Sopọ SSH nipasẹ HTTP proxy

Gbe asopọ SSH nipasẹ HTTP CONNECT proxy ti o wa pẹlu ProxyCommand fun host kọọkan.

Pẹlu nc ti o baamu OpenBSD, fi akọsilẹ host yii kun si iṣeto ẹrọ alabara SSH, fun apẹẹrẹ ~/.ssh/config:

Host work-through-proxy
    HostName ssh.example.com
    User alex
    ProxyCommand nc -X connect -x proxy.example.net:8080 %h %p

Lo ssh work-through-proxy fun ipa yẹn. Oluranlọwọ béèrè lọwọ HTTP proxy fun CONNECT si ssh.example.com o si fi ṣiṣan ti a gba ranṣẹ si SSH. Bí a bá tọ́ SSH tààrà sí ibudo proxy naa, handshake rẹ yoo lọ sí iṣẹ ti o n reti HTTP.

Rọpo ipari, ibi-afẹde ati akọọlẹ naa. Fun ibi-afẹde SSH ti gbogbo eniyan le de ọdọ nibiti a ti gba alarina gbogbo eniyan laaye, akojọ HTTP proxy n pese awọn oludije lati ṣayẹwo iwọle si host ati ibudo yẹn; yan ipari ti ko nilo akọọlẹ proxy fun aṣẹ ti o han. Awọn aṣayan OpenBSD nc wọnyi da lori imuse; faili ṣiṣe miiran ti a npè ni nc le ma ṣe atilẹyin wọn.

Proxy le béèrè iwọle tirẹ tabi kọ ibudo SSH ti a béèrè. 407 kan iyipada proxy yẹn. Lẹhin ti tunnel naa bá ṣí, SSH ṣì ṣayẹwo host ibi-afẹde ati jẹrisi olumulo; kọkọrọ SSH ti a kọ jẹ ikuna miiran.

Tọju ProxyCommand labẹ apakan Host ti a pinnu ati nigba ti o nilo lo ọna ijẹrisi proxy ti oluranlọwọ ti a yan ṣe atilẹyin. Aṣẹ naa pese ṣiṣan, kii ṣe igbanilaaye nipasẹ alarina. Ti o ba jẹ pe awọn ibi-afẹde HTTPS nikan ni a gba laaye, gba eto iwọle SSH ti a fọwọsi dipo ki o ro pe akọtọ aṣẹ miiran yoo yi eto imulo pada.

Àwọn àpilẹ̀kọ tó jọra