{"id":95258,"date":"2020-09-27T07:42:43","date_gmt":"2020-09-27T05:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost"},"modified":"2020-09-27T07:42:43","modified_gmt":"2020-09-27T05:42:43","slug":"hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","title":{"rendered":"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/338fdf28dfed6654cfdad13538de2954.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>V prvih dveh \u010detrtletjih leta 2020 se je \u0161tevilo DDoS napadov pove\u010dalo skoraj trikrat, pri \u010demer 65% teh napadov predstavlja primitivne poskuse \"obremenitvenega testiranja\", ki zlahka \"izklopijo\" neza\u0161\u010ditene spletne strani manj\u0161ih spletnih trgovin, forumov, blogov in medijev.<\/p>\n<p><\/p>\n<p>Kako izbrati gostovanje, za\u0161\u010diteno pred DDoS napadi? Na kaj je treba biti pozoren in \u010demu se pripraviti, da se ne znajdete v neprijetnem polo\u017eaju?<\/p>\n<p><\/p>\n<p>(Cepljenje proti 'sivemu' marketingu znotraj)<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Dostopnost in raznolikost orodij za izvajanje DDoS napadov prisiljuje lastnike spletnih storitev, da sprejmejo ustrezne ukrepe za obrambo pred gro\u017enjami. O za\u0161\u010diti pred DDoS napadi je treba razmisliti ne \u0161ele po prvem neuspehu, niti kot del ukrepov za pove\u010danje odpornosti infrastrukture, ampak \u017ee na stopnji izbire platforme za gostovanje (gostitelja ali podatkovnega centra).<\/p>\n<p><\/p>\n<p>DDoS napade klasificiramo glede na pripadnost protokolov, ki jih izkori\u0161\u010dajo, na ravni modela odprtih sistemov (OSI):<\/p>\n<p><\/p>\n<ul>\n<li>povezovalna (L2), <\/li>\n<li>omre\u017ena (L3), <\/li>\n<li>transportna (L4),<\/li>\n<li>aplikacijska (L7). <\/li>\n<\/ul>\n<p><\/p>\n<p>Z vidika za\u0161\u010ditnih sistemov jih lahko na splo\u0161no razdelimo v dve skupini: napadi na ravni infrastrukture (L2-L4) in napadi na ravni aplikacij (L7). To je povezano s zaporedjem izvajanja algoritmov analize prometa in ra\u010dunsko zapletenostjo: \u010dim globlje pogledamo v IP paket, tem ve\u010d potrebujemo ra\u010dunalni\u0161ke zmogljivosti.<\/p>\n<p><\/p>\n<p><em>Na splo\u0161no je vpra\u0161anje optimizacije izra\u010dunov pri obdelavi prometa v realnem \u010dasu tema za lo\u010deno serijo \u010dlankov. Sedaj si preprosto predstavljajmo, da obstaja nekak\u0161en obla\u010dni ponudnik s pogojno neomejenimi ra\u010dunalni\u0161kimi viri, ki lahko zagotovi za\u0161\u010dito spletnih strani pred napadi na ravni aplikacij (vklju\u010dno z <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/web\">brezpla\u010dno<\/a><\/noindex><\/strong>).<\/em><\/p>\n<p><\/p>\n<h4 id=\"3-glavnyh-voprosa-dlya-opredeleniya-stepeni-zaschischennosti-hostinga-ot-ddos-atak\">3 glavna vpra\u0161anja za oceno stopnje za\u0161\u010dite gostovanja pred DDoS napadi<\/h4>\n<p><\/p>\n<p>Poglejmo pogoje za nudenje storitev za\u0161\u010dite pred DDoS napadi in Sporazum o ravni storitve (Service Level Agreement, SLA) gostitelja. Ali vsebujejo odgovore na naslednja vpra\u0161anja:<\/p>\n<p><\/p>\n<ul>\n<li><strong>kak\u0161ne tehni\u010dne omejitve navaja ponudnik storitev<\/strong>? <\/li>\n<li><strong>kaj se zgodi, ko naro\u010dnik prese\u017ee omejitve? <\/strong> <\/li>\n<li><strong>kako gostiteljski ponudnik vzpostavi za\u0161\u010dito pred DDoS napadi (tehnologije, re\u0161itve, dobavitelji)?<\/strong> <\/li>\n<\/ul>\n<p><\/p>\n<p>\u010ce niste na\u0161li teh informacij, je to lahko znak bodisi za resnost ponudnika storitev bodisi za potrebo po osnovni za\u0161\u010diti pred DDoS (L3-4) z lastnimi sredstvi. Na primer, naro\u010diti fizi\u010dno povezavo s specializiranim ponudnikom za\u0161\u010dite.<\/p>\n<p><\/p>\n<p><strong>D\u016fle\u017eit\u00e9!<\/strong> Ni smiselno zagotavljati za\u0161\u010dite pred napadi na ravni aplikacij z uporabo Reverse Proxy, \u010de va\u0161 ponudnik gostovanja ni sposoben zagotoviti za\u0161\u010dite pred napadi na ravni infrastrukture: omre\u017ena oprema bo preobremenjena in nedostopna, vklju\u010dno s proxy stre\u017eniki obla\u010dnega ponudnika (slika 1).