{"id":32724,"date":"2019-10-31T21:48:35","date_gmt":"2019-10-31T18:48:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos\/"},"modified":"2019-10-31T21:48:35","modified_gmt":"2019-10-31T18:48:35","slug":"chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","title":{"rendered":"\u00c7far\u00eb \u00ebsht\u00eb \u00e7far\u00eb dhe kush \u00ebsht\u00eb kush n\u00eb tregun e mbrojtjes nga DDoS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00abDjali, i cili na b\u00ebri faqen, tashm\u00eb ka vendosur mbrojtjen nga DDoS\u00bb.
\n\u00abNe kemi mbrojtje nga DDoS, pse ra faqja?\u00bb
\n\u00abSa-saqer mij\u00eb k\u00ebrkon Qrator?\u00bb<\/p>\n

P\u00ebr t\u00eb p\u00ebrgjigjur qart\u00eb n\u00eb k\u00ebt\u00eb lloj pyetje nga klient\u00ebt\/kreu, do t\u00eb ishte mir\u00eb t\u00eb dihet se \u00e7far\u00eb fshihet pas titullit \u00abmbrojtje nga DDoS\u00bb. Zgjedhja e sh\u00ebrbimeve t\u00eb mbrojtjes ngjason m\u00eb shum\u00eb me zgjedhjen e nj\u00eb medikamenti nga mjeku, sesa me zgjedhjen e nj\u00eb tavoline n\u00eb IKEA.<\/p>\n

Kam punuar n\u00eb mb\u00ebshtetje t\u00eb faqeve p\u00ebr 11 vjet, kam p\u00ebrjetuar qindra sulme ndaj sh\u00ebrbimeve q\u00eb mb\u00ebshtes, dhe tani do t\u00eb flas pak p\u00ebr kuzhin\u00ebn e brendshme t\u00eb mbrojtjes.
\n\"\u00c7far\u00eb<\/a><\/noindex>
\nSulme t\u00eb rregullta. 350k k\u00ebrkesa totale, 52k k\u00ebrkesa legjitime<\/i>
\n<\/a><\/noindex>
\nSulmet e para u shfaq\u00ebn praktikisht bashk\u00eb me internetin. DDoS si fenomen u b\u00eb masiv q\u00eb nga fundi i viteve 2000 (shikoni www.cloudflare.com\/learning\/ddos\/famous-ddos-attacks<\/noindex>).
\nNga viti 2015-2016, pothuajse t\u00eb gjith\u00eb ofruesit e hostimit ishin n\u00ebn mbrojtjen nga sulmet DDoS, si dhe shumica e faqeve t\u00eb njohura n\u00eb fusha konkurruese (b\u00ebni nj\u00eb whois p\u00ebr IP-t\u00eb e faqeve eldorado.ru, leroymerlin.ru, tilda.ws, do t\u00eb shihni rrjetet e operator\u00ebve t\u00eb mbrojtjes).<\/p>\n

Nd\u00ebrsa 10-20 vjet m\u00eb par\u00eb, shumica e sulmeve mund t\u00eb p\u00ebrballoheshin n\u00eb serverin vete (vler\u00ebsoni rekomandimet e administratorit t\u00eb sistemit t\u00eb Lenta.ru, Maxim Moskovit nga vitet '90: lib.ru\/WEBMASTER\/sowetywww2.txt_with-big-pictures.html#10<\/a><\/noindex>), tani detyrat p\u00ebr mbrojtje jan\u00eb b\u00ebr\u00eb m\u00eb t\u00eb nd\u00ebrlikuara.<\/p>\n

Llojet e sulmeve DDoS nga k\u00ebndv\u00ebshtrimi i zgjedhjes s\u00eb ofruesit t\u00eb mbrojtjes<\/h2>\n

