{"id":29814,"date":"2019-10-31T21:32:09","date_gmt":"2019-10-31T18:32:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\/"},"modified":"2019-10-31T21:32:09","modified_gmt":"2019-10-31T18:32:09","slug":"razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","title":{"rendered":"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>M-a motivat s\u0103 scriu acest post <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/443898\/#comment_19891124\">acest comentariu<\/a><\/noindex>.<\/p>\n<p>\u00cel citez aici:<\/p>\n<blockquote><p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> ast\u0103zi la 18:53<\/p>\n<p>Furnizorul m-a surprins ast\u0103zi. \u00cempreun\u0103 cu actualizarea sistemului de blocare a site-urilor, a fost inclus \u0219i mail.ru pe lista de restric\u021bii. Diminea\u021ba am contactat suportul tehnic, dar nu au putut face nimic. Furnizorul este mic \u0219i, se pare, blocarea este f\u0103cut\u0103 de furnizorii superiori. Am observat, de asemenea, o \u00eencetinire a deschiderii tuturor site-urilor, poate c\u0103 au introdus un DLP defectuos? \u00cen trecut nu au existat probleme de acces. Distrugerea Runet-ului se desf\u0103\u0219oar\u0103 chiar sub ochii mei\u2026<\/p><\/blockquote>\n<p> Problema este c\u0103, se pare, \u0219i noi suntem acel furnizor \ud83d\ude41<\/p>\n<p>\u0218i, \u00eentr-adev\u0103r, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> aproape am ghicit cauza problemelor cu mail.ru (de\u0219i ne-a luat mult timp s\u0103 credem \u00een a\u0219a ceva).<\/p>\n<p>Urm\u0103toarea parte va fi \u00eemp\u0103r\u021bit\u0103 \u00een dou\u0103:<\/p>\n<ol>\n<li>cauzele problemelor noastre de ast\u0103zi cu mail.ru \u0219i o aventur\u0103 fascinant\u0103 \u00een c\u0103utarea lor<\/li>\n<li>existen\u021ba ISP-urilor \u00een realit\u0103\u021bile de ast\u0103zi, stabilitatea Runet-ului suveran.<\/li>\n<\/ol>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Probleme de accesibilitate la mail.ru<\/h3>\n<p>\nOh, aceasta este o poveste destul de lung\u0103. <\/p>\n<p>Problema este c\u0103, pentru a implementa cerin\u021bele statului (mai multe detalii \u00een partea a doua), am achizi\u021bionat, configurat \u0219i instalat anumite echipamente - at\u00e2t pentru filtrarea resurselor interzise, c\u00e2t \u0219i pentru <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/NAT\">traduceri NAT<\/a><\/noindex> abonat.<\/p>\n<p>Cu ceva timp \u00een urm\u0103, \u00een sf\u00e2r\u0219it am restructurat nucleul re\u021belei astfel \u00eenc\u00e2t tot traficul abona\u021bilor s\u0103 treac\u0103 prin acest echipament strict \u00een direc\u021bia corect\u0103.<\/p>\n<p>Cu c\u00e2teva zile \u00een urm\u0103 am activat filtrarea con\u021binutului interzis pe acest echipament (men\u021bin\u00e2nd \u00een func\u021biune \u0219i sistemul vechi) \u2014 aparent, totul a decurs bine.<\/p>\n<p>Apoi - am \u00eenceput treptat s\u0103 activ\u0103m NAT pentru diferite grupuri de abona\u021bi pe acest echipament. La prima vedere - totul, se p\u0103rea c\u0103 merge bine.<\/p>\n<p>Dar ast\u0103zi, activ\u00e2nd NAT pe echipament pentru o nou\u0103 grupare de abona\u021bi - de diminea\u021b\u0103 ne-am confruntat cu un num\u0103r semnificativ de pl\u00e2ngeri despre inaccesibilitatea sau accesibilitatea par\u021bial\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/mail.ru\">mail.ru<\/a><\/noindex> \u0219i alte resurse ale Mail Ru Group.