DNAT proxy furan: sababta wadada dib ugu noqoshada muhiim u tahay
Fahan sababta DNAT ay codsiga u gaarsiin karto proxy gooni ah halka jawaabtu ka gudubto gateway oo xiriirka jabisay.
SYN dib loo beddelay ayaa gaari kara Squid halka macmiilku weli waqti-go'an kala kulmo. Habaynta DNAT, xirmada soo noqota waa in ay sidoo kale gaarto gateway-ga haysta xaaladda tarjumaadda.
Tixgeli LAN-kan mala-awaalka ah:
client 192.168.40.25 → gateway 192.168.40.1
DNAT → proxy 192.168.40.10
proxy 192.168.40.10 → client 192.168.40.25 directlyMacmiilku wuxuu markii hore ku xirmay cinwaanka websaydh. Ka dib DNAT, proxy-ga wuxuu arkaa isha macmiilka wuxuuna isticmaali karaa waddada subnet-ka maxalliga ah si uu si toos ah ugu jawaabo. Jawaabtaas waxay seegtaa tarjumaadda rogan ee gateway-ga waxayna ku gaari kartaa macmiilka cinwaanka proxy-ga halkii cinwaanka websaydhka la filayay. Gateway-ga ma hagaajin karo xirmooyinka uusan waligiis helin.
| Habka | Natiijada |
|---|---|
| Jawaabaha proxy-ga in lagu maro gateway-ga turjuma | Xiriirka soo galaya proxy-ga wuxuu hayn karaa cinwaanka isha macmiilka |
| In sidoo kale la isticmaalo turjumaadda isha ku habboon | Proxy-ga wuxuu uga jawaabaa gateway-ga sidii lammaane, laakiin hadda wuxuu arkaa ishaas la turjumay halkii macmiilka asalka ah |
Ha ka saarin SNAT si aad u hesho diiwaanno quruxsan adigoon hubin waddada dib u noqoshada. Isticmaalka ballaaran wuxuu kaloo beddelaa ACL-yada isha iyo u-helidda; aqbal natiijadaas qayb ka mid ah naqshadda.
Boodhka HTTP la aamini karo wuxuu ku gudbin karaa metadata macmiilka cinwaan-gudbin, laakiin NAT ma abuurto cinwaankaas mana u beddelo aqoonsiga lammaane TCP. Ilaalinta isha xiriirka Squid ma ilaalinayso xiriirka websaydhka ee Squid ee gooni ah.
Ugu dambayntii, naqshadda dhex-galku wali waa in ay bixiso macluumaadka meesha loo socdo ee Squid u baahan yahay. Waddada soo noqoshada summetrical waxay xallinaysaa habkan waqti-go'an, ma aha habaynta proxy furan oo dhan.