Sulmet n\u00eb nivelin L3 \/ L4 (sip\u00ebr modelit OSI)<\/h4>\n

\u2014 Flud i UDP nga botnet (direkt nga pajisjet e infektuara n\u00eb sh\u00ebrbimin e sulmuar d\u00ebrgohen shum\u00eb k\u00ebrkesa, server\u00ebt mbingarkojn\u00eb kanalin);
\n \u2014 Amplifikimi DNS\/NTP\/etc (nga pajisjet e infektuara d\u00ebrgohen shum\u00eb k\u00ebrkesa n\u00eb DNS\/NTP\/etc t\u00eb cenueshme, adresa e d\u00ebrguesit falsifikohet, nj\u00eb sasi e madhe paketash me p\u00ebrgjigjet e k\u00ebrkesave mbingarkojn\u00eb kanal atij, q\u00eb sulmohet; k\u00ebshtu realizohen sulmet m\u00eb masive n\u00eb internetin modern);
\n \u2014 Flud SYN \/ ACK (n\u00eb server\u00ebt e sulmuar d\u00ebrgohen shum\u00eb k\u00ebrkesa p\u00ebr t\u00eb vendosur lidhjen, ndodh mbingarkesa e radh\u00ebs s\u00eb lidhjeve);
\n \u2014 Sulmet me fragmentimin e paketave, ping of death, ping flood (lutem, k\u00ebrkoni n\u00eb Google);
\n \u2014 etj.<\/p>\n

K\u00ebto sulme kan\u00eb si q\u00ebllim \u00abt\u00eb mbingarkojn\u00eb\u00bb kanalin e serverit ose \u00abt\u00eb vrasin\u00bb aft\u00ebsin\u00eb e tij p\u00ebr t\u00eb pranuar trafikun e ri.
\nMegjith\u00ebse fludi SYN\/ACK dhe amplifikimi dallohen ndjesh\u00ebm, shum\u00eb kompani luftojn\u00eb ato n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme mir\u00eb. Problemet lindin me sulmet nga grupi tjet\u00ebr.<\/p>\n

Sulmet n\u00eb L7 (niveli i aplikacionit)<\/h4>\n

\u2014 fludi http (n\u00ebse sulmohet nj\u00eb faqe web ose ndonj\u00eb API http);
\n \u2014 sulmetimi n\u00eb pik\u00eb t\u00eb dob\u00ebta t\u00eb faqes s\u00eb internetit (t\u00eb cilat nuk kan\u00eb cache, ngarkojn\u00eb shum\u00eb faqen, etj.).<\/p>\n

Q\u00ebllimi \u2014 t\u00eb detyroj\u00eb serverin \"t\u00eb punoj\u00eb fort\", t\u00eb p\u00ebrpunoj\u00eb shum\u00eb \"si\u00e7 duket k\u00ebrkesa reale\" dhe t\u00eb mbetet pa burime p\u00ebr k\u00ebrkesat e v\u00ebrteta.<\/p>\n

Megjith\u00ebse ka edhe sulme t\u00eb tjera, k\u00ebto jan\u00eb m\u00eb t\u00eb zakonshmet.<\/p>\n

Sulmet serioze n\u00eb nivelin L7 krijohen n\u00eb nj\u00eb m\u00ebnyr\u00eb unike p\u00ebr \u00e7do projekt q\u00eb sulmohet.<\/p>\n

Pse 2 grupe?<\/b>
\nSepse ka shum\u00eb q\u00eb din\u00eb t\u00eb mbrojn\u00eb mir\u00eb sulmet n\u00eb nivelin L3 \/ L4, por ose nuk marrin aspak p\u00ebrsip\u00ebr mbrojtjen n\u00eb nivelin e aplikacionit (L7), ose p\u00ebr momentin p\u00ebrballen me to m\u00eb dob\u00ebt se alternativat.<\/p>\n

