{"id":4937,"date":"2025-05-04T17:20:05","date_gmt":"2025-05-04T13:20:05","guid":{"rendered":"https:\/\/jsnet.biz\/?p=4937"},"modified":"2025-11-17T13:55:26","modified_gmt":"2025-11-17T09:55:26","slug":"ddos-huququm-n%c9%99dir","status":"publish","type":"post","link":"https:\/\/jsnet.biz\/az\/ddos-huququm-n%c9%99dir\/","title":{"rendered":"DDOS H\u00fccum n\u0259dir?"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A distributed denial-of-service (DDoS) h\u0259d\u0259fi v\u0259 ya onun trafik infrastrukturu il\u0259 \u0130nternet trafikinin da\u015fq\u0131nlar\u0131 il\u0259, s\u0131x ba\u011flanm\u0131\u015f server, xidm\u0259t v\u0259 ya \u015f\u0259b\u0259k\u0259nin poz\u011funlu\u011funa z\u0259r\u0259rli t\u0259sirdir.<\/span><\/span> DDoS h\u00fccumlar\u0131, h\u00fccumun h\u00fccumlar\u0131 kimi bir \u00e7ox t\u0259hl\u00fck\u0259y\u0259 m\u0259ruz qalm\u0131\u015f komp\u00fcter sisteml\u0259rind\u0259n istifad\u0259 effektiv effektivliy\u0259 nail olur.<\/span><\/span> \u0130stismar ma\u015f\u0131nlara komp\u00fcterl\u0259r v\u0259 IoT cihazlar\u0131 kimi ba\u015fqa \u015f\u0259b\u0259k\u0259 resurslar\u0131 daxil ola bil\u0259r.<\/span><\/span> Y\u00fcks\u0259k s\u0259viyy\u0259li DDoS h\u00fccumu g\u00f6zl\u0259nilm\u0259z t\u0131xac kimi magistral yolu ba\u011flayaraq, y\u00fcks\u0259k trafikin t\u0259yinat\u0131na \u00e7atmas\u0131na mane olur.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DDOS\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

DDoS h\u00fccumu nec\u0259 i\u015fl\u0259yir?<\/span><\/span><\/span><\/strong><\/p>

DDoS h\u00fccumlar\u0131 internet\u0259 qo\u015fulmu\u015f ma\u015f\u0131nlar\u0131n \u015f\u0259b\u0259k\u0259l\u0259ri il\u0259 \u0259ld\u0259 edilir.<\/span><\/span> Bu \u015f\u0259b\u0259k\u0259l\u0259rd\u0259n istifad\u0259 ed\u0259n proqramla yoluxmu\u015f komp\u00fcterl\u0259rd\u0259n v\u0259 dig\u0259r cihazlardan (m\u0259s\u0259l\u0259n, IoT cihazlar) istifad\u0259 etm\u0259k v\u0259 h\u00fccum\u00e7u onlar\u0131 uzaqdan idar\u0259 etm\u0259y\u0259 imkan verir.<\/span><\/span> Bu f\u0259rdi cihazlara botlar (v\u0259 ya zombil\u0259r) deyilir v\u0259 bir qrup botlara botnet deyilir.<\/span><\/span> Botnet n\u0259zar\u0259tind\u0259n sonra t\u0259qibkar h\u0259r bota uzaqdan t\u0259hqiqat\u00e7\u0131lar g\u00f6nd\u0259r\u0259r\u0259k h\u00fccumu istiqam\u0259tl\u0259ndirir.<\/span><\/span> Qurban\u0131n serveri v\u0259 ya \u015f\u0259b\u0259k\u0259si botnet t\u0259r\u0259find\u0259n h\u0259d\u0259f al\u0131nd\u0131, h\u0259r bir bot h\u0259d\u0259fin IP \u00fcnvan\u0131na sor\u011fu g\u00f6nd\u0259rilir, potensial olaraq server v\u0259 ya \u015f\u0259b\u0259k\u0259nin h\u0259dd\u0259n art\u0131q y\u00fckl\u0259nm\u0259sin\u0259 s\u0259b\u0259b olur v\u0259 n\u0259tic\u0259d\u0259 normal trafik\u0259 xidm\u0259td\u0259n imtina edilir.<\/span><\/span> H\u0259r bir bot qanuni \u0130nternet cihaz\u0131ndan, h\u00fccumunu normal trafikd\u0259n ay\u0131rmaq \u00e7\u0259tin ola bil\u0259r.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

