{"id":477596,"date":"2023-08-09T09:17:42","date_gmt":"2023-08-09T09:17:42","guid":{"rendered":""},"modified":"2023-09-05T11:15:01","modified_gmt":"2023-09-05T11:15:01","slug":"ingress-filtering","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/ingress-filtering\/","title":{"rendered":"\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0"},"content":{"rendered":"<h2>\u5c0e\u5165<\/h2>\n<p>\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u30e6\u30fc\u30b6\u30fc\u3092\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3084\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u304b\u3089\u4fdd\u8b77\u3059\u308b\u3053\u3068\u3092\u76ee\u7684\u3068\u3057\u305f\u3001\u91cd\u8981\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6280\u8853\u3067\u3059\u3002\u4f01\u696d\u3001\u7d44\u7e54\u3001\u3055\u3089\u306b\u306f\u500b\u4eba\u306b\u3068\u3063\u3066\u5f37\u529b\u306a\u9632\u5fa1\u58c1\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u6f5c\u5728\u7684\u306a\u8105\u5a01\u304b\u3089\u4fdd\u8b77\u3057\u3001\u5b89\u5168\u306a\u30aa\u30f3\u30e9\u30a4\u30f3\u74b0\u5883\u3092\u78ba\u4fdd\u3057\u307e\u3059\u3002\u3053\u306e\u5305\u62ec\u7684\u306a\u8a18\u4e8b\u3067\u306f\u3001\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u6b74\u53f2\u3001\u6a5f\u80fd\u3001\u7a2e\u985e\u3001\u7528\u9014\u3092\u8a73\u3057\u304f\u8abf\u3079\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u5206\u91ce\u306b\u304a\u3051\u308b\u305d\u306e\u91cd\u8981\u6027\u3092\u63a2\u308a\u307e\u3059\u3002<\/p>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u8d77\u6e90\u3068\u521d\u671f\u306e\u8a00\u53ca<\/h2>\n<p>Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u6982\u5ff5\u306f\u3001\u6210\u9577\u3092\u7d9a\u3051\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u304c\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u8ab2\u984c\u306b\u76f4\u9762\u3057\u59cb\u3081\u305f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u306e\u521d\u671f\u306e\u9803\u306b\u521d\u3081\u3066\u767b\u5834\u3057\u307e\u3057\u305f\u3002Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306b\u95a2\u3059\u308b\u6700\u521d\u306e\u8a00\u53ca\u306f\u3001Jon Postel \u6c0f\u3068\u305d\u306e\u30c1\u30fc\u30e0\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u5236\u5fa1\u30e1\u30c3\u30bb\u30fc\u30b8 \u30d7\u30ed\u30c8\u30b3\u30eb (ICMP) \u306b\u95a2\u3059\u308b\u7814\u7a76\u3067\u30d1\u30b1\u30c3\u30c8 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u30a2\u30a4\u30c7\u30a2\u3092\u63d0\u6848\u3057\u305f 1980 \u5e74\u4ee3\u521d\u982d\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u304c\u62e1\u5927\u3059\u308b\u306b\u3064\u308c\u3066\u3053\u306e\u30a2\u30a4\u30c7\u30a2\u306f\u52e2\u3044\u3092\u5897\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30ea\u30bd\u30fc\u30b9\u3068\u30e6\u30fc\u30b6\u30fc\u3092\u4fdd\u8b77\u3059\u308b\u5fc5\u8981\u6027\u304c\u3055\u3089\u306b\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u8a73\u7d30\u60c5\u5831<\/h2>\n<p>\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u5165\u529b\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u307e\u305f\u306f\u30a4\u30f3\u30d0\u30a6\u30f3\u30c9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3068\u3082\u547c\u3070\u308c\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u30a8\u30c3\u30b8\u3067\u53d7\u4fe1\u30c7\u30fc\u30bf \u30d1\u30b1\u30c3\u30c8\u3092\u7cbe\u67fb\u3059\u308b\u3088\u3046\u306b\u8a2d\u8a08\u3055\u308c\u305f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u624b\u6cd5\u3067\u3059\u3002\u30d1\u30b1\u30c3\u30c8\u306e\u9001\u4fe1\u5143\u3001\u9001\u4fe1\u5148\u3001\u304a\u3088\u3073\u30b3\u30f3\u30c6\u30f3\u30c4\u3092\u8a55\u4fa1\u3057\u3066\u3001\u30d1\u30b1\u30c3\u30c8\u304c\u5b9a\u7fa9\u6e08\u307f\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30dd\u30ea\u30b7\u30fc\u3092\u6e80\u305f\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u306e\u5165\u529b\u304c\u8a31\u53ef\u3055\u308c\u3066\u3044\u308b\u304b\u3069\u3046\u304b\u3092\u5224\u65ad\u3057\u307e\u3059\u3002<\/p>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u5185\u90e8\u69cb\u9020\u3068\u6a5f\u80fd<\/h2>\n<p>Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u4e3b\u306a\u76ee\u7684\u306f\u3001\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u4fb5\u5165\u3059\u308b\u306e\u3092\u9632\u304e\u306a\u304c\u3089\u3001\u6b63\u5f53\u306a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u59a8\u3052\u3089\u308c\u308b\u3053\u3068\u306a\u304f\u901a\u904e\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u3067\u3059\u3002\u3053\u308c\u306f\u3001\u4e00\u9023\u306e\u624b\u9806\u3067\u5b9f\u73fe\u3055\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d1\u30b1\u30c3\u30c8\u691c\u67fb<\/strong>: \u53d7\u4fe1\u30d1\u30b1\u30c3\u30c8\u306f\u8a73\u7d30\u306a\u691c\u67fb\u3092\u53d7\u3051\u3001\u9001\u4fe1\u5143 IP \u30a2\u30c9\u30ec\u30b9\u3001\u5b9b\u5148 IP \u30a2\u30c9\u30ec\u30b9\u3001\u30dd\u30fc\u30c8\u756a\u53f7\u3001\u30da\u30a4\u30ed\u30fc\u30c9\u306e\u5185\u5bb9\u304c\u30c1\u30a7\u30c3\u30af\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u30ea\u30b9\u30c8 (ACL)<\/strong>: ACL \u306f\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0 \u30eb\u30fc\u30eb\u3068\u30dd\u30ea\u30b7\u30fc\u3092\u5b9a\u7fa9\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30ea\u30b9\u30c8\u306f\u3001\u7279\u6027\u306b\u57fa\u3065\u3044\u3066\u3069\u306e\u30d1\u30b1\u30c3\u30c8\u304c\u8a31\u53ef\u3055\u308c\u3001\u3069\u306e\u30d1\u30b1\u30c3\u30c8\u304c\u62d2\u5426\u3055\u308c\u308b\u304b\u3092\u6307\u5b9a\u3059\u308b\u30eb\u30fc\u30eb\u3067\u69cb\u6210\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb \u30d1\u30b1\u30c3\u30c8 \u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3 (SPI)<\/strong>: \u3088\u308a\u9ad8\u5ea6\u306a Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u6280\u8853\u3067\u306f\u3001SPI \u3092\u4f7f\u7528\u3057\u3066\u9032\u884c\u4e2d\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u5185\u306e\u30d1\u30b1\u30c3\u30c8\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3092\u5206\u6790\u3057\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u30d1\u30b1\u30c3\u30c8\u304c\u500b\u5225\u306b\u8a55\u4fa1\u3055\u308c\u308b\u3060\u3051\u3067\u306a\u304f\u3001\u30d1\u30b1\u30c3\u30c8\u304c\u5c5e\u3059\u308b\u63a5\u7d9a\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u3082\u8a55\u4fa1\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u4e3b\u8981\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n<p>\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306b\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u5f37\u5316\u306b\u8ca2\u732e\u3059\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u5229\u70b9\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\n<p><strong>DDoS \u8efd\u6e1b\u7b56<\/strong>: \u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u65e2\u77e5\u306e\u60aa\u610f\u306e\u3042\u308b\u30bd\u30fc\u30b9\u304b\u3089\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d6\u30ed\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u3001\u5206\u6563\u578b\u30b5\u30fc\u30d3\u30b9\u62d2\u5426 (DDoS) \u653b\u6483\u3092\u8efd\u6e1b\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>IP\u30b9\u30d7\u30fc\u30d5\u30a3\u30f3\u30b0\u9632\u6b62<\/strong>: Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u9001\u4fe1\u5143 IP \u30a2\u30c9\u30ec\u30b9\u3092\u30c1\u30a7\u30c3\u30af\u3059\u308b\u3053\u3068\u3067\u3001\u653b\u6483\u8005\u304c\u81ea\u5206\u306e\u8eab\u5143\u3092\u507d\u88c5\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u624b\u6cd5\u3067\u3042\u308b