{"id":52438,"date":"2019-11-08T00:00:00","date_gmt":"2019-11-07T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube"},"modified":"2020-02-18T14:00:09","modified_gmt":"2020-02-18T11:00:09","slug":"udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","title":{"rendered":"UDP Flood nga Google ose si t\u00eb mos i hiqni gjith\u00e7ka Youtube","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb mbr\u00ebmje t\u00eb bukur pranverore, kur nuk doja t\u00eb kthehesha n\u00eb sht\u00ebpi, nd\u00ebrsa d\u00ebshira e pandalshme p\u00ebr t\u00eb jetuar dhe p\u00ebr t\u00eb njohur m\u00eb shum\u00eb m\u00eb kishte p\u00ebrv\u00ebluar, erdhi n\u00eb mendje ideja p\u00ebr t\u00eb eksperimentuar me nj\u00eb funksion t\u00ebrheq\u00ebs n\u00eb firewall t\u00eb quajtur «IP DOS policy<\/b>«.
\nPas disa p\u00ebrgatitjeve dhe njohjes me manualin, e konfigurova n\u00eb modalitetin Pass-and-Log<\/b>, p\u00ebr t\u00eb par\u00eb se \u00e7far\u00eb do t\u00eb jap\u00eb dhe sa i dobish\u00ebm \u00ebsht\u00eb ky konfigurim.
\nPas disa dit\u00ebsh (p\u00ebr t\u00eb grumbulluar statistik\u00ebn, sigurisht, dhe jo sepse harrova) shikova n\u00eb loge dhe, duke k\u00ebrcyer n\u00eb vend, duartrokita \u2014 ishin grumbulluar kaq shum\u00eb regjistrime sa q\u00eb nuk mund t\u00eb besoja. P\u00ebr sa t\u00eb duket, \u00e7far\u00eb mund t\u00eb jet\u00eb m\u00eb e leht\u00eb \u2014 aktivizo politik\u00ebn p\u00ebr t\u00eb bllokuar t\u00eb gjith\u00eb ata q\u00eb d\u00ebrgojn\u00eb, skanojn\u00eb, vendosin half-open<\/b> seansa me bllokim p\u00ebr nj\u00eb or\u00eb dhe shiko me qet\u00ebsi duke ditur se kufiri \u00ebsht\u00eb i bllokuar. Por, vitin e 34-t\u00eb t\u00eb jet\u00ebs kaloi maksimalizmi rinor dhe dikur n\u00eb pjes\u00ebn e pasme t\u00eb trurit tim d\u00ebgjova nj\u00eb z\u00eb t\u00eb vog\u00ebl: \"Pse t\u00eb mos ngrem\u00eb qepallat dhe t\u00eb shohim se cilat adresa i ka identifikuar firewalli yn\u00eb si d\u00ebrgues t\u00eb d\u00ebmsh\u00ebm? Thjesht, p\u00ebr t\u00eb shkuar deri aty.\"
\n<\/a><\/noindex>
\nFillojm\u00eb t\u00eb analizojm\u00eb t\u00eb dh\u00ebnat e marra nga lista e anomalive. Kalo adresat p\u00ebrmes nj\u00eb skripti t\u00eb thjesht\u00eb Powershell<\/b> dhe syt\u00eb m\u00eb bien n\u00eb shkronjat e njohura google<\/b>. <\/p>\n

\"UDP
\n
\nF\u00ebrkoj syt\u00eb, mbyll syt\u00eb p\u00ebr pes\u00eb minuta, p\u00ebr t'u siguruar se nuk po e imagjinova \u2014 n\u00eb t\u00eb v\u00ebrtet\u00eb, n\u00eb list\u00ebn e atyre q\u00eb firewalli e konsideroi d\u00ebrgues t\u00eb d\u00ebmsh\u00ebm, tipi i sulmit \u2014 udp flood<\/b>, adresa q\u00eb i p\u00ebrkasin kompanis\u00eb s\u00eb mir\u00ebsis\u00eb. <\/p>\n

\"UDP
\n\"UDP
\n\"UDP
\n\"UDP
\n
\nPo ndjej nj\u00eb kruajtje n\u00eb kok\u00eb, duke p\u00ebrgatitur paralelisht kapjen e paketave n\u00eb nd\u00ebrfaqen e jashtme p\u00ebr analiz\u00eb t\u00eb m\u00ebvonshme. N\u00eb mendje kalojn\u00eb mendime t\u00eb ngjyrave: \u00abSi \u00ebsht\u00eb e mundur q\u00eb di\u00e7ka e infektuar ndodhet n\u00eb skopin e Google? Dhe k\u00ebt\u00eb e zbulova un\u00eb? Po kjo \u00ebsht\u00eb, kjo \u00ebsht\u00eb \u2014 \u00e7mime, nderime dhe nj\u00eb tapishe e kuqe, dhe kazinoja ime me blackjack dhe, e dini ju\u2026\u00bb<\/p>\n

