{"id":95258,"date":"2020-09-27T07:42:43","date_gmt":"2020-09-27T05:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost"},"modified":"2020-09-27T07:42:43","modified_gmt":"2020-09-27T05:42:43","slug":"hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","title":{"rendered":"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/338fdf28dfed6654cfdad13538de2954.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Po prv\u00fdch dvoch \u0161tvr\u0165rokoch roku 2020 sa po\u010det DDoS \u00fatokov zv\u00fd\u0161il takmer trikr\u00e1t, pri\u010dom 65% z nich s\u00fa primit\u00edvne pokusy o \"za\u0165a\u017eovacie testovanie\", ktor\u00e9 bez probl\u00e9mov \"vypn\u00fa\" bezbrann\u00e9 str\u00e1nky mal\u00fdch online obchodov, f\u00f3r, blogov a m\u00e9di\u00ed.<\/p>\n<p><\/p>\n<p>Ako si vybra\u0165 hosting chr\u00e1nen\u00fd pred DDoS \u00fatokmi? Na \u010do sa zamera\u0165 a na \u010do sa pripravi\u0165, aby ste sa nedostali do nepr\u00edjemnej situ\u00e1cie?<\/p>\n<p><\/p>\n<p>(O\u010dkovanie proti \"siv\u00e9mu\" marketingu)<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dostupnos\u0165 a rozmanitos\u0165 n\u00e1strojov na vykon\u00e1vanie DDoS \u00fatokov n\u00fati vlastn\u00edkov online slu\u017eieb prija\u0165 zodpovedaj\u00face opatrenia na \u010deln\u00e9 hrozbe. O ochrane pred DDoS by ste mali prem\u00fd\u0161\u013ea\u0165 nie len po prvom v\u00fdpadku a ani nie ako o s\u00fa\u010dasti opatren\u00ed na zv\u00fd\u0161enie odolnosti infra\u0161trukt\u00fary, ale u\u017e pri v\u00fdbere miesta na umiestnenie (hostingov\u00e9ho poskytovate\u013ea alebo d\u00e1tov\u00e9ho centra).<\/p>\n<p><\/p>\n<p>DDoS \u00fatoky sa klasifikuj\u00fa pod\u013ea pr\u00edslu\u0161nosti protokolov, ktor\u00fdch zranite\u013enosti s\u00fa zneu\u017e\u00edvan\u00e9, na \u00farovne modelu otvorenej interakcie syst\u00e9mov (OSI):<\/p>\n<p><\/p>\n<ul>\n<li>kan\u00e1lov\u00e1 (L2), <\/li>\n<li>sie\u0165ov\u00e1 (L3), <\/li>\n<li>transportn\u00e1 (L4),<\/li>\n<li>aplik\u00e1tna (L7). <\/li>\n<\/ul>\n<p><\/p>\n<p>Z poh\u013eadu ochrann\u00fdch syst\u00e9mov ich m\u00f4\u017eeme zjednodu\u0161i\u0165 na dve skupiny: \u00fatoky \u00farovne infra\u0161trukt\u00fary (L2-L4) a \u00farovne aplik\u00e1cie (L7). To s\u00favis\u00ed s postupnos\u0165ou vykon\u00e1vania algoritmov na anal\u00fdzu prenosu a v\u00fdpo\u010dtovou zlo\u017eitost\u00ed: \u010d\u00edm hlb\u0161ie sa pozer\u00e1me do IP paketov, t\u00fdm viac v\u00fdpo\u010dtov\u00fdch zdrojov je potrebn\u00fdch.<\/p>\n<p><\/p>\n<p><em>Vo v\u0161eobecnosti je \u00falohou optimaliz\u00e1cie v\u00fdpo\u010dtov pri spracovan\u00ed prenosu v re\u00e1lnom \u010dase t\u00e9mou na samostatn\u00fd cyklus \u010dl\u00e1nkov. A teraz si proste predstavme, \u017ee existuje ur\u010dit\u00fd cloudov\u00fd poskytovate\u013e s podmiene\u010dne neobmedzen\u00fdmi v\u00fdpo\u010dtov\u00fdmi zdrojmi, ktor\u00fd m\u00f4\u017ee poskytn\u00fa\u0165 ochranu str\u00e1nok pred \u00fatokmi na \u00farovni aplik\u00e1ci\u00ed (vr\u00e1tane <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/web\">zadarmo<\/a><\/noindex><\/strong>).