DDoS h\u00fccumlar\u0131n\u0131n \u00fcmumi \u015f\u0259kild\u0259 hans\u0131lard\u0131r?<\/span><\/span><\/span><\/strong><\/p>

DDoS h\u00fccumlar\u0131n\u0131n s\u00fcr\u0259tli \u015f\u0259b\u0259k\u0259 ba\u011flant\u0131s\u0131n\u0131n bir q\u0259d\u0259r komponentini h\u0259d\u0259f al\u0131r.<\/span><\/span> M\u00fcxt\u0259lif DDoS h\u00fccumlar\u0131n\u0131n nec\u0259 i\u015fl\u0259diyini ba\u015fa d\u00fc\u015fm\u0259k \u00fc\u00e7\u00fcn \u015f\u0259b\u0259k\u0259 ba\u011flant\u0131s\u0131n\u0131n nec\u0259 qurulmas\u0131 laz\u0131md\u0131r.<\/span><\/span> \u0130nternetd\u0259 \u015f\u0259b\u0259k\u0259 ba\u011flant\u0131s\u0131 \u00e7oxlu komponentl\u0259rd\u0259n v\u0259 ya \u201cqatlardan\u201d as\u0131l\u0131d\u0131r.<\/span><\/span> S\u0131f\u0131rdan bir ev tikm\u0259k kimi, modeld\u0259ki h\u0259r hiss\u0259nin f\u0259rqli c\u0259h\u0259tl\u0259ri var.<\/span><\/span> A\u015fa\u011f\u0131da yuxar\u0131 OSI modeli 7 f\u0259rqli yerd\u0259 \u015f\u0259b\u0259k\u0259 ba\u011flant\u0131s\u0131n\u0131 t\u0259svir etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n konseptual \u00e7\u0259r\u00e7iv\u0259dir.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DDOS\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Dem\u0259k olar ki, b\u00fct\u00fcn DDoS h\u00fccumlar\u0131 h\u0259d\u0259f cihaz v\u0259 ya \u015f\u0259b\u0259k\u0259ni trafikl\u0259 s\u0131x\u0131\u015fd\u0131rsa da, h\u00fccumlar\u0131 \u00fc\u00e7 b\u00f6lm\u0259y\u0259 b\u00f6lm\u0259k olar.<\/span><\/span> T\u0259cav\u00fczkar bir v\u0259 ya daha \u00e7ox g\u00fccl\u00fc h\u00fccum vektorlar\u0131ndan istifad\u0259 edil\u0259 bil\u0259r v\u0259 ya m\u0259qs\u0259dl\u0259 g\u00f6r\u00fcl\u0259n \u0259ks t\u0259dbirl\u0259r\u0259 cavab olaraq d\u00f6vr\u0259li h\u00fccum vektorlar\u0131ndan istifad\u0259 edil\u0259 bil\u0259r.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
T\u0259tbiq qat\u0131na h\u00fccumlar<\/strong><\/div>
\u00a0<\/div>
H\u00fccumun m\u0259qs\u0259di: B\u0259zi hallarda 7-ci qat DDoS h\u00fccumu olaraq adland\u0131r\u0131lan (OSI modelinin 7-ci qat\u0131na) bu h\u00fccumlar\u0131n m\u00fcdafi\u0259si \u00fc\u00e7\u00fcn istifad\u0259 edil\u0259n h\u0259d\u0259f vasit\u0259l\u0259rini t\u00fck\u0259tm\u0259kdir. H\u00fccumlar serverd\u0259 veb s\u0259hif\u0259l\u0259rin yarad\u0131ld\u0131\u011f\u0131 v\u0259 HTTP sor\u011fular\u0131na cavab olaraq \u00e7atd\u0131r\u0131ld\u0131\u011f\u0131 t\u0259hl\u00fck\u0259ni h\u0259d\u0259fl\u0259yir. T\u0259k HTTP sor\u011fusunun t\u0259r\u0259find\u0259 yerin\u0259 yetirilm\u0259si hesablama apar\u0131lmas\u0131n\u0131 ucuzdur, lakin h\u0259d\u0259f serverin cavab verm\u0259si baha g\u0259l\u0259 bil\u0259r, Wi-Fi server tez-tez bird\u0259n \u00e7ox y\u00fckl\u0259yir v\u0259 veb s\u0259hif\u0259 proqramlar\u0131 \u00fc\u00e7\u00fcn veril\u0259nl\u0259r bazas\u0131 sor\u011fular\u0131n\u0131 yerin\u0259 yetirir. Layer 7 h\u00fccumlar\u0131ndan m\u00fcdafi\u0259 etm\u0259k \u00e7\u0259tin, t\u0259hl\u00fck\u0259li trafiki qanuni trafikd\u0259n istifad\u0259 etm\u0259k \u00e7\u0259tin ola bil\u0259r.<\/span><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

