{"id":72062,"date":"2020-03-01T14:51:13","date_gmt":"2020-03-01T11:51:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker"},"modified":"2020-03-03T16:14:00","modified_gmt":"2020-03-03T13:14:00","slug":"sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","title":{"rendered":"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Siguria e informacionit \u00ebsht\u00eb ndar\u00eb nga telekomunikacionet n\u00eb nj\u00eb industri t\u00eb pavarur me specifikat dhe pajisjet e saj. Por ekziston nj\u00eb klas\u00eb e panjohur pajisjesh q\u00eb ndodhen n\u00eb nd\u00ebrfaqen e telekomit dhe siguris\u00eb s\u00eb informacionit \u2013 <strong>broker\u00ebt e paketave rrjetore <\/strong>(Network Packet Broker), edhe si balancues ngarkese, switcha t\u00eb specializuara t\u00eb monitorimit, agregator\u00eb trafiku, Platforma e Shkarkimit t\u00eb Siguris\u00eb, Dukshm\u00ebri e Rrjetit dhe t\u00eb tjera. Dhe ne, si zhvillues dhe prodhues rus i k\u00ebtyre pajisjeve, d\u00ebshirojm\u00eb t\u00eb flasim m\u00eb shum\u00eb n\u00eb lidhje me to.<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/4df6859dbb9973439686aa5c4e6f256c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Fusha e aplikimit dhe detyrat e zgjidhura<\/h3>\n<p>\nBroker\u00ebt e paketave rrjetore jan\u00eb pajisje specializuara, t\u00eb cilat gjejn\u00eb p\u00ebrdorimin m\u00eb t\u00eb madh n\u00eb sistemet e siguris\u00eb s\u00eb informacionit. Si klas\u00eb pajisjesh, ato jan\u00eb relativisht t\u00eb reja dhe t\u00eb pakta n\u00eb infrastruktur\u00ebn e pranuar rrjet\u00ebsore krahasuar me switchat, routerat etj. Pionier n\u00eb zhvillimin e k\u00ebtij tipit pajisjesh ishte kompania amerikane Gigamon. Aktualisht, numri i lojtar\u00ebve n\u00eb k\u00ebt\u00eb treg \u00ebsht\u00eb rritur ndjesh\u00ebm (duke p\u00ebrfshir\u00eb zgjidhje t\u00eb ngjashme nga prodhuesi i njohur i sistemeve testuese - kompania IXIA), por p\u00ebr egzistenc\u00ebn e k\u00ebtyre pajisjeve ende e din\u00eb vet\u00ebm nj\u00eb grup i vog\u00ebl profesionist\u00ebsh. Si\u00e7 u p\u00ebrmend m\u00eb par\u00eb, madje edhe me terminologjin\u00eb nuk ka nj\u00eb p\u00ebrkufizim t\u00eb qart\u00eb: emrat ndryshojn\u00eb nga \"sistemet e sigurimit t\u00eb transparenc\u00ebs s\u00eb rrjetit\" deri te thjesht \"balancuesit\".<\/p>\n<p>Duke zhvilluar broker\u00ebt e paketave rrjetore, u p\u00ebrball\u00ebm me faktin se, p\u00ebrve\u00e7 analiz\u00ebs s\u00eb drejtimeve t\u00eb zhvillimit t\u00eb funksionalitetit dhe provave n\u00eb laborator\u00eb \/ zona testi, \u00ebsht\u00eb e nevojshme t\u00eb shpjegojm\u00eb paralelisht p\u00ebr konsumator\u00ebt potencial t\u00eb egzistenc\u00ebs s\u00eb k\u00ebtij klase pajisjesh, pasi nuk t\u00eb gjith\u00eb e din\u00eb p\u00ebr t\u00eb.