{"id":38090,"date":"2019-10-31T22:21:36","date_gmt":"2019-10-31T19:21:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\/"},"modified":"2019-10-31T22:21:36","modified_gmt":"2019-10-31T19:21:36","slug":"eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","title":{"rendered":"Eksperimenti CacheBrowser: kalimi i zjarrit kinez pa proxy duke p\u00ebrdorur cache t\u00eb p\u00ebrmbajtjes","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/467201\/\"><img decoding=\"async\" alt=\"Eksperimenti CacheBrowser: kalimi i zjarrit kinez pa proxy duke p\u00ebrdorur cache t\u00eb p\u00ebrmbajtjes\" src=\"\/wp-content\/uploads\/2019\/09\/730c423783cdac5ddd8fef02d1e0bb72.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><i>Imazhi: <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/photos\/pY_AZJfdbHQ\">Unsplash<\/a><\/noindex><\/i><\/p>\n<p>Sot \u00ebsht\u00eb e v\u00ebrtet\u00eb se nj\u00eb pjes\u00eb e konsiderueshme e gjith\u00eb p\u00ebrmbajtjes n\u00eb internet shp\u00ebrndahet duke p\u00ebrdorur rrjetet CDN. N\u00eb k\u00ebt\u00eb kuad\u00ebr, ka studime n\u00eb lidhje me si ndryshuesit shp\u00ebrndajn\u00eb ndikimin e tyre n\u00eb k\u00ebto rrjete. Shkenc\u00ebtar\u00ebt nga Universiteti i Masachusetts <noindex><a rel=\"nofollow\" href=\"https:\/\/people.cs.umass.edu\/~amir\/papers\/CacheBrowser.pdf\">analizuan<\/a><\/noindex> kan\u00eb eksploruar metodat e mundshme t\u00eb bllokimit t\u00eb p\u00ebrmbajtjes CDN, duke analizuar praktikat e autoriteteve kineze, dhe gjithashtu kan\u00eb zhvilluar nj\u00eb mjet p\u00ebr t\u00eb anashkaluar k\u00ebto bllokada.<\/p>\n<p>Kemi p\u00ebrgatitur nj\u00eb material p\u00ebrmbledh\u00ebs me p\u00ebrfundimet dhe rezultatet kryesore t\u00eb k\u00ebtij eksperimenti.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Hyrje<\/h2>\n<p>\nCensura \u00ebsht\u00eb nj\u00eb k\u00ebrc\u00ebnim global p\u00ebr lirin\u00eb e fjal\u00ebs n\u00eb internet dhe p\u00ebr aksesin e lir\u00eb n\u00eb informacion. Kjo mund\u00ebsi \u00ebsht\u00eb n\u00eb mas\u00eb t\u00eb madhe e mund\u00ebsuar nga fakti se interneti ka huazuar modelin e \"komunikimit end-to-end\" nga rrjetet telefonike t\u00eb viteve '70. Kjo lejon bllokimin e aksesit n\u00eb p\u00ebrmbajtje ose komunikimin e p\u00ebrdoruesve pa shp\u00ebrndarje t\u00eb konsiderueshme ose kosto, vet\u00ebm n\u00eb baz\u00eb t\u00eb adres\u00ebs IP. K\u00ebtu jan\u00eb disa m\u00ebnyra nga bllokimi i vet\u00eb adres\u00ebs me p\u00ebrmbajtje t\u00eb ndaluar deri n\u00eb bllokimin e mund\u00ebsis\u00eb p\u00ebr p\u00ebrdoruesit q\u00eb t\u00eb dijn\u00eb p\u00ebr t\u00eb p\u00ebrmes manipulimeve me DNS.