🥇Sityhoboze njani iFirewall yase China (icandelo 1)

Sawubona wonke umntu!

U-Nikita unxibelelana naye - injineli yenkqubo evela kwinkampani I-SEMrush. Namhlanje ndiza kukuxelela malunga nendlela esijongene ngayo nomsebenzi wokuqinisekisa ukuzinza kwenkonzo yethu ye-semrush.com e-China, kwaye zeziphi iingxaki esiye sadibana nazo ngexesha lokuphunyezwa kwayo (ngokunikwa indawo yeziko lethu ledatha kunxweme olusempuma ye-United States).

Oku kuya kuba libali elikhulu, lahlulwe ngamanqaku amaninzi. Ndiza kukuxelela indlela okwenzeka ngayo kuthi: ukusuka kwinkonzo engasebenzi ngokupheleleyo evela eChina, ukuya kwizikhombisi zokusebenza zenkonzo kwinqanaba le-American version yaseMelika. Ndiyathembisa iya kuba nomdla kwaye ibe luncedo. Ngoko, masihambe.

Iingxaki ze-Intanethi yaseTshayina

Nditsho nomntu othe kratya kwiinkcukacha zolawulo lwenethiwekhi uye weva malunga I-Firewall enkulu yaseTshayina. Wow, izandi zipholile, akunjalo? Kodwa ukuba yintoni kwaye isebenza njani ngumbuzo onzima kakhulu. Unokufumana amanqaku amaninzi kwi-Intanethi anikezelwe kule nto, kodwa kwimbono yezobugcisa, isakhiwo sale firewall asichazwanga naphi na. Noko ke, oko akumangalisi. Ndiya kuvuma ngokukhawuleza ukuba ngokusekelwe kwiziphumo zonyaka womsebenzi, andiyi kukwazi ukuthetha ngokuthe ngqo indlela esebenza ngayo, kodwa ndinokuxelela malunga nezimvo zam kunye nezigqibo ezisebenzayo. Kwaye siza kuqala ngamahemuhemu malunga nale firewall.

Kukho amarhe amaninzi malunga nale firewall kakhulu. Masiqokelele eyona iphambili kunye neyona inomdla kubo kuluhlu olunye:

UGoogle, Facebook, Twitter kunye nezinye iinkonzo ezifanayo zivaliwe kwaye azisebenzi eChina.
Nayiphi na i-traffic eya NGAPHANDLE kwe-China kunye ne-ENTO E-China ihlanjululwe kwaye ilinganiselwe ngokusebenzisa ukufundwa koomatshini (kwimeko ye-traffic ekrokrelayo), ethi icothise kakhulu (i-traffic) edlula kumda.
Iiarhente zobuntlola zaseTshayina ziya kuphazamisa nayiphi na itrafikhi efihliweyo edlula kwi-firewall yazo.
Iitonela ze-VPN, i-IPSEC itonela ayizinzile, iyantlitheka kwaye ihlala ivaliwe.
Okukhona uguqulelo oluntsonkothileyo lulula, kokukhona ibinzana lokugqitha elisetyenziselwa ukunyanisekisa/ukufihlwa kwetrafikhi, kokukhona lidlula kwifirewall yaseTshayina.

Nantsi into esiyifumeneyo ngala marhe:

I-Google, i-Facebook, i-Twitter kunye nezinye iinkonzo ezifanayo zivaliwe ngokwenene (i-KO yakho), kodwa ezininzi iindawo zobugcisa zeGoogle, umzekelo, azivaliwe kwaye zisebenza (i-gstatic.com efanayo). Isiphelo silandela koku: akufanele unqumle ngokungenankathalo zonke iGoogle kunye nezinye izixhobo ezibonakala zivaliwe.
Naziphi na iitrafikhi ezidlula kumda ngenene zongeza ukulibaziseka okukhulu kwixesha lazo. Jonga iziphumo ezimbini. Isiza esinye, iphepha elinye, iGET elula curl’ om. Umlinganiselo wokuqala wawuvela eChina ngokwayo (isixeko esihle saseShenzhen). Eyesibini yalinganiswa ngaphandle ukusuka eHong Kong (inobungangamsha, kwaye akukho firewall phakathi kwayo nehlabathi). Umgama phakathi kwezixeko kumgca othe ngqo malunga ne-30-40 km.