<\/em><\/p>\n<p><\/p>\n<h4 id=\"3-glavnyh-voprosa-dlya-opredeleniya-stepeni-zaschischennosti-hostinga-ot-ddos-atak\">3 hlavn\u00e9 ot\u00e1zky na ur\u010denie \u00farovne ochrany hostingu pred DDoS \u00fatokmi<\/h4>\n<p><\/p>\n<p>Pozrime sa na podmienky poskytovania slu\u017eby ochrany pred DDoS \u00fatokmi a Zmluvu o \u00farovni slu\u017eieb (Service Level Agreement, SLA) poskytovate\u013ea hostingu. Nach\u00e1dzaj\u00fa sa v nich odpovede na nasleduj\u00face ot\u00e1zky:<\/p>\n<p><\/p>\n<ul>\n<li><strong>ak\u00e9 technick\u00e9 obmedzenia uv\u00e1dza dod\u00e1vate\u013e slu\u017eby<\/strong>? <\/li>\n<li><strong>\u010do sa stane, ke\u010f objedn\u00e1vate\u013e prekro\u010d\u00ed limity? <\/strong> <\/li>\n<li><strong>ako poskytovate\u013e hostingu buduje ochranu pred DDoS \u00fatokmi (technol\u00f3gie, rie\u0161enia, dod\u00e1vatelia)?<\/strong> <\/li>\n<\/ul>\n<p><\/p>\n<p>Ak ste t\u00fato inform\u00e1ciu nena\u0161li, je to d\u00f4vod na zamyslenie sa nad v\u00e1\u017enos\u0165ou poskytovate\u013ea slu\u017eieb alebo na organiz\u00e1ciu z\u00e1kladnej ochrany pred DDoS (L3-4) vlastn\u00fdmi silami. Napr\u00edklad, objednajte fyzick\u00e9 pripojenie k sieti \u0161pecializovan\u00e9ho poskytovate\u013ea ochrany.<\/p>\n<p><\/p>\n<p><strong>D\u00f4le\u017eit\u00e9!<\/strong> Nem\u00e1 zmysel zabezpe\u010dova\u0165 ochranu pred \u00fatokmi \u00farovne aplik\u00e1ci\u00ed pomocou Reverse Proxy, ak v\u00e1\u0161 poskytovate\u013e hostingu nie je schopn\u00fd zabezpe\u010di\u0165 ochranu pred \u00fatokmi \u00farovne infra\u0161trukt\u00fary: sie\u0165ov\u00e9 zariadenia sa pre\u0165a\u017eia a stan\u00fa sa nedostupn\u00fdmi, vr\u00e1tane proxy serverov cloudov\u00e9ho poskytovate\u013ea (obr\u00e1zok 1).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/5a6948855d9743ca3709d0ee3feb2224.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Obr\u00e1zok 1. Priamy \u00fatok na sie\u0165 poskytovate\u013ea hostingu<\/em><\/p>\n<p><\/p>\n<p>A nech v\u00e1m nikto ne\u0161\u00edri rozpr\u00e1vky o tom, \u017ee re\u00e1lnu IP adresu servera skr\u00fdva cloud poskytovate\u013ea ochrany, a preto je \u00fatok na \u0148u priamo nemo\u017en\u00fd. V deviatich pr\u00edpadoch z desiatich \u00fato\u010dn\u00edkovi nezoberie ve\u013ea n\u00e1mahy n\u00e1js\u0165 re\u00e1lnu IP adresu servera alebo aspo\u0148 siete poskytovate\u013ea hostingu, aby \u201epolo\u017eil\u201c cel\u00fd d\u00e1tov\u00e9 centrum.<\/p>\n<p><\/p>\n<h3 id=\"kak-deystvuyut-hakery-v-poiskah-realnogo-ip-adresa\">Ako hackeri h\u013eadaj\u00fa re\u00e1lnu IP adresu<\/h3>\n<p><\/p>\n<p>Pod spoileri \u2014 nieko\u013eko met\u00f3d h\u013eadania re\u00e1lnej IP adresy (uv\u00e1dzaj\u00fa sa na informa\u010dn\u00e9 \u00fa\u010dely).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Met\u00f3da 1: H\u013eadanie v otvoren\u00fdch zdrojoch<\/b><\/p>\n<p>H\u013eadanie m\u00f4\u017eete za\u010da\u0165 online slu\u017ebou<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/\"> Intelligence X<\/a><\/noindex>: h\u013ead\u00e1 inform\u00e1cie na darkwebe, na platform\u00e1ch na v\u00fdmenu dokumentov, spracov\u00e1va \u00fadaje Whois, \u00faniky verejn\u00fdch \u00fadajov a mnoh\u00e9 \u010fal\u0161ie zdroje.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/c21ad1de4da970843797ecfaac790770.