i-systemd-socket-proxyd ingase iphile isikhathi eside kunomhubhe wayo we-SSH SOCKS
Vumelanisa umjikelezo wokuphila womsizi wokudlulisa isokhethi nokuncika kwe-SSH, ukuze umhubhe ofile ungashiyi ingaphambili elibonakala liphilile.
Uma imbobo yangaphambili yamukela ukuxhumana ngemva kokuba i-SSH iphumile, hlola wonke amayunithi amathathu. Isokhethi yokwenza kusebenze, umsizi we-systemd-socket-proxyd kanye nomlaleli we-SOCKS odalwe yi-SSH banesikhathi sokuphila esihlukile:
| Isokhethi | Umsizi | SSH | Incazelo |
|---|---|---|---|
| Iyalalela | Ayisebenzi | Ayisebenzi | Kungenzeka ilinde isidingo ngendlela evamile |
| Iyalalela | Iyasebenza | Iyasebenza | Izinqubo zikhona; impilo yendawo elandelayo ayikaqinisekiswa |
| Iyalalela | Iyasebenza | Ayisebenzi | Ingaphambili ingamukela umsebenzi ngaphandle kwengemuva yayo |
Ukuqala umsizi ne-SSH ndawonye akuchazi uguquko lokuma kwakamuva. Kumsizi okungamele uhlale usebenza ngaphandle komhubhe wawo, i-systemd ibhala ubudlelwano obuqinile:
[Unit]
BindsTo=ssh-socks.service
After=ssh-socks.serviceKusebenzise kuyunithi efanele kumklamo wangempela. Requires= nokuhleleka kuxazulula ingxenye kuphela yobudlelwano. Ingaphambili esivele lisebenza kungenzeka lingaphinde liqalise ukusebenza ngemva kokunyamalala kwengemuva yalo. Hlola futhi isimo samayunithi ahlulekile kanye nemikhawulo yejubane lokuqala; ukuncika akukudluli leyo mikhawulo.
Bese usungula ukulungela kokuqala. After= ihlela imisebenzi, hhayi ukulungela komlaleli we-SSH Type=simple. Ukulala okungaguquki kungahluleka ngesikhathi sokuqinisekisa okunensayo. Sebenzisa isivumelwano sokuqala esisungula umlaleli odingekayo; ExitOnForwardFailure=yes ibamba ukuhluleka kokusetha kokudlulisa, hhayi ukufinyeleleka kwendawo yakamuva.
Ekugcineni, chaza ukuphuma lapho kungenzi lutho nokuqalisa kabusha. Inketho yokuphuma lapho kungenzi lutho yedemon yokudlulisa iphathelene nokungabi nokuxhumana okusebenzayo, hhayi ukuntuleka kwamabhayithi kukuxhumana okuvuliwe. Isikhathi somhlangano othule kungayigcina isebenza. Isidingo esilandelayo kufanele senze kusebenze izinsizakalo ezidingekayo, futhi imijikelezo yokuqalisa kabusha kufanele ihlale inemingcele futhi ibonakale. Ukudala kabusha umlaleli kwamukela ukuxhumana okusha; akubuyisi amaseshini e-TCP wangaphambili enziwe iproxy.