nikita@china-shenzhen:~# curl -o /dev/null -w@curl_time "https://www.semrush.com/info/ebay.com"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  381k    0  381k    0     0  71824      0 --:--:--  0:00:05 --:--:-- 82832
time_namelookup:  0.004500
time_connect:  0.169342
time_appconnect:  0.723189
time_pretransfer:  0.723499
time_redirect:  0.000000
time_starttransfer:  1.532912
----------
time_total:  5.443407
----------
size_download:  390968 Bytes
speed_download:  71824.000B/s

nikita@china-hongkong:~# curl -o /dev/null -w@curl_time "https://www.semrush.com/info/ebay.com"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  319k    0  319k    0     0  2555k      0 --:--:-- --:--:-- --:--:-- 2573k
time_namelookup:  0.029366
time_connect:  0.030742
time_appconnect:  0.047310
time_pretransfer:  0.047388
time_redirect:  0.000000
time_starttransfer:  0.120793
----------
time_total:  0.124871
----------
size_download:  326755 Bytes
speed_download:  2616740.000B/s

naka u ixesha_nxibelelana. Kwaye ngokubanzi, uyasibona isiphumo: i-firewall yongeza imizuzwana emi-4 eyongezelelweyo, ende ngokumangalisayo.

Iitonela ze-VPN kunye ne-IPSEC ziyasilela rhoqo. Ndiza kuthetha ngale nto kamva kwaye neenkcukacha ngakumbi. Iiseva zeVPN ezisetyenziswa ngabasebenzisi zivaliwe ngokuhamba kwexesha (ngokuqhelekileyo ngaphakathi kosuku emva kokuqala kokusetyenziswa).
Kukho uluvo olufunyenwe kubantu abahlala e-China ukuba i-encryption elula ye-traffic, ngokukhawuleza idlula kumda, kuba kulula ukuqonda ukuba akukho nto ingekho mthethweni ngayo. Kwaye ngendlela efanayo, i-traffic "ecocekileyo" ifumana i-bandwidth kunye nesantya sokuhamba, ngelixa i-traffic "engcolileyo", apho akukho nto inokuqondwa khona, ifumana, ngokuchaseneyo, isicatshulwa esicothayo. Umzekelo ndiza kusebenzisa i-curl uku ifconfig.co ngokusebenzisa i-HTTPS kunye ne-HTTP protocol.

curl -o /dev/null -w@curl_time "https://ifconfig.co/"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    13  100    13    0     0      2      0  0:00:06  0:00:05  0:00:01     3
time_namelookup:  0.004305
time_connect:  0.397465
time_appconnect:  5.149305
time_pretransfer:  5.149393
time_redirect:  0.000000
time_starttransfer:  5.568847
----------
time_total:  5.568893
----------
size_download:  13 Bytes
speed_download:  2.000B/s

curl -o /dev/null -w@curl_time "http://ifconfig.co/"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    13  100    13    0     0     28      0 --:--:-- --:--:-- --:--:--    28
time_namelookup:  0.004282
time_connect:  0.212457
time_appconnect:  0.000000
time_pretransfer:  0.212484
time_redirect:  0.000000
time_starttransfer:  0.450565
----------
time_total:  0.450620
----------
size_download:  13 Bytes
speed_download:  28.000B/s

Umahluko wemizuzwana emi-5 ngexesha lokukhuphela lilonke le-13 bytes. Ngaphezu koko, xa usenza uvavanyo olunjalo amaxesha amaninzi, unokuqaphela ukuba i-GET kwi-HTTP igqitywe ngokubanzi ngexesha elifanayo ngexesha ngalinye, ngelixa i-HTTPS isayithi ngamanye amaxesha iphendula kwi-3, 5, 10 kunye ne-17 imizuzwana. Ngamanye amaxesha iimpazamo ze-SSL ziyenzeka:

Unknown SSL protocol error in connection to ifconfig.co:443.

