{"id":95258,"date":"2020-09-27T07:42:43","date_gmt":"2020-09-27T05:42:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost"},"modified":"2020-09-27T07:42:43","modified_gmt":"2020-09-27T05:42:43","slug":"hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","title":{"rendered":"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/338fdf28dfed6654cfdad13538de2954.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Gjat\u00eb dy \u00e7erek\u00ebve t\u00eb par\u00eb t\u00eb vitit 2020, numri i sulmeve DDoS u rrit gati tre her\u00eb, ku 65% e tyre p\u00ebrkthehen n\u00eb tentativa primitive \"testimi t\u00eb ngarkes\u00ebs\", t\u00eb cilat leht\u00ebsisht \"\u00e7aktivizojn\u00eb\" faqet e pambrojtura t\u00eb dyqaneve t\u00eb vogla online, forumeve, blogeve dhe mediave.<\/p>\n<p><\/p>\n<p>Si t\u00eb zgjidhni nj\u00eb hosting t\u00eb mbrojtur nga sulmet DDoS? \u00c7far\u00eb duhet t\u00eb keni parasysh dhe \u00e7far\u00eb duhet t\u00eb p\u00ebrgatitni p\u00ebr t\u00eb mos u gjetur n\u00eb nj\u00eb situat\u00eb t\u00eb pak\u00ebndshme?<\/p>\n<p><\/p>\n<p>(Vaksina kund\u00ebr marketingut \"t\u00eb err\u00ebt\" brenda)<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Disponueshm\u00ebria dhe larmishm\u00ebria e mjeteve t\u00eb realizimit t\u00eb sulmeve DDoS detyron pronar\u00ebt e sh\u00ebrbimeve online t\u00eb marrin masa p\u00ebr t'u p\u00ebrballur me k\u00ebrc\u00ebnimin. T\u00eb mendosh p\u00ebr mbrojtje nga DDoS nuk \u00ebsht\u00eb di\u00e7ka q\u00eb duhet b\u00ebr\u00eb pas p\u00ebrvoj\u00ebs s\u00eb par\u00eb t\u00eb refuzimit, dhe as n\u00eb nj\u00eb kompleks masash p\u00ebr rritjen e q\u00ebndrueshm\u00ebris\u00eb s\u00eb infrastruktur\u00ebs, por m\u00eb her\u00ebt gjat\u00eb faz\u00ebs s\u00eb zgjedhjes s\u00eb platform\u00ebs p\u00ebr vendosje (ofruesit e hostingut ose qendr\u00ebs s\u00eb t\u00eb dh\u00ebnave).<\/p>\n<p><\/p>\n<p>Sulmet DDoS klasifikohen n\u00eb var\u00ebsi t\u00eb protokolleve nga t\u00eb cilat shfryt\u00ebzohen dob\u00ebsit\u00eb, n\u00eb nivelet e modelit t\u00eb nd\u00ebrveprimit t\u00eb sistemeve t\u00eb hapura (OSI):<\/p>\n<p><\/p>\n<ul>\n<li>kanali (L2), <\/li>\n<li>rrjeti (L3), <\/li>\n<li>transporti (L4),<\/li>\n<li>aplikacioni (L7). <\/li>\n<\/ul>\n<p><\/p>\n<p>Nga pik\u00ebpamja e sistemeve t\u00eb mbrojtjes, ato mund t\u00eb p\u00ebrmblidhen n\u00eb dy grupe: sulmet n\u00eb nivelin e infrastruktur\u00ebs (L2-L4) dhe n\u00eb nivelin e aplikacionit (L7). Kjo \u00ebsht\u00eb e lidhur me t\u00eb nj\u00ebjtin rend t\u00eb ekzekutimit t\u00eb algoritmeve t\u00eb analiz\u00ebs s\u00eb trafik\u00ebve dhe kompleksitetin llogarit\u00ebs: sa m\u00eb thell\u00eb t\u00eb shohim n\u00eb paket\u00ebn IP, aq m\u00eb shum\u00eb fuqi llogarit\u00ebse k\u00ebrkohet.<\/p>\n<p><\/p>\n<p><em>N\u00eb p\u00ebrgjith\u00ebsi, detyra e optimizimit t\u00eb llogaritjeve gjat\u00eb trajtimit t\u00eb trafik\u00ebve n\u00eb koh\u00eb reale \u00ebsht\u00eb nj\u00eb tem\u00eb p\u00ebr nj\u00eb cik\u00ebl t\u00eb ve\u00e7ant\u00eb artikujsh. Tani le t\u00eb imagjinojm\u00eb thjesht se ekziston nj\u00eb ofrues cloud me burime llogarit\u00ebse q\u00eb mund t\u00eb ofroj\u00eb mbrojtje p\u00ebr faqet nga sulmet n\u00eb nivelin e aplikacioneve (p\u00ebrfshir\u00eb <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/web\">falas<\/a><\/noindex><\/strong>).