{"id":10248,"date":"2025-07-06T01:28:17","date_gmt":"2025-07-05T17:28:17","guid":{"rendered":"https:\/\/www.stonecdn.com\/?p=10248"},"modified":"2025-07-06T01:28:18","modified_gmt":"2025-07-05T17:28:18","slug":"%e8%a2%abddos%e6%94%bb%e5%87%bb%e4%ba%86%e6%80%8e%e4%b9%88%e5%8a%9e%ef%bc%9f%e7%b4%a7%e6%80%a5%e8%87%aa%e6%95%91%e6%89%8b%e5%86%8c%ef%bc%88%e9%99%84%e9%95%bf%e6%95%88%e6%96%b9%e6%a1%88%ef%bc%89","status":"publish","type":"post","link":"https:\/\/www.stonecdn.com\/ja\/10248-html","title":{"rendered":"ddos\u653b\u6483\u3092\u53d7\u3051\u305f\u3089\u3069\u3046\u3059\u308b\uff1f\u7dca\u6025\u81ea\u52a9\u30de\u30cb\u30e5\u30a2\u30eb\uff08\u9577\u671f\u5bfe\u7b56\u4ed8\u304d\uff09"},"content":{"rendered":"

\u5348\u524d3\u6642\u3001\u643a\u5e2f\u96fb\u8a71\u306e\u30a2\u30e9\u30fc\u30e0\u304c\u9cf4\u308a\u97ff\u3044\u305f\u3002\u30b5\u30fc\u30d0\u30fc\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u901a\u5e38\u306e300\u500d\u306b\u6025\u5897\u3057\u3001\u9078\u624b\u304c\u72c2\u3063\u305f\u3088\u3046\u306b\u843d\u3061\u305f\u306e\u3060\u30023\u4eba\u306e\u30c6\u30af\u30cb\u30ab\u30eb\u30c7\u30a3\u30ec\u30af\u30bf\u30fc\u3092\u8339\u3067\u30cf\u30b2\u306b\u3057\u305f\u8001\u30ac\u30f3\u3068\u3057\u3066\u3001\u79c1\u306f\u8840\u3068\u6d99\u306e\u7d4c\u9a13\u3092\u4f7f\u7528\u3057\u3066\u3001\u3053\u306e\u30bb\u30c3\u30c8\u3092\u307e\u3068\u3081\u308b\u305f\u3081\u306b \"\u9ec4\u91d1\u306e30\u5206 \"\u306e\u305f\u3081\u306e\u7dca\u6025\u624b\u9806<\/strong> + \u30eb\u30fc\u30c8\u30fb\u30a2\u30f3\u30c9\u30fb\u30d6\u30e9\u30f3\u30c1\u30fb\u30d7\u30ed\u30b0\u30e9\u30e0<\/strong>.<\/p>\n\n\n\n

\n\n\n\n

I. \u653b\u6483\u767a\u751f\u6642\uff1a\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u3092\u53d6\u308a\u623b\u3059\uff080\uff5e30\u5206\uff09<\/strong><\/h3>\n\n\n\n

1.\u653b\u6483\u30bf\u30a4\u30d7\u306e\u8fc5\u901f\u306a\u8a3a\u65ad<\/strong><\/h4>\n\n\n\n
    \n
  • \u5bfe\u75c7\u7684<\/strong>\u00a0\u2192\u00a0\u653b\u6483\u306e\u7a2e\u985e<\/strong>\u00a0\u2192\u00a0\u5bfe\u5fdc\u30c4\u30fc\u30eb<\/strong><\/li>\n<\/ul>\n\n\n\n
    ! \u30d7\u30ec\u30fc\u30e4\u30fc\u304c\u4e00\u6589\u306b\u30c8\u30e9\u30f3\u30b8\u30a7\u30f3\u30c8\/\u30e9\u30b0\u3092\u767a\u751f \u2192 UDP\u30d5\u30e9\u30c3\u30c7\u30a3\u30f3\u30b0 \u2192 \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u30af\u30ea\u30fc\u30cb\u30f3\u30b0\u3092\u6709\u52b9\u306b\u3059\u308b\n! \u30ed\u30b0\u30a4\u30f3\/\u652f\u6255\u3044\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u9ebb\u75fa \u2192 CC\u653b\u6483 \u2192 \u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u30d5\u30ed\u30fc\u5236\u9650 + \u4eba\u9593\u306b\u3088\u308b\u691c\u8a3c\n! \u30b5\u30fc\u30d0\u63a5\u7d9a\u6570\u30d5\u30eb \u2192 TCP SYN\u30d5\u30e9\u30c3\u30c9 \u2192 \u30ab\u30fc\u30cd\u30eb\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0<\/code><\/pre>\n\n\n\n
    2.\u7dca\u6025\u6642\u306b\u6b62\u8840\u3059\u308b3\u3064\u306e\u30b3\u30c4<\/strong><\/h4>\n\n\n\n
      \n