Ngoko into esinayo:

Iingxaki ezenziwe yi-firewall yaseTshayina zichazwe ngasentla.
I-Pings kwimithombo yangaphandle kunye neetonela zangaphakathi ziyanyamalala ngamaxesha athile.
Ukubambezeleka phakathi kwamanqaku amabini kuhlala kuguquguquka, kwaye amaxesha amaninzi akulindelekanga. Xa udibanisa izixeko / imimandla eyahlukeneyo, ulindele ukuba, ngokusekwe kwindawo yendawo yemimandla, ukulibaziseka kuya kuba ngaphantsi, kodwa ufumana imeko echaseneyo.
I-Intanethi kunye nemijelo yonxibelelwano iyakhawuleza okanye iyacotha. Kukho ukuxhomekeka okuncinci kwixesha lemini kunye nosuku lweveki, kodwa kungekhona rhoqo.
Izicelo ze-DNS kwilizwe langaphandle ezivela eTshayina ngamanye amaxesha zidlula ixesha elivunyelweyo lokuvala.

Umfanekiso ovelayo "ugqwesile."

Iziko ledatha, njengoko besenditshilo, likwimpuma ye-United States, kwaye yonke i-SEMrush ineemveliso ezininzi ezidibeneyo, i-backends, i-frontends, i-database, kunye nayo yonke le nto kwi-DC kunye namafu. Thina, njengeqela labalawuli benkqubo, sanikwa umsebenzi wokuqalisa ngokukhawuleza ukusebenza eTshayina ngomzamo omncinci.

Kwafuneka siphendule umbuzo obalulekileyo: ngaba kunokwenzeka ukuba siphumelele ngeendleko ezincinci kunye nokusombulula zonke iingxaki ezinxulumene ne-Intanethi yaseTshayina kunye ne-firewall kwinqanaba lenethiwekhi / ifu / iseva?

Saqala ngokwamkela I-ICP-elayisenisi.

Ilayisensi ye-ICP

Ukuze ukwazi ukusingatha inkonzo yakho ngaphakathi kwe-China (i-Mainland China) kwaye uqhube iimvavanyo, kufuneka uqale ufumane ilayisenisi ye-ICP yendawo.

Ukuba i-traffic yesayithi yakho iphelile ngaphakathi kwe-Mainland China, kwaye ukuba indawo yakho ayinayo ilayisenisi ye-ICP, itrafikhi yakho iya kuvalwa kwi-ISP/icala lokusingatha. Okubangela umdla kukuba, ilayisenisi ye-ICP ibandakanya umboneleli othile, nokuba yi-Cloudflare okanye i-Alibaba Cloud. Ke ngoko, ukuba ufumene ilayisenisi ye-ICP ye-Cloudflare kwaye ubambe iwebhusayithi yakho kunye nabo, awuyi kukwazi "ukuhamba ngaphandle komthungo" ukuya kwi-Alibaba Cloud. Kuya kufuneka wongeze enye indawo yokusingatha le layisensi.

Emva kokufumana ilayisenisi ye-ICP yesizinda, siye sakwazi ukuza kunye nokuphumeza iingcamango ezithile zobugcisa kunye nezisombululo.

Izisombululo zovavanyo

Kodwa ngaphambi kokuba udale ngokuthe ngqo ukhetho lwesiteji, vula amaqhosha, ukwandisa ukusebenza kwendawo kunye nesantya sayo, kufuneka ukhethe isixhobo sokuyivavanya ukuze ubone ukuba zeziphi izenzo zethu eziphuculweyo okanye, ngokuchaseneyo, zibi nakakhulu ukusebenza kwendawo.

Isixhobo sethu sokuvavanya kwafuneka sihlangabezane neemfuno ezimbini eziphambili:

kufuneka ikwazi ukuqhuba iimvavanyo ezivela eTshayina,
kufuneka ibe novavanyo lomkhangeli zincwadi.

Ngoko sifumene Indlela yokubamba! Banokhuselo oluhle kakhulu lweendawo zovavanyo kwihlabathi liphela. E-China, iimvavanyo zinokuqhutywa ukusuka kumaphondo angama-100500 ngesi sixhobo. Ngamnye unababoneleli abahlukeneyo abahlukeneyo + amandla okwenza Umqolo-uvavanyo (into efana nomatshini wenyani kwiziko ledatha) kunye Lastmile-uvavanyo (ngokukufutshane kangangoko kunokwenzeka kwiimeko zomsebenzisi, aka workstation). Olu hlobo lokugqibela lovavanyo lubiza kakhulu.

