{"id":32724,"date":"2019-10-31T21:48:35","date_gmt":"2019-10-31T18:48:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\/"},"modified":"2019-10-31T21:48:35","modified_gmt":"2019-10-31T18:48:35","slug":"chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","title":{"rendered":"\u010co je \u010do a kto je kto na trhu ochrany pred DDoS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u201eChlapec, ktor\u00fd n\u00e1m robil webov\u00fa str\u00e1nku, u\u017e nastavil ochranu proti DDoS.\u201c
\n\u201eVe\u010f m\u00e1me ochranu proti DDoS, pre\u010do padol web?\u201c
\n\u201eKo\u013eko chce Qrator?\u201c<\/p>\n

Aby ste mohli adekv\u00e1tne odpoveda\u0165 na tak\u00e9to ot\u00e1zky od z\u00e1kazn\u00edkov\/nadriaden\u00fdch, je dobr\u00e9 vedie\u0165, \u010do sa skr\u00fdva za v\u00fdrazom \u201eochrana proti DDoS\u201c. V\u00fdber slu\u017eieb na ochranu sk\u00f4r pripom\u00edna v\u00fdber lieku lek\u00e1rom, ne\u017e v\u00fdber stola v IKEA.<\/p>\n

Prev\u00e1dzkujem webov\u00e9 str\u00e1nky u\u017e 11 rokov, pre\u017eil som stovky \u00fatokov na slu\u017eby, ktor\u00e9 spravujem, a teraz v\u00e1m trochu pribl\u00ed\u017eim vn\u00fatorn\u00fa logiku ochrany.
\n\"\u010co<\/a><\/noindex>
\nPravideln\u00e9 \u00fatoky. 350k po\u017eiadaviek celkom, 52k po\u017eiadaviek legit\u00edmnych.<\/i>
\n<\/a><\/noindex>
\nPrv\u00e9 \u00fatoky sa objavili prakticky s\u00fa\u010dasne s internetom. DDoS ako jav sa stal masov\u00fdm od konca 2000-tych rokov (pozrite sa na www.cloudflare.com\/learning\/ddos\/famous-ddos-attacks<\/noindex>).
\nOd roku 2015-2016 takmer v\u0161etci poskytovatelia hostingu nasadili ochranu proti DDoS \u00fatokom, ako aj v\u00e4\u010d\u0161ina v\u00fdznamn\u00fdch webov v konkuren\u010dn\u00fdch oblastiach (urobte whois pod\u013ea IP webov eldorado.ru, leroymerlin.ru, tilda.ws, uvid\u00edte siete oper\u00e1torov ochrany).<\/p>\n

Ak pred 10-20 rokmi bolo mo\u017en\u00e9 v\u00e4\u010d\u0161inu \u00fatokov odrazi\u0165 priamo na serveri (pre\u010d\u00edtajte si odpor\u00fa\u010dania syst\u00e9mov\u00e9ho administr\u00e1tora Lenta.ru Maxim Moschkova z 90-tych rokov: lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10<\/a><\/noindex>), teraz s\u00fa \u00falohy na ochranu zlo\u017eitej\u0161ie.<\/p>\n

Typy DDoS \u00fatokov z poh\u013eadu v\u00fdberu oper\u00e1tora ochrany<\/h2>\n

\u00datoky na \u00farovni L3 \/ L4 (pod\u013ea modelu OSI)<\/h4>\n

\u2014 UDP flood z botnetu (priamo zo infikovan\u00fdch zariaden\u00ed sa na napadnut\u00fa slu\u017ebu posiela mno\u017estvo po\u017eiadaviek, servery zab\u00fachaj\u00fa kan\u00e1l);
\n \u2014 DNS\/NTP\/et cetera amplification (z infikovan\u00fdch zariaden\u00ed sa posiela mno\u017estvo po\u017eiadaviek na zranite\u013en\u00e9 DNS\/NTP\/et cetera, adresa odosielate\u013ea je fal\u0161ovan\u00e1, z\u00e1plava paketov s odpove\u010fami na po\u017eiadavky zaplav\u00ed kan\u00e1l toho, koho napadaj\u00fa; takto prebiehaj\u00fa najmasovej\u0161ie \u00fatoky v modernej internetovej sf\u00e9re);
\n \u2014 SYN \/ ACK flood (na napadnut\u00e9 servery sa posiela mno\u017estvo po\u017eiadaviek na nadviazanie spojenia, d\u00f4jde k preplneniu fronty spojen\u00ed);
\n \u2014 \u00fatoky s fragment\u00e1ciou paketov, ping of death, ping flood (pros\u00edm, vygooglite si to);
\n \u2014 at\u010f.<\/p>\n

