{"id":95220,"date":"2020-09-26T19:42:34","date_gmt":"2020-09-26T17:42:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya"},"modified":"2020-09-26T19:42:34","modified_gmt":"2020-09-26T17:42:34","slug":"postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya","title":{"rendered":"Budovanie sie\u0165ovej infra\u0161trukt\u00fary na b\u00e1ze Nebula. \u010cas\u0165 1 \u2014 \u00falohy a rie\u0161enia","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Budovanie sie\u0165ovej infra\u0161trukt\u00fary na b\u00e1ze Nebula. \u010cas\u0165 1 \u2014 \u00falohy a rie\u0161enia\" src=\"\/wp-content\/uploads\/2020\/09\/00918e3fa2c8734f30983f6591f4b84a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>V \u010dl\u00e1nku sa budeme zaobera\u0165 probl\u00e9mami organiz\u00e1cie sie\u0165ovej infra\u0161trukt\u00fary tradi\u010dn\u00fdm sp\u00f4sobom a met\u00f3dami rie\u0161enia t\u00fdchto probl\u00e9mov pomocou cloudov\u00fdch technol\u00f3gi\u00ed.<\/em><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p><strong>Pre inform\u00e1ciu.<\/strong> Nebula je cloudov\u00e9 prostredie SaaS na vzdialen\u00e9 spravovanie sie\u0165ovej infra\u0161trukt\u00fary. V\u0161etky zariadenia podporuj\u00face Nebula s\u00fa spravovan\u00e9 z cloudu cez bezpe\u010dn\u00e9 pripojenie. Je mo\u017en\u00e9 spravova\u0165 ve\u013ek\u00fa distribu\u010dn\u00fa sie\u0165ov\u00fa infra\u0161trukt\u00faru z jedn\u00e9ho centra bez n\u00e1mahy pri jej vytv\u00e1ran\u00ed.<\/p>\n<p><\/p>\n<h2 id=\"dlya-chego-nuzhen-ocherednoy-oblachnyy-servis\">Na \u010do je potrebn\u00e1 \u010fal\u0161ia cloudov\u00e1 slu\u017eba?<\/h2>\n<p><\/p>\n<p>Hlavn\u00fd probl\u00e9m pri pr\u00e1ci so sie\u0165ovou infra\u0161trukt\u00farou nie je projektovanie siete a n\u00e1kup vybavenia, ani mont\u00e1\u017e do stojana, ale v\u0161etko ostatn\u00e9, \u010do je potrebn\u00e9 s touto sie\u0165ou robi\u0165 \u010falej.<\/p>\n<p><\/p>\n<h3 id=\"set-novaya--zaboty-starye\">Nov\u00e1 sie\u0165 \u2013 star\u00e9 starosti.<\/h3>\n<p><\/p>\n<p>Ke\u010f sa uvedie do prev\u00e1dzky nov\u00fd uzol siete po mont\u00e1\u017ei a pripojen\u00ed zariadenia, za\u010dne sa po\u010diato\u010dn\u00e9 nastavenie. Z poh\u013eadu \"ve\u013ek\u00e9ho vedenia\" \u2013 ni\u010d zlo\u017eit\u00e9: \"Zoberieme pracovn\u00fa dokument\u00e1ciu k projektu a za\u010dneme nastavova\u0165\u2026\" To sa tak kr\u00e1sne hovor\u00ed, ke\u010f s\u00fa v\u0161etky sie\u0165ov\u00e9 prvky umiestnen\u00e9 v jednom d\u00e1tovom centre. Ak s\u00fa v\u0161ak rozpt\u00fdlen\u00e9 po pobo\u010dk\u00e1ch, za\u010dne sa probl\u00e9m s zabezpe\u010den\u00edm vzdialen\u00e9ho pr\u00edstupu. Tak\u00fdto uzavret\u00fd cyklus: aby ste z\u00edskali vzdialen\u00fd pr\u00edstup cez sie\u0165, mus\u00edte nastavi\u0165 sie\u0165ov\u00e9 zariadenie, a na to potrebujete pr\u00edstup cez sie\u0165\u2026<\/p>\n<p><\/p>\n<p>Mus\u00edte prich\u00e1dza\u0165 s r\u00f4znymi sch\u00e9mami, ako sa dosta\u0165 z vy\u0161\u0161ie op\u00edsan\u00e9ho zlo\u017eitosti. Napr\u00edklad, notebook s pr\u00edstupom na Internet cez USB 4G modem sa pripoj\u00ed cez patch k\u00e1bel k nastavovanej sieti. Na