Ukulandela iphakethe le-TPROXY kuze kufike ku-socket
Hlola i-socket eyamukelayo, uphawu lwephakethe kanye nomzila wenqubomgomo yendawo njengomzila owodwa wokuletha we-proxy esobala.
Isibali se-TPROXY singakhuphuka kuyilapho uhlelo lungatholi lutho. Umthetho ufanile, kodwa ukulethwa kwendawo kusencike ekuhlelweni kwemizila yenqubomgomo kanye ne-socket eyamukelayo ehambisanayo.
I-TPROXY ku-Linux ingavimba ithrafikhi ngaphandle kokubhala kabusha indawo njengoba i-DNAT yenza. Ngakho amaphakethe aqondiswe endaweni engeyona yendawo kufanele afinyelele ku-socket yendawo efanele.
Landela umzila wokuletha
- Ithrafikhi ifinyelela kusihambisi sokuvimba kusikhombisi kanye nomndeni wamakheli ohlosiwe.
- Umthetho wokuvimba kanye nophawu lwephakethe kuchaza inqubomgomo yokulethwa kwendawo.
- Umthetho wenqubomgomo ohambisanayo ukhetha umzila oletha amaphakethe endaweni.
- I-proxy isebenzisa isilaleli esisobala esisekelwayo esinokukhethwa kwe-socket okudingekayo.
Isibonelo se-IPv4 sesizindalwazi sidinga ukusekelwa kohlelo kwe-IP_TRANSPARENT. Isilaleli esivamile kumbobo ofanayo, noma isilungiselelo somhlaba wonke sokuxhuma okungeyona eyendawo, akubonisi lokho kusekelwa.
| Ukuqaphela | Ukuhlola okulandelayo |
|---|---|
| Azikho iziphakethe zokungena ezihlobene | Umzila wethrafikhi kanye nesikhombisi sokungena |
| Amaphakethe ayafika; isibali sokuvimba asinyakazi | Umndeni wamakheli, uchungechunge kanye nemibandela yokufanisa |
| Umthetho uyafanisa; ukulethwa kwendawo kuyahluleka | Uphawu kanye nokukhethwa komzila wenqubomgomo |
| I-socket iyalalela; uhlelo aluboni lutho | Ikhono le-socket esobala kanye nomnikazi wesilaleli |
| Isicelo siyaqala; izimpendulo zakamuva ziyahluleka | Ukufaniswa kwe-socket esunguliwe kanye nemizila yokubuya |
Gcina ukuhlelwa okulayishiwe kanye nendawo yamagama enethiwekhi kanye nokuqaphela ngakunye. Umthetho wakamuva ungabhala phezu kophawu noma ukhethe omunye umzila. Uma ukuvimba kwenzeka kusihambisi ngenkathi isilaleli sisebenza ku-container, umzila wendawo wangempela wesihambisi awulethi ngokuzenzakalela kuleyo container.
Cabanga ngamaphakethe akamuva
Isibonelo sesizindalwazi sihlanganisa ukufaniswa kwe-socket kanye nomzila we-DIVERT omaka amaphakethe e-socket ezisobala. Ukushiya lokho kungashiya ithrafikhi yakamuva kwenye umzila ngisho noma ukuvimba kokuqala kuphumelela.
Sebenzisa imodi esobala esekelwa uhlelo kanye nemibhalo yesizindalwazi ehambisanayo kumndeni ngamunye wamakheli. Umyalo womzila wendawo we-IPv4 awuhleli i-IPv6, futhi ukusekelwa kumndeni owodwa akubonisi ukuziphatha kwe-socket komunye.
I-TPROXY futhi ayikhiqizi izingxoxo ze-SOCKS. Ingxenye esuka kokusobala iya ku-SOCKS kusamele ithole indawo bese ixoxisana nomgudu wayo ophezulu.
Ukusuka ku-REDIRECT
Rekhoda ukuthi uhlelo olukhona luthola kanjani indawo yasekuqaleni. I-REDIRECT ishintsha indawo futhi incike endleleni efanele yokubuyisela; i-TPROXY idinga i-socket yayo esobala kanye nokuhlelwa komzila. Khetha ngokohlelo kanye nenqubomgomo yekheli lomthombo.
Hlanganisa izibali nomzila okhethiwe, ikhono le-socket kanye nelogi yohlelo ngaphambi kokushintsha imodi yokuvimba. Kusabelo esihlinzeka ngezinsiza ezidingekayo, isinyathelo sokuletha esingekho siyisiqalo esingcono kunokuhlanganisa kabusha isizindalwazi.