Squid PROXY borotokool: aamin soo-saaraha ka hor hubinta gelitaanka HTTP

Isticmaal proxy_protocol_access si aad u aaminto relay-ga soo gudbiya metadata, ma aha inaad doorato websaytyada la oggol yahay. Squid 5–7 gudaha, hubsashada waxay socotaa hal mar ka dib diyaarinta TCP ee dhagaysiga require-proxy-header, ka hor inta aan la farsameyn madaxyada codsiga HTTP:

acl trusted_relay src 192.0.2.20/32
http_port 3128 require-proxy-header
proxy_protocol_access allow trusted_relay
proxy_protocol_access deny all

Beddel cinwaanka relay-ga tusaalaha oo xaddid gelitaanka shabakadda ee dhagaystahan. Marxadkan Squid wuxuu hubiyaa lammaanaha TCP ee dhabta ah ka hor inta uusan aqbalin metadata-ga la soo gudbiyay. Ka dib aqbalaadda, wuxuu isticmaalaa cinwaanka macmiilka la sheegay hubsashada ACL iyo diiwaangelinta xigta. In relay-ga la aaminto iyadoo lagu saleynayo cinwaanka macmiilka uu sheegto waxay rogi lahayd nidaamkaas.

Hayso http_access oggolaanshaha dambe ee isha macmiilka iyo meesha loo socdo. Aqbalidda metadata ma oggolaato gelitaanka websaytyada, iyo ACL-ga domain-ka loo socdo ma jawaabi karo su'aasha hore ee ku saabsan aaminka soo-saaraha.

Soo-saaraha iyo qaataha waa inay ku heshiiyaan nooca PROXY-ga la taageerayo. Macmiil HTTP caadi ah ma isticmaali karo dhagaystahan leh horgalaha qasabka ah sidii barta dhammaadka boroksi caadi ah. Haddii labada qaab loo baahan yahay, si ula kac ah u isticmaal bartooyin dhammaad oo gooni ah halkii aad labanlaabi lahayd isla cinwaanka dhagaysiga iyo dekedda.

Relay la aaminto wuxuu saameyn ku yeelan karaa oggolaanshaha ku salaysan cinwaanka iyadoo adeegsanaya aqoonsiga macmiilka uu soo gudbiyo. Siiso awooddaas kaliya dhexdhexaadiyaha loogu talagalay.