{"id":477044,"date":"2023-08-09T09:06:26","date_gmt":"2023-08-09T09:06:26","guid":{"rendered":""},"modified":"2023-09-05T11:13:55","modified_gmt":"2023-09-05T11:13:55","slug":"egress-filtering","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/egress-filtering\/","title":{"rendered":"L\u1ecdc \u0111\u1ea7u ra"},"content":{"rendered":"<p>L\u1ecdc l\u1ed1i ra l\u00e0 m\u1ed9t bi\u1ec7n ph\u00e1p an ninh m\u1ea1ng quan tr\u1ecdng \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy, ch\u1eb3ng h\u1ea1n nh\u01b0 OneProxy (oneproxy.pro), s\u1eed d\u1ee5ng \u0111\u1ec3 n\u00e2ng cao t\u00ednh b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 cho ng\u01b0\u1eddi d\u00f9ng c\u1ee7a h\u1ecd. N\u00f3 li\u00ean quan \u0111\u1ebfn vi\u1ec7c gi\u00e1m s\u00e1t v\u00e0 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng \u0111i qua m\u1ea1ng ho\u1eb7c m\u00e1y ch\u1ee7 proxy, ch\u1ec9 cho ph\u00e9p c\u00e1c li\u00ean l\u1ea1c \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n v\u00e0 an to\u00e0n r\u1eddi kh\u1ecfi m\u1ea1ng. B\u1eb1ng c\u00e1ch tri\u1ec3n khai t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra, nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n vi\u1ec7c l\u1ecdc d\u1eef li\u1ec7u, ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i v\u00e0 \u0111\u1ea3m b\u1ea3o tu\u00e2n th\u1ee7 c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a b\u1ed9 l\u1ecdc Egress v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Kh\u00e1i ni\u1ec7m l\u1ecdc l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp m\u1ea1ng c\u00f3 t\u1eeb nh\u1eefng ng\u00e0y \u0111\u1ea7u c\u1ee7a Internet, n\u01a1i c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean s\u1eed d\u1ee5ng t\u01b0\u1eddng l\u1eeda l\u1ecdc g\u00f3i \u0111\u01a1n gi\u1ea3n \u0111\u1ec3 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng \u0111\u1ebfn v\u00e0 \u0111i. Tuy nhi\u00ean, l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn thu\u1eadt ng\u1eef \u201cL\u1ecdc \u0111\u1ea7u ra\u201d xu\u1ea5t hi\u1ec7n trong b\u1ed1i c\u1ea3nh \u201cT\u01b0 v\u1ea5n CERT CA-1996-01: L\u1ecdc \u0111\u1ea7u ra \u0111\u00e1nh b\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 s\u1eed d\u1ee5ng gi\u1ea3 m\u1ea1o \u0111\u1ecba ch\u1ec9 ngu\u1ed3n IP\u201d c\u1ee7a Trung t\u00e2m \u0111i\u1ec1u ph\u1ed1i CERT v\u00e0o th\u00e1ng 1 n\u0103m 1996. L\u1eddi khuy\u00ean n\u00e0y nh\u1ea5n m\u1ea1nh t\u1ea7m quan tr\u1ecdng c\u1ee7a vi\u1ec7c l\u1ecdc l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111i \u0111\u1ec3 gi\u1ea3m thi\u1ec3u c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 ph\u00e2n t\u00e1n (DDoS) d\u1ef1a tr\u00ean vi\u1ec7c gi\u1ea3 m\u1ea1o \u0111\u1ecba ch\u1ec9 IP.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 l\u1ecdc \u0111\u1ea7u ra. M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1 L\u1ecdc \u0111\u1ea7u ra.<\/h2>\n<p>L\u1ecdc \u0111\u1ea7u ra ch\u1ee7 y\u1ebfu li\u00ean quan \u0111\u1ebfn vi\u1ec7c gi\u00e1m s\u00e1t v\u00e0 \u0111i\u1ec1u ch\u1ec9nh l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp tho\u00e1t kh\u1ecfi m\u1ea1ng th\u00f4ng qua m\u00e1y ch\u1ee7 proxy ho\u1eb7c t\u01b0\u1eddng l\u1eeda. N\u00f3 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt b\u1ed5 sung cho b\u1ed9 l\u1ecdc x\u00e2m nh\u1eadp, t\u1eadp trung v\u00e0o vi\u1ec7c ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ebfn. B\u1eb1ng c\u00e1ch xem x\u00e9t k\u1ef9 l\u01b0\u1ee1ng l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111i, t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra nh\u1eb1m m\u1ee5c \u0111\u00edch ng\u0103n ch\u1eb7n r\u00f2 r\u1ec9 d\u1eef li\u1ec7u, ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c li\u00ean l\u1ea1c \u0111\u1ed9c h\u1ea1i c\u0169ng nh\u01b0 th\u1ef1c thi c\u00e1c ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt.<\/p>\n<p>Qu\u00e1 tr\u00ecnh l\u1ecdc \u0111\u1ea7u ra bao g\u1ed3m vi\u1ec7c ki\u1ec3m tra c\u00e1c g\u00f3i r\u1eddi kh\u1ecfi m\u1ea1ng v\u00e0 so s\u00e1nh ch\u00fang v\u1edbi m\u1ed9t t\u1eadp h\u1ee3p c\u00e1c quy t\u1eafc \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh tr\u01b0\u1edbc. C\u00e1c quy t\u1eafc n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c qu\u1ea3n tr\u1ecb vi\u00ean m\u1ea1ng v\u00e0 nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy \u0111\u1ecbnh c\u1ea5u h\u00ecnh \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh l\u01b0u l\u01b0\u1ee3ng n\u00e0o \u0111\u01b0\u1ee3c ph\u00e9p r\u1eddi kh\u1ecfi m\u1ea1ng v\u00e0 l\u01b0u l\u01b0\u1ee3ng n\u00e0o s\u1ebd b\u1ecb ch\u1eb7n.<\/p>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a b\u1ed9 l\u1ecdc Egress. C\u00e1ch ho\u1ea1t \u0111\u1ed9ng c\u1ee7a b\u1ed9 l\u1ecdc Egress.<\/h2>\n<p>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a b\u1ed9 l\u1ecdc \u0111\u1ea7u ra th\u01b0\u1eddng bao g\u1ed3m c\u00e1c th\u00e0nh ph\u1ea7n sau:<\/p>\n<ol>\n<li>\n<p><strong>Ki\u1ec3m tra g\u00f3i:<\/strong> Khi m\u1ed9t g\u00f3i d\u1eef li\u1ec7u s\u1eafp r\u1eddi kh\u1ecfi m\u1ea1ng th\u00f4ng qua m\u00e1y ch\u1ee7 proxy, h\u1ec7 th\u1ed1ng l\u1ecdc \u0111\u1ea7u ra s\u1ebd ki\u1ec3m tra n\u1ed9i dung c\u1ee7a n\u00f3, bao g\u1ed3m \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n v\u00e0 \u0111\u00edch, c\u1ed5ng v\u00e0 th\u00f4ng tin ti\u00eau \u0111\u1ec1 g\u00f3i kh\u00e1c.<\/p>\n<\/li>\n<li>\n<p><strong>\u0110\u00e1nh gi\u00e1 quy t\u1eafc:<\/strong> G\u00f3i n\u00e0y \u0111\u01b0\u1ee3c so s\u00e1nh v\u1edbi m\u1ed9t b\u1ed9 quy t\u1eafc do qu\u1ea3n tr\u1ecb vi\u00ean m\u1ea1ng ho\u1eb7c nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy thi\u1ebft l\u1eadp. C\u00e1c quy t\u1eafc n\u00e0y x\u00e1c \u0111\u1ecbnh lo\u1ea1i l\u01b0u l\u01b0\u1ee3ng n\u00e0o \u0111\u01b0\u1ee3c ph\u00e9p v\u00e0 lo\u1ea1i n\u00e0o n\u00ean b\u1ecb t\u1eeb ch\u1ed1i.<\/p>\n<\/li>\n<li>\n<p>**H\u00e0nh \u0111\u1ed9ng: **D\u1ef1a tr\u00ean \u0111\u00e1nh gi\u00e1 quy t\u1eafc, h\u1ec7 th\u1ed1ng l\u1ecdc \u0111\u1ea7u ra quy\u1ebft \u0111\u1ecbnh cho ph\u00e9p hay ch\u1eb7n g\u00f3i r\u1eddi kh\u1ecfi m\u1ea1ng. L\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c ph\u00e9p \u0111\u01b0\u1ee3c ph\u00e9p \u0111i qua, trong khi l\u01b0u l\u01b0\u1ee3ng b\u1ecb ch\u1eb7n s\u1ebd b\u1ecb lo\u1ea1i b\u1ecf ho\u1eb7c chuy\u1ec3n h\u01b0\u1edbng \u0111\u1ec3 ph\u00e2n t\u00edch th\u00eam.<\/p>\n<\/li>\n<li>\n<p><strong>Ghi nh\u1eadt k\u00fd v\u00e0 b\u00e1o c\u00e1o:<\/strong> H\u1ec7 th\u1ed1ng l\u1ecdc l\u1ed1i ra th\u01b0\u1eddng bao g\u1ed3m kh\u1ea3 n\u0103ng ghi nh\u1eadt k\u00fd \u0111\u1ec3 ghi l\u1ea1i th\u00f4ng tin v\u1ec1 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u01b0\u1ee3c ph\u00e9p v\u00e0 b\u1ecb ch\u1eb7n. Th\u00f4ng tin n\u00e0y c\u00f3 gi\u00e1 tr\u1ecb \u0111\u1ec3 gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng m\u1ea1ng, x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n v\u00e0 ti\u1ebfn h\u00e0nh ki\u1ec3m tra b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a b\u1ed9 l\u1ecdc Egress.