<\/p>\n<p>Edhe 15-20 vjet m\u00eb par\u00eb, trafiku n\u00eb rrjet ishte i vog\u00ebl, dhe ishte kryesisht informacion i pak\u00ebndsh\u00ebm. Por <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Jakob_Nielsen_(usability_consultant)#Contributions\">ligji i Nielsen-it<\/a><\/noindex> ndjek praktikisht <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%97%D0%B0%D0%BA%D0%BE%D0%BD_%D0%9C%D1%83%D1%80%D0%B0\">ligjin e Moore-it<\/a><\/noindex>: shpejt\u00ebsia e lidhjes me internet rritet \u00e7do vit me 50%. Volumi i trafikut gjithashtu rritet pa ndales\u00eb (n\u00eb grafikun jan\u00eb paraqitur parashikimet e vitit 2017 nga kompania Cisco, burimi Cisco Visual Networking Index: Parashikimet dhe Tendencat, 2017\u20132022):<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/1f17d80ded705b9d06781fbd96219847.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nS\u00eb bashku me shpejt\u00ebsin\u00eb rritet r\u00ebnd\u00ebsia e informacionit q\u00eb qarkullon (kjo p\u00ebrfshin sekretet tregtare dhe t\u00eb dh\u00ebnat personale t\u00eb njohura) dhe n\u00eb p\u00ebrgjith\u00ebsi funksionalitetin e infrastruktur\u00ebs. <\/p>\n<p>K\u00ebshtu, shp\u00ebrtheu edhe industria e siguris\u00eb informatike. Industria iu p\u00ebrgjigj k\u00ebsaj me krijimin e nj\u00eb spektri t\u00eb gjer\u00eb t\u00eb pajisjeve p\u00ebr analiz\u00ebn e thell\u00eb t\u00eb trafikut (DPI): nga sistemet p\u00ebr parandalimin e sulmeve DDOS deri te sistemet p\u00ebr menaxhimin e ngjarjeve t\u00eb siguris\u00eb informatike, duke p\u00ebrfshir\u00eb IDS, IPS, DLP, NBA, SIEM, Antimailware e k\u00ebshtu me radh\u00eb. Zakonisht, \u00e7do nj\u00ebri nga k\u00ebto mjete \u00ebsht\u00eb nj\u00eb software q\u00eb instalohet n\u00eb nj\u00eb platform\u00eb serveri. P\u00ebr m\u00eb tep\u00ebr, \u00e7do program (mjet analize) instalohet n\u00eb platform\u00ebn e tij serverike: prodhuesit e software jan\u00eb t\u00eb ndrysh\u00ebm dhe gjithashtu burimet llogarit\u00ebse p\u00ebr analiz\u00ebn n\u00eb L7 k\u00ebrkojn\u00eb shum\u00eb.<\/p>\n<p>N\u00eb nd\u00ebrtimin e sistemit t\u00eb siguris\u00eb informatike, \u00ebsht\u00eb e nevojshme t\u00eb zgjidhen disa detyra themelore:<\/p>\n<ul>\n<li>si t\u00eb transmetohet trafiku nga infrastruktura n\u00eb sistemet e analiz\u00ebs? (portet SPAN fillimisht t\u00eb dizajnuara p\u00ebr k\u00ebt\u00eb q\u00ebllim nuk jan\u00eb t\u00eb mjaftueshme n\u00eb num\u00ebr dhe performanc\u00eb n\u00eb infrastruktur\u00ebn moderne)<\/li>\n<li>si t\u00eb shp\u00ebrndahet trafiku nd\u00ebrmjet sistemeve t\u00eb ndryshme t\u00eb analiz\u00ebs?<\/li>\n<li>si t\u00eb shkall\u00ebzohen sistemet n\u00eb rast t\u00eb munges\u00ebs s\u00eb performanc\u00ebs s\u00eb nj\u00eb ekzemplari t\u00eb analizatorit p\u00ebr p\u00ebrpunimin e t\u00eb gjith\u00eb volumit t\u00eb trafikut q\u00eb i n\u00ebnshtrohet?<\/li>\n<li>si t\u00eb monitorohen nd\u00ebrfaqet 40G\/100G (dhe n\u00eb t\u00eb ardhmen e af\u00ebrt edhe 200G\/400G), duke marr\u00eb parasysh se mjetet e analiz\u00ebs aktualisht mb\u00ebshtesin vet\u00ebm nd\u00ebrfaqet 1G\/10G\/25G?<\/li>\n<\/ul>\n<p>\nDhe detyra t\u00eb tjera shoq\u00ebruese:<\/p>\n<ul>\n<li>si t\u00eb minimizohet trafiku jo-celular, q\u00eb nuk ka nevoj\u00eb p\u00ebr p\u00ebrpunim, por q\u00eb p\u00ebrfshihet n\u00eb mjetet e analiz\u00ebs dhe shpenzon burimet e tyre?