I-DDoS(I-Distributed Denial of Service) iwuhlobo lokuhlasela ku-inthanethi lapho amakhompuyutha amaningi onakalisiwe noma amathuluzi asetshenziswa ukuze kukhukhule isistimu eqondiwe noma inethiwekhi enomthamo omkhulu wethrafikhi, eqeda izinsiza zayo futhi ibangele ukuphazamiseka ekusebenzeni kwayo okuvamile. Inhloso yokuhlasela kwe-DDoS ukwenza isistimu eqondiwe noma inethiwekhi ingafinyeleleki kubasebenzisi abasemthethweni.
Nawa amaphuzu abalulekile mayelana nokuhlaselwa kwe-DDoS:
1. Indlela Yokuhlasela: Ukuhlasela kwe-DDoS kuvame ukubandakanya inombolo enkulu yamadivayisi, aziwa njenge-botnet, alawulwa umhlaseli. Lawa madivayisi avame ukungenwa i-malware evumela umhlaseli ukuthi alawule kude futhi axhumanise ukuhlasela.
2. Izinhlobo Zokuhlasela kwe-DDoS: Ukuhlasela kwe-DDoS kungathatha izinhlobo ezihlukene, okuhlanganisa ukuhlasela kwevolumu egcwele okuqondiwe ngethrafikhi eningi, ukuhlasela kwesendlalelo sohlelo lokusebenza okuqondise izinhlelo zokusebenza ezithile noma amasevisi, nokuhlasela kwephrothokholi okusebenzisa ubungozi kuzivumelwano zenethiwekhi.
3. Umthelela: Ukuhlaselwa kwe-DDoS kungaba nemiphumela emibi kakhulu, okuholela ekuphazanyisweni kwesevisi, isikhathi sokuphumula, ukulahlekelwa kwezimali, ukonakala kwesithunzi, kanye nolwazi lomsebenzisi olungena engozini. Zingathinta izinhlangano ezahlukahlukene, okuhlanganisa amawebhusayithi, izinsiza ze-inthanethi, izinkundla ze-e-commerce, izikhungo zezezimali, kanye namanethiwekhi wonke.
4. Ukunciphisa: Izinhlangano zisebenzisa amasu okunciphisa e-DDoS ahlukahlukene ukuze zivikele amasistimu namanethiwekhi azo. Lokhu kufaka phakathi ukuhlungwa kwethrafikhi, ukukhawulela izinga, ukutholwa okudidayo, ukuphambukiswa kwethrafikhi, kanye nokusetshenziswa kwezingxenyekazi zekhompuyutha ezikhethekile noma izixazululo zesofthiwe eziklanyelwe ukuhlonza nokunciphisa ukuhlaselwa kwe-DDoS.
5. Ukuvimbela: Ukuvimbela ukuhlaselwa kwe-DDoS kudinga indlela esheshayo ehilela ukusebenzisa izinyathelo zokuphepha zenethiwekhi eziqinile, ukwenza ukuhlolwa okujwayelekile kokuba sengozini, ukuchibiyela ubungozi besofthiwe, nokuba nezinhlelo zokuphendula isigameko ukuze kusingathwe ukuhlasela ngempumelelo.
Kubalulekile ukuthi izinhlangano zihlale ziqaphile futhi zilungele ukuphendula ekuhlaselweni kwe-DDoS, njengoba kungase kube nomthelela omkhulu ekusebenzeni kwebhizinisi nokwethenjwa kwamakhasimende.
Ukuhlasela kwe-Defence Anti-DDoS
1. Hlunga amasevisi namachweba angadingekile
I-Inexpress, Express, Forwarding namanye amathuluzi angasetshenziswa ukuhlunga izinsiza ezingadingekile namachweba, okusho ukuthi, ukuhlunga i-ip mbumbulu kumzila.
2. Ukuhlanza nokuhlunga ukugeleza okungavamile
Hlanza futhi uhlunge ithrafikhi engavamile ngokusebenzisa i-firewall ye-hardware ye-DDoS, futhi usebenzise ubuchwepheshe bezinga eliphezulu njengokuhlunga umthetho wephakethe ledatha, ukuhlunga kokutholwa kwezigxivizo zeminwe, nokuhlunga ngokwezifiso kokuqukethwe kwephakethe ledatha ukuze unqume ngokunembile ukuthi ithrafikhi yokufinyelela yangaphandle ijwayelekile, futhi unqabele nakakhulu ukusefa kwethrafikhi engajwayelekile.
3. Ukuvikela iqoqo elisabalalisiwe
Lokhu okwamanje kuyindlela ephumelela kakhulu yokuvikela umphakathi we-cybersecurity ekuhlaselweni okukhulu kwe-DDoS. Uma i-node ihlaselwa futhi ingakwazi ukunikeza izinsizakalo, isistimu izoshintshela kwenye i-node ngokuzenzakalelayo ngokuya ngokulungiselelwa okubalulekile, futhi ibuyisele wonke amaphakethe wedatha yomhlaseli endaweni yokuthumela, ikhubaze umthombo wokuhlaselwa futhi ithinte ibhizinisi kusukela ekujuleni kombono wokuvikela ukuvikela izinqumo zokusebenzisa ukuphepha.
