{"id":95258,"date":"2020-09-27T07:42:43","date_gmt":"2020-09-27T05:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost"},"modified":"2020-09-27T07:42:43","modified_gmt":"2020-09-27T05:42:43","slug":"hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","title":{"rendered":"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/338fdf28dfed6654cfdad13538de2954.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u00cen primele dou\u0103 trimestre ale anului 2020, num\u0103rul atacurilor DDoS a crescut aproape de trei ori, dintre care 65% sunt \u00eencerc\u0103ri primitive de \u201etestare a \u00eenc\u0103rc\u0103rii\u201d, care de multe ori \u201edeconecteaz\u0103\u201d f\u0103r\u0103 efort site-urile vulnerabile ale magazinelor online, forumurilor, blogurilor \u0219i mass-media.<\/p>\n<p><\/p>\n<p>Cum s\u0103 alegi un hosting protejat \u00eempotriva atacurilor DDoS? La ce s\u0103 fii atent \u0219i la ce s\u0103 te preg\u0103te\u0219ti pentru a nu te g\u0103si \u00een dificultate?<\/p>\n<p><\/p>\n<p>(Vaccin \u00eempotriva marketingului \u201egri\u201d intern)<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Accesibilitatea \u0219i diversitatea instrumentelor utilizate pentru a efectua atacuri DDoS oblig\u0103 proprietarii de servicii online s\u0103 ia m\u0103suri corespunz\u0103toare pentru a contracara aceast\u0103 amenin\u021bare. S\u0103 iei \u00een considerare protec\u021bia \u00eempotriva DDoS nu ar trebui s\u0103 fie ceva ce faci dup\u0103 primul e\u0219ec \u0219i nici \u00eentr-un complex de m\u0103suri pentru cre\u0219terea rezilien\u021bei infrastructurii, ci chiar \u00een etapa de alegere a platformei de g\u0103zduire (furnizor de hosting sau centru de date).<\/p>\n<p><\/p>\n<p>Atacurile DDoS sunt clasificate \u00een func\u021bie de apartenen\u021ba protocoalelor, a c\u0103ror vulnerabilitate este exploatat\u0103, la nivelurile modelului de interoperabilitate a sistemelor deschise (OSI):<\/p>\n<p><\/p>\n<ul>\n<li>nivelul de leg\u0103tur\u0103 (L2), <\/li>\n<li>nivelul re\u021belei (L3), <\/li>\n<li>nivelul de transport (L4),<\/li>\n<li>nivelul aplica\u021biei (L7). <\/li>\n<\/ul>\n<p><\/p>\n<p>Din perspectiva sistemelor de protec\u021bie, acestea pot fi generalizate \u00een dou\u0103 grupuri: atacuri la nivelul infrastructurii (L2-L4) \u0219i la nivelul aplica\u021biei (L7). Aceasta se datoreaz\u0103 secven\u021bei de executare a algoritmilor de analiz\u0103 a traficului \u0219i complexit\u0103\u021bii computa\u021bionale: cu c\u00e2t ne uit\u0103m mai ad\u00e2nc \u00een pachetul IP, cu at\u00e2t mai multe resurse computa\u021bionale sunt necesare.<\/p>\n<p><\/p>\n<p><em>\u00cen general, problema optimiz\u0103rii calcului la procesarea traficului \u00een timp real este un subiect pentru un ciclu separat de articole. Acum, s\u0103 presupunem c\u0103 exist\u0103 un furnizor de cloud cu resurse computa\u021bionale condi\u021bionat nelimitate, care poate oferi protec\u021bie site-urilor \u00eempotriva atacurilor la nivel de aplica\u021bie (inclusiv <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/web\">gratuit<\/a><\/noindex><\/strong>).<\/em><\/p>\n<p><\/p>\n<h4 id=\"3-glavnyh-voprosa-dlya-opredeleniya-stepeni-zaschischennosti-hostinga-ot-ddos-atak\">3 \u00eentreb\u0103ri principale pentru a determina gradul de protec\u021bie al hostingului \u00eempotriva atacurilor DDoS<\/h4>\n<p><\/p>\n<p>S\u0103 analiz\u0103m condi\u021biile de furnizare a serviciului de protec\u021bie \u00eempotriva atacurilor DDoS \u0219i Acordul de nivel de serviciu (Service Level Agreement, SLA) al furnizorului de hosting. Exist\u0103 r\u0103spunsuri la urm\u0103toarele \u00eentreb\u0103ri?<\/p>\n<p><\/p>\n<ul>\n<li><strong>ce restric\u021bii tehnice declar\u0103 furnizorul de servicii<\/strong>? <\/li>\n<li><strong>ce se \u00eent\u00e2mpl\u0103 c\u00e2nd clientul dep\u0103\u0219e\u0219te limit\u0103rile? <\/strong> <\/li>\n<li><strong>Cum \u00ee\u0219i construie\u0219te un furnizor de hosting protec\u021bia \u00eempotriva atacurilor DDoS (tehnologii, solu\u021bii, furnizori)?