In this article, you will learn:
WEDOS-Protected Websites
WEDOS Protection is primarily used to protect websites and through that the underlying web hosting infrastructure from attacks and other unwanted traffic. This is achieved by:
- Filtering suspicious traffic based on IP or behavior. A WEDOS Protection összetett algoritmussal értékeli az összes forgalmat. Míg egyes támadási útvonalak és módszerek meglehetősen egyértelműek, mások úgy álcázzák magukat, hogy a lehető legjogszerűbbnek tűnjenek, és beleolvadjanak a hasznos botok és a valódi látogatók tömegébe. Mivel jobb félni, mint megijedni, a rendszer időnként blokkolhat nem rosszindulatú forgalmat is, és ezzel egyes látogatói csoportok vagy szolgáltatások számára elérhetetlenné teheti az oldalt.
- Delivering cached content. A szerverterhelés csökkentése érdekében a WEDOS Protection gyorsítótárazza a tartalmat, ami elavult weboldalverziók megjelenítését okozhatja, különösen akkor, ha a gyorsítótárazott tartalmat nagyon gyakran kérik le. További információért olvassa el a Protection – CDN Cache article.
- Hiding the web server behind a proxy. A védett weboldal szerverének IP-címét teljesen el kell rejteni az internet elől, és a WEDOS Protection proxyszerverének IP-címével kell helyettesíteni. Ez azonban problémát okozhat, ha egy szolgáltatásnak ellenőriznie kell, hogy a webhosting IP-címe egyezik-e a megfelelő domain rekordjaival. További információért tekintse meg a Protection – DNS and Target IPs article.
- HTTPS. A rendszer a biztonságos HTTPS (HTTP over SSL) protokoll használatát kényszeríti ki, és hibákat okozhat, ha a titkosítás bármelyik ponton meghiúsul.
You typically activate the protection and other benefits of WEDOS Protection by adding your domain, de indokolt esetben a WEDOS vészhelyzeti verziót is telepíthet.
Emergency WEDOS Global
When an unprotected website operated primarily on a shared Webhosting service becomes the target problematic traffic or an attack that threatens other parts of the infrastructure outside of that website, we must minimize the damage by significantly limiting this problematic website, sometimes even shutting it down completely. This solution is disadvantageous for both us and the customer.
WEDOS Protection allows us to bypass the need for operational restrictions using the mechanisms listed above, which protect the website itself and all related infrastructure, because the attack now has to go through a proxy that is properly equipped to deal with it, and the web server has free resources to do what it’s meant to be doing.
To deploy this protection, we need the Webhosting domain to use WEDOS DNS servers ⧉. Vészhelyzet esetén egy technikus a rendszerünkben átállítja a DNS-rekordokat a webszerverről a WEDOS Protection proxyra, ami általában néhány percen belül megoldja a nem kívánt forgalmat, és feloldhatja a webhosting esetleges korlátozásait.
We inform customers about the action taken by a message sent to their billing email address.
While Emergency WEDOS Protection is technically free, it comes with these major drawbacks:
- No customer control over WEDOS Protection settings. Unless customers purchase WEDOS Protection for themselves, they don’t have access to controls.
- Any issues are handled by customer support with low priority. Typical response time in case of content issues is 2 hours, may take significantly longer during weekends or holidays.
To enjoy the benefits of WEDOS Protection for free, without any drawbacks of the emergency version, add the domain via our WordPress plugin.
Emergency WEDOS Protection deployment may cause errors. The most common ones, including their solutions, can be found in the Troubleshooting chapter.
Troubleshooting Common Issues
Common issues with sites using WEDOS Protection, either as a stand-alone service or the emergency version deployed by us, include:
- Error messages
- Damaged or dysfunctional website contents
- Harmadik felek tartalmához és API-jaihoz való hozzáférés blokkolva
- Spammed or undelivered emails sent from web
Error Messages
Issue: An error message is displayed on the website.
