{"id":4049,"date":"2021-09-28T07:31:21","date_gmt":"2021-09-28T05:31:21","guid":{"rendered":"https:\/\/www.websupport.cz\/blog\/?p=4049"},"modified":"2025-03-11T21:18:26","modified_gmt":"2025-03-11T20:18:26","slug":"nasazujeme-novy-stit-proti-ddos-utokum","status":"publish","type":"post","link":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/","title":{"rendered":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm"},"content":{"rendered":"\n<p><em>Webhosting nen\u00ed jen o hostinz\u00edch a dom\u00e9n\u00e1ch. Aby v\u0161echny tyto slu\u017eby mohly b\u011b\u017eet je\u0161t\u011b l\u00e9pe a stabiln\u011bji, p\u0159ipravujeme novou infrastrukturu pro DNS slu\u017eby. \u0158\u00edk\u00e1te si, \u017ee jako z\u00e1kazn\u00edka se v\u00e1s to net\u00fdk\u00e1? Poj\u010fme si proj\u00edt, co v\u0161echnou touto inovac\u00ed z\u00edsk\u00e1te.<\/em><\/p>\n\n\n\n<p><em>Pov\u00eddali jsme si s jedn\u00edm z kl\u00ed\u010dov\u00fdch lid\u00ed, kte\u0159\u00ed za touto zm\u011bnou stoj\u00ed \u2013 s Tom\u00e1\u0161em H\u00e1lou, CEE IT Security &amp; Operations Managerem Websupportu.<\/em><\/p>\n\n\n\n<p><strong>V rozhovoru sa dozv\u00edte:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>jak zlep\u0161\u00edme bezpe\u010dnost slu\u017eeb v\u016f\u010di DDoS \u00fatok\u016fm,<\/li><li>jak\u00fd vliv m\u00e1 DNS na rychlost na\u010d\u00edt\u00e1n\u00ed webu,<\/li><li>jak\u00e9 technologie bude na\u0161e nov\u00e1 infrastruktura vyu\u017e\u00edvat,<\/li><li>co je to IP anycast,<\/li><li>kde ve sv\u011bt\u011b se nach\u00e1zej\u00ed na\u0161e server stacky.<br><br><\/li><\/ul>\n\n\n\n<p><em><strong>Co je to DNS a k \u010demu slou\u017e\u00ed?<\/strong><\/em><\/p>\n\n\n\n<p>Slu\u017eba DNS p\u0159ev\u00e1d\u00ed dom\u00e9nov\u00e1 jm\u00e9na jako \u201evasefirma.cz\u201c na tzv. IP adresy, kter\u00fdm rozum\u00ed po\u010d\u00edta\u010de (mobily, servery atp.). Je to z\u00e1kladn\u00ed slu\u017eba, na jej\u00edm\u017e fungov\u00e1n\u00ed jsou z\u00e1visl\u00e9 ve\u0161ker\u00e9 internetov\u00e9 slu\u017eby \u2013 weby, e-maily, mobiln\u00ed aplikace, zas\u00edl\u00e1n\u00ed zpr\u00e1v, videa, online konference, internetov\u00e9 bankovnictv\u00ed, datov\u00e9 schr\u00e1nky, cloudov\u00e9 slu\u017eby nebo soci\u00e1ln\u00ed s\u00edt\u011b. Zkr\u00e1tka v\u0161echno, co se nach\u00e1z\u00ed v online prostoru.<\/p>\n\n\n\n<p><em><strong>Jak se projevuje (ne)kvalita DNS slu\u017eeb?<\/strong><\/em><\/p>\n\n\n\n<p>Pokud slu\u017eba DNS funguje spr\u00e1vn\u011b, ani o n\u00ed nev\u00edme. Pokud jsou s n\u00ed probl\u00e9my, projev\u00ed se to jako pomal\u00e1 odezva nebo v\u00fdpadky internetov\u00fdch slu\u017eeb, pop\u0159. i bezpe\u010dnostn\u00ed probl\u00e9my. Proto je d\u016fle\u017eit\u00e9 m\u00edt spolehliv\u00e9ho poskytovatele slu\u017eby DNS, kter\u00fdm je nej\u010dast\u011bji ta spole\u010dnost, u kter\u00e9 si registrujete samotnou dom\u00e9nu.<\/p>\n\n\n\n<p><em><strong>Jak\u00e1 je na\u0161e aktu\u00e1ln\u00ed situace?