I-DNAT ye-proxy esobala: kungani umzila wokubuyela ubalulekile
Qonda ukuthi kungani i-DNAT ingaletha isicelo ku-proxy ehlukile ngesikhathi impendulo idlula isango futhi yephula ukuxhumana.
I-SYN eqondisiwe ingafika ku-Squid ngesikhathi iklayenti lisaphelelwa isikhathi. Ekusethweni kwe-DNAT, iphakethe elibuyayo kufanele lifinyelele isango eliphethe isimo sokuhumusha.
Cabanga ngaleli LAN elicatshangelwayo:
client 192.168.40.25 → gateway 192.168.40.1
DNAT → proxy 192.168.40.10
proxy 192.168.40.10 → client 192.168.40.25 directlyIklayenti laxhumana ekuqaleni nekheli lewebhusayithi. Ngemuva kwe-DNAT, i-proxy ibona umthombo weklayenti futhi ingase isebenzise umzila wesubnet yendawo ukuphendula ngqo. Leyo mpendulo yeqa ukuhumusha okuhlanekezelwe kwesango futhi ingafinyelela iklayenti kusuka ekhelini le-proxy esikhundleni sekheli lewebhusayithi elilindelekile. Isango alikwazi ukulungisa amaphakethe elingakaze eliwathole.
| Indlela | Umphumela |
|---|---|
| Ukuhambisa izimpendulo ze-proxy ngesango elihumushayo | Ukuxhumana okungena ku-proxy kungagcina ikheli lomthombo weklayenti |
| Ukusebenzisa nokuhumusha komthombo okufanele | I-proxy iphendula isango njengontanga wayo, kodwa manje isibona lowo mthombo ohumushiwe esikhundleni seklayenti lokuqala |
Ungasusi i-SNAT ukuze uthole amalogi amahle ngaphandle kokuqinisekisa umzila wokubuyela. Ukusetshenziswa kabanzi kushintsha futhi ama-ACL omthombo nokwabiwa; yamukela lowo mphumela njengengxenye yokuklama.
I-HTTP hop ethembekile ingadlulisa imethadatha yeklayenti kusihloko sokudlulisa, kodwa i-NAT ayisidali leso sihloko futhi ayisiguquli sibe ubunikazi bontanga ye-TCP. Ukugcina umthombo kuxhumano oluya ku-Squid akukugcini futhi kuxhumano lwewebhusayithi elihlukile le-Squid.
Ekugcineni, ukuklama kokuvimbela kusafanele kunikeze ulwazi lwendawo okuyiwa kuyo oludingwa yi-Squid. Umzila wokubuyela olinganayo uxazulula le ndlela yokuphuma kwesikhathi, hhayi lonke ukulungiselelwa kwe-proxy esobala.