{"id":31415,"date":"2019-10-31T21:41:08","date_gmt":"2019-10-31T18:41:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\/"},"modified":"2019-10-31T21:41:08","modified_gmt":"2019-10-31T18:41:08","slug":"vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","title":{"rendered":"Gjith\u00e7ka \u00ebsht\u00eb shum\u00eb keq ose nj\u00eb m\u00ebnyr\u00eb e re p\u00ebr t\u00eb kapur trafikun","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>M\u00eb 13 mars, grupi punues RIPE mbi abuzimet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ripe.net\/ripe\/mail\/archives\/anti-abuse-wg\/2019-March\/004585.html\">ka pranuar nj\u00eb propozim<\/a><\/noindex> p\u00ebr t\u00eb shqyrtuar BGP-p\u00ebrvet\u00ebsimin (hjjack) si nj\u00eb shkelje t\u00eb politik\u00ebs RIPE. N\u00ebse propozimi miratohet, ofruesi i internetit, i cili sulmohet p\u00ebrmes p\u00ebrvet\u00ebsimit t\u00eb trafik, do t\u00eb kishte mund\u00ebsin\u00eb t\u00eb d\u00ebrgonte nj\u00eb k\u00ebrkes\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb ekspozuar keqb\u00ebr\u00ebsin. N\u00ebse grupi ekspert i mbledh prova t\u00eb mjaftueshme konfirmuese, at\u00ebher\u00eb nj\u00eb LIR i till\u00eb, q\u00eb \u00ebsht\u00eb burimi i BGP-p\u00ebrvet\u00ebsimit, do t\u00eb konsiderohej shkel\u00ebs dhe mund t\u00eb humbiste statusin LIR. Kishin edhe disa argumente <noindex><a rel=\"nofollow\" href=\"https:\/\/www.ripe.net\/ripe\/mail\/archives\/anti-abuse-wg\/2019-March\/004601.html\">n\u00eb kund\u00ebrshtim me k\u00ebt\u00eb<\/a><\/noindex> ndryshime.<\/p>\n<p>N\u00eb k\u00ebt\u00eb botim ne d\u00ebshirojm\u00eb t\u00eb tregojm\u00eb nj\u00eb shembull t\u00eb nj\u00eb sulmi, kur jo vet\u00ebm keqb\u00ebr\u00ebsi i v\u00ebrtet\u00eb ishte n\u00ebn dyshim, por edhe lista e plot\u00eb e prefikseve t\u00eb d\u00ebmtuara. M\u00eb shum\u00eb se kaq, nj\u00eb sulm i till\u00eb e rris pyetjen mbi motivet e p\u00ebrvet\u00ebsimeve t\u00eb ardhshme t\u00eb trafikut t\u00eb k\u00ebtij lloji.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nDy vitet e fundit, n\u00eb shtyp vet\u00ebm konfliktet e tipit MOAS (Sistem Autonom me Origjin\u00eb t\u00eb Shum\u00ebfisht\u00eb) jan\u00eb p\u00ebrmendur si BGP-p\u00ebrvet\u00ebsime. MOAS \u00ebsht\u00eb nj\u00eb rast i ve\u00e7ant\u00eb, kur dy sisteme autonome t\u00eb ndryshme shpallin prefikse n\u00eb konflikt me numrat p\u00ebrkat\u00ebs ASN n\u00eb AS_PATH (ASN i par\u00eb n\u00eb AS_PATH, duke vazhduar m\u00eb tej - ASN origjin\u00eb). Megjithat\u00eb, ne mund t\u00eb p\u00ebrmendim t\u00eb pakt\u00ebn <noindex><a rel=\"nofollow\" href=\"https:\/\/pc.nanog.org\/static\/published\/meetings\/NANOG75\/1892\/20190219_Gavrichenkov_Four_Years_Of_v1.pdf\">3 lloje t\u00eb tjera<\/a><\/noindex> t\u00eb p\u00ebrvet\u00ebsimit t\u00eb trafikut, q\u00eb lejojn\u00eb keqb\u00ebr\u00ebsit t\u00eb manipulojn\u00eb atributin AS_PATH p\u00ebr q\u00ebllime t\u00eb ndryshme, p\u00ebrfshir\u00eb p\u00ebr t\u00eb anashkaluar qasjet moderne p\u00ebr filtrimin dhe monitorimin. Nj\u00eb tip i njohur sulmi <noindex><a rel=\"nofollow\" href=\"https:\/\/we.riseup.net\/assets\/43591\/defcon-16-pilosov-kapela.pdf\">Pilosova-Kapela<\/a><\/noindex> - \u00ebsht\u00eb tipi i fundit i k\u00ebtij p\u00ebrvet\u00ebsimi, por aspak m\u00eb i par\u00ebnd\u00ebsish\u00ebm. \u00cbsht\u00eb mjaft e mundshme q\u00eb sakt\u00ebsisht nj\u00eb sulm t\u00eb till\u00eb ne e kemi v\u00ebzhguar gjat\u00eb jav\u00ebve t\u00eb fundit. Nj\u00eb ngjarje e till\u00eb ka nj\u00eb karakter t\u00eb shpjeguesh\u00ebm dhe pasojat e saj jan\u00eb mjaft serioze.