T\u0259tbiq qat\u0131na h\u00fccum N\u00fcmun\u0259:<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DDOS\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

HTTP da\u015fq\u0131n\u0131<\/strong><\/p>

Bu h\u00fccum veb-brauzerd\u0259 bird\u0259n \u00e7ox m\u00fcxt\u0259lif komp\u00fcterl\u0259rd\u0259 t\u0259krar-t\u0259krar yenil\u0259m\u0259y\u0259 basma\u011fa b\u0259nz\u0259yir \u2013 \u00e7oxlu sayda HTTP sor\u011fular\u0131 serveri doldurur v\u0259 n\u0259tic\u0259d\u0259 xidm\u0259td\u0259n imtina edilir.<\/span><\/span> Bu h\u00fccum n\u00f6v\u00fc sad\u0259d\u0259n m\u00fcr\u0259kk\u0259b\u0259 q\u0259d\u0259r d\u0259yi\u015fir.<\/span><\/span> Daha sad\u0259 t\u0259tbiql\u0259r, eyni h\u00fccum IP idar\u0259l\u0259ri, istinad ed\u0259nl\u0259r v\u0259 istifad\u0259\u00e7i agentl\u0259ri il\u0259 bir URL-\u0259 daxil ola bil\u0259rsiniz.<\/span><\/span> M\u00fcr\u0259kk\u0259b \u00e7ox sayda h\u00fccum ed\u0259n IP idar\u0259l\u0259rind\u0259n istifad\u0259 edil\u0259 bil\u0259n v\u0259 effektiv versiya y\u00f6nl\u0259ndiricil\u0259rd\u0259n v\u0259 agentl\u0259rd\u0259n istifad\u0259 imkanlar\u0131 URL-l\u0259ri h\u0259d\u0259f ala bil\u0259r.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Protokol h\u00fccumlar\u0131<\/strong><\/p>

H\u00fccumun m\u0259qs\u0259di:<\/span><\/span> <\/span><\/p>

V\u0259ziyy\u0259ti \u0259ndirm\u0259 h\u00fccumlar\u0131 kimi d\u0259 adland\u0131r\u0131lm\u0131\u015f protokol h\u00fccumlar\u0131 server resurslar\u0131n\u0131 v\u0259\/yaxud \u015f\u0259b\u0259k\u0259 y\u00fck avadanl\u0131\u011f\u0131n\u0131n qaynaqlar\u0131n\u0131 v\u0259 ya firewall v\u0259 y\u00fck balansla\u015fd\u0131r\u0131c\u0131lar\u0131n\u0131 h\u0259dd\u0259n art\u0131q istehlak z\u0259r\u0259rli xidm\u0259tin z\u0259r\u0259rin\u0259 s\u0259b\u0259b olur.<\/span><\/span> Protokol h\u00fccumlar\u0131 h\u0259d\u0259fi \u0259l\u00e7atmaz etm\u0259k \u00fc\u00e7\u00fcn protokol y\u0131\u011f\u0131n\u0131n\u0131n 3-c\u00fc v\u0259 4-c\u00fc qat\u0131ndan z\u0259if t\u0259sirl\u0259rd\u0259n istifad\u0259 edilir.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Protokol h\u00fccumu n\u00f6mr\u0259sin\u0259:<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DDOS\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

