Weerarka CPDoS ee ka dhigaya bogag loogu adeego CDN mid aan la heli karin

Cilmi-baarayaal ka socda Jaamacadaha Hamburg iyo Cologne
horumaray Farsamo cusub oo weerar ah oo ku saabsan shabakadaha gudbinta macluumaadka iyo wakiillada kaydinta - CPDoS (Didmada-Adeeg-ka-sunta-sunta). Weerarku wuxuu ogolaanayaa gelitaanka bogga in lagu diido sumaynta kaydka.

Dhibaatadu waxay sabab u tahay xaqiiqda ah in CDNs cache aysan kaliya si guul leh u dhamaystirin codsiyada, laakiin sidoo kale xaaladaha marka server-ka http soo celiyo qalad. Sida caadiga ah, haddii ay jiraan dhibaatooyin ku saabsan samaynta codsiyada, server-ku wuxuu soo saaraa 400 (Codsi Xun) qalad ah; Halbeeggu wuxuu ogol yahay oo keliya khaladaadka leh koodka 404 (Lama helin), 404 (Qaabka Aan La Ogolayn), 405 (Goone) iyo 410 (Lama Fulin) in la kaydiyo, laakiin CDN-yada qaar ayaa sidoo kale kaydiya jawaabaha code 501 (Codsi xun), taas oo ku xidhan codsiga loo soo diray.

Weeraryahanadu waxay sababi karaan kheyraadka asalka ah inay soo celiyaan qaladka "Codsiga xun ee 400" iyagoo codsi u diraya madaxyada HTTP qaab gaar ah loo qaabeeyey. Madaxyadan laguma xisaabtamo CDN-ga, markaa macluumaadka ku saabsan awood la'aanta gelitaanka bogga waa la kaydin doonaa, iyo dhammaan codsiyada kale ee isticmaale ee ansax ah ka hor wakhtiga kama dambaysta ah waxay keeni karaan qalad, inkastoo xaqiiqda ah in goobta asalka ah ay u adeegto macluumaadka. dhib la'aan.

Saddex ikhtiyaar oo weerar ah ayaa la soo jeediyay si loogu qasbo server-ka HTTP inuu soo celiyo qalad:

• HMO (Habka HTTP) -Weeraruhu waxa uu burin karaa habka codsiga asalka ah isaga oo u maraya "X-HTTP-Habka-Bal-celinta", "X-HTTP-Qaabka" ama "X-Qaabka-Bur-dhaafka", oo ay taageerayaan server-yada qaarkood, laakiin aan lagu xisaabtamin CDN . Tusaale ahaan, waxaad u bedeli kartaa habka asalka ah ee "GET" habka "DELETE", kaas oo ka mamnuuc ah server-ka, ama habka "POST", kaas oo aan lagu dabaqi karin statics;
  

• HHO (HTTP Header Oversize) - weeraryahanku wuxuu dooran karaa cabbirka madaxa si uu uga gudbo xadka server-ka isha, laakiin kuma dhicin xaddidaadaha CDN. Tusaale ahaan, Apache httpd waxay xaddidaysaa cabbirka madaxa ilaa 8 KB, iyo Amazon Cloudfront CDN waxay u ogolaataa madax ilaa 20 KB;
  

• HMC (HTTP Meta Character) -Weeraruhu wuxuu geli karaa xarfo gaar ah codsiga (\n, \r, \a), kuwaas oo loo arko inay khaldan yihiin server-ka isha, laakiin la iska indhatiray CDN-ga.
  

Midka ugu nugul weerarku wuxuu ahaa CloudFront CDN oo ay adeegsato Amazon Web Services (AWS). Amazon hadda waxay xallisay dhibaatada iyadoo curyaamisay kaydinta qaladka, laakiin waxay qaadatay cilmi-baarayaasha in ka badan saddex bilood inay ku daraan ilaalinta. Arrintu waxay sidoo kale saamaysay Cloudflare, Varnish, Akamai, CDN77 iyo
Si degdeg ah, laakiin weerarka iyaga dhex maraa wuxuu ku xaddidan yahay bartilmaameedyada adeegsada IIS, ASP.NET, Flask и Ciyaar 1. Waa la xusay, in 11% ee Wasaaradda Difaaca ee Maraykanka, 16% URL-yada laga helo kaydka kaydka HTTP iyo ku dhawaad ​​30% 500 ee mareegaha ugu sarreeya ee Alexa ay suurtogal tahay in la weeraro.

Si aad uga hortagto weerarka dhinaca goobta, waxaad isticmaali kartaa madaxa "Cache-Control: no-store", kaas oo mamnuucaya kaydinta jawaabta. CDN-yada qaar, tusaale
CloudFront iyo Akamai, waxaad joojin kartaa kaydinta qaladka heerka dejinta astaanta. Ilaalinta, waxa kale oo aad isticmaali kartaa firewalls codsiga webka (WAF, Web Application Firewall), laakiin waa in laga hirgeliyaa dhinaca CDN ka hor martida kaydinta.

Source: opennet.ru