<\/p>\n<p>Ata q\u00eb k\u00ebrkojn\u00eb nj\u00eb version TL;DR, mund t\u00eb rrokullisen deri te n\u00ebnkryetari \"Sulmi ideal\".<\/p>\n<h3>Sfonda e rrjetit<\/h3>\n<p><i>(n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb kuptoni m\u00eb mir\u00eb proceset q\u00eb jan\u00eb angazhuar n\u00eb k\u00ebt\u00eb incident)<\/i><\/p>\n<p>N\u00ebse d\u00ebshironi t\u00eb d\u00ebrgoni nj\u00eb paket\u00eb dhe keni disa prefikse n\u00eb tabel\u00ebn e routing-ut, q\u00eb p\u00ebrmbajn\u00eb adres\u00ebn IP t\u00eb destinacionit, do t\u00eb p\u00ebrdorni rrug\u00ebn p\u00ebr prefikstin me gjat\u00ebsi maksimale. N\u00ebse n\u00eb tabel\u00ebn e routing-ut ekzistojn\u00eb disa rrug\u00eb t\u00eb ndryshme p\u00ebr nj\u00eb prefiks, do t\u00eb zgjidhni at\u00eb m\u00eb t\u00eb mir\u00ebn (sipas mekanizmit t\u00eb zgjedhjes s\u00eb rrug\u00ebs m\u00eb t\u00eb mir\u00eb).<\/p>\n<p>Qasjet\u00eb ekzistuese p\u00ebr filtrimin dhe monitorimin p\u00ebrpiqen t\u00eb analizojn\u00eb rrug\u00ebt dhe t\u00eb marrin vendime duke analizuar atributin AS_PATH. Ruter\u00ebt mund ta ndryshojn\u00eb k\u00ebt\u00eb atribut n\u00eb \u00e7do vler\u00eb gjat\u00eb njoftimit. Thjesht shtimi i ASN e pronarit n\u00eb fillim t\u00eb AS_PATH (si ASN origjinal) mund t\u00eb jet\u00eb e mjaftueshme p\u00ebr t\u00eb kaluar mekanizmat aktual\u00eb t\u00eb verifikimit t\u00eb burimit. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ekziston nj\u00eb rrug\u00eb nga ASN e sulmuar deri te ju, ka mund\u00ebsi t\u00eb nxirret dhe t\u00eb p\u00ebrdoret AS_PATH i k\u00ebsaj rruge n\u00eb njoftimet tuaja t\u00eb tjera. \u00c7do verifikim i v\u00ebrtet\u00ebsis\u00eb vet\u00ebm i AS_PATH p\u00ebr njoftimet tuaja t\u00eb mbushura p\u00ebrfundimisht do t\u00eb p\u00ebrfundonte me sukses.<\/p>\n<p>Ekzistojn\u00eb gjithashtu disa kufizime t\u00eb tjera q\u00eb meritojn\u00eb p\u00ebrmendje. S\u00eb pari, n\u00eb rastin e filtrimit t\u00eb prefikseve nga ofruesi m\u00eb i lart\u00eb, rruga juaj mund t\u00eb filtrohet p\u00ebr \u00e7do arsye (madje edhe me AS_PATH t\u00eb sakt\u00eb), n\u00ebse prefiksi nuk i takon konusit tuaj t\u00eb klient\u00ebve t\u00eb vendosur te ofruesi upstream. E dyta \u2014 nj\u00eb AS_PATH i vlefsh\u00ebm mund t\u00eb b\u00ebhet i pavlefsh\u00ebm, n\u00ebse rruga e krijuar njoftohet n\u00eb drejtime t\u00eb pap\u00ebrshtatshme dhe, k\u00ebshtu, shkel politik\u00ebn e rrug\u00ebtimit. Dhe e fundit \u2014 \u00e7do rrug\u00eb me nj\u00eb prefiks q\u00eb shkel gjat\u00ebsi t\u00eb ROA mund t\u00eb konsiderohet e pavlefshme.<\/p>\n<h3>Incidenti<\/h3>\n<p>\nDisa jav\u00eb m\u00eb par\u00eb, mor\u00ebm nj\u00eb ankes\u00eb nga nj\u00eb nga p\u00ebrdoruesit. Pash\u00eb rrug\u00ebt me ASN e saj origjinal dhe prefikse \/25, nd\u00ebrsa p\u00ebrdoruesi pohonte se ato nuk ishin njoftuar nga ana e tij.