{"id":22,"date":"2026-03-21T06:01:33","date_gmt":"2026-03-20T23:01:33","guid":{"rendered":"https:\/\/ivi.vn\/blog\/chong-ddos-co-ban\/"},"modified":"2026-08-24T16:00:20","modified_gmt":"2026-08-24T09:00:20","slug":"chong-ddos-co-ban","status":"publish","type":"post","link":"https:\/\/ivi.vn\/blog\/chong-ddos-co-ban\/","title":{"rendered":"K\u1ef9 thu\u1eadt ch\u1ed1ng DDoS c\u01a1 b\u1ea3n khi qu\u1ea3n tr\u1ecb Web"},"content":{"rendered":"<p>Website \u0111ang ch\u1ea1y qu\u1ea3ng c\u00e1o b\u1ed7ng ph\u1ea3n h\u1ed3i ch\u1eadm r\u1ed3i ng\u1eebng h\u1eb3n, trong khi b\u1ea3ng th\u1ed1ng k\u00ea hi\u1ec3n th\u1ecb l\u01b0\u1ee3ng truy c\u1eadp t\u0103ng v\u1ecdt. \u0110\u00f3 l\u00e0 l\u00fac b\u1ea1n ph\u1ea3i tr\u1ea3 l\u1eddi m\u1ed9t c\u00e2u h\u1ecfi trong v\u00e0i ph\u00fat: \u0111\u00e2y l\u00e0 kh\u00e1ch th\u1eadt \u0111\u00f4ng b\u1ea5t th\u01b0\u1eddng, l\u00e0 bot c\u00e0o d\u1eef li\u1ec7u, hay l\u00e0 m\u1ed9t \u0111\u1ee3t t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5.<\/p>\n<p>B\u00e0i n\u00e0y vi\u1ebft \u1edf t\u1ea7ng ph\u00f2ng th\u1ee7 cho ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb website v\u1eeba v\u00e0 nh\u1ecf: c\u00e1ch nh\u1eadn bi\u1ebft, c\u00e1c l\u1edbp b\u1ea3o v\u1ec7 n\u00ean d\u1ef1ng s\u1eb5n, v\u00e0 tr\u00ecnh t\u1ef1 thao t\u00e1c khi s\u1ef1 c\u1ed1 \u0111ang di\u1ec5n ra. Kh\u00f4ng c\u00f3 ph\u1ea7n n\u00e0o n\u00f3i v\u1ec1 c\u00e1ch t\u1ea5n c\u00f4ng, v\u00ec \u0111\u00f3 l\u00e0 vi\u1ec7c tr\u00e1i ph\u00e1p lu\u1eadt v\u00e0 c\u0169ng kh\u00f4ng gi\u00fap b\u1ea1n ph\u00f2ng th\u1ee7 t\u1ed1t h\u01a1n.<\/p>\n<h2>Hi\u1ec3u \u0111\u00fang v\u1ea5n \u0111\u1ec1 tr\u01b0\u1edbc khi mua gi\u1ea3i ph\u00e1p<\/h2>\n<p>T\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 ph\u00e2n t\u00e1n nh\u1eafm t\u1edbi vi\u1ec7c l\u00e0m c\u1ea1n m\u1ed9t lo\u1ea1i t\u00e0i nguy\u00ean n\u00e0o \u0111\u00f3. V\u1edbi ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb, ch\u1ec9 c\u1ea7n ph\u00e2n bi\u1ec7t hai nh\u00f3m:<\/p>\n<ul>\n<li><strong>Nh\u00f3m g\u00e2y ng\u1eadp b\u0103ng th\u00f4ng v\u00e0 k\u1ebft n\u1ed1i:<\/strong> l\u01b0u l\u01b0\u1ee3ng r\u00e1c \u0111\u1ed5 v\u00e0o \u0111\u01b0\u1eddng truy\u1ec1n ho\u1eb7c m\u1edf th\u1eadt nhi\u1ec1u k\u1ebft n\u1ed1i d\u1edf dang. M\u00e1y ch\u1ee7 ch\u01b0a k\u1ecbp x\u1eed l\u00fd g\u00ec th\u00ec \u0111\u01b0\u1eddng \u0111\u00e3 t\u1eafc. Lo\u1ea1i n\u00e0y g\u1ea7n nh\u01b0 kh\u00f4ng th\u1ec3 ch\u1ed1ng b\u1eb1ng c\u1ea5u h\u00ecnh ph\u1ea7n m\u1ec1m tr\u00ean ch\u00ednh m\u00e1y ch\u1ee7 \u0111\u00f3 \u2014 ph\u1ea3i c\u00f3 m\u1ed9t l\u1edbp l\u1ecdc \u0111\u1ee9ng tr\u01b0\u1edbc.