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/5a6948855d9743ca3709d0ee3feb2224.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Slika 1. Neposredni napad na omre\u017eje ponudnika gostovanja<\/em><\/p>\n<p><\/p>\n<p>In ne dovolite, da vam pripovedujejo pravljice, da je pravi IP naslov stre\u017enika skrit za oblak ponudnika za\u0161\u010dite, kar pomeni, da ga je nemogo\u010de napasti neposredno. V devetih od desetih primerov napadalcu ne bo te\u017eko najti pravega IP naslova stre\u017enika ali vsaj omre\u017eja ponudnika gostovanja, da 'ustavi' celoten podatkovni center.<\/p>\n<p><\/p>\n<h3 id=\"kak-deystvuyut-hakery-v-poiskah-realnogo-ip-adresa\">Kako hekerji delujejo pri iskanju pravega IP naslova<\/h3>\n<p><\/p>\n<p>Pod spojlerji \u2013 nekaj metod za iskanje pravega IP naslova (navedene so v informativne namene).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 1: Iskanje v odprtih virih<\/b><\/p>\n<p>Iskanje se lahko za\u010dne z spletno storitvijo<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/\"> Intelligence X<\/a><\/noindex>: i\u0161\u010de informacije v temnem omre\u017eju, na platformah za izmenjavo dokumentov, obdeluje podatke Whois, uhajanju javnih podatkov in \u0161tevilnih drugih virih.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/c21ad1de4da970843797ecfaac790770.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u010ce so bili po nekaterih znakih (HTTP glave, podatki Whois itd.) uspe\u0161no identificirani, da je za\u0161\u010dita spletnega mesta organizirana s pomo\u010djo Cloudflare, lahko za\u010dnete iskati pravi IP naslov s<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/?did=734ac30d-caa9-4348-94ad-106cd5f940c2\"> spiska<\/a><\/noindex>, ki vsebuje pribli\u017eno 3 milijone IP naslovov spletnih mest, ki so locirana za Cloudflare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/7dd9d053df67a5020a0a450f80a719e9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>S pomo\u010djo SSL certifikata in storitve<noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\"> Censys<\/a><\/noindex> lahko najdete veliko koristnega, vklju\u010dno s pravim IP naslovom spletnega mesta. Da oblikujete poizvedbo za va\u0161 vir, pojdite na zavihek Certificates in vpi\u0161ite:<\/p>\n<p><\/p>\n<p><strong>_parsed.names: ime<em>spletnega mesta AND tags.raw: trusted<\/em><\/strong><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/49861124ca4859d8f8a65b0c45187e00.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Za iskanje IP naslovov stre\u017enikov, ki uporabljajo SSL certifikat, bo treba spustni seznam preizkusiti ro\u010dno z ve\u010d orodji (zavihek 'Explore', nato izberemo 'IPv4 Hosts').<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 2: DNS<\/b><\/p>\n<p>Iskanje po zgodovini sprememb DNS zapisov je star, preizku\u0161en na\u010din. Prej\u0161nji IP naslov spletnega mesta lahko razkrije, na katerem gostovanju (ali v katerem podatkovnem centru) je bilo. <noindex><a rel=\"nofollow\" href=\"https:\/\/viewdns.info\/iphistory\/\">Med spletnimi storitvami, ki so enostavne za uporabo, izstopajo<\/a><\/noindex> in <noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\/\">SecurityTrails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>\u041f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0441\u0430\u0439\u0442 \u043d\u0435 \u0441\u0440\u0430\u0437\u0443 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043b\u0438 CDN, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c, \u0447\u0442\u043e \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0441\u043c\u0435\u043d\u044b IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u0430\u0434\u0440\u0435\u0441\u0435 \u0441\u0430\u0439\u0442\u0430.