<\/p>\n<p>Megjithat\u00eb, zhvillimi i internetit ka sjell\u00eb gjithashtu m\u00ebnyra t\u00eb reja p\u00ebr shp\u00ebrndarjen e informacionit. Nj\u00eb nga ato \u00ebsht\u00eb p\u00ebrdorimi i p\u00ebrmbajtjes me cache p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar performanc\u00ebn dhe p\u00ebrshpejtuar komunikimet. Sot, ofruesit e CDN p\u00ebrpunojn\u00eb nj\u00eb sas\u00ed t\u00eb konsiderueshme t\u00eb gjith\u00eb trafikut n\u00eb bot\u00eb \u2013 p\u00ebr vet\u00ebm Akamai, liderin n\u00eb k\u00ebt\u00eb segment, q\u00eb p\u00ebrb\u00ebn deri n\u00eb 30% t\u00eb trafikut global statik t\u00eb uebit. <\/p>\n<p>Rrjeti CDN \u00ebsht\u00eb nj\u00eb sistem i shp\u00ebrndar\u00eb p\u00ebr shp\u00ebrndarjen e p\u00ebrmbajtjes s\u00eb internetit me maksimumin e shpejt\u00ebsis\u00eb. Nj\u00eb rrjet tipik CDN p\u00ebrb\u00ebhet nga servera n\u00eb pika t\u00eb ndryshme gjeografike, t\u00eb cil\u00ebt ruajn\u00eb p\u00ebrmbajtje n\u00eb cache, p\u00ebr ta \"dor\u00ebzuar\" at\u00eb p\u00ebrdoruesve q\u00eb ndodhen m\u00eb pran\u00eb k\u00ebtij serveri. Kjo ndihmon n\u00eb rritjen e shpejt\u00ebsis\u00eb s\u00eb komunikimeve online.<\/p>\n<p>P\u00ebrve\u00e7 p\u00ebrmir\u00ebsimit t\u00eb cil\u00ebsis\u00eb s\u00eb sh\u00ebrbimit p\u00ebr p\u00ebrdoruesit final\u00eb, hostimi CDN ndihmon krijuesit e p\u00ebrmbajtjes n\u00eb zgjerimin e projekteve t\u00eb tyre, duke ulur ngarkes\u00ebn n\u00eb infrastruktur\u00eb.<\/p>\n<h2>Censura e p\u00ebrmbajtjes CDN<\/h2>\n<p>\nMegjith\u00ebse trafiku CDN p\u00ebrb\u00ebn nj\u00eb pjes\u00eb t\u00eb konsiderueshme t\u00eb gjith\u00eb informacionit t\u00eb transmetuar p\u00ebrmes internetit, ende ka shum\u00eb pak studime q\u00eb shqyrtojn\u00eb se si ndihm\u00ebsit e censur\u00ebs n\u00eb bot\u00ebn reale qasen ndaj kontrollit t\u00eb saj. <\/p>\n<p>Autoret e studimit filluan me hulumtimin e teknikave t\u00eb censur\u00ebs q\u00eb mund t\u00eb aplikohen n\u00eb CDN. M\u00eb pas, ata shqyrtuan mekanizmat real\u00eb q\u00eb p\u00ebrdorin autoritetet kineze. <\/p>\n<p>S\u00eb pari, le t\u00eb flasim p\u00ebr metodat e mundshme t\u00eb censur\u00ebs dhe mund\u00ebsin\u00eb e zbatimit t\u00eb tyre p\u00ebr kontrollin e CDN.<\/p>\n<h2>Filtrimi sipas IP<\/h2>\n<p>\nKjo \u00ebsht\u00eb teknika m\u00eb e thjesht\u00eb dhe m\u00eb e p\u00ebrballueshme p\u00ebr censurimin e internetit. Duke p\u00ebrdorur k\u00ebt\u00eb qasje, censori p\u00ebrcakton dhe vendos n\u00eb list\u00ebn e zez\u00eb adresat IP t\u00eb burimeve q\u00eb publikojn\u00eb p\u00ebrmbajtje t\u00eb ndaluar. M\u00eb pas, ofruesit e internetit n\u00ebn kontroll ndalojn\u00eb d\u00ebrgimin e paketave t\u00eb d\u00ebrguara n\u00eb ato adresa. <\/p>\n<p>Bllokimi mbi baz\u00ebn e IP \u00ebsht\u00eb nj\u00eb nga metodat m\u00eb t\u00eb zakonshme t\u00eb censurimit t\u00eb internetit. Shumica e pajisjeve t\u00eb rrjetit komercial jan\u00eb t\u00eb pajisura me funksione p\u00ebr t\u00eb realizuar k\u00ebto bllokime pa shpenzime t\u00eb m\u00ebdha kompjuterike.