<\/h2>\n<p>L\u1ecdc \u0111\u1ea7u ra cung c\u1ea5p m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh g\u00f3p ph\u1ea7n t\u0103ng c\u01b0\u1eddng t\u00ednh b\u1ea3o m\u1eadt v\u00e0 hi\u1ec7u qu\u1ea3 c\u1ee7a m\u00e1y ch\u1ee7 proxy v\u00e0 m\u00f4i tr\u01b0\u1eddng m\u1ea1ng:<\/p>\n<ol>\n<li>\n<p><strong>Ng\u0103n ng\u1eeba m\u1ea5t d\u1eef li\u1ec7u (DLP):<\/strong> L\u1ecdc \u0111\u1ea7u ra gi\u00fap ng\u0103n ch\u1eb7n r\u00f2 r\u1ec9 d\u1eef li\u1ec7u b\u1eb1ng c\u00e1ch ki\u1ec3m so\u00e1t d\u1eef li\u1ec7u n\u00e0o c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c truy\u1ec1n ra ngo\u00e0i m\u1ea1ng. \u0110i\u1ec1u n\u00e0y \u0111\u1eb7c bi\u1ec7t quan tr\u1ecdng \u0111\u1ed1i v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c x\u1eed l\u00fd th\u00f4ng tin nh\u1ea1y c\u1ea3m v\u00e0 c\u00e1c y\u00eau c\u1ea7u tu\u00e2n th\u1ee7.<\/p>\n<\/li>\n<li>\n<p><strong>Ki\u1ec3m so\u00e1t ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 Botnet:<\/strong> B\u1eb1ng c\u00e1ch ch\u1eb7n c\u00e1c k\u1ebft n\u1ed1i g\u1eedi \u0111i \u0111\u1ebfn c\u00e1c mi\u1ec1n \u0111\u1ed9c h\u1ea1i v\u00e0 m\u00e1y ch\u1ee7 ra l\u1ec7nh v\u00e0 ki\u1ec3m so\u00e1t \u0111\u00e3 bi\u1ebft, t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra gi\u00fap ng\u0103n ng\u1eeba l\u00e2y nhi\u1ec5m ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c botnet li\u00ean l\u1ea1c v\u1edbi b\u1ed9 \u0111i\u1ec1u khi\u1ec3n c\u1ee7a ch\u00fang.<\/p>\n<\/li>\n<li>\n<p><strong>Gi\u1ea3m thi\u1ec3u gi\u1ea3 m\u1ea1o IP:<\/strong> L\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 gi\u00fap ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng DDoS d\u1ef1a v\u00e0o vi\u1ec7c gi\u1ea3 m\u1ea1o \u0111\u1ecba ch\u1ec9 IP b\u1eb1ng c\u00e1ch ch\u1eb7n c\u00e1c g\u00f3i c\u00f3 \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n kh\u00f4ng h\u1ee3p l\u1ec7 ho\u1eb7c tr\u00e1i ph\u00e9p.<\/p>\n<\/li>\n<li>\n<p><strong>Ki\u1ec3m so\u00e1t \u1ee9ng d\u1ee5ng tr\u00e1i ph\u00e9p:<\/strong> L\u1ecdc l\u1ed1i ra c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ch\u1eb7n c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c giao th\u1ee9c c\u1ee5 th\u1ec3 kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00e9p trong m\u00f4i tr\u01b0\u1eddng m\u1ea1ng, n\u00e2ng cao t\u00ednh b\u1ea3o m\u1eadt v\u00e0 n\u0103ng su\u1ea5t.<\/p>\n<\/li>\n<li>\n<p><strong>Quy\u1ec1n ri\u00eang t\u01b0 n\u00e2ng cao:<\/strong> L\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n vi\u1ec7c theo d\u00f5i v\u00e0 thu th\u1eadp d\u1eef li\u1ec7u kh\u00f4ng mong mu\u1ed1n b\u1eb1ng c\u00e1ch ch\u1eb7n c\u00e1c k\u1ebft n\u1ed1i \u0111\u1ebfn m\u1ed9t s\u1ed1 mi\u1ec1n ho\u1eb7c m\u00e1y ch\u1ee7 c\u1ee7a b\u00ean th\u1ee9 ba nh\u1ea5t \u0111\u1ecbnh \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi c\u00e1c ho\u1ea1t \u0111\u1ed9ng x\u00e2m l\u1ea5n d\u1eef li\u1ec7u.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i l\u1ecdc \u0111\u1ea7u ra<\/h2>\n<p>L\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n b\u1eb1ng nhi\u1ec1u k\u1ef9 thu\u1eadt v\u00e0 c\u00f4ng ngh\u1ec7 kh\u00e1c nhau. