{"id":72062,"date":"2020-03-01T14:51:13","date_gmt":"2020-03-01T11:51:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker"},"modified":"2020-03-03T16:14:00","modified_gmt":"2020-03-03T13:14:00","slug":"sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","title":{"rendered":"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Siguria e informacionit \u00ebsht\u00eb ndar\u00eb nga telekomunikacionet n\u00eb nj\u00eb fush\u00eb t\u00eb pavarur me specifik\u00ebn dhe pajisjet e saj. Por ekziston nj\u00eb klas\u00eb e panjohur pajisjesh, q\u00eb ndodhet n\u00eb kryq\u00ebzimin e telekomin dhe siguris\u00eb s\u00eb informacionit \u2013 <strong>brokerat e paketave t\u00eb rrjetit <\/strong>(Network Packet Broker), gjithashtu t\u00eb njohur si balancues t\u00eb ngarkes\u00ebs, switch-e t\u00eb specializuar\/monitoruese, agregator\u00eb trafikesh, Platform\u00eb t\u00eb Shp\u00ebrndarjes s\u00eb Siguris\u00eb, Dukshm\u00ebria e Rrjetit dhe k\u00ebshtu me radh\u00eb. Dhe ne, si zhvillues dhe prodhues rus i k\u00ebtyre pajisjeve, d\u00ebshirojm\u00eb t\u00eb flasim p\u00ebr to m\u00eb n\u00eb detaje.<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/4df6859dbb9973439686aa5c4e6f256c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fusha e p\u00ebrdorimit dhe detyrat q\u00eb zgjidhen<\/h3>\n<p>\nBrokerat e paketave t\u00eb rrjetit jan\u00eb pajisje t\u00eb specializuara q\u00eb kan\u00eb gjetur p\u00ebrdorimin m\u00eb t\u00eb madh n\u00eb sistemet e siguris\u00eb s\u00eb informacionit. Ky klas pajisjesh \u00ebsht\u00eb relativisht i ri dhe i pak\u00ebt n\u00eb infrastruktur\u00ebn e zakonshme t\u00eb rrjetit krahasuar me switch-at, router-at etj. Pionier n\u00eb zhvillimin e k\u00ebtij lloji pajisjesh ishte kompania amerikane Gigamon. Aktualisht ka shum\u00eb m\u00eb tep\u00ebr lojtar\u00eb n\u00eb k\u00ebt\u00eb treg (p\u00ebrfshir\u00eb zgjidhje t\u00eb ngjashme nga prodhuesi i njohur i komplekseve t\u00eb testeve \u2014 kompanis\u00eb IXIA), por p\u00ebr ekzistenc\u00ebn e k\u00ebtyre pajisjeve ende din vet\u00ebm nj\u00eb grup i ngusht\u00eb profesionist\u00ebsh. Si\u00e7 u p\u00ebrmend m\u00eb lart, edhe me terminologjin\u00eb nuk ka q\u00ebndrueshm\u00ebri t\u00eb qart\u00eb: emrat jan\u00eb t\u00eb ndrysh\u00ebm nga \"sistemi i siguris\u00eb p\u00ebr dukshm\u00ebrin\u00eb e rrjetit\" deri te thjesht \"balancuesit\".<\/p>\n<p>Duke zhvilluar brokerat e paketave t\u00eb rrjetit, u p\u00ebrball\u00ebm me faktin se, p\u00ebrve\u00e7 analiz\u00ebs s\u00eb drejtimeve t\u00eb zhvillimit t\u00eb funksionalitetit dhe testeve n\u00eb laborator\u00eb\/zona testimi, \u00ebsht\u00eb e nevojshme q\u00eb paralelisht t'u shpjegojm\u00eb konsumator\u00ebve potencial\u00eb p\u00ebr ekzistenc\u00ebn e k\u00ebsaj klase pajisjesh, pasi nuk t\u00eb gjith\u00eb jan\u00eb t\u00eb njohur me to.