Ukunensa kwe-proxy ngokuhamba kwesikhathi: hlola i-conntrack nemikhawulo yezinsiza

I-proxy iyaphendula ngemva kokuqalisa kabusha. Emahoreni ambalwa kamuva, ukuxhumana okusha kuyama. Ukuqalisa kabusha kuthenga esinye isikhathi sokuthula. Leli phethini likhombisa isimo esiqongelelayo, kodwa alikhombisi ukuthi yisiphi isimo esinecala.

Emkhondweni we-Linux osebenzisa ukulandelela ukuxhumana, enye into okungaba yiyo ithebula le-conntrack. Hlola lawa manani akhona emshinini nakum-network namespace ophethe ithrafikhi:

/proc/sys/net/netfilter/nf_conntrack_count
/proc/sys/net/netfilter/nf_conntrack_max

Eyokuqala ibika ama-entry omfudlana awabiwe; eyesibili iwakhawulela. Lawa akuwona amanani abasebenzisi be-Squid noma izicelo ze-HTTP. Isimo somfudlana we-kernel singaphila isikhathi eside kunomsebenzi osebenzayo wohlelo.

Funa ubudlelwano, hhayi inani elikhulu kuphela

Qhathanisa ukugcwala ngokuhamba kwesikhathi nokuqala kokwehluleka kokuxhumana okusha kanye nemilayezo ye-kernel efanele. Inani eliphezulu ngaphandle kobufakazi bokwehluleka obuhambisanayo lihlukile kunethebula elifinyelela umkhawulo walo ngokuphindaphindiwe ngesikhathi izicelo ziqala ukuphelelwa isikhathi.

Ithebula lingasebenzela okungaphezu kwe-proxy. Ezinye izinsiza zasendaweni, ithrafikhi edluliswayo noma omunye umkhondo wenethiwekhi omatasa kungaba nesandla. Ukuthi ukuqalisa kabusha kwe-proxy kushintsha uphawu akufakazi ukuthi i-cache yezinto ye-Squid iyimbangela.

Gcina izincazelo eziqhudelanayo emehlweni: izincazelo zamafayela, imigqa yabasizi bokuqinisekisa, ukubambezeleka kwe-DNS, ingcindezi yememori kanye nohlelo lwamafayela olugcwele nakho kungaba kubi kakhulu ngokuhamba kwesikhathi. Bhala ukuthi iyiphi insiza ekhulayo nokuthi yiziphi izenzo eziyeka ukusebenza kuqala. Ukuthi ukuxhumana kwesikhathi eside kusinda ngenkathi okusha kwehluleka kuwubufakazi obusizayo, hhayi ukuxilongwa ngokwakho.

Ukuphakamisa umkhawulo kunezindleko zememori. Ngaphambi kokushintsha, thola umthwalo womsebenzi, i-namespace kanye nomthamo okhona. Ukufinyeza izikhathi zokuphelelwa ngokungacabangi kungaphula amaseshini angenzi lutho awusizo; ukusula sonke isimo sokuxhumana kungaphazamisa ithrafikhi engahlobene.

Umphumela owusizo yincazelo yokuqongelela kanye noshintsho lomthamo noma umjikelezo wokuphila ohambisana nayo. Ukuphepha ukuphakamisa akusona isici esabiwe yiyo yonke iseva ye-proxy.