<\/em><\/p>\n<p><\/p>\n<h4 id=\"3-glavnyh-voprosa-dlya-opredeleniya-stepeni-zaschischennosti-hostinga-ot-ddos-atak\">3 pyetje kryesore p\u00ebr t\u00eb p\u00ebrcaktuar nivelin e mbrojtjes t\u00eb hostingut nga sulmet DDoS<\/h4>\n<p><\/p>\n<p>Le t\u00eb shikojm\u00eb kushtet e ofrimit t\u00eb sh\u00ebrbimeve t\u00eb mbrojtjes nga sulmet DDoS dhe Marr\u00ebveshjen p\u00ebr Nivelin e Sh\u00ebrbimit (Service Level Agreement, SLA) t\u00eb ofruesit t\u00eb hostingut. A ndodhen aty p\u00ebrgjigjet p\u00ebr pyetjet n\u00eb vazhdim:<\/p>\n<p><\/p>\n<ul>\n<li><strong>\u00e7far\u00eb kufizimesh teknike deklaron ofruesi i sh\u00ebrbimit<\/strong>? <\/li>\n<li><strong>\u00e7far\u00eb ndodh kur klienti kalon p\u00ebrtej kufizimeve? <\/strong> <\/li>\n<li><strong>si e organizon ofruesi i hostingut mbrojtjen nga sulmet DDoS (teknologjit\u00eb, zgjidhjet, ofruesit)?<\/strong> <\/li>\n<\/ul>\n<p><\/p>\n<p>N\u00ebse nuk e keni gjetur k\u00ebt\u00eb informacion, kjo \u00ebsht\u00eb nj\u00eb shenj\u00eb ose p\u00ebr t\u00eb menduar p\u00ebr seriozitetin e ofruesit t\u00eb sh\u00ebrbimeve, ose p\u00ebr t\u00eb organizuar nj\u00eb mbrojtje baz\u00eb kund\u00ebr DDoS (L3-4) me forcat tuaja. P\u00ebr shembull, porositni nj\u00eb lidhje fizike me rrjetin e nj\u00eb ofruesi special t\u00eb mbrojtjes.<\/p>\n<p><\/p>\n<p><strong>\u00cb r\u00ebnd\u00ebsishme!<\/strong> Nuk ka kuptim t\u00eb sigurosh mbrojtje nga sulmet e nivelit t\u00eb aplikacioneve p\u00ebrmes Reverse Proxy, n\u00ebse ofruesi yt i hostimit nuk \u00ebsht\u00eb n\u00eb gjendje t\u00eb siguroj\u00eb mbrojtje nga sulmet e nivelit t\u00eb infrastruktur\u00ebs: pajisjet rrjet\u00ebsore do t\u00eb ngarkohet dhe do t\u00eb b\u00ebhen t\u00eb pap\u00ebrdorshme, duke p\u00ebrfshir\u00eb edhe server\u00ebt e proksimit t\u00eb ofruesit t\u00eb sh\u00ebrbimeve n\u00eb cloud (figura 1).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/5a6948855d9743ca3709d0ee3feb2224.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><em>Figura 1. Sulmi direkt n\u00eb rrjetin e ofruesit t\u00eb hostimit<\/em><\/p>\n<p><\/p>\n<p>Dhe mos lejoni q\u00eb t'ju tregojn\u00eb p\u00ebrralla q\u00eb adresa reale IP e serverit \u00ebsht\u00eb e fshehur pas nj\u00eb cloud t\u00eb ofruesit t\u00eb mbrojtjes, dhe k\u00ebshtu sulmi direkt - \u00ebsht\u00eb e pamundur. N\u00eb n\u00ebn n\u00ebnt\u00eb raste nga dhjet\u00eb, sulmuesi do t\u00eb ket\u00eb leht\u00ebsi p\u00ebr t\u00eb gjetur adres\u00ebn reale IP t\u00eb serverit ose t\u00eb pakt\u00ebn t\u00eb rrjetit t\u00eb ofruesit t\u00eb hostimit, p\u00ebr t\u00eb 'shkaktuar' nj\u00eb datacenter t\u00eb t\u00ebr\u00eb.<\/p>\n<p><\/p>\n<h3 id=\"kak-deystvuyut-hakery-v-poiskah-realnogo-ip-adresa\">Si veprojn\u00eb hackerat n\u00eb k\u00ebrkim t\u00eb adres\u00ebs reale IP<\/h3>\n<p><\/p>\n<p>N\u00ebn spoler\u00ebt - disa metoda p\u00ebr t\u00eb gjetur adres\u00ebn reale IP (t\u00eb dh\u00ebna p\u00ebr q\u00ebllime informative).