ITelegram, WhatsApp+380637610482
UValery Danyuk
UValery DanyukumphuhlisiUkuphuhlisa izixhobo ze-AI zamashishini. Umgangatho ophezulu. Ifikeleleka ngexabiso eliphantsi.Bhala kwi-Telegram

Ukujonga ii-HTTP Headers kwi-Intanethi: Oko iServer yakho ikuphendulayo kunye nendlela yokuyilungisa

Jonga ii-headers ze-HTTP kwi-intanethi: ukhuseleko, i-caching, i-compression, kunye ne-CORS kwimpendulo yeseva

Oko uza kukufumana

  • Uluhlu lwee-headers zempendulo zeseva kunye namanqaku okhuseleko ngokwepesenti - kutshekisho olunye
  • Ukuqonda ukuba zeziphi izihloko ezichaphazela i-SEO kunye nesantya, kwaye zeziphi ezichaphazela ukhuseleko lwabatyeleli
  • Thelekisa ne-securityheaders.com, i-DevTools, kunye ne-curl: Yeyiphi elula ngakumbi?
Faka isicelo: kwimizuzu eli-10Igcina: Iiyure ezichithwe kuzama ukufumana unobangela wokulayisha kancinci kunye nezilumkiso "ezingakhuselekanga"

Impendulo emfutshane: ukujonga ii-headers ze-HTTP kwi-intanethi, ncamathisela idilesi yephepha kwi- PromoPilot's HTTP Header Checker uze ucofe ku-"Check." Esi sixhobo siza kubonisa zonke ii-headers zempendulo yeseva, ireyithingi yepesenti yokhuseleko, i-caching, i-compression, kunye nezicwangciso ze-CORS, kunye ne-redirect chain kwi-URL yokugqibela. Akukho bhaliso lufunekayo. Apha ngezantsi uza kufumana ulwazi malunga nokuba zeziphi ii-headers ezibalulekileyo, indlela yokufunda iziphumo, kunye nokuba yintoni ekufuneka uyilungise kuqala.

Ndijonga ii-headers kwiprojekthi nganye ngaphambi kokuba ndiyidlulisele: le yindlela endifumana ngayo isiqingatha seengxaki "ezingaqondakaliyo"—indawo engagcini zincwadi, ekhonza amaphepha ngaphandle kokucinezela, okanye elibale ukukhusela i-HTTPS.

Kubonisa ntoni ukujonga ii-headers zeHTTP?

Xa ibrowser okanye irobhothi yenjini yokukhangela icela iphepha, iseva iqala iphendule ngemigca yenkonzo—ii-headers—ize emva koko ibuyisele i-HTML. Ezi headers zichaza indlela iphepha elifanele ligcinwe ngayo, nokuba licinezelwe, nokuba lingafakwa kwenye iwebhusayithi, kunye nendawo yokukhokela undwendwe.

Iqela Ijonge ntoni le sixhobo? Kutheni le ndawo ifuna oku?
ukhuseleko Umgaqo-nkqubo woKhuseleko loMxholo, uKhuseleko loThutho oluQinisekileyo (HSTS), iinketho ze-X-Frame Ukukhusela iindwendwe kwizikripthi ezifakiweyo kunye nokukhohlisa, ukukhusela i-HTTPS
Ibanga Ipesenti yeentloko zokhuseleko ezicwangcisiweyo Isalathiso esikhawulezileyo: ingaba ibe ngcono okanye ibe mbi emva kokuhlelwa?
Ukugcina idatha Ulawulo lweCache, Uphelelwa lixesha, i-ETag, Ukuguqulwa kokugqibela Ukutyelela okuphindaphindiweyo kulayisha ngokukhawuleza, iseva iyakhululwa
Uxinzelelo Ukufaka ikhowudi yomxholo (gzip, br) I-HTML, i-CSS, kunye ne-JS zilula kakhulu—zikhawuleza xa zisetyenziswa kwiselfowuni
I-CORS Ulawulo loLawulo loLawulo loLawulo kunye nemvelaphi enxulumeneyo Ngubani onokufikelela kwi-API yakho kunye neefonti ezivela kwezinye iidomeni?
Ukuqondisa kwakhona Umzila weBreadcrumb oya kwi-URL yokugqibela Amanyathelo angaphezulu acothisa ukulayisha kwaye anciphisa inkcitho.