<\/li>\n<li><strong>Nh\u00f3m nh\u1eafm v\u00e0o \u1ee9ng d\u1ee5ng:<\/strong> g\u1eedi c\u00e1c y\u00eau c\u1ea7u tr\u00f4ng nh\u01b0 ng\u01b0\u1eddi th\u1eadt nh\u01b0ng ch\u1ecdn \u0111\u00fang nh\u1eefng trang t\u1ed1n t\u00e0i nguy\u00ean nh\u1ea5t \u2014 trang t\u00ecm ki\u1ebfm n\u1ed9i b\u1ed9, trang l\u1ecdc s\u1ea3n ph\u1ea9m nhi\u1ec1u tham s\u1ed1, trang \u0111\u0103ng nh\u1eadp. S\u1ed1 y\u00eau c\u1ea7u kh\u00f4ng c\u1ea7n nhi\u1ec1u, ch\u1ec9 c\u1ea7n \u0111\u1ee7 \u0111\u1ec3 l\u1ea5p h\u1ebft ti\u1ebfn tr\u00ecnh x\u1eed l\u00fd. \u0110\u00e2y l\u00e0 lo\u1ea1i m\u00e0 website nh\u1ecf hay g\u1eb7p nh\u1ea5t, v\u00e0 c\u0169ng l\u00e0 lo\u1ea1i b\u1ea1n t\u1ef1 l\u00e0m \u0111\u01b0\u1ee3c nhi\u1ec1u nh\u1ea5t.<\/li>\n<\/ul>\n<p>C\u1ea7n ph\u00e2n bi\u1ec7t v\u1edbi hai hi\u1ec7n t\u01b0\u1ee3ng d\u1ec5 nh\u1ea7m: m\u1ed9t l\u00e0 bot thu th\u1eadp d\u1eef li\u1ec7u ch\u1ea1y qu\u00e1 nhanh (ch\u1ec9 c\u1ea7n \u0111i\u1ec1u ti\u1ebft, kh\u00f4ng ph\u1ea3i k\u1ebb t\u1ea5n c\u00f4ng); hai l\u00e0 ch\u00ednh website c\u1ee7a b\u1ea1n thi\u1ebfu b\u1ed9 nh\u1edb \u0111\u1ec7m n\u00ean ch\u1ec9 v\u00e0i tr\u0103m ng\u01b0\u1eddi truy c\u1eadp c\u00f9ng l\u00fac \u0111\u00e3 \u0111\u1ee7 s\u1eadp. Tr\u01b0\u1eddng h\u1ee3p th\u1ee9 hai kh\u00f4ng c\u1ea7n ch\u1ed1ng t\u1ea5n c\u00f4ng, c\u1ea7n t\u1ed1i \u01b0u.<\/p>\n<h2>Nh\u1eadn bi\u1ebft: \u0111\u1ecdc d\u1ea5u hi\u1ec7u thay v\u00ec \u0111o\u00e1n<\/h2>\n<table>\n<thead>\n<tr>\n<th>D\u1ea5u hi\u1ec7u quan s\u00e1t \u0111\u01b0\u1ee3c<\/th>\n<th>Nghi\u00eang v\u1ec1 kh\u1ea3 n\u0103ng<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>L\u01b0u l\u01b0\u1ee3ng t\u0103ng, \u0111\u01a1n h\u00e0ng v\u00e0 th\u1eddi gian \u1edf l\u1ea1i trang c\u0169ng t\u0103ng theo<\/td>\n<td>Kh\u00e1ch th\u1eadt, c\u1ea7n t\u0103ng n\u0103ng l\u1ef1c ph\u1ee5c v\u1ee5<\/td>\n<\/tr>\n<tr>\n<td>L\u01b0u l\u01b0\u1ee3ng t\u0103ng g\u1ea5p nhi\u1ec1u l\u1ea7n nh\u01b0ng chuy\u1ec3n \u0111\u1ed5i b\u1eb1ng kh\u00f4ng<\/td>\n<td>Bot ho\u1eb7c t\u1ea5n c\u00f4ng<\/td>\n<\/tr>\n<tr>\n<td>Y\u00eau c\u1ea7u d\u1ed3n v\u00e0o m\u1ed9t \u0111\u01b0\u1eddng d\u1eabn duy nh\u1ea5t, nhi\u1ec1u tham s\u1ed1 l\u1ea1<\/td>\n<td>T\u1ea5n c\u00f4ng t\u1ea7ng \u1ee9ng d\u1ee5ng<\/td>\n<\/tr>\n<tr>\n<td>C\u00f9ng m\u1ed9t chu\u1ed7i nh\u1eadn d\u1ea1ng tr\u00ecnh duy\u1ec7t l\u1eb7p l\u1ea1i h\u00e0ng lo\u1ea1t<\/td>\n<td>C\u00f4ng c\u1ee5 t\u1ef1 \u0111\u1ed9ng<\/td>\n<\/tr>\n<tr>\n<td>R\u1ea5t nhi\u1ec1u k\u1ebft n\u1ed1i \u1edf tr\u1ea1ng th\u00e1i n\u1eeda m\u1edf<\/td>\n<td>T\u1ea5n c\u00f4ng t\u1ea7ng k\u1ebft n\u1ed1i<\/td>\n<\/tr>\n<tr>\n<td>Ti\u1ebfn tr\u00ecnh x\u1eed l\u00fd m\u00e3 ngu\u1ed3n chi\u1ebfm h\u1ebft, c\u01a1 s\u1edf d\u1eef li\u1ec7u ch\u1edd kho\u00e1<\/td>\n<td>\u0110ang b\u1ecb b\u00e0o b\u1eb1ng truy v\u1ea5n n\u1eb7ng<\/td>\n<\/tr>\n<tr>\n<td>B\u0103ng th\u00f4ng ch\u1ea1m tr\u1ea7n trong khi s\u1ed1 y\u00eau c\u1ea7u kh\u00f4ng t\u0103ng t\u01b0\u01a1ng \u1ee9ng<\/td>\n<td>C\u00f3 t\u1ec7p l\u1edbn \u0111ang b\u1ecb t\u1ea3i l\u1eb7p, ho\u1eb7c ng\u1eadp b\u0103ng th\u00f4ng<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>V\u00e0i l\u1ec7nh \u0111\u1ecdc t\u00ecnh h\u00ecnh nhanh tr\u00ean m\u00e1y ch\u1ee7 Linux:<\/p>\n<pre>\n# \u0110\u1ebfm s\u1ed1 k\u1ebft n\u1ed1i theo tr\u1ea1ng th\u00e1i\nss -ant | awk '{print $1}' | sort | uniq -c | sort -rn\n# C\u00e1c \u0111\u01b0\u1eddng d\u1eabn b\u1ecb g\u1ecdi nhi\u1ec1u nh\u1ea5t trong nh\u1eadt k\u00fd truy c\u1eadp\nawk '{print $7}' \/var\/log\/nginx\/access.log | sort | uniq -c | sort -rn | head -20\n# Ph\u00e2n b\u1ed1 theo \u0111\u1ecba ch\u1ec9 ngu\u1ed3n\nawk '{print $1}' \/var\/log\/nginx\/access.log | sort | uniq -c | sort -rn | head -20\n# Theo d\u00f5i t\u1ea3i v\u00e0 ti\u1ebfn tr\u00ecnh theo th\u1eddi gian th\u1ef1c\ntop -o %CPU\n<\/pre>\n<p>Ghi l\u1ea1i k\u1ebft qu\u1ea3 ngay l\u00fac s\u1ef1 c\u1ed1. Sau khi m\u1ecdi th\u1ee9 \u1ed5n \u0111\u1ecbnh, nh\u1eadt k\u00fd th\u01b0\u1eddng b\u1ecb xoay v\u00f2ng v\u00e0 b\u1ea1n m\u1ea5t b\u1eb1ng ch\u1ee9ng \u0111\u1ec3 r\u00fat kinh nghi\u1ec7m.<\/p>\n<h2>S\u00e1u l\u1edbp ph\u00f2ng th\u1ee7 n\u00ean d\u1ef1ng s\u1eb5n<\/h2>\n<h3>1. \u0110\u1eb7t m\u1ed9t l\u1edbp l\u1ecdc \u0111\u1ee9ng tr\u01b0\u1edbc m\u00e1y ch\u1ee7<\/h3>\n<p>\u0110\u00e2y l\u00e0 bi\u1ec7n ph\u00e1p c\u00f3 hi\u1ec7u qu\u1ea3 cao nh\u1ea5t v\u00e0 c\u0169ng d\u1ec5 tri\u1ec3n khai nh\u1ea5t. M\u1ed9t m\u1ea1ng ph\u00e2n ph\u1ed1i n\u1ed9i dung ho\u1eb7c d\u1ecbch v\u1ee5 l\u1ecdc trung gian s\u1ebd nh\u1eadn l\u01b0u l\u01b0\u1ee3ng thay b\u1ea1n, h\u1ea5p th\u1ee5 ph\u1ea7n r\u00e1c \u1edf t\u1ea7ng m\u1ea1ng v\u00e0 ch\u1ec9 chuy\u1ec3n v\u1ec1 m\u00e1y ch\u1ee7 g\u1ed1c ph\u1ea7n y\u00eau c\u1ea7u h\u1ee3p l\u1ec7. V\u1edbi nh\u00f3m t\u1ea5n c\u00f4ng g\u00e2y ng\u1eadp b\u0103ng th\u00f4ng, \u0111\u00e2y g\u1ea7n nh\u01b0 l\u00e0 c\u00e1ch duy nh\u1ea5t kh\u1ea3 thi cho website v\u1eeba v\u00e0 nh\u1ecf.<\/p>\n<p>Khi ch\u1ecdn, h\u00e3y nh\u00ecn v\u00e0o ba n\u0103ng l\u1ef1c c\u1ee5 th\u1ec3 thay v\u00ec l\u1eddi qu\u1ea3ng c\u00e1o: c\u00f3 b\u1eadt \u0111\u01b0\u1ee3c ch\u1ebf \u0111\u1ed9 ki\u1ec3m tra tr\u00ecnh duy\u1ec7t cho to\u00e0n site kh\u00f4ng, c\u00f3 \u0111\u1eb7t \u0111\u01b0\u1ee3c lu\u1eadt gi\u1edbi h\u1ea1n t\u1ea7n su\u1ea5t theo \u0111\u01b0\u1eddng d\u1eabn kh\u00f4ng, v\u00e0 c\u00f3 cho xem nh\u1eadt k\u00fd \u0111\u1ec3 b\u1ea1n bi\u1ebft c\u00e1i g\u00ec \u0111\u00e3 b\u1ecb ch\u1eb7n kh\u00f4ng.<\/p>\n<h3>2. Kh\u00f4ng \u0111\u1ec3 l\u1ed9 \u0111\u1ecba ch\u1ec9 m\u00e1y ch\u1ee7 g\u1ed1c<\/h3>\n<p>D\u1ef1ng l\u1edbp l\u1ecdc ph\u00eda tr\u01b0\u1edbc m\u00e0 \u0111\u1ecba ch\u1ec9 m\u00e1y ch\u1ee7 g\u1ed1c v\u1eabn c\u00f4ng khai th\u00ec l\u01b0u l\u01b0\u1ee3ng c\u00f3 th\u1ec3 \u0111i v\u00f2ng qua l\u1edbp l\u1ecdc. Nh\u1eefng ch\u1ed7 hay l\u00e0m l\u1ed9:<\/p>\n<ul>\n<li>B\u1ea3n ghi DNS c\u0169 c\u00f2n s\u00f3t l\u1ea1i c\u1ee7a t\u00ean mi\u1ec1n con kh\u00f4ng d\u00f9ng n\u1eefa.<\/li>\n<li>B\u1ea3n ghi ph\u1ee5c v\u1ee5 th\u01b0 \u0111i\u1ec7n t\u1eed tr\u1ecf th\u1eb3ng v\u00e0o c\u00f9ng m\u00e1y ch\u1ee7 \u0111\u1eb7t website.<\/li>\n<li>Th\u01b0 do \u1ee9ng d\u1ee5ng g\u1eedi \u0111i mang ti\u00eau \u0111\u1ec1 ch\u1ee9a \u0111\u1ecba ch\u1ec9 m\u00e1y ch\u1ee7.