Kush \u00ebsht\u00eb kush n\u00eb tregun e mbrojtjes nga DDoS<\/h2>\n

\n(pik\u00ebpamja ime personale)<\/p>\n

Mbrojtja n\u00eb nivelin L3 \/ L4<\/h4>\n

P\u00ebr t\u00eb mbrojtur nga sulmet me amplifikim (\"mbushja\" e kanalit t\u00eb serverit) mjaftojn\u00eb kanalet e gjera (shumica e sh\u00ebrbimeve t\u00eb mbrojtjes jan\u00eb t\u00eb lidhura me shumic\u00ebn e operator\u00ebve t\u00eb m\u00ebdhenj t\u00eb kolonave n\u00eb Rusi dhe kan\u00eb kanale me kapacitet teorik m\u00eb shum\u00eb se 1 Tbps). Mos harroni se sulmet shum\u00eb t\u00eb rralla me amplifikim zgjasin m\u00eb shum\u00eb se nj\u00eb or\u00eb. N\u00ebse jeni Spamhaus dhe askush nuk ju do \u2014 po, ata mund t\u00eb p\u00ebrpiqen t'ju mbushin kanalet p\u00ebr disa dit\u00eb, madje me rrezik p\u00ebr mbijetes\u00ebn e botnetit t\u00eb p\u00ebrdorur. N\u00ebse keni thjesht nj\u00eb dyqan online, edhe n\u00ebse \u00ebsht\u00eb mvideo.ru \u2014 1 Tbps p\u00ebr disa dit\u00eb nuk do ta shihni shum\u00eb shpejt (shpresoj).<\/p>\n

P\u00ebr t\u00eb mbrojtur nga sulmet me flood SYN \/ ACK, fragmentimin e pakove, etj, nevojiten pajisje ose sisteme softuerike p\u00ebr detektimin dhe ndalimin e k\u00ebtyre sulmeve.
\nK\u00ebto pajisje prodhohen nga shum\u00eb (Arbor, ka zgjidhje nga Cisco, Huawei, implementime softuerike nga Wanguard etj.), shum\u00eb operator\u00eb t\u00eb m\u00ebdhenj tashm\u00eb i kan\u00eb instaluar dhe ofrojn\u00eb sh\u00ebrbime mbrojtjeje nga DDoS (di p\u00ebr instalimet n\u00eb Rostelecom, Megafon, TTK, MTS, n\u00eb thelb t\u00eb gjith\u00eb ofruesit e m\u00ebdhenj, k\u00ebt\u00eb e b\u00ebjn\u00eb edhe hostuesit me mbrojtjen e tyre a-la OVH.com, Hetzner.de, jam p\u00ebrballur personalisht me mbrojtjen n\u00eb ihor.ru). Disa kompani zhvillojn\u00eb zgjidhje t\u00eb tyre softuerike (teknologjit\u00eb si DPDK lejojn\u00eb p\u00ebrpunimin e trafik\u00ebve n\u00eb dhjet\u00ebra gigabite n\u00eb nj\u00eb makin\u00eb fizike x86).<\/p>\n

