Chrome jiri ọtụtụ afọ tụọ gị ụjọ maka saịtị enweghị mkpọchi. Ugbu a saịtị ọ bụla nwere ya - na saịtị asaa n'ime iri buru ibu ọ na-eduga na middlebox
E mepụtara mkpọchi na HTTPS n'ihi otu ihe: ka ọ dịghị onye n'etiti gị na saịtị nwee ike ịgụ ihe ị na-eziga. ISP gị, Wi-Fi ụlọ kọfị, steeti n'ahịrị - ha niile na-ahụ naanị ciphertext. Browsers jiri ọtụtụ afọ kuzie gị: enweghị mkpọchi - etinyela password.
Cloudflare bụ proxy nọ n'etiti gị na saịtị; Amazon CloudFront, Azure Front Door, Akamai na Fastly na-arụ ọrụ otu ụzọ ahụ. Iji «belata mwakpo», middlebox kwesịrị ịhụ traffic n'ụzọ doro anya. Ya mere njikọ gị na-akwụsị na sava ya: ebe ahụ a na-eme decrypt arịrịọ, tụnyere iwu ya, ma ziga ya na saịtị na njikọ ọzọ. Akwụkwọ Cloudflare n'onwe ya na-akpọ nke a TLS termination - «ebe a na-eme decrypt traffic HTTPS ka Cloudflare nwee ike nyochaa ya». Amazon, Azure na Akamai na-eji otu aha ahụ maka otu ebe ahụ n'akwụkwọ ha.
N'ụzọ teknụzụ nke a bụ man in the middle oge ochie. Naanị ihe dị iche na mwakpo: onye nwe saịtị debanyere aha ya mgbe o tinyere saịtị n'azụ middlebox. Atụmatụ ma ọ bụ ntọala anaghị ewepụ nke a: ọ dị ka saịtị nọ n'azụ middlebox, encryption na-akwụsị na middlebox - na atụmatụ efu na Enterprise. Ọ dịghị onye jụrụ gị, mkpọchi agaghị agwa gị.
Ihe nke a pụtara n'omume - site n'akwụkwọ na ụbọchị
Enweghị ikpe. Naanị akwụkwọ Cloudflare n'onwe ya, akụkọ ihe merenụ ya na edemede ọha - nwere ụbọchị, ka e nwee ike lelee ahịrị ọ bụla.
Asaa n'ime iri saịtị kachasị ukwuu - n'azụ middlebox
Dịka HTTP Archive 2025, 71% nke otu puku saịtị a na-eleta nke ọma n'ụwa na-enye ọbụna akwụkwọ HTML site na middlebox; n'ime top 10,000 - 70%, n'ime top 100,000 - 62%. Ndị middlebox ahụ bụ: Cloudflare - 58% nke saịtị ndị dị otú ahụ, mgbe ahụ Amazon CloudFront (7%), Fastly (5%), Akamai (2%) na cloud load balancers. Na-agụta saịtị niile n'ụwa, nke ọ bụla n'ime atọ nọ n'azụ middlebox; Cloudflare naanị - 26% nke saịtị niile na 85% nke ahịa reverse-proxy.
WAF na-agụ body nke arịrịọ ọ bụla - dịka akwụkwọ
Iwu Cloudflare «na-enyocha body nke arịrịọ ọ bụla na-abata», na ubi http.request.body.raw n'asụsụ iwu ha bụ «HTTP request body a na-agbanweghị». Fọọmụ login bụ request body. Login na password n'ime ya bụ plaintext.
Cloudbleed, 2017: ebe nchekwa middlebox wụfuru n'ime nzaghachi ndị ọzọ
Site na 22 Septemba 2016 ruo 18 February 2017 njehie na parser Cloudflare meziri iberibe ebe nchekwa site na otu saịtị banye n'ime nzaghachi nke ọzọ: headers, akụkụ POST nwere password, cookies, API keys na tokens. Cloudflare gụrụ 1.2 nde hits; ihe wụfuru batara na search caches - ehichapụrụ ihe karịrị peeji 80,000. Mgbasa ozi kpọrọ Uber, OkCupid, Fitbit.