<\/p>\n<p>15-20 vjet m\u00eb par\u00eb, trafiku n\u00eb rrjet ishte i vog\u00ebl dhe ishin kryesisht t\u00eb dh\u00ebna t\u00eb par\u00ebnd\u00ebsishme. Por <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Jakob_Nielsen_(usability_consultant)#Contributions\">ligji i Nielsens<\/a><\/noindex> p\u00ebrfshin <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%97%D0%B0%D0%BA%D0%BE%D0%BD_%D0%9C%D1%83%D1%80%D0%B0\">ligjin e Murit<\/a><\/noindex>: shpejt\u00ebsia e lidhjes me internet rritet \u00e7do vit me 50%. V\u00ebllimi i trafik\u00ebve gjithashtu rritet vazhdimisht (n\u00eb grafik \u00ebsht\u00eb paraqitur parashikimi i vitit 2017 nga Cisco, burimi Cisco Visual Networking Index: Parashikimi dhe Trendet, 2017\u20132022):<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/1f17d80ded705b9d06781fbd96219847.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nP\u00ebrve\u00e7 shpejt\u00ebsis\u00eb, rritet r\u00ebnd\u00ebsia e informacionit q\u00eb qarkullon (si\u00e7 jan\u00eb sekretet tregtare dhe t\u00eb dh\u00ebnat personale) dhe p\u00ebrgjith\u00ebsisht funksionaliteti i infrastruktur\u00ebs. <\/p>\n<p>Si pasoj\u00eb, u krijua dhe industria e siguris\u00eb s\u00eb informacionit. Industria iu p\u00ebrgjigj k\u00ebsaj me shfaqjen e nj\u00eb spektri t\u00eb t\u00ebr\u00eb pajisjesh p\u00ebr analiz\u00ebn e thell\u00eb t\u00eb trafik\u00ebve (DPI): nga sistemet p\u00ebr parandalimin e sulmeve DDOS deri te sistemet p\u00ebr menaxhimin e ngjarjeve t\u00eb siguris\u00eb s\u00eb informacionit, p\u00ebrfshir\u00eb IDS, IPS, DLP, NBA, SIEM, Antimailware dhe k\u00ebshtu me radh\u00eb. Zakonisht secili nga k\u00ebto mjete \u00ebsht\u00eb software q\u00eb instalohet n\u00eb nj\u00eb platform\u00eb serverike. \u00c7do program (mjet analize) instalohet n\u00eb platform\u00ebn e vet serverike: prodhuesit e software jan\u00eb t\u00eb ndrysh\u00ebm, dhe gjithashtu burimet kompjuterike p\u00ebr analiz\u00eb n\u00eb L7 k\u00ebrkojn\u00eb shum\u00eb.<\/p>\n<p>Kur nd\u00ebrtohet nj\u00eb sistem i siguris\u00eb s\u00eb informacionit, duhet t\u00eb zgjidhen disa detyra kryesore:<\/p>\n<ul>\n<li>si t\u00eb transferohet trafiku nga infrastruktura n\u00eb sistemet e analiz\u00ebs? (fillimisht, portet SPAN t\u00eb dizajnuara p\u00ebr k\u00ebt\u00eb q\u00ebllim jan\u00eb t\u00eb pamjaftueshme n\u00eb infrastruktur\u00ebn e sotme, as n\u00eb num\u00ebr as n\u00eb performanc\u00eb)<\/li>\n<li>si t\u00eb shp\u00ebrndahet trafiku mes sistemeve t\u00eb ndryshme t\u00eb analiz\u00ebs?<\/li>\n<li>si t\u00eb shkall\u00ebzohen sistemet kur ka munges\u00eb t\u00eb performanc\u00ebs e nj\u00eb analisti p\u00ebr t\u00eb p\u00ebrpunuar t\u00eb gjith\u00eb v\u00ebllimin e trafik\u00ebve q\u00eb i \u00ebsht\u00eb d\u00ebrguar?<\/li>\n<li>si t\u00eb monitorohen interfetat 40G\/100G (dhe n\u00eb t\u00eb ardhmen e af\u00ebrt 200G\/400G), pasi mjetet e analiz\u00ebs aktualisht mb\u00ebshtesin vet\u00ebm interfetat 1G\/10G\/25G?