<\/li>\n<li>Ch\u1ee9ng ch\u1ec9 b\u1ea3o m\u1eadt c\u1ea5p cho t\u00ean mi\u1ec1n n\u1ed9i b\u1ed9, tra \u0111\u01b0\u1ee3c trong nh\u1eadt k\u00fd minh b\u1ea1ch ch\u1ee9ng ch\u1ec9 c\u00f4ng khai.<\/li>\n<\/ul>\n<p>Vi\u1ec7c c\u1ea7n l\u00e0m k\u00e8m theo: c\u1ea5u h\u00ecnh m\u00e1y ch\u1ee7 web <strong>t\u1eeb ch\u1ed1i m\u1ecdi y\u00eau c\u1ea7u kh\u00f4ng \u0111i qua l\u1edbp l\u1ecdc<\/strong> \u2014 ho\u1eb7c b\u1eb1ng t\u01b0\u1eddng l\u1eeda ch\u1ec9 ch\u1ea5p nh\u1eadn d\u1ea3i \u0111\u1ecba ch\u1ec9 c\u1ee7a l\u1edbp l\u1ecdc, ho\u1eb7c b\u1eb1ng c\u00e1ch y\u00eau c\u1ea7u m\u1ed9t ti\u00eau \u0111\u1ec1 b\u00ed m\u1eadt. Kh\u00f4ng c\u00f3 b\u01b0\u1edbc n\u00e0y th\u00ec vi\u1ec7c gi\u1ea5u \u0111\u1ecba ch\u1ec9 ch\u1ec9 l\u00e0 che m\u1eaft.<\/p>\n<h3>3. B\u1eadt b\u1ed9 nh\u1edb \u0111\u1ec7m to\u00e0n trang<\/h3>\n<p>M\u1ed7i y\u00eau c\u1ea7u \u0111\u01b0\u1ee3c tr\u1ea3 t\u1eeb b\u1ed9 nh\u1edb \u0111\u1ec7m l\u00e0 m\u1ed9t y\u00eau c\u1ea7u kh\u00f4ng ch\u1ea1m t\u1edbi m\u00e3 ngu\u1ed3n v\u00e0 c\u01a1 s\u1edf d\u1eef li\u1ec7u. Kho\u1ea3ng c\u00e1ch gi\u1eefa hai tr\u01b0\u1eddng h\u1ee3p th\u01b0\u1eddng l\u00e0 v\u00e0i b\u1eadc \u0111\u1ed9 l\u1edbn v\u1ec1 t\u00e0i nguy\u00ean ti\u00eau t\u1ed1n. V\u1edbi website n\u1ed9i dung, b\u1eadt b\u1ed9 nh\u1edb \u0111\u1ec7m to\u00e0n trang l\u00e0 bi\u1ec7n ph\u00e1p ch\u1ed1ng qu\u00e1 t\u1ea3i r\u1ebb nh\u1ea5t m\u00e0 l\u1ea1i c\u00f3 \u00edch c\u1ea3 ng\u00e0y th\u01b0\u1eddng.<\/p>\n<p>Ba \u0111i\u1ec3m c\u1ea7n ch\u00fa \u00fd: \u0111\u1eb7t th\u1eddi gian s\u1ed1ng c\u1ee7a b\u1ea3n \u0111\u1ec7m \u0111\u1ee7 d\u00e0i; lo\u1ea1i tr\u1eeb \u0111\u00fang c\u00e1c trang c\u1ea7n c\u00e1 nh\u00e2n ho\u00e1 nh\u01b0 gi\u1ecf h\u00e0ng v\u00e0 t\u00e0i kho\u1ea3n; v\u00e0 c\u1ea9n th\u1eadn v\u1edbi vi\u1ec7c \u0111\u1eb7t cookie tr\u00ean m\u1ecdi ph\u1ea3n h\u1ed3i, v\u00ec \u0111\u00f3 l\u00e0 l\u00fd do ph\u1ed5 bi\u1ebfn khi\u1ebfn l\u1edbp \u0111\u1ec7m ph\u00eda tr\u01b0\u1edbc kh\u00f4ng bao gi\u1edd l\u01b0u \u0111\u01b0\u1ee3c g\u00ec.<\/p>\n<h3>4. T\u00e1ch t\u00e0i nguy\u00ean t\u0129nh ra kh\u1ecfi \u0111\u01b0\u1eddng x\u1eed l\u00fd \u0111\u1ed9ng<\/h3>\n<p>\u1ea2nh, video, t\u1ec7p CSS v\u00e0 JavaScript n\u00ean \u0111\u01b0\u1ee3c ph\u1ee5c v\u1ee5 t\u1eeb l\u1edbp ph\u00e2n ph\u1ed1i n\u1ed9i dung v\u1edbi th\u1eddi h\u1ea1n l\u01b0u tr\u1eef d\u00e0i, \u0111\u1eb7t t\u00ean t\u1ec7p c\u00f3 g\u1eafn phi\u00ean b\u1ea3n \u0111\u1ec3 \u0111\u1ed5i n\u1ed9i dung th\u00ec \u0111\u1ed5i t\u00ean. Nh\u01b0 v\u1eady ph\u1ea7n l\u1edbn s\u1ed1 y\u00eau c\u1ea7u v\u00e0 ph\u1ea7n l\u1edbn b\u0103ng th\u00f4ng kh\u00f4ng bao gi\u1edd t\u1edbi m\u00e1y ch\u1ee7 g\u1ed1c, v\u00e0 khi c\u00f3 s\u1ef1 c\u1ed1 th\u00ec m\u00e1y ch\u1ee7 g\u1ed1c ch\u1ec9 c\u00f2n ph\u1ea3i lo ph\u1ea7n \u0111\u1ed9ng.