<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 1: K\u00ebrkimi n\u00eb burime t\u00eb hapura<\/b><\/p>\n<p>K\u00ebrkimin mund ta nisni me sh\u00ebrbimin online<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/\"> Intelligence X<\/a><\/noindex>: ai k\u00ebrkon informacion n\u00eb dark web, n\u00eb platforma p\u00ebr ndarjen e dokumenteve, p\u00ebrpunon t\u00eb dh\u00ebnat Whois, rrjedhjet e t\u00eb dh\u00ebnave t\u00eb p\u00ebrgjithshme dhe burime t\u00eb tjera t\u00eb shumta.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/c21ad1de4da970843797ecfaac790770.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00ebse p\u00ebr shkak t\u00eb disa treguesve (HTTP-headerat, t\u00eb dh\u00ebnat Whois etj.) \u00ebsht\u00eb arritur t\u00eb p\u00ebrcaktohet se mbrojtja e sitit \u00ebsht\u00eb organizuar p\u00ebrmes Cloudflare, at\u00ebher\u00eb k\u00ebrkimi i adres\u00ebs reale IP mund t\u00eb filloj\u00eb nga<noindex><a rel=\"nofollow\" href=\"https:\/\/intelx.io\/?did=734ac30d-caa9-4348-94ad-106cd5f940c2\"> lista<\/a><\/noindex>, e cila p\u00ebrmban rreth 3 milion adresa IP t\u00eb faqeve t\u00eb vendosura pas Cloudflare.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/7dd9d053df67a5020a0a450f80a719e9.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Me \u00e7ertifikat\u00ebn SSL dhe sh\u00ebrbimin<noindex><a rel=\"nofollow\" href=\"https:\/\/censys.io\/\"> Censys<\/a><\/noindex> mund t\u00eb gjeni shum\u00eb t\u00eb dh\u00ebna t\u00eb dobishme, p\u00ebrfshir\u00eb edhe adres\u00ebn reale IP t\u00eb faqeve. P\u00ebr t\u00eb formuar k\u00ebrkes\u00ebn p\u00ebr burimin tuaj, kaloni n\u00eb sked\u00ebn Certificates dhe shkruani:<\/p>\n<p><\/p>\n<p><strong>_parsed.names: emri<em>i faqes AND tags.raw: trusted<\/em><\/strong><\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/49861124ca4859d8f8a65b0c45187e00.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>P\u00ebr t\u00eb k\u00ebrkuar adresat IP t\u00eb server\u00ebve q\u00eb p\u00ebrdorin \u00e7ertifikat\u00ebn SSL, lista e r\u00ebn\u00eb do t\u00eb duhet t\u00eb kaloj\u00eb manualisht me disa mjete (skeda \"Explore\", pastaj zgjedhim \"IPv4 Hosts\").<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 2: DNS<\/b><\/p>\n<p>K\u00ebrkimi sipas historis\u00eb s\u00eb ndryshimeve t\u00eb regjistrave DNS - nj\u00eb metod\u00eb e vjet\u00ebr, e verifikuar. Adresa e m\u00ebparshme IP e faqes mund t\u00eb jap\u00eb nj\u00eb ide se n\u00eb cilin host (ose n\u00eb cilin datacenter) kishte qen\u00eb ajo. Nd\u00ebr sh\u00ebrbimet online, p\u00ebr leht\u00ebsin\u00eb e p\u00ebrdorimit, spikasin <noindex><a rel=\"nofollow\" href=\"https:\/\/viewdns.info\/iphistory\/\">ViewDNS<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\/\">SecurityTrails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Kur ndryshoni cil\u00ebsimet, faqja nuk do ta p\u00ebrdor\u00eb menj\u00ebher\u00eb adres\u00ebn IP t\u00eb ofruesit t\u00eb mbrojtjes n\u00eb cloud ose CDN, por p\u00ebr nj\u00eb koh\u00eb do t\u00eb funksionoj\u00eb drejtp\u00ebrdrejt. N\u00eb k\u00ebt\u00eb rast, ekziston mund\u00ebsia q\u00eb sh\u00ebrbimet online q\u00eb ruajn\u00eb historin\u00eb e ndryshimeve t\u00eb adresave IP t\u00eb kan\u00eb informacion mbi adres\u00ebn origjinale t\u00eb faqes.