<\/p>\n<p>Megjithat\u00eb, kjo metod\u00eb nuk \u00ebsht\u00eb shum\u00eb e p\u00ebrshtatshme p\u00ebr bllokimin e trafikut CDN p\u00ebr shkak t\u00eb disa ve\u00e7orive t\u00eb teknologjis\u00eb vet\u00eb:<\/p>\n<ul>\n<li><b>Keshim i shp\u00ebrndar\u00eb<\/b> P\u00ebr t\u00eb siguruar disponueshm\u00ebri maksimale t\u00eb p\u00ebrmbajtjes dhe p\u00ebr t\u00eb optimizuar performanc\u00ebn, rrjetet CDN ke\u0161ojn\u00eb p\u00ebrmbajtjen e p\u00ebrdoruesve n\u00eb nj\u00eb num\u00ebr t\u00eb madh server\u00ebsh n\u00eb skaj, t\u00eb vendosur n\u00eb lokacione gjeografikisht t\u00eb shp\u00ebrndara. P\u00ebr t\u00eb filtruar nj\u00eb p\u00ebrmbajtje t\u00eb till\u00eb bazuar n\u00eb IP, censori do t\u00eb duhet t\u00eb dij\u00eb adresat e t\u00eb gjith\u00eb server\u00ebve n\u00eb skaj dhe t'i vendos\u00eb ato n\u00eb list\u00ebn e zez\u00eb. Kjo do t\u00eb d\u00ebmtonte pronat kryesore t\u00eb metod\u00ebs, pasi p\u00ebrfitimi i saj kryesor \u00ebsht\u00eb se n\u00eb nj\u00eb skem\u00eb normale, bllokimi i nj\u00eb serveri lejon \"ndalimin\" e aksesit n\u00eb p\u00ebrmbajtjen e ndaluar menj\u00ebher\u00eb p\u00ebr nj\u00eb num\u00ebr t\u00eb madh njer\u00ebzish.<\/li>\n<li><b>IP t\u00eb ndara<\/b> Ofruesit komercial\u00eb t\u00eb CDN ndajn\u00eb infrastrukturen e tyre (pra server\u00ebt n\u00eb skaj, sistemin e mapimit etj.) nd\u00ebrmjet shum\u00eb klient\u00ebve. Si rezultat, p\u00ebrmbajtja e ndaluar nga CDN ngarkohet nga t\u00eb nj\u00ebjtat adresa IP si p\u00ebrmbajtja q\u00eb nuk \u00ebsht\u00eb e ndaluar. Si rezultat, \u00e7do p\u00ebrpjekje p\u00ebr filtrimin e IP do t\u00eb \u00e7onte n\u00eb bllokimin e nj\u00eb s\u00ebr\u00eb t\u00eb gjer\u00eb uebfaqesh dhe p\u00ebrmbajtjesh q\u00eb nuk e interesojn\u00eb censorin. <\/li>\n<li><b>Caktimi i dinamiksh\u00ebm i IP<\/b> P\u00ebr optimizimin e balancimit t\u00eb ngarkes\u00ebs dhe p\u00ebrmir\u00ebsimin e cil\u00ebsis\u00eb s\u00eb sh\u00ebrbimit, hartimi i edge-server\u00ebve dhe p\u00ebrdoruesve p\u00ebrfundimtar\u00eb realizohet shum\u00eb shpejt dhe dinamikisht. P\u00ebr shembull, Akamai p\u00ebrdit\u00ebson adresat IP t\u00eb kthyer \u00e7do minut\u00eb. Kjo do ta b\u00ebj\u00eb pothuajse t\u00eb pamundur lidhjen e adresave me p\u00ebrmbajtjen e ndaluar.<\/li>\n<\/ul>\n<p><\/p>\n<h2>Interferenca DNS<\/h2>\n<p>\nP\u00ebrve\u00e7 filtrimit t\u00eb IP, nj\u00eb tjet\u00ebr m\u00ebnyr\u00eb popullore p\u00ebr censurim \u00ebsht\u00eb interferenca DNS. Ky qasje n\u00ebnkupton veprime nga censuruesit p\u00ebr t\u00eb siguruar q\u00eb p\u00ebrdoruesit t\u00eb mos zbulojn\u00eb fare adresat IP t\u00eb burimeve me p\u00ebrmbajtje t\u00eb ndaluar. Kjo do t\u00eb thot\u00eb q\u00eb nd\u00ebrhyrja ndodh n\u00eb nivelin e zgjidhjes s\u00eb emrave t\u00eb domenit. Ekzistojn\u00eb disa m\u00ebnyra p\u00ebr ta b\u00ebr\u00eb k\u00ebt\u00eb, p\u00ebrfshir\u00eb kapjen e DNS-s\u00eb, p\u00ebrdorimin e teknik\u00ebs s\u00eb helmimit DNS, bllokimin e k\u00ebrkesave DNS p\u00ebr faqet e ndaluara.