SYN da\u015fq\u0131n\u0131<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

SYN Flood, ma\u011fazan\u0131n qar\u015f\u0131s\u0131ndan t\u0259l\u0259bl\u0259ri q\u0259bul ed\u0259n t\u0259chizat ota\u011f\u0131ndak\u0131 bir i\u015f\u00e7inin analoqudur.<\/span><\/span> \u0130\u015f\u00e7i sor\u011fu q\u0259bul edir, gedib paketi al\u0131r v\u0259 ba\u011flaman\u0131 qaba\u011f\u0131ndan \u00e7\u0131xarmazdan \u0259vv\u0259l g\u00f6zl\u0259m\u0259k olar.<\/span><\/span> \u0130\u015f\u00e7i daha sonra daha \u00e7ox paketi da\u015f\u0131ya bilm\u0259y\u0259n\u0259 q\u0259d\u0259r \u00f6d\u0259m\u0259d\u0259n daha \u00e7ox paket sor\u011fular\u0131 al\u0131r, s\u0131x\u0131l\u0131r v\u0259 sor\u011fular cavabs\u0131z qalma\u011fa ba\u015flay\u0131r.<\/span><\/span> Bu h\u00fccum h\u0259d\u0259f\u0259 saxta m\u0259nb\u0259 IP \u00fcnvanlar\u0131 il\u0259 \u00e7oxlu sayda TCP \u201c\u0130lkin Ba\u011flant\u0131 Sor\u011fusu\u201d SYN paketl\u0259ri g\u00f6nd\u0259rm\u0259kl\u0259 TCP \u0259l s\u0131xmas\u0131ndan \u2013 komp\u00fcter \u015f\u0259b\u0259k\u0259 \u0259laq\u0259sini ba\u015flatd\u0131\u011f\u0131 rabit\u0259 \u015f\u0259b\u0259k\u0259sind\u0259n istifad\u0259 edir.<\/span><\/span> H\u0259d\u0259f ma\u015f\u0131n h\u0259r bir sor\u011fu sor\u011fusuna cavab verir v\u0259 sonra \u0259l s\u0131xmada he\u00e7 vaxt ba\u015flan son add\u0131m\u0131 g\u00f6zl\u0259yir v\u0259 bu prosesd\u0259 h\u0259d\u0259f resurslar\u0131n\u0131 t\u00fck\u0259ndirir.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

H\u0259cmli h\u00fccumlar<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

H\u00fccumun \u0259sas\u0131:<\/span><\/span> H\u00fccumlar\u0131n bu n\u0259zar\u0259ti h\u0259d\u0259fl\u0259ri v\u0259 daha \u00e7ox internet aras\u0131nda b\u00fct\u00fcn m\u00f6vcud bant geni\u015fliyini istifad\u0259 s\u0131xl\u0131q yarad\u0131r.<\/span><\/span> B\u00f6y\u00fck h\u0259cmd\u0259 m\u0259lumat g\u00fccl\u0259ndirm\u0259 formas\u0131 v\u0259 ya botnetd\u0259n sor\u011fular kimi ictimai trafik yaratmaq \u00fc\u00e7\u00fcn ba\u015fqa vasit\u0259l\u0259rd\u0259n istifad\u0259 t\u0259hl\u00fck\u0259sizlik h\u0259d\u0259f\u0259 g\u00f6nd\u0259rilir.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