<\/p>\n<p>Am \u00eenceput s\u0103 verific\u0103m: ceva undeva <i>ocazional<\/i>, <i>rareori<\/i> trimite <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%90%D1%82%D0%B0%D0%BA%D0%B0_TCP_Reset\">TCP RST<\/a><\/noindex> ca r\u0103spuns la cererile exclusiv pentru re\u021belele mail.ru. Mai mult, trimite un TCP RST generat incorect (f\u0103r\u0103 ACK), evident artificial. Asta ar\u0103ta cam a\u0219a:<\/p>\n<p><img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/2ce762c44e86b97125806a27d91da1f0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/c7041cf0ae273666fe9bb36ff236710f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/c594ee9e5f1c7127ac849c6b7afcd5d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDesigur, primele g\u00e2nduri au fost legate de echipamentele noi: un DPI \u00eenfrico\u0219\u0103tor, nicio \u00eencredere \u00een el, cine \u0219tie ce ar putea face \u2014 av\u00e2nd \u00een vedere c\u0103 TCP RST este ceva destul de comun \u00een r\u00e2ndul instrumentelor de blocare.<\/p>\n<p>Presupunerea <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/users\/kaleman\/\" class=\"user_link\">kaleman<\/a><\/noindex> c\u0103 cineva de \u201enivel superior\u201d filtreaz\u0103 a fost de asemenea \u00eenaintat\u0103 \u2014 dar am abandonat imediat.<\/p>\n<p>\u00cen primul r\u00e2nd, avem uplinkuri rezonabile, astfel \u00eenc\u00e2t s\u0103 nu suferim din aceast\u0103 cauz\u0103 \ud83d\ude42<\/p>\n<p>\u00cen al doilea r\u00e2nd, suntem conecta\u021bi la mai multe <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A2%D0%BE%D1%87%D0%BA%D0%B0_%D0%BE%D0%B1%D0%BC%D0%B5%D0%BD%D0%B0_%D0%B8%D0%BD%D1%82%D0%B5%D1%80%D0%BD%D0%B5%D1%82-%D1%82%D1%80%D0%B0%D1%84%D0%B8%D0%BA%D0%BE%D0%BC\">IX<\/a><\/noindex> din Moscova, iar traficul c\u0103tre mail.ru trece prin intermediul lor \u2014 iar ei nu au nici obliga\u021bii, nici alt motiv de a filtra traficul.<\/p>\n<p>Urm\u0103toarea jum\u0103tate de zi a fost dedicat\u0103 a ceea ce se nume\u0219te \u00een mod obi\u0219nuit voodoo \u2014 \u00eempreun\u0103 cu furnizorul de echipamente, c\u0103ruia \u00eei mul\u021bumim, nu ne-au abandonat \ud83d\ude42<\/p>\n<ul>\n<li>filtrarea a fost complet dezactivat\u0103<\/li>\n<li>NAT a fost dezactivat conform unui nou schema<\/li>\n<li>PC-ul de test a fost scos \u00eentr-un pool izolat<\/li>\n<li>s-a schimbat adresarea IP<\/li>\n<\/ul>\n<p>\n\u00cen a doua jum\u0103tate a zilei, a fost alocat un server virtual, conectat la re\u021bea conform schemei unui utilizator obi\u0219nuit, iar accesul la acesta \u0219i la echipament a fost permis reprezentan\u021bilor furnizorului. Voodoo a continuat \ud83d\ude42<\/p>\n<p>\u00cen cele din urm\u0103, reprezentantul furnizorului a declarat cu \u00eencredere c\u0103 echipamentul nu are nicio leg\u0103tur\u0103: rst-urile vin de undeva mai sus.<\/p>\n<p><b class=\"spoiler_title\">Not\u0103<\/b><i>\u00cen acest moment, cineva ar putea afirma: dar ar fi fost mult mai simplu s\u0103 se ia un dump nu de pe PC-ul de test, ci de pe magistrala de deasupra DPI-ului?<\/p>\n<p>Nu, din p\u0103cate, a ob\u021bine un dump (\u0219i chiar \u0219i doar a face un mirror) de 40+gbps nu este deloc trivial.<\/i><\/p>\n<p>Dup\u0103 aceasta, deja seara \u2014 nu a r\u0103mas altceva de f\u0103cut dec\u00e2t s\u0103 ne \u00eentoarcem la presupunerea despre o filtrare ciudat\u0103 undeva mai sus.