tomto notebooku sa sp\u00fa\u0161\u0165a VPN klient a cez neho sa sie\u0165ov\u00fd administr\u00e1tor zo s\u00eddla pok\u00fa\u0161a z\u00edska\u0165 pr\u00edstup k sieti pobo\u010dky. Sch\u00e9ma nie je najjasnej\u0161ia \u2013 aj keby ste priviezli notebook s predt\u00fdm nastaven\u00fdm VPN na vzdialen\u00e9 miesto a po\u017eiadali ho, aby ho zapol, nie je v\u00f4bec ist\u00e9, \u017ee v\u0161etko funguje na prv\u00fdkr\u00e1t. Zvl\u00e1\u0161\u0165 ak ide o in\u00fd regi\u00f3n s in\u00fdm poskytovate\u013eom.<\/p>\n<p><\/p>\n<p>Ukazuje sa, \u017ee najspo\u013eahlivej\u0161\u00ed sp\u00f4sob je ma\u0165 \"na druhom konci vodi\u010da\" dobr\u00e9ho \u0161pecialistu, ktor\u00fd dok\u00e1\u017ee nastavi\u0165 svoju \u010das\u0165 pod\u013ea projektu. Ak tak\u00fd nie je v person\u00e1le pobo\u010dky, zost\u00e1vaj\u00fa mo\u017enosti: bu\u010f outsourcing, alebo slu\u017eobn\u00e1 cesta.<\/p>\n<p><\/p>\n<p>E\u0161te potrebujete monitorovac\u00ed syst\u00e9m. Je potrebn\u00e9 ho nain\u0161talova\u0165, nastavi\u0165 a udr\u017eiava\u0165 (aspo\u0148 sledova\u0165 miesto na disku a pravidelne robi\u0165 z\u00e1lohy). A ktor\u00fd ni\u010d nevie o na\u0161ich zariadeniach, pokia\u013e mu to nepovieme. Na to je potrebn\u00e9 zada\u0165 nastavenia pre v\u0161etky zariadenia a pravidelne sledova\u0165 aktu\u00e1lnos\u0165 z\u00e1znamov.<\/p>\n<p><\/p>\n<p>Skvele, ke\u010f v t\u00edme je svoj \"\u010dlovek-orchester\", ktor\u00fd, okrem \u0161pecifick\u00fdch znalost\u00ed sie\u0165ov\u00e9ho administr\u00e1tora, vie pracova\u0165 so Zabbixom alebo in\u00fdm podobn\u00fdm syst\u00e9mom. V opa\u010dnom pr\u00edpade potrebujeme \u010fal\u0161ieho \u010dloveka do t\u00edmu alebo to prenajmeme na outsourcing.<\/p>\n<p><\/p>\n<p><em><strong>Pozn\u00e1mka.<\/strong> Najtragickej\u0161ie chyby za\u010d\u00ednaj\u00fa slovami: \"\u010co tam je tento Zabbix (Nagios, OpenView a pod.) nastavova\u0165? Teraz ho r\u00fdchlo spust\u00edm a hotovo!\"<\/em><\/p>\n<p><\/p>\n<h3 id=\"ot-vnedreniya-k-ekspluatacii\">Od zavedenia k prev\u00e1dzke<\/h3>\n<p><\/p>\n<p>Zv\u00e1\u017eime konkr\u00e9tny pr\u00edklad.<\/p>\n<p><\/p>\n<p>Obdr\u017eali sme poplachov\u00fa spr\u00e1vu o tom, \u017ee niekde neodpoved\u00e1 pr\u00edstupov\u00fd bod WiFi.<\/p>\n<p><\/p>\n<p>Kde sa nach\u00e1dza?<\/p>\n<p><\/p>\n<p>Samozrejme, dobr\u00fd sie\u0165ov\u00fd administr\u00e1tor m\u00e1 svoj osobn\u00fd adres\u00e1r, v ktorom je v\u0161etko zap\u00edsan\u00e9. Ot\u00e1zky za\u010d\u00ednaj\u00fa, ke\u010f je potrebn\u00e9 zdie\u013ea\u0165 tieto inform\u00e1cie. Napr\u00edklad je potreba okam\u017eite posla\u0165 posla, aby sa na mieste objasnil probl\u00e9m, a na to je potrebn\u00e9 poskytn\u00fa\u0165 nie\u010do ako: \"Pr\u00edstupov\u00fd bod v obchodnom centre na ulici Strojite\u013eov, dom 1, na 3. poschod\u00ed, kancel\u00e1ria N 301 ved\u013ea vstupn\u00fdch dver\u00ed pod stropom.