Inqaku lokhuseleko alilo "inqaku le-SEO." Libonisa ipesenti yeentloko zokhuseleko ezibalulekileyo ezikhoyo. Isiphumo esiqhelekileyo sesayithi esingalungiselelwanga asinazo ii-CSP kunye nee-X-Frame-Options.

Kukho iimeko ezintathu apho kufanelekile ukujonga ii-headers: emva kokufudukela kwi-hosting entsha okanye kwi-CDN, emva kokufaka ii-plugins ze-caching kunye nezokhuseleko, nangaphambi kokuqalisa iintengiso, xa umzuzwana ngamnye wexesha lokulayisha ubiza imali. Esi sixhobo sisebenza kakuhle ngokufanayo kuphuhliso, ukucwangcisa, kunye neenguqulelo zemveliso zewebhusayithi, lo gama nje idilesi ifumaneka kwi-intanethi.

Ungazijonga njani ii-headers ze-HTTP zewebhusayithi kwi-intanethi?

Jonga ii-headers ze-HTTP kwi-intanethi ngamanyathelo ama-4: ncamathisela idilesi, sebenzisa itshekhi, uhlole ukalisho kunye noluhlu lwee-headers, lungisa kwiseva

  1. Vula isixhobo. Ukujonga i-HTTP header kuyasebenza kwisiphequluli sakho—akukho mfuneko yokufakela.
  2. Faka idilesi epheleleyo kunye neprotocol: https://example.com/catalog/. Itshekhi enye - i-URL enye.
  3. Cofa u-"Check." Impendulo ifika kwimizuzwana embalwa.
  4. Jonga umlinganiselo wokhuseleko kunye noluhlu lwee-headers ezingekhoyo.
  5. Dlula kwi-cache, compression kunye ne-CORS, uze ulandele i-redirect chain.
  6. Nceda ulungise useto olukwiseva yakho, kwi-CDN, okanye kwi-plugin uze uphinde ujonge.

Iphepha lesixhobo liqulathe icandelo elinye ledilesi, iqhosha lokuqinisekisa, kunye nenkcazo emfutshane: oko kuhlalutywayo, indlela yokuyisebenzisa, kunye nemida.

Iphepha le-HTTP Header Checker yasimahla ye-PromoPilot: intsimi ye-URL kunye nenkcazo yokhuseleko, i-caching, kunye nokuhlolwa kwe-CORS

Icala elisecaleni libonisa inani leetshekhi zangoku. Iindwendwe zingenza iitshekhi ezimbalwa ngosuku; emva kobhaliso lwasimahla, umda uphindwe kathathu, kwaye isicwangciso sePro esihlawulelwayo sinikeza iitshekhi ezingenamda.

Uyifunda njani impendulo yeseva kwaye yintoni ekufuneka uyilungise kuqala?

Musa ukuzama ukujongana nayo yonke into ngaxeshanye. Sebenza ukusuka kwizinto ezaphula ukufikeleleka kunye ne-HTTPS ukuya kwizinto eziphucula ukhuseleko.