<\/p>\n<h3>5. Gi\u1edbi h\u1ea1n t\u1ea7n su\u1ea5t v\u00e0 gi\u1edbi h\u1ea1n k\u1ebft n\u1ed1i<\/h3>\n<p>\u0110\u00e2y l\u00e0 tuy\u1ebfn ph\u00f2ng th\u1ee7 t\u1ea1i ch\u1ed7, n\u00ean \u0111\u1eb7t ngay c\u1ea3 khi \u0111\u00e3 c\u00f3 l\u1edbp l\u1ecdc ph\u00eda tr\u01b0\u1edbc. Nguy\u00ean t\u1eafc: m\u1ed7i ngu\u1ed3n ch\u1ec9 \u0111\u01b0\u1ee3c g\u1ecdi m\u1ed9t \u0111\u01b0\u1eddng d\u1eabn nh\u1ea5t \u0111\u1ecbnh v\u1edbi t\u1ea7n su\u1ea5t h\u1ee3p l\u00fd; v\u01b0\u1ee3t ng\u01b0\u1ee1ng th\u00ec b\u1ecb l\u00e0m ch\u1eadm r\u1ed3i m\u1edbi b\u1ecb t\u1eeb ch\u1ed1i.<\/p>\n<pre>\n# V\u00ed d\u1ee5 c\u1ea5u h\u00ecnh nginx: hai v\u00f9ng \u0111o, m\u1ed9t cho to\u00e0n site, m\u1ed9t cho trang \u0111\u0103ng nh\u1eadp\nlimit_req_zone  $binary_remote_addr zone=chung:10m   rate=10r\/s;\nlimit_req_zone  $binary_remote_addr zone=dangnhap:10m rate=1r\/s;\nlimit_conn_zone $binary_remote_addr zone=ketnoi:10m;\nserver {\n    # Cho ph\u00e9p b\u00f9ng ng\u1eafn h\u1ea1n, kh\u00f4ng tr\u1ea3 l\u1ed7i ngay\n    limit_req  zone=chung burst=20 nodelay;\n    limit_conn ketnoi 20;\n    client_body_timeout   10s;\n    client_header_timeout 10s;\n    send_timeout          10s;\n    location = \/wp-login.php {\n        limit_req zone=dangnhap burst=5 nodelay;\n    }\n}\n<\/pre>\n<p>\u0110\u1eb7t ng\u01b0\u1ee1ng b\u1eb1ng c\u00e1ch \u0111o l\u01b0u l\u01b0\u1ee3ng ng\u00e0y th\u01b0\u1eddng tr\u01b0\u1edbc, r\u1ed3i l\u1ea5y m\u1ee9c \u0111\u1ec9nh nh\u00e2n l\u00ean v\u00e0i l\u1ea7n. Ng\u01b0\u1ee1ng qu\u00e1 ch\u1eb7t s\u1ebd ch\u1eb7n nh\u1ea7m kh\u00e1ch th\u1eadt v\u00e0 c\u1ea3 bot c\u1ee7a c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm. Sau khi b\u1eadt, h\u00e3y theo d\u00f5i nh\u1eadt k\u00fd v\u00e0i ng\u00e0y \u0111\u1ec3 ch\u1ec9nh l\u1ea1i.<\/p>\n<h3>6. Kho\u00e1 b\u1edbt c\u00e1c \u0111i\u1ec3m t\u1ed1n t\u00e0i nguy\u00ean<\/h3>\n<ul>\n<li>Trang t\u00ecm ki\u1ebfm n\u1ed9i b\u1ed9: y\u00eau c\u1ea7u \u0111\u1ed9 d\u00e0i t\u1eeb kho\u00e1 t\u1ed1i thi\u1ec3u, \u0111\u1eb7t gi\u1edbi h\u1ea1n t\u1ea7n su\u1ea5t ri\u00eang, v\u00e0 \u0111\u1ec7m k\u1ebft qu\u1ea3 cho c\u00e1c t\u1eeb kho\u00e1 ph\u1ed5 bi\u1ebfn.<\/li>\n<li>Giao di\u1ec7n l\u1eadp tr\u00ecnh c\u0169 kh\u00f4ng d\u00f9ng t\u1edbi: t\u1eaft h\u1eb3n thay v\u00ec \u0111\u1ec3 m\u1edf.<\/li>\n<li>Trang \u0111\u0103ng nh\u1eadp v\u00e0 trang qu\u1ea3n tr\u1ecb: gi\u1edbi h\u1ea1n theo \u0111\u1ecba ch\u1ec9 ngu\u1ed3n n\u1ebfu \u0111\u01b0\u1ee3c, b\u1eadt x\u00e1c th\u1ef1c nhi\u1ec1u b\u01b0\u1edbc, \u0111\u1eb7t \u0111\u1ed9 tr\u1ec5 t\u0103ng d\u1ea7n sau m\u1ed7i l\u1ea7n sai.<\/li>\n<li>C\u00e1c \u0111\u01b0\u1eddng d\u1eabn sinh t\u1ec7p n\u1eb7ng theo y\u00eau c\u1ea7u nh\u01b0 xu\u1ea5t b\u00e1o c\u00e1o hay t\u1ea1o \u1ea3nh \u0111\u1ed9ng: \u0111\u01b0a v\u00e0o h\u00e0ng \u0111\u1ee3i x\u1eed l\u00fd n\u1ec1n v\u00e0 y\u00eau c\u1ea7u \u0111\u0103ng nh\u1eadp.<\/li>\n<li>Ch\u1ee9c n\u0103ng g\u1eedi th\u01b0 t\u1eeb bi\u1ec3u m\u1eabu c\u00f4ng khai: th\u00eam b\u01b0\u1edbc x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng v\u00e0 gi\u1edbi h\u1ea1n s\u1ed1 l\u1ea7n g\u1eedi.