T\u00eb gjitha lojtar\u00ebt e njohur jan\u00eb n\u00eb gjendje t\u00eb mbrojn\u00eb L3\/L4 DDoS p\u00ebr m\u00eb s\u00eb shumti. Nuk mund t\u00eb them tani se kujt i p\u00ebrket kapaciteti maksimal i kanalit (kjo \u00ebsht\u00eb informat\u00eb e brendshme), por zakonisht nuk \u00ebsht\u00eb aq e r\u00ebnd\u00ebsishme, dhe ndarja q\u00ebndron vet\u00ebm n\u00eb se sa shpejt ndikon mbrojtja (menj\u00ebher\u00eb apo pas disa minutash koh\u00ebp\u00ebrgjigje, si n\u00eb Hetzner).
\n\u00c7\u00ebshtja \u00ebsht\u00eb se sa cil\u00ebsisht b\u00ebhet kjo: nj\u00eb sulm me amplifikim mund t\u00eb blokohen duke bllokuar trafikun nga vendet me numrin m\u00eb t\u00eb madh t\u00eb trafikut t\u00eb d\u00ebmsh\u00ebm, ose mund t\u00eb hidhen posht\u00eb vet\u00ebm ata trafik q\u00eb jan\u00eb v\u00ebrtet t\u00eb panevojsh\u00ebm.
\nPor p\u00ebr k\u00ebt\u00eb, nga p\u00ebrvoja ime, t\u00eb gjith\u00eb lojtar\u00ebt serioz\u00eb t\u00eb tregut e menaxhojn\u00eb k\u00ebt\u00eb pa problem: Qrator, DDoS-Guard, Kaspersky, G-Core Labs (ish-SkyParkCDN), ServicePipe, Stormwall, Voxility, etj.
\nNuk kam hasur me mbrojtjen nga operator\u00eb si Rostelecom, MegaFon, TTK, Beeline, sipas komenteve t\u00eb koleg\u00ebve, ata ofrojn\u00eb k\u00ebto sh\u00ebrbime mjaft cil\u00ebsisht, por ndonj\u00ebher\u00eb mungesa e p\u00ebrvoj\u00ebs ndikon: ndonj\u00ebher\u00eb duhet t\u00eb rregullohet di\u00e7ka p\u00ebrmes mb\u00ebshtetjes s\u00eb operatorit t\u00eb mbrojtjes.
\nDisa operator\u00eb kan\u00eb nj\u00eb sh\u00ebrbim t\u00eb ve\u00e7ant\u00eb \"mbrojtje ndaj sulmeve n\u00eb nivelin L3\/L4\", ose \"mbrojtje kanali\", q\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb e lir\u00eb se mbrojtja n\u00eb t\u00eb gjitha nivelet.<\/p>\n

Si ka ndikim nj\u00eb ofrues jo t\u00eb shpejt\u00eb n\u00eb sulmet dhe si i mbrojn\u00eb ato n\u00eb qindra Gbit, p\u00ebr t\u00eb cil\u00ebt nuk kan\u00eb kanale t\u00eb tyret?<\/b>Operatori i mbrojtjes mund t\u00eb lidhet me ndonj\u00eb nga ofruesit e m\u00ebdhenj dhe t\u00eb mbroj\u00eb sulmet \"n\u00eb koston e tij\". Duhet paguar p\u00ebr kanalin, por t\u00eb gjitha k\u00ebto qindra Gbit nuk do t\u00eb konsumohen gjithmon\u00eb, ka mund\u00ebsi p\u00ebr ulje t\u00eb konsiderueshme t\u00eb kostove t\u00eb kanaleve n\u00eb k\u00ebt\u00eb rast, prandaj plani mbetet funksional.
\n\"\u00c7far\u00eb<\/a><\/noindex>
\nK\u00ebto jan\u00eb raportet nga mbrojtja L3\/L4 q\u00eb kam marr\u00eb rregullisht, duke mb\u00ebshtetur sistemet e ofruesit t\u00eb hosting.<\/i><\/p>\n

Mbrojtja n\u00eb nivelin L7 (n\u00eb nivelin e aplikacionit)<\/h4>\n

Sulmet n\u00eb nivelin L7 (n\u00eb nivelin e aplikacionit) i menaxhojn\u00eb mir\u00eb dhe cil\u00ebsisht vet\u00ebm disa.
\nKam p\u00ebrvoj\u00eb reale mjaft t\u00eb madhe me
\n \u2014 Qrator.net;
\n \u2014 DDoS-Guard;
\n \u2014 G-Core Labs;
\n \u2014 Kaspersky.<\/p>\n