Tieto \u00fatoky maj\u00fa za cie\u013e \u201ezaplavit\u201c kan\u00e1l servera alebo \u201ezabi\u0165\u201c jeho schopnos\u0165 prij\u00edma\u0165 nov\u00fd prenos.
\nAj ke\u010f sa SYN\/ACK flood a amplifik\u00e1cia ve\u013emi od seba l\u00ed\u0161ia, mnoh\u00e9 firmy bojuj\u00fa proti nim rovnako dobre. Probl\u00e9my vznikaj\u00fa s \u00fatokmi z nasleduj\u00facej skupiny.<\/p>\n

\u00datoky na L7 (\u00farove\u0148 aplik\u00e1cie)<\/h4>\n

\u2014 http flood (ak sa \u00fato\u010d\u00ed na webov\u00fa str\u00e1nku alebo nejak\u00e9 http API);
\n \u2014 \u00fatok na zranite\u013en\u00e9 \u010dasti webu (ktor\u00e9 nemaj\u00fa cache, ve\u013emi za\u0165a\u017euj\u00fa server at\u010f.).<\/p>\n

Cie\u013eom je prin\u00fati\u0165 server \u201e\u0165a\u017eko pracova\u0165\u201c, spracov\u00e1va\u0165 mnoho \u201eakoby skuto\u010dn\u00fdch po\u017eiadaviek\u201c a zosta\u0165 bez prostriedkov na naozajstn\u00e9 po\u017eiadavky.<\/p>\n

Aj ke\u010f existuj\u00fa aj in\u00e9 \u00fatoky, tieto s\u00fa najbe\u017enej\u0161ie.<\/p>\n

Z\u00e1va\u017en\u00e9 \u00fatoky na \u00farovni L7 s\u00fa vytv\u00e1ran\u00e9 unik\u00e1tnym sp\u00f4sobom pre ka\u017ed\u00fd nap\u00e1dan\u00fd projekt.<\/p>\n

Pre\u010do 2 skupiny?<\/b>
\nPreto\u017ee je ve\u013ea t\u00fdch, ktor\u00ed dok\u00e1\u017eu dobre odr\u00e1\u017ea\u0165 \u00fatoky na \u00farovni L3 \/ L4, ale bu\u010f sa v\u00f4bec nezap\u00e1jaj\u00fa do ochrany na \u00farovni aplik\u00e1cie (L7), alebo zatia\u013e s nimi zvl\u00e1daj\u00fa slab\u0161ie alternat\u00edvy.<\/p>\n

Kto je kto na trhu ochrany pred DDoS<\/h2>\n

\n(m\u00f4j osobn\u00fd n\u00e1zor)<\/p>\n

Ochrana na \u00farovni L3\/L4<\/h4>\n

Na odr\u00e1\u017eanie \u00fatokov s amplifik\u00e1ciou (\"pre\u0165a\u017eenie\" serverov\u00e9ho kan\u00e1la) sta\u010d\u00ed \u0161irokop\u00e1smov\u00e9 pripojenie (mnoh\u00e9 z ochr\u00e1n s\u00fa pripojen\u00e9 k v\u00e4\u010d\u0161ine ve\u013ek\u00fdch p\u00e1te\u0159n\u00fdch poskytovate\u013eov v Rusku a disponuj\u00fa kapacitou teoreticky nad 1 Tbps). Nezab\u00fadajme, \u017ee ve\u013emi zriedkav\u00e9 \u00fatoky s amplifik\u00e1ciou trvaj\u00fa dlh\u0161ie ako hodinu. Ak ste Spamhaus a v\u0161etci v\u00e1s nemaj\u00fa radi \u2014 \u00e1no, m\u00f4\u017eu sa sna\u017ei\u0165 polo\u017ei\u0165 kan\u00e1ly na nieko\u013eko dn\u00ed aj s rizikom pre \u010fal\u0161ie pre\u017eitie pou\u017e\u00edvan\u00e9ho svetov\u00e9ho botnetu. Ak m\u00e1te len internetov\u00fd obchod, aj ke\u010f je to mvideo.ru \u2014 1 Tbps po\u010das nieko\u013ek\u00fdch dn\u00ed neuvid\u00edte ve\u013emi skoro (d\u00fafam).<\/p>\n

