Haɗa sabis ɗin systemd na Squid zuwa wurin suna na fitarwa da ke akwai

Don wurin suna da ke akwai riga a /run/netns/proxy-egress, haɗa wannan cikin drop-in ɗin sabis ɗin Squid da ke akwai:

[Service]
NetworkNamespacePath=/run/netns/proxy-egress

Yi odar sabis ɗin bayan ɓangaren da ke ƙirƙirar wurin sunan. Saitin baya ƙirƙirar wurin sunan ko musayar sa, adireshinsa ko hanyoyinsa.

Dukansu socket ɗin saurara da socket ɗin fita yanzu suna nan. Abokan ciniki suna buƙatar hanya zuwa wannan mai sauraro da manufofin samun damar da aka ajiye; loopback na mai masaukin baki ba ya zama loopback na wurin suna kai tsaye.

Fayilolin resolver suna buƙatar kulawa daban. Ba kamar ip netns exec ba, wannan saitunan cibiyar sadarwa baya ɗaura fayilolin /etc/netns/NAME a kan hanyoyinsu na yau da kullum. Lokacin da turawar ke buƙatar fayil ɗin resolver na wurin sunanta:

BindReadOnlyPaths=/etc/netns/proxy-egress/resolv.conf:/etc/resolv.conf

Yi amfani da adiresoshin resolver da za a iya isa daga wannan wurin sunan sannan ka haɗa su da ƙa'idodin sandbox/tsarin fayil da ke akwai. Ɗaure adireshin tushen fitarwa na Squid kawai ba ya sanya tsarin cikin wannan mahallin.