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/8aef85b97315f67ef857a9fea2c3884c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00ebse nuk ka asgj\u00eb p\u00ebrve\u00e7 emrit t\u00eb serverit t\u00eb vjet\u00ebr DNS, at\u00ebher\u00eb p\u00ebrmes mjeteve speciale (dig, host ose nslookup) mund t\u00eb k\u00ebrkoni adres\u00ebn IP sipas emrit t\u00eb domainit t\u00eb faqes, p\u00ebr shembull:<\/p>\n<p><\/p>\n<p><strong>_dig @emri_i_vjet\u00ebr_dns_server emri<em>the site<\/em><\/strong><\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Metoda 3: email<\/b><\/p>\n<p>Ideja e metod\u00ebs \u00ebsht\u00eb q\u00eb me an\u00eb t\u00eb nj\u00eb forme kontakti \/ regjistrimi (ose me ndonj\u00eb m\u00ebnyr\u00eb tjet\u00ebr q\u00eb lejon t\u00eb iniciosh d\u00ebrgimin e nj\u00eb emaili) t\u00eb marr\u00ebsh nj\u00eb email n\u00eb adres\u00ebn tuaj t\u00eb post\u00ebs elektronike dhe t\u00eb kontrollosh kokat, ve\u00e7an\u00ebrisht fush\u00ebn \"Received.\"<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/582a31569f5274619ab869d1c8a8263a.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb kok\u00ebn e emailit shpesh ndodhet adresa reale IP e MX-record (serverit t\u00eb shk\u00ebmbimit t\u00eb post\u00ebs elektronike), e cila mund t\u00eb b\u00ebhet pika fillestare p\u00ebr gjetjen e server\u00ebve t\u00eb tjer\u00eb t\u00eb cakut.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Mjete p\u00ebr automatizimin e k\u00ebrkimit<\/b><\/p>\n<p>Softi p\u00ebr gjetjen e IP-s\u00eb pas mburoj\u00ebs Cloudflare zakonisht funksionon p\u00ebr tri detyra:<\/p>\n<p><\/p>\n<ul>\n<li>skanimi i konfigurimit t\u00eb gabuar DNS, duke p\u00ebrdorur DNSDumpster.com;<\/li>\n<li>skanimi n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave Crimeflare.com;<\/li>\n<li>k\u00ebrkimi i subdomain-eve p\u00ebrmes metod\u00ebs s\u00eb prov\u00ebs me fjalor. <\/li>\n<\/ul>\n<p><\/p>\n<p>K\u00ebrkimi i subdomain-eve shpesh rezulton t\u00eb jet\u00eb opsioni m\u00eb eficient nga tre \u2014 pronari i faqes mund ta ket\u00eb mbrojtur faqen kryesore, nd\u00ebrsa subdomain-et i ka l\u00ebn\u00eb t\u00eb funksionojn\u00eb drejtp\u00ebrdrejt. P\u00ebr verifikim, m\u00eb e leht\u00eb \u00ebsht\u00eb t\u00eb p\u00ebrdorni <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/m0rtem\/CloudFail\">CloudFail<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, ekzistojn\u00eb mjete, t\u00eb cilat jan\u00eb t\u00eb dizajnuara vet\u00ebm p\u00ebr gjetjen e subdomain-eve p\u00ebrmes prov\u00ebs me fjalor dhe k\u00ebrkimit n\u00eb burime t\u00eb hapura, p\u00ebr shembull: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/aboul3la\/Sublist3r\">Sublist3r<\/a><\/noindex> ose <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/darkoperator\/dnsrecon\">dnsrecon<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>                        <b class=\"spoiler_title\">Si ndodh k\u00ebrkimi n\u00eb praktik\u00eb<\/b><\/p>\n<p>P\u00ebr