Ata marrin pages\u00eb p\u00ebr \u00e7do megabit t\u00eb trafikut t\u00eb past\u00ebr, ku nj\u00eb megabit kushton rreth disa mij\u00eb rubla. N\u00ebse keni t\u00eb pakt\u00ebn 100 megabite t\u00eb trafikut t\u00eb past\u00ebr \u2014 oh. Mbrojtja do t\u00eb jet\u00eb shum\u00eb e shtrenjt\u00eb. Mund t\u00eb flas n\u00eb artikujt e ardhsh\u00ebm se si t\u00eb projektosh aplikacione p\u00ebr t\u00eb kursyer shum\u00eb n\u00eb kapacitetin e kanaleve t\u00eb mbrojtjes.
\nMbret i v\u00ebrtet\u00eb i malit \u00ebsht\u00eb Qrator.net, t\u00eb tjer\u00ebt jan\u00eb shum\u00eb pas. Qrator deri tani \u00ebsht\u00eb i vetmi n\u00eb praktik\u00ebn time q\u00eb ofron nj\u00eb p\u00ebrqindje af\u00ebrsisht zero t\u00eb rreme t\u00eb sinjalizimeve, por ata jan\u00eb disa her\u00eb m\u00eb t\u00eb shtrenjt\u00eb se lojtar\u00ebt e tjer\u00eb t\u00eb tregut.<\/p>\n

Operator\u00eb t\u00eb tjer\u00eb gjithashtu ofrojn\u00eb mbrojtje cil\u00ebsore dhe t\u00eb q\u00ebndrueshme. Shum\u00eb sh\u00ebrbime q\u00eb ne mb\u00ebshtesim (p\u00ebrfshir\u00eb disa shum\u00eb t\u00eb njohura n\u00eb vendin ton\u00eb!) jan\u00eb n\u00ebn mbrojtjen e DDoS-Guard, G-Core Labs dhe jan\u00eb krejt\u00ebsisht t\u00eb k\u00ebnaqur me rezultatet q\u00eb marrin.
\n\"\u00c7far\u00eb<\/a><\/noindex>
\nSulmet e refuzuara nga Qrator<\/i><\/p>\n

Kam p\u00ebrvoj\u00eb edhe me operator\u00eb t\u00eb vegj\u00ebl mbrojtjeje si cloud-shield.ru, ddosa.net, mij\u00ebra t\u00eb tjer\u00eb. Nuk do t'i rekomandoja pa dyshim, pasi p\u00ebrvoja \u00ebsht\u00eb jo shum\u00eb e madhe; do t\u00eb flas p\u00ebr parimet e tyre t\u00eb pun\u00ebs. \u00c7mimi i mbrojtjes s\u00eb tyre \u00ebsht\u00eb shpesh 1-2 renditje m\u00eb i ul\u00ebt se ai i lojtar\u00ebve t\u00eb m\u00ebdhenj. Zakonisht, ata blejn\u00eb sh\u00ebrbimin e mbrojtjes s\u00eb pjesshme (L3\/L4) nga ndonj\u00eb nga lojtar\u00ebt m\u00eb t\u00eb m\u00ebdhenj dhe pastaj b\u00ebjn\u00eb mbrojtjen e tyre nga sulmet n\u00eb nivele m\u00eb t\u00eb larta. Kjo mund t\u00eb jet\u00eb shum\u00eb efektive dhe ju mund t\u00eb merrni nj\u00eb sh\u00ebrbim t\u00eb mir\u00eb p\u00ebr m\u00eb pak para, por ende jan\u00eb kompani t\u00eb vogla me staf t\u00eb vog\u00ebl, ju lutem merrni parasysh k\u00ebt\u00eb.<\/p>\n

Cila \u00ebsht\u00eb v\u00ebshtir\u00ebsia e refuzimit t\u00eb sulmeve n\u00eb nivelin L7?<\/h4>\n

T\u00eb gjitha aplikacionet jan\u00eb unike, dhe \u00ebsht\u00eb e nevojshme t\u00eb lejohet trafiku i dobish\u00ebm p\u00ebr to dhe t\u00eb bllokohet ai keqdash\u00ebs. Nuk arrihet gjithmon\u00eb t\u00eb ndahen bot\u00ebt p\u00ebr nj\u00eb sasi t\u00eb madhe, prandaj \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrdoren shum\u00eb, n\u00eb t\u00eb v\u00ebrtet\u00eb SHUM\u00cb nivele pastrimi t\u00eb trafik.<\/p>\n

