Aqoonsiga wakiilka ee boodka labaad ee PowerShell
U gudbi akoonka wakiilka ee loogu talagalay Invoke-WebRequest ee ku shaqeynaya serverka fog halkii aad ka fikiri lahayd in gelitaanka remoting la wakiishay.
Codsi web oo si isdhexgal ah uga shaqeeya serverka B wuxuu heli karaa 407 marka isla amarkaas halkaas looga fuliyo PowerShell remoting. Gelitaanka A ilaa B si otomaatig ah uma wakiisho aqoonsigaas isdhaafsiga xaqiijinta ee xiga ee B.
A → remoting session on B → HTTP proxy → website
Mid ka mid ah nashqadaha la taageeray ayaa ah in akoonka wakiilka si cad loo bixiyo codsiga baxa. Iyadoo PSSession hore u jiro iyo shay PSCredential si habboon loo helay:
Invoke-Command -Session $session -ArgumentList $proxyCredential -ScriptBlock {
param([pscredential]$outboundProxyCredential)
$requestOptions = @{
Uri = 'https://api.example/'
Proxy = 'http://proxy.example:8080'
ProxyCredential = $outboundProxyCredential
}
Invoke-WebRequest @requestOptions
}
Shayga aqoonsigu waa kan akoonka loogu talagalay wakiilka. Fadhiga wali wuxuu isticmaalaa xaqiijinta remoting caadiga ah, iyo gelitaan kasta oo websaydhku wuxuu ahaanayaa qayb ka mid ah codsiga websaydhkaas.
Tani waxay ka fogaataa ku-tiirsanaanta wakiilka otomaatigga ah ee gelitaanka koowaad. Si kastaba ha ahaatee waxay u baahan tahay in martigeliyaha fog uu maareeyo agabka akoonka la bixiyay qayb ka mid ah nashqada maamulka ee loogu talagalay. Nashqadaha kale, sida barta RunAs ee la maareeyo ama gelitaanka adeegga xaddidan, waxay leeyihiin shuruudahooda habaynta.
Haddii aqoonsiga wakiilka ee caadiga ahaa uu ahaa mala-awaalka khaladka ah, qor akoonka amarka fog ku shaqeeyo iyo xaqiijinta uu wakiilku codsado. Waqtiga dheer ee codsiga web ma bixin karo aqoonsi maqan.
Xulashooyinka wakiilka ee New-PSSessionOption waxay khuseeyaan isku xirka remoting laftiisa. Habee Invoke-WebRequest gudaha block-ka script-ka fog marka isku xirka web ee baxa B uu yahay kan u baahan wakiilka.