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 lo\u1ea1i l\u1ecdc \u0111\u1ea7u ra ph\u1ed5 bi\u1ebfn:<\/p>\n<table>\n<thead>\n<tr>\n<th>Lo\u1ea1i l\u1ecdc \u0111\u1ea7u ra<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>L\u1ecdc g\u00f3i c\u01a1 b\u1ea3n<\/strong><\/td>\n<td>M\u1ed9t d\u1ea1ng l\u1ecdc \u0111\u1ea7u ra \u0111\u01a1n gi\u1ea3n cho ph\u00e9p ho\u1eb7c ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp d\u1ef1a tr\u00ean c\u00e1c ti\u00eau ch\u00ed nh\u01b0 IP ngu\u1ed3n\/\u0111\u00edch, s\u1ed1 c\u1ed5ng v\u00e0 giao th\u1ee9c.<\/td>\n<\/tr>\n<tr>\n<td><strong>Ki\u1ec3m tra tr\u1ea1ng th\u00e1i<\/strong><\/td>\n<td>X\u00e2y d\u1ef1ng d\u1ef1a tr\u00ean t\u00ednh n\u0103ng l\u1ecdc g\u00f3i c\u01a1 b\u1ea3n b\u1eb1ng c\u00e1ch theo d\u00f5i tr\u1ea1ng th\u00e1i k\u1ebft n\u1ed1i v\u00e0 cho ph\u00e9p c\u00e1c g\u00f3i g\u1eedi \u0111i t\u01b0\u01a1ng \u1ee9ng v\u1edbi c\u00e1c k\u1ebft n\u1ed1i \u0111\u00e3 thi\u1ebft l\u1eadp.<\/td>\n<\/tr>\n<tr>\n<td><strong>L\u1ecdc l\u1edbp \u1ee9ng d\u1ee5ng<\/strong><\/td>\n<td>Ph\u00e2n t\u00edch l\u01b0u l\u01b0\u1ee3ng \u1edf l\u1edbp \u1ee9ng d\u1ee5ng (L\u1edbp 7) c\u1ee7a m\u00f4 h\u00ecnh OSI, cho ph\u00e9p ki\u1ec3m so\u00e1t chi ti\u1ebft h\u01a1n \u0111\u1ed1i v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 giao th\u1ee9c c\u1ee5 th\u1ec3.<\/td>\n<\/tr>\n<tr>\n<td><strong>L\u1ecdc URL<\/strong><\/td>\n<td>Ch\u1eb7n ho\u1eb7c cho ph\u00e9p l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp d\u1ef1a tr\u00ean URL, cung c\u1ea5p quy\u1ec1n ki\u1ec3m so\u00e1t truy c\u1eadp web v\u00e0 ng\u0103n k\u1ebft n\u1ed1i \u0111\u1ebfn c\u00e1c trang web \u0111\u1ed9c h\u1ea1i ho\u1eb7c kh\u00f4ng mong mu\u1ed1n.<\/td>\n<\/tr>\n<tr>\n<td><strong>Ng\u0103n ng\u1eeba m\u1ea5t d\u1eef li\u1ec7u (DLP)<\/strong><\/td>\n<td>T\u1eadp trung v\u00e0o vi\u1ec7c x\u00e1c \u0111\u1ecbnh v\u00e0 ch\u1eb7n d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m r\u1eddi kh\u1ecfi m\u1ea1ng, gi\u00fap ng\u0103n ch\u1eb7n r\u00f2 r\u1ec9 d\u1eef li\u1ec7u.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng t\u00ednh n\u0103ng L\u1ecdc \u0111\u1ea7u ra, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n<p>L\u1ecdc l\u1ed1i ra c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong nhi\u1ec1u t\u00ecnh hu\u1ed1ng kh\u00e1c nhau \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 c\u1ee7a m\u1ea1ng:<\/p>\n<ol>\n<li>\n<p><strong>M\u1ea1ng doanh nghi\u1ec7p:<\/strong> Trong m\u00f4i tr\u01b0\u1eddng c\u00f4ng ty, t\u00ednh n\u0103ng l\u1ecdc l\u1ed1i ra \u0111\u1ea3m b\u1ea3o r\u1eb1ng thi\u1ebft b\u1ecb c\u1ee7a nh\u00e2n vi\u00ean kh\u00f4ng g\u1eedi d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u1ee7a c\u00f4ng ty \u0111\u1ebfn c\u00e1c \u0111\u1ecba \u0111i\u1ec3m tr\u00e1i ph\u00e9p b\u00ean ngo\u00e0i m\u1ea1ng.<\/p>\n<\/li>\n<li>\n<p><strong>\u0110i\u1ec3m truy c\u1eadp Wi-Fi c\u00f4ng c\u1ed9ng:<\/strong> T\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c tri\u1ec3n khai trong c\u00e1c m\u1ea1ng Wi-Fi c\u00f4ng c\u1ed9ng \u0111\u1ec3 ng\u0103n ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i v\u00e0 b\u1ea3o v\u1ec7 ng\u01b0\u1eddi d\u00f9ng kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n.