<\/strong><\/em><\/p>\n\n\n\n<p>Aktu\u00e1ln\u011b provozujeme t\u0159i nez\u00e1visl\u00e9 a tzv. autoritativn\u00ed DNS servery, na kter\u00fdch jsou provozov\u00e1ny v\u0161echny u n\u00e1s registrovan\u00e9 dom\u00e9ny. Podporujeme t\u00e9\u017e bezpe\u010dnostn\u00ed roz\u0161\u00ed\u0159en\u00ed zvan\u00e9 DNSSEC, kter\u00e9 chr\u00e1n\u00ed syst\u00e9m proti podvrhov\u00e1n\u00ed DNS odpov\u011bd\u00ed a z toho plynouc\u00edm bezpe\u010dnostn\u00edm probl\u00e9m\u016fm.<\/p>\n\n\n\n<p><em><strong>Co k tomu pou\u017e\u00edv\u00e1me te\u010f? Jak\u00e9 technologie?<\/strong><\/em><\/p>\n\n\n\n<p>Na\u0161e infrastruktura je zalo\u017eena na autoritativn\u00edm DNS serveru Knot DNS vyv\u00edjen\u00e9m n\u00e1rodn\u00edm registrem .CZ dom\u00e9ny CZ.NIC, plus na dal\u0161\u00edch podp\u016frn\u00fdch syst\u00e9mech, kter\u00e9 si vyv\u00edj\u00edme sami intern\u011b.<\/p>\n\n\n\n<p><em><strong>Pro\u010d jsme se rozhodli pro zm\u011bnu a co n\u00e1m to p\u0159inese?<\/strong><\/em><\/p>\n\n\n\n<p>Jsou v z\u00e1sad\u011b t\u0159i d\u016fvody, pro\u010d nyn\u00ed do syst\u00e9mu DNS v\u00fdrazn\u011b investujeme, a to po str\u00e1nce finan\u010dn\u00edch investic i po str\u00e1nce na\u0161eho v\u00fdvoje:<\/p>\n\n\n\n<p>1) Pozorujeme \u010d\u00edm d\u00e1l \u010dast\u011bj\u0161\u00ed a siln\u011bj\u0161\u00ed DDoS \u00fatoky, kter\u00e9 maj\u00ed za c\u00edl vy\u0159adit DNS syst\u00e9m z provozu. Chceme infrastrukturu upravit tak, aby byla maxim\u00e1ln\u011b robustn\u00ed a zajistila spolehliv\u00fd provoz v\u0161ech hostovan\u00fdch dom\u00e9n i v p\u0159\u00edpadech, kdy jsme c\u00edlem velmi siln\u00fdch \u00fatok\u016f.<\/p>\n\n\n\n<p>2) D\u00edky akvizi\u010dn\u00edm aktivit\u00e1m v na\u0161\u00ed hostingov\u00e9 skupin\u011b skokov\u011b rosteme a hostujeme v\u00fdrazn\u011b vy\u0161\u0161\u00ed po\u010det dom\u00e9n (z \u0159\u00e1d\u016f stovek tis\u00edc dom\u00e9n se posouv\u00e1me do \u0159\u00e1d\u016f milion\u016f, tedy jde \u0159\u00e1dov\u011b o desetin\u00e1sobn\u00fd r\u016fst ve velmi kr\u00e1tk\u00e9 dob\u011b). Chceme si b\u00fdt jist\u00ed, \u017ee na\u0161e infrastruktura tento raketov\u00fd r\u016fst dok\u00e1\u017ee bez probl\u00e9m\u016f obslou\u017eit.<\/p>\n\n\n\n<p>3) Chceme zajistit n\u00edzkou dobu odezvy (tzv. latenci) DNS slu\u017eby nejen v Evrop\u011b, ale i ve zbytku sv\u011bta. Rychl\u00e1 odezva DNS se projev\u00ed na rychlej\u0161\u00edm fungov\u00e1n\u00ed v\u0161ech ostatn\u00edch slu\u017eeb, nap\u0159. na rychlosti na\u010d\u00edt\u00e1n\u00ed webov\u00e9 str\u00e1nky.<\/p>\n\n\n\n<p><em><strong>Jak se zm\u011bna infrastruktury prov\u00e1d\u011bla? Jak prob\u00edhal v\u00fdvoj a co jsme testovali?<\/strong><\/em><\/p>\n\n\n\n<p>Vytvo\u0159ili jsme zcela nov\u00fd design DNS infrastruktury p\u0159iznan\u011b inspirovan\u00fd infrastrukturou pro TLD dom\u00e9nu .CZ od CZ.NIC. Vyu\u017e\u00edv\u00e1 tzv. DNS stacky r\u016fzn\u00fdch velikost\u00ed a rozm\u00edst\u011bn\u00e9 do nejr\u016fzn\u011bj\u0161\u00edch lokalit po sv\u011bt\u011b. Ka\u017ed\u00fd stack je samostatn\u00e1 jednotka schopn\u00e1 odbavit nejen b\u011b\u017en\u00e9 mno\u017estv\u00ed DNS dotaz\u016f, ale i