shembull, le t\u00eb marrim faqen seo.com, e cila p\u00ebrdor Cloudflare, q\u00eb do ta gjejm\u00eb me an\u00eb t\u00eb sh\u00ebrbimit t\u00eb njohur <noindex><a rel=\"nofollow\" href=\"https:\/\/trends.builtwith.com\/websitelist\/Cloudflare\">builtwith<\/a><\/noindex> (lejon si t\u00eb identifikosh teknologjit\u00eb \/ motor\u00ebt \/ CMS q\u00eb p\u00ebrdoren nga faqja, ashtu edhe anasjelltas \u2013 t\u00eb k\u00ebrkosh faqe sipas teknologjive t\u00eb p\u00ebrdorura). <\/p>\n<p><\/p>\n<p>Kur kaloni n\u00eb sked\u00ebn \"IPv4 Hosts\", sh\u00ebrbimi do t\u00eb shfaq\u00eb nj\u00eb list\u00eb hosts q\u00eb p\u00ebrdorin certifikat\u00ebn. P\u00ebr t\u00eb gjetur at\u00eb q\u00eb k\u00ebrkoni, k\u00ebrkoni adres\u00ebn IP me portin 443 t\u00eb hapur. N\u00ebse ajo drejton n\u00eb faqen e d\u00ebshiruar, at\u00ebher\u00eb detyra \u00ebsht\u00eb e kryer; p\u00ebrndryshe, duhet t\u00eb shtoni n\u00eb titullin \"Host\" t\u00eb k\u00ebrkes\u00ebs HTTP emrin e domain-it t\u00eb faqes (p.sh., *curl -H \"Host: emri_i_faqes\" *<em><noindex><a rel=\"nofollow\" href=\"https:\/\/IP_adres\">https:\/\/IP_adresa<\/a><\/noindex><\/em>).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/9886563fefefdf94f663086ee038a037.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb rastin ton\u00eb, k\u00ebrkimi n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave Censys nuk dha asnj\u00eb rezultat, vazhdojm\u00eb m\u00eb tej.<\/p>\n<p><\/p>\n<p>Do t\u00eb b\u00ebjm\u00eb k\u00ebrkimin p\u00ebrmes DNS n\u00eb sh\u00ebrbimin<noindex><a rel=\"nofollow\" href=\"https:\/\/securitytrails.com\/dns-trails\"> https:\/\/securitytrails.com\/dns-trails<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/e762727ac47c4f4bb705d5518f224ffd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Duke shfletuar adresat t\u00eb p\u00ebrmendura n\u00eb listat e server\u00ebve DNS me utilitarin CloudFail, gjejm\u00eb burime funksionale. Rezultati do t\u00eb jet\u00eb gati brenda disa sekondash.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/3625eeafe5a0e8ea411ebab1ddd32fd8.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Duke p\u00ebrdorur vet\u00ebm t\u00eb dh\u00ebna t\u00eb hapura dhe mjete t\u00eb thjeshta, ne e p\u00ebrcaktuam adres\u00ebn reale IP t\u00eb serverit t\u00eb uebit. E gjith\u00eb pjesa tjet\u00ebr p\u00ebr sulmuesin \u00ebsht\u00eb \u00e7\u00ebshtje teknike.<\/p>\n<p><\/p>\n<p>Le t\u00eb kthehemi te zgjedhja e ofruesit t\u00eb hostimit. P\u00ebr t\u00eb vler\u00ebsuar p\u00ebrfitimin e sh\u00ebrbimit p\u00ebr klientin, do t\u00eb shqyrtojm\u00eb m\u00ebnyrat e mundshme t\u00eb mbrojtjes kund\u00ebr sulmeve DDoS.<\/p>\n<p><\/p>\n<h3 id=\"kak-hosting-provayder-stroit-svoyu-zaschitu\">Si e ndalon ofruesi i hostimit mbrojtjen e tij<\/h3>\n<p><\/p>\n<ol>\n<li>Sistemi i tij i mbrojtjes me pajisje filtrimi (figura 2).<br \/>\nK\u00ebrkon:<br \/>\n1.1. Pajisje p\u00ebr filtrimin e trafik\u00ebve dhe licenc\u00eb p\u00ebr softuerin;<br \/>\n1.2. Specialist\u00eb t\u00eb brendsh\u00ebm p\u00ebr mb\u00ebshtetje dhe funksionim;<br \/>\n1.3. Kanale aksesuese n\u00eb internet, t\u00eb cilat do t\u00eb jen\u00eb t\u00eb mjaftueshme p\u00ebr t\u00eb pranuar sulme;<br \/>\n1.4. Nj\u00eb gj\u00ebr\u00eb t\u00eb konsiderueshme t\u00eb parapaguar p\u00ebr t'u marr\u00eb me trafik \"mbetje\".