\"<\/p>\n<p><\/p>\n<p>Predpokladajme, \u017ee m\u00e1me \u0161\u0165astie a pr\u00edstupov\u00fd bod je nap\u00e1jan\u00fd cez PoE a prep\u00edna\u010d n\u00e1m umo\u017e\u0148uje ho re\u0161tartova\u0165 na dia\u013eku. Nie je potrebn\u00e9 \u00eds\u0165 tam, ale potrebujeme vzdialen\u00fd pr\u00edstup k prep\u00edna\u010du. Ost\u00e1va nastavi\u0165 preposielanie portov cez PAT na smerova\u010di, porozumie\u0165 VLAN pre pripojenie z vonku a podobne. Je dobr\u00e9, ak je v\u0161etko nastaven\u00e9 vopred. Pr\u00e1ca nemus\u00ed by\u0165 zlo\u017eit\u00e1, ale je potrebn\u00e9 to urobi\u0165.<\/p>\n<p><\/p>\n<p>Tak\u017ee pr\u00edstupov\u00fd bod sme re\u0161tartovali. Nepomohlo to?<\/p>\n<p><\/p>\n<p>Predpokladajme, \u017ee nie\u010do nie je v poriadku s hardv\u00e9rom. Teraz h\u013ead\u00e1me inform\u00e1cie o z\u00e1ruke, za\u010diatku prev\u00e1dzky a in\u00fdch zauj\u00edmav\u00fdch detailoch.<\/p>\n<p><\/p>\n<p>Pokia\u013e ide o WiFi. Pou\u017e\u00edvanie dom\u00e1cej verzie WPA2-PSK, kde je jeden k\u013e\u00fa\u010d pre v\u0161etky zariadenia \u2014 nie je odpor\u00fa\u010dan\u00e9 v podnikovom prostred\u00ed. Po prv\u00e9, jeden k\u013e\u00fa\u010d pre v\u0161etk\u00fdch je jednoducho nezabezpe\u010den\u00fd, po druh\u00e9, ke\u010f jeden zamestnanec od\u00edde, je potrebn\u00e9 zmeni\u0165 tento spolo\u010dn\u00fd k\u013e\u00fa\u010d a znova vykon\u00e1va\u0165 nastavenia na v\u0161etk\u00fdch zariadeniach v\u0161etk\u00fdch pou\u017e\u00edvate\u013eov. Aby sa predi\u0161lo tak\u00fdmto nepr\u00edjemnostiam, existuje WPA2-Enterprise s individu\u00e1lnou autentifik\u00e1ciou pre ka\u017ed\u00e9ho pou\u017e\u00edvate\u013ea. Na to je v\u0161ak potrebn\u00fd RADIUS server \u2014 \u010fal\u0161ia infra\u0161trukt\u00farna jednotka, ktor\u00fa treba kontrolova\u0165, robi\u0165 z\u00e1lohy a podobne.<\/p>\n<p><\/p>\n<p>V\u0161imnite si, \u017ee na ka\u017edom kroku, \u010di u\u017e pri zav\u00e1dzan\u00ed alebo prev\u00e1dzke, sme pou\u017e\u00edvali pomocn\u00e9 syst\u00e9my. To s\u00fa aj notebooky so 'z\u00fa\u017een\u00fdm' pripojen\u00edm na Internet, aj monitorovac\u00ed syst\u00e9m, aj referen\u010dn\u00e1 datab\u00e1za vybavenia, aj RADIUS ako autentifika\u010dn\u00fd syst\u00e9m. Okrem sie\u0165ov\u00fdch zariaden\u00ed je potrebn\u00e9 obsluhova\u0165 aj extern\u00e9 slu\u017eby.<\/p>\n<p><\/p>\n<p>V tak\u00fdchto pr\u00edpadoch m\u00f4\u017eete po\u010du\u0165 radu: \u201eDa\u0165 do cloudu a netr\u00e1pi\u0165 sa\u201c. Ur\u010dite existuje cloudov\u00fd Zabbix, mo\u017eno niekde je cloudov\u00fd RADIUS, a dokonca aj cloudov\u00e1 datab\u00e1za na vedenie zoznamu zariaden\u00ed. Probl\u00e9m je v tom, \u017ee to treba ma\u0165 v\u0161etko 'v jednom bal\u00edku'. A rovnako sa objavuj\u00fa ot\u00e1zky organiz\u00e1cie pr\u00edstupu, prvotn\u00fdch nastaven\u00ed zariaden\u00ed, bezpe\u010dnosti a mnoho \u010fal\u0161\u00edch.<\/p>\n<p><\/p>\n<h2 id=\"kak-eto-vyglyadit-pri-ispolzovanii-nebula\">Ako to vyzer\u00e1 pri pou\u017e\u00edvan\u00ed Nebula?<\/h2>\n<p><\/p>\n<p>Samozrejme, na za\u010diatku 'kloud' ni\u010d nevie ani o na\u0161ich pl\u00e1noch, ani o zak\u00fapenom vybaven\u00ed.<\/p>\n<p><\/p>\n<p>Najprv sa vytvor\u00ed profil organiz\u00e1cie. T.j. cel\u00e1 infra\u0161trukt\u00fara: \u00fastredie a pobo\u010dky sa najprv zaznamen\u00e1 do cloudu. Uved\u00fa sa \u00fadaje, vytvoria sa \u00fa\u010dty na delegovanie opr\u00e1vnen\u00ed.