<\/p>\n<\/li>\n<li>\n<p><strong>D\u1ecbch v\u1ee5 d\u1ef1a tr\u00ean \u0111\u00e1m m\u00e2y:<\/strong> C\u00e1c nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy nh\u01b0 OneProxy c\u00f3 th\u1ec3 t\u00edch h\u1ee3p t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra \u0111\u1ec3 n\u00e2ng cao t\u00ednh b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 cho ng\u01b0\u1eddi d\u00f9ng c\u1ee7a h\u1ecd khi truy c\u1eadp c\u00e1c d\u1ecbch v\u1ee5 d\u1ef1a tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n<\/li>\n<\/ol>\n<p>Nh\u1eefng th\u00e1ch th\u1ee9c v\u00e0 gi\u1ea3i ph\u00e1p:<\/p>\n<ol>\n<li>\n<p><strong>Ch\u1eb7n qu\u00e1 m\u1ee9c:<\/strong> T\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 v\u00f4 t\u00ecnh ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp h\u1ee3p ph\u00e1p, d\u1eabn \u0111\u1ebfn c\u00e1c v\u1ea5n \u0111\u1ec1 v\u1ec1 n\u0103ng su\u1ea5t. \u0110\u1ec3 gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 n\u00e0y, vi\u1ec7c c\u1eadp nh\u1eadt quy t\u1eafc th\u01b0\u1eddng xuy\u00ean v\u00e0 tinh ch\u1ec9nh l\u00e0 r\u1ea5t c\u1ea7n thi\u1ebft.<\/p>\n<\/li>\n<li>\n<p><strong>L\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a:<\/strong> L\u1ecdc \u0111\u1ea7u ra ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi nh\u1eefng th\u00e1ch th\u1ee9c trong vi\u1ec7c ki\u1ec3m tra l\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Tri\u1ec3n khai c\u00e1c k\u1ef9 thu\u1eadt ch\u1eb7n SSL\/TLS c\u00f3 th\u1ec3 gi\u00fap ph\u00e2n t\u00edch c\u00e1c g\u00f3i d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a v\u00ec m\u1ee5c \u0111\u00edch b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<li>\n<p><strong>Qu\u1ea3n l\u00fd quy t\u1eafc ph\u1ee9c t\u1ea1p:<\/strong> Khi m\u1ea1ng ph\u00e1t tri\u1ec3n, vi\u1ec7c qu\u1ea3n l\u00fd c\u00e1c quy t\u1eafc l\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 tr\u1edf n\u00ean ph\u1ee9c t\u1ea1p. Vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd t\u1eadp trung c\u00f3 th\u1ec3 h\u1ee3p l\u00fd h\u00f3a vi\u1ec7c qu\u1ea3n l\u00fd quy t\u1eafc.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1 d\u01b0\u1edbi d\u1ea1ng b\u1ea3ng v\u00e0 danh s\u00e1ch<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0111\u1eb7c tr\u01b0ng<\/th>\n<th>L\u1ecdc \u0111\u1ea7u ra<\/th>\n<th>L\u1ecdc x\u00e2m nh\u1eadp<\/th>\n<th>Ki\u1ec3m tra g\u00f3i s\u00e2u<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>M\u1ee5c \u0111\u00edch<\/td>\n<td>Ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp ra ngo\u00e0i<\/td>\n<td>Ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp v\u00e0o<\/td>\n<td>Ph\u00e2n t\u00edch v\u00e0 ki\u1ec3m tra c\u00e1c g\u00f3i \u1edf l\u1edbp \u1ee9ng d\u1ee5ng<\/td>\n<\/tr>\n<tr>\n<td>T\u1eadp trung<\/td>\n<td>L\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111i<\/td>\n<td>L\u01b0u l\u01b0\u1ee3ng truy c\u1eadp v\u00e0o<\/td>\n<td>C\u1ea3 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp v\u00e0o v\u00e0 ra<\/td>\n<\/tr>\n<tr>\n<td>L\u1edbp OSI<\/td>\n<td>M\u1ea1ng v\u00e0 Giao th\u00f4ng v\u1eadn t\u1ea3i<\/td>\n<td>M\u1ea1ng v\u00e0 Giao th\u00f4ng v\u1eadn t\u1ea3i<\/td>\n<td>\u1ee8ng d\u1ee5ng<\/td>\n<\/tr>\n<tr>\n<td>Quy\u1ec1n l\u1ee3i b\u1ea3o m\u1eadt<\/td>\n<td>Ng\u0103n ng\u1eeba m\u1ea5t d\u1eef li\u1ec7u, ki\u1ec3m so\u00e1t botnet, gi\u1ea3m thi\u1ec3u gi\u1ea3 m\u1ea1o IP<\/td>\n<td>B\u1ea3o v\u1ec7 ch\u1ed1ng truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0 c\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1eeb b\u00ean ngo\u00e0i<\/td>\n<td>Ph\u00e2n t\u00edch n\u00e2ng cao v\u00e0 ph\u00e1t hi\u1ec7n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 c\u00e1c n\u1ed7 l\u1ef1c x\u00e2m nh\u1eadp<\/td>\n<\/tr>\n<tr>\n<td>Vai tr\u00f2 trong m\u00e1y ch\u1ee7 proxy<\/td>\n<td>T\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 c\u1ee7a ng\u01b0\u1eddi d\u00f9ng<\/td>\n<td>\u0110\u1ea3m b\u1ea3o an ninh m\u1ea1ng<\/td>\n<td>Cho