I-gateway ye-Linux ingasebenzisa inqubo ye-proxy futhi ihambise ithrafikhi eceleni kwayo. Lezi akuzona indlela yephakethe efanayo.

UkuxhumanaIndima yasendaweni efanele
Iklayenti lifinyelela i-proxy esekugatewayIthrafikhi eqondiswe kusihambisi sendawo
Iklayenti lifinyelela esinye isihambisi ngokusebenzisa i-gatewayIthrafikhi edlulisiwe
I-proxy ivula ukuxhumana newebhusayithiIthrafikhi edalwe inqubo yasendaweni

I-Netfilter ihlukanisa izindlela zokungena, zokudlulisa nezokuphuma. Umthetho olawula ukufinyelela kumsakazi we-proxy we-gateway uqobo awuvimbeli ngokuzenzakalela konke ukuxhumana okuhambisiwe kuleyo moto.

Chaza okufanele kuphoqelelwe

Uma amaklayenti kufanele asebenzise i-proxy egunyaziwe, inqubomgomo kufanele ibhekane nezindlela zawo zokuphuma ezihlukile ngaphezu kokuvumela umsakazi ohlosiwe. Ukuvumela ukuxhumana nanoma iyiphi insizakalo ekude kuphela ngoba isebenzisa imbobo ye-proxy eyaziwayo akufani nokuvumela iphoyinti lakho lokugcina le-proxy kuphela.

Gcina ukufinyelela okuqhubekayo kwe-proxy uqobo kuhlukene. Ku-Squid, hlukanisa ubunikazi besokhethi sendawo nobunikazi bomsebenzisi we-LAN ngaphambi kokusebenzisa imvume yokuphuma. Ukwenqaba konke ukuxhumana okuphumayo okusizakalayo okuvela ku-proxy kungenza indlela edingekayo ingatholakali. Ithrafikhi yokuphatha, ukuxazululwa kwamagama nemisebenzi engesiyo yewebhu esekelwayo nakho kudinga ukuphathwa ngamabomu kunqubomgomo yokuthunyelwa.

Ubukhulu bephrothokholi bubalulekile. Umthetho we-TCP awuchazi ngokwawo ithrafikhi ye-UDP, kuhlanganise ne-QUIC. Ukubamba ithrafikhi kungenye idizayini; i-proxy ye-HTTPS ecacile inganikeza i-CONNECT ngaphandle kokususa ukubethela kwesikhathi sewebhusayithi.

Dweba imephu yokuxhumana okuhloswe ngaphambi kokuhlela isethi yemithetho. Okuthandwa yisiphequluli kukhetha indlela yamaklayenti abamba iqhaza. Ukuphoqelela kwenethiwekhi kunquma ukuthi yiziphi ezinye izindlela ezingaphumelela. Akukho kokubili okufanele kuthathwe kuphela ekungeneni okusebenzayo ku-proxy.

Izihloko ezihlobene