v\u011bt\u0161\u00ed provoz b\u011bhem DDoS \u00fatok\u016f. Testov\u00e1n\u00ed prob\u00edh\u00e1 v n\u011bkolika rovin\u00e1ch:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>testov\u00e1n\u00ed z\u00e1kladn\u00ed funk\u010dnosti (odpov\u011bdi na DNS dotazy, propagace zm\u011bn aj.),<\/li><li>v\u00fdkonov\u00e9 testov\u00e1n\u00ed (schopnost obslou\u017eit vysok\u00e9 mno\u017estv\u00ed dotaz\u016f na vysok\u00fd po\u010det z\u00f3n a rychlost propagace zm\u011bn),<\/li><li>testy redundance (tj. zachov\u00e1n\u00ed provozu v p\u0159\u00edpad\u011b d\u00edl\u010d\u00ed odst\u00e1vky \u010di v\u00fdpadku).<\/li><\/ul>\n\n\n\n<p><em><strong>Co n\u00e1m to umo\u017en\u00ed?<\/strong><\/em><\/p>\n\n\n\n<p>Krom\u011b v\u00fdrazn\u011b vy\u0161\u0161\u00ed odolnosti proti DDoS \u00fatok\u016fm tak\u00e9 servisovatelnost za chodu, to znamen\u00e1 mo\u017enost odstavit d\u00edl\u010d\u00ed \u010d\u00e1sti infrastruktury (cel\u00e9 lokality) b\u011bhem \u00fadr\u017eby (upgrady apod.), ani\u017e by to m\u011blo dopad na dostupnost DNS slu\u017eby.<\/p>\n\n\n\n<p><em><strong>Jak to monitorujeme?<\/strong><\/em><\/p>\n\n\n\n<p>Krom\u011b z\u00e1kladn\u00edho monitoringu, kter\u00fd je zalo\u017een na syst\u00e9mu zabbix a extern\u00edm monitoringu Pingdom, vyu\u017e\u00edv\u00e1me infrastrukturu v r\u00e1mci projektu RIPE Atlas pro monitoring dostupnosti z mnoha sond po sv\u011bt\u011b, abychom m\u011bli co nejdetailn\u011bj\u0161\u00ed obraz fungov\u00e1n\u00ed cel\u00e9ho syst\u00e9mu.<\/p>\n\n\n\n<p><em><strong>Jakou technologii nov\u011b pou\u017e\u00edv\u00e1me?<\/strong><\/em><\/p>\n\n\n\n<p>Hlavn\u00ed zm\u011bnou je nasazen\u00ed technologie IP anycast. Za b\u011b\u017en\u00fdch podm\u00ednek se za jednou IP adresou skr\u00fdv\u00e1 jeden server v jedn\u00e9 lokalit\u011b. S technologi\u00ed IP anycast m\u016f\u017eete za jednu IP adresu schovat prakticky neomezen\u00e9 mno\u017estv\u00ed server\u016f v mnoha lokalit\u00e1ch po cel\u00e9m sv\u011bt\u011b, p\u0159i\u010dem\u017e klient dostane odpov\u011b\u010f v\u017edy z t\u00e9 lokality, kter\u00e9 je s\u00ed\u0165ov\u011b nejbl\u00ed\u017e. V p\u0159\u00edpad\u011b nedostupnosti libovoln\u00e9 lokality p\u0159eb\u00edraj\u00ed jej\u00ed roli automaticky lokality ostatn\u00ed, \u010d\u00edm\u017e je dosa\u017eeno vysok\u00e9 dostupnosti.<\/p>\n\n\n\n<p><em><strong>Jak\u00e9 benefity m\u00e1 toto \u0159e\u0161en\u00ed pro budoucnost s\u00edt\u011b, stabilitu a mo\u017enosti jej\u00edho roz\u0161\u00ed\u0159en\u00ed? <\/strong><\/em><\/p>\n\n\n\n<p>\u0158e\u0161en\u00ed umo\u017e\u0148uje ji\u017e zm\u00edn\u011bnou servisovatelnost za chodu, vysokou dostupnost a tak\u00e9 roz\u0161i\u0159ov\u00e1n\u00ed do prakticky neomezen\u00e9ho mno\u017estv\u00ed dal\u0161\u00edch lokalit. Z\u00e1rove\u0148 zajist\u00ed rychlej\u0161\u00ed odpov\u011bdi na DNS dotazy, proto\u017ee fyziku neo\u0161\u00e1l\u00edte \u2013 odpov\u011b\u010f na dotaz mezi Evropou a Amerikou trv\u00e1 v \u0159\u00e1du stovek ms a urychlit u\u017e nejde. Pokud na dotaz z Ameriky odpov\u00edd\u00e1te v Americe, dostanete se na desetkr\u00e1t rychlej\u0161\u00ed odpov\u011bdi.