I hangaia ngā miihini rapu hei tohu i ngā ihirangi. Heoi, ka whakamahia e ngā kaiwhakaeke hei tohu i ō hapa. Ko te patai tuhinga katoa:login momo kōnae:rangitaki tērā pea he āhua kore kino. Ko te mea pono, koinei tētahi o ngā huarahi māmā ki te kimi i ngā kōnae rangitaki kua kitea kei roto ngā rerenga manatoko, ngā tohu tuakiri, ngā tohu, me ngā raraunga hanganga ā-roto.
Mena ka taea e Google te kite i aua rangitaki, ka taea hoki e ngā kaiwhakaeke. Kia oti te taupū, ka kore e taea te karo i te whakaaturanga. Heoi anō, ina puta ngā tohu tuakiri ki roto i tētahi kōnae e taea te uru atu ki te marea, kua tīmata kē te takahi ture.
1. He aha te take o te allintext:login He nui ake te mōrearea o te momo kōnae:log i tōna āhua
Ko te Google dork he rapunga matatau e whakamahi ana i ngā kaiwhakahaere matatau hei kimi i ngā ihirangi tairongo, kua whirihorahia rānei kua tohua e ngā miihini rapu. Kāore e whakamahi kino i a Google. Engari, ka whakamahi kino i tō whakaaturanga.
E whakakotahi ana tēnei patai i ngā kaiwhakahaere e rua:
- tuhinga katoa: ka whakahokia mai ngā whārangi kei reira ngā kupu katoa e puta ana i roto i te tuhinga tinana
- momo kōnae:rangitaki whakawhāiti i ngā hua ki
.logkōnae
Na reira:
Ko te tikanga: "Whakaaturia mai ki ahau ngā kōnae rangitaki kei roto te kupu login. "
Ki te titiro tuatahi, he iti noa iho te āhua. Heoi, i roto i te mahi, he maha tonu ngā wā ka hoki mai:
- Ngā rangitaki tūmau tukutuku e whakaatuhia ana ki te marea
- CI/CD ngā rangitaki i tukuna ake hei taonga tuku iho
- Ngā rangitaki patuiro i tūpono kore commiti tukuna ki ngā putunga taonga
- Ngā rangitaki tono me ngā tohu kuputuhi māmā
Ehara tēnei i te hapa rapu a te miihini rapu. Engari, he te ngoikoretanga o te whakaaturanga raraunga nā te whirihoranga hē. I tātai noa a Google i ngā mea e wātea ana ki te marea.
2. Ngā mea e kitea ana e ngā kaiwhakaeke i roto i ngā kōnae rangitaki kua kitea
Ina rere ngā kaiwhakaeke tuhinga katoa:login momo kōnae:rangitaki, kāore rātou e tirotiro noa ana. E rapu ana rātou i ngā tohu manatoko.
2.1 Ngā Tohu Paerewa
He maha ngā wā kei roto i ngā rangitaki ngā tāurunga pēnei i:
or
Ahakoa ngā tohu SMTP:
Ko te takiuru i ngā kawenga manatoko tētahi o ngā huarahi tere ki te turuturu i ngā tohu whakaputa. Nō reira, ka taea e te kōnae takiuru kotahi te whakaatu te whakakore i tō tauira mana uru katoa.
2.2 Ngā Tohu Wātū me ngā JWT
Ahakoa kāore ngā kupuhipa e takiurutia ana, he maha ngā wā ka takiurutia ngā tohu.
Hei tauira:
He JWT tika, he pihikete wātū rānei i roto i tētahi .log Ka taea e te kōnae te whakahohe:
- Wātū kahakina
- Te pikinga o te mana motuhake
- Te nekehanga taha puta noa i ngā pūnaha ā-roto
Arā, ka hurihia e ngā tohu i roto i ngā rangitaki te putanga patuiro hei ara karo motuhēhēnga.
2.3 CI/CD Nga taonga
He tino morearea ngā rākau hanga whare. Ina hoki, CI/CD He maha ngā wā ka tāia e ngā pūnaha ngā taurangi taiao i ngā mahi hanga.
Ka kitea pinepine e ngā kaiwhakaeke:
Kei roto ngā rārangi pēnei i:
If CI/CD Ka tūmatanui ngā taonga tuku iho, kātahi ka tūmatanui ngā mea ngaro. Mā te Google dock ka tere ake te kimi.
2.4 Ngā Raraunga Kapua me ngā Hanganga
E whakaatu pinepine ana ngā rangitaki kua kitea:
- Ngā kī urunga AWS
- Ngā aho hononga rokiroki Azure
- Ngā URL ratonga ā-roto
- Taipitopito raraunga
- Ngā pūwāhi Redis
Ahakoa ka hurihia ngā tohu tuakiri i muri mai, kei te kaiwhakaeke inaianei:
- Te mahere hanganga
- Whakaingoa tikanga
- Te mātauranga whāinga mō ngā whakaekenga a meake nei
Nō reira, mā ngā rangitaki kua kitea ka taea te uru atu me te tirotiro haere.
