E helu kākou i nā ʻelele "Inspector"

ʻAʻole ia he mea huna e nānā ʻia ka mana o ka pale ʻana i ka papa inoa o nā ʻike i pāpā ʻia ma Rūsia e ka ʻōnaehana automated "Inspector". Pehea ka hana ʻana ua kākau maikaʻi ʻia ma kēia ʻatikala ma Habr, kiʻi mai kahi hoʻokahi:

E helu kākou i nā ʻelele "Inspector"

Hoʻokomo pololei ʻia ma ka mea hoʻolako module "Agent Inspector":

ʻO ka module "Agent Inspector" kahi mea hoʻolālā o ka ʻōnaehana automated "Inspector" (AS "Inspector"). Hoʻolālā ʻia kēia ʻōnaehana no ka nānā ʻana i ka hoʻokō ʻana e nā mea lawelawe kelepona me nā koi kaohi ʻana i loko o ke ʻano o nā ʻōlelo i hoʻokumu ʻia e nā ʻatikala 15.1-15.4 o ke Kānāwai Federal o Iulai 27, 2006 No. 149-FZ "On Information, Information Technologies and Information Protection. ”

ʻO ke kumu nui o ka hoʻokumu ʻana iā AS "Revizor" ʻo ia ka mālama ʻana i ka hoʻokō ʻana o nā mea hoʻohana kelepona me nā koi i hoʻokumu ʻia e nā ʻatikala 15.1-15.4 o ke Kānāwai Federal o Iulai 27, 2006 No. 149-FZ "Ma ka ʻike, ʻike loea a me ka pale ʻike " ma ke ʻano o ka ʻike ʻana i nā ʻoiaʻiʻo o ka loaʻa ʻana o ka ʻike i pāpā ʻia a me ka loaʻa ʻana o nā mea kākoʻo (ʻikepili) e pili ana i nā hewa e kaupalena i ke komo ʻana i ka ʻike i pāpā ʻia.

I ka noʻonoʻo ʻana i ka ʻoiaʻiʻo, inā ʻaʻole ʻo nā mea āpau, a laila nui nā mea hoʻolako i hoʻokomo i kēia hāmeʻa, pono e loaʻa kahi pūnaewele nui o nā beacon probes e like me RIPE Atlas a ʻoi aku ka nui, akā me ke komo paʻa. Eia nō naʻe, ʻo ka beacon he kukui e hoʻouna i nā hōʻailona ma nā ʻaoʻao āpau, akā pehea inā e hopu mākou iā lākou a ʻike i ka mea a mākou i hopu ai a me ka nui?

Ma mua o ka helu ʻana, e ʻike kākou i ke kumu e hiki ai kēia.

Keʻano o ka manaʻo

Nānā nā ʻelele i ka loaʻa ʻana o kahi kumuwaiwai, me nā noi HTTP(S), e like me kēia:

TCP, 14678  >  80, "[SYN] Seq=0"
TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"
TCP, 14678  >  80, "[ACK] Seq=1 Ack=1"

HTTP, "GET /somepage HTTP/1.1"
TCP, 80  >  14678, "[ACK] Seq=1 Ack=71"
HTTP, "HTTP/1.1 302 Found"

TCP, 14678  >  80, "[FIN, ACK] Seq=71 Ack=479"
TCP, 80  >  14678, "[FIN, ACK] Seq=479 Ack=72"
TCP, 14678  >  80, "[ACK] Seq=72 Ack=480"

Ma waho aʻe o ka uku uku, aia nō ka noi i kahi pae hoʻokumu pili: hoʻololi SYN и SYN-ACK, a me nā pae hoʻopau pili: FIN-ACK.