<\/li>\n<li>si t\u00eb p\u00ebrpunohen paketat e inkapsuluara dhe paketat me etiketat sh\u00ebrbyese t\u00eb pajisjeve, p\u00ebrgatitja e t\u00eb cilave p\u00ebr analiz\u00eb rezulton t\u00eb jet\u00eb ose e r\u00ebnd\u00eb p\u00ebr burimet, ose krejt\u00ebsisht e pamundur?<\/li>\n<li>si t\u00eb p\u00ebrjashtohet nga analiza nj\u00eb pjes\u00eb e trafikut, q\u00eb nuk i p\u00ebrket rregullave t\u00eb politik\u00ebs s\u00eb siguris\u00eb (p\u00ebr shembull, trafiku i drejtorit).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/21453d662b8507eb2479065c9f879a87.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSi\u00e7 dihet, k\u00ebrkesa krijon ofert\u00eb, ndonse p\u00ebr k\u00ebto nevoja filluan t\u00eb zhvillohen brokerat e paketimeve rrjet\u00eb.<\/p>\n<h3>P\u00ebrshkrimi i p\u00ebrgjithsh\u00ebm i brokerave t\u00eb paketimeve rrjet\u00eb<\/h3>\n<p>\nBroker\u00ebt e paketave rrjetore punojn\u00eb n\u00eb nivelin e paketave, dhe n\u00eb k\u00ebt\u00eb aspekt jan\u00eb t\u00eb ngjash\u00ebm me switch-at e zakonsh\u00ebm. Dallimi kryesor nga switch-at \u00ebsht\u00eb se rregullat e shp\u00ebrndarjes dhe agregimit t\u00eb trafikut n\u00eb broker\u00ebt e paketave rrjetore p\u00ebrcaktohen plot\u00ebsisht nga konfigurimet. N\u00eb broker\u00ebt e paketave rrjetore nuk ka standarde t\u00eb nd\u00ebrtimit t\u00eb tabelave t\u00eb ndihm\u00ebs (MAC-tables) dhe protokolleve t\u00eb shk\u00ebmbimit me switch-at e tjer\u00eb (si STP), prandaj gama e mundshme e konfigurimeve dhe fushave t\u00eb kuptueshme n\u00eb to \u00ebsht\u00eb shum\u00eb m\u00eb e gjer\u00eb. Nj\u00eb broker mund t\u00eb shp\u00ebrndaj\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb barabart\u00eb trafikun nga nj\u00eb ose m\u00eb shum\u00eb porte hyr\u00ebse n\u00eb nj\u00eb gam\u00eb t\u00eb caktuar portesh dal\u00ebse me funksionin e ngarkes\u00ebs s\u00eb barabart\u00eb n\u00eb dalje. Rregullat p\u00ebr kopjimin, filtrimin, klasifikimin, deduplikimin dhe modifikimin e trafikut mund t\u00eb p\u00ebrcaktohen. K\u00ebto rregulla mund t\u00eb aplikohen n\u00eb grupe t\u00eb ndryshme t\u00eb porteve hyr\u00ebse t\u00eb brokerit t\u00eb paketave rrjetore, si dhe t\u00eb aplikohen nj\u00ebra pas tjetr\u00ebs brenda vet\u00eb pajisjes. Nj\u00eb avantazh i r\u00ebnd\u00ebsish\u00ebm i brokerit t\u00eb paketave \u00ebsht\u00eb mund\u00ebsia e trajtimit t\u00eb trafikut me shpejt\u00ebsi t\u00eb plot\u00eb dhe ruajtja e integritetit t\u00eb sesioneve (n\u00ebse b\u00ebhet balancimi i trafikut n\u00eb disa sisteme DP\u0130 t\u00eb ngjashme).<\/p>\n<p>Ruajtja e integritetit t\u00eb sesioneve p\u00ebrfshin transferimin e t\u00eb gjitha pakove t\u00eb sesionit n\u00eb nivelin e transportit (TCP\/UDP\/SCTP) n\u00eb nj\u00eb port. Kjo \u00ebsht\u00eb e r\u00ebnd\u00ebsishme, pasi sistemet DPI (zakonisht kjo \u00ebsht\u00eb nj\u00eb software i instaluar n\u00eb nj\u00eb server t\u00eb lidhur me portin e daljes t\u00eb brokerit t\u00eb paketave) analizon p\u00ebrmbajtjen e trafikut n\u00eb nivelin e