<\/p>\n<p>Ky \u00ebsht\u00eb nj\u00eb m\u00ebnyr\u00eb shum\u00eb efektive p\u00ebr t\u00eb bllokuar, megjithat\u00eb mund t\u00eb anashkalohen n\u00ebse p\u00ebrdoren m\u00ebnyra t\u00eb pazakonta p\u00ebr zgjidhjen e DNS, p\u00ebr shembull, kanale jasht\u00eb rrjetit. Prandaj, zakonisht censuruesit kombinojn\u00eb bllokimin DNS me p\u00ebrdorimin e filtrimit t\u00eb IP. Por, si\u00e7 u p\u00ebrmend m\u00eb sip\u00ebr, filtrimi i IP nuk \u00ebsht\u00eb efektiv p\u00ebr censurimin e p\u00ebrmbajtjes nga CDN.<\/p>\n<h2>Filtrimi sipas URL\/\u00c7el\u00ebsave me ndihm\u00ebn e DPI <\/h2>\n<p>\nPajisjet moderne p\u00ebr mbik\u00ebqyrjen e aktiviteteve n\u00eb rrjet mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb analizuar URL-t\u00eb specifike dhe \u00e7el\u00ebsat n\u00eb paketat e dh\u00ebnave q\u00eb kalojn\u00eb. Kjo teknologji njihet si DPI (inspektimi i thell\u00eb i paketave). K\u00ebto sisteme gjejn\u00eb p\u00ebrmendjet e fjal\u00ebve dhe burimeve t\u00eb ndaluara, pas s\u00eb cil\u00ebs ndodh nd\u00ebrhyrja n\u00eb komunikimin online. Si rezultat, paketat thjesht hidhen. <\/p>\n<p>Ky metod\u00eb \u00ebsht\u00eb efektive, por m\u00eb e komplikuar dhe m\u00eb eushqyeshme p\u00ebr burimet, pasi k\u00ebrkon defragmimin e t\u00eb gjitha paketave t\u00eb dh\u00ebnave q\u00eb d\u00ebrgohen n\u00eb kuad\u00ebr t\u00eb disa proceseve t\u00eb caktuara. <\/p>\n<p>P\u00ebrmbajtja nga CDN mund t\u00eb mbrohet nga nj\u00eb filtrimi t\u00eb till\u00eb ashtu si p\u00ebrmbajtja 'e zakonshme' \u2013 n\u00eb t\u00eb dy rastet ndihmon p\u00ebrdorimi i enkriptimit (dmth. HTTPS).<\/p>\n<p>P\u00ebrve\u00e7 p\u00ebrdorimit t\u00eb DPI-s\u00eb p\u00ebr gjetjen e fjal\u00ebve ky\u00e7e ose URL-ve t\u00eb burimeve t\u00eb ndaluara, k\u00ebto mjete mund t\u00eb p\u00ebrdoren edhe p\u00ebr analiza m\u00eb t\u00eb avancuara. K\u00ebto p\u00ebrfshijn\u00eb analiz\u00ebn statistike t\u00eb trafik\u00ebve online \/ offline dhe analiz\u00ebn e protokolleve t\u00eb identifikimit. K\u00ebto metoda jan\u00eb jasht\u00ebzakonisht k\u00ebrkuese p\u00ebr burime dhe aktualisht nuk ka prova t\u00eb mjaftueshme p\u00ebr p\u00ebrdorimin e tyre nga cenzor\u00ebt n\u00eb nj\u00eb shkall\u00eb t\u00eb konsiderueshme.<\/p>\n<h2>Auto-censura e ofruesve CDN<\/h2>\n<p>\nN\u00ebse cenzori \u00ebsht\u00eb nj\u00eb shtet, ai ka t\u00eb gjitha mund\u00ebsit\u00eb p\u00ebr t\u00eb ndaluar funksionimin n\u00eb vend t\u00eb atyre ofruesve CDN q\u00eb nuk i p\u00ebrmbahen ligjeve lokale q\u00eb rregullojn\u00eb qasjen n\u00eb p\u00ebrmbajtje. Nuk ka si t'i kund\u00ebrvihen auto-censur\u00ebs; prandaj, n\u00ebse nj\u00eb kompani ofruese CDN \u00ebsht\u00eb e interesuar p\u00ebr t\u00eb operuar n\u00eb nj\u00eb vend, ajo do t\u00eb detyrohet t\u00eb respektoj\u00eb ligjet lokale, edhe n\u00ebse ato kufizojn\u00eb lirin\u00eb e shprehjes.