<\/p>\n\n\n\n<p><em><strong>Jedn\u00edm z benefit\u016f je tak\u00e9 DDoS ochrana. Co je vlastn\u011b DDoS?<\/strong><\/em><\/p>\n\n\n\n<p>Princip DDoS \u00fatoku je jednoduch\u00fd \u2013 sna\u017e\u00ed se syst\u00e9m zahltit takov\u00fdm mno\u017estv\u00edm po\u017eadavk\u016f z mnoha m\u00edst sou\u010dasn\u011b, \u017ee to c\u00edlov\u00fd syst\u00e9m p\u0159estane st\u00edhat a st\u00e1v\u00e1 se nedostupn\u00fdm. Dnes \u010del\u00edme DDoS \u00fatok\u016fm se silou 170 Gbps+ a jejich s\u00edla postupn\u011b roste. Technologie IP anycast s vhodn\u011b vybran\u00fdmi lokalitami pom\u016f\u017ee v boji s t\u011bmito \u00fatoky t\u00edm, \u017ee vysok\u00fd provoz rozlo\u017e\u00ed do v\u00edce lokalit, tedy se snadn\u011bji zvl\u00e1d\u00e1 filtrovat a obslou\u017eit bez zahlcen\u00ed a z\u00e1rove\u0148 zadr\u017euje velkou \u010d\u00e1st \u00fatoku co nejbl\u00ed\u017ee jeho zdroji. Tak\u017ee pokud \u00fatok poch\u00e1z\u00ed nap\u0159. prim\u00e1rn\u011b z Asie, jeho podstatn\u00e1 \u010d\u00e1st v Asii z\u016fstane a do na\u0161ich hlavn\u00edch datacenter v Evrop\u011b u\u017e doraz\u00ed jen men\u0161\u00ed \u010d\u00e1st, kterou zvl\u00e1dneme obslou\u017eit bez dopadu na dostupnost slu\u017eby.<\/p>\n\n\n\n<p><em><strong>Co v\u0161echno je t\u0159eba \u0159e\u0161it p\u0159i zji\u0161t\u011bn\u00ed, \u017ee jsme ter\u010dem DDoS \u00fatoku?<\/strong><\/em><\/p>\n\n\n\n<p>Pokud v\u0161e funguje tak, jak m\u00e1, dok\u00e1\u017ee infrastruktura \u00fatoku \u010delit bez nutnosti ru\u010dn\u00edho z\u00e1sahu \u2013 rozs\u00e1hl\u00fd \u00fatok je rozlo\u017een na n\u011bkolik men\u0161\u00edch, tyto \u010d\u00e1sti jsou v c\u00edlov\u00fdch lokalit\u00e1ch d\u00e1le filtrov\u00e1ny a zbytek je obslou\u017een d\u00edky v\u00fdrazn\u00e9mu naddimenzov\u00e1n\u00ed konektivity a HW. V p\u0159\u00edpad\u011b, \u017ee n\u011bkter\u00e1 d\u00edl\u010d\u00ed opat\u0159en\u00ed sel\u017eou, jsme schopni si provoz p\u0159el\u00e9vat dle pot\u0159eby tam, kde jej l\u00e9pe vyfiltrujeme\/obslou\u017e\u00edme, p\u0159\u00edpadn\u011b tam, kde nebude m\u00edt negativn\u00ed vliv na samotn\u00e9 slu\u017eby, a to zcela transparentn\u011b.<\/p>\n\n\n\n<p><em><strong>Jak to poc\u00edt\u00ed na\u0161i z\u00e1kazn\u00edci?<\/strong><\/em><\/p>\n\n\n\n<p>U\u017eivatel\u00e9 slu\u017eeb na dom\u00e9n\u00e1ch na\u0161ich z\u00e1kazn\u00edk\u016f budou automaticky t\u011b\u017eit z rychlej\u0161\u00ed odezvy syst\u00e9mu. Z\u00e1rove\u0148 se z\u00e1kazn\u00edci mohou spolehnout, \u017ee slu\u017eby na jejich dom\u00e9n\u011b budou dostupn\u00e9 i v p\u0159\u00edpad\u011b velmi siln\u00fdch DDoS \u00fatok\u016f.<\/p>\n\n\n\n<p><em><strong>DNS servery jsou jen v na\u0161\u00ed intern\u00ed infrastruktu\u0159e, nebo i u jin\u00fdch provider\u016f?