Tsaro da keɓancewa

Tsarikakkiyar kariya da ke killace matsaloli kafin su bazu

Kowane shafi da muke ɗaukar nauyinsa yana gudana ne a cikin kejin sa na matakin kwaya (kernel-level), tare da kulawar babbar kariya ta firewall da binciken muggan software (malware). Shafi guda da aka yi wa kutse ko aka kai wa hari ba zai iya ganin maƙwabtansa ba, ko cinye ƙarfin uwar garken (server), ko kuma jawo wani ƙasa. Wannan shi ne tsarin da muka gina don ɗaukar nauyin shafuka fiye da 700,000 a faɗin duniya, kuma tushensa yana ƙunshe a cikin kowane tsari. Samuwar aiki: takaita amfani da bayanan bayanai (database throttling) na kowane shafi yana kan aikin haɓakawa kuma har yanzu ba a fara amfani da shi ba. Duk wani abu da aka bayyana a nan yana aiki a yau.

Fara kyauta Duba farashi

700,000+shafukan da aka karɓi bakuncinsu a duka duniya
99.99%Burin lokacin aiki
Kowace ranaAn haɗa binciken manhaja mai cutarwa
An haɗakeɓancewa, WAF da tushen sikanin

Kariya a matakin kwayar tsarin aiki, ba kawai a fayil din saiti ba

CloudLinux LVE da CageFS suna ba kowane shafi kejin albarkatunsa da kuma tsarin duba fayilolinsa na kansa. Wani aiki da ya fita daga iko, karuwar cunkoson ziyara ko kuma kutse ana tsare shi a cikin wannan kejin maimakon ya bazu a kan uwar garken.

Iyakokin albarkatu na kowane shafi (LVE)

Sauƙaƙan Mahalli na Fasaha (Lightweight Virtual Environments) suna kayyade CPU, RAM, IO, IOPS, ayyuka da kuma ayyukan shiga ga kowane shafi. Shafin da ake kai wa hari ko wanda ya fita daga sarrafawa ana takaita shi a cikin kejin kansa, ta yadda wani makwabcinka mara kyau ba zai iya rusa sabar ba.

Keɓance tsarin fayil (CageFS)

Kowane mai amfani yana samun keɓaɓɓen bayanin tsarin fayil kuma ba zai iya ganin sauran masu amfani, sauran shafuka, ko fayilolin tsari masu mahimmanci ba. Keta haddi a wani shafi yana tsare a wurin, ba ya yaduwa.

Iyakance amfani da rumbun adana bayanai ga kowane shafi (MySQL Governor)

CloudLinux MySQL Governor yana takaita amfani da rumbun adana bayanai ga kowane shafi, don haka tambayoyi masu nauyi na shafi daya ba za su iya rage saurin uwar garken ga sauran mutane ba. Bugu da kari, ma'ajiyar abubuwa ta Redis tana saukaka matsin lamba na karantawa.

Karfafaffen PHP ga kowane shafi

CloudLinux alt-PHP yana ba kowane shafi nasa mai zaɓin sigar, nasa ƙarin abubuwa (extensions) da ingantattun saituna, tare da ma'aikatan LSAPI waɗanda ke daure da iyakokin LVE na shafin.

Kariya daga cutar manhaja da kutse, a ko da yaushe a shirye

Imunify360 yana aiki a kan kowane ma'aikaci a matsayin haɗaɗɗen leya guda ɗaya: yana neman barazana, yana toshe kutse kafin ya shigo, kuma yana iya share cuta da dannawa ɗaya.

Duba cutar manhaja a kowane shafi, wanda aka haɗa a kowane tsari — saboda shafin da ya kamu da cutar yana barazana ga maƙwabtansa, martabar uwar garken da kuma kewayon IP ɗinmu.
Wani WAF mai ɗaukar matakin riga-kafi wanda ke toshe sanannun hanyoyin kutse kafin ma a samu facin gyara, tare da katangar tsaron hanyar sadarwa, kariya daga harin brute-force, da kuma tace kyakkyawan sunan IP.
Tsaftacewa da magance cutar manhaja mai cutarwa da danna sau ɗaya idan wani abu ya ratsa — ana samun sa ga kowane lamari ko a matsayin kuɗin shiga.
Ana duba abubuwan da ake zargin an keta su da jerin toshewa na Google Safe Browsing, PhishTank da SURBL/APWG, kuma ana alakanta su da kura-kuran bayanan wasiku domin gano shafukan da ke tura spam da wuri.