Dikur mjaftonte moduli nginx-testcookie (https:\/\/github.com\/kyprizel\/testcookie-nginx-module<\/a><\/noindex>), dhe ai akoma mjafton p\u00ebr t\u00eb refuzuar nj\u00eb num\u00ebr t\u00eb madh sulmesh. Kur punoja n\u00eb industrin\u00eb e hosting-ut, mbrojtjen L7 e nd\u00ebrtova pik\u00ebrisht mbi nginx-testcookie.
\nFatkeq\u00ebsisht, sulmet jan\u00eb b\u00ebr\u00eb m\u00eb t\u00eb komplikuara. Testcookie p\u00ebrdor verifikime p\u00ebr bot\u00ebt n\u00eb baz\u00eb t\u00eb JS, dhe shum\u00eb bot\u00eb moderne din\u00eb t'i kalojn\u00eb ato me sukses.<\/p>\n

Botnetet sulmuese gjithashtu jan\u00eb unike, dhe \u00ebsht\u00eb e nevojshme t\u00eb merren parasysh karakteristikat e \u00e7do botneti t\u00eb madh.
\nAmplifikimi, p\u00ebrmbytja direkte nga botneti, filtrimi i trafikut nga vende t\u00eb ndryshme (filtrimi i ndrysh\u00ebm p\u00ebr vende t\u00eb ndryshme), p\u00ebrmbytja SYN\/ACK, fragmentimi i paketimeve, ICMP, p\u00ebrmbytja http; gjithashtu, n\u00eb nivelin e aplikacionit\/http \u00ebsht\u00eb e mundur t\u00eb shpikni nj\u00eb num\u00ebr t\u00eb pakufizuar sulmesh t\u00eb ndryshme.
\nN\u00eb p\u00ebrmbledhje, n\u00eb nivel t\u00eb mbrojtjes s\u00eb kanaleve, pajisjeve t\u00eb specializuara p\u00ebr pastrimin e trafik, softuerit t\u00eb specializuar, dhe konfigurimeve t\u00eb tjera t\u00eb filtrimit p\u00ebr \u00e7do klient, mund t\u00eb ket\u00eb dhjet\u00ebra dhe qindra nivele filtrimi.
\nP\u00ebr t\u00eb menaxhuar si\u00e7 duhet k\u00ebt\u00eb dhe p\u00ebr t\u00eb rregulluar cil\u00ebsimet e filtrimit p\u00ebr p\u00ebrdorues t\u00eb ndrysh\u00ebm, nevojitet nj\u00eb p\u00ebrvoj\u00eb e madhe dhe staf i kualifikuar. Edhe nj\u00eb operator i madh, i cili vendos t\u00eb ofroj\u00eb sh\u00ebrbime mbrojtjeje, nuk mund \"thjesht t\u00eb hedh\u00eb para mbi problemin\": p\u00ebrvoja duhet t\u00eb fitohet duke punuar me sitet q\u00eb ndodhen n\u00eb rrezik dhe me divergjenca false n\u00eb trafik legjitim.
\nP\u00ebr nj\u00eb operator mbrojtjeje nuk ekziston nj\u00eb buton \"shkarkim DDoS\", por ka nj\u00eb num\u00ebr t\u00eb madh mjetesh, t\u00eb cilat duhet t\u00eb din\u00eb si t'i p\u00ebrdorin.<\/p>\n

Dhe nj\u00eb shembull tjet\u00ebr bonus.
\n\"\u00c7far\u00eb<\/a><\/noindex>
\nServeri pa mbrojtje u bllokua nga hosti gjat\u00eb nj\u00eb sulmi me kapacitet 600 mbit.<\/i>
\n(\"Shk\u00ebputja\" e trafikut nuk v\u00ebrehet, pasi u sulmua vet\u00ebm 1 site, t\u00eb cilin e hoq\u00ebn p\u00ebrkoh\u00ebsisht nga serveri dhe bllokimi u hoq brenda nj\u00eb ore).<\/i>
\n\"\u00c7far\u00eb<\/a><\/noindex>
\nKy server tani \u00ebsht\u00eb n\u00ebn mbrojtje. Sulmuesit \"u dor\u00ebzuan\" pas nj\u00eb dite sulmesh t\u00eb mbrojtura. Vet\u00eb sulmi doli t\u00eb mos ishte m\u00eb i forti.<\/i><\/p>\n