&nbsp;<\/strong><\/em><\/p>\n\n\n\n<p>U\u017e se nejedn\u00e1 o jednotliv\u00e9 servery, ale o cel\u00e9 stacky, kter\u00e9 se skl\u00e1daj\u00ed z n\u011bkolika server\u016f v r\u016fzn\u00fdch rol\u00edch. Ka\u017edop\u00e1dn\u011b p\u00e1te\u0159 infrastruktury tvo\u0159\u00ed siln\u00e9 stacky v prim\u00e1rn\u00edch datacentrech na\u0161\u00ed hostingov\u00e9 skupiny (v CEE a Nordics), kde je \u0161pi\u010dkov\u00e1 konektivita a tak\u00e9 tzv. scrubbing (syst\u00e9my filtruj\u00edc\u00ed DDoS \u00fatoky). D\u00e1le je dopl\u0148uj\u00ed men\u0161\u00ed stacky hostovan\u00e9 mimo Evropu, jejich\u017e lokality vytipov\u00e1v\u00e1me z re\u00e1ln\u00e9ho provozu a re\u00e1ln\u00fdch \u00fatok\u016f \u2013 s ohledem na minimalizaci latence a co nejv\u011bt\u0161\u00ed p\u0159ibl\u00ed\u017een\u00ed se zdroj\u016fm \u00fatok\u016f, kter\u00e9 si pak tyto vzd\u00e1len\u00e9 stacky st\u00e1hnou na sebe.<\/p>\n\n\n\n<p><em><strong>Co si pod t\u00edm re\u00e1ln\u011b m\u016f\u017eeme p\u0159edstavit \u2013 jsou to fyzick\u00e9 servery, virtu\u00e1ln\u00ed servery, nebo distribuovan\u00e9 slu\u017eby?<\/strong><\/em><\/p>\n\n\n\n<p>Jednotliv\u00e9 stacky se svou velikost\u00ed li\u0161\u00ed. Ty v\u011bt\u0161\u00ed se skl\u00e1daj\u00ed z n\u011bkolika fyzick\u00fdch server\u016f v r\u016fzn\u00fdch rol\u00edch se silnou konektivitou, ty nejmen\u0161\u00ed vyu\u017e\u00edvaj\u00ed jeden fyzick\u00fd server s virtualizac\u00ed.<\/p>\n\n\n\n<p><em><strong>Zm\u011bnilo se n\u011bco pro na\u0161e datacentra?<\/strong><\/em><\/p>\n\n\n\n<p>Snad jen d\u016fraz na silnou konektivitu a kvalitn\u00ed scrubbing (filtrov\u00e1n\u00ed DDoS \u00fatok\u016f).<\/p>\n\n\n\n<p><em><strong>Co nov\u00e1 DNS infrastruktura a konkurence v regionu? Vyu\u017e\u00edv\u00e1 n\u011bkdo podobn\u00e9 \u0159e\u0161en\u00ed?<\/strong><\/em><\/p>\n\n\n\n<p>Nejsme prvn\u00ed, kte\u0159\u00ed v CEE regionu vyu\u017e\u00edvaj\u00ed IP anycast, ale trouf\u00e1m si tvrdit, \u017ee jsme jedin\u00ed, kte\u0159\u00ed buduj\u00ed takto rozs\u00e1hlou a robustn\u00ed infrastrukturu schopnou serv\u00edrovat a\u017e 5 milion\u016f DNS z\u00f3n (tj. 5 milion\u016f z\u00e1kaznick\u00fdch dom\u00e9n).<\/p>\n\n\n\n<p><em><strong>Odkdy je nov\u00e1 DNS infrastruktura v provozu a pro koho je dostupn\u00e1?<\/strong><\/em><\/p>\n\n\n\n<p>DNS infrastrukturu uv\u00e1d\u00edme do produkce postupn\u011b. Nejd\u0159\u00edve se dotkne terci\u00e1ln\u00edho DNS serveru NS3 (ns3.websupport.cz\/sk\/hu, resp. ns3.webonic.hu), a to v polovin\u011b \u0159\u00edjna 2021. V pr\u016fb\u011bhu podzimu je v pl\u00e1nu vybudovat dal\u0161\u00ed dva stacky a p\u0159epnout na novou infrastrukturu tak\u00e9 NS2. Jako posledn\u00ed p\u0159ijde na \u0159adu NS1 \u2013 pot\u00e9, co bude p\u0159id\u00e1n dal\u0161\u00ed siln\u00fd stack. Aktu\u00e1ln\u011b pl\u00e1nujeme i dal\u0161\u00ed roz\u0161i\u0159ov\u00e1n\u00ed infrastruktury v roce 2022 \u2013 ov\u011b\u0159ujeme dostupnost ji\u017e postaven\u00e9 infrastruktury z cel\u00e9ho sv\u011bta a podle toho vytipov\u00e1v\u00e1me lokality pro dal\u0161\u00ed stacky.