Na odr\u00e1\u017eanie \u00fatokov so SYN\/ACK flood, fragment\u00e1ciou paketov at\u010f. s\u00fa potrebn\u00e9 zariadenia alebo softv\u00e9r na detekciu a odseknutie tak\u00fdchto \u00fatokov.
\nTak\u00e9to zariadenia vyr\u00e1ba mnoho spolo\u010dnost\u00ed (Arbor, existuj\u00fa rie\u0161enia od Cisco, Huawei, softv\u00e9rov\u00e9 implement\u00e1cie od Wanguard a podobne), mnoh\u00ed p\u00e1te\u0159n\u00ed oper\u00e1tori u\u017e ich nain\u0161talovali a pred\u00e1vaj\u00fa slu\u017eby ochrany pred DDoS (viem o in\u0161tal\u00e1ci\u00e1ch u Rostelekomu, Megafonu, TTK, MTS, v podstate v\u0161etci ve\u013ek\u00ed poskytovatelia, to ist\u00e9 robia hosteri so svojou ochranou a-la OVH.com, Hetzner.de, s ochranou na ihor.ru som sa s\u00e1m stretol). Niektor\u00e9 firmy vyv\u00edjaj\u00fa svoje softv\u00e9rov\u00e9 rie\u0161enia (technol\u00f3gie ako DPDK umo\u017e\u0148uj\u00fa spracov\u00e1va\u0165 traffic v desiatkach gigabitov na jednom fyzickom x86 zariaden\u00ed).<\/p>\n

Zo zn\u00e1mych hr\u00e1\u010dov dok\u00e1\u017eu \u00fa\u010dinne br\u00e1ni\u0165 L3\/L4 DDoS \u00fatokom v\u0161etci. Moment\u00e1lne nem\u00f4\u017eem poveda\u0165, kto m\u00e1 v\u00e4\u010d\u0161iu maxim\u00e1lnu kapacitu kan\u00e1la (to s\u00fa insider inform\u00e1cie), ale zvy\u010dajne to nie je a\u017e tak\u00e9 d\u00f4le\u017eit\u00e9, a rozdiel je len v tom, ako r\u00fdchlo sa ochrana aktivuje (okam\u017eite alebo po nieko\u013ek\u00fdch min\u00fatach v\u00fdpadku projektu, ako napr\u00edklad v Hetzner).
\nOt\u00e1zka je, ako kvalitne sa to rob\u00ed: \u00fatok s amplifik\u00e1ciou sa d\u00e1 odrazi\u0165 zablokovan\u00edm prenosu z kraj\u00edn s najv\u00e4\u010d\u0161\u00edm mno\u017estvom \u0161kodliv\u00e9ho prenosu, alebo sa d\u00e1 preferova\u0165 len skuto\u010dne nadbyto\u010dn\u00fd prenos.
\nZ m\u00f4jho sk\u00fasenosti v\u0161ak v\u0161etci v\u00e1\u017eni hr\u00e1\u010di na trhu s t\u00fdm nemaj\u00fa probl\u00e9my: Qrator, DDoS-Guard, Kaspersky, G-Core Labs (b\u00fdval\u00fd SkyParkCDN), ServicePipe, Stormwall, Voxility, at\u010f.
\nNes\u00fahlasil som s ochranou od oper\u00e1torov ako je Rostelecom, Megafon, TTK, Beeline, z recenzi\u00ed kolegov sa zd\u00e1, \u017ee tieto slu\u017eby poskytuj\u00fa dos\u0165 kvalitne, ale zatia\u013e sa ob\u010das prejavuje nedostatok sk\u00fasenost\u00ed: niekedy je potrebn\u00e9 nie\u010do doladi\u0165 cez podporu oper\u00e1tora ochrany.
\nNiektor\u00ed oper\u00e1tori maj\u00fa samostatn\u00fa slu\u017ebu 'ochrana pred \u00fatokmi na \u00farovni L3\/L4', alebo 'ochrana kan\u00e1lov', ktor\u00e1 je omnoho lacnej\u0161ia ako ochrana na v\u0161etk\u00fdch \u00farovniach.<\/p>\n