<\/li>\n<\/ul>\n<p>\nDhe detyra t\u00eb tjera p\u00ebrkat\u00ebse:<\/p>\n<ul>\n<li>si t\u00eb minimalizohet trafiku q\u00eb nuk ka nevoj\u00eb p\u00ebr p\u00ebrpunim, por q\u00eb \u00ebsht\u00eb mbi mjetet e analiz\u00ebs dhe harxhon burimet e tyre?<\/li>\n<li>si t\u00eb p\u00ebrpunohen paketat e inkapsuluara dhe paketat me etiketat sh\u00ebrbyese t\u00eb pajisjeve, p\u00ebrgatitja e t\u00eb cilave p\u00ebr analiz\u00eb rezulton ose t\u00eb k\u00ebrkoj\u00eb shum\u00eb burime, ose t\u00eb jet\u00eb e pamundur fare?<\/li>\n<li>si t\u00eb p\u00ebrjashtohet nga analiza nj\u00eb pjes\u00eb e trafik\u00ebve q\u00eb nuk jan\u00eb n\u00ebn rregullimin e politik\u00ebs s\u00eb siguris\u00eb (p.sh., trafiku i menaxherit).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/21453d662b8507eb2479065c9f879a87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSi\u00e7 dihet, k\u00ebrkesa prodhon ofert\u00eb, n\u00eb p\u00ebrgjigje t\u00eb k\u00ebtyre nevojave filluan t\u00eb zhvillohen brokerat e paketave t\u00eb rrjetit.<\/p>\n<h3>P\u00ebrshkrimi i p\u00ebrgjithsh\u00ebm i broker\u00ebve t\u00eb paketave t\u00eb rrjetit<\/h3>\n<p>\nBrokerojt t\u00eb paketave t\u00eb rrjetit punojn\u00eb n\u00eb nivelin e paketave, dhe n\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb jan\u00eb t\u00eb ngjash\u00ebm me kalimtar\u00ebt e zakonsh\u00ebm. Dallimi kryesor nga kalimtar\u00ebt \u00ebsht\u00eb se rregullat p\u00ebr shp\u00ebrndarjen dhe agregimin e trafikut n\u00eb broker\u00ebt e paketave t\u00eb rrjetit p\u00ebrdefinohen plot\u00ebsisht nga konfigurimet. N\u00eb broker\u00ebt e paketave t\u00eb rrjetit nuk ka standarde p\u00ebr nd\u00ebrtimin e tabelave t\u00eb d\u00ebrgimit (MAC-tabelat) dhe protokollet e shk\u00ebmbimit me kalimtar\u00ebt e tjer\u00eb (si STP), dhe prandaj gama e mundshme e konfigurimeve dhe fushave t\u00eb kuptueshme n\u00eb to \u00ebsht\u00eb shum\u00eb m\u00eb e gjer\u00eb. Nj\u00eb broker mund t\u00eb shp\u00ebrndaj\u00eb trafik n\u00eb m\u00ebnyr\u00eb t\u00eb barabart\u00eb nga nj\u00eb ose disa porte hyr\u00ebse n\u00eb nj\u00eb gam\u00eb t\u00eb caktuar porte dal\u00ebse me funksionin e ngarkes\u00ebs s\u00eb barabart\u00eb n\u00eb dalje. Mund t\u00eb vendosen rregulla p\u00ebr kopjimin, filtrimin, klasifikimin, dedupnikimin dhe modifikimin e trafik. K\u00ebto rregulla mund t\u00eb aplikohen n\u00eb grupe t\u00eb ndryshme portesh hyr\u00ebse t\u00eb brokerit t\u00eb paketave t\u00eb rrjetit, si dhe mund t\u00eb aplikohen nj\u00ebpasnj\u00ebsh\u00ebm brenda vet\u00eb pajisjes. Nj\u00eb avantazh i r\u00ebnd\u00ebsish\u00ebm i brokerit t\u00eb paketave \u00ebsht\u00eb aft\u00ebsia p\u00ebr t\u00eb trajtuar trafik me shpejt\u00ebsin\u00eb e plot\u00eb t\u00eb rrjedh\u00ebs dhe p\u00ebr t\u00eb ruajtur integritetin e seancave (n\u00eb rastin e balancimit t\u00eb trafik t\u00eb disa sistemeve t\u00eb ngjashme DPI).