Ukuhlanganisa i-myportname ne-src ye-Squid ngama-ACL ahlukene

Hlanganisa isilaleli se-Squid esinegama nenethiwekhi yeklayenti evunyelwe ngaphandle kokufaka izinhlobo ezimbili ze-ACL encazelweni eyodwa.

Ukulungiselela kubonakala kukuhle ekubukeni kokuqala:

acl team_a myportname 3128 src 198.51.100.0/24

Kepha incazelo ye-ACL inohlobo olulodwa kuphela. Lapha i-myportname iwuhlobo; ukwengeza igama elithi src akukuqali ukuhlolwa kwesibili. Amagama asele angawoluhlu lwamanani ohlobo lokuqala. Lowo mugqa awusho ukuthi «lesi silaleli nale nethiwekhi yeklayenti».

Nikeza isimo ngasinye igama

Sebenzisa igama lesokhethi elilalelayo kanye ne-ACL yomthombo ehlukile. Lesi siqephu sisebenzisa amakheli emibhalo, okufanele ashintshwe ngamakheli afanele ukusetshenziswa:

http_port 192.0.2.10:3128 name=team_a_port
acl team_a_port myportname team_a_port
acl team_a_clients src 198.51.100.0/24

http_access allow team_a_port team_a_clients
http_access deny all

Beka umthetho wokuvumela ngemuva kwezivikelo ezikhona zamachweba okuya ayingozi, izinhloso ze-CONNECT ezikhawulelwe kanye nokufinyelela kokuphatha. Isiqephu sikhombisa isimo seklayenti/isilaleli; asizithathi indawo lezo zivikelo.

Izimo ezisemgqeni owodwa we-http_access zihlanganiswa nge-AND. Imigqa emibili ehlukene yokuvumela ingavumela isimo ngasinye ngokuzimela, lokho okungashintsha kakhulu inqubomgomo. Amanani amaningi ngaphakathi kwe-ACL eyodwa ngokuvamile anikeza ezinye izindlela zalokho kuhlolwa okukodwa.

Khetha indlela yokuphuma ngokwahlukile

Isilaleli esifanayo singasetshenziswa futhi yi-tcp_outgoing_address ukukhetha ikheli lomthombo lendawo. Lokho ukukhetha komzila, hhayi imvume yokusebenzisa i-proxy. Umthetho wekheli lokuphuma awukwazi ukudlulisa isicelo esenqatshiwe nge-http_access.

Uma ukulungiselela okunamakheli amaningi kuyeka ukusebenza ngemuva kokuthuthukisa, hlukanisa ubufakazi: iphutha lokuhlaziya likhombisa ukwakheka kokulungiselela; ukunqatshwa kokufinyelela kukhombisa ukufaniswa kwemithetho; isicelo esivunyelwe esinokuphuma okungalungile sikhombisa ukukhethwa kokuphuma noma i-NAT yakamuva. Ukushintsha kukuthathu ngasikhathi sinye kwenza iphutha elincane le-ACL libe nzima kakhulu ukulithola.

Izihloko ezihlobene