<\/p>\n<h2>Si Kina cenzuron p\u00ebrmbajtjen e CDN<\/h2>\n<p>\nFirewall-i i Madh Kinez konsiderohet pa asnj\u00eb dyshim si sistemi m\u00eb efikas dhe m\u00eb i avancuar p\u00ebr sigurimin e cenzur\u00ebs n\u00eb internet. <\/p>\n<h3>Metodologjia e hulumtimit<\/h3>\n<p>\nShkenc\u00ebtar\u00ebt kryen eksperimentime me nj\u00eb nod\u00eb Linux q\u00eb ndodhet brenda Kin\u00ebs. Ata gjithashtu kishin akses n\u00eb disa kompjuter\u00eb jasht\u00eb vendit. Fillimisht, hulumtuesit kontrolluan se \u00e7far\u00eb nga nodi po censohej, n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me at\u00eb q\u00eb u aplikohet p\u00ebrdoruesve t\u00eb tjer\u00eb kinez\u00eb - p\u00ebr k\u00ebt\u00eb arsye ata provuan t\u00eb hapnin nga ky kompjuter disa faqe t\u00eb ndaluara. K\u00ebshtu u konfirmua se niveli i nj\u00ebjt\u00eb i cenzur\u00ebs ishte i pranish\u00ebm. <\/p>\n<p>Lista e faqeve t\u00eb bllokuara n\u00eb Kin\u00eb q\u00eb p\u00ebrdorin CDN \u00ebsht\u00eb marr\u00eb nga faqja GreatFire.org. M\u00eb pas, \u00ebsht\u00eb kryer analiza e m\u00ebnyr\u00ebs s\u00eb bllokimit n\u00eb \u00e7do rast. <\/p>\n<p>Sipas t\u00eb dh\u00ebnave t\u00eb hapura, ofruesi i vet\u00ebm i madh n\u00eb tregun CDN me infrastruktur\u00eb t\u00eb vet n\u00eb Kin\u00eb \u00ebsht\u00eb Akamai. Ofrues t\u00eb tjer\u00eb q\u00eb mor\u00ebn pjes\u00eb n\u00eb hulumtim ishin: CloudFlare, Amazon CloudFront, EdgeCast, Fastly dhe SoftLayer.<\/p>\n<p>Gjat\u00eb eksperimenteve, hulumtuesit zbuluan adresat e server\u00ebve edge t\u00eb Akamai brenda vendit dhe m\u00eb pas p\u00ebrpiqeshin t\u00eb merrnin p\u00ebrmbajtje t\u00eb miratuar t\u00eb keq-kaluar p\u00ebrmes tyre. Nuk arrit\u00ebn t\u00eb merrnin akses n\u00eb p\u00ebrmbajtje t\u00eb ndaluar (kthehej nj\u00eb gabim HTTP 403 Forbidden) - \u00ebsht\u00eb e qart\u00eb se kompania b\u00ebn auto-censur\u00eb p\u00ebr t\u00eb ruajtur mund\u00ebsin\u00eb e funksionimit n\u00eb vend. Nd\u00ebrkoh\u00eb, jasht\u00eb vendit, qasja n\u00eb k\u00ebto resurse mbetej e hapur.<\/p>\n<p>Furnizuesit pa infrastruktur\u00eb n\u00eb Kin\u00eb nuk e p\u00ebrdorin vet\u00ebcenzur\u00ebn p\u00ebr p\u00ebrdoruesit vendas. <\/p>\n<p>N\u00eb rastin e furnizuesve t\u00eb tjer\u00eb, m\u00ebnyra m\u00eb e p\u00ebrdorur p\u00ebr bllokim \u00ebsht\u00eb filtrimi i DNS-it \u2013 k\u00ebrkesat p\u00ebr faqet e bllokuara lejojn\u00eb IP adresat e gabuara. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, firewall-i nuk bllokon vet\u00eb serverat edge t\u00eb CDN, pasi ata ruajn\u00eb informacione t\u00eb ndaluara dhe t\u00eb lejuara. <\/p>\n<p>Dhe n\u00ebse n\u00eb rastin e trafikut t\u00eb paenkriptuar autoritetet kan\u00eb mund\u00ebsin\u00eb t\u00eb bllokojn\u00eb faqe t\u00eb ve\u00e7anta t\u00eb faqeve me an\u00eb t\u00eb DPI, me p\u00ebrdorimin e HTTPS ato mund t\u00eb ndalojn\u00eb vet\u00ebm aksesin n\u00eb t\u00eb gjith\u00eb domenin n\u00eb p\u00ebrgjith\u00ebsi. Kjo shpesh \u00e7on n\u00eb bllokimin e p\u00ebrmbajtjes s\u00eb lejuar.