aplikacioneve, dhe t\u00eb gjitha paketat e d\u00ebrguara\/pranuara nga nj\u00eb aplikacion duhet t\u00eb arrijn\u00eb n\u00eb t\u00eb nj\u00ebjtin instanc\u00eb t\u00eb analizuesit. Po t\u00eb humbasin paketat e nj\u00eb sesioni ose t\u00eb shp\u00ebrndahen midis pajisjeve t\u00eb ndryshme DPI, \u00e7do pajisje e ve\u00e7ant\u00eb DPI do t\u00eb ndodhet n\u00eb situat\u00ebn e leximit t\u00eb nj\u00eb teksti q\u00eb nuk \u00ebsht\u00eb i plot\u00eb, por vet\u00ebm fjal\u00ebve t\u00eb ve\u00e7anta nga ai. Dhe, shum\u00eb gjasa, teksti nuk do t\u00eb jet\u00eb i kuptuesh\u00ebm.<\/p>\n<p>Prandaj, duke qen\u00eb t\u00eb orientuar towards sistemet e siguris\u00eb s\u00eb informacionit, broker\u00ebt e paketave rrjetore kan\u00eb funksionalitet q\u00eb ndihmon n\u00eb lidhjen e komplekseve software DPI me rrjetet telekomunikuese me shpejt\u00ebsi t\u00eb lart\u00eb dhe t\u00eb zvog\u00eblojn\u00eb ngarkes\u00ebn mbi to: ata kryejn\u00eb filtrimin paraprak, klasifikimin dhe p\u00ebrgatitjen e trafikut p\u00ebr t\u00eb leht\u00ebsuar trajtimin e m\u00ebvonsh\u00ebm. <\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, duke qen\u00eb se broker\u00ebt e pacjeve rrjetore ofrojn\u00eb nj\u00eb gam\u00eb t\u00eb gjer\u00eb statistikash dhe shpesh jan\u00eb t\u00eb lidhur me pika t\u00eb ndryshme t\u00eb rrjetit, ata gjithashtu gjejn\u00eb vendin e tyre n\u00eb diagnostikimin e problemeve t\u00eb funksionalitetit t\u00eb infrastruktur\u00ebs rrjetore.<\/p>\n<h3>Funksionet baz\u00eb t\u00eb broker\u00ebve t\u00eb pacjeve rrjetore<\/h3>\n<p>\nEmri \"switches t\u00eb specializuara \/ p\u00ebrmbajtjes\" ka lindur nga q\u00ebllimi themelor: t\u00eb mbledhin trafik nga infrastruktura (zakonisht me ndihm\u00ebn e deg\u00ebve optike pasive TAP dhe \/ ose porteve SPAN) dhe t'i shp\u00ebrndajn\u00eb ato mes mjeteve t\u00eb analiz\u00ebs. Midis sistemeve t\u00eb ndryshme, trafiku pasqyrohet (duplikohet), nd\u00ebrsa midis sistemeve t\u00eb nj\u00ebjta \u2013 ekuilibrohet. Funksionet baz\u00eb zakonisht p\u00ebrfshijn\u00eb filtrimin deri n\u00eb fushat L4 (MAC, IP, TCP \/ UDP-port etj.) dhe agregimin e disa kanaleve me ngarkes\u00eb t\u00eb ul\u00ebt n\u00eb nj\u00eb (p\u00ebr shembull, p\u00ebr p\u00ebrpunim n\u00eb nj\u00eb sistem DPI). <\/p>\n<p>Ky funksionalitet ofron zgjidhjen e detyr\u00ebs themelore \u2014 lidhjen e sistemeve DPI me infrastruktur\u00ebn rrjetore. Broker\u00ebt e prodhuesve t\u00eb ndrysh\u00ebm, q\u00eb kufizohen n\u00eb funksionalitetin bazik, mund\u00ebsojn\u00eb p\u00ebrpunimin e deri n\u00eb 32 nd\u00ebrfaqeve 100G n\u00eb 1U (m\u00eb shum\u00eb nd\u00ebrfaqe nuk mund t\u00eb vendosen fizikisht n\u00eb panelin e p\u00ebrparm\u00eb 1U). Megjithat\u00eb, ata nuk lejojn\u00eb zvog\u00eblimin e ngarkes\u00ebs n\u00eb mjetet e analiz\u00ebs dhe p\u00ebr infrastruktur\u00ebn e komplikuar nuk mund t\u00eb plot\u00ebsojn\u00eb as k\u00ebrkesat p\u00ebr funksionin bazik: nj\u00eb sesion i shp\u00ebrndar\u00eb p\u00ebrmes disa tunelesh (ose i pajisur me etiketat MPLS) mund t\u00eb ket\u00eb