IP \u30b9\u30d7\u30fc\u30d5\u30a3\u30f3\u30b0\u3092\u9632\u6b62\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u9632\u6b62<\/strong>: \u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u5236\u9650\u3055\u308c\u305f\u30b5\u30fc\u30d3\u30b9\u3084\u6a5f\u5bc6\u60c5\u5831\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u30d6\u30ed\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4ea4\u901a\u898f\u5236<\/strong>: \u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u7ba1\u7406\u3001\u5168\u4f53\u7684\u306a\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3068\u30ea\u30bd\u30fc\u30b9\u5272\u308a\u5f53\u3066\u306e\u6539\u5584\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ul>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u7a2e\u985e<\/h2>\n<p>\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u305d\u306e\u5c55\u958b\u3068\u7bc4\u56f2\u306b\u57fa\u3065\u3044\u3066\u3001\u4e3b\u306b 3 \u3064\u306e\u30bf\u30a4\u30d7\u306b\u5206\u985e\u3067\u304d\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u30bf\u30a4\u30d7<\/th>\n<th>\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u9759\u7684\u30d1\u30b1\u30c3\u30c8\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong><\/td>\n<td>\u4e8b\u524d\u5b9a\u7fa9\u3055\u308c\u305f\u30eb\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u3066\u30d1\u30b1\u30c3\u30c8\u3092\u8a55\u4fa1\u3059\u308b\u3001\u57fa\u672c\u7684\u306a\u5f93\u6765\u306e\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u5f62\u5f0f\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u52d5\u7684\u30d1\u30b1\u30c3\u30c8\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong><\/td>\n<td>\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb \u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3\u3092\u5229\u7528\u3057\u3066\u3001\u9032\u884c\u4e2d\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u30d1\u30b1\u30c3\u30c8\u3092\u8a55\u4fa1\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30ea\u30d0\u30fc\u30b9\u30d1\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/strong><\/td>\n<td>\u7740\u4fe1\u30d1\u30b1\u30c3\u30c8\u306e\u9001\u4fe1\u5143 IP \u30a2\u30c9\u30ec\u30b9\u306e\u6709\u52b9\u6027\u306e\u691c\u8a3c\u306b\u91cd\u70b9\u3092\u7f6e\u3044\u3066\u3044\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306e\u4f7f\u7528\u65b9\u6cd5\u3001\u8ab2\u984c\u3001\u89e3\u6c7a\u7b56<\/h2>\n<p>\u30a4\u30f3\u30b0\u30ec\u30b9 \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u3055\u307e\u3056\u307e\u306a\u30b7\u30ca\u30ea\u30aa\u3067\u5e45\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>\n<p><strong>\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30b5\u30fc\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc (ISP)<\/strong>: ISP \u306f\u3001\u60aa\u610f\u306e\u3042\u308b\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3084\u30b9\u30d1\u30e0\u304b\u3089\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u9867\u5ba2\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u63a1\u7528\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f01\u696d\u30cd\u30c3\u30c8\u30ef\u30fc\u30af<\/strong>: \u7d44\u7e54\u306f\u3001Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u4f7f\u7528\u3057\u3066\u5185\u90e8\u30ea\u30bd\u30fc\u30b9\u3092\u4fdd\u8b77\u3057\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u9632\u6b62\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc<\/strong>\u30c7\u30fc\u30bf \u30bb\u30f3\u30bf\u30fc\u3067\u306f\u3001\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3068\u30db\u30b9\u30c8\u3055\u308c\u305f\u30b5\u30fc\u30d3\u30b9\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u5b9f\u88c5\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ul>\n<p>\u305f\u3060\u3057\u3001Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3092\u5b9f\u88c5\u3059\u308b\u3068\u3001\u6b21\u306e\u3088\u3046\u306a\u3044\u304f\u3064\u304b\u306e\u8ab2\u984c\u304c\u751f\u3058\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>\n<p><strong>\u507d\u967d\u6027<\/strong>: \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0 \u30eb\u30fc\u30eb\u304c\u904e\u5ea6\u306b\u5236\u9650\u3055\u308c\u308b\u3068\u3001\u6b63\u5f53\u306a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u304c\u30d6\u30ed\u30c3\u30af\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u30aa\u30fc\u30d0\u30fc\u30d8\u30c3\u30c9<\/strong>: \u30c7\u30a3\u30fc\u30d7 \u30d1\u30b1\u30c3\u30c8 \u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3\u306f\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u91cf\u306e\u591a\u3044\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u30dc\u30c8\u30eb\u30cd\u30c3\u30af\u3092\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c0\u30a4\u30ca\u30df\u30c3\u30af\u306a\u74b0\u5883<\/strong>: \u69cb\u6210\u304c\u7d76\u3048\u305a\u5909\u5316\u3059\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u306f\u3001\u6b63\u78ba\u306a\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0 \u30eb\u30fc\u30eb\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u304c\u56f0\u96e3\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ul>\n<p>\u3053\u308c\u3089\u306e\u8ab2\u984c\u306b\u5bfe\u51e6\u3059\u308b\u306b\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u306e\u8003\u616e\u4e8b\u9805\u306e\u30d0\u30e9\u30f3\u30b9\u3092\u53d6\u308a\u306a\u304c\u3089\u3001\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0 \u30eb\u30fc\u30eb\u3092\u5b9a\u671f\u7684\u306b\u66f4\u65b0\u3057\u3066\u5fae\u8abf\u6574\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u6bd4\u8f03<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7279\u5fb4<\/th>\n<th>\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/th>\n<th>\u51fa\u529b\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/th>\n<th>\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\u30a4\u30f3\u30b9\u30da\u30af\u30b7\u30e7\u30f3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u4ea4\u901a\u65b9\u5411<\/strong><\/td>\n<td>\u30a4\u30f3\u30d0\u30a6\u30f3\u30c9<\/td>\n<td>\u30a2\u30a6\u30c8\u30d0\u30a6\u30f3\u30c9<\/td>\n<td>\u53cc\u65b9\u5411<\/td>\n<\/tr>\n<tr>\n<td><strong>\u76ee\u7684<\/strong><\/td>\n<td>\u5b89\u5168<\/td>\n<td>\u5b89\u5168<\/td>\n<td>\u5b89\u5168<\/td>\n<\/tr>\n<tr>\n<td><strong>\u95a2\u6570<\/strong><\/td>\n<td>\u60aa\u8cea\u306a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3001\u6b63\u5f53\u306a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u8a31\u53ef\u3059\u308b<\/td>\n<td>\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306e\u6f0f\u6d29\u3092\u30d6\u30ed\u30c3\u30af\u3057\u3001\u8a31\u53ef\u3055\u308c\u305f\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u8a31\u53ef\u3059\u308b<\/td>\n<td>\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u5185\u3067\u30d1\u30b1\u30c3\u30c8\u3092\u5206\u6790\u3059\u308b<\/td>\n<\/tr>\n<tr>\n<td><strong>\u4f7f\u7528\u5834\u6240<\/strong><\/td>\n<td>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5883\u754c<\/td>\n<td>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5883\u754c<\/td>\n<td>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185<\/td>\n<\/tr>\n<tr>\n<td><strong>\u30d7\u30ed\u30c8\u30b3\u30eb\u4f8b<\/strong><\/td>\n<td>ACL\u3001SPI<\/td>\n<td>\u51fa\u529b ACL<\/td>\n<td>TCP<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u5c55\u671b\u3068\u5c06\u6765\u306e\u30c6\u30af\u30ce\u30ed\u30b8\u30fc<\/h2>\n<p>\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u304c\u9032\u5316\u3059\u308b\u306b\u3064\u308c\u3001Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u4fdd\u8b77\u306b\u304a\u3044\u3066\u5f15\u304d\u7d9a\u304d\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002\u5c06\u6765\u7684\u306b\u306f\u3001\u3088\u308a\u9ad8\u5ea6\u306a\u6a5f\u68b0\u5b66\u7fd2\u3084 