{"id":74655,"date":"2020-03-19T08:42:34","date_gmt":"2020-03-19T05:42:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh"},"modified":"2020-03-19T08:42:34","modified_gmt":"2020-03-19T05:42:34","slug":"kogda-linux-conntrack-vam-bolshe-ne-tovarishh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","title":{"rendered":"Kad Linux conntrack jums vairs nav draugs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Kad Linux conntrack jums vairs nav draugs\" src=\"\/wp-content\/uploads\/2020\/03\/588a169e5cfe0714694b8d7ff03985d1.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Savienojumu izseko\u0161ana (\u201cconntrack\u201d) ir pamatfunkcija Linux kodola t\u012bkla kaudz\u0113. T\u0101 \u013cauj kodolam sekot vis\u0101m lo\u0123iskaj\u0101m t\u012bkla savienojumiem vai pl\u016bsm\u0101m, t\u0101d\u0113j\u0101di identific\u0113jot visus paketus, kas veido katru pl\u016bsmu, lai tos var\u0113tu sec\u012bgi apstr\u0101d\u0101t kop\u0101.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Conntrack ir svar\u012bga kodola funkcija, kas tiek izmantota da\u017eos pamata gad\u012bjumos:<\/p>\n<p><\/p>\n<ul>\n<li>NAT balst\u0101s uz inform\u0101ciju no conntrack, t\u0101d\u0113j\u0101di tas var vien\u0101di apstr\u0101d\u0101t visus paketus no vienas pl\u016bsmas. Piem\u0113ram, kad pods sazin\u0101s ar Kubernetes pakalpojumu, kube-proxy slodzes balans\u0113t\u0101js izmanto NAT, lai novirz\u012btu satiksmi uz konkr\u0113tu podu iek\u0161\u0113j\u0101 klaster\u012b. Conntrack re\u0123istr\u0113, ka visiem pakotn\u0113m, kas adres\u0113tas pakalpojuma IP, j\u0101b\u016bt nos\u016bt\u012bt\u0101m uz to pa\u0161u podu, un ka paketes, ko atgrie\u017e backend pod, j\u0101novirza NAT atpaka\u013c uz podu, no kura sa\u0146emts piepras\u012bjums.<\/li>\n<li>St\u0101vok\u013ca izseko\u0161anas ugunsm\u016bri, piem\u0113ram, Calico, balst\u0101s uz inform\u0101ciju no conntrack, lai pievienotu \u201catbildes\u201d satiksmi baltajai sarakst\u0101. Tas \u013cauj jums uzrakst\u012bt t\u012bkla politiku, kas saka: \u201eat\u013caut manam podam savienoties ar jebkuru t\u0101lu IP adresi\u201d, nevis j\u0101nosaka politika, kas skaidri at\u013cauj atbildes satiksmi. (Bez t\u0101 jums b\u016btu j\u0101pie\u0161\u0137ir daudz maz\u0101k dro\u0161a norma \u201eat\u013caut paketes manam pod ar jebkuru IP\u201d.)<\/li>\n<\/ul>\n<p><\/p>\n<p>Turkl\u0101t conntrack parasti uzlabo sist\u0113mas veiktsp\u0113ju (samazinot procesora laika pat\u0113ri\u0146u un paketes aiztures laiku), jo tikai pirmajam paketam pl\u016bsm\u0101<br \/>\nj\u0101iet cauri pilnai t\u012bkla kaudzes apstr\u0101dei, lai noteiktu, ko ar to dar\u012bt. Skatiet ierakstu \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/www.tigera.io\/blog\/comparing-kube-proxy-modes-iptables-or-ipvs\/\">Kube-proxy re\u017e\u012bmu sal\u012bdzin\u0101jums<\/a><\/noindex>\u201d, lai redz\u0113tu piem\u0113ru, k\u0101 tas darbojas.<\/p>\n<p><\/p>\n<p>Tom\u0113r conntrack ir savi ierobe\u017eojumi\u2026<\/p>\n<p><\/p>\n<h3 id=\"itak-gde-vse-poshlo-ne-tak\">T\u0101tad, kur viss ieg\u0101ja greizaj\u0101 ce\u013c\u0101?<\/h3>\n<p><\/p>\n<p>Conntrack tabulai ir piel\u0101gojams maksim\u0101lais izm\u0113rs, un, ja t\u0101 piepild\u0101s, savienojumi parasti s\u0101k tikt noraid\u012bti vai p\u0101rtraukti. Liel\u0101kajai da\u013cai lietojumu satiksmes sarakstos br\u012bv\u0101 vieta parasti ir pietiekama, un tas nekad p\u0101rv\u0113rt\u012bsies par probl\u0113mu. Tom\u0113r ir da\u017ei scen\u0101riji, kad vajadz\u0113tu apsv\u0113rt izmantot conntrack tabulu:<\/p>\n<p><\/p>\n<ul>\n<li>Ac\u012bmredzam\u0101kais gad\u012bjums ir tad, ja j\u016bsu serveris apstr\u0101d\u0101 \u0101rk\u0101rt\u012bgi lielu vienlaic\u012bgu akt\u012bvo savienojumu skaitu. Piem\u0113ram, ja j\u016bsu conntrack tabula ir konfigur\u0113ta uz 128k ierakstiem, bet jums ir vair\u0101k nek\u0101 128k vienlaic\u012bgu savienojumu, j\u016bs noteikti saskarsities ar probl\u0113m\u0101m!