<\/p>\n<p>Am verificat prin ce IX circula acum traficul c\u0103tre re\u021belele MRG \u0219i pur \u0219i simplu am dezactivat sesiunile bgp c\u0103tre acesta. \u0218i \u2014 miracol! \u2014 totul s-a normalizat imediat \ud83d\ude41<\/p>\n<p>Pe de o parte \u2014 este foarte trist c\u0103 a fost cheltuit\u0103 toat\u0103 ziua pentru a g\u0103si problema, de\u0219i a fost rezolvat\u0103 \u00een cinci minute.<\/p>\n<p>Pe de alt\u0103 parte:<\/p>\n<p> \u2014 \u00een amintirea mea, acesta este un lucru f\u0103r\u0103 precedent. A\u0219a cum am scris mai sus \u2014 pentru IX-uri <i>cu adev\u0103rat<\/i> nu are sens s\u0103 filtreze traficul de tranzit. De obicei, au sute de gigabi\u021bi \/ terabi\u021bi pe secund\u0103. Pur \u0219i simplu, p\u00e2n\u0103 \u00een ultimul moment, nu am putut s\u0103 cred serios o astfel de presupunere.<\/p>\n<p> \u2014 o coinciden\u021b\u0103 incredibil de favorabil\u0103: echipament nou \u0219i complex, care nu inspir\u0103 o \u00eencredere deosebit\u0103 \u0219i de la care nu este clar ce s\u0103 a\u0219tep\u021bi \u2014 conceput exact pentru a bloca resurse, inclusiv prin TCP RST-uri.<\/p>\n<p>\u00cen prezent, NOC-ul acestui internet exchange caut\u0103 o problem\u0103. Conform afirma\u021biilor lor (\u0219i \u00eei cred), nu au un sistem de filtrare special desf\u0103\u0219urat. Dar, mul\u021bumim cerului, urm\u0103toarea misiune - deja nu este problema noastr\u0103 \ud83d\ude42<\/p>\n<p>A fost o mic\u0103 \u00eencercare de a ne justifica, v\u0103 rog s\u0103 \u00een\u021belege\u021bi \u0219i s\u0103 ierta\u021bi \ud83d\ude42<\/p>\n<p>P.S.: inten\u021bionat nu men\u021bionez nici produc\u0103torul DPI\/NAT, nici IX (nu am, de fapt, preten\u021bii speciale fa\u021b\u0103 de ei, principalul este s\u0103 \u00een\u021beleg ce a fost)<\/p>\n<h3>Realitatea de ast\u0103zi (precum \u0219i cea de ieri \u0219i alalt\u0103ieri) din perspectiva unui furnizor de internet<\/h3>\n<p>\n\u00cen ultimele s\u0103pt\u0103m\u00e2ni, am petrecut timp semnificativ restructur\u00e2nd nucleul re\u021belei, realiz\u00e2nd o mul\u021bime de manipul\u0103ri \u201elive\u201d, cu riscul de a afecta semnificativ traficul utilizatorilor activi. Av\u00e2nd \u00een vedere scopurile, rezultatele \u0219i consecin\u021bele acestui lucru - moral, totul este destul de greu. \u00cen special - ascult\u00e2nd din nou predicile despre protec\u021bia stabilit\u0103\u021bii runet-ului, suveranitate, etc.<\/p>\n<p>\u00cen aceast\u0103 sec\u021biune, voi \u00eencerca s\u0103 explic \u201eevolu\u021bia\u201d nucleului re\u021belei unui furnizor tipic de internet \u00een ultimul deceniu.<\/p>\n<p><b>Acum un deceniu.<\/b><\/p>\n<p>\u00cen acele vremuri binecuv\u00e2ntate, nucleul re\u021belei furnizorului putea fi simplu \u0219i fiabil, ca un dop:<\/p>\n<p><img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/06c455b9debf27799451d9f29a12a4a9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen aceast\u0103 imagine foarte, foarte simplificat\u0103 lipsesc magistralele, inelele \u0219i rutarea ip\/MPLS.<\/p>\n<p>Esenta este c\u0103 traficul utilizatorilor ajungea, \u00een cele din urm\u0103, \u00een comutarea la nivel de nucleu - de unde mergea la <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Broadband_remote_access_server\">BNG<\/a><\/noindex>, din care, de obicei \u2014 \u00eenapoi \u00een comutarea de baz\u0103, \u0219i apoi \u201ela ie\u0219ire\u201d \u2014 prin una sau mai multe border gateway-uri c\u0103tre internet.<\/p>\n<p>Aceast\u0103 schem\u0103 este foarte, foarte u\u0219or de rezervat at\u00e2t la L3 (rutare dinamic\u0103), c\u00e2t \u0219i la L2 (MPLS).