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/8aef85b97315f67ef857a9fea2c3884c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u0415\u0441\u043b\u0438 \u043d\u0438\u0447\u0435\u0433\u043e, \u043a\u0440\u043e\u043c\u0435 \u0438\u043c\u0435\u043d\u0438 \u0441\u0442\u0430\u0440\u043e\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435\u0442, \u0442\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442 (dig, host \u0438\u043b\u0438 nslookup) \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u043c\u0443 \u0438\u043c\u0435\u043d\u0438 \u0441\u0430\u0439\u0442\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440:<\/p>\n<p><\/p>\n<p><strong>_dig @\u0438\u043c\u044f_\u0441\u0442\u0430\u0440\u043e\u0433\u043e_dns_\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043c\u044f<em>spletne strani<\/em><\/strong><\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">\u041c\u0435\u0442\u043e\u0434 3: email<\/b><\/p>\n<p>\u0418\u0434\u0435\u044f \u043c\u0435\u0442\u043e\u0434\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u043e\u0440\u043c\u044b \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \/ \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 (\u0438\u043b\u0438 \u043b\u044e\u0431\u044b\u043c \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u043f\u0438\u0441\u044c\u043c\u0430) \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u043e \u043d\u0430 \u0441\u0432\u043e\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0443\u044e \u043f\u043e\u0447\u0442\u0443 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0435 \u00abReceived\u00bb.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/582a31569f5274619ab869d1c8a8263a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u0412 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 MX-\u0437\u0430\u043f\u0438\u0441\u0438 (\u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043c\u0435\u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0446\u0435\u043b\u0438.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">\u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0438\u0441\u043a\u0430<\/b><\/p>\n<p>\u0421\u043e\u0444\u0442 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 IP \u0437\u0430 \u0449\u0438\u0442\u043e\u043c Cloudflare \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0442\u0440\u0435\u043c \u0437\u0430\u0434\u0430\u0447\u0430\u043c:<\/p>\n<p><\/p>\n<ul>\n<li>\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 DNS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f DNSDumpster.com;<\/li>\n<li>\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 Crimeflare.com;<\/li>\n<li>\u043f\u043e\u0438\u0441\u043a \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u0440\u044e. <\/li>\n<\/ul>\n<p><\/p>\n<p>\u041f\u043e\u0438\u0441\u043a \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u044b\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u0438\u0437 \u0442\u0440\u0435\u0445 \u2014 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0441\u0430\u0439\u0442\u0430 \u043c\u043e\u0433 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0430\u0439\u0442, \u0430 \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u044b \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/m0rtem\/CloudFail\">CloudFail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u0442\u0438\u043b\u0438\u0442\u044b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u0440\u044e \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/aboul3la\/Sublist3r\">Sublist3r<\/a><\/noindex> ili <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/darkoperator\/dnsrecon\">dnsrecon<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">\u041a\u0430\u043a \u043f\u043e\u0438\u0441\u043a \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435<\/b><\/p>\n<p>\u0414\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u0432\u043e\u0437\u044c\u043c\u0435\u043c \u0441\u0430\u0439\u0442 