Sanya fitar da SOCKS a tsallen SSH ta ƙarshe

Haɗa jigilar mai masaukin tsallen SSH da matsar mai ƙarfi ta gida, yayin da ake ajiye haɗin gidan yanar gizo na ƙarshe a ƙofar da aka yi nufi.

Sa sashin uwar garken SSH na ƙarshe a matsayin mai masauki, sannan sanya uwar garken tsakiya a cikin ProxyJump:

Host proxy-exit
    HostName exit.example
    User operator
    ProxyJump [email protected]
    DynamicForward 127.0.0.1:1080

Tare da asusu masu izini a waɗannan masu masauki, fara ssh -N proxy-exit. Sa sashin aikace-aikacen gida ya yi amfani da SOCKS a 127.0.0.1:1080. Mai sauraro yana kan abokin ciniki; haɗin SSH ya isa exit.example ta hanyar jump.example.

Haɗin gidajen yanar gizo da aka nema suna buɗewa daga gefen nesa na zaman SSH na ƙarshe—exit.example. Tsallen na ɗaukar jigilar SSH zuwa wannan mai masaukin kuma ba ya zama fitar SOCKS don kawai ita ce inji ta farko da za a iya isa.

Wurin da ake nufi yana ganin adireshin da tuƙin mai masaukin fitar da kowane NAT suka zaɓa. Ba lallai ne ya dace da adireshin shiga na sunan mai masaukin ba. Dukan uwar garken biyu suna buƙatar izinin matsar da ake buƙata don ayyukansu, kuma binciken maɓallin mai masauki har yanzu yana aiki ga ƙarshen SSH da aka yi nufi.

Wannan tsarin yana ƙirƙirar sabis ɗin SOCKS ta hanyar matsar mai ƙarfi ta SSH. Idan ƙofar tana riga tana gudanar da mai sauraron SOCKS mai zaman kansa, isa ga wannan mai sauraro da matsar tsayayyiya wani tsari ne daban.

Labarai masu alaƙa