<\/strong> <\/li>\n<\/ul>\n<p><\/p>\n<p>Dac\u0103 nu a\u021bi g\u0103sit aceast\u0103 informa\u021bie, ar trebui s\u0103 reflecta\u021bi asupra seriozit\u0103\u021bii furnizorului de servicii sau s\u0103 organiza\u021bi o protec\u021bie de baz\u0103 \u00eempotriva DDoS (L3-4) pe cont propriu. De exemplu, pute\u021bi comanda o conexiune fizic\u0103 la re\u021beaua unui furnizor de protec\u021bie specializat.<\/p>\n<p><\/p>\n<p><strong>Important!<\/strong> Nu are sens s\u0103 asigura\u021bi protec\u021bia \u00eempotriva atacurilor la nivel de aplica\u021bie folosind Reverse Proxy, dac\u0103 furnizorul dumneavoastr\u0103 de hosting nu este capabil s\u0103 ofere protec\u021bie \u00eempotriva atacurilor la nivel de infrastructur\u0103: echipamentul de re\u021bea va fi suprasolicitat \u0219i va deveni inaccesibil, inclusiv pentru serverele proxy ale furnizorului de cloud (figura 1).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/5a6948855d9743ca3709d0ee3feb2224.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Figura 1. Atac direct asupra re\u021belei furnizorului de hosting<\/em><\/p>\n<p><\/p>\n<p>\u0218i s\u0103 nu vi se spun\u0103 pove\u0219ti despre faptul c\u0103 adresa IP real\u0103 a serverului este ascuns\u0103 \u00een spatele norului furnizorului de protec\u021bie, ceea ce face imposibil\u0103 atacarea ei direct. \u00cen nou\u0103 din zece cazuri, atacatorului nu \u00eei va fi greu s\u0103 g\u0103seasc\u0103 adresa IP real\u0103 a serverului sau m\u0103car a re\u021belei furnizorului de hosting pentru a \"opri\" un \u00eentreg data center.<\/p>\n<p><\/p>\n<h3 id=\"kak-deystvuyut-hakery-v-poiskah-realnogo-ip-adresa\">Cum ac\u021bioneaz\u0103 hackerii \u00een c\u0103utarea adresei IP reale<\/h3>\n<p><\/p>\n<p>Sub spoiler - c\u00e2teva metode de c\u0103utare a adresei IP reale (furnizate \u00een scopuri informativ).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 1: C\u0103utare \u00een surse deschise<\/b><\/p>\n<p>C\u0103utarea poate \u00eencepe cu serviciul online<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/\"> Intelligence X<\/a><\/noindex>: acesta caut\u0103 informa\u021bii \u00een darknet, pe platforme de schimb de documente, proceseaz\u0103 date Whois, scurgeri de date publice \u0219i multe alte surse.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/c21ad1de4da970843797ecfaac790770.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Dac\u0103, pe baza unor indicatori (antete HTTP, date Whois etc.), a reu\u0219it s\u0103 determina\u021bi c\u0103 protec\u021bia site-ului este organizat\u0103 prin Cloudflare, c\u0103utarea adresei IP reale poate \u00eencepe de la<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/?did=734ac30d-caa9-4348-94ad-106cd5f940c2\"> la lista<\/a><\/noindex>, care con\u021bine aproximativ 3 milioane de adrese IP ale site-urilor situate \u00een spatele Cloudflare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/7dd9d053df67a5020a0a450f80a719e9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Cu ajutorul certificatului SSL \u0219i a serviciului<noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\"> Censys<\/a><\/noindex> , pute\u021bi g\u0103si multe informa\u021bii utile, inclusiv adresa IP real\u0103 a site-ului. Pentru a crea o interogare pentru resursa dumneavoastr\u0103, accesa\u021bi tab-ul Certificates \u0219i introduce\u021bi:<\/p>\n<p><\/p>\n<p><strong>_parsed.names: numele<em>site-ului AND tags.raw: trusted<\/em><\/strong><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/49861124ca4859d8f8a65b0c45187e00.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pentru a c\u0103uta adrese IP ale serverelor care utilizeaz\u0103 certificat SSL, lista derulant\u0103 va trebui parcurs\u0103 manual cu ajutorul mai multor instrumente (tab-ul \u201eExplore\u201d, apoi alegem \u201eIPv4 Hosts\u201d).