<\/p>\n<p>Ruajtja e integritetit t\u00eb seancave p\u00ebrfshin d\u00ebrgimin e t\u00eb gjitha paketave t\u00eb nj\u00eb seance n\u00eb nivelin e transportit (TCP\/UDP\/SCTP) n\u00eb nj\u00eb port. Kjo \u00ebsht\u00eb e r\u00ebnd\u00ebsishme, pasi sistemet DPI (zakonisht nj\u00eb softuer i instaluar n\u00eb nj\u00eb server t\u00eb lidhur me portin dal\u00ebs t\u00eb brokerit t\u00eb paketave) analizojn\u00eb p\u00ebrmbajtjen e trafikut n\u00eb nivelin e aplikacionit, dhe t\u00eb gjitha paketat q\u00eb d\u00ebrgohen\/pranohen nga nj\u00eb aplikacion duhet t\u00eb arrijn\u00eb n\u00eb t\u00eb nj\u00ebjtin instanc\u00eb t\u00eb analizatorit. N\u00ebse paketat e nj\u00eb seance humbasin ose shp\u00ebrndahen midis pajisjeve t\u00eb ndryshme DPI, at\u00ebher\u00eb \u00e7do pajisje e ve\u00e7ant\u00eb DPI do t\u00eb p\u00ebrballet me nj\u00eb situat\u00eb t\u00eb ngjashme me leximin e nj\u00eb teksti jo t\u00eb plot\u00eb, por me fjal\u00eb t\u00eb ve\u00e7anta prej tij. Dhe, shum\u00eb mund\u00ebsi, teksti nuk do t\u00eb kuptohet.<\/p>\n<p>K\u00ebshtu, duke u p\u00ebrqendruar n\u00eb sistemet e siguris\u00eb informative, broker\u00ebt e paketave t\u00eb rrjetit kan\u00eb funksionalitet q\u00eb ndihmon n\u00eb lidhjen e sistemeve DPI me rrjetet telekomunikacionale me shpejt\u00ebsi t\u00eb lart\u00eb dhe n\u00eb reduktimin e ngarkes\u00ebs mbi to: kryejn\u00eb filtrimin paraprak, klasifikimin dhe p\u00ebrgatitjen e trafik p\u00ebr t\u00eb leht\u00ebsuar trajtimin e m\u00ebvonsh\u00ebm. <\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, pasi broker\u00ebt e paketave t\u00eb rrjetit ofrojn\u00eb nj\u00eb list\u00eb t\u00eb gjer\u00eb statistikash dhe shpesh jan\u00eb t\u00eb lidhur me pika t\u00eb ndryshme t\u00eb rrjetit, ata gjithashtu gjejn\u00eb vendin e tyre n\u00eb diagnostikimin e problemeve me funksionalitetin e infrastruktur\u00ebs s\u00eb vet\u00eb rrjetit.<\/p>\n<h3>Funksionalitetet kryesore t\u00eb broker\u00ebve t\u00eb paketave t\u00eb rrjetit<\/h3>\n<p>\nEmri \"kalimtar\u00eb t\u00eb specializuar \/ monitoruese\" ka lindur nga q\u00ebllimi baz\u00eb: t\u00eb mbledh\u00eb trafik nga infrastruktura (zakonisht n\u00ebp\u00ebrmjet ndar\u00ebsve optik\u00eb pasiv\u00eb TAP dhe \/ ose porteve SPAN) dhe t\u00eb shp\u00ebrndaj\u00eb midis mjeteve t\u00eb analiz\u00ebs. Midis sistemeve t\u00eb ndryshme, trafik \u00ebsht\u00eb pasqyruar (kopyohet), nd\u00ebrmjet sistemeve t\u00eb ngjashme \u2013 \u00ebsht\u00eb balancuar. Funksionet baz\u00eb zakonisht p\u00ebrfshijn\u00eb filtrimin sipas fushave deri n\u00eb L4 (MAC, IP, TCP\/UDP-port dhe t\u00eb tjer\u00eb) dhe agregimin e disa kanaleve t\u00eb pak ngarkuar n\u00eb nj\u00eb (p.sh., p\u00ebr trajtim n\u00eb nj\u00eb sistem DPI). <\/p>\n<p>Ky funksionalitet ofron zgjidhjen e detyr\u00ebs themelore - lidhjen e sistemeve DPI me infrastruktur\u00ebn rrjetore. Broker\u00ebt e prodhuesve t\u00eb ndrysh\u00ebm, q\u00eb kufizohen me funksionalitetin bazik, ofrojn\u00eb