Kariyar DDoS mai matakai daban-daban, ta yadda hari guda ba zai zama katsewar aiki ga kowa ba

Ana shawo kan hare-haren yawan ambaliya a gefe, ana tace hare-haren matakin hanyar sadarwa kafin su iso, kuma layin uwar garke yana kunshe duk abin da ya riske shi. Harin da aka nufa ga shafi daya ya zama matsalar wannan shafin kadai.

Edge (L7)

Cloudflare yana shawo kan ambaliyar cunkoso ta hanyar L7 WAF, kayyade adadin buƙatu na kowane shafi, kula da na'urori masu sarrafa kansu (bots), da ƙalubale da aka sarrafa kafin zirga-zirgar ta taɓa isa asalin uwar garke.

Hanyar Sadarwa (L3/4)

Kariyar DDoS a matakin mai ba da sabis tana tace cunkoson layin hanyar sadarwa kafin ya isa ga rukunin uwar garke, tare da samun ingantacciyar kariya ta matakin kamfani don shafuka masu babban haɗari.

Saba

Iyakance haɗin kai da buƙatun LiteSpeed, katangar hanyar sadarwa ta Imunify360, iyakar haɗin kai ga kowace IP, da iyakokin hanyoyin shiga na LVE suna kiyaye kwararar buƙatu akan shafi ɗaya a killace a cikin kejin wannan shafin.

Kariyar tushe tana ciki, ci-gaban kariya a lokacin da kuke buƙata

Muhimman abubuwan suna kare dukkan rukunin, don haka ba na zaɓi ba ne ko kaɗan. Ana iya siyan kariya mai ƙarfi idan yanayin haɗarin shafi ya buƙaci hakan.

An haɗa don kowa da kowa: keɓewar LVE da CageFS, riga-kafin WAF, da binciken cutar malware.
Ana sayarwa a matsayin ƙarin abubuwa: sharewa da magance muggan manhajoji (malware) da dannawa ɗaya, ingantattun ƙa'idodin WAF, binciken fifiko, sarrafa bot da manyan matakan DDoS, da ƙa'idodin keɓantaccen shingen kariya (firewall).
Tilasawa na mataki-mataki ne kuma ana iya juyawa: a maimakon dakatarwa kai tsaye, shafuka na wucewa ta matakan takaitawa, iyakancewa, da kuma dakatarwa, kowanne ana rubuta shi tare da dalili, ana sanar da ku, ana iya daukaka kara a kansa, kuma yana dawowa da kansa da zarar an magance dalilin.
Shafukan da aka dakatar suna nuna shafin riƙo mai tambarin alama kuma takamaimi ga dalilin dakatarwar maimakon shafi da ya lalace, kuma kowane mataki mai alfarma ana yin rajistar bincikensa domin bayanan bin ƙa'idodinku.
Ayyukan ajiye bayanan kowane shafi ba sa canzawa, suna waje ne kuma an ware su daga rukunin sabar da ke aiki, tare da gwajin maido da bayanan — saboda haka ko da an samu mummunar matsalar tsaro za a iya dawo da su.
Rufaffen bayani a yayin aikawa an haɗa shi ma: ana bayar da takardar shaidar TLS ta kyauta don yankunan yanar gizonku kuma ana sabunta ta ta atomatik kafin ta ƙare, kuma maɓalli ɗaya yana tilasta kowane mai ziyara ya shiga HTTPS.

Tambayoyin da aka Fi Yi

Shin tsaro yana ciki, ko kuwa ƙari ne mai tsada?

An haɗa tushe a kowane tsari: keɓewa a matakin kernel na LVE da CageFS, WAF mai ɗaukar mataki da wuri, da binciken malware. Mun haɗa waɗannan saboda shafin da ya kamu da cutar ko yake da matsala yana barazana ga maƙwabtansa da martabar IP ɗinmu, don haka ba za mu iya barin kariya a matsayin zaɓi ba. Sharewa da dannawa ɗaya, ingantattun ƙa'idodin WAF, bincike na musamman da manyan matakan DDoS suna samuwa a matsayin ƙarin abubuwa idan shafi yana buƙatar su.

