U gudbinta Squid iyada oo loo marayo DigitalOcean TCP load balancer

Isticmaal borotokoolada TCP ee gelitaanka iyo bartilmaameedka ee iswaafaqsan ee DigitalOcean resource jira marka wadadu tahay inay ilaaliso HTTP hore iyo CONNECT.

Resource load balancer DigitalOcean oo jira, ku ilaali qulqulka byte proxy ee macmiilka borotokoolada TCP iswaafaqsan:

forwarding_rule {
  entry_port      = 3128
  entry_protocol  = "tcp"
  target_port     = 3128
  target_protocol = "tcp"
}

Ku hay bartilmaameedka dhabta ah, xannibaadaha shabakadda iyo hubinta caafimaadka agagaarka qaybtan. Macmiilku wuxuu isticmaalaa cinwaanka load balancer-ka, Squid-na wuxuu qulqulka ka helaa dhageystaha.

Proxy hore wuxuu aqbalaa bartilmaameedyada HTTP qaab buuxa iyo CONNECT ee HTTPS. Habka caadiga ah ee isku-dheellitirka culeyska HTTP waa inuu si cad u taageero wada-hadalladaas; u yeedhista dhageystaha HTTP ma caddeyso iswaafaqaas.

Hubi wax ka badan dekedda: hubinta caafimaadka TCP waxay caddeysaa aqbalidda, halka CONNECT la xaqiijiyay oo u socda bartilmaameed la ogolaaday uu tijaabiyo qandaraaska proxy.

Hubi cinwaanka isha ee Squid arko ka hor intaadan ku tiirsanaan oggolaanshaha IP. Metadata borotokoolka PROXY, haddii la isticmaalo, waxay u baahan tahay taageero labada daraf oo waxay ku daraa bytes ka hor codsiga proxy. Si ula kac ah u faaruqi tunelada nool inta lagu jiro dayactirka bartilmaameedka; si lama filaan ah u saaridda hawlahooda way joojisaa.

Maqaallo la xiriira