<\/li>\n<\/ul>\n<h2>Chu\u1ea9n b\u1ecb tr\u01b0\u1edbc \u0111\u1ec3 kh\u00f4ng ph\u1ea3i xoay x\u1edf l\u00fac \u0111ang ch\u00e1y<\/h2>\n<ol>\n<li><strong>H\u1ea1 TTL c\u1ee7a c\u00e1c b\u1ea3n ghi DNS quan tr\u1ecdng<\/strong> xu\u1ed1ng m\u1ee9c th\u1ea5p v\u00e0 gi\u1eef nh\u01b0 v\u1eady. Khi c\u1ea7n chuy\u1ec3n h\u01b0\u1edbng l\u01b0u l\u01b0\u1ee3ng kh\u1ea9n c\u1ea5p, TTL cao s\u1ebd tr\u00f3i b\u1ea1n h\u00e0ng gi\u1edd.<\/li>\n<li><strong>Gi\u00e1m s\u00e1t t\u1eeb b\u00ean ngo\u00e0i<\/strong> v\u1edbi c\u1ea3nh b\u00e1o qua k\u00eanh b\u1ea1n th\u1eadt s\u1ef1 \u0111\u1ecdc. Bi\u1ebft s\u1edbm 10 ph\u00fat l\u00e0 kh\u00e1c bi\u1ec7t l\u1edbn.<\/li>\n<li><strong>Vi\u1ebft s\u1eb5n s\u1ed5 tay x\u1eed l\u00fd<\/strong>: ai l\u00e0m g\u00ec, \u0111\u0103ng nh\u1eadp \u1edf \u0111\u00e2u, b\u1eadt ch\u1ebf \u0111\u1ed9 ph\u00f2ng th\u1ee7 \u1edf \u0111\u00e2u, s\u1ed1 li\u00ean h\u1ec7 c\u1ee7a nh\u00e0 cung c\u1ea5p h\u1ea1 t\u1ea7ng.<\/li>\n<li><strong>Chu\u1ea9n b\u1ecb s\u1eb5n trang t\u0129nh d\u1ef1 ph\u00f2ng<\/strong> ch\u1ec9 g\u1ed3m HTML v\u00e0 th\u00f4ng tin li\u00ean h\u1ec7, c\u00f3 th\u1ec3 b\u1eadt l\u00ean khi c\u1ea7n ch\u1ecbu t\u1ea3i m\u00e0 kh\u00f4ng c\u1ea7n c\u01a1 s\u1edf d\u1eef li\u1ec7u.<\/li>\n<li><strong>Ki\u1ec3m tra b\u1ea3n sao l\u01b0u b\u1eb1ng c\u00e1ch kh\u00f4i ph\u1ee5c th\u1eed.<\/strong> B\u1ea3n sao l\u01b0u ch\u01b0a t\u1eebng kh\u00f4i ph\u1ee5c kh\u00f4ng t\u00ednh l\u00e0 b\u1ea3n sao l\u01b0u.<\/li>\n<li><strong>Bi\u1ebft tr\u1ea7n ch\u1ecbu t\u1ea3i c\u1ee7a m\u00ecnh<\/strong>: ch\u1ea1y m\u1ed9t ph\u00e9p \u0111o t\u1ea3i tr\u00ean m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m c\u1ee7a ch\u00ednh b\u1ea1n \u0111\u1ec3 bi\u1ebft ng\u01b0\u1ee1ng g\u00e3y n\u1eb1m \u1edf \u0111\u00e2u.<\/li>\n<\/ol>\n<h2>Khi \u0111ang b\u1ecb t\u1ea5n c\u00f4ng: th\u1ee9 t\u1ef1 thao t\u00e1c<\/h2>\n<ol>\n<li><strong>X\u00e1c nh\u1eadn \u0111\u00fang hi\u1ec7n t\u01b0\u1ee3ng.<\/strong> Xem nh\u1eadt k\u00fd v\u00e0 s\u1ed1 k\u1ebft n\u1ed1i, ph\u00e2n bi\u1ec7t qu\u00e1 t\u1ea3i do kh\u00e1ch th\u1eadt hay do l\u01b0u l\u01b0\u1ee3ng r\u00e1c. X\u1eed l\u00fd sai h\u01b0\u1edbng c\u00f2n t\u1ec7 h\u01a1n kh\u00f4ng x\u1eed l\u00fd.<\/li>\n<li><strong>B\u1eadt m\u1ee9c ph\u00f2ng th\u1ee7 cao nh\u1ea5t \u1edf l\u1edbp l\u1ecdc ph\u00eda tr\u01b0\u1edbc<\/strong>, v\u00ed d\u1ee5 ch\u1ebf \u0111\u1ed9 ki\u1ec3m tra tr\u00ecnh duy\u1ec7t cho to\u00e0n b\u1ed9 website. Ch\u1ea5p nh\u1eadn phi\u1ec1n ph\u1ee9c cho kh\u00e1ch trong v\u00e0i gi\u1edd \u0111\u1ec3 gi\u1eef d\u1ecbch v\u1ee5 s\u1ed1ng.<\/li>\n<li><strong>Thu h\u1eb9p m\u1ee5c ti\u00eau.<\/strong> N\u1ebfu \u00e1p l\u1ef1c d\u1ed3n v\u00e0o m\u1ed9t v\u00e0i \u0111\u01b0\u1eddng d\u1eabn, t\u1ea1m kho\u00e1 ho\u1eb7c tr\u1ea3 v\u1ec1 b\u1ea3n t\u0129nh cho \u0111\u00fang nh\u1eefng \u0111\u01b0\u1eddng d\u1eabn \u0111\u00f3 thay v\u00ec ch\u1eb7n c\u1ea3 site.