AI \u30d9\u30fc\u30b9\u306e\u30a2\u30d7\u30ed\u30fc\u30c1\u306b\u3088\u3063\u3066\u3001\u65b0\u305f\u306a\u8105\u5a01\u3092\u691c\u51fa\u3057\u3001\u8efd\u6e1b\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002\u3055\u3089\u306b\u3001\u30e2\u30ce\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 (IoT) \u306e\u6210\u9577\u306b\u4f34\u3044\u3001Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f IoT \u30c7\u30d0\u30a4\u30b9\u3068\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u4fdd\u8b77\u306b\u304a\u3044\u3066\u307e\u3059\u307e\u3059\u91cd\u8981\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u3068\u30a4\u30f3\u30b0\u30ec\u30b9\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3068 Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u5f37\u5316\u3059\u308b\u305f\u3081\u306b\u9023\u643a\u3057\u3066\u6a5f\u80fd\u3059\u308b\u88dc\u5b8c\u7684\u306a\u30c6\u30af\u30ce\u30ed\u30b8\u3067\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d0\u30fc\u9593\u306e\u4ef2\u4ecb\u5f79\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u53d7\u4fe1\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3068\u9001\u4fe1\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u304a\u3088\u3073\u5236\u5fa1\u3059\u308b\u3053\u3068\u3067\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u3055\u3089\u306b\u5f37\u5316\u3057\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f Ingress \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u6280\u8853\u3092\u9069\u7528\u3057\u3066\u3001\u53d7\u4fe1\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5b9b\u5148\u30b5\u30fc\u30d0\u30fc\u306b\u8ee2\u9001\u3059\u308b\u524d\u306b\u5206\u6790\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u30a2\u30d7\u30ed\u30fc\u30c1\u306b\u3088\u308a\u3001\u5b9f\u969b\u306e\u30b5\u30fc\u30d0\u30fc\u304c\u6f5c\u5728\u7684\u306a\u8105\u5a01\u306b\u76f4\u63a5\u3055\u3089\u3055\u308c\u308b\u3053\u3068\u3092\u9632\u304e\u3001\u653b\u6483\u5bfe\u8c61\u9818\u57df\u3092\u6e1b\u3089\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.ietf.org\/\" target=\"_new\" rel=\"noopener nofollow\">\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0 \u30bf\u30b9\u30af \u30d5\u30a9\u30fc\u30b9 (IETF)<\/a><\/li>\n<li><a href=\"https:\/\/tools.ietf.org\/html\/bcp38\" target=\"_new\" rel=\"noopener nofollow\">\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4fb5\u5165\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0: IP \u9001\u4fe1\u5143\u30a2\u30c9\u30ec\u30b9\u306e\u30b9\u30d7\u30fc\u30d5\u30a3\u30f3\u30b0\u3092\u5229\u7528\u3057\u305f\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u653b\u6483\u306e\u963b\u6b62<\/a><\/li>\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/security\/glossary\/stateful-firewall-vs-stateless-firewall\/\" target=\"_new\" rel=\"noopener nofollow\">\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb \u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3068\u30b9\u30c6\u30fc\u30c8\u30ec\u30b9 \u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u9055\u3044\u3092\u7406\u89e3\u3059\u308b<\/a><\/li>\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/security\/glossary\/what-is-a-proxy-server\/\" target=\"_new\" rel=\"noopener nofollow\">\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u3068\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u304a\u3051\u308b\u305d\u306e\u5f79\u5272<\/a><\/li>\n<\/ul>","protected":false},"featured_media":477597,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477596","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Ingress Filtering: Enhancing Online Security and Performance<\/mark>","faq_items":[{"question":"What is Ingress filtering, and why is it important for network security?","answer":"<p>Ingress filtering is a vital network security technique that scrutinizes incoming data packets at the edges of a network. It evaluates the source, destination, and content of the packets to determine whether they meet predefined security policies and are allowed to enter the network. Ingress filtering is crucial for network security as it helps prevent malicious traffic from entering the network, mitigates DDoS attacks, prevents IP spoofing, and blocks unauthorized access.