nj\u00eb ndarje t\u00eb paekuilibruar n\u00eb ekzemplar\u00eb t\u00eb ndrysh\u00ebm t\u00eb analizuesit dhe p\u00ebrfundimisht t\u00eb dal\u00eb jasht\u00eb analiz\u00ebs. <\/p>\n<p>P\u00ebrve\u00e7 shtimit t\u00eb nd\u00ebrfaqeve 40 \/ 100G dhe, si pasoj\u00eb, rritjes s\u00eb performanc\u00ebs, broker\u00ebt e pacjeve rrjetore po zhvillohen me shpejt\u00ebsi n\u00eb aspektin e ofrimit t\u00eb mund\u00ebsive krejt\u00ebsisht t\u00eb reja: nga ekuilibrimi sipas titujve t\u00eb brendsh\u00ebm t\u00eb tunelve deri te dekriptimi i trafikut. Fatkeq\u00ebsisht, k\u00ebto modele nuk mund t\u00eb mburreshin me performanc\u00eb n\u00eb terabite, por lejojn\u00eb nd\u00ebrtimin e nj\u00eb sistemi t\u00eb v\u00ebrtet\u00eb cil\u00ebsor dhe teknikisht \"t\u00eb bukur\" t\u00eb siguris\u00eb informatike, n\u00eb t\u00eb cilin \u00e7do mjet analize merr garantuar vet\u00ebm informacionin q\u00eb ka nevoj\u00eb n\u00eb formatin m\u00eb t\u00eb p\u00ebrshtatsh\u00ebm p\u00ebr analiz\u00eb.<\/p>\n<h3>Funksionet e avancuara t\u00eb broker\u00ebve t\u00eb pacjeve rrjetore<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/874e5b6372a2e532d86966d1c7fe4ba1.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<strong>1.<\/strong> E p\u00ebrmendur m\u00eb par\u00eb <strong>ekuilibrimi sipas titujve t\u00eb brendsh\u00ebm n\u00eb trafikun e tuneluar.<\/strong><\/p>\n<p>P\u00ebrse \u00ebsht\u00eb e r\u00ebnd\u00ebsishme? Le t\u00eb shqyrtojm\u00eb 3 aspekte q\u00eb mund t\u00eb jen\u00eb kritike s\u00eb bashku ose ve\u00e7mas:<\/p>\n<ul>\n<li>sigurimi i nj\u00eb balancimi t\u00eb barabart\u00eb kur ka nj\u00eb num\u00ebr t\u00eb vog\u00ebl tunelesh. N\u00eb rastin kur n\u00eb pik\u00ebn e lidhjes s\u00eb sistemeve t\u00eb siguris\u00eb informacioni ka vet\u00ebm 2 tunel, nuk do t\u00eb jet\u00eb e mundur t\u00eb balancohet ato sipas kokave t\u00eb jashtme n\u00eb 3 platforma serverash dhe t\u00eb ruhet sesioni. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, trafiku n\u00eb rrjet kalon n\u00eb m\u00ebnyr\u00eb t\u00eb pabarabart\u00eb, dhe drejtimi i \u00e7do tuneli n\u00eb nj\u00eb mjet t\u00eb ve\u00e7ant\u00eb p\u00ebr p\u00ebrpunim k\u00ebrkon nj\u00eb kapacitet t\u00eb tepruar t\u00eb tij;<\/li>\n<li>sigurimi i integritetit t\u00eb sesioneve dhe rrjedhave t\u00eb protokolleve multi-sesionale (p.sh., FTP dhe VoIP), pakot e t\u00eb cilave p\u00ebrfundojn\u00eb n\u00eb tunela t\u00eb ndrysh\u00ebm. Kompleksiteti i infrastruktur\u00ebs rrjeti vazhdimisht po rritet: rezervimi, virtualizimi, thjesht\u00ebsimi i administrat\u00ebs dhe k\u00ebshtu me radh\u00eb. Nga nj\u00ebra an\u00eb, kjo rrit besueshm\u00ebrin\u00eb sa i p\u00ebrket transferimit t\u00eb t\u00eb dh\u00ebnave, nga ana tjet\u00ebr, e v\u00ebshtir\u00ebson pun\u00ebn e sistemeve t\u00eb siguris\u00eb informacioni. Edhe me nj\u00eb kapacitet t\u00eb mjaftuesh\u00ebm t\u00eb analizator\u00ebve p\u00ebr t\u00eb p\u00ebrpunuar nj\u00eb kanal t\u00eb dedikuar me tunela, problemi mbetet i pazgjidhsh\u00ebm, pasi nj\u00eb pjes\u00eb e pakove