Aia i loko o ka papa inoa o ka ʻike pāpā ʻia kekahi mau ʻano pale. ʻIke loa, inā paʻa ʻia kahi kumuwaiwai e ka IP address a i ʻole inoa inoa, a laila ʻaʻole mākou e ʻike i nā noi. ʻO kēia nā ʻano mea luku loa o ka pale ʻana, e alakaʻi ana i ka hiki ʻole o nā kumuwaiwai āpau ma kahi IP address a i ʻole nā ​​​​ʻike āpau ma kahi kikowaena. Aia kekahi ʻano "by URL" o ka pale ʻana. I kēia hihia, pono e hoʻokaʻawale ka ʻōnaehana kānana i ke poʻomanaʻo noi HTTP e hoʻoholo pono i ka mea e pale ai. A ma mua o ia, e like me ka mea i ʻike ʻia ma luna nei, pono e loaʻa kahi pae hoʻokumu pili e hiki ai iā ʻoe ke hoʻāʻo e hahai, no ka mea, ʻoi aku ka nalo o ka kānana.

No ka hana ʻana i kēia, pono ʻoe e koho i kahi kikowaena manuahi kūpono me ka "URL" a me ke ʻano blocking HTTP e hoʻomaʻamaʻa i ka hana o ka ʻōnaehana kānana, ʻoi aku ka lōʻihi o ka haʻalele ʻana, e hōʻemi i ke komo ʻana o nā kaʻa extraneous koe wale nō nā Agents. ʻAʻole paʻakikī kēia hana; ua nui nā kikowaena manuahi i ka papa inoa o ka ʻike pāpā ʻia a no kēlā me kēia ʻono. No laila, ua kūʻai ʻia ka pūnaewele a hoʻopili ʻia i nā helu IP ma kahi VPS e holo ana tcpdump a hoomaka ka helu ana.

Hooia o "Auditors"

Ua manaʻo wau e ʻike i nā manawa o nā noi, i koʻu manaʻo e hōʻike i ka hana hoʻomalu. ʻAʻole hiki ke ʻōlelo ʻaʻole wau i ʻike iki, akā ʻaʻohe kiʻi maopopo:

E helu kākou i nā ʻelele "Inspector"

ʻAʻole ia he mea kupanaha, ʻoiai ma kahi kikowaena ʻaʻohe mea e pono ai a ma kahi IP i hoʻohana ʻole ʻia, aia wale nō ka nui o ka ʻike i noi ʻole ʻia, e like me ka Pūnaewele hou. Akā ʻo ka mea pōmaikaʻi, makemake wale au i nā noi no kahi URL kikoʻī, no laila ua ʻike koke ʻia nā scanners a me nā password crackers. Eia kekahi, ua maʻalahi ka hoʻomaopopo ʻana i kahi i hoʻokumu ʻia ai ke kahe ʻana ma luna o ka nui o nā noi like. Ma hope aʻe, ua hōʻuluʻulu au i ka pinepine o ka hanana ʻana o nā leka uila IP a hele i ka ʻaoʻao holoʻokoʻa me ka lima, e hoʻokaʻawale i ka poʻe i hala i nā pae mua. Eia hou, ua ʻoki au i nā kumu a pau i hoʻouna ʻia i loko o hoʻokahi pūʻolo, ʻaʻohe nui o lākou. A penei ka mea i hanaia:

E helu kākou i nā ʻelele "Inspector"

He liʻiliʻi lyrical digression. ʻOi aku ma mua o hoʻokahi lā ma hope mai, ua hoʻouna aku kaʻu mea hoʻolako kikowaena i kahi leka me kahi maʻi maʻalahi, me ka ʻōlelo ʻana aia i loko o kāu mau lako kahi kumuwaiwai mai ka papa inoa pāpā ʻia ʻo RKN, no laila ua pāpā ʻia. I ka wā mua, manaʻo wau ua poloka kaʻu moʻokāki, ʻaʻole kēia ka hihia. A laila, manaʻo wau e aʻo wale ana lākou iaʻu e pili ana i kahi mea aʻu i ʻike mua ai. Akā ua ʻike ʻia ua hoʻohuli ka mea hoʻokele i kāna kānana i mua o kaʻu kikowaena a ma muli o ka hopena ua hele au ma lalo o ka kānana pālua: mai nā mea hoʻolako a mai ka hoster. Ua hala wale ke kānana i nā hopena o nā noi: FIN-ACK и RST ʻoki i ka HTTP āpau ma kahi URL pāpā ʻia. E like me kāu e ʻike ai mai ka pakuhi ma luna, ma hope o ka lā mua ua hoʻomaka wau e loaʻa i nā ʻikepili liʻiliʻi, akā ua loaʻa iaʻu, ua lawa ia no ka hana o ka helu ʻana i nā kumu noi.