<\/p>\n<p>Se poate pune N+1 din orice: servere de acces, switch-uri, gate-uri de bord - \u0219i \u00eentr-un fel sau altul le putem rezerva pentru failover automat.<\/p>\n<p><b>Dup\u0103 c\u00e2\u021biva ani<\/b> toat\u0103 lumea din Rusia a realizat c\u0103 nu se mai poate tr\u0103i a\u0219a: trebuie urgent protejate copiii de influen\u021bele nocive ale re\u021belei.<\/p>\n<p>A ap\u0103rut necesitatea de a g\u0103si urgent modalit\u0103\u021bi de a filtra traficul utilizatorilor.<\/p>\n<p>Exist\u0103 diferite abord\u0103ri.<\/p>\n<p>\u00cen cel mai desfavorabil caz - ceva este plasat \u201e\u00een felul t\u0103u\u201d: \u00eentre traficul utilizatorului \u0219i internet. Traficul care trece prin acel \u201eceva\u201d este analizat \u0219i, de exemplu, se trimite un pachet fals cu redirec\u021bionare c\u0103tre abonat.<\/p>\n<p>\u00cen cel mai bun caz \u2014 dac\u0103 volumele de trafic permit \u2014 se poate face un mic truc: a trimite la filtrare doar traficul care provine de la utilizatori c\u0103tre acele adrese care trebuie filtrate (pentru aceasta se pot folosi fie IP-urile specificate \u00een registru, fie se pot rezolva suplimentar domeniile existente \u00een registru).<\/p>\n<p>Cu ani \u00een urm\u0103, pentru aceste scopuri am scris un simplu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/ircop\/nfq_filter\">mini-dpi<\/a><\/noindex> \u2014 de\u0219i nici m\u0103car nu \u00eemi vine s\u0103-l numesc a\u0219a. Este foarte simplu \u0219i nu foarte performant \u2014 totu\u0219i, at\u00e2t pentru noi, c\u00e2t \u0219i pentru zeci (dac\u0103 nu sute) de al\u021bi furnizori, ne-a permis s\u0103 nu cheltuim milioane pe sisteme DPI industriale deodat\u0103, ci ne-a oferit c\u00e2\u021biva ani suplimentari.<\/p>\n<p><b class=\"spoiler_title\">Vorbind de DPI-urile de atunci \u0219i de acum<\/b>Trebuie spus c\u0103 mul\u021bi dintre cei care au achizi\u021bionat sistemele DPI disponibile pe pia\u021b\u0103 pe atunci \u2014 le-au aruncat deja. Nu sunt adaptate pentru a face fa\u021b\u0103: sute de mii de adrese, zeci de mii de URL-uri.<\/p>\n<p>\u00centre timp, pe acest segment de pia\u021b\u0103, produc\u0103torii autohtoni au crescut foarte mult. Nu vorbesc despre partea hardware \u2014 aici e clar pentru toat\u0103 lumea, \u00eens\u0103 software-ul \u2014 principalul aspect al DPI-ului \u2014 poate c\u0103, la ora actual\u0103, dac\u0103 nu este cel mai avansat din lume, cu siguran\u021b\u0103 a) se dezvolt\u0103 \u00eentr-un ritm alert, \u0219i b) ca pre\u021b, \u00een varianta de cutie \u2014 este pur \u0219i simplu incomparabil cu concuren\u021bii str\u0103ini.<\/p>\n<p>A\u0219 vrea s\u0103 m\u0103 m\u00e2ndresc, dar e pu\u021bin trist =)<\/p>\n<p>Acum totul ar\u0103ta a\u0219a:<\/p>\n<p><img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/d4b36c9f02fbbe7d36e9dc81fb1fe9ed.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Dup\u0103 \u00eenc\u0103 doi ani<\/b> to\u021bi aveau deja revisori; resursele din registru deveneau din ce \u00een ce mai numeroase. Pentru unele echipamente mai vechi (de exemplu, cisco 7600) schema de \u201efiltrare lateral\u0103\u201d devenea pur \u0219i simplu ineficient\u0103: num\u0103rul rutelor pe platformele 76 este limitat la ceva \u00een jur de nou\u0103 sute de mii, \u00een timp ce num\u0103rul doar de rute IPv4 este acum aproape de 800 de mii. \u0218i dac\u0103 mai ad\u0103ug\u0103m ipv6\u2026 \u0218i c\u00e2t mai este? 900000 de adrese separate \u00een banul rkn? =)<\/p>\n<p>Cineva a trecut la schema de copiere a \u00eentregului trafic de baz\u0103 c\u0103tre un server de filtrare, care trebuie s\u0103 analizeze \u00eentreg fluxul \u0219i, \u00een cazul \u00een care detecteaz\u0103 ceva suspect, s\u0103 trimit\u0103 \u00een ambele direc\u021bii (c\u0103tre expeditor \u0219i destinatar) RST.