Analizoj skedarin Wireshark<\/b>-om.
\nPo, n\u00eb t\u00eb v\u00ebrtet\u00eb, nga adresa n\u00eb skopin Google <\/b>po d\u00ebrgohen paketa UDP nga porta 443 n\u00eb nj\u00eb port t\u00eb rast\u00ebsish\u00ebm n\u00eb pajisjen time.
\nPor, prit\u2026 Protokolli kalon nga UDP<\/b> n\u00eb GQUIC<\/b>.
\nSemyon Semyonych\u2026<\/p>\n

\"UDP
\n
\nMenj\u00ebher\u00eb m\u00eb vjen n\u00eb mendje prezantimi nga HighLoad <\/b>Aleksand\u00ebr Tobol<\/u> \u00abUDP<\/b> kund\u00ebr TCP<\/b> ose t\u00eb ardhmen e stak\u00ebs rrjetore»link<\/a><\/noindex>).
\nNga nj\u00ebra an\u00eb, ndiej nj\u00eb zhg\u00ebnjim t\u00eb leht\u00eb \u2014 asnj\u00eb l\u00ebvdat\u00eb, asnjeri. Nga ana tjet\u00ebr, problemi \u00ebsht\u00eb i qart\u00eb, duhet t\u00eb kuptojm\u00eb se ku dhe sa thell\u00eb duhet t\u00eb g\u00ebrmojm\u00eb.
\nP\u00ebr pak minuta bised\u00eb me Korporat\u00ebn e Mir\u00ebsis\u00eb \u2014 dhe gjith\u00e7ka vendoset n\u00eb vendin e vet. N\u00eb p\u00ebrpjekjen p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar shpejt\u00ebsin\u00eb e shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes, kompania Google <\/b>q\u00eb n\u00eb vitin 2012 njoftoi protokollin QUIC<\/b>, i cili lejon t\u00eb eliminoj\u00eb shumic\u00ebn e mang\u00ebsive t\u00eb TCP (po, po, n\u00eb k\u00ebto artikuj \u2014 Rrraz<\/a><\/noindex><\/b> dhe Dy<\/a><\/noindex><\/b> flitet p\u00ebr nj\u00eb qasje jasht\u00ebzakonisht revolucionare, por, do t\u00eb jemi t\u00eb sinqert\u00eb, d\u00ebshiroj q\u00eb fotot e maceve t\u00eb ngarkohen m\u00eb shpejt, e jo t\u00eb gjitha k\u00ebto revolucionet e nd\u00ebrgjegj\u00ebs dhe p\u00ebrparimit). Si\u00e7 tregoi hulumtimi i m\u00ebtejsh\u00ebm, shum\u00eb organizata tani po kalojn\u00eb n\u00eb nj\u00eb variant t\u00eb till\u00eb t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes.
\nProblemi n\u00eb rastin tim, dhe mendoj jo vet\u00ebm n\u00eb rastin tim, \u00ebsht\u00eb se paketa q\u00eb d\u00ebrgohen jan\u00eb tep\u00ebr t\u00eb shumta dhe firewalli i percepton si ndotje.
\nMund\u00ebsit\u00eb p\u00ebr zgjidhje ishin t\u00eb pakta:
\n1. Shto n\u00eb list\u00ebn p\u00ebrjashtimesh p\u00ebr DoS Policy<\/b> n\u00eb firewall skopin e adresave. Google<\/b>Me vet\u00ebm mendimin p\u00ebr gam\u00ebn e mundshme t\u00eb adresave, syri im filloi t\u00eb dridhet \u2014 ideja u la si e pabesueshme.
\n2. Rris pragun e aktivizimit p\u00ebr udp flood policy<\/b> \u2014 gjithashtu nuk \u00ebsht\u00eb nj\u00eb ide e mir\u00eb, ndoshta ndonj\u00eb person me t\u00eb v\u00ebrtet\u00eb t\u00eb d\u00ebmsh\u00ebm do t\u00eb kaloj\u00eb.
\n3. Ndalo komunikimin nga rrjeti i brendsh\u00ebm nga UDP <\/b>n\u00eb 443 <\/b>porta jasht\u00eb.
\nPas leximit t\u00eb m\u00ebtejsh\u00ebm rreth realizimit dhe integrimit, QUIC <\/b>n\u00eb Google Chrome<\/b> u mor vendimi p\u00ebr t\u00eb vepruar sipas opsionit t\u00eb fundit. E v\u00ebrteta \u00ebsht\u00eb se, e dashur nga t\u00eb gjith\u00eb dhe pa m\u00ebshir\u00eb (nuk kuptoj p\u00ebr \u00e7far\u00eb, m\u00eb mir\u00eb fytyra e lepurit t\u00eb kuq do t\u00eb merrte p\u00ebr kilogramet e p\u00ebrdorura t\u00eb RAM-it), Firefox<\/b>fillimisht provon t\u00eb vendos\u00eb lidhjen me p\u00ebrdorimin e Google Chrome<\/b> n\u00eb m\u00ebnyr\u00eb t\u00eb dhimbshme, por n\u00ebse nuk ndodh mrekullia, kthehet n\u00eb metodat e provuara si QUIC<\/b>, ndon\u00ebse e ndjen shum\u00eb k\u00ebt\u00eb. TLS<\/b>Krijojm\u00eb n\u00eb firewall nj\u00eb regjistrim p\u00ebr sh\u00ebrbimin <\/p>\n