3. Te Huarahi Tuatahi mō te Whakapuakitanga o ēnei Rangitaki
Kāore ngā rangitaki e puta noa mai i roto i a Google. Ka whakarārangihia ēnei nā te mea ka taea te toro atu ki te marea.
3.1 Ngā Tūmau Tukutuku i Whirihorahia Hē
Ko ngā tauira noa ko:
/logs/ngā whaiaronga e taea te uru atu me te kore e manatoko- Kua whakahohea te rārangi whaiaronga
- Nginx, Apache rānei e mahi mata ana
.logkōnae
Mena ka taea te toro atu ki tētahi rangitaki mā te HTTP, ka taea te taupū.
3.2 CI/CD Te Whakaaturanga o ngā Taonga Tawhito
Hapa angamaheni:
- Ngā taonga tūmatanui kua whakahohea i roto i Nga Mahi a GitHub
- Ngā rangitaki kua tukuna ake ki ngā peere S3 tuwhera
- Pipeline ngā tohu e taea te uru atu me te kore e manatoko
A pipeline e penapena ana i ngā poro rākau ki roto i tētahi peere tūmatanui ka whakaputa tika i ana mea ngaro.
3.3 Aratau Patuiro i roto i te Whakaputa
Ka mōrearea pea ngā taunoa anga:
Hei tāpiritanga, ka tāia pea e te nui rawa o te takiuru tono:
- Pane
- Ngā tohu
- Ngā tinana tono katoa
Mā te takiuru patuiro i roto i te whakaputanga ka huri tō tono hei kaweake tohu tuakiri.
3.4 Ngā Rārangi Docker me ngā Ipu
Ka whakauruhia e ngā taiao ipu ngā ara whakaaturanga hou:
- Ngā rangitaki kua tāuta ki roto i ngā rōrahi tiritahi
- Ngā motuka taha e kaweake ana i ngā rangitaki ki ngā pito mutunga kāore i te haumaru
- Rangitaki dashboardme te urunga a te marea
Mena ka whakaatuhia ngā rangitaki ipu mā te HTTP, mā te rokiroki tuwhera rānei, ka taea te rapu. Ā tōna wā, ka tātaitia.
4. Rere Whakaeke Tūturu: Mai i te Dork ki te Break
Koinei te āhua o te mekameka whakaeke noa:
Ka oma te kaiwhakaeke:
- Ngā mea i kitea
.logkōnae - Tangohanga:
- Tohu JWT
- Pane Whakamana Taketake
- aho hononga pātengi raraunga
Ngā nganatanga motuhēhēnga ki:
- Ngā pūwāhi API
- Ngā papa whakahaere
- Ngā ratonga ā-roto
Mena ka angitu te manatoko, ka taea e te kaiwhakaeke te:
- Whakanuia ngā mana
- Neke taha
- Access CI/CD
- Whakararuraru i te mekameka tuku
Ko te mea i tīmata hei rapunga ka huri hei:
- Wātū kahakina
- Te whakakī i ngā tohu ā-roto
- Pipeline ohorere,
- Te paitini o ngā mea hanga
Nō tētahi kōnae rangitaki kua whakarārangihia ki te marea katoa.
5. He aha te take he raruraru AppSec te "Nui Rawa" o te Takiuru
Kāore te mahi poro rākau i te noho pūmau. Engari, ka hangaia he te toa raraunga tuarua.
Ki te takiuru koe i ngā raraunga tairongo, ka hangaia e koe he tārua tuarua o ō mea ngaro.
Heoi, he maha ngā wā ka tangohia ngā rangitaki mai i te whakatauira mōrearea. I raro i te STRIDE, e hono mārama ana tēnei ki:
Nga korero Panui
Nō reira, Haumaru SDLC me whakahaere e ngā mahi ngā rangitaki penei:
- Ngā taonga e pā ana ki te haumarutanga
- Ngā rawa tairongo
- Ngā wāhanga hanganga e hiahia ana kia tiakina
Ki te kore e arohia ngā rangitaki e tō tauira mōrearea, kāore i oti.
6. Me pēhea te ārai i te turuturu o te tohu tuakiri i roto i ngā kōnae takiuru
6.1 Ngā Mea Ngaro Whakamutu i te Takiuru
Kaua rawa e takiuru:
- Kupuhipa
- Ngā tohu
- Taviri API
- Ngā ID Wātū
- Ngā pane whakamanatanga
Ahakoa i roto i te aratau patuiro.