  1. Ukuqondisa kwakhona. Ikhonkco le http → https → www → /index.php lizicelo ezintathu ezingafunekiyo. Ngokwesiqhelo, kufuneka ukuqondisa kwakhona i-301 kwi-URL yokugqibela kuyo nayiphi na idilesi eyahlukileyo.
  2. HSTS. Ukuba isayithi yakho isebenzisa i-HTTPS kuphela, yongeza Strict-Transport-Security: max-age=31536000. Qala nge- max-age encinci ukuba awuqinisekanga ukuba zonke ii-subdomains zinikwe amandla yi-HTTPS.
  3. Ucinezelo. Ukuba awunayo Content-Encoding: br okanye gzip kwi-HTML yakho, vumela ucinezelo kwiseva yakho okanye useto lwe-CDN. Olu luhlu olunye loqwalaselo lunokuphucula kakhulu isantya.
  4. Ukugcinwa kweenkcukacha. Kwimifanekiso, i-CSS, kunye ne-JS enenguqulelo ekwigama lefayile, seta i-cache ende ( Cache-Control: public, max-age=31536000, immutable); kwi-HTML, seta i-cache emfutshane okanye no-cache.
  5. Iinketho ze-X-Frame kunye ne-CSP. X-Frame-Options: SAMEORIGIN ithintela iphepha ekubeni lifakwe kwenye ifreyimu. Lungiselela i-CSP ngononophelo: umgaqo-nkqubo ongqongqo ungaphula ngokulula uhlalutyo kunye neewijethi, ngoko ke qala uvule imo Content-Security-Policy-Report-Only.
  6. I-CORS. Access-Control-Allow-Origin: * kwii-API ezinedatha yobuqu yimpazamo. Nceda ucacise iidomeyini ezithile.

Ingxaki eqhelekileyo kukuseta Cache-Control: no-store kuyo yonke indawo emva kokufaka i-plugin yokhuseleko. Indawo iyasebenza, kodwa utyelelo ngalunye lulayisha ngokungathi lolokuqala.

Nantsi indlela ebonakala ngayo impendulo yephepha elilungisiweyo kakuhle—umlinganiselo wokuthelekisa iziphumo zakho:

HTTP/2 200
content-type: text/html; charset=utf-8
content-encoding: br
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' data: https:

Ikhowudi yempendulo yi-200, iphepha licinezelwe yiBrotli, i-HTML ayigcinwanga ixesha elide, i-HTTPS itshixiwe unyaka wonke, kwaye ukufakwa kwezinye iifreyimu kunye nokutshintshwa kohlobo lwefayile akuvumelekanga. Ukuba ikhowudi yakho yempendulo yi 301 okanye 302 endaweni ye 200, awukhange ujonge i-URL yokugqibela—jonga ikhonkco lokuqondisa kwakhona kwaye uncamathisele i-URL yokugqibela.

Ukuthelekisa: I-PromoPilot kunye nezinye iindlela zokujonga iintloko

Kukho iindlela ezahlukeneyo zokujonga iintloko zeendaba, nganye ifanelekile kwimeko yayo.

Isixhobo Yintoni yasimahla? Imiqathango Ifanelekile kubani?
I-PromoPilot — Isikhangeli seeNtloko zeHTTP Zonke ii-headers, umlinganiselo wokhuseleko, i-cache, ucinezelo, ii-CORS, i-redirect chain I-URL enye ngetshekhi nganye, umda wemihla ngemihla weendwendwe Jonga ngokukhawuleza iwebhusayithi yakho okanye yomnye umntu ngaphandle kokufakela
securityheaders.com Uvavanyo lweleta lweentloko zokhuseleko Ukhuseleko kuphela, akukho cache okanye uxinzelelo Kwabo bamisela ukhuseleko
I-Chrome DevTools, ithebhu yeNethiwekhi Iintloko zesicelo sephepha ngalinye Udinga ukwazi apho ujonge khona; akukho mgwebo okanye iingcebiso Kwabaphuhlisi xa kulungiswa iimpazamo
curl -I kwisiphelo sendlela Iintloko zempendulo ezingavuthwanga Umgca womyalelo, akukho ngcaciso Kwabalawuli beeseva

Isiphelo: Kwitshekhi yesihlandlo esinye enovavanyo olucacileyo kunye nezindululo, isixhobo esikwi-intanethi silula ngakumbi, ngelixa iDevTools kunye ne-curl zilungile xa sele uyazi into oyifunayo. I-Securityheaders.com ihambelana netshekhi ukuba injongo yakho kukukhusela kuphela.