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ak sa na z\u00e1klade niektor\u00fdch znakov (HTTP hlavi\u010dky, \u00fadaje Whois a pod.) podarilo potvrdi\u0165, \u017ee ochrana webu bola zorganizovan\u00e1 pomocou Cloudflare, h\u013eadanie skuto\u010dnej IP adresy mo\u017eno za\u010da\u0165 na<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/?did=734ac30d-caa9-4348-94ad-106cd5f940c2\"> zoznamu<\/a><\/noindex>, ktor\u00e1 obsahuje pribli\u017ene 3 mili\u00f3ny IP adries webov nach\u00e1dzaj\u00facich sa za Cloudflare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/7dd9d053df67a5020a0a450f80a719e9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pomocou SSL certifik\u00e1tu a slu\u017eby<noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\"> Censys<\/a><\/noindex> m\u00f4\u017eete n\u00e1js\u0165 mno\u017estvo u\u017eito\u010dn\u00e9ho, vr\u00e1tane re\u00e1lnej IP adresy webu. Na vytvorenie po\u017eiadavky pre v\u00e1\u0161 zdroj prejdite na kartu Certificates a zadajte:<\/p>\n<p><\/p>\n<p><strong>_parsed.names: meno<em>webu AND tags.raw: trusted<\/em><\/strong><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/49861124ca4859d8f8a65b0c45187e00.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Na h\u013eadanie IP adries serverov, ktor\u00e9 pou\u017e\u00edvaj\u00fa SSL certifik\u00e1t, bude potrebn\u00e9 manipulova\u0165 s rozba\u013eovac\u00edm zoznamom ru\u010dne nieko\u013ek\u00fdmi n\u00e1strojmi (z\u00e1lo\u017eka \u201eExplore\u201c, potom vyberte \u201eIPv4 Hosts\u201c).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Met\u00f3da 2: DNS<\/b><\/p>\n<p>H\u013eadanie pod\u013ea hist\u00f3rie zmien DNS z\u00e1znamov \u2014 star\u00fd, overen\u00fd sp\u00f4sob. Predch\u00e1dzaj\u00faca IP adresa webu m\u00f4\u017ee nazna\u010dova\u0165, na ktorom hostingu (alebo v ktorom d\u00e1tovom centre) sa nach\u00e1dzal. Medzi online slu\u017ebami sa pohodl\u00edm pou\u017e\u00edvania vyzna\u010duj\u00fa <noindex><a rel=\"nofollow\" href=\"https:\/\/viewdns.info\/iphistory\/\">ViewDNS<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\/\">SecurityTrails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Pri zmene nastaven\u00ed web nebude okam\u017eite pou\u017e\u00edva\u0165 IP adresu cloudov\u00e9ho poskytovate\u013ea ochrany alebo CDN, ale nejak\u00fd \u010das bude fungova\u0165 priamo. V tomto pr\u00edpade existuje pravdepodobnos\u0165, \u017ee online slu\u017eby ukladania hist\u00f3rie zmien IP adries obsahuj\u00fa inform\u00e1cie o p\u00f4vodnej adrese webu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/8aef85b97315f67ef857a9fea2c3884c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ak nie je ni\u010d okrem n\u00e1zvu star\u00e9ho DNS servera, m\u00f4\u017eete pomocou \u0161peci\u00e1lnych util\u00edt (dig, host alebo nslookup) vy\u017eiada\u0165 IP adresu pod\u013ea dom\u00e9nov\u00e9ho mena webu, napr\u00edklad:<\/p>\n<p><\/p>\n<p><strong>_dig @n\u00e1zov_stareho_dns_servera n\u00e1zov<em>webu<\/em><\/strong><\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Met\u00f3da 3: email<\/b><\/p>\n<p>N\u00e1pad met\u00f3dy spo\u010d\u00edva v tom, \u017ee pomocou formul\u00e1ra sp\u00e4tnej v\u00e4zby \/ registr\u00e1cie (alebo ak\u00fdmko\u013evek in\u00fdm sp\u00f4sobom, ktor\u00fd umo\u017e\u0148uje iniciova\u0165 odoslanie listu) z\u00edskate spr\u00e1vu na svoju e-mailov\u00fa adresu a skontrolujete hlavi\u010dky, najm\u00e4 pole 'Received'.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/582a31569f5274619ab869d1c8a8263a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V hlavi\u010dke e-mailu sa \u010dasto nach\u00e1dza skuto\u010dn\u00e1 IP adresa MX z\u00e1znamu (server v\u00fdmeny elektronickej po\u0161ty), ktor\u00e1 m\u00f4\u017ee by\u0165 v\u00fdchodiskov\u00fdm bodom na h\u013eadanie \u010fal\u0161\u00edch cie\u013eov\u00fdch serverov.