<\/p>\n<p>\u00cens\u0103 cu c\u00e2t mai mult trafic, cu at\u00e2t mai pu\u021bin aplicabil\u0103 devine aceast\u0103 schem\u0103. La cea mai mic\u0103 \u00eent\u00e2rziere \u00een procesare \u2014 traficul copiat pur \u0219i simplu va trece neobservat \u00een neant, iar furnizorul va primi un protocol de penalizare.<\/p>\n<p>Tot mai mul\u021bi furnizori sunt nevoi\u021bi s\u0103 implementeze sisteme DPI de diferite grade de fiabilitate \u00een intersec\u021bia magistralelor.<\/p>\n<p><b>Acum un an sau doi<\/b> se spune c\u0103 practic to\u021bi FSB-urile au \u00eenceput s\u0103 cear\u0103 instalarea real\u0103 a echipamentului <noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/osobennosti-i-otlichiya-sorm\/\">SORM<\/a><\/noindex> (\u00een trecut, majoritatea furnizorilor se descurcau cu o aprobat\u0103 de la autorit\u0103\u021bi <i>planul SORM<\/i> \u2014 planul de ac\u021biuni opera\u021bionale \u00een caz de necesitate de a g\u0103si ceva undeva)<\/p>\n<p>Pe l\u00e2ng\u0103 bani (nu at\u00e2t de mult \u00eenc\u00e2t s\u0103 fie complet exorbitan\u021bi, dar totu\u0219i \u2014 milioane), SORM a fost necesar pentru mul\u021bi s\u0103 efectueze manevre suplimentare \u00een re\u021bea.<\/p>\n<ul>\n<li>SORM trebuie s\u0103 vad\u0103 adresele \u00abgri\u00bb ale utilizatorilor, \u00eenainte de NAT-translare<\/li>\n<li>SORM are un num\u0103r limitat de interfe\u021be de re\u021bea<\/li>\n<\/ul>\n<p>\nDe aceea, a fost necesar, printre altele, s\u0103 restructur\u0103m semnificativ o parte a nucleului \u2014 pur \u0219i simplu pentru a aduna undeva \u00eentr-un singur loc traficul utilizatorilor c\u0103tre serverele de acces. Pentru a-l mirroriza \u00een SORM prin c\u00e2teva leg\u0103turi.<\/p>\n<p>Adic\u0103, foarte simplificat, a fost (st\u00e2nga) vs a devenit (dreapta):<\/p>\n<p><img decoding=\"async\" alt=\"R\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF\" src=\"\/wp-content\/uploads\/2019\/03\/0c6af5715ba59eda722309292c6f6735.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Acum<\/b> majoritatea furnizorilor sunt obliga\u021bi s\u0103 implementeze \u0219i SORM-3 \u2014 care include, printre altele, \u0219i logger-ul pentru NAT-transla\u021bii.<\/p>\n<p>\u00cen aceste scopuri, \u00een schema de mai sus a fost necesar s\u0103 ad\u0103ug\u0103m \u0219i un echipament separat pentru NAT (exact cel despre care se vorbe\u0219te \u00een prima parte). \u0218i chiar s\u0103-l ad\u0103ug\u0103m \u00eentr-o anumit\u0103 ordine: deoarece SORM trebuie s\u0103 \u00abvad\u0103\u00bb traficul \u00eenainte de translarea adreselor \u2014 traficul trebuie s\u0103 mearg\u0103 strict \u00een urm\u0103torul mod: utilizatori -&gt; comutare, nucleu -&gt; servere de acces -&gt; SORM -&gt; NAT -&gt; comutare, nucleu -&gt; internet. Pentru aceasta a fost necesar, pur \u0219i simplu, s\u0103 \u00ab\u00eentoarcem\u00bb fluxurile de trafic \u00een cealalt\u0103 direc\u021bie \u00een timp real, ceea ce a fost de asemenea destul de complicat.