ph\u00e9p ph\u00e2n t\u00edch g\u00f3i chi ti\u1ebft h\u01a1n cho m\u1ee5c \u0111\u00edch b\u1ea3o m\u1eadt<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn l\u1ecdc \u0111\u1ea7u ra<\/h2>\n<p>T\u01b0\u01a1ng lai c\u1ee7a b\u1ed9 l\u1ecdc \u0111\u1ea7u ra c\u00f3 th\u1ec3 s\u1ebd ch\u1ee9ng ki\u1ebfn nh\u1eefng ti\u1ebfn b\u1ed9 trong c\u00e1c l\u0129nh v\u1ef1c sau:<\/p>\n<ol>\n<li>\n<p><strong>H\u1ecdc m\u00e1y v\u00e0 AI:<\/strong> H\u1ec7 th\u1ed1ng l\u1ecdc l\u1ed1i ra c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng thu\u1eadt to\u00e1n m\u00e1y h\u1ecdc v\u00e0 AI \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda ch\u01b0a bi\u1ebft tr\u01b0\u1edbc \u0111\u00e2y d\u1ef1a tr\u00ean ph\u00e2n t\u00edch h\u00e0nh vi.<\/p>\n<\/li>\n<li>\n<p><strong>M\u1ea1ng kh\u00f4ng tin c\u1eady:<\/strong> L\u1ecdc \u0111\u1ea7u ra s\u1ebd \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c tri\u1ec3n khai ki\u1ebfn tr\u00fac m\u1ea1ng kh\u00f4ng tin c\u1eady, trong \u0111\u00f3 t\u1ea5t c\u1ea3 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u01b0\u1ee3c coi l\u00e0 kh\u00f4ng \u0111\u00e1ng tin c\u1eady cho \u0111\u1ebfn khi \u0111\u01b0\u1ee3c x\u00e1c minh.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o m\u1eadt IoT:<\/strong> Khi Internet of Things (IoT) ti\u1ebfp t\u1ee5c ph\u00e1t tri\u1ec3n, vi\u1ec7c l\u1ecdc \u0111\u1ea7u ra s\u1ebd tr\u1edf n\u00ean quan tr\u1ecdng trong vi\u1ec7c ki\u1ec3m so\u00e1t v\u00e0 b\u1ea3o m\u1eadt l\u01b0u l\u01b0\u1ee3ng do c\u00e1c thi\u1ebft b\u1ecb IoT t\u1ea1o ra.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi t\u00ednh n\u0103ng l\u1ecdc \u0110\u1ea7u ra<\/h2>\n<p>C\u00e1c m\u00e1y ch\u1ee7 proxy, nh\u01b0 OneProxy, \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c tri\u1ec3n khai t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra cho ng\u01b0\u1eddi d\u00f9ng c\u1ee7a h\u1ecd. B\u1eb1ng c\u00e1ch \u0111\u1ecbnh tuy\u1ebfn l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111i th\u00f4ng qua m\u00e1y ch\u1ee7 proxy, h\u1ecd c\u00f3 th\u1ec3 ki\u1ec3m so\u00e1t v\u00e0 l\u1ecdc d\u1eef li\u1ec7u r\u1eddi kh\u1ecfi m\u1ea1ng m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3. \u0110i\u1ec1u n\u00e0y cung c\u1ea5p th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 cho ng\u01b0\u1eddi d\u00f9ng, \u0111\u1eb7c bi\u1ec7t khi truy c\u1eadp Internet t\u1eeb c\u00e1c m\u1ea1ng c\u00f4ng c\u1ed9ng ho\u1eb7c kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/p>\n<p>M\u00e1y ch\u1ee7 proxy c\u0169ng c\u00f3 th\u1ec3 t\u00edch h\u1ee3p c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt kh\u00e1c, ch\u1eb3ng h\u1ea1n nh\u01b0 l\u1ecdc URL, ki\u1ec3m tra SSL v\u00e0 l\u1ecdc n\u1ed9i dung, \u0111\u1ec3 n\u00e2ng cao kh\u1ea3 n\u0103ng l\u1ecdc \u0111\u1ea7u ra c\u1ee7a ch\u00fang. Ngo\u00e0i ra, ch\u00fang c\u00f2n cung c\u1ea5p k\u00eanh li\u00ean l\u1ea1c \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a gi\u1eefa ng\u01b0\u1eddi d\u00f9ng v\u00e0 internet, b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 l\u1ecdc Egress v\u00e0 b\u1ea3o m\u1eadt m\u1ea1ng, b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.cert.org\/\" target=\"_new\" rel=\"noopener nofollow\">Trung t\u00e2m \u0111i\u1ec1u ph\u1ed1i CERT<\/a><\/li>\n<li><a href=\"https:\/\/www.nist.gov\/publications\/guide-firewalls-and-vpns\" target=\"_new\" rel=\"noopener nofollow\">Vi\u1ec7n Ti\u00eau chu\u1ea9n v\u00e0 C\u00f4ng ngh\u1ec7 Qu\u1ed1c