Emva kokuba sigqibe isivumelwano sonyaka (esingaphantsi kwelo asinakwenzeka), saqalisa ukufunda esi sixhobo. Ngeliphandle, sothuswa ngokunyanisekileyo kukusebenza kwayo. Ungabaleka:

Iimvavanyo ze-DNS,
Iimvavanyo zewebhu (uvavanyo lwebhrawuza, iGET/POST elula, ukulinganisa umxumi ohambahambayo, njl.),
Iitshekhi zentengiselwano (umzekelo, ukungena),
Iimvavanyo ze-API,
I-ping, i-traceroute, i-NTP, njl.

Awukwazi ukudwelisa yonke into. Kwaye okona kubaluleke kakhulu, uvavanyo ngalunye lunokwenziwa ngokwezifiso kakuhle ngokongeza iqela leeheader kunye nezinye iiparamitha. Isiphumo sisixa esikhulu solwazi oluchaza ngokupheleleyo uvavanyo lwakho. Ukuba sithetha ngezona zinto zinomdla kuthi (uvavanyo lwebhrawuza), isiphumo sibandakanya:

Connect, Linda, Layisha, SSL, DNS ixesha,
TTFB, TTLB, Uxwebhu lugqityiwe, ixesha lokunikezela, umthwalo weDOM,
Impendulo (into ekufutshane neXesha lokuQala iByte), impendulo yekhasi lewebhu (into ekufutshane neXesha lokuGqibela iByte),
Nayiphi na ipesenti, i-Avareji, ixesha leMedi
njl.

Ngokufanelekileyo, zonke ezi metrics zilungile ekuboneni utshintsho kunye nokuqonda ukuba izinto ziye zaba ngcono na. Sijonge ikakhulu Impendulo, i-Webpage Response, iMedi, i-75 kunye ne-95 yeepesenti.

Umbuzo obalulekileyo owawusemoyeni kwasekuqaleni: Ngaba ungayithemba iCatchpoint?? Ngaba esi sixhobo sibonisa isantya sokulayisha indawo yokwenyani e-China ukusuka kwizixeko ezahlukeneyo, okanye ngaba luhlobo oluthile lovavanyo kwi-vacuum engenanto yakwenza namava okwenene omsebenzisi?
Le yingxaki enkulu, kuba ukuba seRussia phantse akunakwenzeka ukufumanisa ngokuthembekileyo ukuba isiza esivela eTshayina sisebenza njani. Ngokwenza i-socks-proxy ngomatshini wenyani, isiphumo sokugqibela kukuba isiza silayisha ngaphakathi kwemizuzu embalwa, nto leyo engamkelekanga kuvavanyo, ngoko ke ekuphela kwenketho yovavanyo lwezandla yi-curl kunye ne-GET elula kwi-console enexesha. . Oku kunceda kuba olu vavanyo lubonisa kakuhle isantya sesisombululo senethiwekhi, kwaye ukuba kukho iimvavanyo zesiphequluli, ngoko kuhle kakhulu.

Kamva nathi saya eTshayina yaye seyisekile ukuba Unokuyithemba iCatchpoint; ibonisa ngokuchanekileyo izikhombisi zokusebenza.

Cloudflare China Network

Kuba sisebenzise ngempumelelo i-Cloudflare kwisizinda esiphambili semrush.com, sigqibe kwelokuba sizame kwangoko into yabo ebizwa China Network. Olu khetho luvulwe kuphela kwiisayithi zeShishini kwisicelo esahlukileyo kunye nomrhumo owongezelelweyo. Ikwafumaneka kuphela kwiindawo ezinelayisensi ye-ICP efanelekileyo edwelisa i-Cloudflare njengomboneleli. Emva kokuyivumela, "i-CDN yaseTshayina" evela kwi-Cloudflare ifumaneka kwindawo - itrafikhi evela kwimimandla yaseTshayina ifika kwi-PoP ekufutshane (Amanqaku oBukho) CF, emva koko ngothungelwano lwayo okanye uthungelwano lwababoneleli/amaqabane isiwa kwimvelaphi. .

