Iyiphi i-IP yeklayenti ebonywa yi-proxy engumzali?
Landelela ikheli lomthombo elibonwa yi-proxy ephezulu futhi gcina imethadatha yeklayenti edlulisiwe ngaphakathi komngcele wokuthembela ochaziwe.
Ukufaka isiteshi somsebenzi ohlwini oluvunyelwe akusho ukuthi i-proxy entsha engezansi ingaxhuma egameni layo:
workstation → local proxy → corporate parent → websiteI-proxy yasendaweni ivula uxhumano olusha kumzali. Ngokuvamile umzali ubona ikheli lokuphuma laleyo proxy, mhlawumbe ngemva kwe-NAT. Ikheli lesiteshi somsebenzi sokuqala alibi umthombo woxhumano olusha ngenxa nje yokuthi yilo eliqale isicelo sonke.
Thola umthombo oqondile umzali awuthola ngempela. Gunyaza i-proxy engezansi kuphela ngensizakalo ehlosiwe, futhi gcina imikhawulo yeklayenti kusimo esingezansi. Uma kungenjalo umlamuli ovunyelwe angakwazi ukunikeza ukufinyelela kunoma ubani ongayifinyelela.
Kukhona okuhlukile ngamabomu ekuchazeni okulula kwe-socket-peer. I-Squid 6 ne-7 zingalandela i-X-Forwarded-For evela kontanga abathenjwa ngokusobala futhi zisebenzise ikheli leklayenti elingaqondile elivela kulokho emisebenzini ekhethiwe. Izilungiselelo ezifanele zinquma ukuthi i-ACL yomthombo iyasebenzisa yini lokho kuhlonza okususelwe; lapho lesi sici sivuliwe, src akusona njalo intanga eluhlaza.
Themba kubuhlonza obudlulisiwe kuphela okuvela kumlamuli owuhlanza futhi awunikeza ngendlela efanele. Noma iyiphi i-X-Forwarded-For enikezwa yiklayenti ngokwayo iyinqobo yokuthiwa, hhayi umthombo oqinisekisiwe. Lapho inqubomgomo ivuma khona, bhala kokubili intanga eqondile neklayenti lokuqala elithenjwayo: eyokuqala ibonisa ukuthi ubani oxhumene nomzali, eyesibili ibonisa ukuthi ubani okwakhonzwa yilowo ongezansi.