t\u00eb sesionit t\u00eb p\u00ebrdoruesit transferohet p\u00ebrmes nj\u00eb kanali tjet\u00ebr. Megjithat\u00eb, n\u00ebse p\u00ebr integritetin e sesioneve n\u00eb disa infrastrukturne ende b\u00ebhet kujdes, protokollet multi-sjonale mund t\u00eb ndjekin rrug\u00eb krejt\u00ebsisht t\u00eb ndryshme;<\/li>\n<li>balancimi n\u00eb prani t\u00eb MPLS, VLAN, etiketave individuale t\u00eb pajisjeve etj. Nuk jan\u00eb pik\u00ebrisht tunel, por megjithat\u00eb pajisjet me funksionalitet t\u00eb bazuar mund ta kuptojn\u00eb k\u00ebt\u00eb trafik jo si IP dhe ta balancojn\u00eb sipas adresave MAC, duke e shkelur p\u00ebrs\u00ebri barazimin ose integritetin e sesioneve.<\/li>\n<\/ul>\n<p>\nBrok\u00ebri e pakove rrjetore analizon kokat e jashtme dhe kalon radhazi p\u00ebrmes treguesve deri te IP-ja m\u00eb e thell\u00eb dhe balancojn\u00eb p\u00ebrmes saj. Si rezultat - rrjedhat b\u00ebhen duksh\u00ebm m\u00eb shum\u00eb (prandaj mund t\u00eb balancohet m\u00eb barabart\u00eb dhe n\u00eb nj\u00eb num\u00ebr m\u00eb t\u00eb madh platformash), dhe sistemi DPI merr t\u00eb gjitha pakot e sesionit dhe t\u00eb gjitha sesionet e lidhura t\u00eb protokolleve multi-sesionale.<\/p>\n<p><strong>2. Modifikimi i trafikut.<\/strong><br \/>\nNj\u00eb nga funksionet m\u00eb t\u00eb gjera n\u00eb mund\u00ebsit\u00eb e saj, numri i n\u00ebn-funksioneve dhe mund\u00ebsive t\u00eb aplikimit \u00ebsht\u00eb i shum\u00ebfisht\u00eb:<\/p>\n<ul>\n<li>zhvillimi i payload, n\u00eb k\u00ebt\u00eb rast vet\u00ebm titujt e pakove d\u00ebrgohen n\u00eb mjetin e analiz\u00ebs. Ky informacion \u00ebsht\u00eb relevant p\u00ebr mjetet e analiz\u00ebs ose p\u00ebr llojet e trafik\u00ebve n\u00eb t\u00eb cilat p\u00ebrmbajtja e paketave ose nuk ka r\u00ebnd\u00ebsi, ose nuk mund t\u00eb analizohet. P\u00ebr shembull, p\u00ebr trafikun e enkriptuar, t\u00eb dh\u00ebnat parametrike t\u00eb shk\u00ebmbimit (kush, me k\u00eb, kur dhe sa) mund t\u00eb jen\u00eb t\u00eb r\u00ebnd\u00ebsishme, nd\u00ebrsa payload sit \u00eb fakt \u00ebsht\u00eb mbetje q\u00eb z\u00eb kanalin dhe burimet p\u00ebrpunuese t\u00eb analizuesit. Jan\u00eb t\u00eb mundshme variacione, kur payload pritet nga nj\u00eb offset i caktuar \u2013 kjo ofron hap\u00ebsir\u00eb t\u00eb m\u00ebtejshme p\u00ebr mjetet e analiz\u00ebs;<\/li>\n<li>de-tunelimi, konkretisht heqja e titujve q\u00eb sh\u00ebnojn\u00eb dhe identifikojn\u00eb tunel\u00ebt. Q\u00ebllimi \u00ebsht\u00eb reduktimi i ngarkes\u00ebs n\u00eb mjetet e analiz\u00ebs dhe rritja e efikasitetit t\u00eb tyre. De-tunelimi mund t\u00eb realizohet sipas nj\u00eb offseti fiks ose me analiz\u00eb dinamike t\u00eb titujve dhe p\u00ebrcaktimin e offsetit p\u00ebr secil\u00ebn paket\u00eb;<\/li>\n<li>heqja e pjes\u00ebve t\u00eb titujve t\u00eb pakove: etiketat MPLS, VLAN, fushat specifike t\u00eb pajisjeve t\u00eb treta;<\/li>\n<li>maskimi i pjes\u00ebve t\u00eb titujve, p\u00ebr shembull, maskimi i adresave IP p\u00ebr t\u00eb siguruar anonimitet t\u00eb trafik\u00ebve;<\/li>\n<li>shtimi i informacionit sh\u00ebrbyes n\u00eb paket\u00eb: data e koh\u00ebs, porta hyr\u00ebse, etiketat e klas\u00ebs s\u00eb trafik\u00ebve etj.