Sebenzisa ubunikazi besokhethi ukwephula umjikelezo wokuqondisa kabusha kwephroksi yasendaweni

Khipha amasokhethi aphumayo ohlobo lwephroksi ngokwalo ekuhambiseni kabusha kwe-OUTPUT yasendaweni esikhundleni sokuqagela amachweba ayo omsuka.

Iphroksi yasendaweni yokubamba ivula ukuxhumana okusha okuphumayo. Uma ukuhambisa kabusha kwe-OUTPUT okubanzi kubamba lawo masokhethi futhi, ibuyisela iphroksi kumlaleli wayo uqobo.

Kusimo esikhona se-IPv4 iptables NAT, ubunikazi besevisi obukhethekile bungahlukanisa lawo masokhethi:

-A OUTPUT -p tcp -m owner ! --uid-owner proxyuser \
  -m multiport --dports 80,443 -j REDIRECT --to-ports 8080

Lesi siqephu somthetho sicabanga ukuthi umlaleli okwazi ukubamba usuvele ukhona kuphothi 8080 futhi amasokhethi aphumayo ephroksi ingezika-proxyuser. Ukuxhumana kwalowo msebenzisi akukho kulo mthetho; ukuxhumana okufanelekile kwabanye abasebenzisi kuyahambiswa kabusha.

Isiphequluli ngokuvamile sikhetha iphothi yomsuka yesikhashana. Ukufanisa iphothi yomsuka 80 noma 443 akusiyo indlela ethembekile yokubona ukuxhumana kwaso kwewebhusayithi noma yokukhulula iphroksi.

Ukufaniswa komnikazi kumayelana nethrafikhi ekhiqizwe endaweni enobunikazi besokhethi. Akusiyo indawo yomgomo wekheli lomsuka wamaphakethe afika avela kweminye imishini.

Gcina ukulandelana kwemithetho ekhona kanye nomgomo wenethiwekhi emehlweni. Ukuhambisa kabusha akuguquli umlaleli we-SOCKS oluhlaza ube isijikelezi sokubamba, futhi i-IPv6 nayo idinga ukulungiselelwa kwayo okufanele.

Izihloko ezihlobene