Umzobo wale bhentshi yovavanyo uboniswe ngezantsi.

Olu lukhetho olukhulu kuthi. Kuyavela ukuba i-domain yesibini iya kuba ye-CF, engongezi kwinani lezisombululo ezisetyenziswa kwinkampani, kwaye ngokuqinisekileyo ayifaki nzima isiseko.

Siqhube iimvavanyo zebhrawuza kwaye nantsi into eyenzekayo:

Iidayimani ezibomvu ziintsilelo zovavanyo. Ezi fayile zingezantsi ziimpazamo ze-DNS (sombulula ixesha lokuvala). Iintsilelo phezulu kukuphelelwa lixesha.

Ixesha lokuphumla: 86.6
Median: 18s
Iipesenti ezingama-75: 29.3s
Iipesenti ezingama-95: 60s

I-Medi, emva kokulayisha isusiwe reCaptcha (Inkonzo kaGoogle ivaliwe eTshayina) yehle ukusuka kwi-28 ukuya kwimizuzwana eyi-18. Kodwa ezi ziseziziphumo ezibi, kuqwalaselwa ukuba uvavanyo olufanayo lwe-semrush.com (oluvela e-US) lunike imizuzwana engaphantsi kwe-10 kwi-95% yabasebenzisi (abasuka e-US) kwiphepha elifanayo (i-static + dynamic).

Ungangena kuvavanyo ngalunye kwaye ujonge Impompo kunye nezinye iiparamitha ezineenkcukacha. Saqala ukuphanda izizathu zeempazamo, kwaye ukuba ixesha liphelile yonke into icacile ngakumbi: i-Intanethi e-China "ihamba ngaphakathi nangaphandle", ngenxa yoko isantya soqhagamshelwano kunye nokulayishwa kwemithombo evela phesheya ayizinzile kwaye ayilingani, emva koko iimpazamo ze-DNS zasimangalisa kakhulu. Siyifumene loo nto I-PoP I-Cloudflare ngokwenene ibekwe e-China, idilesi yesayithi isombulula kwi-IP enye nayiphi na i-IP, kodwa iiseva ze-DNS zingaseMelika, yiyo loo nto izicelo ze-DNS zinyanzeliswa ukuba ziwele umda, ngamanye amaxesha ziyasilela.

Emva kokucacisa lo mbuzo kunye neCF, kwavela ukuba Abanazo iiseva zabo ze-DNS eTshayina, kwaye ukuba iya kuba nini na nangoku ayaziwa.

Ke ngoko, sigqibe kwelokuba sivavanye kuphela i-Cloudflare DNS kwaye sitshintshe indlela yokusebenza ye-Cloudflare kwindawo yethu kwi "DNS kuphela" Le yindlela xa i-Cloudflare ingenayo i-proxy traffic ngokwayo, oku kuthetha ukuba ayinikezeli ukhuseleko lwe-DDoS, i-CDN kunye nezinye iimpawu, kwaye isebenza kwimodi ye-server ye-DNS eqhelekileyo.

Esi simemo siboniswe ngokucwangcisekileyo kulo mzobo ulandelayo. Umzobo uthatha ingqalelo kulwazi oluvelayo ukuba iiseva ze-DNS ze-Cloudflare zisemva kwe-firewall.

Kwi-Catchpoint siye saqhuba iimvavanyo ezilula ze-GET (hayi iimvavanyo ze-browser), ezibonise ukungaphumeleli okuninzi. Zibangelwa zimpazamo ezifanayo zeDNS.