Solution: The correct solution depends on the displayed error message:
- Not found on accelerator. You will most often encounter this error if you do not have HTTPS set up on your VEDOS Webhosting. Check the domain settings in the certificate according to the Webhosting – Manual HTTPS Setup ⧉ guide. If HTTPS is disabled, enable it. If there are errors with domains, contact support ⧉ and ask to add (sub)domains with disabled validation.
- Not found (404). This error is caused either by incorrect HTTPS settings on the target server (see above), or WEDOS.protection reverse proxy IPs. In the latter case, make sure that your proxy IPs match those set in the domain’s DNS.
- Gateway Timeout. Make sure your server is not blocking connections to addresses from this list ⧉ (JSON version ⧉).
Website Contents
Issue: The website does not display correctly or at all after deploying WEDOS Protection. Sometimes only the main page or some subpages work correctly.
Cause: The problem is usually caused by a static content caching error, but it can also be related to the blocking of templates, plugins, and external resources described below.
Solution: If you have access to the domain’s WEDOS Global admin panel ⧉, ürítse a gyorsítótárat, vagy állítsa vissza (tiltsa le, majd engedélyezze újra) a következőben CDN Cache settings.
If you do not have access to the WEDOS Global administration, you can add the domain and gain access, vagy ask us to purge the cache ⧉. A kéréseket a műszaki osztály általában 2 órán belül megoldja, az osztály terheltségétől és a megoldás összetettségétől függően (különösen, ha a probléma másutt van).
Külső tartalom blokkolása
Issue: After deploying WEDOS Protection, a template, plugin, or third-party service/API (crawlers, payment gateways, etc.) doesn’t work properly.
Cause: WEDOS Protection may preemptively block large ranges of IP addresses, for example based on bad reputation. However, between these ranges there may be unproblematic units of addresses used by plugins, templates and generally APIs that your website needs to communicate with, but cannot.
Another common cause of the problem is the restriction of access to a third-party application or interface that you originally set up for the Webhosting server IP. However, after deploying WEDOS Protection, you access it from one of the system’s many regional IP addresses.
Solution: Ask the blocked third party’s support to provide a complete list of IP addresses that we should whitelist on our end to restore communication. They must be units of specific addresses – large quantities, or entire ranges, are usually problematic.
Once you have this list, send the following request ⧉:
Please whitelist the IP addresses (replace the parenthesis with a list of addresses) in the WEDOS Protection system in order to restore the connection of the website (replace the parenthesis with the name of your website) with the service (replace the parenthesis with the name of the template, plugin, API or other setvice that cannot connect).
Requests are usually processed by the technical department within 2 hours, depending on the department’s workload and the complexity of the request (IP address reputation verification).
If, on the other hand, the source of the problem is caused by a blocked connection on a third-party server (typically payment gateways), enable communication for IP addresses from the list at https://ips.wedos.global/ips.json ⧉ (automatikusan frissül).
Email Delivery
Issue: Emails sent from the website (e.g. forms) end up in spam or are not delivered at all.
Cause: The most common cause is a problem with verifying the SPF record due to a different A record of the domain and the actual IP address of the web server.
Solution: Adja hozzá a webhosting tényleges IP-címét a domain SPF-rekordjához a következő kóddal ip4:X.X.X.X. Részletes útmutatót a következő cikkben talál Emails – SPF record ⧉.
FAQ
What if the attacked Webhosting domain uses third-party DNS servers?
In this case, a technician tries to contact the owner via email and SMS. As long as we cannot effectively protect the service, we limit its parameters or shut it down completely.
How do I know that a website is using WEDOS Global?
Check the DNS A records. If you find two values 45.138.107.X, ahol X is a number from 0 to 255, a domain a WEDOS Protection-re mutat.
For AAAA records, the corresponding value is 2a0e:acc0::X.
What if I have a different problem or your solution doesn’t work?
Why should I set up WEDOS Global when I’m already protected by another service?
We receive a large amount of unwanted traffic even from domains using other protective services. In some cases, if we cannot enable WEDOS Protection for a website under attack, we have no choice but to limit/disable web hosting.