<\/p>\n<p><\/p>\n<p>Zaregistrova\u0165 pou\u017e\u00edvan\u00e9 zariadenia v cloude je mo\u017en\u00e9 dvoma sp\u00f4sobmi: po starom \u2014 jednoducho zap\u00edsa\u0165 s\u00e9riov\u00e9 \u010d\u00edslo pri vyp\u013a\u0148an\u00ed webov\u00e9ho formul\u00e1ra alebo naskenovan\u00edm QR k\u00f3du pomocou mobiln\u00e9ho telef\u00f3nu. V\u0161etko, \u010do potrebujete pre druh\u00fd sp\u00f4sob \u2014 je smartf\u00f3n s kamerou a pr\u00edstupom na Internet, vr\u00e1tane mobiln\u00e9ho poskytovate\u013ea.<\/p>\n<p><\/p>\n<p>Samozrejme, potrebn\u00fa infra\u0161trukt\u00faru na uchov\u00e1vanie inform\u00e1ci\u00ed, ako \u00fa\u010dtovn\u00fdch, tak aj nastaven\u00ed, poskytuje Zyxel Nebula.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Budovanie sie\u0165ovej infra\u0161trukt\u00fary na b\u00e1ze Nebula. \u010cas\u0165 1 \u2014 \u00falohy a rie\u0161enia\" src=\"\/wp-content\/uploads\/2020\/09\/39014b58954c55ba55d24077f481a35c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Obr\u00e1zok 1. Spr\u00e1va bezpe\u010dnosti Nebula Control Center.<\/em><\/p>\n<p><\/p>\n<p>A \u010do s nastaven\u00edm pr\u00edstupu? Otvorenie portov, presmerovanie prenosu cez prich\u00e1dzaj\u00faci br\u00e1nu, to v\u0161etko, \u010do administr\u00e1tori bezpe\u010dnosti l\u00e1skavo naz\u00fdvaj\u00fa: \u201evykopa\u0165 diery\u201c? Na\u0161\u0165astie to v\u0161etko robi\u0165 netreba. Zariadenia riaden\u00e9 Nebulou vytv\u00e1raj\u00fa odch\u00e1dzaj\u00face spojenie. A administr\u00e1tor sa na nastavenie nepripoj\u00ed k samostatn\u00e9mu zariadeniu, ale k cloudu. Nebula p\u00f4sob\u00ed ako sprostredkovate\u013e medzi dvoma spojeniami: so zariaden\u00edm a s po\u010d\u00edta\u010dom sie\u0165ov\u00e9ho administr\u00e1tora. To znamen\u00e1, \u017ee f\u00e1zu s vy\u017eiadavan\u00edm prich\u00e1dzaj\u00faceho administr\u00e1tora mo\u017eno zminimalizova\u0165 alebo \u00faplne vynecha\u0165. A \u017eiadne dodato\u010dn\u00e9 \u201ediery\u201c na firewalle.<\/p>\n<p><\/p>\n<p>A \u010do server RADIUS? Ve\u010f potrebujeme nejak\u00fa centralizovan\u00fa autentifik\u00e1ciu!<\/p>\n<p><\/p>\n<p>A t\u00fato funkciu si tie\u017e berie na plecia N\u0435bula. Autentifik\u00e1cia \u00fa\u010dtov na pr\u00edstup k zariadeniu prebieha cez zabezpe\u010den\u00fa datab\u00e1zu. To v\u00fdrazne u\u013eah\u010duje delegovanie alebo odobratie pr\u00e1v na spr\u00e1vu syst\u00e9mu. Chcete prenies\u0165 pr\u00e1va \u2014 vytvor\u00edme pou\u017e\u00edvate\u013ea, pridel\u00edme rolu. Chcete pr\u00e1va odobrat\u00e9 \u2014 vykon\u00e1me opa\u010dn\u00e9 kroky.<\/p>\n<p><\/p>\n<p>Osobitne treba spomen\u00fa\u0165 WPA2-Enterprise, pre ktor\u00fd je potrebn\u00e1 samostatn\u00e1 autentifika\u010dn\u00e1 slu\u017eba. Zyxel Nebula m\u00e1 svoj vlastn\u00fd analog \u2014 DPPSK, ktor\u00fd umo\u017e\u0148uje pou\u017e\u00edva\u0165 WPA2-PSK s individu\u00e1lnym k\u013e\u00fa\u010dom pre ka\u017ed\u00e9ho pou\u017e\u00edvate\u013ea.<\/p>\n<p><\/p>\n<h2 id=\"neudobnye-voprosy\">\u201eNepohodln\u00e9\u201c ot\u00e1zky<\/h2>\n<p><\/p>\n<p>Ni\u017e\u0161ie sa pok\u00fasime poskytn\u00fa\u0165 odpovede na naj\u00faskokovo\u010dnej\u0161ie ot\u00e1zky, ktor\u00e9 sa \u010dasto klad\u00fa pri vstupe do cloudovej slu\u017eby.