Linda umugqa ongenalutho ngemva kwe-CONNECT

Funda impendulo ephelele ye-HTTP/1 CONNECT ngaphambi kokudlulisela i-socket ku-TLS, ngisho noma umugqa wesimo ufika kuqala.

Ikhasimende libona 200 Connection Established, liqala i-TLS bese libika ngokushesha izinto ezingasho lutho lapho bekufanele kube khona irekhodi le-TLS. Funa impendulo ye-HTTP engakaqedi ngaphambi kokusola izilungiselelo ze-cipher zendawo ekuyiwa kuyo.

Ekushintshisaneni kwe-HTTP/1 CONNECT, umugqa wesimo uyisiqalo nje sempendulo. Izinkambu zekhanda zingalandela. Umugqa ongenalutho oqeda isigaba sekhanda ukhombisa ukushintshela kumhubhe ngemva kwempendulo ye-CONNECT ephumelele.

HTTP/1.1 200 Connection Established\r\n
Proxy-Agent: example\r\n
\r\n

Lawama-bhayithi angafika ekufundeni okukodwa, ekufundeni okuningi, noma ekufundeni okubuye kuqukathe namabhayithi alandelayo. I-TCP ayiwagcini imingcele yokubhala yeseva.

Yenza ukudlulisela kube yisimo se-parser esicacile

  1. Qoqa futhi uhlaziye umugqa wesimo. Sebenzisa isimo sezinombolo esikhundleni somusho wesizathu wesiNgisi oqondile.
  2. Qhubeka kuze kufike isiphetho esigcwele sesigaba sekhanda. Umugqa wesimo ophumelele awenzi izinkambu ezisele zinyamalale.
  3. Empendulweni ye-CONNECT ephumelele, thatha ibhayithi elilandelayo ngqo ngemva kwaleso siphetho njengokuqala kwedatha yomhubhe. Kwezinye izimpendulo, landela ukuphathwa kwempendulo ye-HTTP nokuqinisekisa okufanele.
  4. Dlulisela ukuxhumana nanoma yimaphi amabhayithi angasetshenzisiwe ngokusebenzisa isixhumi esibonakalayo se-I/O esinebhafa esisekelwa iphrothokholi elandelayo.

Isinyathelo sokugcina sibalulekile ngisho nasekufuneni okuhle kwesihlukanisi. Umfundi onebhafa kungenzeka usebenzise i-socket eningi kunalokho okwakucelwe i-parser. Ukuqala i-TLS ku-socket enqunu ngenkathi ushiya lowo mfundi kungase kushiye amabhayithi ebhafeni langasese lomfundi.

Sebenzisa umnqamulajuqu wokusetha kanye nomkhawulo wosayizi wekhanda. I-EOF ngaphambi kwesiphetho yimpendulo ye-proxy engaphelele, hhayi isimemo sokulinda unomphela noma ukuzama i-TLS noma kunjalo.

Cabanga ngemingcele eminingana

Cabanga ngokufunda okuphela ngemva kwe-Proxy-Agent:. I-parser isadinga amabhayithi ekhanda le-HTTP engeziwe. Cabanga ngokunye okuphela phakathi nokulandelana kwe-CRLF kokugcina. Lokho akukabi yisigaba sekhanda esigcwele. Manje cabanga ngesigaba sekhanda esigcwele esiphumelele esilandelwa amabhayithi omhubhe ebhafeni elifanayo: lawo mabhayithi engeziwe kufanele adlule ekudluliselweni.

I-407 iwumphumela ohlukile. Idinga ukuphathwa kokuqinisekisa; ayivumeli i-TLS ClientHello ingene kumhubhe ongakaze uvulwe.

Khetha isixhumi esilondoloziwe ngaphandle uma ukusebenzisa ukuxhawulana kuwumsebenzi uqobo. Lo mkhawulo uqondene nokushintshisana kwe-HTTP/1 okuboniswe lapha. I-proxy ye-HTTP/2 ithwala i-CONNECT kumfudlana onefremu ehlukile.

Izihloko ezihlobene