<\/li>\n<\/ul>\n<p>\n<strong>3. De-duplikimi<\/strong> \u2013 pastrimi nga pakot e p\u00ebrs\u00ebritura t\u00eb trafik\u00ebve t\u00eb d\u00ebrguara n\u00eb mjetet e analiz\u00ebs. Paketat e p\u00ebrs\u00ebritura shfaqen shpesh p\u00ebr shkak t\u00eb karakteristikave t\u00eb lidhjes me infrastruktur\u00ebn \u2013 trafiku mund t\u00eb kaloj\u00eb p\u00ebrmes disa pikave t\u00eb analiz\u00ebs dhe t\u00eb jet\u00eb pasqyruar nga secila prej tyre. Po ashtu ndodhin d\u00ebrgesa p\u00ebrs\u00ebrit\u00ebse t\u00eb pakove TCP q\u00eb nuk kan\u00eb arritur, por n\u00ebse ka shum\u00eb prej tyre, at\u00ebher\u00eb ky \u00ebsht\u00eb m\u00eb shum\u00eb nj\u00eb \u00e7\u00ebshtje p\u00ebr monitorimin e cil\u00ebsis\u00eb s\u00eb rrjetit, sesa p\u00ebr sigurin\u00eb e informacionit brenda tij.<\/p>\n<p><strong>4. Funksionet e avancuara t\u00eb filtrimit <\/strong>\u2013 nga k\u00ebrkimi i vlerave specifike sipas nj\u00eb offseti t\u00eb caktuar deri te analiza e n\u00ebnshkrimeve p\u00ebr t\u00ebr\u00eb paket\u00ebn.<\/p>\n<p><strong>5. Gjenerimi NetFlow\/IPFIX<\/strong> \u2013 grumbullimi i nj\u00eb gam\u00eb t\u00eb gjer\u00eb statistikash mbi trafik\u00ebt q\u00eb kalojn\u00eb dhe d\u00ebrgimi i tyre n\u00eb mjetet e analiz\u00ebs.<\/p>\n<p><strong>6. De-kriptimi i trafik\u00ebve SSL,<\/strong> punon me kushtin e ngarkimit paraprak t\u00eb certifikatave dhe \u00e7el\u00ebsave n\u00eb brokerin e paketeve t\u00eb rrjetit. Megjithat\u00eb, kjo lejon nj\u00eb ngarkes\u00eb t\u00eb konsiderueshme t\u00eb mjeteve t\u00eb analiz\u00ebs. <\/p>\n<p>Ka edhe shum\u00eb funksione t\u00eb tjera, t\u00eb dobishme dhe tregtare, por besoj se ato kryesore jan\u00eb p\u00ebrmendur.<\/p>\n<p>Zhvillimi i sistemeve t\u00eb zbuluar (dhe sulmeve DDoS) p\u00ebr sistemet e parandalimit, si dhe implementimi i mjeteve aktive DPI k\u00ebrkoi ndryshimin e skem\u00ebs s\u00eb p\u00ebrfshirjes nga pasive (p\u00ebrmes TAP ose porte SPAN) n\u00eb aktive (\"n\u00eb nd\u00ebrprerje\"). Ky rrethan\u00eb rriti k\u00ebrkesat p\u00ebr besueshm\u00ebri (sepse prishja n\u00eb k\u00ebt\u00eb rast \u00e7on n\u00eb nj\u00eb nd\u00ebrprerje t\u00eb funksionimit t\u00eb t\u00ebr\u00eb rrjetit, dhe jo vet\u00ebm humbjen e kontrollit mbi sigurin\u00eb informative) dhe solli z\u00ebvend\u00ebsimin e deg\u00ebve optike me bypass optike (p\u00ebr t\u00eb zgjidhur problemin e var\u00ebsis\u00eb s\u00eb funksionimit t\u00eb rrjetit nga funksionimi i sistemeve t\u00eb siguris\u00eb informative), por funksionaliteti kryesor dhe k\u00ebrkesat p\u00ebr t\u00eb mbet\u00ebn t\u00eb nj\u00ebjta. <\/p>\n<p>Ne zhvilluam Broker\u00ebt e Paketave t\u00eb Rrjetit DS Integrity me interface 100G, 40G dhe 10G nga struktura dhe skemat deri te softueri i integruar. P\u00ebr m\u00eb tep\u00ebr, ndryshe nga broker\u00ebt e tjer\u00eb t\u00eb paketave, funksionet e modifikimit dhe balancimit sipas titujve t\u00eb brendsh\u00ebm t\u00eb tunelave jan\u00eb realizuar harduerikisht, me shpejt\u00ebsi t\u00eb plot\u00eb t\u00eb porteve.