    • \u30af\u30e9\u30a6\u30c9\u30fb\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u30fb\u30bb\u30b3\u30f3\u30c9\u30fb\u30af\u30ea\u30fc\u30cb\u30f3\u30b0<\/strong>(\u3059\u3079\u3066\u306e\u30d9\u30f3\u30c0\u30fc\u306e\u30b3\u30f3\u30bd\u30fc\u30eb\u3067\u5229\u7528\u53ef\u80fd\uff09\uff1a<\/li>\n<\/ul>\n\n\n\n
      # \u653b\u6483IP\u30bb\u30b0\u30e1\u30f3\u30c8TOP10\u306e\u4e00\u6589\u906e\u65ad\uff08\u76e3\u8996\u30ed\u30b0\u3088\u308a\u62bd\u51fa\uff09\nfor ip in $(cat attack_ips.txt | head -10); do\n  iptables -A INPUT -s $ip -j DROP\n\u5b8c\u4e86<\/code><\/pre>\n\n\n\n
      \u30b3\u30a2\u30fb\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u878d\u5408<\/strong><\/p>\n\n\n\n
      # Nginx\u306e\u30ed\u30b0\u30a4\u30f3\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u306e\u30d5\u30ed\u30fc\u5236\u9650 (1IP\/sec)\n\u30ed\u30b1\u30fc\u30b7\u30e7\u30f3 \/login {\n  limit_req zone=one burst=5 nodelay\uff1b\n  limit_req_status 429; # 429\u30b9\u30c6\u30fc\u30bf\u30b9\u30b3\u30fc\u30c9\u3092\u8fd4\u3059\u3002\n}<\/code><\/pre>\n\n\n\n
        \n
      • \u30aa\u30da\u30ec\u30fc\u30b7\u30e7\u30f3\u306e\u683c\u4e0b\u3052<\/strong>\u30ea\u30a2\u30eb\u30bf\u30a4\u30e0\u30fb\u30dc\u30a4\u30b9\uff0f\u30ef\u30fc\u30eb\u30c9\u30fb\u30c1\u30e3\u30f3\u30cd\u30eb\u3092\u30aa\u30d5\u306b\u3057\u3066\u3001\u6226\u95d8\u3068\u652f\u6255\u3044\u306e\u305f\u3081\u306e\u30b3\u30a2\u30fb\u30ea\u30f3\u30af\u3092\u7dad\u6301\u3059\u308b\u3002<\/li>\n<\/ul>\n\n\n\n
        \n
        \u81f4\u547d\u7684\u306a\u8aa4\u89e3<\/strong>::
        \u2718 \u3084\u307f\u304f\u3082\u306b\u30b5\u30fc\u30d0\u30fc\u3092\u518d\u8d77\u52d5\u3059\u308b(\u30cf\u30c3\u30ab\u30fc\u306e\u30d0\u30c3\u30af\u30c9\u30a2\u3092\u8d77\u52d5\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b)
        \u2718 \u624b\u52d5\u3067\u30eb\u30fc\u30c8\u3092\u8abf\u6574\u3059\u308b\uff08\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u304c\u9ebb\u75fa\u3057\u3084\u3059\u3044\uff09<\/p>\n<\/blockquote>\n\n\n\n
        \n\n\n\n
        II.\u653b\u6483\u4e00\u6642\u4e2d\u65ad\u5f8c\uff1a\u92fc\u9244\u306e\u7832\u8eab\u306b\u3088\u308b\u5b88\u5099\u3092\u69cb\u7bc9\u3059\u308b<\/strong><\/h3>\n\n\n\n
        1.\u30d7\u30ed\u30c8\u30b3\u30eb\u5c64\u306e\u6697\u53f7\u5316 - \u30cf\u30c3\u30ab\u30fc\u304b\u3089\u898b\u3048\u306a\u3044\u3088\u3046\u306b\u3059\u308b<\/strong><\/h4>\n\n\n\n
          \n
        • \u52d5\u7684\u9375\u4ea4\u63db\uff08DKE\uff09<\/strong>(\u5bfe\u7acb\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u507d\u9020\uff09\uff1a<\/li>\n<\/ul>\n\n\n\n
          \/\/ StoneCDN SDK \u306e\u4f8b\uff1a1 \u6642\u9593\u3054\u3068\u306b\u30ad\u30fc\u3092\u5909\u66f4\nStoneSDK.RotateKey(\u9593\u9694: 3600)\uff1b <\/code><\/pre>\n\n\n\n
            \n
          • \u79c1\u7684\u5951\u7d04\u306e\u6df7\u4e71<\/strong>(CDN5\u306e\u30b3\u30a2\u6280\u8853\uff09\uff1a
            \u653b\u6483\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u69cb\u9020\u3092\u7279\u5b9a\u3067\u304d\u306a\u3044\u3088\u3046\u306b\u3001\u30d1\u30b1\u30c3\u30c8\u306e\u7279\u6027\u3092\u30e9\u30f3\u30c0\u30e0\u5316\u3059\u308b\u3002<\/li>\n<\/ul>\n\n\n\n
            2.\u30b7\u30b9\u30c6\u30e0\u5c64\u306e\u5805\u7262\u5316 - \u6839\u672c\u7684\u306a\u8106\u5f31\u6027\u3092\u585e\u3050<\/strong><\/h4>\n\n\n\n