<\/p>\n<p><\/p>\n<h3 id=\"a-eto-tochno-bezopasno\">Je to naozaj bezpe\u010dn\u00e9?<\/h3>\n<p><\/p>\n<p>Pri akomko\u013evek delegovan\u00ed kontroly a spr\u00e1vy zohr\u00e1va d\u00f4le\u017eit\u00fa \u00falohu pre zabezpe\u010denie dvoma faktormi: anonymiz\u00e1cia a \u0161ifrovanie.<\/p>\n<p><\/p>\n<p>Pou\u017e\u00edvanie \u0161ifrovania na ochranu prenosu pred cudz\u00edmi o\u010dami je \u010ditate\u013eom viac-menej zn\u00e1me.<\/p>\n<p><\/p>\n<p>Anonymiz\u00e1cia skr\u00fdva pred zamestnancami cloudov\u00e9ho poskytovate\u013ea inform\u00e1cie o majite\u013eovi a zdroji. Osobn\u00e9 inform\u00e1cie s\u00fa odstr\u00e1nen\u00e9 a z\u00e1znamom sa prid\u00e1va \u201ebezo\u010div\u00fd\u201c identifik\u00e1tor. Ani v\u00fdvoj\u00e1r cloudov\u00e9ho softv\u00e9ru, ani administr\u00e1tor spravuj\u00faci cloudov\u00fd syst\u00e9m sa nem\u00f4\u017eu dozvedie\u0165 o majite\u013eovi po\u017eiadaviek. \u201eOdkia\u013e to pri\u0161lo? Koho to m\u00f4\u017ee zauj\u00edma\u0165?\u201c, tak\u00e9 ot\u00e1zky zostan\u00fa bez odpovede. Absencia \u00fadajov o majite\u013eovi a zdroji rob\u00ed insajding bezv\u00fdznamn\u00fdm mrhan\u00edm \u010dasu.<\/p>\n<p><\/p>\n<p>Pokia\u013e porovn\u00e1me tento pr\u00edstup s tradi\u010dnou praxou outsourcingu alebo naj\u00edmania prich\u00e1dzaj\u00faceho administr\u00e1tora, je jasn\u00e9, \u017ee cloudov\u00e9 technol\u00f3gie s\u00fa bezpe\u010dnej\u0161ie. Prich\u00e1dzaj\u00faci IT odborn\u00edk vie o svojej podopieraj\u00facej organiz\u00e1cii dostatok, a m\u00f4\u017ee, \u010di u\u017e vedome alebo nevedome, sp\u00f4sobi\u0165 v\u00fdrazn\u00fa \u0161kodu v oblasti bezpe\u010dnosti. E\u0161te treba vyrie\u0161i\u0165 ot\u00e1zku prepustenia alebo ukon\u010denia zmluvy. Niekedy, okrem zablokovania alebo odstr\u00e1nenia \u00fa\u010dtu, to m\u00f4\u017ee vy\u017eadova\u0165 glob\u00e1lnu zmenu hesiel pre pr\u00edstup k slu\u017eb\u00e1m, ako aj audit v\u0161etk\u00fdch zdrojov na pr\u00edtomnos\u0165 \u201ezabudnut\u00fdch\u201c pr\u00edstupov\u00fdch bodov a mo\u017en\u00fdch \u201ez\u00e1lohov\u201c.<\/p>\n<p><\/p>\n<h3 id=\"naskolko-nebula-dorozhe-ili-deshevle-prihodyaschego-admina\">O ko\u013eko je Nebula drah\u0161ia alebo lacnej\u0161ia ako prich\u00e1dzaj\u00faci administr\u00e1tor?<\/h3>\n<p><\/p>\n<p>V\u0161etko sa spozn\u00e1 porovnan\u00edm. Z\u00e1kladn\u00e9 funkcie Nebula s\u00fa dostupn\u00e9 zdarma. \u010co by mohlo by\u0165 e\u0161te lacnej\u0161ie?<\/p>\n<p><\/p>\n<p>Samozrejme, \u00faplne sa bez sie\u0165ov\u00e9ho administr\u00e1tora alebo osoby, ktor\u00e1 ho nahr\u00e1dza, nezaob\u00eddeme. Ot\u00e1zkou je po\u010det \u013eud\u00ed, ich \u0161pecializ\u00e1cia a rozdelenie po lokalit\u00e1ch.