Konfigurojm\u00eb nj\u00eb rregull t\u00eb ri dhe e vendosim diku m\u00eb lart n\u00eb varg. QUIC<\/b>:<\/p>\n

\"UDP
\n
\nPas aktivizimit t\u00eb rregullit, n\u00eb list\u00ebn e anomalive ka qet\u00ebsi dhe qet\u00ebsi, p\u00ebrve\u00e7 p\u00ebr shkel\u00ebsve me t\u00eb v\u00ebrtet\u00eb t\u00eb d\u00ebmsh\u00ebm.<\/p>\n

\"UDP
\n
\nFaleminderit t\u00eb gjith\u00ebve p\u00ebr v\u00ebmendjen.<\/p>\n

\"UDP
\n
\nBurimet e p\u00ebrdorura:<\/p>\n

Raporti i Aleksand\u00ebr Tobol<\/b><\/u>
\n1.P\u00ebrshkrimi i protokollit QUIC nga Infopulse<\/a><\/noindex>
\n2.KB nga Fortinet<\/a><\/noindex>
\n3.Wikipedia<\/a><\/noindex>
\n4. Nj\u00eb mbr\u00ebmje t\u00eb bukur pranverore, kur nuk doja t\u00eb kthehesha n\u00eb sht\u00ebpi, dhe d\u00ebshira e etur p\u00ebr t\u00eb jetuar dhe m\u00ebsuar me shqet\u00ebsonte dhe digjte si hekuri i nxeht\u00eb, lindi ideja p\u00ebr t\u00eb eksploruar funksionalitetin intriguese n\u00eb firewallin e quajtur \"IP DOS policy\". Pas disa p\u00ebrgatitjeve dhe njohjes me manualin, e konfigurova n\u00eb modalitetin Pass-and-Log, p\u00ebr t\u00eb par\u00eb se \u00e7far\u00eb do t\u00eb jap\u00eb dhe sa i dobish\u00ebm \u00ebsht\u00eb ky konfigurim.<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c «IP DOS policy«. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043b\u0430\u0441\u043e\u043a \u0438 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0441 \u043c\u0430\u043d\u0443\u0430\u043b\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Pass-and-Log, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0430 \u0432\u044b\u0445\u043b\u043e\u043f \u0438 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-52438","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47UDP Flood nga Google ose si t\u00eb mos privoni t\u00eb gjith\u00eb YouTube | ProHoster","description":"Nj\u00eb mbr\u00ebmje t\u00eb shk\u00eblqyer pranvere, kur nuk t\u00eb b\u00ebhej t\u00eb shkosh n\u00eb sht\u00ebpi, nd\u00ebrsa d\u00ebshira e pakontrolluar p\u00ebr t\u00eb jetuar dhe p\u00ebr t\u00eb njohur t\u00ebrhiqte dhe digjte si nj\u00eb hekur t\u00eb nxeht\u00eb, lindi ideja t\u00eb eksperimentoj me nj\u00eb mjet interesante q\u00eb quhet n\u00eb firewall.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47UDP Flood \u043e\u0442 Google \u0438\u043b\u0438 \u043a\u0430\u043a \u043d\u0435 \u043b\u0438\u0448\u0438\u0442\u044c \u0432\u0441\u0435\u0445 Youtube | ProHoster","og:description":"\u041e\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0441\u043d\u044b\u043c \u0432\u0435\u0441\u0435\u043d\u043d\u0438\u043c \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0438\u0434\u0442\u0438 \u0434\u043e\u043c\u043e\u0439 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b\u043e\u0441\u044c, \u0430 \u043d\u0435\u0443\u0435\u043c\u043d\u043e\u0435 \u0436\u0435\u043b\u0430\u043d\u0438\u0435 \u0436\u0438\u0442\u044c \u0438 \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0440\u0431\u0438\u043b\u043e \u0438 \u0436\u0433\u043b\u043e \u0430\u043a\u0438 \u043a\u0430\u043b\u0435\u043d\u044b\u043c \u0436\u0435\u043b\u0435\u0437\u043e\u043c, \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0434\u0435\u044f \u043f\u043e\u043a\u043e\u0432\u044b\u0440\u044f\u0442\u044c \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u0443\u044e \u043f\u0440\u0438\u0431\u043b\u0443\u0434\u0443 \u0444\u0438\u0447\u0443 \u043d\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/udp-flood-ot-google-ili-kak-ne-lishit-vseh-youtube","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-07T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52438","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 03:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:43:24","updated":"2026-01-24 03:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=52438"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52438\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=52438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=52438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=52438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}