I-SSH reverse dynamic forwarding: ukwakha isilaleli se-SOCKS esikude
Yakha isilaleli se-SOCKS esiguquguqukayo esiphambene ku-seva ye-SSH, lapho ukuxhumana okuya endaweni okuya khona kuvulwa ngohlangothi lwekliyenti.
Ngokuvamile ithumbu le-SSH SOCKS linikeza ikhompyutha ephathwayo indlela yokuphuma yenethiwekhi yeseva. I-reverse dynamic forwarding iguqula lokho kuhlelo: uhlelo olusemshinini ekude lungasebenzisa inethiwekhi etholakala kukliyenti yakho ye-SSH.
Kukliyenti ye-OpenSSH esekela ukudlulisela okukude ngaphandle kwendawo okuya khona:
ssh -N -R 127.0.0.1:1080 [email protected]
Isilaleli se-SOCKS siku-remote.example.net, siboshelwe ekhelini laso le-loopback. Izinhlelo zalapho zisebenzisa i-127.0.0.1:1080. Ukuxhumana okuya endaweni okuya khona kubuyela emuva nge-SSH futhi kuvulwa ngohlangothi lapho kugijima khona ikliyenti yakho.
Funda indlela ngaphambi kwe-IP
Idokhumenti ye--R yenza indawo okuya khona eshiywe ingabi nangilutho ibe nencazelo. Incazelo equkethe i-port:host:hostport iwukudlulisela okugxilile esikhundleni salokho. Ungacabangi ukuthi ikliyenti endala isekela isimo sesiguquguquko esifushane.
I-IP ephumayo yileyo inethiwekhi yohlangothi lwekliyenti yakho eyisebenzisayo kuleyo kuxhumana. Ikhompyutha ephathwayo engemuva kwerawuta yasekhaya ingaphuma ngekheli lomphakathi elihunyushelwe lerawuta. Akusiyo i-IP yeseva ye-SSH ngokuzenzakalela, futhi akusilo ikheli elinikezwe ikhompyutha ephathwayo ngqo.
Gcina isilaleli esikude silinganiselwe. Ukubopha ngesimo esivulekile kungavumela eminye imishini ukuthi isebenzise inethiwekhi yohlangothi lwekliyenti yakho njengendlela yokuphuma, ngokwenqubomgomo yeseva. Ngisho i-loopback ingatholakala kwezinye izinqubo ezifanele kumsingathi okude; akusiyo imfihlo ngenqubo ngayinye.
Okweqoqo elilinganiselwe lendawo okuya khona, buyekeza i-PermitRemoteOpen kanye nenqubomgomo yokudlulisela yeseva. Umzila futhi uncike ekutheni ikliyenti yakho ihlala iku-inthanethi. Lapho lokho kuxhumana kuvalwa, umzila we-proxy okude unyamalala. I-reverse forwarding ishintsha lapho ukuxhumana kuqala khona; ayinikezi i-proxy ezimele engaxhomekekile esimweni se-SSH.