Aqoonsiga Apache ProxyRemote iyo proxy-chain-auth

Macmiilku wuxuu isku caddayn karaa proxy hore ee Apache isagoo isticmaalaya akoon keliya, halka Apache isku caddaynayo proxy waalid isagoo isticmaalaya mid kale:

client ── client account ── Apache ── parent account ── parent proxy

Akoon waalid oo go'an oo ku jira httpd 2.4.59 ama ka dambeeya, ProxyRemote wuxuu aqbalaa doodda saddexaad:

ProxyRemote "*" "http://parent.example:3128" "parent-user:replace_with_private_password"

Tani waxay dhamaystirtaa qaabeynta proxy-hore ee kontoroolka gelitaanka ee jirta, sida dhageystaha gaarka ah ee u baahan IP macmiilka iyo gelitaanka proxy labadaba. Akoonku waxaa iska leh waalidka la doortay. Ilaali qaabeynta ay ku jirto, oo dooro baaxadda iswaafajinta ee loo baahan yahay.

Apache wuxuu diraa aqoonsiga Basic-kan goor hore, isagoo aan marka hore sugayn loolan. Taasi waxay muhiim ka dhigtaa gaadiidka iyo siyaasadda akoonka ee xiriirka waalidka; fadhiga HTTPS ee dambe ee website-ka laftiisu ma ilaaliyo boodboodka HTTP ee cad-cad ee waalidka.

Goorta akoonka soo-gelaya isku mid ah ay tahay inuu sii socdo

Apache caadi ahaan wuxuu isticmaalaa xaqiijinta proxy ee loo jeediyay isaga. Dejinta deegaanka proxy-chain-auth ayaa beddelkeeda ogolaanaysa in aqoonsiga proxy ee macmiilka loo gudbiyo proxy-ga xiga:

SetEnv proxy-chain-auth On

Tani waxay ku habboon tahay oo kaliya silsilad xaqiijin oo si ula kac ah loo wadaago. Waxay gudbisaa maaddada akoonka soo-gelaya; ma abuurto magac isticmaale iyo furaha sirta ah oo waalid ah oo kale.

Iyadoo la raacayo doodda aqoonsiga cad ee ProxyRemote, proxy-chain-auth ma leh wax saameyn ah. Si ula kac ah u dooro isha aqoonsiga halkii aad labada dejinta is dul saari lahayd iyadoo la rajeynayo in furaha sirta ah ee shaqeeya la dooran doono.

Hababkani waxay xaqiijiyaan boodboodka proxy. Cinwaanka Authorization ee website-ka loo socdo wali waa isweydaarsi gaar ah.