{"id":154125,"date":"2023-07-09T19:40:35","date_gmt":"2023-07-09T17:40:35","guid":{"rendered":"https:\/\/blog.wedos.cz\/?p=154125"},"modified":"2023-07-09T19:40:37","modified_gmt":"2023-07-09T17:40:37","slug":"waf-report-z-wedos-global-protection-za-cerven-2023","status":"publish","type":"post","link":"https:\/\/blog.wedos.com\/cs\/waf-report-z-wedos-global-protection-za-cerven-2023","title":{"rendered":"WAF report z WEDOS Global Protection za \u010derven 2023"},"content":{"rendered":"\n

V \u010dervnu jsme op\u011bt posunuli celou infrastrukturu WEDOS Global d\u00e1l. Zlep\u0161ila se odezva v \u0159ad\u011b zem\u00ed a p\u0159ibylo i p\u00e1r novinek, kter\u00e9 snad u\u017e brzy nasad\u00edme pro v\u0161echny. Samoz\u0159ejm\u011b nechyb\u011bly ani DDoS \u00fatoky, kter\u00e9 jsme \u00fasp\u011b\u0161n\u011b odfiltrovali. Zaj\u00edmav\u00e9 je, \u017ee i p\u0159es n\u00e1r\u016fst web\u016f pod ochranou WEDOS Global Protection, DDoS \u00fatok\u016f v \u010dervnu ubylo. Vypad\u00e1 to, \u017ee se n\u00e1m \u00fato\u010dn\u00edci za\u010d\u00ednaj\u00ed vyh\u00fdbat. <\/p>\n\n\n\n\n\n\n\n

WEDOS Global<\/h2>\n\n\n\n

WEDOS Global je n\u00e1zev na\u0161\u00ed infrastruktury, na kter\u00e9 jede stejnojmenn\u00e1 celosv\u011btov\u00e1 s\u00ed\u0165. Cel\u00e1 infrastruktura WEDOS Global m\u00e1 aktu\u00e1ln\u011b k dispozici p\u0159es 1500 fyzick\u00fdch server\u016f a konektivitu p\u0159es 2,5 Tbps. Na konci kv\u011btna jsme m\u011bli servery ve 25 lokalit\u00e1ch v 20 st\u00e1tech na 5 kontinentech. Dal\u0161\u00ed lokalita je ve f\u00e1zi dokon\u010dov\u00e1n\u00ed.<\/p>\n\n\n\n

Nov\u00fd bod WEDOS Global v Mexiku<\/h3>\n\n\n\n

V p\u00e1tek 16.06.2023 v 15:17 jsme spustili dal\u0161\u00ed bod WEDOS Global. Tentokr\u00e1t v Mexiku, konkr\u00e9tn\u011b v datacentru v hlavn\u00edm m\u011bst\u011b Ciudad de M\u00e9xico. P\u0159ev\u00e1\u017en\u00e1 \u010d\u00e1st provozu je \u010dist\u011b z Mexika. Men\u0161\u00ed provoz jde z Kolumbie, Kuby, El Salvador a n\u011bco z USA.<\/p>\n\n\n\n

\n
\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n
Spu\u0161t\u011bn\u00ed bodu WEDOS Globasl v Mexiku.<\/figcaption><\/figure>\n\n\n\n

Co se t\u00fdk\u00e1 provozu z Ji\u017en\u00ed Ameriky, tak v\u011bt\u0161ina jde zat\u00edm p\u0159es body v USA, kter\u00fdch m\u00e1me 5 (Atlanta, Dallas, Chicago, New York a Silicon Valley). Ji\u017e n\u011bkolik m\u011bs\u00edc\u016f domlouv\u00e1me body v Ji\u017en\u00ed Americe, kter\u00fd se o tento provoz postaraj\u00ed. Bohu\u017eel je to velice n\u00e1ro\u010dn\u00e9. N\u00e1\u0161 bod to je minim\u00e1ln\u011b 45 fyzick\u00fdch server\u016f a 2 switche a pot\u0159ebujeme konektivitu alespo\u0148 100 Gbps s mo\u017enost\u00ed nav\u00fd\u0161en\u00ed. Ne v\u0161ude re\u00e1ln\u011b maj\u00ed tolik konektivity, jinde jsou zase probl\u00e9my legislativn\u00ed. <\/p>\n\n\n\n