I ngā wā katoa e taea ai, whakamahia te whakatika aunoa.
6.2 Te Takitaki Hanganga me te Haumaru
Whakamahia te takiuru hanganga me te huna me te tātari.
Tauira (Node.js):
Tauira (Python):
He māmā noa te mātāpono matua: kaua rawa ngā mea ngaro e tae ki te totohu rakau.
6.3 Te Rokiroki Rārangi Maukati
Me whakauru ngā mana whakahaere haumaru:
- Monokia te rārangi whaiaronga
- Tiakina
/logs/ngā ara me te manatoko - Whakawhāitihia te urunga ki te peere
- Whakamahia ngā kaupapa here pupuri
- Whakamunatia ngā rangitaki e okioki ana
Kaua rawa ngā rangitaki e taea te toro atu ki te marea mā te HTTP.
6.4 CI/CD Guardrails
Kāore e ranea ngā arotake ā-ringa. Engari, whakamahia ngā mana whakahaere aunoa:
- Te matawai ngaro i ngā rangitaki i mua i te whakaputanga o ngā taonga tuku iho
- Kāore e angitu ngā hanganga mēnā ka kitea ngā tohu
- Ārai i ngā tukuake taonga kei roto ngā tohu tuakiri
- Whakamanatanga hash mō ngā taonga tuku iho
CI/CD me ārai i te whakaaturanga i mua i te mahi taupū.
7. Te Ārai a Xygeni i te allintext:login momo kōnae: rangitaki Ngā Takahanga
Ehara i te kuware o Google te raruraru. Ko te whakaaturanga te raruraru. Nō reira, me ārai i mua i te tātaitanga.
7.1 Te Kitenga Huna i roto i ngā Rangitaki me ngā Taonga Tuku Iho
Ngā matawai Xygeni:
- Ngā rangitaki tono
- CI/CD ngā tohu mahi
- Hangaia ngā taonga tuku iho
- Ngā paparanga Docker
- Ngā putanga raupapa
Mena ka puta mai ngā tohu tuakiri, ngā tohu, ngā uara tairongo rānei i roto i .log ngā kōnae, ka tohua tonutia e Xygeni.
7.2 CI/CD Guardrails Te Whakaaturanga Poraka
Engari i te whakawhirinaki ki ngā arotake ā-ringa, Ka whakatinanahia e Xygeni te haumarutanga i te pipeline taumata:
Tenei:
- Ka rahua ngā hanganga ina puta ngā mea ngaro i roto i ngā rangitaki
- Ārai i te whakaputanga o ngā taonga tuku iho
- Ārai i te tūponotanga tūmatanui
- Ka mutu ngā hanumitanga haumaru kore i mua i te taenga ki te matua
Mena ka tāia he tohu e te mahi CI, ka pipeline rahua.
Kāore he taupūtanga.
Kāore he whakaaturanga.
Kāore he aituā.
7.3 Te Parenga Whakawhiti-Mauī i mua i te kitenga a Google
He mea nui te wa.
Engari i te tauhohe ki:
Ka mutu te raruraru i a Xygeni:
- At commit wā
- I roto i pull request whakamanatanga
- I roto i pipeline Tuhinga
- I mua i te whakaputanga o ngā taonga tuku iho
Ki te kore te rangitaki e tūmatanui, e kore rawa a Google e tātaitia.
Ko te Whakamutunga: Ki te taea e Google te Tāurangi, kua taea kē e ngā Kaiwhakaeke
Kāore ngā rangitaki i te kino. Inaa, he onge te wā poto. I te taunoa, kāore i te tūmataiti. Nō reira, me whakaaro ia kōnae rangitaki hei rawa e pā ana ki te haumarutanga, kaua ko te putanga patuiro anake.
Mena ka tae atu ngā raraunga tairongo ki tētahi .log kōnae, ā, ka wātea ki te marea, ka huri tonu hei mata whakaeke. Heoi anō, ina tāpaetia e te pūkaha rapu, ka tauine te whakaaturanga ki tua atu i tō mana whakahaere.
Ehara te otinga i te aukati i te takiuru. Engari, ko te takiuru me te kawenga me te whakatinana i ngā mana whakahaere pakari mō te rokiroki me te tohatoha. Arā, me toro atu te haumarutanga ki tua atu i te tono tonu, tae atu ki te paparanga tirotiro.
Hei utu mo:
- Kati te takiuru i ngā mea ngaro
- Maukatihia te rokiroki rangitaki
- Whakamana pipeline guardrails
- Aunoa te kimi me te whakatinana i ngā kaupapa here
I te mutunga, ko te ārai he mea e pā ana ki te wā. Nā te mea kotahi tuhinga katoa:login momo kōnae:rangitaki ka whakahokia mai tō rohe, kua tīmata kē te aituā.