G\u00fccl\u0259ndirm\u0259 \u0259lam\u0259ti:<\/span><\/span><\/span><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DDOS\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
DNS g\u00fccl\u0259ndirilm\u0259si<\/span><\/span><\/strong> <\/span><\/div>
\u00a0<\/div>
DNS g\u00fccl\u0259ndirilm\u0259si, kims\u0259 bir restorana z\u0259ng edir \u201cM\u0259nd\u0259 h\u0259r bir \u015feyd\u0259n \u015f\u0259xs sahibi olaca\u011fam, l\u00fctf\u0259n m\u0259n\u0259 z\u0259ng edin v\u0259 b\u00fct\u00fcn sifari\u015fimi t\u0259krarlay\u0131n\u201d dedikd\u0259, burada geri z\u0259ng n\u00f6mr\u0259sin\u0259 z\u0259ng vura bil\u0259rsiniz.<\/span><\/span> \u00c7ox az s\u0259yl\u0259 uzun bir cavab yarad\u0131l\u0131r v\u0259 qurbana g\u00f6nd\u0259rilir.<\/span><\/span> Saxta IP \u00fcnvan\u0131 (qurban\u0131n IP \u00fcnvan\u0131) il\u0259 a\u00e7\u0131q DNS serverin\u0259 sor\u011fu g\u00f6nd\u0259rm\u0259kl\u0259 IP \u00fcnvan\u0131 serverd\u0259n cavab al\u0131r.<\/span><\/span><\/span><\/div>
\u00a0<\/div>
DDoS h\u00fccumunun azald\u0131lmas\u0131 prosesi nec\u0259dir?<\/span><\/span><\/strong> <\/span><\/div>
\u00a0<\/div>
DDoS h\u00fccumunun azald\u0131lmas\u0131nda \u0259sas t\u0259hl\u00fck\u0259 h\u00fccum trafiki il\u0259 normal trafik aras\u0131nda f\u0259rq qoymaqd\u0131r.<\/span><\/span> M\u0259s\u0259l\u0259n, m\u0259hsul burax\u0131l\u0131\u015f\u0131nda bir veb sayt\u0131 i\u015f\u00e7i il\u0259 doludursa, b\u00fct\u00fcn trafiki k\u0259sm\u0259k s\u0259hvdir.<\/span><\/span> \u018fg\u0259r o \u015firk\u0259td\u0259 q\u0259fild\u0259n m\u0259lum h\u00fccum\u00e7ulardan g\u0259l\u0259n trafik art\u0131m\u0131 olarsa, ehtimal ki, h\u00fccumu azaltmaq \u00fc\u00e7\u00fcn s\u0259yl\u0259r laz\u0131md\u0131r.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
\u00c7\u0259tinlik real silah\u0131 h\u00fccum trafikind\u0259n ay\u0131r\u0131r.<\/span><\/span><\/span><\/strong><\/div>
\u00a0<\/div>
M\u00fcasir \u0130nternetd\u0259 DDoS trafiki m\u00fcxt\u0259lif formalarda olur.<\/span><\/span> Trafik dizaynda saxta olmayan t\u0259k m\u0259nb\u0259 h\u00fccumlar\u0131ndan v\u0259 adaptiv \u00e7oxvektorlu h\u00fccumlara q\u0259d\u0259r b\u00f6y\u00fcy\u0259 bil\u0259r.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
\u00c7oxvektorlu DDoS h\u00fccumu, h\u0259d\u0259fi m\u00fcxt\u0259lif yollarla alt-\u00fcst etm\u0259k \u00fc\u00e7\u00fcn \u00e7oxlu h\u00fccum yollar\u0131ndan istifad\u0259 edir, potensial olaraq h\u0259r hans\u0131 bir trayektoriyada t\u0259sir azaltma s\u0259yl\u0259rini yay\u0131nd\u0131r\u0131r.<\/span><\/span><\/span><\/div>
\u00a0<\/div>
HTTP da\u015fq\u0131n\u0131 (h\u0259d\u0259fl\u0259m\u0259 qat\u0131 7) il\u0259 birl\u0259\u015fdirilmi\u015f DNS g\u00fccl\u0259ndirilm\u0259si (h\u0259d\u0259f laylar\u0131 3\/4) kimi eyni vaxtda protokol y\u0131\u011f\u0131n\u0131n\u0131n bir ne\u00e7\u0259 qat\u0131n\u0131 h\u0259d\u0259f alan h\u00fccum \u00e7oxvektorlu DDoS n\u00fcmun\u0259sidir.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
\u00c7oxvektorlu DDoS h\u00fccumunun azald\u0131lmas\u0131 il\u0259 ba\u011fl\u0131 trayektoriyalara qar\u015f\u0131 y\u00f6n\u0259ldilmi\u015f strategiyalar t\u0259l\u0259b olunur.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