Esi sesinye sezixhobo ze-SEO zasimahla ze-PromoPilot ezingama-87: Kukwakho nomjongi wesatifikethi se-SSL, ukuqondisa kwakhona, kunye neerekhodi ze-DNS—ezi zigutyungelwe kumanqaku akweli candelo.

Imida yokuKhangela iiHeader: Oko iSixhobo singayi kukubonisa

Ukujonga kujonge ii-headers ze-URL enye, kungekhona yonke indawo. Ukuba nje iphepha eliphambili licwangciswe ngokuchanekileyo akuthethi ukuba iphepha lemveliso okanye ifayile ekwifolda ethi /uploads/ iya kuphendula ngendlela efanayo.

Ezinye ii-headers zongezwa kwinqanaba le-CDN okanye le-proxy kwaye zinokuxhomekeka kwindlela kwanakwindawo apho isicelo sivela khona. Ke ngoko, isiphumo sinokuhluka koko ukubonayo kwisikhangeli sakho. Ukuba umthetho kwi-CDN ulungiselelwe kuphela i- /blog/*, amanye amacandelo akayi kuwufumana.

Kwaye okona kubaluleke kakhulu: izihloko ziisetingi, hayi umxholo. Esi sixhobo asijongi isihloko, umbhalo, okanye uphawu—kukho iitshekhi zamaphepha ezahlukeneyo zaloo nto.

Esinye isilumkiso malunga notshintsho. Emva kokuhlela uqwalaselo lweseva, isiphumo sisenokungahlaziyi ngoko nangoko: i-CDN igcina impendulo endala igciniwe. Cima i-cache ye-CDN okanye ulinde imizuzu embalwa, uze uphinde ujonge kwakhona.

Kunini apho isixhobo sasimahla singanelanga khona?

Ukujonga ii-headers ze-HTTP kwi-intanethi kunye nokuba neengcali zilungiselele iseva yakho: yintoni eyenziwa lukhetho ngalunye

Esi sixhobo siza kukuxelela ngokunyanisekileyo ukuba zeziphi ii-headers ezingekhoyo. Nangona kunjalo, ukuzongeza kufuna ukusebenza neseva, i-CDN, okanye injini yewebhusayithi. Uya kufuna ingcali ukuba:

  • Emva kokuvumela i-CSP, amafomu, iintlawulo, okanye uhlalutyo lwaphukile;
  • amacandelo ahlukeneyo anezihloko ezahlukeneyo, kwaye akucaci ukuba ngubani ozisetayo - iseva, i-plugin, okanye i-CDN;
  • indawo icotha, nangona i-cache kunye noxinzelelo "zivuliwe";
  • Awunalo ukufikelela kwiseva, kwaye inkampani ebamba ii-imeyile iphendula ngeetemplate.

Ndingayenzela ntoni iwebhusayithi yakho?

Igama lam ndinguValeriy Danyuk, ndingumphuhlisi kunye nengcali ye-SEO: kwiminyaka eli-12 edlulileyo, ndakhe iiwebhusayithi kunye neenkqubo zabathengi abangaphezu kwama-200. Izihloko zeendaba ziyinxalenye ye-SEO abathengi abaqhele ukungayiboni, kodwa ndizibeka kuqala.

I-SEO kunye nokukhuthazwa

Iiwebhusayithi kunye neevenkile ezikwi-intanethi

I-CRM, i-accounting kunye ne-automation

Kukho iiprojekthi ezininzi kwipotifoliyo yam. Ndithumelele idilesi yewebhusayithi yakho Telegram - ndiza kujonga izihloko zeendaba ndikuxelele ukuba yintoni eza kundinika iziphumo ngoko nangoko.

