Apache AllowCONNECT iyo Dekedaha Goolka HTTPS

Proxy-gaaga Apache waxa uu dhagaysanayaa dekedda 3128. Macmiil si guul leh ayuu u gaadhaa, laakiin adeegga HTTPS ee dekedda 8443 wuu guuldarraystaa. Beddelidda dekedda dhagaysiga proxy-ga laguma filan inay xalliso faraqaas.

Macmiilku marka hore wuxuu xidhiidhaa dhagaystaha proxy-ga. Codsiisa CONNECT ayaa markaas magacaabaya martigeliye iyo deked gool oo gaar ah. Apache waxa uu aqbali karaa xidhiidhka koowaad oo wuu diidi karaa hawsha labaad.

U akhri AllowCONNECT sida siyaasad gool

Apache 2.4 dhexdiisa, mod_proxy_connect ayaa maareeya codsiyada CONNECT ee soo gala. Tilmaamihiisa AllowCONNECT ayaa xakameeya dekedaha goolka ee diyaarka u ah codsiyadaas. Qiimaha caadiga ah ee la diiwaangeliyay waa 443 iyo 563.

AllowCONNECT 443 8443

Tusaalahan waxa uu doortaa labadaas dekedood ee goolka. Waxa uu beddelaa doorashada caadiga ah; kuma daro 8443 isagoo aamusnaan ku hayaa dhammaan dekedaha caadiga ah. Isticmaal tilmaamaha habaynta server-ka ama virtual host-ka khuseeya.

Hayso xeerarka oggolaanshaha macaamiisha proxy-ga meeshooda. Deked gool oo la oggolaaday waxba kama sheegto macmiilka isticmaali kara adeegga, mana beddelo xaddidaadda martigeliyaha goolka marka loo baahdo.

Tusaale proxy rogan ah ayaa ka jawaaba su'aal kale

Natiijooyinka raadinta Apache iyo HTTPS waxay inta badan muujiyaan website dadweyne oo u gudbinaya backend go'an. Habayntaas maaha sida browserku u weyddiisto proxy horudhac ah inuu u furo tunnel CONNECT website la doortay. Koobidda tilmaamihiisa dariiqa waxay ka tagi kartaa dhibaatada proxy-ga asalka ah iyada oo aan la taaban.

Markaad baadhayso guuldarro, diiwaangeli dhagaystaha macmiilku gaadhay, awoodda CONNECT ee uu codsaday iyo jawaabta proxy-ga. Haddii CONNECT guulaysto oo TLS dabadeed guuldarraysto, oggolaanshaha dekedda goolka ayaa horey u qabtay qaybtiisa. Sii wad guuldarrada TLS halkii aad si joogto ah u ballaarin lahayd AllowCONNECT.