Ka'idar PROXY ta Squid: amince da mai aikawa kafin binciken shiga HTTP

Yi amfani da proxy_protocol_access don amincewa da relay da ke bayar da bayanan, ba don zaɓar gidajen yanar gizo da aka yarda ba. A cikin Squid 5–7 binciken yana gudana sau ɗaya bayan kafa TCP a kan mai sauraro na require-proxy-header, kafin a sarrafa kanun bukatar HTTP:

acl trusted_relay src 192.0.2.20/32
http_port 3128 require-proxy-header
proxy_protocol_access allow trusted_relay
proxy_protocol_access deny all

Maye gurbin adireshin relay na misalin kuma ka iyakance hanyar sadarwa zuwa wannan mai sauraro. A wannan mataki Squid yana bincika ainihin abokin TCP kafin ya karɓi bayanan da aka bayar. Bayan karɓa, yana amfani da adireshin abokin ciniki da aka tabbatar don binciken ACL da rikodi na gaba. Amincewa da relay bisa adireshin abokin ciniki da yake da'awa zai juya wannan tsari.

Ka riƙe http_access don izinin tushen abokin ciniki da manufa na gaba. Karɓar bayanai ba ya ba da izinin shiga gidajen yanar gizo, kuma ACL na yankin manufa ba zai iya amsa tambayar da ta gabata game da amincewa da mai aikawa ba.

Dole mai aikawa da mai karɓa su yarda kan sigar ka'idar PROXY da aka goyi baya. Abokin ciniki na HTTP na yau da kullum ba zai iya amfani da wannan mai sauraro mai tilas-tambari a matsayin wurin ƙarshen wakili na yau da kullum ba. Idan ana buƙatar duka siffofin, yi amfani da wuraren ƙarshe da aka raba da gangan maimakon kwafin adireshin sauraro da tashar jiragen ruwa ɗaya.

Amintaccen relay na iya yin tasiri kan izini bisa adireshi ta hanyar asalin abokin ciniki da yake bayarwa. Ka ba da wannan damar ga mai shiga tsakani da aka nufa kawai.