<\/li>\n<li>Maz\u0101k ac\u012bmredzams gad\u012bjums: ja j\u016bsu serveris apstr\u0101d\u0101 \u013coti lielu savienojumu skaitu sekund\u0113. Pat ja savienojumi ir \u012bslaic\u012bgi, Linux tos turpina uzskait\u012bt kaut k\u0101du laiku (noklus\u0113juma iestat\u012bjums ir 120s). Piem\u0113ram, ja j\u016bsu conntrack tabula ir konfigur\u0113ta uz 128 t\u016bkst. ierakstiem un m\u0113\u0123in\u0101t apstr\u0101d\u0101t 1100 savienojumus sekund\u0113, tie p\u0101rsniegs conntrack tabulas lielumu, pat ja savienojumi ir \u013coti \u012bslaic\u012bgi (128k \/ 120s = 1092 savienojumi \/ s).<\/li>\n<\/ul>\n<p><\/p>\n<p>Ir vair\u0101ki specifiski aplik\u0101ciju veidi, kas ietilpst \u0161aj\u0101s kategorij\u0101s. Turkl\u0101t, ja jums ir daudz \u013caunpr\u0101t\u012bgu lietot\u0101ju, tad j\u016bsu servera conntrack tabulas piepild\u012b\u0161ana ar daudziem pusatv\u0113rtiem savienojumiem var tikt izmantota k\u0101 uzbrukums, kas paz\u012bstams k\u0101 \"denial of service\" (DOS). Abos gad\u012bjumos conntrack var k\u013c\u016bt par ierobe\u017eojo\u0161o \u0161aur\u0101s vietas j\u016bsu sist\u0113m\u0101. Da\u017eos gad\u012bjumos nav nepiecie\u0161ams neko dar\u012bt, vienk\u0101r\u0161i mainot conntrack tabulas parametrus, palielinot lielumu vai samazinot laika ierobe\u017eojumus (bet, ja to izdar\u012bsiet nepareizi, jums b\u016bs gr\u016bt\u012bbas). Citiem gad\u012bjumiem b\u016bs nepiecie\u0161ams apiet conntrack agres\u012bvas satiksmes gad\u012bjum\u0101.<\/p>\n<p><\/p>\n<h4 id=\"realnyy-primer\">Re\u0101ls piem\u0113rs<\/h4>\n<p><\/p>\n<p>Pie\u0146emsim konkr\u0113tu piem\u0113ru: viens liels SaaS pakalpojumu sniedz\u0113js, ar kuru m\u0113s str\u0101d\u0101j\u0101m, bija vair\u0101ki memcached serveri uz hostiem (ne virtu\u0101laj\u0101m ma\u0161\u012bn\u0101m), no kuriem katrs apstr\u0101d\u0101ja 50K+ \u012bslaic\u012bgu savienojumu sekund\u0113.<\/p>\n<p><\/p>\n<p>Vi\u0146i eksperiment\u0113ja ar conntrack konfigur\u0101ciju, palielinot tabulu izm\u0113rus un samazinot izseko\u0161anas laiku, bet konfigur\u0101cija bija nestabila, iev\u0113rojami palielin\u0101j\u0101s RAM pat\u0113ri\u0146\u0161, kas bija probl\u0113ma (vair\u0101kos GB!), un savienojumi bija tik \u012bsi, ka conntrack nesniedza parasto veiktsp\u0113jas uzlabojumu (samazinot CPU pat\u0113ri\u0146u vai paketes aizturi).<\/p>\n<p><\/p>\n<p>K\u0101 alternat\u012bvu vi\u0146i v\u0113r\u0161as pie Calico. Calico t\u012bkla politikas \u013cauj neizmantot conntrack noteiktam trafika veidam (izmantojot doNotTrack opciju politiku). Tas nodro\u0161in\u0101ja nepiecie\u0161amo veiktsp\u0113jas l\u012bmeni, k\u0101 ar\u012b papildu dro\u0161\u012bbas l\u012bmeni, ko sniedz Calico.<\/p>\n<p><\/p>\n<h4 id=\"na-chto-pridetsya-poyti-chtoby-oboyti-conntrack\">Uz ko b\u016bs j\u0101dodas, lai apejot conntrack?<\/h4>\n<p><\/p>\n<ul>\n<li>T\u012bkla politikas do-not-track parasti j\u0101b\u016bt simetrisk\u0101m. SaaS pakalpojumu sniedz\u0113ja gad\u012bjum\u0101: to lietotnes darboj\u0101s aiz aizsarg\u0101tas zonas, un t\u0101p\u0113c izmantojot t\u012bkla politiku, tie var\u0113ja pievienot baltaj\u0101 sarakst\u0101 trafiku no citiem konkr\u0113tiem lietotn\u0113m, kur\u0101m tika at\u013cauts piek\u013c\u016bt memcached.