gia (NIST) \u2013 H\u01b0\u1edbng d\u1eabn v\u1ec1 T\u01b0\u1eddng l\u1eeda v\u00e0 VPN<\/a><\/li>\n<li><a href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/asa\/asa97\/configuration\/firewall\/asa-97-firewall-config\/access-egress-filter.html\" target=\"_new\" rel=\"noopener nofollow\">Cisco \u2013 Gi\u1ea3i th\u00edch v\u1ec1 l\u1ecdc \u0111\u1ea7u ra<\/a><\/li>\n<\/ol>\n<p>B\u1eb1ng c\u00e1ch tri\u1ec3n khai t\u00ednh n\u0103ng l\u1ecdc \u0111\u1ea7u ra, c\u00e1c nh\u00e0 cung c\u1ea5p m\u00e1y ch\u1ee7 proxy nh\u01b0 OneProxy \u0111\u1ea3m b\u1ea3o r\u1eb1ng d\u1eef li\u1ec7u c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c truy\u1ec1n \u0111i m\u1ed9t c\u00e1ch an to\u00e0n v\u00e0 m\u00f4i tr\u01b0\u1eddng m\u1ea1ng c\u1ee7a h\u1ecd \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 tr\u01b0\u1edbc c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n. L\u1ecdc \u0111\u1ea7u ra l\u00e0 m\u1ed9t th\u00e0nh ph\u1ea7n quan tr\u1ecdng c\u1ee7a th\u1ef1c ti\u1ec5n an ninh m\u1ea1ng hi\u1ec7n \u0111\u1ea1i, cung c\u1ea5p kh\u1ea3 n\u0103ng b\u1ea3o m\u1eadt, quy\u1ec1n ri\u00eang t\u01b0 v\u00e0 ki\u1ec3m so\u00e1t n\u00e2ng cao \u0111\u1ed1i v\u1edbi l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp m\u1ea1ng ra ngo\u00e0i.<\/p>","protected":false},"featured_media":477045,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477044","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Egress Filtering: Enhancing Security and Privacy in Proxy Servers<\/mark>","faq_items":[{"question":"What is egress filtering, and why is it important for proxy server users?","answer":"<p>Egress filtering is a cybersecurity practice that involves monitoring and controlling outbound network traffic through a proxy server. It allows only authorized and safe communication to leave the network, preventing data leaks and blocking malicious activities. For proxy server users, egress filtering ensures enhanced security and privacy while browsing the internet, protecting sensitive data and mitigating potential threats.<\/p>"},{"question":"How does egress filtering work in proxy servers?","answer":"<p>In proxy servers, egress filtering inspects outbound data packets and compares them against predefined rules set by administrators. These rules determine what traffic is allowed to leave the network and what should be blocked. The filtering system then takes appropriate actions, either permitting or dropping the packets based on the rule evaluation. Egress filtering plays a vital role in keeping unwanted or harmful traffic at bay, safeguarding users from cyber risks.<\/p>"},{"question":"What are the key features of egress filtering?","answer":"<p>Egress filtering offers several essential features, including:<\/p><ol><li><p>Data Loss Prevention (DLP): Protects against data leaks and ensures sensitive information stays within the network.<\/p><\/li><li><p>Malware and Botnet Control: Blocks connections to known malicious domains and prevents malware infections.<\/p><\/li><li><p>IP Spoofing Mitigation: Thwarts Distributed Denial of Service (DDoS) attacks that rely on forged IP addresses.<\/p><\/li><li><p>Unauthorized Application Control: Blocks specific applications or protocols that are not permitted in the network.<\/p><\/li><li><p>Enhanced Privacy: Prevents unwanted tracking and data collection by blocking connections to intrusive servers.