Ako nie magistr\u00e1lny poskytovate\u013e odr\u00e1\u017ea \u00fatoky v stovk\u00e1ch Gbit, ve\u010f nem\u00e1 vlastn\u00e9 kan\u00e1ly?<\/b>Poskytovate\u013e ochrany sa m\u00f4\u017ee pripoji\u0165 ku ktor\u00e9muko\u013evek z ve\u013ek\u00fdch poskytovate\u013eov a odr\u00e1\u017ea\u0165 \u00fatoky 'na jeho n\u00e1klady'. Za kan\u00e1l sa bude musie\u0165 plati\u0165, ale v\u0161etky tieto stovky Gbit nebud\u00fa v\u017edy vy\u017eadovan\u00e9, existuj\u00fa mo\u017enosti na zna\u010dn\u00e9 zn\u00ed\u017eenie n\u00e1kladov na kan\u00e1ly v takom pr\u00edpade, tak\u017ee sch\u00e9ma zost\u00e1va funk\u010dn\u00e1.
\n\"\u010co<\/a><\/noindex>
\nTak\u00e9to spr\u00e1vy som pravidelne dost\u00e1val od vy\u0161\u0161\u00edch L3\/L4 ochrany, zatia\u013e \u010do som podporoval syst\u00e9my hostingov\u00e9ho poskytovate\u013ea.<\/i><\/p>\n

Ochrana na \u00farovni L7 (\u00farove\u0148 aplik\u00e1cie)<\/h4>\n

\u00datoky na \u00farovni L7 (\u00farove\u0148 aplik\u00e1cie) stabilne a kvalitne dok\u00e1\u017eu odrazi\u0165 len jednotky.
\nM\u00e1m sk\u00fasenosti z re\u00e1lneho, pomerne ve\u013ek\u00e9ho rozsahu s
\n \u2014 Qrator.net;
\n \u2014 DDoS-Guard;
\n \u2014 G-Core Labs;
\n \u2014 Kaspersky.<\/p>\n

\u00da\u010dtuj\u00fa si poplatok za ka\u017ed\u00fd megabit \u010dist\u00e9ho prenosu, megabit stoj\u00ed okolo nieko\u013ek\u00fdch tis\u00edc rub\u013eov. Ak m\u00e1te aspo\u0148 100 Mbit \u010dist\u00e9ho prenosu \u2014 no fuj. Ochrana bude ve\u013emi drah\u00e1. M\u00f4\u017eem v nasleduj\u00facich \u010dl\u00e1nkoch poveda\u0165, ako navrhova\u0165 aplik\u00e1cie, aby sa ve\u013emi dobre u\u0161etrilo na kapacite kan\u00e1lov ochrany.
\nSkuto\u010dn\u00fd \u201ekr\u00e1\u013e hory\u201c \u2014 Qrator.net, ostatn\u00ed za nimi zaost\u00e1vaj\u00fa. Qrator je zatia\u013e jedin\u00fd v mojej praxi, kto poskytuje takmer nulov\u00e9 percento falo\u0161n\u00fdch spusten\u00ed, ale za to s\u00fa nieko\u013ekokr\u00e1t drah\u0161\u00ed ako ostatn\u00ed hr\u00e1\u010di na trhu.<\/p>\n

In\u00ed oper\u00e1tori tie\u017e poskytuj\u00fa kvalitn\u00fa a stabiln\u00fa ochranu. Mnoh\u00e9 slu\u017eby, ktor\u00e9 podporujeme (vr\u00e1tane ve\u013emi zn\u00e1mych v krajine!) s\u00fa pod ochranou DDoS-Guard, G-Core Labs a s\u00fa ve\u013emi spokojn\u00ed s dosiahnut\u00fdmi v\u00fdsledkami.
\n\"\u010co<\/a><\/noindex>
\n\u00datoky odrazen\u00e9 Qratorom<\/i><\/p>\n