4. Ukuhlaziywa kwe-DNS okuhlakaniphile kokuphepha okuphezulu
Inhlanganisela ephelele yesistimu yokuxazulula ye-DNS ehlakaniphile kanye nesistimu yokuvikela ye-DDoS ihlinzeka amabhizinisi ngamakhono amakhulu okuthola izinsongo zokuphepha ezivelayo. Ngesikhathi esifanayo, kukhona nomsebenzi wokuthola ukuvala shaqa, ongakhubaza ubuhlakani be-IP yeseva nganoma yisiphi isikhathi ukuze ubuyisele i-IP yeseva evamile, ukuze inethiwekhi yebhizinisi ikwazi ukugcina isimo sesevisi esingalokothi sime.
Ukuhlasela kwe-Anti DDoS Yokuphathwa Kwethrafikhi Yenethiwekhi Yezezimali Yebhange, Ukutholwa Nokuhlanza:
1. Impendulo ye-Nanosecond, iyashesha futhi inembile.Ukuzifundela kwethrafikhi yemodeli yebhizinisi kanye nephakethe lobuchwepheshe bokubona ukujula kwephakethe kuyamukelwa. Uma ithrafikhi engavamile nomlayezo sekutholakele, isu lokuvikela elisheshayo liyaqaliswa ukuze kuqinisekiswe ukuthi ukubambezeleka phakathi kokuhlasela nokuzivikela kungaphansi kwamasekhondi angu-2. Ngesikhathi esifanayo, isisombululo esingavamile sokuhlanza ukugeleza okusekelwe ezingxenyeni zesitimela sokuhlanza isihlungi, ngokusebenzisa izingqimba eziyisikhombisa zokucubungula ukugeleza kokucubungula, kusukela esidumeni se-IP, isendlalelo sezokuthutha kanye nesendlalelo sohlelo lokusebenza, ukuqashelwa kwesici, iseshini ezicini eziyisikhombisa, ukuziphatha kwenethiwekhi, ukubunjwa kwethrafikhi ukuvimbela ukuhlunga ukuhlonza isinyathelo ngesinyathelo, ukuthuthukisa ukusebenza jikelele kokuzivikela, isiqinisekiso esisebenzayo sesikhungo sedatha ye-XXX yedatha yedatha.
2. Ukuhlukaniswa kokuhlolwa nokulawula, okusebenzayo nokuthembekile. Uhlelo oluhlukile lokuthunyelwa kwesikhungo sokuhlola kanye nesikhungo sokuhlanza singaqinisekisa ukuthi isikhungo sokuhlola singaqhubeka nokusebenza ngemva kokuhluleka kwesikhungo sokuhlanza, futhi sikhiqize umbiko wokuhlola kanye nesaziso se-alamu ngesikhathi sangempela, esingabonisa ukuhlaselwa kwebhange le-XXX ngezinga elikhulu.
3. Ukuphatha okuguquguqukayo, ukunwebeka ngaphandle kokukhathazeka.Isixazululo se-Anti-ddos singakhetha izindlela ezintathu zokuphatha: ukutholwa ngaphandle kokuhlanza, ukutholwa okuzenzakalelayo nokuvikela ukuhlanza, nokuvikela okusebenzisanayo okwenziwa ngesandla.Ukusetshenziswa okuguquguqukayo kwezindlela ezintathu zokuphatha kungahlangabezana nezidingo zebhizinisi ze-XXX bank ukunciphisa ubungozi bokusebenzisa nokuthuthukisa ukutholakala uma ibhizinisi elisha liqaliswa.
Inani Lekhasimende
1. Sebenzisa ngempumelelo i-bandwidth yenethiwekhi ukuze uthuthukise izinzuzo zebhizinisi
Ngesixazululo sezokuphepha sisonke, ingozi yezokuphepha yenethiwekhi ebangelwe ukuhlasela kwe-DDoS ebhizinisini le-inthanethi lesikhungo sayo sedatha kwaba ngu-0, nokumoshakala komkhawulokudonsa wenethiwekhi okubangelwa ithrafikhi engavumelekile kanye nokusetshenziswa kwezinsiza zeseva kwancishiswa, okudale izimo zebhange le-XXX ukuthuthukisa izinzuzo zalo.
2. Yehlisa Izingozi, uqinisekise ukuzinza kwenethiwekhi kanye nokusimama kwebhizinisi
Ukuthunyelwa kwe-bypass kwemishini ye-anti-ddos akushintshi isakhiwo senethiwekhi esikhona, akukho bungozi bokunqamuka kwenethiwekhi, akukho iphuzu elilodwa lokwehluleka, akukho nomthelela ekusebenzeni okuvamile kwebhizinisi, futhi kunciphisa izindleko zokuqalisa kanye nezindleko zokusebenza.
3. Thuthukisa ukwaneliseka kwabasebenzisi, hlanganisa abasebenzisi abakhona futhi uthuthukise abasebenzisi abasha
Ukuhlinzeka abasebenzisi ngendawo yenethiwekhi yangempela, ukubhanga ku-inthanethi, imibuzo yebhizinisi eku-inthanethi nokunye ukwaneliseka kwabasebenzisi bebhizinisi abaku-inthanethi kuthuthukiswe kakhulu, kuhlanganiswe ukwethembeka kwabasebenzisi, ukuze kuhlinzekwe amakhasimende ngezinsizakalo zangempela.
Isikhathi sokuthumela: Jul-17-2023