<\/p><\/li><\/ol>"},{"question":"What types of egress filtering are commonly used?","answer":"<p>Common types of egress filtering include:<\/p><ul><li>Basic Packet Filtering: Allows or blocks traffic based on source\/destination IP, port numbers, and protocols.<\/li><li>Stateful Inspection: Tracks connection states and permits outbound packets for established connections.<\/li><li>Application Layer Filtering: Analyzes traffic at the application layer, enabling granular control over specific applications.<\/li><li>URL Filtering: Blocks or allows traffic based on URLs, providing control over web access.<\/li><li>Data Loss Prevention (DLP): Focuses on identifying and blocking sensitive data from leaving the network.<\/li><\/ul>"},{"question":"How can proxy servers like OneProxy benefit from egress filtering?","answer":"<p>Proxy servers like OneProxy implement egress filtering to provide their users with enhanced security and privacy. By routing outbound traffic through the proxy, OneProxy can apply filtering rules, block malicious connections, and protect sensitive data from leaving the network. This integration of egress filtering ensures safer and more secure browsing experiences for OneProxy users.<\/p>"},{"question":"What challenges may arise with egress filtering, and how can they be addressed?","answer":"<p>Challenges with egress filtering include overblocking legitimate traffic, difficulties in inspecting encrypted traffic, and managing complex rules. To address these issues, regular rule updates and fine-tuning are necessary to minimize false positives. SSL\/TLS interception techniques can help analyze encrypted data, and centralized management tools can streamline rule administration.<\/p>"},{"question":"How does egress filtering contribute to the future of network security?","answer":"<p>The future of egress filtering is expected to witness advancements in machine learning and AI-based threat detection, zero-trust networking implementation, and security measures for the growing Internet of Things (IoT). Egress filtering will play a pivotal role in ensuring robust network security and privacy in the evolving digital landscape.<\/p>"},{"question":"Where can I find more information about egress filtering and network security?","answer":"<p>For more information about egress filtering and network security, you can explore the following resources:<\/p><ul><li>CERT Coordination Center: Visit their website at <a href=\"https:\/\/www.cert.org\/\" target=\"_new\">https:\/\/www.cert.org\/<\/a> for in-depth information on cybersecurity practices.<\/li><li>NIST - Guide to Firewalls and VPNs: Access the guide at <a href=\"https:\/\/www.nist.gov\/publications\/guide-firewalls-and-vpns\" target=\"_new\">https:\/\/www.nist.gov\/publications\/guide-firewalls-and-vpns<\/a> for comprehensive insights into network security.<\/li><li>Cisco - Egress Filtering Explained: Learn more about egress filtering from Cisco's detailed explanation at <a href=\"https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/asa\/asa97\/configuration\/firewall\/asa-97-firewall-config\/access-egress-filter.html\" target=\"_new\">https:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/security\/asa\/asa97\/configuration\/firewall\/asa-97-firewall-config\/access-egress-filter.html<\/a>.<\/li><\/ul>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477044","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477044\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/477045"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}