VPN a kunne kuma localhost ya daina aiki: suna, proxy ko ɗaure?

Sabar ɗinka na ci gaba ya amsa minti ɗaya da ya wuce, kuma yanzu da tunnel ɗin ya tashi buƙatar ta ƙare da sunan host da ba ka taɓa rubutawa ba. Hanyoyi biyu ne ke bayyana kusan kowane yanayi, kuma daga waje suna kama da juna. Ƙarin bincike yana mai da gajeren suna sunan kamfani, yayin da proxy ke tura zirga-zirgar loopback zuwa host da ba zai iya isa gare ta ba. Raba biyun yana kashe tambaya ɗaya kuma yana adana dokar firewall da kake shirin rubutawa.

Lokacin da localhost ya warware zuwa yankin kamfani

Duba abin da sunan ke warwarewa zuwa gare shi yayin da tunnel ɗin yake a kunne, sannan ka sake gudanar da tambayar da tunnel ɗin a kashe ka kwatanta amsoshi biyun. Alamar ita ce adireshi a cikin iyakar kamfani inda ka yi tsammanin 127.0.0.1. Rikodin kamar localhost.mycompany.corp yana cin nasara a kan shigarwar loopback da zarar abokin ciniki ya ƙara wannan ƙari ga jerin bincike, kuma buƙatar tana tafiya zuwa host mai zaman kansa inda babu abin da ke saurara a wannan tashar. Karanta jerin bincike maimakon yin hasashe, domin abokin ciniki na iya ƙara fiye da yanki ɗaya kuma tsari ne ke yanke shawarar wane ɗan takara a fara gwadawa:

getent hosts localhost
resolvectl domain
ss -ltnp | grep 8080

Maye gurbin sunan host da adireshin zahiri a cikin manhaja, abokin ciniki na bayanai ko URL na littafin rubutu, sannan ka maimaita buƙatar. Idan gazawar ta ɓace, kana da matsalar suna kuma tunnel ɗin ya kasance jagora ne kawai. Idan ta ci gaba, mai sauraro ko hanya ne na gaba da ake zargi kuma sunan ya kasance ɓataccen alama ne kawai.

Saitunan proxy da ke kama loopback

Proxy na tsarin da ake amfani da shi lokacin da tunnel ɗin ya tashi zai karɓi buƙata zuwa 127.0.0.1 kuma ya tura ta zuwa proxy mai nisa wanda bai san abin da kake nufi ba. Jerin keɓewa mara komai yana mai da buƙatar gida ta zama ta nisa, kuma saƙon kuskure ba kasafai yake faɗin haka ba. Ƙara adiresoshin loopback ga jerin keɓewa don dukan zaman ba don umarni ɗaya ba, sannan ka tabbatar kayan aikin yana girmama shi kafin ka yanke wani shawara game da cibiyar sadarwa.

Tsarin manhajoji suna karanta nasu masu canjin muhalli da wani lokaci nasu fayil ɗin saiti, don haka keɓewar da ke aiki ga kayan aiki ɗaya ba ta tabbatar da komai ga na gaba ba. Masu bincike suna ƙara juzu'i: masu bincike bisa Chromium suna keɓe proxy don loopback a ɓoye, kuma alamar keɓewa na iya cire wannan ɗabi'a. Duba ainihin shawarar proxy maimakon ɗauka cewa saitin tsarin aiki shi ne dukan labarin. Umarni biyu suna warware wannan ga duk abin da aka fara daga shell:

curl --noproxy '*' http://127.0.0.1:8080/health
NO_PROXY=localhost,127.0.0.1,::1 your-tool

Adireshin ɗaure yana yanke shawarar wanda zai iya haɗawa

Sabar da aka fara a 127.0.0.1 yana karɓar haɗi daga wannan na'urar kawai, wanda yawanci shine daidai tsoho don ci gaba. Sabar a 0.0.0.0 tana amsa a kowane fuska, gami da adaftar VPN, wanda ya fi fallasa fiye da yadda yawancin mutane suke nufi. Lokacin da adireshin loopback na zahiri ya kasa, duba ɗaurewar kafin wani abu.

Duba socket ɗin da ke saurara ka lura da adireshin da aka ɗaure shi da shi, ba tashar kawai ba. Idan wata na'ura ko kwantena dole ta isa sabis ɗin ta tunnel, ɗaure zuwa takamaiman fuskar da za ta yi amfani da ita kuma ka ba da izinin wannan tashar da gangan. Idan na'urarka kaɗai ce ke buƙata, riƙe kunkuntar ɗaurewar ka gyara abokin ciniki maimakon faɗaɗa sabar. Tura tasha ko dabarar tunnel na iya haɗa biyun, amma kowanne yana ƙara ɓangaren da zai buƙaci nasa gyaran daga baya.

Inda kayan aikin gyara ke tsammanin LAN

Kayan aikin gyara suna ɗauke da zato da tunnel ke karya cikin shiru. Gadar gyaran wayar tana rasa na'urarta lokacin da VPN ya kama subnet ɗin na'urar, don haka sake haɗawa ta adireshin LAN ko kebul yana guje wa rikici. Cibiyar sarrafa mai bincike tana ƙarewa lokacin da cibiyar ba za a iya isa ba sai ta proxy, ko lokacin da firewall na gida ya bar tashar sarrafawa. Mai gyara na nesa na iya buƙatar ɗagawa da adireshin loopback inda abokin ciniki ya sake rubuta hanya.

Gane tashar sarrafawa da tashar bayanai daban, domin sau da yawa ɗaya yana tsira yayin da ɗayan ba ya. Sannan ka yanke shawara ko gyaran yana cikin saitin kayan aiki, a cikin hanya don wannan subnet, ko dokar raba tunnel. Gyara fayil ɗin hosts a kowace na'urar mai haɓakawa shine mafi munin ma'auni kuma ana mantawa da shi da farko. Fi son saitin da ke rayuwa tare da bayanin martaba kuma wanda duk wanda ya mallaki tunnel zai iya duba shi.

Tsaya a matakin farko da ya kasa

Yi aiki ta matakai uku: warware sunan, buɗe socket zuwa adireshin zahiri, sannan bar kayan aikin ya yi nasa haɗin. Kowane mataki yana kawar da sami ɗaya, don haka gazawar farko tana ambaton samin da za a gyara kuma duk abin da ke bayanta ya kasance ba a gwada ba. Rubuta sakamakon kafin ka canza komai, domin gyaran da aka yi kafin auna ba za a iya bambanta shi da sa'a ba. Idan ƙoƙari na farko ya kasa kuma maimaitawa ya yi aiki, tabbas tunnel ɗin bai kasance a shirye ba lokacin da kayan aikin ya fara.

Maye gurbin jira na tsaye da gwajin shirye-shirye mai iyaka wanda ke jiran hanya, kuma ka riƙe matakin da ya kasa a cikin log domin na gaba ya ga inda ya tsaya. Kayan aikin da ke warkar da kansa ba a gyara shi ba, yana da sa'a, kuma sa'ar tana ƙarewa a na'urar wani. Canza tunnel ɗin a ƙarshe, kuma kawai don matakin da ya kasa da gaske. Wannan tsari shi ma shine mafi gajeriyar hanyar komawa zuwa ginawa mai aiki, domin yana hana ka sake gina ɓangaren da bai taɓa shiga ba.