<\/p>\n<p><code>TABLE_DUMP2|1554076803|B|xxx|265466|78.163.7.0\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.7.128\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.18.0\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.18.128\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.226.0\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.163.226.128\/25|265466 262761 263444 22356 3491 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.164.7.0\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076803|B|xxx|265466|78.164.7.128\/25|265466 262761 263444 6762 2914 9121|INCOMPLETE|xxx|0|0||NAG||<\/code><br \/>\n<i>Shembuj t\u00eb njoftimeve n\u00eb fillim t\u00eb prillit 2019<\/i><\/p>\n<p>NTT duke udh\u00ebtuar p\u00ebr prefiksin \/25 e b\u00ebn at\u00eb ve\u00e7an\u00ebrisht t\u00eb dyshimt\u00eb. Gjat\u00eb incidentit LG NTT nuk dinte asgj\u00eb p\u00ebr k\u00ebt\u00eb rrug\u00eb. K\u00ebshtu q\u00eb, po, ndonj\u00eb operator po krijon nj\u00eb AS_PATH t\u00eb plot\u00eb p\u00ebr k\u00ebto prefikse! Verifikimi n\u00eb ruter\u00ebt e tjer\u00eb lejon t\u00eb ve\u00e7ohet nj\u00eb ASN e ve\u00e7ant\u00eb: AS263444. Duke par\u00eb rrug\u00ebt e tjera me k\u00ebt\u00eb sistem autonom, has\u00ebm situat\u00ebn e m\u00ebposhtme:<\/p>\n<p><code>TABLE_DUMP2|1554076800|B|xxx|265466|1.6.36.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.38.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.23.143.0\/25|265466 262761 263444 22356 6762 9498 9730 45528|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.23.143.128\/25|265466 262761 263444 22356 6762 9498 9730 45528|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.24.0.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.24.128.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.26.0.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.26.128.0\/17|265466 262761 263444 6762 4837|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.64.96.0\/20|265466 262761 263444 6762 3491 4760|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.64.112.0\/20|265466 262761 263444 6762 3491 4760|IGP|xxx|0|0||NAG||<\/code><br \/>\n<i>Provoni t\u00eb keni parasysh se \u00e7far\u00eb nuk shkon k\u00ebtu<\/i><\/p>\n<p>Duket se dikush ka marr\u00eb prefiksin nga rruga, e ka ndar\u00eb n\u00eb dy pjes\u00eb dhe ka njoftuar nj\u00eb rrug\u00eb me t\u00eb nj\u00ebjtin AS_PATH p\u00ebr k\u00ebto dy prefikse.<\/p>\n<p><code>TABLE_DUMP2|1554076800|B|xxx|263444|1.6.36.0\/23|263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|263444|1.6.38.0\/23|263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|61775|1.6.36.0\/23|61775 262761 263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|61775|1.6.38.0\/23|61775 262761 263444 52320 9583|IGP|xxx|0|0|32:12595 52320:21311 65444:20000|NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.36.