Sulmet dhe mbrojtja L3\/L4 jan\u00eb m\u00eb triviale, kryesisht, ato varen nga trash\u00ebsia e kanaleve, algoritmet e detektimit dhe filtrimit t\u00eb sulmeve.
\nSulmet L7 jan\u00eb m\u00eb t\u00eb nd\u00ebrlikuara dhe origjinale, ato varen nga aplikacioni q\u00eb sulmohet, mund\u00ebsit\u00eb dhe fantazia e sulmuesve. Mbrojtja nga ato k\u00ebrkon njohuri dhe p\u00ebrvoj\u00eb t\u00eb madhe, dhe rezultati nuk mund t\u00eb jet\u00eb i menj\u00ebhersh\u00ebm dhe jo gjithmon\u00eb i garantuar. Nd\u00ebrkoh\u00eb, Google nuk ka shpikur ndonj\u00eb rrjet t\u00eb ri p\u00ebr mbrojtje.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0430\/\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430, \u043d\u0435\u043f\u043b\u043e\u0445\u043e \u0431\u044b \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u00ab\u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS\u00bb. \u0412\u044b\u0431\u043e\u0440 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u0432\u044b\u0431\u043e\u0440 \u043b\u0435\u043a\u0430\u0440\u0441\u0442\u0432\u0430 \u0432\u0440\u0430\u0447\u043e\u043c, \u0447\u0435\u043c \u0432\u044b\u0431\u043e\u0440 \u0441\u0442\u043e\u043b\u0430 \u0432 IKEA. \u042f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":24508,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-32724","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb \u00ebsht\u00eb \u00e7far\u00eb dhe kush \u00ebsht\u00eb kush n\u00eb tregun e mbrojtjes nga DDoS | ProHoster","description":"\"Djali q\u00eb na b\u00ebri faqen, tashm\u00eb e ka konfigururar mbrojtjen nga DDoS.\" \"Ne kemi mbrojtje nga DDoS, pse ra faqja?\" \"Sa sa mij\u00eb k\u00ebrkon Qrator?\" P\u00ebr t\u00eb dh\u00ebn\u00eb p\u00ebrgjigje t\u00eb k\u00ebtyre pyetjeve si\u00e7 duhet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0435\u0441\u0442\u044c \u0447\u0442\u043e \u0438 \u043a\u0442\u043e \u0435\u0441\u0442\u044c \u043a\u0442\u043e \u043d\u0430 \u0440\u044b\u043d\u043a\u0435 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS | ProHoster","og:description":"\u00ab\u041c\u0430\u043b\u044c\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u0435\u043b\u0430\u043b \u043d\u0430\u043c \u0441\u0430\u0439\u0442, \u0443\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 DDoS\u00bb. \u00ab\u0423 \u043d\u0430\u0441 \u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DDoS, \u043f\u043e\u0447\u0435\u043c\u0443 \u0441\u0430\u0439\u0442 \u043b\u0435\u0433?\u00bb \u00ab\u0421\u043a\u043e\u043b\u044c\u043a\u043e-\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u044b\u0441\u044f\u0447 \u0445\u043e\u0447\u0435\u0442 Qrator?\u00bb \u0427\u0442\u043e\u0431\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u044b.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-est-chto-i-kto-est-kto-na-rynke-zashhity-ot-ddos","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:48:35+00:00","article:modified_time":"2019-10-31T18:48:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 12:16:55","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:53:25","updated":"2026-01-21 12:16:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=32724"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/32724\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/24508"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=32724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=32724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=32724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}