Marin u socodsiinta taraafikada HTTPS ee Monit iyada oo loo marayo SOCKS relay maxalli ah

Ku hay magaca martigeliyaha kormeeraha ee URL-ka Monit, halka dhegeysanaha loopback uu xiriirka TCP u marayo SOCKS4.

TCP relay maxalli ah ayaa qaadi kara warbixinnada HTTPS ee Monit iyada oo SOCKS maraysa isla markaana aan noqon barta ugu dambeysa ee TLS. Dariiqa waa in uu ilaaliyo magaca kormeeraha HTTPS ahaan oo uu relay-ga siiyo ciwaanka ujeeddada dhabta ah.

Ka soo qaad in kormeeruhu yahay collector.example oo ku yaal 203.0.113.40:443. Habaynta socat ee jirta, relay-gu wuxuu leeyahay qaabkan:

socat TCP4-LISTEN:9900,bind=127.0.0.1,reuseaddr,fork \
  SOCKS4:socks.example:203.0.113.40:443,socksport=1080

Halkan 127.0.0.1:9900 waxa uu aqbalaa xiriirka maxalliga ah ee Monit. socks.example:1080 waa server-ka SOCKS4, kaas oo la weyddiisto in uu ku xirmo ciwaanka dhabta ah ee kormeeraha dekedda 443. Beddel ciwaannada dukumeentiga oo dhan qiimaha hirgelinta.

Xalliso magaca kormeeraha gudaha si uu u gaadho dhegeysanahaas, oo magaca ku hay monitrc:

127.0.0.1 collector.example

set mmonit https://monit:[email protected]:9900/collector

Sadarka koowaad waa gelin ku jirta faylka hosts; tan labaad waa habaynta Monit. Isticmaal aqoonsiga dhabta ah ee kormeeraha iyada oo la raacayo codeynta URL ee loo baahan yahay. Khariidadda faylka hosts waxay sidoo kale saameynaysaa barnaamijyada kale ee magacaas ku isticmaala mishiinka.

Gacan-qabsiga HTTPS wali waxa uu leeyahay kormeeraha, sidaas darteed hay magaca martigeliyaha iyo siyaasadda xaqiijinta shahaadada loogu talagalay. Beddelidda URL-ka localhost waxay beddelaysaa aqoonsiga Monit uu codsado in la xaqiijiyo.

Relay-gu si ula kac ah ayuu u isticmaalaa IP-da dhabta ah ee kormeeraha halkii uu ka raadin lahaa magaca loopback dib loogu calaamadeeyay. Cusboonaysii IP-daas marka ciwaanka kormeeraha isbeddelo. Dhegeysanaha ku hay diyaar qayb ka mid ah dariiqa warbixinta; fork wuxuu si gaar ah u maareeyaa xiriirada relay-ga ee la aqbalay.

Maqaallo la xiriira