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 2: DNS<\/b><\/p>\n<p>C\u0103utarea \u00een istoricul modific\u0103rilor \u00eenregistr\u0103rilor DNS este o metod\u0103 veche \u0219i verificat\u0103. Adresa IP anterioar\u0103 a site-ului poate oferi indicii despre ce tip de hosting (sau ce centru de date) a avut. Printre serviciile online, cele mai u\u0219or de utilizat se num\u0103r\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/viewdns.info\/iphistory\/\">ViewDNS<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\/\">SecurityTrails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Atunci c\u00e2nd se schimb\u0103 set\u0103rile, site-ul nu va folosi imediat adresa IP a furnizorului de cloud sau CDN, ci va func\u021biona direct pentru o perioad\u0103 de timp. \u00cen acest caz, exist\u0103 probabilitatea ca serviciile online de stocare a istoricului schimb\u0103rii adreselor IP s\u0103 con\u021bin\u0103 informa\u021bii despre adresa ini\u021bial\u0103 a site-ului.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/8aef85b97315f67ef857a9fea2c3884c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Dac\u0103 nu exist\u0103 nimic \u00een afar\u0103 de numele vechi al serverului DNS, se pot utiliza utilitare speciale (dig, host sau nslookup) pentru a solicita adresa IP pe baza numelui de domeniu al site-ului, de exemplu:<\/p>\n<p><\/p>\n<p><strong>_dig @numele_vechiului_dns_server numele<em>site-ul<\/em><\/strong><\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 3: email<\/b><\/p>\n<p>Ideea metodei este de a ob\u021bine un e-mail pe adresa ta, utiliz\u00e2nd un formular de contact \/ \u00eenscriere (sau orice alt mod care permite ini\u021bierea trimiterii unui mesaj) \u0219i a verifica anteturile, \u00een special c\u00e2mpul \u201eReceived\u201d.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/582a31569f5274619ab869d1c8a8263a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u00cen antetul e-mailului se afl\u0103 adesea adresa IP real\u0103 a \u00eenregistr\u0103rii MX (serverul de schimb de e-mail), care poate fi un punct de plecare pentru a c\u0103uta alte servere de destina\u021bie.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Instrumente pentru automatizarea c\u0103ut\u0103rii<\/b><\/p>\n<p>Software-ul pentru g\u0103sirea IP-urilor \u00een spatele Cloudflare func\u021bioneaz\u0103 de obicei pe trei sarcini:<\/p>\n<p><\/p>\n<ul>\n<li>scanarea configura\u021biei gre\u0219ite a DNS-ului, folosind DNSDumpster.com;<\/li>\n<li>scanarea bazelor de date Crimeflare.com;<\/li>\n<li>c\u0103utarea subdomeniilor prin metoda brute force pe dic\u021bionare. <\/li>\n<\/ul>\n<p><\/p>\n<p>C\u0103utarea subdomeniilor se dovede\u0219te adesea a fi cea mai eficient\u0103 dintre cele trei - proprietarul site-ului ar fi putut proteja site-ul principal, l\u0103s\u00e2nd subdomeniile s\u0103 func\u021bioneze direct. Pentru verificare, este cel mai simplu s\u0103 folose\u0219ti <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/m0rtem\/CloudFail\">CloudFail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>\u00cen plus, exist\u0103 utilit\u0103\u021bi concepute doar pentru a c\u0103uta subdomenii prin metode brute force \u0219i c\u0103ut\u0103ri \u00een surse deschise, de exemplu: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/aboul3la\/Sublist3r\">Sublist3r<\/a><\/noindex> sau <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/darkoperator\/dnsrecon\">dnsrecon<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Cum se desf\u0103\u0219oar\u0103 c\u0103utarea \u00een practic\u0103<\/b><\/p>\n<p>Ca exemplu, s\u0103 lu\u0103m site-ul seo.com, care folose\u0219te Cloudflare, \u0219i s\u0103-l g\u0103sim cu ajutorul unei servicii cunoscute <noindex><a rel=\"nofollow\" href=\"https:\/\/trends.builtwith.com\/websitelist\/Cloudflare\">builtwith<\/a><\/noindex> (care permite