Idan aka kai wa wani shafi hari a uwar garken ko aka yi kutse a kansa, hakan zai shafi nawa?

A'a. Kowane shafi yana gudana ne a cikin kejin albarkatun CloudLinux LVE na kansa da yanayin tsarin fayil na CageFS. Shafin da ya fita daga iko, aka kai wa hari ko aka lalata ana rage masa gudu kuma a killace shi a cikin kejin kansa — ba zai iya ganin fayilolinku ba, cinye albarkatun da aka raba, ko karya sabar ba. MySQL Governor yana amfani da irin waɗannan iyakoki na kowane shafi ga nauyin rumbun adana bayanai.

Me zai faru idan rukunin yanar gizonku ya kamu da cutar manhaja mai cutarwa?

Kowane shafi da muke ɗaukar nauyinsa ana bincikar sa don gano malware a kowace rana, kuma duk abin da muka samu ana yi masa alama nan take. Kuna iya ƙaddamar da aikin sharewa da dannawa ɗaya don gyara shi, kuma ana killace shari'o'i masu tsanani ko waɗanda ba a warware ba a yanayin da babu intanet tare da kulle fayiloli domin kada cutar ta yaɗu yayin da aka adana hujjoji. Saboda bayanan da aka ajiye (backups) ba sa canzawa, suna waje kuma a keɓe suke daga rukunin sabar da ke aiki, kowane lokaci ana samun tsabtaceccen mayarwa a matsayin madadin mafita.

Ta yaya kuke magance hare-haren DDoS?

Kariya tana da hawa-hawa. Cloudflare yana shan hare-haren volumetric da L7 floods a gefe tare da iyakance yawan buƙatu ga kowane shafi da sarrafa bot; kariya a matakin mai ba da sabis tana tace hare-haren network-layer kafin su ƙaraso; sannan a kan uwar garke, takaita gudu ta LiteSpeed, katangar tsaro ta Imunify360 da iyakokin hanyoyin shiga na LVE suna sa kwararar hare-hare a kan wani shafi ta tsaya a kan wancan shafin kawai. Akwai ingantaccen sarrafa bot da matakan DDoS don shafuka masu fuskantar haɗari mafi girma.

Menene WAF mai riga-kafi kuma ta yaya ya bambanta da katangar kariya (firewall) ta yau da kullum?

WAF mai ƙwazo ta Imunify360 tana toshe sanannun dabarun kutse kafin a samar da facin kariya ga raunin da ke ƙasa, maimakon kawai mayar da martani ga sa hannu bayan aukuwar lamarin. Tana aiki tare da tacewar hanyar sadarwa, kariya daga harin ƙarfi (brute-force), da tace kimar IP, duk an haɗa su a cikin kowane tsari.

Shin zan sami takardar shaidar SSL, kuma tana sabunta kanta da kanta?

I. Ana ba da takardar shaidar TLS ta kyauta don yankunan rukunin yanar gizonku kuma ana sabunta ta kai tsaye kafin ta ƙare, saboda haka babu abin da za a riƙe a kai kuma babu abin da za a shigar. Sauya ɗaya a shafin SSL na rukunin yanar gizon yana tilasta wa kowane baƙo amfani da HTTPS. Idan kun fi son yin amfani da takardar shaidar da kuka saya a wani wuri, za ku iya shigar da ita da kanku, kuma idan kuna buƙatar tabbaci mai ƙarfi, muna sayar da takaddun shaida na wildcard, multi-domain da extended-validation tare da wanda yake na kyauta.

Masu dangantaka

Bakin da ke kare kansa, tun daga shafi na farko

Kariyar matakin kwayar tsarin aiki, kariya ta kafar sadarwa mai matakan riga-kafi da kuma duba cututtukan manhaja suna aiki daga lokacin da kuka girka. Gwada shi tare da gwajin kwanaki 14 ba tare da katin banki ba, wanda ke da tabbacin dawo da kudi na kwanaki 30, canjin wuri kyauta kuma babu tsarewar mai sayarwa.

Fara kyauta