<\/li>\n<li>Politika do-not-track ne\u0146em v\u0113r\u0101 savienojuma virzienu. T\u0101d\u0113j\u0101di, ja memcached serveris tiek uzlauzts, teor\u0113tiski var m\u0113\u0123in\u0101t piesl\u0113gties jebkuram no memcached klientiem, ja tam ir pareizais s\u0101kuma ports. Tom\u0113r, ja esat pareizi noteicis t\u012bkla politiku saviem memcached klientiem, tad \u0161ie piesl\u0113g\u0161an\u0101s m\u0113\u0123in\u0101jumi vienalga tiks noraid\u012bti klienta pus\u0113.<\/li>\n<li>Politika do-not-track tiek piem\u0113rota katram paket\u0113m, at\u0161\u0137ir\u012bb\u0101 no parastaj\u0101m politik\u0101m, kas tiek piem\u0113rotas tikai pirmajai paket\u0113m no pl\u016bsmas. Tas var palielin\u0101t CPU resursu pat\u0113ri\u0146u uz vienu paketi, jo katrai paket\u0113m ir j\u0101pielieto politika. Ta\u010du \u012bslaic\u012bgu savienojumu gad\u012bjum\u0101 \u0161is izdevums tiek l\u012bdzsvarots ar resursu pat\u0113ri\u0146a samazin\u0101\u0161anu, apstr\u0101d\u0101jot conntrack. Piem\u0113ram, SaaS pakalpojumu sniedz\u0113ja gad\u012bjum\u0101 katra savienojuma paket\u0113m bija \u013coti maz, t\u0101d\u0113\u013c papildus CPU resursu izdevumi, piem\u0113rojot politikas katrai paket\u0113m, bija pamatoti.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"pristupim-k-testam\">S\u0101ksim test\u0113\u0161anu<\/h4>\n<p><\/p>\n<p>M\u0113s veic\u0101m testu vien\u0101 pod&#8217;\u0101 ar memcached serveri un daudziem memcached klientu pod&#8217;iem, kas darboj\u0101s att\u0101lajos mezglos, lai m\u0113s var\u0113tu palaist \u013coti lielu savienojumu skaitu sekund\u0113. Serverim ar memcached servera pod&#8217;u bija 8 kodoli un 512k ierakstu conntrack tabul\u0101 (standarta iestat\u012bjumu izm\u0113rs tabulai viesos).<br \/>\nM\u0113s m\u0113r\u012bj\u0101m veiktsp\u0113jas at\u0161\u0137ir\u012bbu starp: bez t\u012bkla politikas; ar parasto Calico politiku; un Calico do-not-track politiku.<\/p>\n<p><\/p>\n<p>Pirmaj\u0101 test\u0101 m\u0113s noteic\u0101m savienojumu skaitu l\u012bdz 4,000 sekund\u0113, t\u0101p\u0113c var\u0113j\u0101m koncentr\u0113ties uz CPU pat\u0113ri\u0146a at\u0161\u0137ir\u012bb\u0101m. \u0160eit nebija b\u016btisku at\u0161\u0137ir\u012bbu starp politikas neesam\u012bbu un parasto politiku, ta\u010du do-not-track palielin\u0101ja CPU pat\u0113ri\u0146u par aptuveni 20%.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kad Linux conntrack jums vairs nav draugs\" src=\"\/wp-content\/uploads\/2020\/03\/6762772cb8e5f089a3ed444aff8cb8f4.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Otraj\u0101 test\u0101 m\u0113s palaid\u0101m tik daudz savienojumu, cik tikai var\u0113ja \u0123ener\u0113t m\u016bsu klienti, un m\u0113rij\u0101m maksim\u0101lo savienojumu skaitu sekund\u0113, ko sp\u0113ja apstr\u0101d\u0101t m\u016bsu memcached serveris. K\u0101 gaid\u012bts, 'bez politikas' un 'parast\u0101 politika' abi sasniedza conntrack robe\u017eu vair\u0101k nek\u0101 4,000 savienojumiem sekund\u0113 (512k \/ 120s = 4,369 savienojumi\/s). Ar do-not-track politiku m\u016bsu klienti s\u016bt\u012bja 60,000 savienojumus sekund\u0113 bez jebk\u0101d\u0101m probl\u0113m\u0101m. M\u0113s esam p\u0101rliecin\u0101ti, ka var\u0113tu palielin\u0101t \u0161o skaitli, piesl\u0113dzot vair\u0101k klientu, bet j\u016btam, ka \u0161ie cipari jau pietiek, lai ilustr\u0113tu \u0161\u012b raksta b\u016bt\u012bbu!