<\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, n\u00eb China ekzistojn\u00eb edhe furnizues t\u00eb vet CDN, p\u00ebrfshir\u00eb rrjetet si ChinaCache, ChinaNetCenter dhe CDNetworks. T\u00eb gjitha k\u00ebto kompani plot\u00ebsojn\u00eb plot\u00ebsisht legjislacionin e vendit dhe bllokojn\u00eb p\u00ebrmbajtjen e ndaluar.<\/p>\n<h2>CacheBrowser: nj\u00eb mjet p\u00ebr kalimin e bllokimeve me an\u00eb t\u00eb CDN<\/h2>\n<p>\nSi\u00e7 e ka treguar analiza, censuruesve u \u00ebsht\u00eb mjaft e v\u00ebshtir\u00eb t\u00eb bllokojn\u00eb p\u00ebrmbajtjen e CDN. Prandaj, k\u00ebrkuesit vendos\u00ebn t\u00eb shkojn\u00eb m\u00eb tej dhe t\u00eb zhvillojn\u00eb nj\u00eb mjet p\u00ebr kalimin e bllokimeve online, i cili nuk do t\u00eb p\u00ebrdor\u00eb teknologjin\u00eb proxy. <\/p>\n<p>Ideja kryesore e k\u00ebtij instrumenti \u00ebsht\u00eb q\u00eb censuruesve p\u00ebr t\u00eb bllokuar CDN duhet t\u00eb nd\u00ebrhyjn\u00eb n\u00eb funksionimin e DNS-it, megjithat\u00eb p\u00ebr shkarkimin e p\u00ebrmbajtjes s\u00eb CDN, n\u00eb t\u00eb v\u00ebrtet\u00eb nuk \u00ebsht\u00eb e nevojshme t\u00eb p\u00ebrdoret zgjidhja e emrave t\u00eb domeneve. K\u00ebshtu, p\u00ebrdoruesi mund t\u00eb marr\u00eb p\u00ebrmbajtjen q\u00eb i nevojitet, duke iu drejtuar drejtp\u00ebrdrejt serverit edge, ku ajo tashm\u00eb \u00ebsht\u00eb e ruajtur. <\/p>\n<p>N\u00eb diagramin m\u00eb posht\u00eb paraqitet struktura e sistemit. <\/p>\n<p><img decoding=\"async\" alt=\"Eksperimenti CacheBrowser: kalimi i zjarrit kinez pa proxy duke p\u00ebrdorur cache t\u00eb p\u00ebrmbajtjes\" src=\"\/wp-content\/uploads\/2019\/09\/07d32c2f2118c8e2b8a09a6913ff978b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSoftueri klient instalohet n\u00eb kompjuterin e p\u00ebrdoruesit, p\u00ebr akses n\u00eb p\u00ebrmbajtje p\u00ebrdoret nj\u00eb shfletues i zakonsh\u00ebm. <\/p>\n<p>Kur kurset URL ose nj\u00eb pjes\u00eb e p\u00ebrmbajtjes q\u00eb \u00ebsht\u00eb tashm\u00eb k\u00ebrkuar, shfletuesi d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb n\u00eb sistemin lokal DNS (LocalDNS) p\u00ebr t\u00eb marr\u00eb adres\u00ebn IP t\u00eb hostimit. DNS-i i zakonsh\u00ebm k\u00ebrkohet vet\u00ebm p\u00ebr domenet q\u00eb nuk jan\u00eb ende t\u00eb p\u00ebrfshira n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb LocalDNS. Moduli Scraper kalon vazhdimisht p\u00ebrmes URL-ve t\u00eb k\u00ebrkuara dhe k\u00ebrkon n\u00eb list\u00eb emrat e domen\u00ebve potencialisht t\u00eb bllokuar. Pastaj, Scraper lidhet me modulim Resolver p\u00ebr t\u00eb zgjidhur domen\u00ebt e bllokuar q\u00eb jan\u00eb zbuluar rishtazi, ky modul kryen detyr\u00ebn dhe shton nj\u00eb regjistrim n\u00eb LocalDNS. Pas k\u00ebsaj, cache-i DNS i shfletuesit zbrazet p\u00ebr t'u hequr regjistrimet ekzistuese t\u00eb DNS p\u00ebr domenin e bllokuar.