Ukufunda iphutha le-Squid SO_ORIGINAL_DST
Hlola ukuthi iklayenti elilungiselelwe ngokucacile lifinyelele isilaleli sokunqamula ngaphambi kokuhlola ukwehluleka kokudinga indawo yokuqala ku-Squid.
NF getsockopt(SO_ORIGINAL_DST) likhomba ekudingeni indawo yokuqala. Ekuhlelweni kokunqamula, i-Squid kumele ithole ukuthi uxhumano oludluliselwe kwenye indawo lwalubheke kuphi ekuqaleni.
Isiphequluli esilungiselelwe ngokucacile sithumela izicelo zaso ku-proxy ngamabomu. Lolo xhumano alutholi umlando wokunqamula kwe-NAT nje kuphela ngoba i-intercept ibhalwe eceleni kwembobo yesilaleli se-Squid.
Ngakho-ke lokhu kungafani kungase kwehluleke ngaphambi kokuba isitifiketi sendawo yokuqala sibaluleke.
Qala ngendlela uxhumano olufike ngayo
- Uma uhlelo lunekheli le-proxy elilungiselelwe, khomba isilaleli esivamile se-proxy yokudlulisela okufanele sisisebenzise.
- Uma isango lihambisa kabusha ithrafikhi ebesizoba ngqo, hlola ukuthi lifinyelela isilaleli sokunqamula esihlosiwe nokuthi umklamo we-NAT osekelwe ugcina imininingwane yendawo yokuqala edingekayo.
- Uma zombili izimo zikhona, hlola ukuthi iklayenti elihlulekayo laxhumana nakho kanye neyiphi ikheli nembobo.
Imibhalo ye-Squid mayelana ne-http_port yenza umehluko ucace: ukushiya ifulegi lesimo kukhetha imodi ye-proxy yokudlulisela; i-intercept ilindele ukunqamula kwe-NAT ezingeni le-IP.
Bese ubhekana nokuphepha kokuthutha ngokwehlukana. I-proxy ye-HTTP ingathwala HTTPS nge-CONNECT. Uxhumano lwe-TLS olubheke ku-proxy ludinga isilaleli nokulungiselelwa kweklayenti okuhambisanayo. Ukususa ukubethela kuthrafikhi eya endaweni yokuqala kungenye futhi ikhono elingakhethwa.
Ungakopishi “isixazululo se-HTTPS” esidala esivula ukukhiqizwa kwezitifiketi nje kuphela ngoba i-URL yendawo yokuqala iqala nge-HTTPS. Lungisa kuqala ukuvumelana phakathi kweklayenti nesilaleli. Uma ngemuva kwalokho kusala iphutha le-TLS langempela, liyoba iphutha eliwusizo kakhulu ukuliphenya.