November 2023: ndị wakporo batara Cloudflare site na igodo e zuru
Site na 14 ruo 24 November 2023 ndị wakporo - Cloudflare na-akpọ ha «nation-state» - jiri credentials e zuru na Okta breach rụọ ọrụ n'ime sistemụ Cloudflare: Confluence wiki, Jira, Bitbucket, budata repositories 76. Mgbe nke ahụ gasịrị Cloudflare gbanwere credentials karịrị 5,000 ma nyochaa sistemụ 4,893.
Otu switch maka onye ọ bụla
2 July 2019 - nkeji 27, otu regex na WAF, traffic dara 82%. 21 June 2022 - nkeji 75, data centers 19. 18 November 2025 - ihe fọrọ nke nta ka ọ bụrụ awa isii, «outage kachasị njọ kemgbe 2019»: X, ChatGPT, Spotify, Shopify, Coinbase dara. 5 December 2025 - nkeji 25 ọzọ. 20 February 2026 - awa isii, njehie BGP. Ọ nweghị n'ime outages ahụ bụ mwakpo.
Cloudflare na-ekpebi ma ị bụ mmadụ
Onye nwe saịtị na-akara igbe - na ịnweta anaghị ekpebi ya, kama filter Cloudflare. Akwụkwọ ha na-ekweta «challenge loop, mgbe challenge na-apụta ọzọ na ọzọ», gụnyere n'ihi VPN na proxies. Kemgbe 2016 Cloudflare na-emeso Tor dịka «obodo» dị iche ma na-ekwu na 94% nke arịrịọ sitere ebe ahụ bụ ihe ọjọọ; Tor Project zara maka «loop CAPTCHA na-adịghị agwụ» na mgbochi nke opekata mpe 80% nke adreesị Tor.
Mgbe steeti na-alụ ọgụ na middlebox: okwu Russia
N'October 2024 Cloudflare gbanyere ECH encryption dịka default na atụmatụ efu. Na 6 November 2024 saịtị nọ n'azụ Cloudflare nwere ECH kwụsịrị ịmeghe maka ISP Russia; na 7 November CMU SSOP (ngalaba Roskomnadzor, onye na-achịkwa nkwukọrịta Russia) kpọrọ ECH «ụzọ isi gafere mmachi» ma kwado ka ndị nwe saịtị gbanyụọ ya «ma ọ bụ, nke ka mma, jiri CDN ụlọ». Kemgbe 9 June 2025 ndị ọrụ anọ kachasị ukwuu na Russia bepụrụ traffic Cloudflare rue KB 16 mbụ nke faịlụ ọ bụla. Traffic sitere na Russia dara ihe dịka 30%; ihe karịrị 40% nke saịtị web Russia - ihe dịka 300,000 - nọ n'azụ Cloudflare. Na 2 June 2026 FSB kwupụtara na ọrụ ọgụgụ isi mba ọzọ nọ na-anakọta data site na ekwentị ndị ọrụ gọọmentị Russia «na-eji ikike teknụzụ» nke Cloudflare na Fastly, ma meghee ikpe n'okpuru isi 272 na 273 nke Iwu Mpụ - o gosighị ihe akaebe teknụzụ, ụlọ ọrụ azaghị. Otu Cloudflare ahụ kemgbe 2022 na-ekpuchi saịtị UK Ministry of Defence n'okpuru nkwekọrịta gọọmentị - Army, Royal Navy, RAF na portal Defence Gateway maka ndị ọrụ 330,000: £425k maka 2022-2025 na £105k maka 2025-2026.
Otu atụmatụ ebe niile: Amazon, Akamai, Azure, Fastly
Proxy ọ bụla ma ọ bụ cloud load balancer nke na-eme terminate TLS n'onwe ya na-arụ ọrụ otu ụzọ ahụ: Amazon CloudFront na ALB, Azure Front Door na Application Gateway, Akamai, Fastly, Imperva. Onye ọ bụla nwere WAF nke ya nke na-agụ request body, cache nke ya na outages nke ya. Cloudflare bụ naanị nke kachasị ukwuu na nke kachasị mepere emepe n'akwụkwọ ya. Hosting nkịtị nwere asambodo na origin server dị iche: ebe ahụ naanị saịtị na-agụ traffic.