Existuje tie\u017e sk\u00fasenos\u0165 s men\u0161\u00edmi oper\u00e1tormi ochrany, ako s\u00fa cloud-shield.ru, ddosa.net, tis\u00edce z nich. Ur\u010dite neodporu\u010d\u00edm odporu\u010di\u0165, preto\u017ee sk\u00fasenost\u00ed nie je ve\u013emi ve\u013ea, poviem o princ\u00edpoch ich pr\u00e1ce. Cena ochrany je u nich \u010dasto o 1-2 poriadky ni\u017e\u0161ia ako u ve\u013ek\u00fdch hr\u00e1\u010dov. Zvy\u010dajne kupuj\u00fa slu\u017ebu \u010diasto\u010dnej ochrany (L3\/L4) od niekoho z v\u00e4\u010d\u0161\u00edch hr\u00e1\u010dov + robia vlastn\u00fa ochranu pred \u00fatokmi na vy\u0161\u0161\u00edch \u00farovniach. To m\u00f4\u017ee by\u0165 celkom efekt\u00edvne + m\u00f4\u017eete z\u00edska\u0165 dobr\u00fd servis za menej pe\u0148az\u00ed, ale s\u00fa to predsa len mal\u00e9 firmy s mal\u00fdm person\u00e1lom, pros\u00edm, majte to na pam\u00e4ti.<\/p>\n

Ak\u00e1 je zlo\u017eitost odr\u00e1\u017eania \u00fatokov na \u00farovni L7?<\/h4>\n

V\u0161etky aplik\u00e1cie s\u00fa jedine\u010dn\u00e9 a je potrebn\u00e9 povo\u013eova\u0165 pre nich prospe\u0161n\u00fd traffic a blokova\u0165 \u0161kodliv\u00fd. Ur\u010dite odfiltrova\u0165 bota sa nie v\u017edy podar\u00ed, a preto treba pou\u017ei\u0165 ve\u013ea, naozaj VE\u013dA stup\u0148ov \u010distenia trafficu.<\/p>\n

Kedysi sta\u010dil modul nginx-testcookie (https:\/\/github.com\/kyprizel\/testcookie-nginx-module<\/a><\/noindex>), a ten st\u00e1le sta\u010d\u00ed na odr\u00e1\u017eanie ve\u013ek\u00e9ho po\u010dtu \u00fatokov. Ke\u010f som pracoval v hostingovej oblasti, L7 ochranu som budoval pr\u00e1ve na nginx-testcookie.
\nBohu\u017eia\u013e, \u00fatoky sa stali zlo\u017eitej\u0161\u00edmi. testcookie pou\u017e\u00edva kontroly bota na b\u00e1ze JS, a mnoh\u00e9 modern\u00e9 boty ich dok\u00e1\u017eu \u00faspe\u0161ne ob\u00eds\u0165.<\/p>\n