E hele i ke kiko. I koʻu manaʻo, ʻike maopopo ʻia nā pahu ʻelua i kēlā me kēia lā, ʻo ka mea liʻiliʻi mua, ma hope o ke aumoe o Moscow, ʻo ka lua kokoke i 6 am me kahi huelo a hiki i ka hola 12 awakea. ʻAʻole hiki mai ka piko i ka manawa like. I ka wā mua, makemake wau e koho i nā helu IP i hāʻule wale i kēia mau manawa a me kēlā me kēia i nā manawa āpau, e pili ana i ka manaʻo e hana ʻia nā loiloi e nā Agents i kēlā me kēia manawa. Akā ma ka nānā pono ʻana, ʻike koke wau i nā manawa e hāʻule ana i nā manawa ʻē aʻe, me nā alapine ʻē aʻe, a hiki i hoʻokahi noi i kēlā me kēia hola. A laila noʻonoʻo wau e pili ana i nā āpana manawa a aia paha kekahi mea e pili ana iā lākou, a laila manaʻo wau ma ka laulā ʻaʻole hiki ke hoʻonohonoho ʻia ka ʻōnaehana ma ka honua holoʻokoʻa. Eia hou, e pāʻani paha ʻo NAT i kahi kuleana a hiki i ka Agena like ke hana i nā noi mai nā IP lehulehu like ʻole.

No ka mea ʻaʻole pololei kaʻu pahuhopu mua, helu wau i nā helu āpau aʻu i ʻike ai i hoʻokahi pule a loaʻa - 2791. ʻO ka helu o nā kau TCP i hoʻokumu ʻia mai hoʻokahi helu wahi ma ka awelika 4, me ka median o 2. ʻO nā kau kiʻekiʻe ma kēlā me kēia helu: 464, 231, 149, 83, 77. ʻO ka nui mai ka 95% o ka hāpana he 8 mau kau no kēlā me kēia helu. ʻAʻole kiʻekiʻe loa ka median, e hoʻomanaʻo wau iā ʻoe e hōʻike ana ka pakuhi i kahi kikoʻī o kēlā me kēia lā, no laila hiki i kekahi ke manaʻo i kahi mea ma kahi o 4 a 8 i nā lā 7. Inā hoʻolei mākou i nā kau a pau i hana ʻia i hoʻokahi manawa, e loaʻa iā mākou ka median e like me 5. Akā ʻaʻole hiki iaʻu ke hoʻokaʻawale iā lākou ma muli o kahi hōʻailona maopopo. ʻO ka mea ʻē aʻe, ua hōʻike ʻia kahi loiloi maʻamau e pili ana lākou i nā noi no kahi kumuwaiwai pāpā ʻia.