<\/p>\n<p>N\u00ebse moduli Resolver nuk mund t\u00eb kuptoj\u00eb se cilit ofrues CDN i p\u00ebrket domeni, at\u00ebher\u00eb ai do t\u00eb k\u00ebrkoj\u00eb ndihm\u00eb nga moduli Bootstrapper.<\/p>\n<h2>Si funksionon n\u00eb praktik\u00eb<\/h2>\n<p>\nSoftueri klient i produktit \u00ebsht\u00eb realizuar p\u00ebr Linux, por mund t\u00eb portatohet leht\u00ebsisht edhe p\u00ebr Windows. Si shfletues p\u00ebrdoret Mozilla<br \/>\nFirefox-i zakonsh\u00ebm. Modul\u00ebt Scraper dhe Resolver jan\u00eb shkruar n\u00eb Python, dhe bazat e t\u00eb dh\u00ebnave Customer-to-CDN dhe CDN-to-IP ruhen n\u00eb skedar\u00eb .txt. Si baz\u00eb t\u00eb dh\u00ebnash, LocalDNS \u00ebsht\u00eb nj\u00eb sked\u00eb e zakonshme \/etc\/hosts n\u00eb Linux.<\/p>\n<p>Si rezultat, p\u00ebr URL-n\u00eb e bllokuar t\u00eb k\u00ebtij lloji <noindex><a rel=\"nofollow\" href=\"https:\/\/blocked.com\/\">blocked.com<\/a><\/noindex> skripti do t\u00eb merrte adres\u00ebn IP t\u00eb serverit edge nga skedari \/etc\/hosts dhe do t\u00eb d\u00ebrgonte nj\u00eb k\u00ebrkes\u00eb HTTP GET p\u00ebr t\u00eb aksesuar BlockedURL.html me fushat e titullit HTTP Host:<\/p>\n<pre><code class=\"bash\">blocked.com\/ and User-Agent: Mozilla\/5.0 (Windows NT 5.1; rv:14.0) Gecko\/20100101 Firefox\/14.0.1<\/code><\/pre>\n<p>\nModuli Bootstrapper \u00ebsht\u00eb realizuar duke p\u00ebrdorur mjetin falas digwebinterface.com. Ky DNS-Resolver nuk mund t\u00eb bllokohet dhe p\u00ebrgjigjet n\u00eb k\u00ebrkesat DNS me q\u00ebllim emrat e shum\u00eb server\u00ebve DNS t\u00eb shp\u00ebrndar\u00eb gjeografikisht n\u00eb rajone t\u00eb ndryshme rrjetesh.<\/p>\n<p>Me k\u00ebt\u00eb mjet, hulumtuesit arrit\u00ebn t\u00eb merrnin qasje n\u00eb Facebook nga nodi i tyre kinez \u2013 edhe pse rrjeti social ka qen\u00eb i bllokuar prej koh\u00ebsh n\u00eb Kin\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"Eksperimenti CacheBrowser: kalimi i zjarrit kinez pa proxy duke p\u00ebrdorur cache t\u00eb p\u00ebrmbajtjes\" src=\"\/wp-content\/uploads\/2019\/09\/f33cf0e1544785bdb84234a4ac39f727.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>P\u00ebrfundim<\/h2>\n<p>\nEksperimenti tregoi se p\u00ebrdorimi i problemeve me t\u00eb cilat censuruesit hasin kur p\u00ebrpiqen t\u00eb bllokojn\u00eb p\u00ebrmbajtjen e CDN, mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb nd\u00ebrtuar nj\u00eb sistem p\u00ebrobllokimi. Ky mjet lejon t\u00eb anashkalohet bllokimi edhe n\u00eb Kin\u00eb, ku operon nj\u00eb nga sistemet m\u00eb t\u00eb fuqishme t\u00eb censur\u00ebs online.<\/p>\n<h2>Artikuj t\u00eb tjer\u00eb n\u00eb tem\u00ebn e p\u00ebrdorimit t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/infatica.io\">proksive rezidente<\/a><\/noindex> p\u00ebr biznesin:<\/h2>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/460509\/\">Si ndihmojn\u00eb proxy-t\u00eb rezidente n\u00eb biznes: nj\u00eb rast real i p\u00ebrdorimit t\u00eb Infatica n\u00eb fush\u00ebn e Data Mining.