trajtimin deri n\u00eb 32 interfaca 100G n\u00eb 1U (m\u00eb shum\u00eb interfaca fizikisht nuk mund t\u00eb jen\u00eb t\u00eb vendosura n\u00eb panelin e p\u00ebrfront). Megjithat\u00eb, ata nuk lejojn\u00eb reduktimin e ngarkes\u00ebs mbi mjetet e analiz\u00ebs, dhe p\u00ebr nj\u00eb infrastruktur\u00eb t\u00eb nd\u00ebrlikuar nuk mund t\u00eb sigurojn\u00eb as k\u00ebrkesat p\u00ebr funksionin bazik: nj\u00eb seanc\u00eb, e shp\u00ebrndar\u00eb n\u00eb disa tunel\u00eb (ose e pajisur me etiketa MPLS) mund t\u00eb balancohet n\u00eb instanca t\u00eb ndryshme t\u00eb analizatorit dhe n\u00eb p\u00ebrgjith\u00ebsi t\u00eb bie nga analiza. <\/p>\n<p>P\u00ebrve\u00e7 shtimit t\u00eb interfacave 40\/100G dhe, si pasoj\u00eb, rritjes s\u00eb rendimentit, broker\u00ebt e paketave t\u00eb rrjetit po zhvillohen aktivisht n\u00eb ofrimin e mund\u00ebsive t\u00eb reja: nga balancimi sipas titujve t\u00eb thelluar n\u00eb trafik t\u00eb tuneluar deri te dekriptimi i trafik. Fatkeq\u00ebsisht, k\u00ebto modele nuk mund t\u00eb mburren me rendiment n\u00eb terabita, por lejojn\u00eb nd\u00ebrtimin e nj\u00eb sistemi t\u00eb siguris\u00eb informative q\u00eb \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb cil\u00ebsor dhe teknikisht \"i bukur\", ku \u00e7do mjet analize merr garantuar vet\u00ebm informacionin e nevojsh\u00ebm n\u00eb formatin m\u00eb t\u00eb p\u00ebrshtatsh\u00ebm p\u00ebr analiz\u00eb.<\/p>\n<h3>Funksionalitetet e zgjeruara t\u00eb broker\u00ebve t\u00eb paketave t\u00eb rrjetit<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/874e5b6372a2e532d86966d1c7fe4ba1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<strong>1.<\/strong> P\u00ebrmendim m\u00eb par\u00eb <strong>balancimin sipas titujve t\u00eb thelluar n\u00eb trafik t\u00eb tuneluara.<\/strong><\/p>\n<p>Pse \u00ebsht\u00eb e r\u00ebnd\u00ebsishme? Le t\u00eb shqyrtojm\u00eb 3 aspekte, t\u00eb cilat mund t\u00eb jen\u00eb kritike s\u00eb bashku ose ve\u00e7 e ve\u00e7:<\/p>\n<ul>\n<li>sigurimi i nj\u00eb balancimi t\u00eb barabart\u00eb n\u00eb prani t\u00eb nj\u00eb num\u00ebri t\u00eb vog\u00ebl tunelesh. N\u00eb rast se n\u00eb pik\u00ebn e lidhjes s\u00eb sistemeve t\u00eb siguris\u00eb informuese ka vet\u00ebm 2 tunele, at\u00ebher\u00eb nuk do t\u00eb jet\u00eb e mundur t\u00eb balancohet duke p\u00ebrdorur tituj t\u00eb jasht\u00ebm n\u00eb 3 platforma serverash pa humbur seanc\u00ebn. N\u00eb k\u00ebt\u00eb rast, trafiku n\u00eb rrjet transmetohet n\u00eb m\u00ebnyr\u00eb t\u00eb paekuilibruar, dhe drejtimi i \u00e7do tuneli n\u00eb nj\u00eb mjet p\u00ebrpunimi do t\u00eb k\u00ebrkonte performanc\u00eb t\u00eb tepruar nga ky i fundit;<\/li>\n<li>sigurimi i integritetit t\u00eb seancave dhe rrjedhave t\u00eb protokolleve multisessionale (p.sh., FTP dhe VoIP), paketat e t\u00eb cil\u00ebve p\u00ebrfunduan n\u00eb tunela t\u00eb ndrysh\u00ebm. Kompleksiteti i