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|265466|1.6.38.0\/23|265466 262761 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|28172|1.6.36.0\/23|28172 52531 263444 52320 9583|IGP|xxx|0|0||NAG||<br \/>\nTABLE_DUMP2|1554076800|B|xxx|28172|1.6.38.0\/23|28172 52531 263444 52320 9583|IGP|xxx|0|0||NAG||<\/code><br \/>\n<i>Shembuj t\u00eb rrug\u00ebve p\u00ebr nj\u00eb nga \u00e7iftet e prefikseve t\u00eb ndara<\/i><\/p>\n<p>Krijohet menj\u00ebher\u00eb nj\u00eb num\u00ebr pyetjesh. A ka kush provuar n\u00eb praktik\u00eb k\u00ebt\u00eb lloj zaptimi? A ka ndonj\u00eb q\u00eb ka pranuar k\u00ebto rrug\u00eb? \u00c7far\u00eb prefikse jan\u00eb prekur?<\/p>\n<p>K\u00ebtu fillon seria jon\u00eb e d\u00ebshtimeve dhe nj\u00eb raund tjet\u00ebr zhg\u00ebnjimi n\u00eb gjendjen aktuale t\u00eb sh\u00ebndetit t\u00eb Internetit.<\/p>\n<h3>Rruga e d\u00ebshtimeve<\/h3>\n<p>\nT\u00eb gjitha n\u00eb radh\u00eb. Si mund t\u00eb p\u00ebrcaktojm\u00eb se cilat routera po pranojn\u00eb k\u00ebto rrug\u00eb t\u00eb kapura dhe cilat trafik mund t\u00eb redirigjohet q\u00eb sot? Ne menduam t\u00eb fillojm\u00eb me prefiksat \/25, sepse ato \"thjesht nuk mund t\u00eb ken\u00eb shp\u00ebrndarje globale\". Si\u00e7 mund ta imagjinoni - ne ishim shum\u00eb n\u00eb gabim. Kjo metrik\u00eb rezultoi shum\u00eb e zhurmshme dhe rrug\u00ebt me k\u00ebto prefikse mund t\u00eb shfaqen madje edhe nga operator\u00ebt Tier-1. P\u00ebr shembull, NTT ka rreth 50 nga k\u00ebto prefikse q\u00eb ai i shp\u00ebrndan midis klient\u00ebve t\u00eb tij. Nga ana tjet\u00ebr, kjo metrik\u00eb \u00ebsht\u00eb e dob\u00ebt, sepse k\u00ebto prefikse mund t\u00eb filtrohen n\u00eb rast se operatori aplikon <noindex><a rel=\"nofollow\" href=\"http:\/\/bgpfilterguide.nlnog.net\/guides\/small_prefixes\/\">filt\u00ebr p\u00ebr prefiksat e vogla<\/a><\/noindex>, n\u00eb t\u00eb gjitha drejtimet. Prandaj, ky metod nuk \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm p\u00ebr t\u00eb gjetur t\u00eb gjith\u00eb operator\u00ebt, t\u00eb cil\u00ebt trafikuan rezultatin e ngjarjeve t\u00eb tilla.<\/p>\n<p>Nj\u00eb ide tjet\u00ebr e mir\u00eb na duket t\u00eb shikojm\u00eb n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/rfc6811\/\">POV<\/a><\/noindex>. Sidomos n\u00eb rrug\u00ebt q\u00eb shkelin rregullin maxLength t\u00eb ROA p\u00ebrkat\u00ebs. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, mund t\u00eb gjejm\u00eb numrin e ASN-ve origjinale t\u00eb ndryshme me status Invalid, q\u00eb ishin t\u00eb dukshme p\u00ebr k\u00ebt\u00eb AS. Megjithat\u00eb, ka nj\u00eb \"problem t\u00eb vog\u00ebl\". Vlera mesatare (mediana dhe moda) e k\u00ebtij numri (numri i ASN-ve origjinale t\u00eb ndryshme) \u00ebsht\u00eb rreth 150 dhe, edhe n\u00ebse ne filtrojm\u00eb prefikset e vogla, ajo do t\u00eb mbetet mbi 70. Kjo situat\u00eb ka nj\u00eb shpjegim t\u00eb thjesht\u00eb: ka vet\u00ebm disa operator\u00eb q\u00eb tashm\u00eb aplikojn\u00eb filtra ROA me politik\u00ebn \"t\u00eb ridrejtojn\u00eb rrug\u00ebt Invalid\" n\u00eb pik\u00ebt hyr\u00ebse, prandaj, kudo q\u00eb nj\u00eb rrug\u00eb me shkelje ROA shfaqet n\u00eb bot\u00ebn reale, ajo mund t\u00eb shp\u00ebrndahet n\u00eb t\u00eb gjitha drejtimet.