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">N\u00e1stroje na automatiz\u00e1ciu vyh\u013ead\u00e1vania<\/b><\/p>\n<p>Softv\u00e9r na h\u013eadanie IP za ochranou Cloudflare naj\u010dastej\u0161ie pracuje na troch \u00faloh\u00e1ch:<\/p>\n<p><\/p>\n<ul>\n<li>skanovanie nespr\u00e1vneho nastavenia DNS, pomocou DNSDumpster.com;<\/li>\n<li>skanovanie v datab\u00e1ze Crimeflare.com;<\/li>\n<li>h\u013eadanie subdom\u00e9n met\u00f3dou pre\u010d\u00edtania zo slovn\u00edka. <\/li>\n<\/ul>\n<p><\/p>\n<p>H\u013eadanie subdom\u00e9n sa \u010dasto ukazuje ako najefekt\u00edvnej\u0161ia mo\u017enos\u0165 zo v\u0161etk\u00fdch troch \u2014 vlastn\u00edk webu mohol ochr\u00e1ni\u0165 hlavn\u00fa str\u00e1nku a subdom\u00e9ny necha\u0165 fungova\u0165 priamo. Na overenie je najjednoduch\u0161ie pou\u017ei\u0165 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/m0rtem\/CloudFail\">CloudFail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Okrem toho existuj\u00fa utility, ktor\u00e9 s\u00fa ur\u010den\u00e9 iba na h\u013eadanie subdom\u00e9n pomocou pre\u010d\u00edtania zo slovn\u00edka a h\u013eadania v otvoren\u00fdch zdrojoch, napr\u00edklad: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/aboul3la\/Sublist3r\">Sublist3r<\/a><\/noindex> alebo <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/darkoperator\/dnsrecon\">dnsrecon<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Ako vyh\u013ead\u00e1vanie prebieha v praxi<\/b><\/p>\n<p>Pre pr\u00edklad vezmeme web seo.com, ktor\u00fd pou\u017e\u00edva Cloudflare, a ktor\u00fd n\u00e1jdeme pomocou zn\u00e1mej slu\u017eby <noindex><a rel=\"nofollow\" href=\"https:\/\/trends.builtwith.com\/websitelist\/Cloudflare\">builtwith<\/a><\/noindex> (umo\u017e\u0148uje ako ur\u010dova\u0165 technol\u00f3gie \/ enginy \/ CMS, na ktor\u00fdch web funguje, tak aj naopak \u2013 h\u013eada\u0165 weby pod\u013ea pou\u017eit\u00fdch technol\u00f3gi\u00ed). <\/p>\n<p><\/p>\n<p>Pri prechode na kartu \u201eIPv4 Hosts\u201c slu\u017eba zobraz\u00ed zoznam hostite\u013eov pou\u017e\u00edvaj\u00facich certifik\u00e1t. Ak chcete n\u00e1js\u0165 potrebn\u00fd, h\u013eadajte IP adresu s otvoren\u00fdm portom 443. Ak sa presmerov\u00e1va na po\u017eadovan\u00fa str\u00e1nku, \u00faloha je splnen\u00e1, inak je potrebn\u00e9 prida\u0165 do hlavi\u010dky \u201eHost\u201c HTTP po\u017eiadavky dom\u00e9nov\u00e9 meno str\u00e1nky (napr\u00edklad *curl -H \"Host: meno_str\u00e1nky\" *<em><noindex><a rel=\"nofollow\" href=\"https:\/\/IP_adresa\">https:\/\/IP_adresa<\/a><\/noindex><\/em>).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/9886563fefefdf94f663086ee038a037.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V na\u0161om pr\u00edpade h\u013eadanie v datab\u00e1ze Censys ni\u010d neprinieslo, pokra\u010dujeme \u010falej.<\/p>\n<p><\/p>\n<p>H\u013eadanie cez DNS vykon\u00e1me cez slu\u017ebu<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\"> https:\/\/securitytrails.com\/dns-trails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/e762727ac47c4f4bb705d5518f224ffd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Prech\u00e1dzaj\u00fac adresy uveden\u00e9 v zoznamoch DNS serverov pomocou n\u00e1stroja CloudFail, nach\u00e1dzame funk\u010dn\u00e9 zdroje. V\u00fdsledok bude pripraven\u00fd u\u017e o nieko\u013eko sek\u00fand.