{"id":8045,"date":"2022-03-30T17:00:35","date_gmt":"2022-03-30T10:00:35","guid":{"rendered":"https:\/\/hostify.vn\/blog\/?p=8045"},"modified":"2022-03-30T17:00:35","modified_gmt":"2022-03-30T10:00:35","slug":"tim-ip-that-cua-server-su-dung-dns-cloudflare","status":"publish","type":"post","link":"https:\/\/www.hostify.vn\/blog\/tim-ip-that-cua-server-su-dung-dns-cloudflare\/","title":{"rendered":"T\u00ecm IP th\u1eadt c\u1ee7a server s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 DNS Cloudflare"},"content":{"rendered":"

<\/p>\n

Trong b\u00e0i vi\u1ebft l\u1ea7n n\u00e0y, Hostify<\/a> s\u1ebd t\u1ed5ng h\u1ee3p 1 s\u1ed1 c\u00e1ch th\u1ee9c \u0111\u1ec3 c\u00e1ch t\u00ecm ra \u0111\u1ecba ch\u1ec9 IP th\u1eadt c\u1ee7a server s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 DNS CloudFlare<\/strong><\/a>, v\u1eeba \u0111\u1ec3 h\u1ed7 tr\u1ee3 m\u1ecdi ng\u01b0\u1eddi trong qu\u00e1 tr\u00ecnh pentesting c\u0169ng nh\u01b0 cho c\u00e1c System Admin bi\u1ebft \u0111\u01b0\u1ee3c misconfiguration nh\u01b0 th\u1ebf n\u00e0o d\u1eabn \u0111\u1ebfn b\u1ecb l\u1ed9 IP th\u1eadt \u0111\u1ec3 ph\u00f2ng tr\u00e1nh.<\/p>\n

<\/p>\n

<\/p>\n

<\/p>\n

<\/p>\n

1. Cloudflare l\u00e0 g\u00ec?<\/h2>\n

<\/p>\n

<\/p>\n

\n
\n
\"T\u00ecm

Cloudflare l\u00e0 m\u1ed9t m\u00e1y ch\u1ee7 trung gian<\/p><\/div>\n<\/figure>\n<\/div>\n

<\/p>\n

<\/p>\n

Cloudflare<\/strong> l\u00e0 m\u1ed9t m\u00e1y ch\u1ee7 trung gian v\u00e0 n\u00f3 s\u1ebd x\u1eed l\u00fd m\u1ecdi th\u1ee9 tr\u01b0\u1edbc khi n\u00f3 g\u1eedi y\u00eau c\u1ea7u \u0111\u1ebfn m\u00e1y ch\u1ee7 c\u0169ng nh\u01b0 tr\u1ea3 d\u1eef li\u1ec7u v\u1ec1 ng\u01b0\u1eddi d\u00f9ng. Cloudflare cung c\u1ea5p nhi\u1ec1u t\u00ednh n\u0103ng t\u1ed1t nh\u01b0 Ddos, Spam, CDN free, SSL free, Apps, b\u1ea3o m\u1eadt v\u00e0 t\u1ed1i \u01b0u h\u00f3a t\u1ed1c \u0111\u1ed9 t\u1ea3i trang.<\/p>\n

<\/p>\n

<\/p>\n

2. C\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Cloudflare<\/h2>\n

<\/p>\n

<\/p>\n

CloudFlare v\u00e0 c\u00e1c CDN s\u1ebd tr\u1edf th\u00e0nh c\u00e1c Reverse Proxy (m\u00e1y ch\u1ee7 trung gian) gi\u1eefa ng\u01b0\u1eddi d\u00f9ng v\u00e0 server.<\/strong><\/p>\n

<\/p>\n

<\/p>\n

\u0110\u1ec3 l\u00e0m chuy\u1ec7n n\u00e0y th\u00ec ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i b\u1ecb bu\u1ed9c k\u1ebft n\u1ed1i \u0111\u1ebfn c\u00e1c CDN Server<\/strong> thay v\u00ec Real Server, CDN server s\u1ebd thay ng\u01b0\u1eddi d\u00f9ng request v\u00e0 cache c\u00e1c d\u1eef li\u1ec7u t\u1eeb Real Server.<\/p>\n