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/461537\/\">Analiz\u00eb. Si funksionon SOCKS-proxy: p\u00ebrfitimet, disavantazhet, dallimet nga teknologji t\u00eb tjera.<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/454442\/\">Si t\u00eb zgjidhni nj\u00eb rrjet proxy p\u00ebr biznesin: 3 k\u00ebshilla praktike<\/a><\/noindex><\/li>\n<\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/infatica\/blog\/467201\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435: Unsplash \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CDN-\u0441\u0435\u0442\u0435\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0446\u0435\u043d\u0437\u043e\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0441\u0432\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0442\u0438. \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0430\u0441\u0441\u0430\u0447\u0443\u0441\u0435\u0442\u0441\u0430 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 CDN-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u041a\u0438\u0442\u0430\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0442\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a. \u041c\u044b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440\u043d\u044b\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0441 \u0433\u043b\u0430\u0432\u043d\u044b\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28594,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38090","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 CacheBrowser: \u043e\u0431\u0445\u043e\u0434 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:36+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:21:36+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperimenti CacheBrowser: anashkalimi i murit t\u00eb zjarrit t\u00eb Kin\u00ebs pa proksi duke p\u00ebrdorur ruajtjen e p\u00ebrmbajtjes | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 CacheBrowser: \u043e\u0431\u0445\u043e\u0434 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/eksperiment-cachebrowser-obhod-kitajskogo-faervola-bez-proksi-s-pomoshhyu-keshirovaniya-kontenta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:36+00:00","article:modified_time":"2019-10-31T19:21:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38090","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:26:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:15:23","updated":"2026-01-23 20:26:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38090","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38090"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38090\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28594"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38090"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38090"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}