<\/p>\n<p><\/p>\n<p>\u010co sa t\u00fdka platen\u00e9ho roz\u0161\u00edren\u00e9ho servisu, kl\u00e1s\u0165 priamu ot\u00e1zku: je to drah\u0161ie alebo lacnej\u0161ie \u2014 tento pr\u00edstup bude v\u017edy nepresn\u00fd a jednostrann\u00fd. Spr\u00e1vnej\u0161ie bude porovna\u0165 mno\u017estvo faktorov, od pe\u0148az\u00ed na zaplatenie pr\u00e1ce konkr\u00e9tnych odborn\u00edkov a\u017e po n\u00e1klady na zabezpe\u010denie ich interakcie s dod\u00e1vate\u013eskou organiz\u00e1ciou alebo fyzickou osobou: kontrola kvality vykonania, zostavovanie dokument\u00e1cie, udr\u017eiavanie \u00farovne bezpe\u010dnosti a tak \u010falej.<\/p>\n<p><\/p>\n<p>Ak hovor\u00edme o tom, \u010di je v\u00fdhodn\u00e9 alebo nev\u00fdhodn\u00e9 zak\u00fapi\u0165 platen\u00fd bal\u00edk slu\u017eieb (Pro-Pack), pribli\u017en\u00e1 odpove\u010f m\u00f4\u017ee znie\u0165 takto: ak je organiz\u00e1cia mal\u00e1, m\u00f4\u017ee posta\u010dova\u0165 z\u00e1kladn\u00e1 verzia, ak organiz\u00e1cia rastie, m\u00e1 zmysel uva\u017eova\u0165 o Pro-Pack. Rozdiely medzi verziami Zyxel Nebula si m\u00f4\u017eete pozrie\u0165 v tabu\u013eke 1.<\/p>\n<p><\/p>\n<p><em>Tabu\u013eka 1. Rozdiely medzi funk\u010dn\u00fdmi sadami z\u00e1kladnej verzie a verziou Pro-Pack pre Nebula.<\/em><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Budovanie sie\u0165ovej infra\u0161trukt\u00fary na b\u00e1ze Nebula. \u010cas\u0165 1 \u2014 \u00falohy a rie\u0161enia\" src=\"\/wp-content\/uploads\/2020\/09\/0cf50e1b2dbd509c3a8f014ae37323cf.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>To zah\u0155\u0148a roz\u0161\u00edren\u00e9 reporty, audit pou\u017e\u00edvate\u013eov, klonovanie konfigur\u00e1cie a mnoho \u010fal\u0161ieho.<\/p>\n<p><\/p>\n<h3 id=\"a-chto-s-zaschitoy-trafika\">A \u010do ochrana prenosu d\u00e1t?<\/h3>\n<p><\/p>\n<p>Nebula pou\u017e\u00edva protokol <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/NETCONF\">NETCONF<\/a><\/noindex> na zabezpe\u010denie bezpe\u010dnej pr\u00e1ce so sie\u0165ov\u00fdm zariaden\u00edm.<\/p>\n<p><\/p>\n<p>NETCONF m\u00f4\u017ee pracova\u0165 nad nieko\u013ek\u00fdmi transportn\u00fdmi protokolmi:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/Secure_Shell\">SSH<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4742\">RFC 4742<\/a><\/noindex>);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/SOAP\">(mo\u017eno o nie\u010do menej pekn\u00e9). Alebo WebSockets\/JSON (m\u00f4\u017ee by\u0165 najlep\u0161ou vo\u013ebou, ale nesk\u00fa\u0161al som).<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4743\">RFC 4743<\/a><\/noindex>);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/w\/index.php?title=BEEP&amp;action=edit&amp;redlink=1\">BEEP<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4744\">RFC 4744<\/a><\/noindex>);<\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/Transport_Layer_Security\">TLS<\/a><\/noindex> (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc5539\">RFC 5539<\/a><\/noindex>).<\/li>\n<\/ul>\n<p><\/p>\n<p>Ak porovn\u00e1me NETCONF s in\u00fdmi met\u00f3dami, napr\u00edklad s riaden\u00edm cez SNMP \u2014 treba zd\u00f4razni\u0165, \u017ee <strong>NETCONF<\/strong> podporuje odch\u00e1dzaj\u00face TCP pripojenie na prekonanie NAT bari\u00e9ry a pova\u017euje sa za spo\u013eahlivej\u0161\u00ed.<\/p>\n<p><\/p>\n<h3 id=\"chto-s-podderzhkoy-oborudovaniya\">\u010co s podporou hardv\u00e9ru?