Amabhuloho e-socat SOCKS: gcina igama le-TLS lewebhusayithi

Sebenzisa isilaleli se-TCP se-loopback endaweni eyodwa ye-SOCKS kuyilapho ugcina ubunikazi be-HTTP ne-TLS ohlelweni.

Uhlelo alunalo ukukhetha i-SOCKS, kodwa lungaxhumana nekheli le-TCP elikhethiwe. I-adaptha enomgomo ogxilile inganikeza ingxoxo ye-SOCKS yomkhombandlela owodwa. Akudingeki ibe enye i-proxy yokudlulisela evamile.

Izakhivo ze-socat ezinikeza i-SOCKS4A, ukuhlelwa okuyisibonelo yilokhu:

socat TCP4-LISTEN:9443,bind=127.0.0.1,reuseaddr,fork \
  SOCKS4A:127.0.0.1:service.example.net:443,socksport=1080

Indawo yokugcina ye-SOCKS iphothi yasendaweni engu-1080. I-adaptha ilalela iphothi yasendaweni engu-9443 futhi icela leyo ndawo service.example.net:443. Lawa amanani ayisibonelo, hhayi ukusetshenziswa okuphelele kwesevisi.

I-adaptha inomgomo owodwa ogxilile

Yonke ingxoxo ye-TCP eyamukelwe icela isevisi efanayo. Uhlelo oluxhuma ku-9443 lunikeza amabhayithi alo womgomo ajwayelekile; i-socat inikeza izingxoxo ze-SOCKS4A. Ukuthumela isicelo esisha se-HTTP CONNECT ku-9443 ngeke kukhethe enye indawo—kuzothumela lawo mabhayithi eseviisini egxilile.

I-SOCKS4A inikeza igama lomsingathi endaweni ye-SOCKS ukuze kuxazululwe kude. Lokhu kuhlukile efomini le-SOCKS4 elisebenzisa ikheli elikhethwe yiklayenti. I-upstream ekhethiwe—kuhlanganise nomuntu oqokiwe womphakathi ovela ohleni lwamaproxy e-SOCKS4—kufanele lisekele ukuphathwa kwegama lomsingathi le-SOCKS4A nokuqinisekiswa okudingekayo; lesi sibonelo akusona isu lokungena ngephasiwedi le-SOCKS5.

Xhuma endaweni, khomba isevisi yangempela

Ukushintsha i-URL ye-HTTPS ibe https://127.0.0.1:9443/ kushintsha igama lomsingathi iklayenti elingalisebenzisa ku-TLS ne-HTTP. Isitifiketi se-service.example.net ngeke sibe isitifiketi esivumelekile se-loopback.

Lapho iklayenti lisekela umzila woxhumo ohlukile, gcina ubunikazi be-URL yokuqala. I-Curl ingakhombisa umehluko lowo:

curl --noproxy '*' \
  --connect-to service.example.net:443:127.0.0.1:9443 \
  https://service.example.net/

Isokhethi iya ku-adaptha yasendaweni kuyilapho ukuqinisekiswa kwe-TLS nendawo ye-HTTP kuhlala kuyi-service.example.net. Ezinye izinhlelo zidinga ukulawula kwazo okulingana okusekelwayo; akuzona zonke iziklayenti ezinikeza lokho.

Ukubopha kwe-loopback kunciphisa ukuvezwa kwenethiwekhi, kodwa ezinye izinqubo zasendaweni ezifanelekile zisengafinyelela kuyo. Gcina isikhathi sokuphila kwesevisi nabasebenzisi kufanelekile. Gcina ukuqinisekiswa kwe-TLS esikhundleni sokucindezela iphutha lobunikazi elibangelwa i-URL ye-loopback.

Izihloko ezihlobene