<\/p>\n<p>\u00cen total: \u00een decurs de un deceniu schema nucleului unui furnizor mediu s-a complicat de c\u00e2teva ori, iar punctele suplimentare de e\u0219ec (fie c\u0103 este vorba de echipamente, fie de linii de comutare unice) s-au \u00eenmul\u021bit semnificativ. De fapt, cerin\u021ba de a \u00abvedea totul\u00bb implic\u0103 consolidarea acestui \u00abtot\u00bb \u00eentr-un singur punct.<\/p>\n<p>Cred c\u0103 acesta se poate extrapola destul de clar asupra ini\u021biativelor actuale de suveranizare a Runet-ului, protec\u021bia lui, stabilizarea \u0219i \u00eembun\u0103t\u0103\u021birea \ud83d\ude42<\/p>\n<p>\u0218i \u00eenaintea noastr\u0103 este \u00eenc\u0103 Yarevaya.<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/444274\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c: kaleman \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 18:53 \u041c\u0435\u043d\u044f \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043d\u0435\u0433\u043e \u043f\u043e\u0434 \u0431\u0430\u043d \u043f\u043e\u043f\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u0438\u043a mail.ru \u0421 \u0443\u0442\u0440\u0430 \u0434\u0435\u0440\u0433\u0430\u044e \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443, \u043d\u0438\u0447\u0435\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u043c\u043e\u0433\u0443\u0442. \u041f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u0439, \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0442 \u0432\u0438\u0434\u0438\u043c\u043e \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b. \u0415\u0449\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u043b \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043c\u043e\u0436\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-29814","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c:\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0420\u0424 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c:\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:32:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:32:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Un r\u0103spuns detaliat la comentariu, precum \u0219i c\u00e2teva informa\u021bii despre via\u021ba furnizorilor din RF | ProHoster","description":"Acest post a fost inspirat de acest comentariu. \u00cel aduc aici:","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432 \u0420\u0424 | ProHoster","og:description":"\u0421\u043f\u043e\u0434\u0432\u0438\u0433 \u043c\u0435\u043d\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0432\u043e\u0442 \u044d\u0442\u043e\u0442 \u0432\u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439. \u041f\u0440\u0438\u0432\u043e\u0436\u0443 \u0435\u0433\u043e \u0437\u0434\u0435\u0441\u044c:","og:url":"https:\/\/prohoster.info\/ro\/blog\/razvyornutyj-otvet-na-kommentarij-a-takzhe-nemnogo-o-zhizni-provajderov-v-rf","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:32:09+00:00","article:modified_time":"2019-10-31T18:32:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"29814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-20 22:35:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:48:50","updated":"2026-01-20 22:35:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/29814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=29814"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/29814\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=29814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=29814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=29814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}