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Webhosting nen\u00ed jen o hostinz\u00edch a dom\u00e9n\u00e1ch. Aby v\u0161echny tyto slu\u017eby mohly b\u011b\u017eet je\u0161t\u011b l\u00e9pe a stabiln\u011bji, p\u0159ipravujeme novou infrastrukturu pro DNS slu\u017eby. \u0158\u00edk\u00e1te si, \u017ee jako z\u00e1kazn\u00edka se v\u00e1s to net\u00fdk\u00e1? Poj\u010fme si proj\u00edt, co v\u0161echnou touto inovac\u00ed z\u00edsk\u00e1te. Pov\u00eddali jsme si s jedn\u00edm z kl\u00ed\u010dov\u00fdch lid\u00ed, kte\u0159\u00ed za touto zm\u011bnou stoj\u00ed \u2013 s [&hellip;]<\/p>\n","protected":false},"author":52,"featured_media":4052,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,413],"tags":[551,545,548,572,569,13,566,554,557],"class_list":["post-4049","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nase-zpravy","category-profesional","tag-ddos","tag-dns","tag-infrastruktura","tag-ip-anycast","tag-monitoring","tag-servery","tag-stacky","tag-testovani","tag-utoky"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog\" \/>\n<meta property=\"og:description\" content=\"Webhosting nen\u00ed jen o hostinz\u00edch a dom\u00e9n\u00e1ch. Aby v\u0161echny tyto slu\u017eby mohly b\u011b\u017eet je\u0161t\u011b l\u00e9pe a stabiln\u011bji, p\u0159ipravujeme novou infrastrukturu pro DNS slu\u017eby. \u0158\u00edk\u00e1te si, \u017ee jako z\u00e1kazn\u00edka se v\u00e1s to net\u00fdk\u00e1? Poj\u010fme si proj\u00edt, co v\u0161echnou touto inovac\u00ed z\u00edsk\u00e1te. Pov\u00eddali jsme si s jedn\u00edm z kl\u00ed\u010dov\u00fdch lid\u00ed, kte\u0159\u00ed za touto zm\u011bnou stoj\u00ed \u2013 s [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport.cz Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-28T05:31:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-11T20:18:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novou-DNS-infrastrukturu_1920x1080_TEXT_CZ.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Websupport Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napsal(a)\" \/>\n\t<meta name=\"twitter:data1\" content=\"Websupport Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/\"},\"author\":{\"name\":\"Websupport Team\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#\\\/schema\\\/person\\\/a43e75edc087480c464d462cd19c71ed\"},\"headline\":\"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm\",\"datePublished\":\"2021-09-28T05:31:21+00:00\",\"dateModified\":\"2025-03-11T20:18:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/\"},\"wordCount\":1797,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/09\\\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png\",\"keywords\":[\"DDoS\",\"DNS\",\"infrastruktura\",\"IP anycast\",\"monitoring\",\"servery\",\"stacky\",\"testovani\",\"utoky\"],\"articleSection\":[\"Na\u0161e zpr\u00e1vy\",\"Pro profesion\u00e1ly\"],\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/\",\"name\":\"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/09\\\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png\",\"datePublished\":\"2021-09-28T05:31:21+00:00\",\"dateModified\":\"2025-03-11T20:18:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/09\\\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png\",\"contentUrl\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/09\\\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png\",\"width\":1920,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/2021\\\/09\\\/nasazujeme-novy-stit-proti-ddos-utokum\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/\",\"name\":\"Websupport.cz