seo.com, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 Cloudflare, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0439\u0434\u0435\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 <noindex><a rel=\"nofollow\" href=\"https:\/\/trends.builtwith.com\/websitelist\/Cloudflare\">builtwith<\/a><\/noindex> (\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0430\u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \/ \u0434\u0432\u0438\u0436\u043a\u0438 \/ CMS, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u0430\u0439\u0442, \u0442\u0430\u043a \u0438 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442 \u2013 \u0438\u0441\u043a\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u043f\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c). <\/p>\n<p><\/p>\n<p>Ko prenesete na zavihek \u201eIPv4 Hosts\u201c, storitev prika\u017ee seznam gostiteljev, ki uporabljajo certifikat. \u010ce \u017eelite najti \u017eelenega, i\u0161\u010dite IP-naslov z odprtim portom 443. \u010ce preusmerja na \u017eeleno spletno mesto, je naloga opravljena; v nasprotnem primeru je treba dodati ime domene spletnega mesta v glavo HTTP-zahtave \u201eHost\u201c (na primer *curl -H \"Host: ime_sporta\" *).<em><noindex><a rel=\"nofollow\" href=\"https:\/\/IP_naslov\">https:\/\/IP_\u0430\u0434\u0440\u0435\u0441<\/a><\/noindex><\/em>).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/9886563fefefdf94f663086ee038a037.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u0412 \u043d\u0430\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u0438\u0441\u043a \u043f\u043e \u0431\u0430\u0437\u0435 Censys \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0434\u0430\u043b, \u0438\u0434\u0435\u043c \u0434\u0430\u043b\u044c\u0448\u0435.<\/p>\n<p><\/p>\n<p>Izvedemo iskanje po DNS-ju preko storitve<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\"> https:\/\/securitytrails.com\/dns-trails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/e762727ac47c4f4bb705d5518f224ffd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Z zanke naslovi, omenjeni na seznamih DNS stre\u017enikov, s pomo\u010djo orodja CloudFail najdemo delujo\u010de vire. Rezultat bo pripravljen v nekaj sekundah.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/3625eeafe5a0e8ea411ebab1ddd32fd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Samo z javnimi podatki in preprostimi orodji smo dolo\u010dili pravi IP naslov spletnega stre\u017enika. Ostalo je za napadalca stvar tehnike.<\/p>\n<p><\/p>\n<p>Vrnimo se k izbiri ponudnika gostovanja. Da bi ocenili korist storitve za naro\u010dnika, razmislimo o mo\u017enih na\u010dinih za\u0161\u010dite pred DDoS napadi.<\/p>\n<p><\/p>\n<h3 id=\"kak-hosting-provayder-stroit-svoyu-zaschitu\">Kako ponudnik gostovanja gradi svojo za\u0161\u010dito<\/h3>\n<p><\/p>\n<ol>\n<li>Lastni za\u0161\u010ditni sistem s filtrirno opremo (slika 2).<br \/>\nZahteva naslednje:<br \/>\n1.1. Oprema za filtriranje prometa in licence za programsko opremo;<br \/>\n1.2. Strokovnjake za podporo in delovanje;<br \/>\n1.3. Dovolj dostopov do interneta, ki bodo zadostovali za sprejem napadov;<br \/>\n1.4. Znatno predpla\u010dilo pasovne \u0161irine za sprejem 'odpadnega' prometa.<br \/>\n<img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/c6fe101febc11741280a4f8a37121cd2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Slika 2. Lastni za\u0161\u010ditni sistem ponudnika gostovanja<\/em><br \/>\n\u010ce obravnavamo opisani sistem kot sredstvo za\u0161\u010dite pred sodobnimi DDoS napadi, ki presegajo stotnike Gbps, bo tak sistem stal zelo veliko denarja. Ima ponudnik gostovanja to za\u0161\u010dito? Je pripravljen pla\u010dati za 'odpadni' promet? O\u010ditno je, da je tak\u0161na ekonomska re\u0161itev za ponudnika izguba, razen \u010de v tarifah ni predvidenih dodatnih stro\u0161kov.