Ku xidh SSH iyada oo loo marayo proxy HTTP

U mar proxy HTTP CONNECT jira oo ProxyCommand ku leh host kasta.

Iyada oo la isticmaalayo nc oo la jaanqaadaya OpenBSD, ku dar qoraalkan host-ka ee habaynta macmiilka SSH, tusaale ~/.ssh/config:

Host work-through-proxy
    HostName ssh.example.com
    User alex
    ProxyCommand nc -X connect -x proxy.example.net:8080 %h %p

Isticmaal ssh work-through-proxy wadadaas. Kaaliyuhu wuxuu waydiisanayaa proxy HTTP-ga CONNECT oo u tagaya ssh.example.com oo wuxuu qulqulka la aqbalay u gudbinayaa SSH. Haddii SSH si toos ah loo tilmaamo dekedda proxy-ga, handshake-kiisu wuxuu aadi doonaa adeegga filanaya HTTP.

Beddel barta ugu dambeysa, meesha loo socdo iyo akoonka. Meel SSH ah oo si dadweyne ah loo gaari karo halkaas oo dhexdhexaadiye dadweyne la ogolaaday, liiska proxy-yada HTTP wuxuu soo bandhigaa musharixiin lagu hubiyo gelitaanka host-kaas iyo dekeddaas; dooro barta ugu dambeysa oo aan u baahnayn akoon proxy amarka la muujiyay. Doorashooyinkan OpenBSD nc waxay ku xiran yihiin hirgelinta; fayl kale oo la fuliyo oo nc la yiraahdo ayaa laga yaabaa inuusan taageerin.

Proxy-gu wuxuu codsan karaa gelitaankiisa ama wuu diidi karaa dekedda SSH ee la codsaday. 407 waxay khuseysaa isweydaarsigaas proxy-ga. Marka tunnel-ku furmo, SSH weli wuxuu xaqiijiyaa host-ka bartilmaameedka oo wuxuu caddeeyaa isticmaalaha; fure SSH oo la diiday waa cilad kale.

Ku hay ProxyCommand qaybta Host ee loogu talagalay oo marka loo baahdo isticmaal wadada caddaynta proxy ee uu taageero kaaliyaha la doortay. Amarku wuxuu bixiyaa qulqul, ma aha fasax dhexdhexaadiyaha. Haddii kaliya bartamaha HTTPS la ogolaaday, hel habayn gelitaan SSH oo la ansixiyay halkii aad ka fikiri lahayd in qoraal kale oo amarka ah uu beddelo siyaasadda.

Maqaallo la xiriira