\u00dato\u010dn\u00e9 botnety s\u00fa tie\u017e jedine\u010dn\u00e9 a treba bra\u0165 do \u00favahy osobitosti ka\u017ed\u00e9ho ve\u013ek\u00e9ho botnetu.
\nAmplifik\u00e1cia, priamy flood z botnetu, filtr\u00e1cia trafficu z r\u00f4znych kraj\u00edn (r\u00f4zna filtr\u00e1cia pre r\u00f4zne krajiny), SYN\/ACK flood, fragment\u00e1cia paketov, ICMP, http flood, pri\u010dom na \u00farovni aplik\u00e1cie\/http je mo\u017en\u00e9 vymyslie\u0165 neobmedzen\u00e9 mno\u017estvo r\u00f4znych \u00fatokov.
\nV s\u00fahrne na \u00farovni ochrany kan\u00e1lov, \u0161pecializovan\u00e9ho vybavenia na \u010distenie trafficu, \u0161peci\u00e1lneho softv\u00e9ru, dodato\u010dn\u00fdch nastaven\u00ed filtrovania pre ka\u017ed\u00e9ho klienta m\u00f4\u017ee by\u0165 desiatky a stovky \u00farovn\u00ed filtrovania.
\nAby ste s t\u00fdmto spr\u00e1vne manipulovali a spr\u00e1vne prisp\u00f4sobili nastavenia filtrovania r\u00f4znym pou\u017e\u00edvate\u013eom, potrebujete ve\u013ea sk\u00fasenost\u00ed a kvalifikovan\u00fdch odborn\u00edkov. Aj ve\u013ek\u00fd poskytovate\u013e, ktor\u00fd sa rozhodol pon\u00faka\u0165 ochrann\u00e9 slu\u017eby, nem\u00f4\u017ee len \u201ezmietnu\u0165 probl\u00e9m peniazmi\u201c: sk\u00fasenosti sa musia nadobudn\u00fa\u0165 na le\u017eiacich str\u00e1nkach a falo\u0161n\u00fdch sp\u00fa\u0161\u0165a\u010doch na legit\u00edmnom trafe.
\nPre ochrann\u00e9ho oper\u00e1tora neexistuje tla\u010didlo \u201eodrazi\u0165 DDoS\u201c, existuje ve\u013ek\u00e9 mno\u017estvo n\u00e1strojov, ktor\u00e9 je potrebn\u00e9 vedie\u0165 pou\u017e\u00edva\u0165.<\/p>\n

A e\u0161te jeden bonusov\u00fd pr\u00edklad.
\n\"\u010co<\/a><\/noindex>
\nServer bez ochrany bol zablokovan\u00fd hostite\u013eom po\u010das \u00fatoku s kapacitou 600 Mb\/s.<\/i>
\n(\u201eZmiznutie\u201c trafa nie je vidite\u013en\u00e9, preto\u017ee bol napadnut\u00fd iba 1 web, na \u010das ho odstr\u00e1nili zo servera a blokovanie bolo zru\u0161en\u00e9 za hodinu).<\/i>
\n\"\u010co<\/a><\/noindex>
\nTento server je pod ochranou. \u00dato\u010dn\u00edci \u201esa vzdali\u201c po 24 hodin\u00e1ch odrazen\u00e9ho \u00fatoku. Samotn\u00fd \u00fatok sa uk\u00e1zal ako nie naj\u0165a\u017e\u0161\u00ed.<\/i><\/p>\n

\u00datok a ochrana L3\/L4 s\u00fa viac-menej trivi\u00e1lne, vo v\u00e4\u010d\u0161ine z\u00e1visia od \u0161\u00edrky kan\u00e1lov, algoritmov detekcie a filtrovania \u00fatokov.
\n\u00datoky L7 s\u00fa zlo\u017eitej\u0161ie a origin\u00e1lnej\u0161ie, z\u00e1visia od napadnut\u00e9ho aplik\u00e1cie, schopnost\u00ed a fant\u00e1zie \u00fato\u010dn\u00edkov. Ochrana pred nimi si vy\u017eaduje ve\u013ea vedomost\u00ed a sk\u00fasenost\u00ed, pri\u010dom v\u00fdsledok m\u00f4\u017ee pr\u00eds\u0165 s oneskoren\u00edm a nemus\u00ed by\u0165 zaru\u010den\u00fd. K\u00fdm Google nevymysl\u00ed \u010fal\u0161iu neur\u00f3nov\u00fa sie\u0165 na ochranu.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32724","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u010co je \u010do a kto je kto na trhu ochrany pred DDoS | ProHoster","description":"\u201eChlapec, ktor\u00fd n\u00e1m robil web, u\u017e nastavil ochranu pred DDoS.\u201c \u201eVe\u010f m\u00e1me ochranu pred DDoS, pre\u010do web spadol?\u201c \u201eKo\u013eko, ko\u013eko tis\u00edc \u017eiada Qrator?\u201c Aby sme mohli spr\u00e1vne odpoveda\u0165 na tak\u00e9to ot\u00e1zky.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster","og:description":"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:35+00:00","article:modified_time":"2019-10-31T18:48:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 12:16:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:53:25","updated":"2026-01-21 12:16:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=32724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/32724\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/24508"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=32724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=32724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=32724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}