<\/p>\n<p>Dy qasjet e fundit lejojn\u00eb t\u00eb gjejm\u00eb operator\u00ebt q\u00eb pan\u00eb incidentin ton\u00eb (duke qen\u00eb se ai ishte mjaft i madh), por p\u00ebrgjith\u00ebsisht ato jan\u00eb t\u00eb pap\u00ebrshtatshme. Mir\u00eb, por a mund t\u00eb gjejm\u00eb autorin? Cilat jan\u00eb karakteristikat e p\u00ebrgjithshme t\u00eb nj\u00eb manovrimi t\u00eb till\u00eb t\u00eb AS_PATH? Ka disa supozime themelore:<\/p>\n<ul>\n<li>Prefiksi kurr\u00eb nuk \u00ebsht\u00eb v\u00ebrejtur m\u00eb par\u00eb;<\/li>\n<li>ASN origjinal (kujtesa: ASN-i par\u00eb n\u00eb AS_PATH) \u00ebsht\u00eb valid;<\/li>\n<li>ASN-i i fundit n\u00eb AS_PATH \u00ebsht\u00eb ASN-i i sulmuesit (n\u00eb rast se fqinj i kontrollon ASN-in e fqinjit n\u00eb t\u00eb gjitha rrug\u00ebt hyr\u00ebse);<\/li>\n<li>Sulmi vjen nga nj\u00eb ofrues i vet\u00ebm.<\/li>\n<\/ul>\n<p>\nN\u00ebse t\u00eb gjitha supozimet jan\u00eb t\u00eb sakta, at\u00ebher\u00eb n\u00eb t\u00eb gjitha rrug\u00ebt e gabuara do t\u00eb paraqitet ASN i sulmuesit (p\u00ebrve\u00e7 ASN origjinal) dhe, k\u00ebshtu, kjo \u00ebsht\u00eb nj\u00eb \"pik\u00eb kritike\". Mes grabit\u00ebsve t\u00eb v\u00ebrtet\u00eb ishte edhe AS263444, megjith\u00ebse kishte edhe t\u00eb tjer\u00eb. Edhe kur e hodh\u00ebm posht\u00eb rrug\u00ebt e incidentit nga shqyrtimi. Pse? Pika kritike mund t\u00eb mbetet kritike edhe p\u00ebr rrug\u00ebt e sakta. Ajo mund t\u00eb jet\u00eb ose rezultat i lidhshm\u00ebris\u00eb s\u00eb dob\u00ebt n\u00eb ndonj\u00eb rajon, ose kufizimeve t\u00eb shikueshm\u00ebris\u00eb son\u00eb.<\/p>\n<p>Si rezultat: ka nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb zbuluar sulmuesin, por vet\u00ebm n\u00eb rast se p\u00ebrputhen t\u00eb gjitha kushtet e m\u00ebsip\u00ebrme dhe vet\u00ebm kur kapja \u00ebsht\u00eb mjaft e madhe p\u00ebr t\u00eb kaluar pragjet e monitorimit. N\u00ebse disa nga k\u00ebto faktor\u00eb nuk respektohen, a mund t\u00eb identifikojm\u00eb prefixet e prekur nga nj\u00eb kapje t\u00eb till\u00eb? P\u00ebr disa operator\u00eb \u2014 po.<\/p>\n<p>Kur sulmuesi krijon nj\u00eb rrug\u00eb m\u00eb specifike, ky prefix nuk shpallet nga pronari i v\u00ebrtet\u00eb. N\u00eb rast se ju keni nj\u00eb list\u00eb dinamike t\u00eb t\u00eb gjitha prefixeve t\u00eb tij, at\u00ebher\u00eb krijohet mund\u00ebsia p\u00ebr t\u00eb b\u00ebr\u00eb nj\u00eb krahasim dhe p\u00ebr t\u00eb gjetur rrug\u00ebt e deformuara m\u00eb specifike. Ne mbledhim k\u00ebt\u00eb list\u00eb prefixesh p\u00ebrmes BGP sesioneve tona, pasi na jepet jo vet\u00ebm lista e plot\u00eb e rrug\u00ebve, t\u00eb dukshme p\u00ebr operatorin tani, por edhe lista e t\u00eb gjitha prefixeve q\u00eb ai d\u00ebshiron t\u00eb shpall\u00eb n\u00eb bot\u00eb. Fatkeq\u00ebsisht, tani ka disa dhjet\u00ebra p\u00ebrdorues Radar, t\u00eb cil\u00ebt k\u00ebt\u00eb pjes\u00eb t\u00eb fundit nuk e realizojn\u00eb plot\u00ebsisht si\u00e7 duhet. S\u00eb shpejti do t'i njoftojm\u00eb ata dhe do t\u00eb p\u00ebrpiqemi t\u00eb zgjidhim k\u00ebt\u00eb problem. T\u00eb tjer\u00ebt mund t\u00eb bashkohen me sistemin ton\u00eb t\u00eb monitorimit tani.