Haɗa SSH ta hanyar proxy na HTTP

Da nc mai jituwa da OpenBSD, ƙara wannan shigarwar host ɗin a cikin saitin abokin ciniki na SSH, misali ~/.ssh/config:

Host work-through-proxy
    HostName ssh.example.com
    User alex
    ProxyCommand nc -X connect -x proxy.example.net:8080 %h %p

Yi amfani da ssh work-through-proxy don wannan hanya. Mai taimako yana neman proxy ɗin HTTP ya yi CONNECT zuwa ssh.example.com kuma yana ba da rafin da aka karɓa ga SSH. Idan ka nufi SSH kai tsaye zuwa tashar proxy ɗin, handshake ɗinsa zai je sabis da ke jiran HTTP.

Maye gurbin ƙarshen wuri, manufa da asusu. Don manufar SSH da ake iya isa ga jama'a inda aka yarda da matsakaici na jama'a, jerin proxy na HTTP yana ba da 'yan takara don duba isa ga wannan host da tashar; zaɓi ƙarshen wuri da ba ya buƙatar asusun proxy don umarnin da aka nuna. Waɗannan zaɓuɓɓukan OpenBSD nc sun dogara ne da aiwatarwa; wani fayil mai suna nc na iya rashin goyon bayan su.

Proxy ɗin na iya buƙatar shigarsa ta kansa ko ya ƙi tashar SSH da aka nema. 407 ya shafi wannan musayar da proxy ɗin. Bayan buɗe ramin, SSH har yanzu yana tabbatar da host ɗin manufa kuma yana tabbatar da mai amfani da shi; ƙin maɓallin SSH wata matsala ce dabam.

Riƙe ProxyCommand a ƙarƙashin sashin Host da aka nufa kuma idan an buƙata yi amfani da hanyar tabbatar da proxy da zaɓaɓɓen mai taimako ke goyon baya. Umarnin yana ba da rafi, ba izini ta hanyar matsakaici ba. Idan kawai ana yarda da wuraren HTTPS, sami tsarin isa ga SSH da aka amince da shi maimakon ɗauka cewa wani rubutun umarni ya canza manufar.