<\/p>"},{"question":"Can you explain the types of Ingress filtering?","answer":"<p>Ingress filtering can be categorized into three main types: Static Packet Filtering, Dynamic Packet Filtering, and Reverse Path Filtering. Static Packet Filtering uses predefined rules to evaluate packets, Dynamic Packet Filtering employs stateful inspection to assess packets in the context of ongoing sessions, and Reverse Path Filtering verifies the validity of the source IP address of incoming packets.<\/p>"},{"question":"How does Ingress filtering work internally?","answer":"<p>Ingress filtering works by subjecting incoming packets to deep inspection. It checks their source IP address, destination IP address, port numbers, and payload content. Access Control Lists (ACLs) are used to define the filtering rules and policies. More advanced Ingress filtering techniques utilize Stateful Packet Inspection (SPI) to analyze the context of the packet within the ongoing session, ensuring a comprehensive evaluation.<\/p>"},{"question":"What are the main benefits of implementing Ingress filtering?","answer":"<p>Ingress filtering offers several key benefits for network security and performance. It helps in DDoS mitigation, prevents IP spoofing, blocks unauthorized access attempts, and assists in traffic control, thereby improving overall network performance and resource allocation.<\/p>"},{"question":"What challenges may arise when using Ingress filtering, and how can they be addressed?","answer":"<p>Some challenges associated with Ingress filtering include false positives (legitimate traffic being blocked), performance overhead (deep packet inspection causing bottlenecks), and managing dynamic network configurations. These challenges can be addressed by regularly updating and fine-tuning filtering rules, finding a balance between security and performance, and employing AI-based solutions for more accurate threat detection.<\/p>"},{"question":"How does Ingress filtering relate to proxy servers?","answer":"<p>Ingress filtering and proxy servers complement each other in enhancing network security. Proxy servers act as intermediaries between clients and servers, offering an additional layer of security by filtering and controlling inbound and outbound traffic. They can apply Ingress filtering techniques to analyze incoming requests before forwarding them to the destination servers, protecting the actual servers from direct exposure to potential threats and reducing the attack surface.<\/p>"},{"question":"What does the future hold for Ingress filtering?","answer":"<p>As technology advances, Ingress filtering will continue to play a crucial role in safeguarding networks. The future may see more sophisticated machine learning and AI-based approaches to detect and mitigate emerging threats. With the growth of the Internet of Things (IoT), Ingress filtering will become increasingly vital in securing IoT devices and networks.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477596","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477596\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/477597"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477596"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}