<\/p>\n<p><img decoding=\"async\" alt=\"Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2013 brokerat e paketeve rrjetore (Network Packet Broker)\" src=\"\/wp-content\/uploads\/2020\/03\/a7f08a061eb707ef8264158b6d1362bc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsol\/blog\/490252\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c. \u041d\u043e \u0435\u0441\u0442\u044c \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043d\u0430 \u0441\u0442\u044b\u043a\u0435 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u0430 \u0438 \u0438\u043d\u0444\u043e\u0431\u0435\u0437\u0430 \u2013 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker), \u043e\u043d\u0438 \u0436\u0435 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435\/\u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u044b, \u0430\u0433\u0440\u0435\u0433\u0430\u0442\u043e\u0440\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, Security Delivery Platform, Network Visibility \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0418 \u043d\u0430\u043c, \u043a\u0430\u043a \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0438 \u0438\u0437\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72063,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-01T11:51:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-03T13:14:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zgjidhjet moderne p\u00ebr nd\u00ebrtimin e sistemeve t\u00eb siguris\u00eb informative \u2014 broker\u00ebt e paketave t\u00eb rrjetit (Network Packet Broker) | ProHoster","description":"Siguria informative \u00ebsht\u00eb ndar\u00eb nga telekomunikacionet n\u00eb nj\u00eb industri t\u00eb pavarur me specifikat dhe pajisjet e saj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u2014 \u0431\u0440\u043e\u043a\u0435\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 (Network Packet Broker) | ProHoster","og:description":"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043e\u0442 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0432 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c \u0441\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u043e\u0439 \u0438 \u0441\u0432\u043e\u0438\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/sovremennye-resheniya-dlya-postroeniya-sistem-informaczionnoj-bezopasnosti-brokery-setevyh-paketov-network-packet-broker","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:13+00:00","article:modified_time":"2020-03-03T13:14:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72062","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-10-04 07:02:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=72062"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/72063"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=72062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=72062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=72062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}