<\/p>\n<p>N\u00ebse kthehemi n\u00eb incidentin fillestar, si sulmuesi ashtu edhe zona e shp\u00ebrndarjes u identifikuan nga ne duke k\u00ebrkuar pika kritike. Befas, por AS263444 po shp\u00ebrndante rrug\u00eb t\u00eb falsifikuara vet\u00ebm p\u00ebr disa nga klient\u00ebt e tij. Megjithat\u00eb, ka edhe nj\u00eb pik\u00eb m\u00eb t\u00eb \u00e7uditshme.<\/p>\n<p><code>BGP4MP|1554905421|A|xxx|263444|178.248.236.0\/24|263444 6762 197068|IGP|xxx|0|0|13106:12832 22356:6453 65444:20000|NAG||<br \/>\nBGP4MP|1554905421|A|xxx|263444|178.248.237.0\/24|263444 6762 197068|IGP|xxx|0|0|13106:12832 22356:6453 65444:20000|NAG||<\/code><br \/>\n<i>Nj\u00eb shembull i fundit i p\u00ebrpjekjes p\u00ebr t\u00eb kapur hap\u00ebsir\u00ebn ton\u00eb adresore<\/i><\/p>\n<p>Kur u krijuan more specific\u2019\u00ebt p\u00ebr prefiksat tan\u00eb, u p\u00ebrdor nj\u00eb AS_PATH i krijuar posa\u00e7\u00ebrisht. Megjithat\u00eb, ky AS_PATH nuk mund t\u00eb merrej nga asnj\u00eb nga rrug\u00ebt tona t\u00eb m\u00ebparshme. Ne madje nuk kemi lidhje me AS6762. Po shikojm\u00eb rrug\u00eb t\u00eb tjera n\u00eb incident: disa prej tyre pat\u00ebn nj\u00eb AS_PATH t\u00eb v\u00ebrtet\u00eb, i cili u p\u00ebrdor m\u00eb par\u00eb, nd\u00ebrsa t\u00eb tjer\u00ebt jo, edhe n\u00ebse duken si t\u00eb till\u00eb. Nj\u00eb ndryshim tjet\u00ebr n\u00eb AS_PATH nuk ka asnj\u00eb kuptim praktik, pasi n\u00eb \u00e7do rast trafiku do t\u00eb redirektohet te sulmuesi, por rrug\u00ebt me AS_PATH t\u00eb 'keq' mund t\u00eb filtrohen nga ASPA ose ndonj\u00eb mekaniz\u00ebm tjet\u00ebr verifikimi. K\u00ebtu, ne po mendojm\u00eb p\u00ebr motivin e grabit\u00ebsit. Tani na mungojn\u00eb t\u00eb dh\u00ebnat p\u00ebr t\u00eb pretenduar se ky incident ishte nj\u00eb sulm i planifikuar. Megjithat\u00eb, \u00ebsht\u00eb e mundur. Le t\u00eb p\u00ebrpiqemi t\u00eb imagjinom\u00eb nj\u00eb situat\u00eb, ndon\u00ebse hipotetike, por potencialisht shum\u00eb reale.<\/p>\n<h3>Sulmi ideal<\/h3>\n<p>\n\u00c7far\u00eb kemi? Supozoni se jeni nj\u00eb ofrues transit, q\u00eb transmeton rrug\u00ebt p\u00ebr klient\u00ebt e tij. N\u00ebse klient\u00ebt tuaj kan\u00eb nj\u00eb prani multiple (multihome), at\u00ebher\u00eb do t\u00eb merrni vet\u00ebm nj\u00eb pjes\u00eb t\u00eb trafikut t\u00eb tyre. Por sa m\u00eb shum\u00eb trafik \u2013 aq m\u00eb shum\u00eb t\u00eb ardhura p\u00ebr ju. Prandaj, n\u00ebse filloni t\u00eb shpallni prefikset e n\u00ebnrrug\u00ebve t\u00eb k\u00ebtyre rrug\u00ebve me t\u00eb nj\u00ebjtin AS_PATH, do t\u00eb merrni pjes\u00ebn tjet\u00ebr t\u00eb trafikut t\u00eb tyre. Si pasoj\u00eb, do t\u00eb merrni edhe pjes\u00ebn tjet\u00ebr t\u00eb parave.<\/p>\n<p>A do t\u00eb ndihmoj\u00eb k\u00ebtu ROA? Ndoshta, po, n\u00ebse vendosni t\u00eb t\u00ebrhiqeni plot\u00ebsisht nga p\u00ebrdorimi <noindex><a rel=\"nofollow\" href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-sidrops-rpkimaxlen\/\">maxLength<\/a><\/noindex>. P\u00ebr m\u00eb tep\u00ebr, n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb jasht\u00ebzakonisht e pap\u00ebrshtatshme t\u00eb keni regjistrime ROA me prefikse t\u00eb mbivendosura. P\u00ebr disa operator\u00eb, k\u00ebto kufizime jan\u00eb t\u00eb papranueshme.