<\/li>\n<li>Reverse Proxy (samo za spletne strani in nekatera aplikacije). Kljub \u0161tevilnim <noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/manual\/category\/udalennaya-zashita-sajtov#110\">prednostim<\/a><\/noindex>, dobavitelj ne zagotavlja za\u0161\u010dite pred neposrednimi DDoS napadi (glejte sliko 1). Ponudniki gostovanja pogosto ponujajo to re\u0161itev kot panacejo, prelagajo\u010d odgovornost na ponudnika za\u0161\u010dite.<\/li>\n<li>Storitve specializiranega obla\u010dnega ponudnika (uporaba njegove filtracijske mre\u017ee) za za\u0161\u010dito pred DDoS napadi na vseh ravneh OSI (slika 3).<br \/>\n<img decoding=\"async\" alt=\"Gostovanje z popolno za\u0161\u010dito pred DDoS napadi \u2013 mit ali realnost\" src=\"\/wp-content\/uploads\/2020\/09\/446b8deca30efd73f4768a4ba41e2c47.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Slika 3. Celovita za\u0161\u010dita pred DDoS napadi s pomo\u010djo specializiranega ponudnika<\/em><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/network-protection\">Solution<\/a><\/noindex> predpostavlja globoko integracijo in visok nivo tehni\u010dne usposobljenosti obeh strani. Prenos filtracijskih storitev na outsourcing omogo\u010da ponudniku gostovanja zni\u017eanje cen dodatnih storitev za naro\u010dnika.<\/li>\n<\/ol>\n<p><\/p>\n<p><strong>D\u016fle\u017eit\u00e9!<\/strong> Bolje kot so opisane tehni\u010dne specifikacije ponujene storitve, ve\u010dje so mo\u017enosti, da se zahteva njihovo izvajanje ali od\u0161kodnina v primeru izpada.<\/p>\n<p><\/p>\n<p>Poleg treh osnovnih metodov obstaja \u0161e veliko kombinacij in kombinacij. Pri izbiri gostovanja je za naro\u010dnika pomembno, da se spomni, da bo odlo\u010ditev vplivala ne le na velikost garantiranih blokiranih napadov in natan\u010dnost filtriranja, temve\u010d tudi na hitrost odziva ter informativnost (seznam blokiranih napadov, splo\u0161na statistika itd.).<\/p>\n<p><\/p>\n<p>Pomnite, da le redki ponudniki gostovanja po svetu zmorejo zagotavljati sprejemljivo raven za\u0161\u010dite sami, v drugih primerih pa pridejo prav sodelovanje in tehni\u010dno znanje. Razumevanje osnovnih na\u010del organizacije za\u0161\u010dite pred DDoS napadi bo lastniku spletne strani omogo\u010dilo, da ne nasede tr\u017enim zvija\u010dam in ne kupi 'ma\u010dke v vre\u010di'.<\/p>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ddosguard\/blog\/520302\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2020 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e DDoS-\u0430\u0442\u0430\u043a \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 65% \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u00ab\u043d\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u00ab\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u00bb \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u0431\u043b\u043e\u0433\u043e\u0432, \u0421\u041c\u0418. \u041a\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0445\u043e\u0441\u0442\u0438\u043d\u0433? \u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u043c \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438? [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Gostovanje s polno za\u0161\u010dito pred DDoS napadi \u2013 mit ali resni\u010dnost | ProHoster","description":"V prvih dveh.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-27T05:42:43+00:00","article:modified_time":"2020-09-27T05:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:00:57","updated":"2022-09-27 17:53:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/95258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=95258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/95258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/95259"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=95258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=95258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=95258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}