\u00dcm<\/span><\/span><\/span>umiyy\u0259tl\u0259, h\u00fccum n\u0259 q\u0259d\u0259r m\u00fcr\u0259kk\u0259b olarsa, h\u00fccum trafikini normal trafikd\u0259n ay\u0131rmaq bir o q\u0259d\u0259r \u00e7\u0259tin olacaq \u2013 m\u00fc\u015fahid\u0259kar\u0131n m\u00fcmk\u00fcn q\u0259d\u0259r \u00e7ox qar\u0131\u015fmaq, t\u0259sir azaltma s\u0259yl\u0259rini m\u00fcmk\u00fcn q\u0259d\u0259r s\u0259m\u0259r\u0259siz etm\u0259kdir.<\/span><\/span><\/span><\/div>
\u00a0<\/div>
Trafiki f\u0259rq qoymadan azaltmaq v\u0259 ya m\u0259hdudla\u015fd\u0131rmaqdan ibar\u0259t olan yax\u015f\u0131 t\u0259sirin azald\u0131lmas\u0131 il\u0259 trafiki pisl\u0259 birlikd\u0259 s\u0131radan \u00e7\u0131xara v\u0259 h\u00fccuma h\u0259m d\u0259 \u0259ks t\u0259sird\u0259n yan h\u0259r\u0259k\u0259t etm\u0259k \u00fc\u00e7\u00fcn \u0259lav\u0259 v\u0259 uy\u011funla\u015fa bil\u0259r.<\/span><\/span> Kompleks pozulma il\u0259 onu aradan qald\u0131rmaq \u00fc\u00e7\u00fcn bir h\u0259ll \u0259n b\u00f6y\u00fck fayda m\u00fcmk\u00fcnd\u00fcr.<\/span><\/span><\/span><\/div>
\u00a0<\/div>
Qara d\u0259lik mar\u015frutu<\/span><\/span><\/span><\/strong><\/div>
\u00a0<\/div>
Faktiki olaraq b\u00fct\u00fcn \u015f\u0259b\u0259k\u0259 adminl\u0259ri \u00fc\u00e7\u00fcn m\u00f6vcud olan h\u0259ll yollar\u0131ndan biri qara d\u0259lik mar\u015frutu yaratmaq v\u0259 bu mar\u015fruta trafik \u00e7\u0259km\u0259kdir.<\/span><\/span> \u018fn sad\u0259 formada qara d\u0259likl\u0259rin filtrasiyas\u0131, x\u00fcsusi meyarlar\u0131 aradan qald\u0131r\u0131l\u0131r, h\u0259m qanuni, h\u0259m d\u0259 t\u0259hl\u00fck\u0259li \u015f\u0259b\u0259k\u0259 trafiki s\u0131f\u0131r mar\u015fruta v\u0259 ya qara d\u0259liy\u0259 y\u00f6nl\u0259ndirilir v\u0259 \u015f\u0259b\u0259k\u0259d\u0259n at\u0131l\u0131r.<\/span><\/span> \u0130nternet m\u00fclk\u00fc DDoS h\u00fccumu il\u0259 idar\u0259 olunur, \u0259mlak\u0131n \u0130nternet xidm\u0259t t\u0259minat\u00e7\u0131s\u0131 (ISP) m\u00fcdafi\u0259 sayt\u0131n\u0131n b\u00fct\u00fcn trafikini qara d\u0259liy\u0259 g\u00f6nd\u0259rin.<\/span><\/span> Bu, ideal h\u0259ll yolu deyil, d\u0259qiq o, t\u0259sirkar\u0131n k\u00f6m\u0259yi il\u0259 effektiv \u015f\u0259kild\u0259 verir: \u015f\u0259b\u0259k\u0259ni \u0259l\u00e7atmaz edir.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
M\u0259hdudiyy\u0259t d\u0259r\u0259c\u0259si<\/span><\/span><\/strong> <\/span><\/div>
\u00a0<\/div>
M\u00fc\u0259yy\u0259n zaman p\u0259nc\u0259r\u0259sind\u0259 serverin q\u0259bul xidm\u0259ti sor\u011fular\u0131n m\u0259hdudla\u015fd\u0131r\u0131lmas\u0131ndan imtina h\u00fccumlar\u0131n\u0131 azaltmaq \u00fc\u00e7\u00fcn bir \u00fcsuldur.<\/span><\/span> S\u00fcr\u0259tin m\u0259hdudla\u015fd\u0131r\u0131lmas\u0131 veb kaz\u0131y\u0131c\u0131lar\u0131n oyununu o\u011furlamas\u0131n\u0131 yava\u015flatmaqda v\u0259 kobud g\u00fcc\u0259 h\u00fccumlar\u0131n\u0131 azaltmaqda faydal\u0131 olsa da, m\u00fcr\u0259kk\u0259b DDoS h\u00fccumunu effektiv idar\u0259 etm\u0259k \u00fc\u00e7\u00fcn yaln\u0131z bu t\u0259sir etm\u0259y\u0259c\u0259k.<\/span><\/span> Buna baxmayaraq, n\u0259zar\u0259tin m\u0259hdudla\u015fd\u0131r\u0131lmas\u0131 effektiv DDoS azaltma strategiyas\u0131n\u0131n faydal\u0131 komponentidir.<\/span><\/span> Cloudflare-in s\u00fcr\u0259ti haqq\u0131nda m\u0259lumat \u0259ld\u0259 edin<\/span><\/span><\/span><\/div>