ʻO nā ʻōlelo he mau ʻōlelo, akā ma ka Pūnaewele, nā ʻōnaehana autonomous - AS, i lilo i mea nui 1510, ma ka awelika 2 mau helu wahi no ka AS me ka median o 1. Nā helu helu kiʻekiʻe no ka AS: 288, 77, 66, 39, 27. ʻO ka nui o 95% o ka hāpana he 4 mau helu no kēlā me kēia AS. Ma ʻaneʻi e manaʻo ʻia ka median - hoʻokahi Agena no kēlā me kēia mea hoʻolako. Manaʻo mākou i ka luna - aia nā mea pāʻani nui i loko. I loko o kahi pūnaewele nui, pono paha nā Agents i kēlā me kēia wahi o ke alo o ka mea hoʻohana, a mai poina iā NAT. Inā mākou e lawe ma ka ʻāina, ʻo ka nui loa: 1409 - RU, 42 - UA, 23 - CZ, 36 mai nā wahi ʻē aʻe, ʻaʻole RIPE NCC. ʻO nā noi mai waho o Rūsia e huki i ka manaʻo. Hiki ke wehewehe ʻia kēia e nā hewa geolocation a i ʻole nā ​​​​hewa kākau inoa i ka wā e hoʻopiha ai i ka ʻikepili. A i ʻole ka ʻoiaʻiʻo o kahi hui Lūkini ʻaʻole i loaʻa i nā aʻa Lūkini, a i ʻole he keʻena ʻelele haole no ka mea ʻoi aku ka maʻalahi, he mea kūlohelohe ia i ka wā e pili ana i kahi hui haole RIPE NCC. ʻAʻole kānalua kekahi ʻāpana, akā paʻakikī ka hoʻokaʻawale ʻana, no ka mea, aia ka waiwai ma lalo o ka pāpā ʻana, a mai ka lua o ka lā ma lalo o ka pāpālua ʻana, a ʻo ka hapa nui o nā kau he hoʻololi wale i nā ʻeke lawelawe. E ʻae kākou he ʻāpana liʻiliʻi kēia.

Hiki ke hoʻohālikelike ʻia kēia mau helu me ka helu o nā mea hoʻolako ma Rusia. Wahi a RKN nā laikini no "Nā lawelawe kamaʻilio no ka lawe ʻana i ka ʻikepili, me ka ʻole o ka leo" - 6387, akā he manaʻo kiʻekiʻe loa kēia mai luna mai, ʻaʻole pili kēia mau laikini āpau i nā mea hoʻolako pūnaewele pono e hoʻokomo i kahi Agena. Aia ma kahi o RIPE NCC kahi helu like o nā ASes i hoʻopaʻa inoa ʻia ma Rūsia - 6230, ʻaʻole nā ​​​​mea hoʻolako āpau. Ua hana ʻo UserSide i kahi helu koʻikoʻi a loaʻa iā 3940 mau hui i ka makahiki 2017, a he kuhi kēia mai luna mai. I kekahi hihia, loaʻa iā mākou ʻelua a me ka hapa ka nui o nā AS i hoʻomālamalama ʻia. Eia naʻe he mea pono ke hoʻomaopopo ʻaʻole like loa ʻo AS me ka mea hāʻawi. ʻAʻole loaʻa i kekahi mau mea hoʻolako kā lākou AS ponoʻī, aia kekahi ma mua o hoʻokahi. Inā manaʻo mākou aia nā Agents i kēlā me kēia, a laila kānana ʻoi aku ka ikaika o kekahi ma mua o nā mea ʻē aʻe, i ʻike ʻole ʻia kā lākou noi mai ka ʻōpala, inā hiki lākou iā lākou. Akā no ka loiloi koʻikoʻi, hiki ke ʻae ʻia, ʻoiai inā ua nalowale kekahi mea ma muli o koʻu nānā ʻana.