infrastruktur\u00ebs rrjet\u00ebsor\u00eb po rritet vazhdimisht: rezervimi, virtualizimi, thjeshtimi i administrat\u00ebs dhe k\u00ebshtu me radh\u00eb. Nj\u00ebra an\u00eb, kjo rrit besueshm\u00ebrin\u00eb n\u00eb lidhje me transmetimin e t\u00eb dh\u00ebnave, nga ana tjet\u00ebr, e b\u00ebn pun\u00ebn e sistemeve t\u00eb siguris\u00eb informuese m\u00eb t\u00eb v\u00ebshtir\u00eb. Edhe kur ka mjaftuesh\u00ebm performanc\u00eb p\u00ebr analizuesit p\u00ebr t\u00eb procesuar kanalin e dedikuar me tunela, problemi mbetet i pazgjidhsh\u00ebm, pasi nj\u00eb pjes\u00eb e paketave t\u00eb seanc\u00ebs s\u00eb p\u00ebrdoruesit transmetohet p\u00ebrmes nj\u00eb kanali tjet\u00ebr. Dhe n\u00ebse p\u00ebr integritetin e seancave n\u00eb disa infrastrukturat ende b\u00ebjn\u00eb kujdes, protokollet multisessionale mund t\u00eb shkojn\u00eb n\u00eb m\u00ebnyra krejt\u00ebsisht t\u00eb ndryshme;<\/li>\n<li>balancimi n\u00eb prani t\u00eb MPLS, VLAN, etiketa individuale t\u00eb pajisjeve, etj. Nuk jan\u00eb plot\u00ebsisht tunele, por megjithat\u00eb pajisjet me funksionalitet baz\u00eb mund ta kuptojn\u00eb k\u00ebt\u00eb trafik jo si IP dhe ta balancojn\u00eb sipas adresave MAC, duke e shkelur s\u00ebrish barazin\u00eb e balancimit ose integritetin e seancave.<\/li>\n<\/ul>\n<p>\nBrokeri i paketave rrjetore analizon titujt e jasht\u00ebm dhe kalon rregullisht p\u00ebrmes treguesve deri n\u00eb titullin e p\u00ebrgjithsh\u00ebm IP dhe balancohet sipas tij. Si rezultat, numri i rrjedhave rritet duksh\u00ebm (p\u00ebrkat\u00ebsisht mund t\u00eb balancohet m\u00eb barabar dhe n\u00eb nj\u00eb num\u00ebr m\u00eb t\u00eb madh platformash), dhe sistemi DPI merr t\u00eb gjitha paketat e seanc\u00ebs dhe t\u00eb gjitha seancat e lidhura t\u00eb protokolleve multisessionale.<\/p>\n<p><strong>2. Modifikimi i trafikut.<\/strong><br \/>\nNj\u00eb nga funksionet m\u00eb t\u00eb gjera n\u00eb mund\u00ebsi, numri i n\u00ebnfunksioneve dhe variacioneve t\u00eb p\u00ebrdorimit \u00ebsht\u00eb i shumt\u00eb:<\/p>\n<ul>\n<li>heqja e payload, n\u00eb k\u00ebt\u00eb rast mjetit analitik i d\u00ebrgohen vet\u00ebm titujt e paketave. Kjo \u00ebsht\u00eb e r\u00ebnd\u00ebsishme p\u00ebr mjetet analizuese ose p\u00ebr tipet e trafikut, n\u00eb t\u00eb cilat p\u00ebrmbajtja e paketave ose nuk ka ndonj\u00eb r\u00ebnd\u00ebsi, ose nuk mund t\u00eb analizohet. P\u00ebr shembull, p\u00ebr trafik t\u00eb enkriptuar, t\u00eb dh\u00ebnat parametrike t\u00eb shk\u00ebmbimit (Kush, me k\u00eb, kur dhe sa) mund t\u00eb jen\u00eb interesante, nd\u00ebrsa payload \u00ebsht\u00eb faktikisht mbeturina q\u00eb z\u00eb hap\u00ebsir\u00eb n\u00eb kanal dhe burime llogarije t\u00eb analistit. Ka variacione ku payload pritet duke filluar nga nj\u00eb offset i caktuar - kjo ofron nj\u00eb hap\u00ebsir\u00eb m\u00eb t\u00eb madhe p\u00ebr mjetet analizuese;<\/li>\n<li>detunelimi, dometh\u00ebn\u00eb heqja e