<br \/>\n<img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/c6fe101febc11741280a4f8a37121cd2.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 2. Sistemi i mbrojtjes t\u00eb ofruesit t\u00eb hostimit<\/em><br \/>\nN\u00ebse shqyrtojm\u00eb sistemin e p\u00ebrshkruar si nj\u00eb mjet mbrojtjeje kund\u00ebr sulmeve DDoS moderne n\u00eb qindra Gbps, at\u00ebher\u00eb ky sistem do t\u00eb kushtoj\u00eb shum\u00eb para. A ka ofruesi i hostimit nj\u00eb mbrojtje t\u00eb till\u00eb? A \u00ebsht\u00eb ai i gatsh\u00ebm t\u00eb paguaj\u00eb p\u00ebr trafik \"mbetje\"? \u00cbsht\u00eb e qart\u00eb se nj\u00eb model i till\u00eb ekonomik p\u00ebr ofruesin \u00ebsht\u00eb jofitimprur\u00ebs, n\u00ebse tarifat nuk parashikojn\u00eb pagesa shtes\u00eb.<\/li>\n<li>Reverse Proxy (vet\u00ebm p\u00ebr uebfaqet dhe disa aplikacione). Megjith\u00ebse ka disa <noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/manual\/category\/udalennaya-zashita-sajtov#110\">e sistemit Dell dhe VMware \u00ebsht\u00eb automatizimi i konfigurimit dhe menaxhimit t\u00eb pajisjeve fizike t\u00eb rrjetit. Megjithat\u00eb, analist\u00ebt shohin edhe probleme t\u00eb mundshme me t\u00eb cilat mund t\u00eb p\u00ebrballen gjigant\u00ebt IT. Mbase, m\u00eb kryesori \u00ebsht\u00eb<\/a><\/noindex>, ofruesi nuk garanton mbrojtje nga sulmet DDoS t\u00eb drejtp\u00ebrdrejta (shih figur\u00ebn 1). Ofruesit e hostimit shpesh ofrojn\u00eb nj\u00eb zgjidhje t\u00eb till\u00eb si panac\u00eb, duke e kaluar p\u00ebrgjegj\u00ebsin\u00eb te ofruesi i mbrojtjes.<\/li>\n<li>Sh\u00ebrbimet e ofruesit t\u00eb specializuar n\u00eb cloud (p\u00ebrdorimi i rrjetit t\u00eb tij t\u00eb filtrimit) p\u00ebr mbrojtjen nga sulmet DDoS n\u00eb t\u00eb gjitha nivelet e OSI (figura 3).<br \/>\n<img decoding=\"async\" alt=\"Hostimi me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet\" src=\"\/wp-content\/uploads\/2020\/09\/446b8deca30efd73f4768a4ba41e2c47.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<em>Figura 3. Mbrojtje e gjithanshme nga sulmet DDoS me ndihm\u00ebn e ofruesit t\u00eb specializuar<\/em><br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/ddos-guard.net\/ru\/store\/network-protection\">Zgjidhja<\/a><\/noindex> parashikon nj\u00eb integrim t\u00eb thell\u00eb dhe nj\u00eb nivel t\u00eb lart\u00eb t\u00eb kompetenc\u00ebs teknike t\u00eb t\u00eb dyja pal\u00ebve. Delegimi i sh\u00ebrbimeve t\u00eb filtrimit t\u00eb trafik\u00ebve n\u00eb outsourc\u00eb i lejon ofruesit t\u00eb hostimit t\u00eb ul\u00eb \u00e7mimin e sh\u00ebrbimeve shtes\u00eb p\u00ebr klientin.<\/li>\n<\/ol>\n<p><\/p>\n<p><strong>\u00cb r\u00ebnd\u00ebsishme!<\/strong> Sa m\u00eb shum\u00eb t\u00eb detajohen karakteristikat teknike t\u00eb sh\u00ebrbimit t\u00eb ofruar, aq m\u00eb shum\u00eb mund\u00ebsi do t\u00eb kemi p\u00ebr t\u00eb k\u00ebrkuar p\u00ebrmbushjen e tyre ose kompenzim n\u00eb rast t\u00eb ndalimit.