\u00a0<\/div>
Veb proqram firewall<\/span><\/span><\/strong> <\/span><\/div>
\u00a0<\/div>
Veb T\u0259tbiq Firewall (WAF) 7 qat DDoS h\u00fccumunu azaltma\u011fa k\u00f6m\u0259k ed\u0259 bil\u0259r.<\/span><\/span> \u0130nternet v\u0259 m\u0259nb\u0259 serveri aras\u0131nda WAF yerl\u0259\u015fdirilm\u0259si il\u0259, WAF \u0259ks proxy rolunu oynaya bil\u0259r v\u0259 ya h\u0259d\u0259f serveri d\u0259yi\u015fdiril\u0259 bil\u0259r.<\/span><\/span> DDoS al\u0259tl\u0259rini s\u0131ralamaq istifad\u0259 edil\u0259 bil\u0259r.<\/span><\/span> Effektiv WAF-\u0131n \u0259sas d\u0259y\u0259rl\u0259rind\u0259n biri h\u00fccuma cavab olaraq x\u00fcsusi qaydalar tez t\u0259tbiq etm\u0259kdir.<\/span><\/span> Cloudflare-in WAF haqq\u0131nda m\u0259lumat \u0259ld\u0259 edin.<\/span><\/span> <\/span><\/div>
\u00a0<\/div>
Anycast \u015f\u0259b\u0259k\u0259 diffuziyas\u0131<\/span><\/span><\/span><\/strong><\/div>
\u00a0<\/div>
Bu azald\u0131c\u0131 yana\u015fma, h\u00fccum trafikini \u00f6d\u0259mi\u015f serverl\u0259r \u015f\u0259b\u0259k\u0259si \u00fczr\u0259 trafikin \u015f\u0259b\u0259k\u0259si il\u0259 uduldu\u011fu n\u00f6qt\u0259y\u0259 s\u0259p\u0259l\u0259m\u0259k \u00fc\u00e7\u00fcn Anycast \u015f\u0259b\u0259k\u0259sind\u0259n istifad\u0259 edir.<\/span><\/span> T\u0259l\u0259sik bir ayr\u0131-ayr\u0131 ki\u00e7ik kanallara \u00e7ay\u0131 ay\u0131rmaq kimi, bu yana\u015fma paylanm\u0131\u015f h\u00fccum trafikinin t\u0259sirini idar\u0259 oluna bil\u0259n n\u00f6qt\u0259y\u0259 q\u0259d\u0259r yayar v\u0259 ist\u0259nil\u0259n pozucu t\u0259sir yay\u0131r.<\/span><\/span> DDoS h\u00fccumunu azaltmaq \u00fc\u00e7\u00fcn h\u0259r hans\u0131 bir \u015f\u0259b\u0259k\u0259nin etibarl\u0131l\u0131\u011f\u0131 h\u00fccumun \u00f6l\u00e7\u00fcs\u00fcnd\u0259n v\u0259 \u015f\u0259b\u0259k\u0259nin \u00f6l\u00e7\u00fcs\u00fcnd\u0259n v\u0259 a\u015fkarlanmas\u0131ndan \u0259ld\u0259 edilir.<\/span><\/span> Cloudlare t\u0259r\u0259find\u0259n h\u0259yata ke\u00e7irilir DDoS azald\u0131lmas\u0131n\u0131n m\u00fch\u00fcm hiss\u0259si Anycast paylanm\u0131\u015f \u015f\u0259b\u0259k\u0259nin istifad\u0259sidir.<\/span><\/span> Cloudflare 348 Tbps \u015f\u0259b\u0259k\u0259sin\u0259 malikdir, bu da \u0259ld\u0259 edilmi\u015f \u0259n b\u00f6y\u00fck DDoS h\u00fccumundan daha b\u00f6y\u00fckd\u00fcr.<\/span><\/span> Haz\u0131rda alt\u0131ndas\u0131n\u0131zsa, t\u0259zyiq alt\u0131ndan h\u00fccum \u00fc\u00e7\u00fcn ataca\u011f\u0131n\u0131z add\u0131mlar var.<\/span><\/span> \u018fg\u0259r siz art\u0131q Cloudflare-d\u0259 olsa, h\u00fccumunuzu azaltmaq \u00fc\u00e7\u00fcn bu add\u0131mlar\u0131 izl\u0259y\u0259 bil\u0259rsiniz.<\/span><\/span> Cloudflare-d\u0259 t\u0259tbiq etdiyimiz DDoS m\u00fchafiz\u0259si m\u00fcmk\u00fcn h\u00fccum vektorlar\u0131n\u0131 azaltmaq \u00fc\u00e7\u00fcn \u00e7ox\u015fax\u0259lidir.<\/span><\/span> Clo haqq\u0131nda \u0259trafl\u0131 m\u0259lumat \u0259ld\u0259 edin<\/a><\/span><\/span><\/span><\/div>
\u00a0<\/div>
\u00a0<\/div><\/div>
\u00a0<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

