Sababta Squid u diiwaangasho martigeliyaha HTTPS laakiin aan u diiwaangashan jidka bogga
Waxay sharraxaysaa jidadka HTTPS ee maqan ee diiwaannada Squid CONNECT caadiga ah iyada oo aan u tixgelin faragelinta TLS hagaajin diiwaan caadi ah.
Diiwaanka shop.example:443 ma siiyo Squid jidka /orders/42. CONNECT waxay codsataa martigeliye/boorso; kadib TLS-ka meesha loo socdo wuxuu qaadaa jidka HTTP gudaha tunnel-ka.
| Caddayn | Gudbinta CONNECT caadiga ah |
|---|---|
| Martigeliyaha/boorsada bartilmaameedka iyo natiijada tunnel-ka | Waa diyaar proxy-ga. |
| Jidka HTTPS gudaha iyo codsiga abka | Waa la sireeyay inta u dhaxaysa macmiilka iyo website-ka. |
Qaybta URL-ka browser-ka ee ku bilaabma # | Caadi ahaan waxay ku hadhaa macmiilka, xitaa ka baxsan diiwaanka proxy-ga. |
Qaabka diiwaanka wuxuu diiwaangelin karaa goobaha Squid haysto, ma furi karo farriimaha aan la arkin. Gudbinta HTTP fudud way ka duwan tahay sababtoo ah dhexdhexaadiyaha wuxuu helaa codsigaas HTTP. Soosaar faahfaahsan ma beddelo xadka CONNECT.
Faragelinta TLS ee la maamulo waxay beddeshaa kalsoonida macmiilka iyo shuruudaha maamulka. Ma aha fure diiwaan yar oo looma baahna proxy hore oo caadi ah oo beddela IP.
Haddii abka adiga kuu leeyahay oo aad u baahan tahay ogaanshaha heerka bogga, isticmaal diiwaannadiisa ama telemetry macmiil oo si habboon loo qaabeeyay. Khaladaadka proxy-ga, hay martigeliyaha bartilmaameedka, waqtiga, xaaladda iyo marxaladda isku xirka oo dhammaatay; inta badan waxay helaan dhibaatada iyada oo aan la ururin jidadka bogga ee gaarka ah.