<\/h3>\n<p><\/p>\n<p>Samozrejme, netreba premie\u0148at serverov\u0148u na zoologick\u00fa z\u00e1hradu s pr\u00edslu\u0161n\u00edkmi vz\u00e1cnych a ohrozen\u00fdch druhov hardv\u00e9ru. Je ve\u013emi \u017eiaduce, aby hardv\u00e9r spojen\u00fd technol\u00f3giou spr\u00e1vy pokr\u00fdval v\u0161etky smerovania: od centr\u00e1lnych prep\u00edna\u010dov po pr\u00edstupov\u00e9 body. In\u017einieri Zyxel sa postarali o tak\u00fato mo\u017enos\u0165. Pod kontrolou Nebula pracuje mno\u017estvo zariaden\u00ed:<\/p>\n<p><\/p>\n<ul>\n<li>centr\u00e1lne prep\u00edna\u010de 10G;<\/li>\n<li>pr\u00edstupov\u00e9 prep\u00edna\u010de;<\/li>\n<li>prep\u00edna\u010de s PoE;<\/li>\n<li>pr\u00edstupov\u00e9 body;<\/li>\n<li>sie\u0165ov\u00e9 br\u00e1ny.<\/li>\n<\/ul>\n<p><\/p>\n<p>Pou\u017eit\u00edm \u0161irokej \u0161k\u00e1ly podporovan\u00fdch zariaden\u00ed je mo\u017en\u00e9 budova\u0165 siete pre r\u00f4zne typy \u00faloh. Toto je obzvl\u00e1\u0161\u0165 relevantn\u00e9 pre spolo\u010dnosti, ktor\u00e9 rast\u00fa nie nahor, ale do \u0161\u00edrky, neust\u00e1le objavuj\u00fa nov\u00e9 plochy na podnikanie.<\/p>\n<p><\/p>\n<h2 id=\"postoyannoe-razvitie\">Trval\u00fd rozvoj<\/h2>\n<p><\/p>\n<p>Sie\u0165ov\u00e9 zariadenia s tradi\u010dnou met\u00f3dou spr\u00e1vy maj\u00fa iba jednu cestu zlep\u0161enia \u2014 zmenu samotn\u00e9ho zariadenia, \u010di u\u017e ide o nov\u00fd firmv\u00e9r alebo dodato\u010dn\u00e9 moduly. V pr\u00edpade Zyxel Nebula existuje dodato\u010dn\u00e1 cesta pre vylep\u0161enia \u2014 cez vylep\u0161enie cloudovej infra\u0161trukt\u00fary. Napr\u00edklad po aktualiz\u00e1cii Nebula Control Center (NCC) na verziu 10.1. (21. septembra 2020) s\u00fa u\u017e\u00edvate\u013eom k dispoz\u00edcii nov\u00e9 mo\u017enosti, tu je nieko\u013eko z nich:<\/p>\n<p><\/p>\n<ul>\n<li>vlastn\u00edk organiz\u00e1cie m\u00f4\u017ee pr\u00e9da\u0165 v\u0161etky pr\u00e1va vlastn\u00edctva in\u00e9mu spr\u00e1vcovi v tej istej organiz\u00e1cii;<\/li>\n<li>nov\u00e1 \u00faloha nazvan\u00e1 \u201eZ\u00e1stupca vlastn\u00edka\u201c, ktor\u00e1 m\u00e1 rovnak\u00e9 pr\u00e1va ako vlastn\u00edk organiz\u00e1cie;<\/li>\n<li>nov\u00e1 funkcia aktualiz\u00e1cie firmv\u00e9ru v rozsahu celej organiz\u00e1cie (funkcia Pro-Pack);<\/li>\n<li>do topol\u00f3gie boli pridan\u00e9 dve nov\u00e9 mo\u017enosti: re\u0161tartovanie zariadenia a zap\u00ednanie a vyp\u00ednanie nap\u00e1jania portu PoE (funkcia Pro-Pack);<\/li>\n<li>podpora nov\u00fdch modelov pr\u00edstupov\u00fdch bodov: WAC500, WAC500H, WAC5302D-Sv2 a NWA1123ACv3;<\/li>\n<li>podpora autentifik\u00e1cie pomocou voucherov s QR k\u00f3dmi (funkcia Pro-Pack).<\/li>\n<\/ul>\n<p><\/p>\n<h2 id=\"poleznye-ssylki\">U\u017eito\u010dn\u00e9 odkazy<\/h2>\n<p><\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/zyxelru\">Telegram chat Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/ru\/ru\/ci_general_20191031_520516.shtml\">F\u00f3rum o zariadeniach Zyxel<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Mnoho u\u017eito\u010dn\u00fdch vide\u00ed na YouTube kan\u00e1li<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zyxel Nebula - jednoduchos\u0165 spr\u00e1vy ako z\u00e1klad \u00faspory<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/library\/assets\/solutions\/nebula\/pdf\/nebula-licensing-table.pdf\">Rozdiel medzi verziami Zyxel Nebula<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Zyxel Nebula a rast spolo\u010dnosti<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.youtube.com\/channel\/UCcNN2UCEz1e49PEaAisN5ow\">Supernov\u00fd cloud Zyxel Nebula - ekonomick\u00e1 cesta k bezpe\u010dnosti?