E pili ana iā DPI

ʻOiai ʻo kaʻu mea hoʻolako hoʻolaha i hoʻohuli i kāna kānana e hoʻomaka ana mai ka lā ʻelua, e pili ana i ka ʻike mai ka lā mua hiki iā mākou ke hoʻoholo i ka hana ʻana o ka pale. ʻO 4 wale nō nā kumu i hiki ke komo a hoʻopau loa i nā kau HTTP a me TCP (e like me ka laʻana ma luna). Hiki ke hoʻouna ʻia kekahi 460 GET, aka, ua hoopau koke ia ke kau e RST. E hoʻolohe i ka TTL:

TTL 50, TCP, 14678  >  80, "[SYN] Seq=0"
TTL 64, TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"
TTL 50, TCP, 14678  >  80, "[ACK] Seq=1 Ack=1"

HTTP, "GET /filteredpage HTTP/1.1"
TTL 64, TCP, 80  >  14678, "[ACK] Seq=1 Ack=294"

#Вот это прислал фильтр
TTL 53, TCP, 14678  >  80, "[RST] Seq=3458729893"
TTL 53, TCP, 14678  >  80, "[RST] Seq=3458729893"

HTTP, "HTTP/1.1 302 Found"

#А это попытка исходного узла получить потерю
TTL 50, TCP ACKed unseen segment, 14678 > 80, "[ACK] Seq=294 Ack=145"

TTL 50, TCP, 14678  >  80, "[FIN, ACK] Seq=294 Ack=145"
TTL 64, TCP, 80  >  14678, "[FIN, ACK] Seq=171 Ack=295"

TTL 50, TCP Dup ACK 14678 > 80 "[ACK] Seq=295 Ack=145"

#Исходный узел понимает что сессия разрушена
TTL 50, TCP, 14678  >  80, "[RST] Seq=294"
TTL 50, TCP, 14678  >  80, "[RST] Seq=295"

Hiki ke ʻokoʻa nā ʻokoʻa o kēia: liʻiliʻi RST a i ʻole ka hoʻouna hou ʻana - pili pū i ka mea a ka kānana e hoʻouna ai i ka node kumu. ʻO kēlā me kēia hihia, ʻo kēia ke kumu hoʻohālike hilinaʻi loa, kahi i maopopo ai he kumu pāpā ʻia i noi ʻia. Eia hou, aia kekahi pane e ʻike ʻia i ke kau me TTL ʻoi aku ka nui ma mua o nā pūʻolo mua a ma hope.

ʻAʻole hiki iā ʻoe ke ʻike mai nā mea ʻē aʻe GET:

TTL 50, TCP, 14678  >  80, "[SYN] Seq=0"
TTL 64, TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"

#Вот это прислал фильтр
TTL 53, TCP, 14678  >  80, "[RST] Seq=1"

A penei paha:

TTL 50, TCP, 14678  >  80, "[SYN] Seq=0"
TTL 64, TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"
TTL 50, TCP, 14678  >  80, "[ACK] Seq=1 Ack=1"

#Вот это прислал фильтр
TTL 53, TCP, 14678  >  80, "[RST, PSH] Seq=1"

TTL 50, TCP ACKed unseen segment, 14678 > 80, "[FIN, ACK] Seq=89 Ack=172"
TTL 50, TCP ACKed unseen segment, 14678 > 80, "[FIN, ACK] Seq=89 Ack=172"

#Опять фильтр, много раз
TTL 53, TCP, 14678  >  80, "[RST, PSH] Seq=1"
...

ʻIke maopopo ʻia ka ʻokoʻa TTL inā hele mai kekahi mea mai ka kānana. Akā pinepine, ʻaʻohe mea e hiki mai:

TCP, 14678  >  80, "[SYN] Seq=0"
TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"
TCP Retransmission, 80 > 14678, "[SYN, ACK] Seq=0 Ack=1"
...

A penei paha:

TCP, 14678  >  80, "[SYN] Seq=0"
TCP, 80  >  14678, "[SYN, ACK] Seq=0 Ack=1"
TCP, 14678  >  80, "[ACK] Seq=1 Ack=1"

#Прошло несколько секунд без трафика

TCP, 80  >  14678, "[FIN, ACK] Seq=1 Ack=1"
TCP Retransmission, 80 > 14678, "[FIN, ACK] Seq=1 Ack=1"
...