titujve, q\u00eb sh\u00ebnojn\u00eb dhe identifikojn\u00eb tunel\u00ebt. Q\u00ebllimi \u00ebsht\u00eb reduktimi i ngarkes\u00ebs n\u00eb mjetet analizuese dhe rritja e efikasitetit t\u00eb tyre. Detunelimi mund t\u00eb kryhet n\u00eb baz\u00eb t\u00eb nj\u00eb offset-i t\u00eb caktuar ose me analiz\u00eb dinamike t\u00eb titujve dhe p\u00ebrcaktimin e offset-it p\u00ebr secil\u00ebn paket\u00eb;<\/li>\n<li>heqja e disa titujve t\u00eb paketave: etiketat MPLS, VLAN, fusha specifike t\u00eb pajisjeve t\u00eb pal\u00ebve t\u00eb treta;<\/li>\n<li>maskimi i disa titujve, p\u00ebr shembull, maskimi i adresave IP p\u00ebr t\u00eb siguruar anonimizimin e trafikut;<\/li>\n<li>shtimi i informacionit ndihm\u00ebs n\u00eb paket\u00eb: etiketat e koh\u00ebs, porti i hyrjes, etiketat e klas\u00ebs s\u00eb trafikut, etj.<\/li>\n<\/ul>\n<p>\n<strong>3. Deduplication<\/strong> \u2013 pastrimi nga paketat e p\u00ebrs\u00ebritura t\u00eb trafik p\u00ebr t'u d\u00ebrguar n\u00eb mjetet analizuese. Paketat e p\u00ebrs\u00ebritura shpesh lindin p\u00ebr shkak t\u00eb ve\u00e7orive t\u00eb lidhjes me infrastruktur\u00ebn \u2013 trafiku mund t\u00eb kaloj\u00eb p\u00ebrmes disa pikave t\u00eb analiz\u00ebs dhe t\u00eb pasqyrohet nga \u00e7do nj\u00ebra prej tyre. Po ashtu, d\u00ebrgimi i p\u00ebrs\u00ebritur i paketimeve TCP t\u00eb cilat nuk arrit\u00ebn gjithashtu ndodh, por n\u00ebse jan\u00eb shum\u00eb, at\u00ebher\u00eb ajo \u00ebsht\u00eb m\u00eb shum\u00eb nj\u00eb \u00e7\u00ebshtje p\u00ebr monitorimin e cil\u00ebsis\u00eb s\u00eb rrjetit, jo p\u00ebr sigurin\u00eb informacionit brenda saj.<\/p>\n<p><strong>4. Funksione t\u00eb avancuara t\u00eb filtrimit <\/strong>\u2013 nga k\u00ebrkimi i vlerave specifike deri n\u00eb analiz\u00ebn e n\u00ebnshkrimeve p\u00ebr t\u00ebr\u00eb paket\u00ebn.<\/p>\n<p><strong>5. Gjenerimi i NetFlow\/IPFIX<\/strong> \u2013 mbledhja e nj\u00eb liste t\u00eb gjer\u00eb statistikash mbi trafik q\u00eb kalon dhe d\u00ebrgimi i saj n\u00eb mjetet analizuese.<\/p>\n<p><strong>6. Deshifrimi i trafik SSL,<\/strong> punon me kushtin e ngarkes\u00ebs paraprake t\u00eb certifikatave dhe \u00e7el\u00ebsave n\u00eb brokerin e paketave rrjetore. Sidoqoft\u00eb, kjo lejon nj\u00eb shkarkim t\u00eb konsideruesh\u00ebm t\u00eb mjeteve analizuese. <\/p>\n<p>Ka edhe shum\u00eb funksione t\u00eb tjera, t\u00eb dobishme dhe tregtare, por ndoshta funksionet kryesore jan\u00eb p\u00ebrmendur.<\/p>\n<p>Zhvillimi i sistemeve t\u00eb zbulimit (t\u00eb sulmeve, DDOS) n\u00eb sistemet e parandalimit, si dhe implementimi i mjeteve aktive DPI k\u00ebrkoi nj\u00eb ndryshim n\u00eb skem\u00ebn e angazhimit nga pasive (p\u00ebrmes TAP ose SPAN portesh) n\u00eb aktive (\"n\u00eb prerje\"). Kjo situat\u00eb rriti k\u00ebrkesat p\u00ebr besueshm\u00ebri (sepse d\u00ebshtimi n\u00eb k\u00ebt\u00eb rast \u00e7on n\u00eb nd\u00ebrprerjen e funksionimit t\u00eb gjith\u00eb