<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.zyxel.com\/library\/assets\/solutions\/nebula\/pdf\/nebula-licensing-table.pdf\">Zyxel Nebula - Mo\u017enosti pre v\u00e1\u0161 biznis<\/a><\/noindex><\/li>\n<\/ol>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zyxel\/blog\/520462\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0439\u0434\u0435\u0442 \u0440\u0435\u0447\u044c \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0438 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0442\u0435\u0445 \u0436\u0435 \u0441\u0430\u043c\u044b\u0445 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439. \u0414\u043b\u044f \u0441\u043f\u0440\u0430\u0432\u043a\u0438. Nebula \u2014 \u043e\u0431\u043b\u0430\u0447\u043d\u0430\u044f \u0441\u0440\u0435\u0434\u0430 SaaS \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. \u0412\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Nebula, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u041c\u043e\u0436\u043d\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u0440\u0443\u043f\u043d\u043e\u0439 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0438\u0437 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95221,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95220","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Nebula. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-26T17:42:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-26T17:42:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Budovanie sie\u0165ovej infra\u0161trukt\u00fary na z\u00e1klade Nebula. \u010cas\u0165 1 - \u00falohy a rie\u0161enia | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 Nebula. \u0427\u0430\u0441\u0442\u044c 1 \u2014 \u0437\u0430\u0434\u0430\u0447\u0438 \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f | ProHoster","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/postroenie-setevoj-infrastruktury-na-baze-nebula-chast-1-zadachi-i-resheniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-26T17:42:34+00:00","article:modified_time":"2020-09-26T17:42:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95220","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:10:35","updated":"2022-10-03 07:30:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/95220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=95220"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/95220\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/95221"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=95220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=95220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=95220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}