at\u00e2t determinarea tehnologiilor \/ motoarelor \/ CMS-urilor pe baza c\u0103rora func\u021bioneaz\u0103 site-ul, c\u00e2t \u0219i, invers - c\u0103utarea site-urilor pe baza tehnologiilor utilizate). <\/p>\n<p><\/p>\n<p>C\u00e2nd accesa\u021bi tab-ul \u201eIPv4 Hosts\u201d, serviciul va afi\u0219a o list\u0103 de gazde care utilizeaz\u0103 certificatul. Pentru a g\u0103si ceea ce ave\u021bi nevoie, c\u0103uta\u021bi adresa IP cu portul 443 deschis. Dac\u0103 aceasta redirec\u021bioneaz\u0103 c\u0103tre site-ul dorit, atunci sarcina este finalizat\u0103; \u00een caz contrar, trebuie s\u0103 ad\u0103uga\u021bi \u00een header-ul \u201eHost\u201d al cererii HTTP numele de domeniu al site-ului (de exemplu, *curl -H \"Host: nume_site\" *).<em><noindex><a rel=\"nofollow\" href=\"https:\/\/IP_adres\u0103\">https:\/\/IP_adres\u0103<\/a><\/noindex><\/em>).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/9886563fefefdf94f663086ee038a037.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u00cen cazul nostru, c\u0103utarea \u00een baza Censys nu a adus rezultate, continu\u0103m.<\/p>\n<p><\/p>\n<p>Vom efectua c\u0103utarea DNS prin intermediul serviciului<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\"> https:\/\/securitytrails.com\/dns-trails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/e762727ac47c4f4bb705d5518f224ffd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Parcurg\u00e2nd adresele men\u021bionate \u00een listele serverelor DNS cu ajutorul utilitarului CloudFail, g\u0103sim resurse func\u021bionale. Rezultatul va fi gata \u00een c\u00e2teva secunde.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/3625eeafe5a0e8ea411ebab1ddd32fd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Folosind doar datele publice \u0219i instrumente simple, am stabilit adresa IP real\u0103 a serverului web. Restul este doar o chestiune de tehnic\u0103 pentru atacator.<\/p>\n<p><\/p>\n<p>S\u0103 ne \u00eentoarcem la alegerea furnizorului de hosting. Pentru a evalua utilitatea serviciului pentru client, s\u0103 examin\u0103m posibilele metode de protec\u021bie \u00eempotriva atacurilor DDoS.<\/p>\n<p><\/p>\n<h3 id=\"kak-hosting-provayder-stroit-svoyu-zaschitu\">Cum \u00ee\u0219i construie\u0219te furnizorul de hosting protec\u021bia<\/h3>\n<p><\/p>\n<ol>\n<li>Un sistem propriu de protec\u021bie cu echipamente de filtrare (figura 2).<br \/>\nNecesit\u0103:<br \/>\n1.1. Echipament pentru filtrarea traficului \u0219i licen\u021be software;<br \/>\n1.2. Speciali\u0219ti angaja\u021bi pentru \u00eentre\u021binerea \u0219i operarea acestuia;<br \/>\n1.3. Canale de acces la internet, suficiente pentru a face fa\u021b\u0103 atacurilor;<br \/>\n1.4. O l\u0103\u021bime de band\u0103 prepl\u0103tit\u0103 semnificativ\u0103 pentru a suporta traficul \u201ede gunoi\u201d.<br \/>\n<img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/c6fe101febc11741280a4f8a37121cd2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 2. Sistemul propriu de protec\u021bie al furnizorului de hosting<\/em><br \/>\nDac\u0103 privim sistemul descris ca un mijloc de protec\u021bie \u00eempotriva atacurilor DDoS moderne de sute de Gbps, un astfel de sistem va costa foarte mul\u021bi bani. Are furnizorul de hosting o astfel de protec\u021bie? Este el dispus s\u0103 pl\u0103teasc\u0103 pentru traficul \u201ede gunoi\u201d? Este evident c\u0103 un astfel de model economic este dezavantajos pentru furnizor, dac\u0103 nu sunt prev\u0103zute pl\u0103\u021bi suplimentare \u00een tarife.<\/li>\n<li>Reverse Proxy (numai pentru site-uri web \u0219i anumite aplica\u021bii). \u00cen ciuda unor <noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/manual\/category\/udalennaya-zashita-sajtov#110\">avantaje<\/a><\/noindex>, furnizorul nu garanteaz\u0103 protec\u021bie \u00eempotriva atacurilor DDoS directe (vezi figura 1). Furnizorii de hosting adesea ofer\u0103 aceast\u0103 solu\u021bie ca pe o panacee, transfer\u00e2nd responsabilitatea c\u0103tre furnizorul de protec\u021bie.