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/3625eeafe5a0e8ea411ebab1ddd32fd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Pou\u017e\u00edvaj\u00fac iba verejn\u00e9 \u00fadaje a jednoduch\u00e9 n\u00e1stroje sme ur\u010dili skuto\u010dn\u00fa IP adresu webov\u00e9ho servera. Zvy\u0161ok je pre \u00fato\u010dn\u00edka technikou.<\/p>\n<p><\/p>\n<p>Vr\u00e1time sa k v\u00fdberu poskytovate\u013ea hostingu. Aby sme pos\u00fadili pr\u00ednos slu\u017eby pre z\u00e1kazn\u00edka, vezmeme do \u00favahy mo\u017en\u00e9 sp\u00f4soby ochrany pred DDoS \u00fatokmi.<\/p>\n<p><\/p>\n<h3 id=\"kak-hosting-provayder-stroit-svoyu-zaschitu\">Ako poskytovate\u013e hostingu buduje svoju ochranu<\/h3>\n<p><\/p>\n<ol>\n<li>Vlastn\u00fd syst\u00e9m ochrany s filtrovac\u00edm zariaden\u00edm (obr\u00e1zok 2).<br \/>\nVy\u017eaduje si pr\u00edtomnos\u0165:<br \/>\n1.1. Zariadenia na filtr\u00e1ciu prev\u00e1dzky a licencie na softv\u00e9r;<br \/>\n1.2. Intern\u00fdch odborn\u00edkov na jeho podporu a prev\u00e1dzku;<br \/>\n1.3. Pr\u00edstupov\u00e9 kan\u00e1ly do internetu, ktor\u00e9 bud\u00fa dostato\u010dn\u00e9 na prij\u00edmanie \u00fatokov;<br \/>\n1.4. V\u00fdznamn\u00fa predplaten\u00fa \u0161\u00edrku p\u00e1sma na prij\u00edmanie \"odpadov\u00e9ho\" prev\u00e1dzky.<br \/>\n<img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/c6fe101febc11741280a4f8a37121cd2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Obr\u00e1zok 2. Vlastn\u00fd syst\u00e9m ochrany poskytovate\u013ea hostingu<\/em><br \/>\nAk zv\u00e1\u017eime op\u00edsan\u00fd syst\u00e9m ako prostriedok ochrany pred modern\u00fdmi DDoS \u00fatokmi o objeme nieko\u013ek\u00fdch Gbps, tak\u00fdto syst\u00e9m by st\u00e1l ve\u013emi ve\u013ea pe\u0148az\u00ed. M\u00e1 poskytovate\u013e hostingu tak\u00fa ochranu? Je pripraven\u00fd plati\u0165 za \"odpadov\u00fa\" prev\u00e1dzku? Je zrejm\u00e9, \u017ee tak\u00fdto hospod\u00e1rsky model je pre poskytovate\u013ea stratov\u00fd, ak nie s\u00fa v tarifocha zahrnut\u00e9 dodato\u010dn\u00e9 poplatky.<\/li>\n<li>Reverse Proxy (iba pre webov\u00e9 str\u00e1nky a niektor\u00e9 aplik\u00e1cie). Napriek radom <noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/manual\/category\/udalennaya-zashita-sajtov#110\">v\u00fdhod<\/a><\/noindex>, dod\u00e1vate\u013e nezaru\u010duje ochranu pred priamymi DDoS \u00fatokmi (pozri obr\u00e1zok 1). Poskytovatelia hostingu \u010dasto pon\u00fakaj\u00fa tak\u00e9to rie\u0161enie ako v\u0161eliek, pren\u00e1\u0161aj\u00fac zodpovednos\u0165 na poskytovate\u013ea ochrany.<\/li>\n<li>Slu\u017eby \u0161pecializovan\u00e9ho cloudov\u00e9ho poskytovate\u013ea (pou\u017eitie jeho filtrovacej siete) na ochranu pred DDoS \u00fatokmi na v\u0161etk\u00fdch \u00farovniach OSI (obr\u00e1zok 3).<br \/>\n<img decoding=\"async\" alt=\"Hosting s plnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita\" src=\"\/wp-content\/uploads\/2020\/09\/446b8deca30efd73f4768a4ba41e2c47.