Takardun shaidar Apache ProxyRemote da proxy-chain-auth

Abokin ciniki na iya tabbatarwa ga proxy na gaba na Apache da asusu ɗaya, yayin da Apache ke tabbatarwa ga proxy na mahaifa da wani:

client ── client account ── Apache ── parent account ── parent proxy

Don tabbataccen asusun mahaifa akan httpd 2.4.59 ko sabo, ProxyRemote na karɓar hujja ta uku:

ProxyRemote "*" "http://parent.example:3128" "parent-user:replace_with_private_password"

Wannan yana ƙara wa tsarin proxy na gaba mai kulawar shiga da ake da shi, kamar mai sauraro na sirri wanda ke buƙatar duka IP na abokin ciniki da shiga proxy. Asusun na mahaifin da aka zaɓa ne. Kare tsarin da ke ɗauke da shi, kuma zaɓi iyakar daidaiton da turawa ke buƙata.

Apache na aika waɗannan takardun shaidar Basic tukuna, ba tare da fara jiran ƙalubale ba. Wannan yana sa jigilar haɗin mahaifa da manufofin asusu su zama muhimmi; zaman HTTPS na gidan yanar gizon daga baya ba ya kare tsallaken HTTP a bayyane zuwa mahaifa da kansa.

Lokacin da ya kamata asusun shigowa ɗaya ya ci gaba

Apache yawanci yana cinye tabbatarwar proxy da aka nufa gare shi. Saitin yanayi na proxy-chain-auth a maimakon haka yana ba da izinin aika takardun shaidar proxy na abokin ciniki zuwa proxy na gaba:

SetEnv proxy-chain-auth On

Wannan ya dace ne kawai don sarkar tabbatarwa da aka raba da gangan. Yana wuce kayan asusun shigowa gaba; ba ya ƙirƙirar wani sunan mai amfani da kalmar sirri na mahaifa daban.

Tare da bayanin takardar shaidar ProxyRemote bayyananne, proxy-chain-auth ba shi da wani tasiri. Zaɓi tushen takardar shaidar da gangan maimakon haɗa saiti biyu da fatan za a zaɓi kalmar sirrin da ke aiki.

Waɗannan hanyoyin suna tabbatar da tsallaken proxy. Kanun Authorization na gidan yanar gizon manufa ya kasance wata musanya daban.