Blog\",\"description\":\"Webujte s lehkost\u00ed\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#organization\",\"name\":\"Websupport.cz Blog\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/06\\\/websupport-logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/app\\\/uploads\\\/2021\\\/06\\\/websupport-logo.svg\",\"width\":153,\"height\":48,\"caption\":\"Websupport.cz Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/#\\\/schema\\\/person\\\/a43e75edc087480c464d462cd19c71ed\",\"name\":\"Websupport Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g\",\"caption\":\"Websupport Team\"},\"url\":\"https:\\\/\\\/www.websupport.cz\\\/blog\\\/author\\\/websupport-team\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/","og_locale":"cs_CZ","og_type":"article","og_title":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog","og_description":"Webhosting nen\u00ed jen o hostinz\u00edch a dom\u00e9n\u00e1ch. Aby v\u0161echny tyto slu\u017eby mohly b\u011b\u017eet je\u0161t\u011b l\u00e9pe a stabiln\u011bji, p\u0159ipravujeme novou infrastrukturu pro DNS slu\u017eby. \u0158\u00edk\u00e1te si, \u017ee jako z\u00e1kazn\u00edka se v\u00e1s to net\u00fdk\u00e1? Poj\u010fme si proj\u00edt, co v\u0161echnou touto inovac\u00ed z\u00edsk\u00e1te. Pov\u00eddali jsme si s jedn\u00edm z kl\u00ed\u010dov\u00fdch lid\u00ed, kte\u0159\u00ed za touto zm\u011bnou stoj\u00ed \u2013 s [&hellip;]","og_url":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/","og_site_name":"Websupport.cz Blog","article_published_time":"2021-09-28T05:31:21+00:00","article_modified_time":"2025-03-11T20:18:26+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novou-DNS-infrastrukturu_1920x1080_TEXT_CZ.png","type":"image\/png"}],"author":"Websupport Team","twitter_card":"summary_large_image","twitter_misc":{"Napsal(a)":"Websupport Team","Odhadovan\u00e1 doba \u010dten\u00ed":"6 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#article","isPartOf":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/"},"author":{"name":"Websupport Team","@id":"https:\/\/www.websupport.cz\/blog\/#\/schema\/person\/a43e75edc087480c464d462cd19c71ed"},"headline":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm","datePublished":"2021-09-28T05:31:21+00:00","dateModified":"2025-03-11T20:18:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/"},"wordCount":1797,"commentCount":0,"publisher":{"@id":"https:\/\/www.websupport.cz\/blog\/#organization"},"image":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png","keywords":["DDoS","DNS","infrastruktura","IP anycast","monitoring","servery","stacky","testovani","utoky"],"articleSection":["Na\u0161e zpr\u00e1vy","Pro profesion\u00e1ly"],"inLanguage":"cs","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/","url":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/","name":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm - Websupport.cz Blog","isPartOf":{"@id":"https:\/\/www.websupport.cz\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png","datePublished":"2021-09-28T05:31:21+00:00","dateModified":"2025-03-11T20:18:26+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/"]}]},{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#primaryimage","url":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png","contentUrl":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/09\/Predstavujeme-novu-DNS-infrastrukturu_1920x1080.png","width":1920,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.cz\/blog\/2021\/09\/nasazujeme-novy-stit-proti-ddos-utokum\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.cz\/blog\/"},{"@type":"ListItem","position":2,"name":"Nasazujeme nov\u00fd \u0161t\u00edt proti DDoS \u00fatok\u016fm"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.cz\/blog\/#website","url":"https:\/\/www.websupport.cz\/blog\/","name":"Websupport.cz Blog","description":"Webujte s lehkost\u00ed","publisher":{"@id":"https:\/\/www.websupport.cz\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.cz\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"},{"@type":"Organization","@id":"https:\/\/www.websupport.cz\/blog\/#organization","name":"Websupport.cz Blog","url":"https:\/\/www.websupport.cz\/blog\/","logo":{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/www.websupport.cz\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/06\/websupport-logo.svg","contentUrl":"https:\/\/www.websupport.cz\/blog\/app\/uploads\/2021\/06\/websupport-logo.svg","width":153,"height":48,"caption":"Websupport.cz Blog"},"image":{"@id":"https:\/\/www.websupport.cz\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.websupport.cz\/blog\/#\/schema\/person\/a43e75edc087480c464d462cd19c71ed","name":"Websupport Team","image":{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/secure.gravatar.com\/avatar\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c21b5b2e7e8bc8ec91ca24b033813e79b87399c7458127a45daa9ea14c6450ca?s=96&d=mm&r=g","caption":"Websupport Team"},"url":"https:\/\/www.websupport.cz\/blog\/author\/websupport-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/posts\/4049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/users\/52"}],"replies":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/comments?post=4049"}],"version-history":[{"count":4,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/posts\/4049\/revisions"}],"predecessor-version":[{"id":4073,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/posts\/4049\/revisions\/4073"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/media\/4052"}],"wp:attachment":[{"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/media?parent=4049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/categories?post=4049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.websupport.cz\/blog\/wp-json\/wp\/v2\/tags?post=4049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}