<\/li>\n<li><strong>T\u0103ng t\u1ef7 l\u1ec7 ph\u1ee5c v\u1ee5 t\u1eeb b\u1ed9 nh\u1edb \u0111\u1ec7m,<\/strong> k\u1ec3 c\u1ea3 b\u1eb1ng c\u00e1ch k\u00e9o d\u00e0i th\u1eddi gian s\u1ed1ng c\u1ee7a b\u1ea3n \u0111\u1ec7m t\u1ea1m th\u1eddi.<\/li>\n<li><strong>Li\u00ean h\u1ec7 nh\u00e0 cung c\u1ea5p h\u1ea1 t\u1ea7ng.<\/strong> H\u1ecd nh\u00ecn \u0111\u01b0\u1ee3c t\u1ea7ng m\u1ea1ng m\u00e0 b\u1ea1n kh\u00f4ng nh\u00ecn \u0111\u01b0\u1ee3c v\u00e0 c\u00f3 th\u1ec3 ch\u1eb7n gi\u00fap \u1edf ph\u00eda tr\u00ean.<\/li>\n<li><strong>Ghi l\u1ea1i to\u00e0n b\u1ed9.<\/strong> Th\u1eddi \u0111i\u1ec3m b\u1eaft \u0111\u1ea7u, \u0111\u1eb7c \u0111i\u1ec3m l\u01b0u l\u01b0\u1ee3ng, thao t\u00e1c \u0111\u00e3 l\u00e0m v\u00e0 t\u00e1c d\u1ee5ng c\u1ee7a t\u1eebng thao t\u00e1c.<\/li>\n<li><strong>Sau khi y\u00ean, g\u1ee1 d\u1ea7n c\u00e1c bi\u1ec7n ph\u00e1p kh\u1ea9n c\u1ea5p<\/strong> v\u00e0 gi\u1eef l\u1ea1i nh\u1eefng g\u00ec \u0111\u00e1ng gi\u1eef. \u0110\u1eebng \u0111\u1ec3 ch\u1ebf \u0111\u1ed9 ki\u1ec3m tra g\u1eaft ch\u1ea1y m\u00e3i r\u1ed3i qu\u00ean.<\/li>\n<\/ol>\n<p>Hai \u0111i\u1ec1u tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng l\u00e0m: kh\u00f4ng tr\u1ea3 \u0111\u0169a d\u01b0\u1edbi b\u1ea5t k\u1ef3 h\u00ecnh th\u1ee9c n\u00e0o \u2014 \u0111\u00f3 l\u00e0 h\u00e0nh vi vi ph\u1ea1m ph\u00e1p lu\u1eadt v\u00e0 kh\u00f4ng l\u00e0m l\u01b0u l\u01b0\u1ee3ng v\u00e0o b\u1ea1n gi\u1ea3m \u0111i; v\u00e0 kh\u00f4ng \u0111\u1ed5i t\u00ean mi\u1ec1n hay \u0111\u1ed5i m\u00e1y ch\u1ee7 trong l\u00fac ho\u1ea3ng lo\u1ea1n, v\u00ec b\u1ea1n s\u1ebd t\u1ef1 t\u1ea1o th\u00eam m\u1ed9t s\u1ef1 c\u1ed1 m\u1edbi ch\u1ed3ng l\u00ean s\u1ef1 c\u1ed1 \u0111ang c\u00f3.<\/p>\n<h2>V\u1ec7 sinh n\u1ec1n t\u1ea3ng: ph\u1ea7n \u00edt h\u00e0o nho\u00e1ng nh\u01b0ng c\u1ee9u b\u1ea1n nhi\u1ec1u nh\u1ea5t<\/h2>\n<ul>\n<li>C\u1eadp nh\u1eadt h\u1ec7 qu\u1ea3n tr\u1ecb n\u1ed9i dung v\u00e0 c\u00e1c tr\u00ecnh c\u1eafm. Ph\u1ea7n l\u1edbn website nh\u1ecf &#8220;s\u1eadp&#8221; kh\u00f4ng ph\u1ea3i v\u00ec b\u1ecb nh\u1eafm m\u1ee5c ti\u00eau, m\u00e0 v\u00ec b\u1ecb qu\u00e9t l\u1ed7 h\u1ed5ng h\u00e0ng lo\u1ea1t.<\/li>\n<li>G\u1ee1 tr\u00ecnh c\u1eafm v\u00e0 giao di\u1ec7n kh\u00f4ng d\u00f9ng, thay v\u00ec ch\u1ec9 t\u1eaft.<\/li>\n<li>B\u1eadt HTTPS tr\u00ean to\u00e0n b\u1ed9 website v\u00e0 b\u1ea3o \u0111\u1ea3m gia h\u1ea1n ch\u1ee9ng ch\u1ec9 t\u1ef1 \u0111\u1ed9ng ch\u1ea1y \u0111\u1ec1u \u2014 xem <a href=\"\/blog\/huong-dan-ssl-lets-encrypt\/\">H\u01b0\u1edbng d\u1eabn l\u1ea5y ch\u1ee9ng ch\u1ec9 SSL Let&#8217;s Encrypt<\/a>.<\/li>\n<li>T\u00e1ch m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m kh\u1ecfi m\u00f4i tr\u01b0\u1eddng ch\u1ea1y th\u1eadt, v\u00e0 ch\u1eb7n truy c\u1eadp c\u00f4ng khai v\u00e0o m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m.<\/li>\n<li>Gi\u1eef c\u1ea5u h\u00ecnh DNS g\u1ecdn: xo\u00e1 b\u1ea3n ghi c\u0169, bi\u1ebft ch\u00ednh x\u00e1c m\u1ed7i b\u1ea3n ghi \u0111ang tr\u1ecf v\u1ec1 \u0111\u00e2u. N\u1ebfu b\u1ea1n v\u1eeba chuy\u1ec3n hosting, \u0111\u1ed1i chi\u1ebfu l\u1ea1i theo <a href=\"\/blog\/huong-dan-tro-ten-mien-hosting-cpanel\/\">H\u01b0\u1edbng d\u1eabn tr\u1ecf t\u00ean mi\u1ec1n v\u1ec1 Hosting cPanel<\/a>.