei saavutanud oma tavalist tulemuse kasu (protsessori tarbimise v\u00e4henemine ega pakettide viivitused).<\/p>\n<p><\/p>\n<p>Alternatiivina p\u00f6\u00f6rdusid nad Calico poole. Calico v\u00f5rgupoliitikad v\u00f5imaldavad mitte kasutada conntrack'i teatud t\u00fc\u00fcpi liikluse jaoks (kasutades poliitikate jaoks valikut doNotTrack). See tagas neile vajaliku j\u00f5udluse taseme pluss t\u00e4iendava turvalisuse taseme, mida pakkus Calico.<\/p>\n<p><\/p>\n<h4 id=\"na-chto-pridetsya-poyti-chtoby-oboyti-conntrack\">Milleks peate minema, et v\u00e4ltida conntrack'i?<\/h4>\n<p><\/p>\n<ul>\n<li>Do-not-track v\u00f5rgupoliitikad peavad reeglina olema s\u00fcmmeetrilised. SaaS-teenuse pakkuja puhul: nende rakendused t\u00f6\u00f6tasid kaitstud tsoonis ja seet\u00f5ttu said nad v\u00f5rgupoliitika abil lisada valge nimekirja liiklust teistelt konkreetsetelt rakendustelt, millele anti juurdep\u00e4\u00e4s memcached'ile.<\/li>\n<li>Do-not-track poliitika ei arvestanud \u00fchenduse suunda. Seega, kui memcached-serverit r\u00fcnnatakse, v\u00f5ib teoreetiliselt proovida \u00fchendust luua mis tahes memcached-klientiga, juhul kui see kasutab \u00f5iget algusporta. Kuid kui olete \u00f5igesti m\u00e4\u00e4ratlenud oma memcached-klientide jaoks v\u00f5rgupoliitika, siis need \u00fchenduse loomise katsetused l\u00fckatakse ikkagi kliendi poole tagasi.<\/li>\n<li>Do-not-track poliitika rakendatakse iga paketi puhul, erinevalt tavap\u00e4rastest poliitikatest, mis kehtivad ainult voolu esimeses paketis. See v\u00f5ib suurendada CPU ressursikasutust \u00fche paketi kohta, kuna iga paketi puhul tuleb rakendada poliitika. Kuid l\u00fchiajaliste \u00fchenduste puhul tasakaalustatakse see ressursside kasutuse v\u00e4henemisega conntrack'i t\u00f6\u00f6tlemisel. N\u00e4iteks SaaS-teenuse pakkuja puhul oli iga \u00fchenduse pakettide arv v\u00e4ga v\u00e4ike, mist\u00f5ttu oli CPU liikluses poliitikate rakendamise t\u00e4iendav ressursside kasutamine \u00f5igustatud.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"pristupim-k-testam\">Hakkame testima<\/h4>\n<p><\/p>\n<p>Me tegime katse \u00fches pod'is, kus oli memcached-server ja palju memcached-kliente, mis t\u00f6\u00f6tasid kaugusn\u00f5lvidel, et saaksime luua v\u00e4ga suure arvu \u00fchendusi sekundis. Memcached-serveri pod'il oli 8 tuuma ja 512k kirjet conntrack'i tabelis (standardne tabeli suurus hosti jaoks).<br \/>\nM\u00f5\u00f5tsime j\u00f5udluse erinevust: ilma v\u00f5rgupoliitikata; tavalise Calico poliitikaga; ja Calico do-not-track poliitikaga.<\/p>\n<p><\/p>\n<p>Esimese testi jaoks seadsime \u00fchenduste arvu 4000 sekundis, seega saime keskenduda CPU tarbimise erinevusele. Poliitika puudumisel ja tavalise poliitika vahel ei olnud olulisi erinevusi, kuid do-not-track suurendas CPU tarbimist umbes 20% v\u00f5rra:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kui Linuxi conntrack ei ole enam teie s\u00f5ber\" src=\"\/wp-content\/uploads\/2020\/03\/6762772cb8e5f089a3ed444aff8cb8f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Teises testis k\u00e4ivitasime nii palju \u00fchendusi, kui suutsid genereerida meie kliendid, ja m\u00f5\u00f5tsime maksimaalset \u00fchenduste arvu sekundis, mis meie memcached-server suutis taluda. Nagu oodata v\u00f5is, saavutasid nii 'ilma poliitikateta' kui ka 'tavalise poliitikaga' m\u00f5lemad conntracki piiri \u00fcle 4000 \u00fchenduse sekundis (512k \/ 120s = 4369 \u00fchendust\/s). Do-not-track poliitikaga saatsid meie kliendid 60000 \u00fchendust sekundis ilma probleemideta. Oleme kindlad, et oleksime suutnud seda arvu suurendada, \u00fchendades rohkem kliente, kuid usume, et need numbrid on juba piisavad, et illustreerida selle artikli s\u00f5numit!<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kui Linuxi conntrack ei ole enam teie s\u00f5ber\" src=\"\/wp-content\/uploads\/2020\/03\/f3beeb1793a3158018274079da953a2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h4 id=\"zaklyuchenie\">Kokkuv\u00f5te<\/h4>\n<p><\/p>\n<p>Conntrack on oluline funktsioon kernelis. See t\u00e4idab oma \u00fclesande suurep\u00e4raselt. Seda kasutavad sageli s\u00fcsteemi v\u00f5tmekomponendid. Siiski, teatud olukordades v\u00f5ib \u00fclekoormus, mis tuleneb conntrackist, \u00fcletada tavalised eelised, mida see pakub. Antud juhul saavad Calico v\u00f5rgupoliitikad olla kasutatud, et valikuliselt keelata conntracki kasutamine, samal ajal kui suurendatakse v\u00f5rgu turvalisust. K\u00f5ik muu liiklus j\u00e4tkab conntrackiga koost\u00f6\u00f6d!<\/p>\n<p><\/p>\n<h2 id=\"takzhe-chitayte-drugie-stati-v-nashem-bloge\">Vaata ka teisi artikleid meie blogis:<\/h2>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/473578\/\">D\u00fcnaamiliste moodulite ehitamine Nginxi jaoks<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/473014\/\">Sissejuhatus Hashicorp Consul\u2019i Kubernetes Autoriseerimisse<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/426543\/\">Stateful varukoopiad Kubernetesis<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/424717\/\">Suurte ja erinevate veebiprojektide varundamine<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/347526\/\">Telegrami bot Redmine'i jaoks: Kuidas lihtsustada elu endale ja teistele<\/a><\/noindex><\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/492686\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 Linux. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044f\u0434\u0440\u0443 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0442\u043e\u043a\u0438 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u043e\u0442\u043e\u043a, \u0447\u0442\u043e\u0431\u044b \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435. Conntrack \u2014 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445: NAT \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0442 \u0441onntrack, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u0433\u0434\u0430 Linux conntrack \u0432\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0442\u043e\u0432\u0430\u0440\u0438\u0449 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-19T05:42:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-19T05:42:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kui Linuxi conntrack ei ole enam teie s\u00f5ber | ProHoster","description":"\u00dchenduste j\u00e4lgimine (\u2018conntrack\u2019) on.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u0433\u0434\u0430 Linux conntrack \u0432\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0442\u043e\u0432\u0430\u0440\u0438\u0449 | ProHoster","og:description":"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-19T05:42:34+00:00","article:modified_time":"2020-03-19T05:42:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:10:25","updated":"2022-10-05 19:52:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/74655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=74655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/74655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/74656"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=74655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=74655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=74655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}