I-Squid tcp_outgoing_mark ne-Linux fwmark routing

Hlukanisa izicelo ze-proxy ezikhethiwe nge-tcp_outgoing_mark bese uvumela umthetho we-Linux fwmark okhona ukuthi ukhethe umzila wazo.

I-Squid ingahlukanisa isicelo ngolwazi umzila we-IP ojwayelekile ongenalo. Kwi-Linux build esekelwayo, i-tcp_outgoing_mark ibeka uphawu lwe-Netfilter ohlangothini lweseva ngokusekelwe ku-ACL esheshayo:

acl selected_sites dstdomain -n .vendor.example
tcp_outgoing_mark 0x20 selected_sites
tcp_outgoing_mark 0x00 all

Umthetho wenqubomgomo ye-Linux ohambisanayo ungasebenzisa i-fwmark 0x20 ukukhetha ithebula lomzila elivele lilungisiwe. Ithebula lisadinga imizila efanele kanye nesinyathelo esilandelayo esingafinyeleleka. Isiqondiso se-Squid asikwakhi lezi.

Lolu phawu luyimethadatha yomzila yasendaweni. Luhlukile kunenkambu ye-DSCP noma ye-TOS ethwalwa kupakethe we-IP, futhi luhlukile kwi-tcp_outgoing_address ekhetha i-IP yomthombo.

Isiqondiso esibhaliwe sidinga ukusekelwa kokumaka amapakethe namalungelo e-Linux futhi samukela ama-ACL asheshayo kuphela. Sitholakala ku-Squid 7 nakwizinguqulo zangaphambilini ezibaluliwe, hhayi ku-Squid 8.

Yakha inqubomgomo ezungeze ukuxhumana kwangempela okuphumayo. Ukuxhumana kwe-TCP okusetshenziswe kabusha akubi ukuxhumana okusha ngoba nje esinye isicelo se-HTTP sikusebenzisa. Gcina nakumklamo indlela yokubuya eya kuklayenti kanye nomzila wethrafikhi engenalo uphawu.

Izihloko ezihlobene