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Obr\u00e1zok 3. Komplexn\u00e1 ochrana pred DDoS \u00fatokmi s pomocou \u0161pecializovan\u00e9ho poskytovate\u013ea<\/em><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/network-protection\">Rie\u0161enie<\/a><\/noindex> predpoklad\u00e1 hlbok\u00fa integr\u00e1ciu a vysok\u00fa \u00farove\u0148 technickej kompetencie oboch str\u00e1n. Prenos slu\u017eieb na filtr\u00e1ciu prev\u00e1dzky na outsourcing umo\u017e\u0148uje poskytovate\u013eovi hostingu zn\u00ed\u017ei\u0165 cenu pridan\u00fdch slu\u017eieb pre z\u00e1kazn\u00edka.<\/li>\n<\/ol>\n<p><\/p>\n<p><strong>D\u00f4le\u017eit\u00e9!<\/strong> \u010c\u00edm podrobnej\u0161ie bud\u00fa technick\u00e9 \u0161pecifik\u00e1cie poskytovanej slu\u017eby pop\u00edsan\u00e9, t\u00fdm viac bude \u0161anc\u00ed po\u017eadova\u0165 ich plnenie alebo kompenz\u00e1ciu v pr\u00edpade v\u00fdpadku.<\/p>\n<p><\/p>\n<p>Okrem troch hlavn\u00fdch met\u00f3d existuje mno\u017estvo kombin\u00e1ci\u00ed a vari\u00e1ci\u00ed. Pri v\u00fdbere hostingu je pre z\u00e1kazn\u00edka d\u00f4le\u017eit\u00e9 ma\u0165 na pam\u00e4ti, \u017ee rozhodnutie ovplyvn\u00ed nielen ve\u013ekos\u0165 zaru\u010dene blokovan\u00fdch \u00fatokov a presnos\u0165 filtr\u00e1cie, ale aj r\u00fdchlos\u0165 reakcie a informa\u010dnos\u0165 (zoznam blokovan\u00fdch \u00fatokov, celkov\u00e1 \u0161tatistika a \u010fal\u0161ie).<\/p>\n<p><\/p>\n<p>Pam\u00e4tajte, \u017ee len nieko\u013eko hostingov\u00fdch poskytovate\u013eov na svete dok\u00e1\u017ee zabezpe\u010di\u0165 prijate\u013en\u00fa \u00farove\u0148 ochrany samostatne, v ostatn\u00fdch pr\u00edpadoch pom\u00e1ha spolupr\u00e1ca a technick\u00e1 gramotnos\u0165. Tak\u017ee ch\u00e1panie z\u00e1kladn\u00fdch princ\u00edpov organiz\u00e1cie ochrany pred DDoS \u00fatokmi umo\u017en\u00ed vlastn\u00edkom str\u00e1nok nepadn\u00fa\u0165 do marketingov\u00fdch n\u00e1strah a nek\u00fapi\u0165 si 'ma\u010dku vo vreci'.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ddosguard\/blog\/520302\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2020 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e DDoS-\u0430\u0442\u0430\u043a \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 65% \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u00ab\u043d\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u00ab\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u00bb \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u0431\u043b\u043e\u0433\u043e\u0432, \u0421\u041c\u0418. \u041a\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0445\u043e\u0441\u0442\u0438\u043d\u0433? \u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u043c \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438? [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hosting s plnohodnotnou ochranou pred DDoS \u00fatokmi \u2013 m\u00fdtus alebo realita | ProHoster","description":"V prv\u00fdch dvoch.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-27T05:42:43+00:00","article:modified_time":"2020-09-27T05:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:00:57","updated":"2022-09-27 17:53:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/95258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=95258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/95258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/95259"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=95258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=95258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=95258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}