Iphrothokholi ye-PROXY ye-Squid: themba umthumeli ngaphambi kwezikhathi zokuhlola ukufinyelela kwe-HTTP

Sebenzisa proxy_protocol_access ukuthemba i-relay eletha imethadatha, hhayi ukukhetha amawebhusayithi avunyelwe. Ku-Squid 5–7 ukuhlola kwenzeka kanye ngemva kokusethwa kwe-TCP kusilaleli se-require-proxy-header, ngaphambi kokucutshungulwa kwamakhanda esicelo se-HTTP:

acl trusted_relay src 192.0.2.20/32
http_port 3128 require-proxy-header
proxy_protocol_access allow trusted_relay
proxy_protocol_access deny all

Shintsha ikheli le-relay lesibonelo futhi ukhawulele ukufinyelela kwenethiwekhi kulesi silaleli. Kulesi sigaba i-Squid ihlola ukubambisana kwangempela kwe-TCP ngaphambi kokwamukela imethadatha enikeziwe. Ngemva kokwamukela, isebenzisa ikheli leklayenti elishiwoyo ukuhlola kwe-ACL nokuloga okulandelayo. Ukuthemba i-relay ngokwesisekelo sekheli leklayenti elilishoyo kungayiphendula leyo ndlela.

Gcina http_access ukuze uyisebenzise ezimvume zomthombo weklayenti nendawo ekuyiwa kuyo ezizayo. Ukwamukela imethadatha akugunyazi ukufinyelela kumawebhusayithi, futhi i-ACL yesizinda esiya kuso ayikwazi ukuphendula umbuzo wangaphambili wokuthemba umthumeli.

Umthumeli nomamukeli kufanele bavumelane ngenguqulo ye-PROXY protocol esekelwayo. Iklayenti elijwayelekile le-HTTP alikwazi ukusebenzisa lesi silaleli esinesiqalo esiphoqelelwe njengendawo yokuphela ye-proxy ejwayelekile. Uma zombili izinhlobo zidingeka, sebenzisa ngamabomu izindawo zokuphela ezihlukene esikhundleni sokuphinda ikheli lokulalela ne-port efanayo.

I-relay ethembekile ingaba nomthelela ekuvunyelweni okusekelwe ekhelini ngobunikazi beklayenti elikunikezayo. Nikeza lelo khono kuphela kumxhumanisi ohlosiwe.