Vumela i-SSH isebenzise isilaleli se-SOCKS sendawo uma sikhona

Khawulela ukuhlolwa kwe-OpenSSH Match exec endaweni eyodwa futhi uqonde ukuthi ukuhlolwa okuphumelelayo kwembobo yendawo kufakazelani nokuthi akufakazeli ini.

Isilaleli se-SOCKS sendawo siyasiza kwamanye amanethiwekhi kodwa asikho kwamanye. I-SSH ingakhetha umyalo we-proxy ngokwemibandela, ngaphandle kokwenza lokho kukhetha kusebenze kuwo wonke ama-host.

Kwi-OpenSSH enohlobo lwe-OpenBSD lwe-nc, ukucushwa kwesikhathi sekhasimende okungumzekelo yilokhu:

Host work-server
    HostName ssh.example.net
    User alex

Match originalhost work-server exec "nc -z -w 1 127.0.0.1 1080"
    ProxyCommand nc -X 5 -x 127.0.0.1:1080 %h %p

Match all

I-originalhost ikhawulela ukuhlolwa egameni elinikezwe emgqeni womyalo we-SSH. I-exec iyafana lapho umyalo wayo uphela ngempumelelo. I-Match all yokugcina iphetha lowo mkhakha onemibandela wokulungiselela okulandelayo.

Lokhu kucabanga ukuthi asikho isilungiselelo sangaphambili esisebenzayo esivele sakhetha umyalo we-proxy noma umzila wokugxuma ophikisanayo. I-SSH ivamise ukusebenzisa inani lokuqala elitholakele kukho okukhethwayo, ngakho-ke okungagqagala okuyisisekelo phezulu kungavimbela isimo sakamuva ekubeni nomthelela olindelekile.

Isokhethi elalelayo iyisithembiso esithobekile

Ukuhlolwa kuhlola ukufinyelela kwe-TCP embotsheni yendawo. Akukuqedi ukuxoxisana kwe-SOCKS, akusimisi ukuxhumana okudingekayo endaweni ekuyiwa kuyo futhi akufakazeli ukuthi iyiphi uhlelo olungumnikazi waleyo mbobo. Isilaleli singase sinyamalale ngemva kokuhlolwa.

Isikhathi sokulinda sigcina ukuhlolwa okwehlulekile kusemkhawulweni. Izinketho ezikhonjisiwe zingeze-interface ye-OpenBSD nc; ezinye izinhlelo ezinelo gama lefayela zinganikeza izinketho ezihlukile.

Lapho isimo singafani, lesi sibonelo sishiya ukuxhumana ngaphandle kwale ProxyCommand, sivumela umzila waso ojwayelekile. Lokho kufanele kuphela lapho ukufinyelela okuqondile kuvunyelwe. Inqubomgomo ye-proxy eyisibopho akufanele isebenzise ukuhlolwa kokutholakala njengemvume yokubalekela komunye umzila.

Igama le-host le-SSH elihlosiwe kanye nokuhlolwa kokhiye we-host kusabonisa iseva ekuyiwa kuyo. Ukukhetha umsizi wokuthutha akusona isizathu sokwamukela ukhiye we-host ongalindelekile.

Izihloko ezihlobene