<\/p>\n<p>\n<img decoding=\"async\" alt=\"Kad Linux conntrack jums vairs nav draugs\" src=\"\/wp-content\/uploads\/2020\/03\/f3beeb1793a3158018274079da953a2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h4 id=\"zaklyuchenie\">Secin\u0101jums<\/h4>\n<p><\/p>\n<p>Conntrack ir svar\u012bga kodola funkcija. Tas lieliski paveic savu darbu. To bie\u017ei izmanto sist\u0113mas galvenie komponenti. Tom\u0113r noteikt\u0101s situ\u0101cij\u0101s, noslogojums d\u0113\u013c conntrack p\u0101rsniedz parast\u0101s priek\u0161roc\u012bbas, ko tas sniedz. \u0160aj\u0101 scen\u0101rij\u0101 Calico t\u012bkla politikas var tikt izmantotas, lai izv\u0113les veid\u0101 atsl\u0113gtu conntrack izmanto\u0161anu, vienlaikus paaugstinot t\u012bkla dro\u0161\u012bbas l\u012bmeni. Visam p\u0101r\u0113j\u0101m straum\u0113m conntrack turpin\u0101s b\u016bt j\u016bsu sabiedrotais!<\/p>\n<p><\/p>\n<h2 id=\"takzhe-chitayte-drugie-stati-v-nashem-bloge\">Izlasiet ar\u012b citus rakstus m\u016bsu emu\u0101r\u0101:<\/h2>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/473578\/\">Dinamisko modu\u013cu veido\u0161ana Nginx<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/473014\/\">Ievads Hashicorp Consul Kubernetes autoriz\u0101cij\u0101<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/426543\/\">Kubernetes Stateful dubl\u0113jumi<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/424717\/\">Liela skaita da\u017e\u0101du t\u012bmek\u013ca projektu dubl\u0113\u0161ana<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/347526\/\">Telegram bots Redmine. K\u0101 atvieglot dz\u012bvi sev un citiem<\/a><\/noindex><\/li>\n<\/ul>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/nixys\/blog\/492686\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430 Linux. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044f\u0434\u0440\u0443 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0442\u043e\u043a\u0438 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a\u0430\u0436\u0434\u044b\u0439 \u043f\u043e\u0442\u043e\u043a, \u0447\u0442\u043e\u0431\u044b \u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435. Conntrack \u2014 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445: NAT \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0442 \u0441onntrack, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74656,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u043e\u0433\u0434\u0430 Linux conntrack \u0432\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0442\u043e\u0432\u0430\u0440\u0438\u0449 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-19T05:42:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-19T05:42:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kad Linux conntrack vairs nav j\u016bsu sabiedrotais | ProHoster","description":"Savienojumu uzskaite (\"conntrack\") ir.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u0433\u0434\u0430 Linux conntrack \u0432\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0442\u043e\u0432\u0430\u0440\u0438\u0449 | ProHoster","og:description":"\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 (\u201cconntrack\u201d) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/kogda-linux-conntrack-vam-bolshe-ne-tovarishh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-19T05:42:34+00:00","article:modified_time":"2020-03-19T05:42:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:10:25","updated":"2022-10-05 19:52:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/74655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=74655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/74655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/74656"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=74655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=74655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=74655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}