Ihe nke a pụtara maka ego gị
Exchange nọ n'azụ middlebox
Web wallet nọ n'azụ middlebox
Wallet nwere offline signing
Lelee saịtị ọ bụla n'otu nkeji
Ị ekwesịghị ikwere anyị ma ọ bụ ha. Middlebox na-ahapụ akara na nzaghachi ọ bụla, onye ọ bụla nwere ike ịhụ ha.
Anyị were wallet ise kachasị ewu ewu ma lee onye nọ n'etiti gị na saịtị ha
Anyị echeghị echiche ma agụghị nyocha ndị ọzọ: anyị mere arịrịọ nkịtị na saịtị, lee response headers na asambodo. Nsonaazụ dị n'okpuru, dị ka ọ dị.
Ihe ndị mmadụ na-ajụ mgbe ha gụchara rue ebe a
Gịnị bụ Cloudflare n'okwu dị mfe?
Ụlọ ọrụ middlebox: saịtị na-eziga traffic ya niile site na sava ha, ha na-«echekwa» ya. Iji «echekwa», ha na-eme decrypt njikọ gị n'akụkụ ha. Otú ahụ ka otu ụzọ n'ime anọ nke saịtị niile n'ụwa si arụ ọrụ.
Cloudflare ọ na-ahụ password m?
Ee. Njikọ na-akwụsị na sava ya, iwu filtering dịka akwụkwọ na-agụ body nke arịrịọ ọ bụla - fọọmụ login nwere username na password bụ kpọmkwem request body ahụ. Ma ọ na-echekwa ya na ogologo oge iwu ya na-achịkwa, nke ị nweghị ike inyocha.
Gịnị mere saịtị ji arịọ m ka m kwado na m bụ mmadụ?
Nke ahụ abụghị saịtị, ọ bụ Cloudflare. Onye nwe gbanyere nyocha, filter middlebox na-ekpebi: VPN, Tor, mpaghara «enyo enyo», browser ochie - ị daba na challenge loop. Cloudflare n'onwe ya na-ekweta loops dị otú ahụ n'akwụkwọ ya.
Saịtị nọ n'azụ Cloudflare agaghị emeghe n'obodo m. Kedu ihe m nwere ike ime?
Mgbe obodo na middlebox na-alụ ọgụ, ndị ọrụ na-enweta VPN - ma ọ bụ saịtị enweghị middlebox. Ndị nwe saịtị nwere otu ngwọta eziokwu: wepụ Cloudflare n'etiti onwe ha na ndị ọrụ ha. Okwu Russia n'Eziokwu 07 na-egosi otú ngwa ngwa «saịtị adaala» si aghọ «middlebox na ISP lụrụ ọgụ».
Nke a ọ bụ naanị banyere Cloudflare?
Mba. Middlebox ọ bụla nke na-eme terminate TLS n'onwe ya na-arụ ọrụ otú a: Amazon CloudFront na AWS load balancers, Azure Front Door, Akamai, Fastly, Imperva. N'ime otu puku saịtị kachasị ukwuu n'ụwa, 71% nọ n'azụ middlebox: Cloudflare - 58% n'ime ha, Amazon - 7%, Fastly - 5%, Akamai - 2%. Hosting nkịtị dị iche: ebe ahụ traffic na asambodo bụ nke saịtị n'onwe ya.
Enwere m saịtị. Kedu ihe m kwesịrị ime?
Kpebie nke ka mkpa: «nchekwa pụọ na mwakpo» ma ọ bụ eziokwu na password ndị ọrụ gị anaghị agafe koodu onye ọzọ. Atụmatụ na ntọala anaghị agbanwe nke a - n'atụmatụ ọ bụla cipher na-akwụsị na middlebox. E nwere nkwekọrịta - proxy nke anaghị eme decrypt TLS ma na-ebuga naanị stream site na aha sava. Otú ahụ ka front server anyị si arụ ọrụ: nchekwa pụọ na traffic gabigara ókè na-anọ, middlebox plaintext anọghị.