A distributed denial-of-service (DDoS) h\u0259d\u0259fi v\u0259 ya onun trafik infrastrukturu il\u0259 \u0130nternet trafikinin da\u015fq\u0131nlar\u0131 il\u0259, s\u0131x ba\u011flanm\u0131\u015f server, xidm\u0259t v\u0259 ya \u015f\u0259b\u0259k\u0259nin poz\u011funlu\u011funa z\u0259r\u0259rli t\u0259sirdir. DDoS h\u00fccumlar\u0131, h\u00fccumun h\u00fccumlar\u0131 kimi bir \u00e7ox t\u0259hl\u00fck\u0259y\u0259 m\u0259ruz qalm\u0131\u015f komp\u00fcter sisteml\u0259rind\u0259n istifad\u0259 effektiv effektivliy\u0259 nail olur. \u0130stismar ma\u015f\u0131nlara komp\u00fcterl\u0259r v\u0259 IoT cihazlar\u0131 kimi dig\u0259r \u015f\u0259b\u0259k\u0259 [\u2026]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[135,134,136,137,138,146,140,139,144,141,145,147],"class_list":["post-4937","post","type-post","status-publish","format-standard","hentry","category-cyber-security","tag-ddos-hucum","tag-ddos-hucum-ndir","tag-ddos-hucumu-df-etmk","tag-kiber-hucum","tag-kiber-thluksislik","tag-korporativ-sbk-tskili","tag-server-mudafiysi","tag-server-thluksizliyi","tag-sbk-hucumu","tag-sbk-mudafiysi","tag-sbk-qurulumu","tag-veb-server-mudafiysi"],"_links":{"self":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts\/4937","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/comments?post=4937"}],"version-history":[{"count":0,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/posts\/4937\/revisions"}],"wp:attachment":[{"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/media?parent=4937"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/categories?post=4937"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jsnet.biz\/az\/wp-json\/wp\/v2\/tags?post=4937"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}