{"id":27579,"date":"2020-04-15T20:49:08","date_gmt":"2020-04-15T18:49:08","guid":{"rendered":"https:\/\/blog.wedos.cz\/?p=27579"},"modified":"2020-04-16T08:23:23","modified_gmt":"2020-04-16T06:23:23","slug":"jak-funguje-sit-wedos-po-poslednich-upravach","status":"publish","type":"post","link":"https:\/\/blog.wedos.com\/cs\/jak-funguje-sit-wedos-po-poslednich-upravach","title":{"rendered":"Jak funguje s\u00ed\u0165 WEDOS po posledn\u00edch \u00faprav\u00e1ch"},"content":{"rendered":"

Tento m\u011bs\u00edc jsme dokon\u010dili \u00fapravy na\u0161\u00ed s\u00edt\u011b. Za p\u00e1r posledn\u00edch let tam narychlo vzniklo n\u011bkolik improvizac\u00ed, kter\u00e9 by v budoucnu ned\u011blaly dobrotu. S t\u00edm, jak m\u00e1me v pl\u00e1nu v\u0161e \u0161k\u00e1lovat, pot\u0159ebujeme m\u00edt v tak d\u016fle\u017eit\u00e9 \u010d\u00e1sti infrastruktury jako je s\u00ed\u0165 po\u0159\u00e1dek.<\/p>\n

<\/p>\n

Posledn\u00ed \u00faprava prob\u011bhla dnes po p\u016flnoci<\/h3>\n

Pokud sledujete na\u0161e ve\u0159ejn\u00e9 grafy p\u0159enos\u016f<\/a>, tak jste si v\u0161imli, \u017ee dnes (15.04.2020) do\u0161lo na jedn\u00e9 z tras k odst\u00e1vce.<\/p>\n

100 Gbps trasa 1 p\u0159es T\u00e1bor byla c\u00edlen\u011b shozena.<\/p>\n

\"\"<\/a><\/p>\n

Okam\u017eit\u011b jej\u00ed roli p\u0159ebrala 100 Gbps trasa 2 p\u0159es P\u00edsek.<\/p>\n

\"\"<\/a><\/p>\n

V sou\u010dtu \u017e\u00e1dn\u00fd v\u00fdpadek nebyl zn\u00e1t.<\/p>\n

\"\"<\/a><\/p>\n

O v\u0161e se postarala „automatika“, stejn\u011b jakoby do\u0161lo k re\u00e1ln\u00e9mu v\u00fdpadku na n\u011bkter\u00e9 z tras. Byla to z\u00e1rove\u0148 i gener\u00e1lka pro nov\u00e9 \u00fapravy, kter\u00e9 jsme provedli v pond\u011bl\u00ed (13.04.2020).<\/p>\n

Tyto \u00fapravy routov\u00e1n\u00ed zajist\u00ed, \u017ee se do 200 ms zm\u011bn\u00ed naprosto v\u0161echny cesty. To jest nejhor\u0161\u00ed varianta. B\u011b\u017en\u011b takov\u00e1to operace\u00a0 (zm\u011bna v\u0161ech routovac\u00edch tabulek)\u00a0 p\u0159itom m\u016f\u017ee trvat i n\u011bkolik minut.<\/p>\n

V re\u00e1lu se v\u0161ak p\u0159i v\u00fdpadku jedn\u00e9 v\u011btve v\u0161e p\u0159epo\u010d\u00edt\u00e1 do 100 ms, jako tomu bylo i p\u0159i t\u00e9to pl\u00e1novan\u00e9 odst\u00e1vce.<\/p>\n

P\u0159ipravujeme i fin\u00e1ln\u00ed rozd\u011blen\u00ed s\u00edt\u011b mezi 2 na\u0161e datacentra. Navenek se budou „tv\u00e1\u0159it“ jako jedno, ale ve skute\u010dnosti v\u0161e je minim\u00e1ln\u011b du\u00e1ln\u00ed a jednotliv\u00e9 \u010d\u00e1sti jsou z\u00e1lohovan\u00e9 i v druh\u00e9m datacentru…<\/p>\n

Nav\u00fd\u0161en\u00ed garantovan\u00e9 rychlosti VPS ON ze 100 Mbps \u2192 200 Mbps<\/h3>\n

Slu\u017eba VPS ON<\/a> je v podstat\u011b jen jeden virtu\u00e1ln\u00ed stroj z WEDOS Cloud<\/a>. S t\u00edm jak se bl\u00ed\u017e\u00ed ostr\u00e9 spu\u0161t\u011bn\u00ed slu\u017eby WEDOS Cloud n\u00e1m chyb\u011bl je\u0161t\u011b jeden posledn\u00ed rest\u00edk, a to p\u0159ipravit celou s\u00ed\u0165, aby na WEDOS Cloud mohli z\u00e1kazn\u00edci vyu\u017e\u00edvat 1 Gbps\u00a0 a v\u00edc \ud83d\ude42<\/p>\n