<\/p>\n<p><\/p>\n<p>P\u00ebrve\u00e7 tre metodave kryesore, ekzistojn\u00eb shum\u00eb kombinime dhe bashk\u00ebngjitje. Kur zgjidhni hostingun, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme p\u00ebr klientin t\u00eb mbaj\u00eb parasysh se vendimi do t\u00eb ndikoj\u00eb jo vet\u00ebm n\u00eb madh\u00ebsin\u00eb e sulmeve t\u00eb garantuara q\u00eb blokohen dhe sakt\u00ebsin\u00eb e filtrimit, por edhe n\u00eb shpejt\u00ebsin\u00eb e reagimit dhe informativitetin (lista e sulmeve t\u00eb bllokuara, statistika e p\u00ebrgjithshme etj.).<\/p>\n<p><\/p>\n<p>Mbani mend se vet\u00ebm disa ofrues t\u00eb hostingut n\u00eb bot\u00eb jan\u00eb n\u00eb gjendje t\u00eb sigurojn\u00eb nj\u00eb nivel t\u00eb pranuesh\u00ebm mbrojtjeje vet\u00eb, n\u00eb rastet e tjera ndihmon kooperimi dhe njohuria teknike. K\u00ebshtu, kuptimi i parimeve themelore t\u00eb organizimit t\u00eb mbrojtjes nga sulmet DDoS do t\u2019i ndihmoj\u00eb pronar\u00ebt e faqeve t\u00eb mos bien n\u00eb mashtrimet e marketingut dhe t\u00eb mos blejn\u00eb \u2018macen n\u00eb thes\u2019.<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ddosguard\/blog\/520302\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2020 \u0433\u043e\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e DDoS-\u0430\u0442\u0430\u043a \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432 \u0442\u0440\u0438 \u0440\u0430\u0437\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c 65% \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u00ab\u043d\u0430\u0433\u0440\u0443\u0437\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0435\u0437 \u0442\u0440\u0443\u0434\u0430 \u00ab\u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u00bb \u0431\u0435\u0437\u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432, \u0444\u043e\u0440\u0443\u043c\u043e\u0432, \u0431\u043b\u043e\u0433\u043e\u0432, \u0421\u041c\u0418. \u041a\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0445\u043e\u0441\u0442\u0438\u043d\u0433? \u041d\u0430 \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\u043c \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0438? [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95258","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-27T05:42:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Hosting me mbrojtje t\u00eb plot\u00eb nga sulmet DDoS \u2013 mit apo realitet | ProHoster","description":"N\u00eb dy t\u00eb parat.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0425\u043e\u0441\u0442\u0438\u043d\u0433 \u0441 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u2013 \u043c\u0438\u0444 \u0438\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/hosting-s-polnoczennoj-zashhitoj-ot-ddos-atak-mif-ili-realnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-27T05:42:43+00:00","article:modified_time":"2020-09-27T05:42:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95258","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:00:57","updated":"2022-09-27 17:53:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95259"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}