            # \u30a2\u30f3\u30c1SYN\u30d5\u30e9\u30c3\u30c9\u30ab\u30fc\u30cd\u30eb\u30d1\u30e9\u30e1\u30fc\u30bf\uff08\u3059\u3079\u3066\u306eLinux\u30b5\u30fc\u30d0\u306b\u5fc5\u9808\uff09\necho \"net.ipv4.tcp_syncookies=1\" >> \/etc\/sysctl.conf\necho \"net.ipv4.tcp_max_syn_backlog=2048\" >> \/etc\/sysctl.conf\nsysctl -p<\/code><\/pre>\n\n\n\n
            3.\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u30ec\u30d9\u30eb\u306e\u4fdd\u8b77 - \u30d3\u30b8\u30cd\u30b9\u304c\u30aa\u30d5\u30e9\u30a4\u30f3\u306b\u306a\u308b\u3053\u3068\u306f\u306a\u3044<\/strong><\/h4>\n\n\n\n
              \n
            • StoneCDN\u30d7\u30ed\u30b0\u30e9\u30e0<\/strong>::<\/li>\n<\/ul>\n\n\n\n
              \"\"<\/figure>\n\n\n\n
                \n
              • \u6700\u5148\u7aef<\/strong>: 1000\u30c9\u30eb\u30de\u30b7\u30f3 \u30d5\u30ec\u30fc\u30e0\u30ec\u30fc\u30c8\u4f4e\u4e0b <5%\u3001\u30e1\u30e2\u30ea\u30d5\u30c3\u30c8\u30d7\u30ea\u30f3\u30c818MB<\/li>\n\n\n\n
              • \u9069\u7528\u6027<\/strong>\u4e2d\u5c0f\u898f\u6a21\u306e\u30b2\u30fc\u30e0\/APP\uff08\u4fdd\u8b77\u4e0a\u9650300Gbps\uff09<\/li>\n<\/ul>\n\n\n\n
                CDN5\u30d7\u30ed\u30b0\u30e9\u30e0<\/strong>::<\/p>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                  \n
                • \u6700\u5148\u7aef<\/strong>510Gbps\uff0b\u30cf\u30a4\u30d6\u30ea\u30c3\u30c9\u30fb\u30a2\u30bf\u30c3\u30af\u306e\u5834\u5408<\/li>\n\n\n\n
                • \u5bfe\u4fa1<\/strong>\u6df1\u3044\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u304c\u5fc5\u8981\uff08\u975e\u540c\u671f\u30ed\u30fc\u30c9\u306e\u7af6\u5408\u306f\u624b\u52d5\u3067\u4fee\u6b63\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\uff09<\/li>\n<\/ul>\n\n\n\n
                  III.\u7a76\u6975\u306e\u30c7\u30a3\u30d5\u30a7\u30f3\u30b9\uff1a\u30d3\u30b8\u30cd\u30b9\u907a\u4f1d\u5b66\u306b\u3088\u308b2\u5bfe1<\/strong><\/h3>\n\n\n\n
                  \u30b7\u30ca\u30ea\u30aa1\uff1a\u4e2d\u5c0f\u898f\u6a21\u306e\u30c1\u30fc\u30e0\u304c\u5b89\u5b9a\u3068\u5b89\u5fc3\u3092\u6c42\u3081\u308b \u2192 StoneCDN<\/strong><\/h4>\n\n\n\n
                    \n
                  • \u7d71\u5408\u30b9\u30d4\u30fc\u30c9<\/strong>: Unity\u30d7\u30e9\u30b0\u30a4\u30f3\u309210\u5206\u3067\u30a4\u30f3\u30dd\u30fc\u30c8\u3001API\u306f3\u3064\u306e\u95a2\u6570\u306e\u307f<\/li>\n\n\n\n
                  • \u52d5\u7684\u52a3\u5316<\/strong>\u5f31\u3044\u653b\u6483\u306b\u306f\u8efd\u3044\u6697\u53f7\u5316(\u7701\u96fb\u529b30%)\u3092\u3001\u5f37\u3044\u653b\u6483\u306b\u306fAES-256\u3092\u4f7f\u3046\u3002<\/li>\n\n\n\n
                  • \u30b3\u30b9\u30c8\u6bd4\u8f03<\/strong>\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf \u4f1d\u7d71\u7684\u306a\u9ad8\u9632\u5fa1 IPStoneCDN300G \u4fdd\u8b77 90,000\u5186\/\u6708 4800\u5186\/\u6708 \u30d5\u30ec\u30fc\u30e0\u30ec\u30fc\u30c8 \u30a4\u30f3\u30d1\u30af\u30c8 \u30af\u30ea\u30fc\u30cb\u30f3\u30b0 \u30c7\u30a3\u30ec\u30a4 200ms + \u5343\u30c9\u30eb\u30de\u30b7\u30f3 38 \u2192 36fps<\/li>\n<\/ul>\n\n\n\n