Saqala ukulungisa ezi mpazamo sisebenzisa ukumba saza safumanisa ukuba kwisicelo sokuqala idilesi imiselwe ngokufanelekileyo, yaye xa siyicela ngokuphindaphindiweyo sifumana ixesha ngalinye INKONZO и ayifunyanwa. Kutheni oku kusenzeka ngesiquphe nje?

root@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn
semrushchina.cn has address 220.170.186.192
Host semrushchina.cn not found: 2(SERVFAIL)
root@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn
semrushchina.cn has address 220.170.186.192
Host semrushchina.cn not found: 2(SERVFAIL)
root@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn
semrushchina.cn has address 220.170.186.192
Host semrushchina.cn not found: 2(SERVFAIL)
root@iZwz97n2wgbp61qucbfrjsZ:~# host semrushchina.cn
semrushchina.cn has address 220.170.186.192
Host semrushchina.cn not found: 2(SERVFAIL)

Akukho ziphoso ezinjalo xa ubuza iiseva ze-Cloudflare NS ngokuthe ngqo:

root@iZwz97n2wgbp61qucbfrjsZ:~# for i in `seq 1 2`; do host semrushchina.cn ray.ns.cloudflare.com.; done
Using domain server:
Name: ray.ns.cloudflare.com.
Address: 173.245.59.138#53
Aliases: 

semrushchina.cn has address 220.170.186.192
semrushchina.cn has address 220.170.186.192
Using domain server:
Name: ray.ns.cloudflare.com.
Address: 173.245.59.138#53
Aliases: 

semrushchina.cn has address 220.170.186.192
semrushchina.cn has address 220.170.186.192

Oku kuthetha ukuba ingxaki isecaleni leseva ye-DNS "yendawo" okanye iseva yomnikezeli.
Uphando olubhekele phaya lwatyhila oko INKONZO sifikelela kwisigqibo ÅÅÅÅ-iirekhodi.

Kwavela ukuba xa ucela kwi-Cloudflare IAAAA-irekhodi elingekho kwi-domain, i-Cloudflare iphendule А-ungeno oluyimpazamo kunye nokungahambelani ne-RFC. Kutheni umsombululi wendawo (xxx) Andizange ndiyithande, yaye waphendula INKONZO. Le ndlela yokuziphatha ibonakala ngokucacileyo kwilog engezantsi:

root@iZwz97n2wgbp61qucbfrjsZ:~# dig -t AAAA semrushchina.cn @x.x.x.x

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA semrushchina.cn @x.x.x.x
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55467
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;semrushchina.cn.               IN      AAAA

;; Query time: 334 msec
;; SERVER: x.x.x.x#53(x.x.x.x)
;; WHEN: Tue Aug 14 23:38:50 CST 2018
;; MSG SIZE  rcvd: 44

root@iZwz97n2wgbp61qucbfrjsZ:~# dig -t AAAA semrushchina.cn @dana.ns.cloudflare.com.

; <<>> DiG 9.10.3-P4-Ubuntu <<>> -t AAAA semrushchina.cn @dana.ns.cloudflare.com.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63944
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;semrushchina.cn.               IN      AAAA

;; ANSWER SECTION:
semrushchina.cn.        300     IN      A       220.170.186.192

;; Query time: 185 msec
;; SERVER: 173.245.58.105#53(173.245.58.105)
;; WHEN: Tue Aug 14 23:43:03 CST 2018
;; MSG SIZE  rcvd: 60

Singenise ingxelo yebug kwi-Cloudflare, kwaye bayilungisa emva kwexesha elithile. Kwabonakala kunomdla: okwangoku akukabikho nkxaso ye-IPv6 eTshayina, ke i-Cloudflare ayikwazanga ukukhupha idilesi yayo ye-IPv6 apho ekuphenduleni isicelo. IAAAA-iirekhodi. Ekugqibeleni, yonke into yasonjululwa ngendlela yokuba i-Cloudflare yaqala ukuphendula iChina NODATA kwizicelo ezinjalo.

Ke, iimpazamo ze-DNS kwiimvavanyo zeCatchpoint zehle kakhulu, kodwa hayi ngokupheleleyo. Amaxesha asekhona:

Kwaye saqala ukukhangela esinye isisombululo.

Kwinxalenye elandelayo ndiya kukuxelela indlela esivavanye ngayo ilifu laseTshayina Alibaba Cloud, njani, ngoncedo lwe "magic" encinci ye-Nginx, sakwazi ukwenza ngokukhawuleza i-PoC (ubungqina beNgcaciso) izisombululo, indlela esakha ngayo izixazululo ze-Multi-Cloud, enye yazo ekugqibeleni yanceda kakhulu ukukhawulezisa umsebenzi wenkonzo. evela eTshayina.

Hla umamele!