<\/p>\n<p>Duke shqyrtuar mekanizmat e tjer\u00eb p\u00ebr sigurimin e siguris\u00eb s\u00eb rrug\u00ebve, n\u00eb k\u00ebt\u00eb rast ASPA gjithashtu nuk do t\u00eb ndihmoj\u00eb (sepse p\u00ebrdoret AS_PATH nga rruga e lejueshme). BGPSec ende nuk \u00ebsht\u00eb nj\u00eb opsion optimal p\u00ebr shkak t\u00eb p\u00ebrqindjes s\u00eb ul\u00ebt t\u00eb pranimit dhe mund\u00ebsis\u00eb s\u00eb mbetjeve t\u00eb sulmeve downgrade.<\/p>\n<p>Prandaj, ne kemi nj\u00eb fitim t\u00eb qart\u00eb p\u00ebr sulmuesin dhe munges\u00eb sigurie. Nj\u00eb p\u00ebrzierje e shk\u00eblqyer!<\/p>\n<h3>\u00c7far\u00eb duhet t\u00eb b\u00ebjm\u00eb?<\/h3>\n<p>\nHapi i duksh\u00ebm dhe m\u00eb radikal \u00ebsht\u00eb rishikimi i politik\u00ebs tuaj aktuale t\u00eb rrug\u00ebzimit. Ndaloni hap\u00ebsir\u00ebn tuaj t\u00eb adresave n\u00eb cop\u00ebza sa m\u00eb t\u00eb vogla (pa p\u00ebrputhje) q\u00eb d\u00ebshironi t\u00eb shpallni. N\u00ebnshkruani ROA vet\u00ebm p\u00ebr to, pa p\u00ebrdorur parametrin maxLength. N\u00eb k\u00ebt\u00eb rast, POV aktual mund t'ju shp\u00ebtoj\u00eb nga nj\u00eb sulm t\u00eb till\u00eb. Megjithat\u00eb, p\u00ebrs\u00ebri, p\u00ebr disa operat\u00ebra ky qasje nuk \u00ebsht\u00eb e arsyeshme p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb jasht\u00ebzakonsh\u00ebm t\u00eb rrug\u00ebve m\u00eb specifike. T\u00eb gjitha problemet e aktualizuara t\u00eb ROA dhe objekteve t\u00eb rrug\u00ebs do t\u00eb p\u00ebrshkruhen n\u00eb nj\u00eb nga materialet tona t\u00eb ardhshme.<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb p\u00ebrpiqeni t\u00eb monitoroni interceptimet e tilla. P\u00ebr k\u00ebt\u00eb, na nevojitet informacion i besuesh\u00ebm p\u00ebr prefiksat tuaja. K\u00ebshtu, n\u00ebse vendosni nj\u00eb sesion BGP me kolektorin ton\u00eb dhe na d\u00ebrgoni informacionin tuaj mbi dukshm\u00ebrin\u00eb n\u00eb internet - ne mund t\u00eb gjejm\u00eb fush\u00ebn e shp\u00ebrndarjes dhe p\u00ebr incidente t\u00eb tjera. P\u00ebr ata q\u00eb ende nuk jan\u00eb t\u00eb lidhur me sistemin ton\u00eb t\u00eb monitorimit - fillimisht na mjafton nj\u00eb list\u00eb rrug\u00ebsh me vet\u00ebm prefiksat tuaj. N\u00ebse keni nj\u00eb sesion me ne, ju lutemi kontrolloni q\u00eb t\u00eb gjitha rrug\u00ebt tuaja jan\u00eb d\u00ebrguar. Fatkeq\u00ebsisht, kjo duhet p\u00ebrmendur, pasi disa operat\u00ebra harrojn\u00eb nj\u00eb ose dy prefikse dhe k\u00ebshtu krijojn\u00eb pengesa p\u00ebr metodat tona t\u00eb k\u00ebrkimit. N\u00ebse b\u00ebhet si\u00e7 duhet, do t\u00eb kemi t\u00eb dh\u00ebna t\u00eb besueshme mbi prefiksat tuaja, t\u00eb cilat n\u00eb t\u00eb ardhmen do t\u00eb ndihmojn\u00eb p\u00ebr t\u00eb identifikuar n\u00eb m\u00ebnyr\u00eb automatike dhe p\u00ebr t\u00eb zbuluar k\u00ebt\u00eb (dhe lloje t\u00eb tjera) t\u00eb interceptimit t\u00eb trafik\u00ebve p\u00ebr hap\u00ebsir\u00ebn tuaj t\u00eb adresave.<\/p>\n<p>N\u00ebse e kuptoni n\u00eb koh\u00eb reale nj\u00eb interceptim t\u00eb till\u00eb t\u00eb trafik\u00ebs tuaj, mund t\u00eb provoni t\u00eb kund\u00ebrshtoni vet\u00eb. Qasja e par\u00eb \u00ebsht\u00eb t\u00eb shpallni rrug\u00ebt me k\u00ebto prefikse m\u00eb specifike vet\u00eb. N\u00eb rast t\u00eb nj\u00eb sulmi t\u00eb ri ndaj k\u00ebtyre prefikseve - p\u00ebrs\u00ebrisni.