Isiphumo

  1. Ukujonga ii-headers ze-HTTP kwi-intanethi kubonisa ngemizuzwana indlela iseva ephendula ngayo kwisiphequluli nakwirobhothi yokukhangela.
  2. Yilungise ngokulandelelana: iqondisa kwakhona → HSTS → ucinezelo → i-cache → ii-X-Frame-Options kunye ne-CSP → ii-CORS.
  3. Khangela okungaphezulu nje kwekhasi lasekhaya: ii-CDN kunye nee-plugins zinokunika ii-headers ezahlukeneyo kumacandelo ahlukeneyo.
  4. Ukuba useto lweseva alufumaneki okanye luyangqubana, kulula ukudlulisela umsebenzi kwingcali okanye ukwakha isayithi kwi- 1001site, apho i-HTTPS kunye nokunikezelwa sele kulungiselelwe.

Jonga iphepha lakho lasekhaya ngoku: sebenzisa i-HTTP header check yasimahla, kwaye ukuba unemibuzo, ndibhalele Telegram.

Imithombo

  • Iphepha lesixhobo sePromoPilot HTTP Header Checker - uluhlu lwezinto ezijongwayo kunye nemida.
  • securityheaders.com - Inkcazo yovavanyo lwentloko yokhuseleko.
  • Amaxwebhu e-Chrome DevTools - Iphaneli yenethiwekhi kunye neentloko zokubukela.

Iireferensi kunye nemithombo

Imibuzo neempendulo

Zeziphi iintloko zokhuseleko ezibalulekileyo kwi-SEO?

I-HTTPS ichaphazela ngokuthe ngqo amazinga, kwaye i-HSTS iyayiqinisa: isikhangeli asisayivuli indawo nge-HTTP. Iinketho ze-CSP kunye ne-X-Frame zikhusela iindwendwe kwizikripthi ezifakiweyo kunye nokufakwa kwephepha kwezinye iifreyimu. Indawo eqhekeziweyo enekhowudi enobungozi ilahlekelwa kukuthenjwa kweenjini zokukhangela, ngoko ke ezi zihloko ziyipolisi yomshuwalense womgangatho.

Ii-headers ze-caching zisichaphazela njani isantya?

I-Cache-Control kunye ne-ETag zixelela isikhangeli ukuba sigcine ixesha elingakanani imifanekiso, izitayile, kunye nezikripthi. Nge-cache efanelekileyo, utyelelo lokubuyela lukhuphela kuphela oko kutshintshileyo, kwaye iphepha lilayisha ngokukhawuleza. Ngaphandle kwe-cache, isikhangeli sikhuphela yonke into kwakhona ngalo lonke ixesha, kwaye oku kubonakala ngakumbi kwizixhobo zeselfowuni.

Ngaba kunokwenzeka ukujonga ii-headers zewebhusayithi yomnye umntu?

Ewe. Ii-headers zeempendulo ziyabonakala nakweyiphi na ibrawuza, ngoko ke isixhobo sijonga nayiphi na idilesi kawonke-wonke—eyakho, eyomncintisani, okanye eyomkontrakta. Akukho mfuneko yokufikelela okanye ukubhalisa kwiseva.

Kutheni izihloko zamaphepha ahlukeneyo ale sayithi zahlukile?

Ezinye ii-headers zongezwa yi-CDN okanye yi-proxy, kwaye imithetho inokuxhomekeka kwindlela: iphepha lasekhaya lineseti enye, ngelixa iifayile ze-/api/ okanye ezimileyo zinezahlukileyo. Ke ngoko, jonga kungekuphela nje iphepha lasekhaya kodwa kunye namaphepha akho okufikela abalulekileyo.

Sijonge iwebhusayithi, kodwa akukho mntu unokuyilungisa?

Esi sixhobo sasimahla sityhila iingxaki. Ndiza kuhlalutya ingxelo, ndibeke phambili, kwaye ndizilungise: uphicotho lwe-SEO, ukukhawulezisa, uphawu, kunye nokufudukela kwisiza esitsha ngaphandle kokulahlekelwa zizikhundla.