<\/li>\n<\/ul>\n<h2>K\u1ebft<\/h2>\n<p>Ch\u1ed1ng t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 \u1edf quy m\u00f4 website v\u1eeba v\u00e0 nh\u1ecf kh\u00f4ng n\u1eb1m \u1edf m\u1ed9t s\u1ea3n ph\u1ea9m \u0111\u1eaft ti\u1ec1n, m\u00e0 \u1edf vi\u1ec7c d\u1ef1ng s\u1eb5n nhi\u1ec1u l\u1edbp: m\u1ed9t l\u1edbp l\u1ecdc \u0111\u1ee9ng tr\u01b0\u1edbc, m\u00e1y ch\u1ee7 g\u1ed1c kh\u00f4ng l\u1ed9 v\u00e0 ch\u1ec9 nh\u1eadn l\u01b0u l\u01b0\u1ee3ng t\u1eeb l\u1edbp \u0111\u00f3, b\u1ed9 nh\u1edb \u0111\u1ec7m to\u00e0n trang, t\u00e0i nguy\u00ean t\u0129nh t\u00e1ch ri\u00eang, gi\u1edbi h\u1ea1n t\u1ea7n su\u1ea5t v\u00e0 k\u1ebft n\u1ed1i, c\u00f9ng v\u00e0i \u0111i\u1ec3m n\u00f3ng \u0111\u01b0\u1ee3c kho\u00e1 b\u1edbt. Ph\u1ea7n l\u1edbn c\u00f4ng vi\u1ec7c ph\u1ea3i l\u00e0m tr\u01b0\u1edbc khi c\u00f3 s\u1ef1 c\u1ed1; l\u00fac s\u1ef1 c\u1ed1 ch\u1ec9 c\u00f2n l\u00e0 b\u1eadt th\u1ee9 \u0111\u00e3 chu\u1ea9n b\u1ecb v\u00e0 ghi ch\u00e9p l\u1ea1i.<\/p>\n<p>N\u1ebfu b\u1ea1n \u0111ang d\u1ef1ng l\u1ea1i h\u1ea1 t\u1ea7ng cho m\u1ed9t d\u1ef1 \u00e1n v\u00e0 mu\u1ed1n b\u1eaft \u0111\u1ea7u b\u1eb1ng ph\u1ea7n g\u1ed1c \u2014 t\u00ean mi\u1ec1n c\u1ee7a ch\u00ednh b\u1ea1n, DNS s\u1eeda \u0111\u01b0\u1ee3c ngay khi c\u1ea7n chuy\u1ec3n h\u01b0\u1edbng kh\u1ea9n c\u1ea5p \u2014 h\u00e3y tra v\u00e0 \u0111\u0103ng k\u00fd t\u1ea1i <a href=\"https:\/\/ivi.vn\/search\">ivi.vn\/search<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Nh\u1eadn bi\u1ebft d\u1ea5u hi\u1ec7u qu\u00e1 t\u1ea3i b\u1ea5t th\u01b0\u1eddng v\u00e0 d\u1ef1ng s\u00e1u l\u1edbp ph\u00f2ng th\u1ee7 cho website v\u1eeba v\u00e0 nh\u1ecf: l\u1edbp l\u1ecdc ph\u00eda tr\u01b0\u1edbc, gi\u1ea5u m\u00e1y ch\u1ee7 g\u1ed1c, b\u1ed9 nh\u1edb \u0111\u1ec7m, t\u00e1ch t\u00e0i nguy\u00ean t\u0129nh, gi\u1edbi h\u1ea1n t\u1ea7n su\u1ea5t v\u00e0 k\u1ebft n\u1ed1i.<\/p>\n","protected":false},"author":1,"featured_media":69,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-22","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-quan-tri-web"],"_links":{"self":[{"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/posts\/22","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/comments?post=22"}],"version-history":[{"count":1,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/posts\/22\/revisions"}],"predecessor-version":[{"id":56,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/posts\/22\/revisions\/56"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/media\/69"}],"wp:attachment":[{"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/media?parent=22"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/categories?post=22"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ivi.vn\/blog\/wp-json\/wp\/v2\/tags?post=22"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}