Tura ta gida ta SSH zuwa proxy na HTTP da ke akwai: adiresoshin loopback biyu

Proxy ɗinka da aka amince da shi yana aiki a kan sabar tsalle inda yake saurare a kan loopback kawai, don haka babu abin da ke wajen wannan na'urar da zai iya isa gare shi. Ba ka buƙatar VPN ko sabon proxy; kana buƙatar port ɗaya na wannan na'urar da aka ɗauka zuwa port ɗaya naka. Tura ta gida tana yin daidai haka, kuma tana buƙatar umarni ɗaya da saitin aikace-aikace ɗaya. Ruɗani yakan zo daga haɗa wane adireshin loopback ya ke na wace na'ura.

Yanke shawara ko akwai tsayayyen proxy tukuna

Wannan dabara tana tura hidimar da ke aiki tukuna. Idan sabar nesa tana da daemon SSH kawai kuma babu proxy, babu adadin turawa da zai ƙirƙiri ɗaya, kuma za a ƙi haɗin daga ɓangaren nesa. Tabbatar an ɗaure proxy, menene port ɗinsa, kuma ko yana saurare a kan 127.0.0.1 ko a kan takamaiman adireshin muƙami, domin wannan adireshin ne tura ta gida ya kamata ta nufa.

Tabbatar da wannan da farko yana ceton ka daga gyara tunnel wanda ba a taɓa haɗa shi da komai ba.

Gina turawar kuma karanta umarnin

Siffar da kake so tana ɗaure port na loopback a kan kwamfutar tafi-da-gidanka kuma tana haɗa shi, daga ɓangaren sabar, zuwa adireshin proxy kamar yadda sabar take ganinsa.

ssh -NT -o ControlPath=none -o ExitOnForwardFailure=yes \
  -L 127.0.0.1:13128:127.0.0.1:3128 [email protected]

-N yana hana umarnin nesa kuma -T yana hana rabon termios, domin kana son tunnel ba harsashi ba. Adireshin loopback na farko shine inda kwamfutar tafi-da-gidanka ke saurare; na biyu sabar SSH ce ke warware shi, don haka 127.0.0.1 a can yana nufin proxy a wannan na'urar. ExitOnForwardFailure yana sa umarnin ya gaza da ƙarfi idan port na gida ya riga an ɗauke shi, maimakon fara zaman da ba ya tura komai. Rubuta adireshin manufa kamar yadda sabar take warware shi, domin sunan da kwamfutar tafi-da-gidanka ka kaɗai zai iya warwarewa zai gaza a ɓangaren can.

Manufar sabar kanta tana aiki kafin wani abu daga cikin wannan ya yi aiki. AllowTcpForwarding dole ne ya ba da izini, kuma PermitOpen na iya taƙaita waɗanne wurare da ports zaman zai iya isa, don haka turawar da abokin ciniki ya karɓa sabar na iya ƙi ta har yanzu. Ƙin yana bayyana a matsayin kuskuren turawa ko tashar a wurin abokin ciniki, kuma karanta wannan saƙon ya fi gyara umarnin sauri.

Nuna aikace-aikace ɗaya ga turawar

Saita aikace-aikacen don amfani da proxy na HTTP a http://127.0.0.1:13128, tare da takaddun shaida idan proxy na nesa yana buƙatar su. Ka riƙe tabbatar da takardar shaida na aikace-aikacen kanta don wuraren HTTPS, domin tunnel ɗin proxy ba ya maye gurbinsa. Wannan tsayayyen turawa ne na hidima ɗaya, don haka dole a gaya wa aikace-aikacen akwai proxy maimakon a bar shi ya gano ɗaya da kansa.

Bincike mai sauri kafin saita wani abu na dindindin: curl -x http://127.0.0.1:13128 -I https://example.com, wanda ke gwada hanyar HTTP CONNECT da proxy ya kamata ya tallafa.

Ka riƙe ikon a inda yake

Proxy na nesa har yanzu yana yanke shawara waɗanne wurare da hanyoyi ya ke ba da izini, kuma shiga SSH bai kamata ya ba kowane asusu relay na yanar gizo gabaɗaya cikin shiru ba. Daurewa zuwa 127.0.0.1 a kan kwamfutar tafi-da-gidanka yana guje wa wallafa port ɗin a cibiyar sadarwar gida, kuma ba ya mai da port ɗin sirri daga sauran matakai a kan wannan na'urar. Maye gurbin wannan ɗaure da adireshin wildcard don raba proxy shine yadda ake ƙirƙirar relay buɗaɗɗe marar kulawa.

Jigilar SSH tana kare tsallen zuwa sabar. Bayan wannan matakin proxy yana buɗe haɗinsa, don haka buƙatar HTTP mai sauƙi zuwa wani wuri tana kasancewa mai sauƙi bayan sabar, ko da kuwa ɓangaren farko an ɓoye shi.

Tabbatar da ɓangarorin biyu, sannan ka share

Saitin tunnel na gida da nasarar hidima ta nesa sakamako ne daban-daban, kuma matsayin fitar umarnin yana gaya maka game da na farko kawai. Duba cewa mai saurare yana nan da ss -ltn, sannan ka yi buƙatar aikace-aikace da aka yarda da ita da buƙatar da proxy ya kamata ya ƙi. Idan duka biyu sun nuna kamar yadda ake tsammani, hanyar gaskiya ce; idan tunnel yana aiki kuma kowace buƙata ta gaza, proxy yana ƙi ko ba zai iya isa wurin ba.

Idan ka gama, dakatar da tsarin SSH da ya mallake shi, cire saitin proxy daga aikace-aikacen, kuma tabbatar port ɗin gida ya tafi maimakon barin mai saurare wanda zai fi aikin tsawon rai.