A ua hana hou ʻia kēia mau mea a pau, e like me ka mea i ʻike ʻia ma ka pakuhi, ʻoi aku ma mua o hoʻokahi, i kēlā me kēia lā.

E pili ana iā IPv6

ʻO ka nūhou maikaʻi ke ola nei. Hiki iaʻu ke ʻōlelo me ka hilinaʻi e loaʻa mai nā noi manawaleʻa i kahi kumuwaiwai pāpā ʻia mai 5 mau helu IPv6 like ʻole, ʻo ia ke ʻano o nā Agents aʻu i manaʻo ai. Eia kekahi, ʻaʻole hāʻule kekahi o nā helu IPv6 ma lalo o kāna kānana a ʻike wau i kahi kau piha. Mai ʻelua hou aʻe ua ʻike au i hoʻokahi kau i hoʻopau ʻole ʻia, kahi i hoʻopau ʻia e RST mai ka kānana, ka lua o ka manawa. Huina huina 7.

Ma muli o ka liʻiliʻi o nā ʻōlelo, ua aʻo au iā lākou āpau me ka kikoʻī a ua ʻike ʻia aia he 3 wale nō nā mea hoʻolako ma laila, hiki ke hāʻawi ʻia iā lākou ke kū nei! ʻO kahi helu ʻē aʻe ʻo ke ao hoʻokipa ma Rusia (ʻaʻole kānana), ʻo kahi ʻē aʻe kahi kikowaena noiʻi ma Kelemānia (aia kahi kānana, ma hea?). Akā no ke aha lākou e nānā ai i ka loaʻa ʻana o nā kumuwaiwai i pāpā ʻia ma ka papa manawa he nīnau maikaʻi. Ua noi nā mea ʻelua i hoʻokahi noi a aia ma waho o Rūsia, a ua kānana ʻia kekahi o lākou (ma ka transit, ma hope o nā mea a pau?).

ʻO ka hoʻopaʻa ʻana a me nā Agents he mea pale nui i ka IPv6, ʻaʻole e neʻe wikiwiki ka hoʻokō ʻana. He mea kaumaha. Hiki i ka poʻe i hoʻoponopono i kēia pilikia ke haʻaheo iā lākou iho.

I ka hopena

ʻAʻole au i hoʻoikaika no ka pololei 100%, e kala mai iaʻu no kēia, manaʻolana wau e makemake kekahi e hana hou i kēia hana me ka pololei. He mea nui iaʻu e hoʻomaopopo inā e holo pono ana kēia ala ma ke kumu. ʻAe ka pane. ʻO nā kiʻi i loaʻa, ma ke ʻano he hoʻohālikelike mua, manaʻo wau, he hilinaʻi loa.

He aha nā mea ʻē aʻe i hana ʻia a ʻo kaʻu mea i palaualelo e hana ʻo ia ka helu ʻana i nā noi DNS. ʻAʻole i kānana ʻia, akā ʻaʻole lākou e hāʻawi i ka pololei no ka mea hana wale lākou no ka domain, ʻaʻole no ka URL holoʻokoʻa. Pono e ʻike ʻia ke alapine. Inā hoʻohui ʻoe me ka mea i ʻike pololei ʻia i nā nīnau, e ʻae kēia iā ʻoe e hoʻokaʻawale i nā mea pono ʻole a loaʻa ka ʻike hou aku. Hiki ke hoʻoholo i nā mea hoʻomohala o ka DNS i hoʻohana ʻia e nā mea hoʻolako a ʻoi aku ka nui.