<\/li>\n<li>Serviciile unui furnizor de cloud specializat (utilizarea re\u021belei sale de filtrare) pentru protec\u021bia \u00eempotriva atacurilor DDoS la toate nivelurile OSI (figura 3).<br \/>\n<img decoding=\"async\" alt=\"Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate\" src=\"\/wp-content\/uploads\/2020\/09\/446b8deca30efd73f4768a4ba41e2c47.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 3. Protec\u021bie complex\u0103 \u00eempotriva atacurilor DDoS cu ajutorul unui furnizor specializat<\/em><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/network-protection\">Solu\u021bie<\/a><\/noindex> implic\u0103 o integrare profund\u0103 \u0219i un nivel \u00eenalt de competen\u021b\u0103 tehnic\u0103 din partea ambelor p\u0103r\u021bi. Transferul serviciilor de filtrare a traficului \u00een outsourcing permite furnizorului de hosting s\u0103 reduc\u0103 costul serviciilor adi\u021bionale pentru client.<\/li>\n<\/ol>\n<p><\/p>\n<p><strong>Important!<\/strong> Cu c\u00e2t se vor descrie mai detaliat specifica\u021biile tehnice ale serviciului oferit, cu at\u00e2t vor fi mai multe \u0219anse de a solicita respectarea acestora sau compensa\u021bii \u00een caz de \u00eentreruperi.<\/p>\n<p><\/p>\n<p>Pe l\u00e2ng\u0103 cele trei metode principale, exist\u0103 multe combina\u021bii \u0219i variante. Clientului, \u00een alegerea hostingului, \u00eei este important s\u0103-\u0219i aminteasc\u0103 c\u0103 decizia va influen\u021ba nu doar dimensiunea atacurilor garantat blocate \u0219i acurate\u021bea filtr\u0103rii, ci \u0219i viteza de reac\u021bie, precum \u0219i gradul de informare (lista atacurilor blocate, statistica general\u0103 etc.).<\/p>\n<p><\/p>\n<p>Aminti\u021bi-v\u0103 c\u0103 doar c\u00e2\u021biva furnizori de hosting din lume pot asigura un nivel acceptabil de protec\u021bie pe cont propriu; \u00een celelalte cazuri, cooperarea \u0219i competen\u021ba tehnic\u0103 sunt esen\u021biale. Astfel, \u00een\u021belegerea principiilor de baz\u0103 ale organiz\u0103rii ap\u0103r\u0103rii \u00eempotriva atacurilor DDoS va permite proprietarului site-ului s\u0103 nu cad\u0103 \u00een capcanele de marketing \u0219i s\u0103 nu cumpere \u00abpisica \u00een sac\u00bb.<\/p>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ddosguard\/blog\/520302\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2020 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e DDoS-\u0430\u0442\u0430\u043a \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 65% \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u00ab\u043d\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u00ab\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u00bb \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u0431\u043b\u043e\u0433\u043e\u0432, \u0421\u041c\u0418. \u041a\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0445\u043e\u0441\u0442\u0438\u043d\u0433? \u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u043c \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438? [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hosting cu protec\u021bie complet\u0103 \u00eempotriva atacurilor DDoS \u2013 mit sau realitate | ProHoster","description":"\u00cen primele dou\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-27T05:42:43+00:00","article:modified_time":"2020-09-27T05:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:00:57","updated":"2022-09-27 17:53:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=95258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/95258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/95259"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=95258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=95258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=95258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}