<\/p>\n

<\/p>\n

V\u1eady l\u00e0m th\u1ebf n\u00e0o m\u00e0 c\u00f3 th\u1ec3 b\u1eaft bu\u1ed9c ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i \u0111\u1ebfn CDN Server thay v\u00ec tr\u1ef1c ti\u1ebfp \u0111\u1ebfn server th\u1eadt. Th\u00ec c\u00e1c CDN c\u00f3 gi\u1ea3i ph\u00e1p ch\u00ednh l\u00e0 khai b\u00e1o l\u1ea1i c\u00e1c Name Server record c\u1ee7a domain website. T\u1ee9c l\u00e0 b\u00ecnh th\u01b0\u1eddng Name Server th\u01b0\u1eddng l\u00e0 c\u1ee7a Hosting Provider ho\u1eb7c Domain Registrar nh\u01b0ng khi s\u1eed d\u1ee5ng CloudFlare th\u00ec Name Server s\u1ebd l\u00e0 c\u1ee7a CloudFlare v\u00e0 t\u1eeb \u0111\u00f3 c\u00e1c DNS request c\u1ee7a user s\u1ebd \u0111\u01b0\u1ee3c ph\u00e2n gi\u1ea3i b\u1edfi CloudFlare Name Server thay v\u00ec Registra Name Server.<\/p>\n

<\/p>\n

<\/p>\n

3. C\u00e1c ph\u01b0\u01a1ng ph\u00e1p t\u00ecm IP th\u1eadt c\u1ee7a server s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 DNS Cloudflare<\/h2>\n

<\/p>\n

<\/p>\n

\u0110\u1ea7u ti\u00ean ta c\u1ea7n ph\u1ea3i bi\u1ebft danh s\u00e1ch IP c\u1ee7a cloudflare (CloudFlare IP) l\u00e0 nh\u1eefng IP n\u00e0o \u0111\u1ec3 bi\u1ebft r\u1eb1ng IP t\u00ecm \u0111\u01b0\u1ee3c b\u1eb1ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p d\u01b0\u1edbi \u0111\u00e2y l\u00e0 IP th\u1eadt c\u1ee7a server (real IP). Danh s\u00e1ch CloudFlare IP \u0111\u01b0\u1ee3c h\u00e3ng n\u00e0y public t\u1ea1i \u0111\u00e2y:\u00a0https:\/\/www.cloudflare.com\/ips<\/a>
C\u00e1c CDN kh\u00e1c th\u00ec t\u00ecm tr\u00ean internet\u00a0<\/p>\n

<\/p>\n

<\/p>\n

3.1 T\u00ecm IP b\u1eb1ng ph\u01b0\u01a1ng ph\u00e1p Ping<\/h3>\n

<\/p>\n

<\/p>\n

M\u1ed9t domain ngo\u00e0i host ch\u00ednh l\u00e0 www<\/a> <\/strong>th\u00ec c\u00f2n c\u00f3 nh\u1eefng subdomain host, sau khi ping n\u1ebfu hi\u1ec7n \u0111\u01b0\u1ee3c d\u00e3y IP. L\u1ea5y IP \u0111\u00f3 so s\u00e1nh v\u1edbi danh s\u00e1ch Cloudflare IP hay CDN IP n\u1ebfu kh\u00f4ng tr\u00f9ng v\u1edbi d\u00e3y IP tr\u00ean th\u00ec \u0111\u00f3 c\u00f3 th\u1ec3 l\u00e0 IP th\u1eadt.<\/p>\n

<\/p>\n

<\/p>\n

ping\u00a0direct-connect.domain.com<\/a><\/p>\n

<\/p>\n

<\/p>\n

ping\u00a0direct.domain.com<\/a><\/p>\n

<\/p>\n

<\/p>\n

ping\u00a0ftp.domain.com<\/a><\/p>\n

<\/p>\n

<\/p>\n

ping\u00a0cpanel.domain.com<\/a><\/p>\n

<\/p>\n

<\/p>\n

ping\u00a0mail.domain.com<\/a><\/p>\n

<\/p>\n

<\/p>\n

\n
\n
\"T\u00ecm

D\u00f9ng CMD t\u00ecm ki\u1ebfm IP<\/p><\/div>\n<\/figure>\n<\/div>\n

<\/p>\n

<\/p>\n

N\u1ebfu server ch\u1eb7n ICMP request (ping lu\u00f4n b\u00e1o timeout) th\u00ec d\u00f9ng l\u1ec7nh Nmap<\/p>\n

<\/p>\n

<\/p>\n

L\u1ec7nh: nmap -sV -sS -F <\/strong><\/code><\/p>\n

<\/p>\n

<\/p>\n

Trong \u0111\u00f3 :<\/p>\n

<\/p>\n

<\/p>\n