<\/p>\n<p>Qasja e dyt\u00eb \u00ebsht\u00eb t\u00eb nd\u00ebshkoni agresorin dhe ata p\u00ebr t\u00eb cil\u00ebt ai \u00ebsht\u00eb nj\u00eb pik\u00eb e r\u00ebnd\u00ebsishme (p\u00ebr rrug\u00ebt e mira), duke e prer\u00eb aksesin e rrug\u00ebve tuaja tek agresori. Kjo mund t\u00eb b\u00ebhet duke e shtuar ASN e agresorit n\u00eb AS_PATH e rrug\u00ebve tuaja t\u00eb vjetra duke e detyruar ata t\u00eb shmangin k\u00ebt\u00eb AS, duke p\u00ebrdorur mekanizmin e nd\u00ebrtuar p\u00ebr zbules\u00ebn e cikleve n\u00eb BGP. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/en\/company\/qrator\/blog\/431244\/\">p\u00ebr mir\u00ebqenien tuaj<\/a><\/noindex>.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/qrator\/blog\/447876\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 (hjjack) \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 RIPE. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440, \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0430\u043b \u0431\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043d\u0430 \u0447\u0438\u0441\u0442\u0443\u044e \u0432\u043e\u0434\u0443. \u0415\u0441\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043d\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0431\u0435\u0440\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0449\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432, \u0442\u043e \u0442\u0430\u043a\u043e\u0439 LIR, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c BGP-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31415","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u0441\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u043b\u043e\u0445\u043e \u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:41:08+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:41:08+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Gjith\u00e7ka \u00ebsht\u00eb shum\u00eb keq ose nj\u00eb lloj i ri i kapjes s\u00eb trafikut | ProHoster","description":"M\u00eb 13 mars, nj\u00eb propozuar iu d\u00ebrgua grupit t\u00eb pun\u00ebs RIPE p\u00ebr t\u00eb luftuar abuzimet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0441\u0435 \u043e\u0447\u0435\u043d\u044c \u043f\u043b\u043e\u0445\u043e \u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"13 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 RIPE \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vse-ochen-ploho-ili-novyj-vid-perehvata-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:08+00:00","article:modified_time":"2019-10-31T18:41:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31415","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:04:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:17:25","updated":"2026-01-21 06:04:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31415"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31415\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31415"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}