Jak v\u00edte, tak konektivity do internetu m\u00e1me opravdu hodn\u011b. V\u0161echny t\u0159i trasy dohromady maj\u00ed 3x 100 Gbps a \u010dtvrt\u00e1 je v pl\u00e1nu a chceme ji zrealizovat do l\u00e9ta.<\/p>\n

Jenom\u017ee nesta\u010d\u00ed m\u00edt jen konektivitu venku, mus\u00edte m\u00edt na to upravenou i intern\u00ed s\u00ed\u0165. V\u0161e dob\u0159e spo\u010d\u00edtat, aby n\u011bkde nebylo \u00fazk\u00e9 hrdlo.<\/p>\n

Po d\u016fsledn\u00e9m \u00faklidu u\u017e v\u00edme, \u017ee d\u00e1t z\u00e1kazn\u00edk\u016fm WEDOS Cloud k dispozici 1 Gbps nebude probl\u00e9m. Pokud n\u011bkdo bude cht\u00edt u WEDOS Cloud i n\u011bkolik Gbps nebo v\u00edc, tak to nebude probl\u00e9m. Stejn\u011b tak bude u WEDOS Cloud mo\u017en\u00e9 vyu\u017e\u00edvat intern\u00ed s\u00ed\u0165 mezi servery a\u017e rychlostmi 10 Gbps. Z\u00e1rove\u0148 jsme si spo\u010d\u00edtali, \u017ee m\u016f\u017eeme nav\u00fd\u0161it garantovanou rychlost z\u00e1kazn\u00edk\u016fm s VPS ON z p\u016fvodn\u00edch\u00a0 100 Mbps na 200 Mbps.<\/p>\n

Pokud tedy m\u00e1te VPS ON sta\u010d\u00ed si jen restartovat v\u00e1\u0161 virtu\u00e1ln\u00ed stroj a m\u00e1te najednou k dispozici 200 Mbps.<\/p>\n

Kone\u010dn\u011b je prostor pro WEDOS Anycast<\/h3>\n

Po velk\u00e9m \u00faklidu, mohl n\u00e1sledovat pokrok. V \u00fater\u00fd (14.04.2020) jsme tak do testovac\u00edho provozu\u00a0 mohli nasadit nov\u00e9 IP adresy, kter\u00e9 jsme z\u00edskali od RIPE pr\u00e1v\u011b pro pl\u00e1novanou slu\u017ebu WEDOS Anycast.<\/p>\n

M\u016f\u017eete si tak pingnout jednotliv\u00e9 br\u00e1ny – nap\u0159\u00edklad 45.138.104.1 anebo 45.138.105.1. Za nimi je p\u0159ipraven\u00e1 cel\u00e1 serverov\u00e1 sk\u0159\u00ed\u0148 HPE Moonshot se 45 v\u00fdkonn\u00fdmi fyzick\u00fdmi servery pro n\u00e1\u0161 prvn\u00ed POP \ud83d\ude42<\/p>\n

\"\"<\/a>
Kompletn\u011b osazen\u00fd HPE Moonshot v sob\u011b m\u00e1 45 server\u016f, 2x switch, 4x zdroj<\/figcaption><\/figure>\n

Zat\u00edm lad\u00edme u slu\u017eby hlavn\u011b s\u00ed\u0165, p\u0159eci jen o tom to hlavn\u011b bude \ud83d\ude42 N\u00e1sledovat budou napojen\u00e9 slu\u017eby filtrace z\u00e1vadn\u00e9ho provozu (IPS\/IDS), DNS, proxy, CDN, VPN a dal\u0161\u00ed \ud83d\ude42<\/p>\n

Otv\u00edraj\u00ed se t\u00edm netu\u0161en\u00e9 mo\u017enosti, d\u00edky kter\u00fdm budou va\u0161e weby bezpe\u010dn\u011bj\u0161\u00ed, p\u0159\u00edstupn\u011bj\u0161\u00ed a rychlej\u0161\u00ed…\u00a0 Brzo p\u0159edstav\u00edme jednotliv\u00e9 \u010d\u00e1sti a budeme je testovat.<\/p>\n