Prvn\u00ed bod p\u0159\u00edmo v Ji\u017en\u00ed Americe bychom mohli spustit do konce pr\u00e1zdnin. V\u0161e domlouv\u00e1me ji\u017e n\u011bkolik m\u011bs\u00edc\u016f.<\/p>\n\n\n\n

Nov\u00fd peering v Kanad\u011b v\u00fdrazn\u011b zlep\u0161il odezvu v cel\u00e9 Severn\u00ed Americe<\/h3>\n\n\n\n

Poslat n\u011bkam tis\u00edce server\u016f a z\u0159\u00eddit si tam 100 Gbps konektivitu pro vybudov\u00e1n\u00ed super rychl\u00e9 celosv\u011btov\u00e9 s\u00edt\u011b nesta\u010d\u00ed. Je nutn\u00e9 se spr\u00e1vn\u011b propojit s velk\u00fdmi s\u00edt\u011bmi i t\u011bmi lok\u00e1ln\u00edmi. \u010cek\u00e1 n\u00e1s je\u0161t\u011b hodn\u011b pr\u00e1ce, ale postupn\u011b na tom d\u011bl\u00e1me.<\/p>\n\n\n\n

Koncem \u010dervna jsem spustili peering v Torontu v Kanad\u011b, co\u017e vedlo k v\u00fdrazn\u00e9mu zlep\u0161en\u00ed konektivity v cel\u00e9 Severn\u00ed Americe. Z 27 ms na cca 22,5 ms. Tento region je velice konkuren\u010dn\u00ed se stovkami lok\u00e1ln\u00edch poskytovatel\u016f. Tak\u017ee kdy\u017e jsme se zde dostali na 23. m\u00edsto, tak to pova\u017eujeme za velk\u00fd \u00fasp\u011bch. Nicm\u00e9n\u011b v\u011b\u0159\u00edme \u017ee bychom se dok\u00e1zali dostat na 15. – 10. m\u00edsto do konce roku \ud83d\ude42<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/figure>
\n

Co je to IXP peering?<\/strong><\/p>\n\n\n\n

Peering je dohoda mezi dv\u011bma poskytovateli internetov\u00fdch slu\u017eeb (ISP), kter\u00e1 umo\u017e\u0148uje, aby jejich s\u00ed\u0165ov\u00fd provoz proch\u00e1zel p\u0159\u00edmo mezi nimi, ani\u017e by musel proj\u00edt t\u0159et\u00ed stranou. <\/p>\n\n\n\n

Tento p\u0159\u00edm\u00fd p\u0159enos dat m\u016f\u017ee zv\u00fd\u0161it rychlost a spolehlivost internetov\u00e9ho p\u0159ipojen\u00ed, proto\u017ee \u00fadaje nemus\u00ed cestovat tak daleko nebo p\u0159es dal\u0161\u00ed r\u016fzn\u00e9 s\u00edt\u011b. Tak\u00e9 to m\u016f\u017ee sn\u00ed\u017eit n\u00e1klady, proto\u017ee ob\u011b strany se mohou vyhnout poplatk\u016fm, kter\u00e9 by jinak mohly platit t\u0159et\u00edm stran\u00e1m za p\u0159enos dat.<\/p>\n\n\n\n

Peering obvykle prob\u00edh\u00e1 na tzv. internetov\u00fdch v\u00fdm\u011bnn\u00fdch bodech (IXP), kde m\u016f\u017ee mnoho ISP propojit sv\u00e9 s\u00edt\u011b dohromady.<\/p>\n<\/div><\/div>\n\n\n\n

Chcete se o WEDOS Global dozv\u011bd\u011bt v\u00edce? <\/h3>\n\n\n\n

Pro ty z v\u00e1s, kte\u0159\u00ed maj\u00ed z\u00e1jem o hlub\u0161\u00ed pochopen\u00ed pokro\u010dil\u00fdch technologi\u00ed na kter\u00fdch je infrastruktura WEDOS Global postavena, nab\u00edz\u00edme p\u0159edn\u00e1\u0161ku z Kubernetes Community Days Czech & Slovak 2023, konan\u00e9 v Bratislav\u011b. Na t\u00e9to konferenci p\u0159edn\u00e1\u0161eli dva na\u0161i kolegov\u00e9, kte\u0159\u00ed jsou p\u0159\u00edmo zapojeni do v\u00fdvoje WEDOS Global.<\/p>\n\n\n\n

\n