Wata maraice mai kyau na bazara, lokacin da ba na son komawa gida, kuma sha'awar rayuwa da koyo shine ƙaiƙayi da ƙonewa kamar ƙarfe mai zafi, ra'ayin ya taso don ɗauka a wani yanayin ɓoyayyiyar ɓoyayyiyar wuta da ake kira "Manufar IP DOS".
Bayan kulawa na farko da kuma fahimtar littafin, na saita shi cikin yanayi Wuce-da-Log, don duba shaye-shaye gabaɗaya da fa'idar shakku na wannan saitin.
Bayan 'yan kwanaki (domin alkaluman za su taru, ba shakka, kuma ba don na manta ba), na kalli katako, na rawa a wurin, na tafa hannuna - akwai isassun bayanai, kada ku yi wasa. Zai yi kama da ba zai iya zama mai sauƙi ba - kunna manufar toshe duk ambaliya, dubawa, shigarwa. rabi-rabi zaman tare da dakatar da awa daya da kuma barci lafiya tare da sanin gaskiyar cewa an kulle iyakar. Amma shekara ta 34 ta rayuwa ta shawo kan ƙazamin ƙuruciyar ƙuruciya kuma a wani wuri a bayan kwakwalwa wata siririyar murya ta busa: “Bari mu ɗaga idanunmu mu ga adireshin wanene bangon bangonmu ƙaunataccen aka gane a matsayin magudanar ruwa? To, bisa tsari na shirme”.
Mun fara nazarin bayanan da aka karɓa daga jerin abubuwan da ba su da kyau. Ina gudanar da adireshi ta hanyar rubutu mai sauƙi Powershell Ido kuma suna tuntuɓe a kan sanannun haruffa google.
Ina shafa idanuwana ina lumshe idanu na kusan mintuna biyar don tabbatar da cewa ba na tunanin abubuwa ba - hakika, a cikin jerin wadanda gidan wuta ya dauka magudanar ruwa, irin harin shi ne - udp ambaliya, adiresoshin na kamfanin mai kyau.
Ina tafe kai na, a lokaci guda na saita kama fakiti akan mahallin waje don bincike na gaba. Tunani masu haske sun haskaka kaina: "Yaya wani abu ya kamu da cutar a cikin Google Scope? Kuma wannan shine abin da na gano? Ee, wannan, wannan lambar yabo ce, girmamawa da jan kafet, da gidan caca nata tare da blackjack kuma, da kyau, kun fahimta…. ”
Yin nazarin fayil ɗin da aka karɓa Wireshark- om.
Ee, hakika daga adireshi daga iyakar Google Ana zazzage fakitin UDP daga tashar jiragen ruwa 443 zuwa tashar jiragen ruwa bazuwar akan na'urara.
Amma, jira minti daya... Anan ka'idar ta canza daga UDP a kan GQUIC.
Semyon Semenych...
Nan take na tuna da rahoton daga babban kaya Alexandra Tobolya «UDP da TCP ko kuma makomar cibiyar sadarwa"().
A gefe guda, ɗan jin kunya ya shiga - babu laurel, babu girmamawa a gare ku, maigida. A gefe guda, matsalar a bayyane take, ya rage don fahimtar inda kuma nawa za a tono.
'Yan mintuna kaɗan na sadarwa tare da Kamfanin Mai Kyau - kuma komai ya faɗi cikin wurin. A ƙoƙarin inganta saurin isar da abun ciki, kamfanin Google ya sanar da yarjejeniyar baya a cikin 2012 QUIC, wanda ke ba ku damar cire mafi yawan gazawar TCP (e, ee, i, a cikin waɗannan labaran - и Suna magana game da tsarin juyin juya hali gaba daya, amma, bari mu kasance masu gaskiya, Ina son hotuna tare da kuliyoyi don ɗaukar sauri, kuma ba duk waɗannan juyin juya halin sani da ci gaba ba). Kamar yadda ƙarin bincike ya nuna, ƙungiyoyi da yawa yanzu suna canzawa zuwa irin wannan zaɓi na isar da abun ciki.
Matsalar da ke cikin shari'ata kuma, ina tsammanin, ba kawai a cikin shari'ata ba, shine cewa a ƙarshe akwai fakiti da yawa da kuma Tacewar zaɓi ta gane su a matsayin ambaliya.
Akwai 'yan mafita masu yiwuwa:
1. Ƙara zuwa lissafin keɓe don Manufar DoS Iyakar adireshi a kan Tacewar zaɓi Google. A kawai tunanin kewayon adiresoshin da za a iya yi, idanunsa sun fara rawar jiki a cikin tsoro - an ajiye ra'ayin a matsayin mahaukaci.
2. Ƙara kofa ga siyasar ambaliyar ruwa - kuma ba comme il faut, amma idan wani da gaske malicious sneaks in.
3. Hana kira daga cibiyar sadarwa ta ciki ta UDP a kan 443 tashar jiragen ruwa.
Bayan karanta ƙarin game da aiwatarwa da haɗin kai QUIC в Google Chrome An karɓi zaɓi na ƙarshe azaman alamar aiki. Gaskiyar ita ce, ƙaunataccen kowa a ko'ina kuma ba tare da tausayi ba (Ban fahimci dalilin ba, yana da kyau a sami jajayen girman kai. Firefox-ovskaya muzzle zai karɓi ga gigabytes na RAM da aka cinye). Google Chrome da farko yayi ƙoƙarin kafa haɗin gwiwa ta amfani da wahalar samun sa QUIC, amma idan abin al'ajabi bai faru ba, to ya koma hanyoyin da aka tabbatar kamar TLS, ko da yake yana matukar jin kunyar hakan.
Ƙirƙiri shigarwa don sabis a kan Tacewar zaɓi QUIC:
Mun kafa sabuwar doka kuma mu sanya shi wani wuri mafi girma a cikin sarkar.
Bayan kunna ka'ida a cikin jerin abubuwan rashin daidaituwa, zaman lafiya da kwanciyar hankali, ban da masu cin zarafi na gaske.
Godiya ga kowa da kowa saboda kulawar ku.
Abubuwan da aka yi amfani da su:
1.
2.
3.
4.
source: www.habr.com