                    \u30b7\u30ca\u30ea\u30aa2\uff1a\u6280\u8853\u30c1\u30fc\u30e0\u304c\u6975\u7aef\u306a\u30d1\u30f3\u30c1\u8010\u6027\u3092\u8ffd\u6c42 \u2192 CDN5<\/strong><\/h4>\n\n\n\n
                      \n
                    • \u30a2\u30f3\u30c1\u30cf\u30a4\u30d6\u30ea\u30c3\u30c9\u653b\u6483<\/strong>::\n
                        \n
                      • 510Gbps\u306eUDP\u30d5\u30e9\u30c3\u30c9\uff0b87\u4e07\/\u79d2\u306eCC\u653b\u6483\u30d5\u30eb\u30d6\u30ed\u30c3\u30af<\/li>\n\n\n\n
                      • \u300c1\u53f0\u306e\u30de\u30b7\u30f3\u30671\u3064\u306e\u79d8\u5bc6\u300d\u30c0\u30a4\u30ca\u30df\u30c3\u30af\u30fb\u30ad\u30fc\uff08\u30cf\u30c3\u30ab\u30fc\u304c\u507d\u9020\u3059\u308b\u30b3\u30b9\u30c8\u306f20\u500d\u9ad8\u3044\uff09<\/li>\n<\/ul>\n<\/li>\n\n\n\n
                      • QUIC\u30a2\u30af\u30bb\u30e9\u30ec\u30fc\u30b7\u30e7\u30f3<\/strong>::
                        \u6771\u5357\u30a2\u30b8\u30a2\u306e\u30d7\u30ec\u30fc\u30e4\u30fc\u306e\u30ec\u30a4\u30c6\u30f3\u30b7\u30fc\u304c186ms\u304b\u308962ms\u3078\uff08\u30ea\u30c6\u30f3\u30b7\u30e7\u30f3+14%\uff09<\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"
                        \u5348\u524d3\u6642\u3001\u643a\u5e2f\u96fb\u8a71\u306e\u30a2\u30e9\u30fc\u30e0\u304c\u7206\u767a\u3057\u305f - \u30b5\u30fc\u30d0\u30fc\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u901a\u5e38\u306e300\u500d\u306b\u9ad8\u9a30\u3057\u3001\u30d7\u30ec\u30a4\u30e4\u30fc\u304c\u72c2\u3063\u305f\u30c9\u30ed\u30c3\u30d7\u30e9\u30a4\u30f3\u3002\u53e4\u3044\u9283\u306e\u3086\u3067\u30cf\u30b23\u30c6\u30af\u30cb\u30ab\u30eb\u30c7\u30a3\u30ec\u30af\u30bf\u30fc\u3068\u3057\u3066\u3001\u79c1\u306f\u7d4c\u9a13\u306e\u8840\u3068\u6d99\u3092\u4f7f\u7528\u3057\u3066\u3001 \"\u9ec4\u91d1\u306e30\u5206 \"\u7dca\u6025\u30d7\u30ed\u30bb\u30b9+\u6cbb\u7642\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u3053\u306e\u30bb\u30c3\u30c8\u3092\u307e\u3068\u3081\u305f\u3002 \u307e\u305a\u3001\u653b\u6483\u304c\u52c3\u767a\u3057\u305f\u3068\u304d\uff1a\u30d0\u30c3\u30af\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb[...]\u3092\u3064\u304b\u3080\u3002<\/p>","protected":false},"author":1,"featured_media":10251,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[25,26],"class_list":["post-10248","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-ddos"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/posts\/10248","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/comments?post=10248"}],"version-history":[{"count":1,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/posts\/10248\/revisions"}],"predecessor-version":[{"id":10252,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/posts\/10248\/revisions\/10252"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/media\/10251"}],"wp:attachment":[{"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/media?parent=10248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/categories?post=10248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stonecdn.com\/ja\/wp-json\/wp\/v2\/tags?post=10248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}