Dal\u0161\u00ed hr\u00e1tky se s\u00edt\u00ed<\/h3>\n

S t\u00edm v\u0161\u00edm souvis\u00ed je\u0161t\u011b jeden men\u0161\u00ed projekt. Za\u010dali jsme testovat rychlou GEO IP filtraci. Za norm\u00e1ln\u00edch okolnost\u00ed filtrov\u00e1n\u00ed cel\u00fdch rozsah\u016f IP adres m\u016f\u017ee b\u00fdt n\u00e1ro\u010dn\u00e9. Pokud si zkus\u00edte d\u00e1t t\u0159eba do .htaccess cel\u00e9 rozsahy st\u00e1t\u016f, tak v\u00e1m to zpomal\u00ed na\u010d\u00edt\u00e1n\u00ed str\u00e1nek klidn\u011b i o vte\u0159inu nebo v\u00edc.<\/p>\n

My filtrovat d\u00edky ochran\u00e1m um\u00edme rychle a velice efektivn\u011b. Ostatn\u011b dob\u0159e v\u00edte z p\u0159edchoz\u00edch \u010dl\u00e1nk\u016f, \u017ee dok\u00e1\u017eeme p\u0159i masivn\u00edch DDoS \u00fatoc\u00edch o s\u00edle des\u00edtek Gbps vy\u010distit v re\u00e1ln\u00e9m \u010dase z\u00e1vadn\u00fd provoz<\/a>.<\/p>\n

GEO IP filtrace je slu\u017eba, kde si vyberete koho na svou slu\u017ebu u n\u00e1s pust\u00edte. Nap\u0159\u00edklad m\u016f\u017eete kompletn\u011b odfiltrovat cel\u00fd sv\u011bt a nechat jen \u010ceskou republiku a t\u0159eba Slovensko. Nebo si nech\u00e1te jen EU…<\/p>\n

Te\u010f to pr\u00e1v\u011b testujeme na n\u011bkolika slu\u017eb\u00e1ch. M\u00e1me tu skupinku z\u00e1kazn\u00edk\u016f, kte\u0159\u00ed provozuj\u00ed komunika\u010dn\u00ed slu\u017ebu Temaspeak, kter\u00e1 je pr\u00e1v\u011b na r\u016fzn\u00e9 i men\u0161\u00ed \u00fatoky h\u00e1kliv\u00e1. Aktu\u00e1ln\u011b tam s n\u011bkter\u00fdmi testujeme filtraci teamspeak spojen\u00ed na jednotliv\u00e9 zem\u011b a funguje to velmi dob\u0159e.<\/p>\n

A to je st\u00e1le a pouze za\u010d\u00e1tek \ud83d\ude42<\/p>\n

Z\u00e1v\u011br<\/h3>\n

U\u017e jsme si v\u0161ichni pomalu zvykli na pandemick\u00e1 opat\u0159en\u00ed. Mnoho z n\u00e1s rozjelo dokonce n\u011bjak\u00fd sv\u016fj vlastn\u00ed individu\u00e1ln\u00ed projekt anebo se v\u00edce zapojilo to testov\u00e1n\u00ed. D\u00edky tomu te\u010f nap\u0159\u00edklad testujeme nov\u00fd migra\u010dn\u00ed skript, kter\u00fd um\u00ed p\u0159esunout i stovky GB velk\u00fd WordPress zcela automaticky a b\u011bhem velmi kr\u00e1tk\u00e9 doby.<\/p>\n

Je toho hodn\u011b co se u n\u00e1s te\u010f d\u011bje a co pro v\u00e1s p\u0159ipravujeme. Nebojte se pod\u011bl\u00edme se \ud83d\ude09<\/p>\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Tento m\u011bs\u00edc jsme dokon\u010dili \u00fapravy na\u0161\u00ed s\u00edt\u011b. Za p\u00e1r posledn\u00edch let tam narychlo vzniklo n\u011bkolik improvizac\u00ed, kter\u00e9 by v budoucnu ned\u011blaly dobrotu. S t\u00edm, jak m\u00e1me v pl\u00e1nu v\u0161e \u0161k\u00e1lovat, pot\u0159ebujeme m\u00edt v tak d\u016fle\u017eit\u00e9 \u010d\u00e1sti infrastruktury jako je s\u00ed\u0165 po\u0159\u00e1dek.<\/p>\n","protected":false},"author":9,"featured_media":27604,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[10,123,124,36,107],"class_list":["post-27579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-konektivita","tag-sit","tag-sitova-ifrastruktura","tag-vps-on","tag-wedos-anycast"],"_links":{"self":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/27579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/comments?post=27579"}],"version-history":[{"count":7,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/27579\/revisions"}],"predecessor-version":[{"id":27707,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/posts\/27579\/revisions\/27707"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/media\/27604"}],"wp:attachment":[{"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/media?parent=27579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/categories?post=27579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.wedos.com\/cs\/wp-json\/wp\/v2\/tags?post=27579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}