rrjetit, jo vet\u00ebm n\u00eb humbjen e kontrollit mbi sigurin\u00eb informative) dhe rezultoi n\u00eb z\u00ebvend\u00ebsimin e deg\u00ebve optike me bypass optik (p\u00ebr t\u00eb zgjidhur problemin e var\u00ebsis\u00eb s\u00eb funksionimit t\u00eb rrjetit nga funksionimi i sistemeve t\u00eb siguris\u00eb informative), por funksionaliteti kryesor dhe k\u00ebrkesat p\u00ebr t\u00eb mbet\u00ebn t\u00eb nj\u00ebjta. <\/p>\n<p>Ne zhvilluam Broker\u00ebt e paketave rrjet\u00ebs DS Integrity me nd\u00ebrfaqe 100G, 40G dhe 10G nga nd\u00ebrtimi dhe skematik\u00eb deri te software i integruar. Nd\u00ebrsa, p\u00ebr ve\u00e7im nga broker\u00ebt e tjer\u00eb t\u00eb paketave, funksionet e modifikimit dhe balancimit sipas titujve t\u00eb epror\u00ebve t\u00eb tunelave realizohen hardware, me shpejt\u00ebsi t\u00eb plot\u00eb t\u00eb porteve.<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 brokera t\u00eb paketave t\u00eb rrjeteve (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/a7f08a061eb707ef8264158b6d1362bc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsol\/blog\/490252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u041d\u043e \u0435\u0441\u0442\u044c \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0438 \u0438\u043d\u0444\u043e\u0431\u0435\u0437\u0430 \u2013 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker), \u043e\u043d\u0438 \u0436\u0435 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435\/\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u043e\u0440\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, Security Delivery Platform, Network Visibility \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0418 \u043d\u0430\u043c, \u043a\u0430\u043a \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0438 \u0438\u0437\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72063,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-01T11:51:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:14:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 broker\u00ebt e paketave rrjet\u00ebs (Network Packet Broker) | ProHoster","description":"Siguria e informacionit u ndan nga telekomunikacionet n\u00eb nj\u00eb sektor t\u00eb pavarur me specifikat dhe pajisjet e saj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster","og:description":"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:13+00:00","article:modified_time":"2020-03-03T13:14:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72062","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-10-04 07:02:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=72062"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/72063"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=72062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=72062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=72062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}