ʻAʻole wau i manaʻo e hoʻokomo pū ka mea hoʻokele i kāna kānana ponoʻī no kaʻu VPS. He hana maʻamau paha kēia. I ka hopena, hoʻouna ʻo RKN i kahi noi e holoi i ka waiwai i ka mea hoʻokipa. ʻAʻole naʻe kēia i kāhāhā iaʻu a ma kekahi mau ʻano ua hana i koʻu pono. Ua hana maikaʻi loa ka kānana, e ʻoki ana i nā noi HTTP pololei a pau i kahi URL i pāpā ʻia, akā ʻaʻole pololei nā mea i hele mua i ka kānana o nā mea hoʻolako i hiki iā lākou, ʻoiai ma ke ʻano o nā hopena: FIN-ACK и RST - hoʻemi no ka liʻiliʻi a aneane lilo ia i mea hoʻohui. Ma ke ala, ʻaʻole i kānana ʻia ʻo IPv6 e ka hoster. ʻOiaʻiʻo, ua pili kēia i ka maikaʻi o nā mea i hōʻiliʻili ʻia, akā ua hiki ke ʻike i ke alapine. Ua ʻike ʻia he mea koʻikoʻi kēia i ke koho ʻana i kahi pūnaewele no ka waiho ʻana i nā kumuwaiwai; mai poina e lawe i ka hoihoi i ka pilikia o ka hoʻonohonoho ʻana i ka hana me ka papa inoa o nā wahi i pāpā ʻia a me nā noi mai ka RKN.

I ka hoʻomaka, ua hoʻohālikelike au i ka "Inspector" AS me RIPE Atlas. Ua kūpono kēia hoʻohālikelike a hiki i kahi pūnaewele nui o nā Agents ke pōmaikaʻi. No ka laʻana, ka hoʻoholo ʻana i ka maikaʻi o ka loaʻa ʻana o nā kumuwaiwai mai nā mea hoʻolako like ʻole ma nā wahi like ʻole o ka ʻāina. Hiki iā ʻoe ke helu i nā lohi, hiki iā ʻoe ke kūkulu i nā kiʻi, hiki iā ʻoe ke nānā i nā mea āpau a ʻike i nā loli e kū nei ma ka ʻāina a me ka honua. ʻAʻole kēia ke ala pololei loa, akā hoʻohana nā astronomers i nā "kukui maʻamau", no ke aha e hoʻohana ʻole ai i nā Agents? Ke ʻike nei (i ka loaʻa ʻana) o kā lākou ʻano maʻamau, hiki iā ʻoe ke hoʻoholo i nā loli e kū nei a puni lākou a pehea e pili ai kēia i ka maikaʻi o nā lawelawe i hāʻawi ʻia. A i ka manawa like, ʻaʻole pono ʻoe e kau kūʻokoʻa i nā probes ma ka pūnaewele; Ua hoʻokomo ʻo Roskomnadzor iā lākou.

ʻO kekahi mea aʻu e makemake ai e hoʻopā aku, ʻo kēlā me kēia mea hana hiki ke lilo i mea kaua. ʻO AS "Inspector" kahi pūnaewele paʻa, akā hāʻawi nā Agents i nā mea āpau ma ka hoʻouna ʻana i nā noi no nā kumuwaiwai āpau mai ka papa inoa pāpā ʻia. ʻAʻole pilikia iki ka loaʻa ʻana o ia kumuwaiwai. ʻO ka nui, nā mea hoʻolako ma o Agents, me ka ʻike ʻole, e haʻi i nā mea hou aʻe e pili ana i kā lākou pūnaewele ma mua o ka mea e pono ai: DPI a me nā ʻano DNS, kahi o ka Agent (central node and service network?), Network markers of lohi a me nā poho - a ʻo kēia. ʻo ka mea maopopo loa. E like me ka hiki i kekahi ke nānā i nā hana a nā Agents e hoʻomaikaʻi i ka loaʻa ʻana o kā lākou waiwai, hiki i kekahi ke hana i kēia no nā kumu ʻē aʻe a ʻaʻohe mea keʻakeʻa i kēia. ʻO ka hopena he mea hana ʻelua ʻaoʻao a nui loa, hiki i kekahi ke ʻike i kēia.

Source: www.habr.com

Pākuʻi i ka manaʻo hoʻopuka