Abin da REMOTE_ADDR na PHP ke faɗa da gaske a bayan VPN
Wannan ƙima ce da uwar garken yanar gizonka ya bayar, ba tambaya cikin rami ba. Bi hanyar buƙatar, duba wanda zai iya sake rubuta ta, kuma ka riƙe asalin a cikin manhajar.
Wani ya tambaya dalilin da me amfani da VPN ke bayyana a tarihin manhajar da adireshin da ke na ƙofar shiga, ko da adireshin da ya canza bayan abincin rana. Amsar ta fara da abin da wannan ƙima take: wani shigarwa da uwar garken yanar gizo ya sanya a yanayin buƙatar. Ba tambaya cikin rami ba ce, ba asalin takardar shaida ba ce, kuma ba alkawarin cewa lambar ta mutum ɗaya ba ce. Karanta ta a matsayin ɗaya daga cikin waɗannan uku yana ba da amsoshi na ƙarfin zuciya waɗanda suke kuskure ta hanyoyi daban-daban.
Ƙimar ta fito daga uwar garke, ba daga rami ba
PHP na karɓar yanayin buƙatar daga abin da ya gudanar da rubutun. Bayani kan masu canjin uwar garke na PHP ya bayyana waɗannan shigarwar a matsayin waɗanda uwar garken yanar gizo ya ƙirƙira, kuma samuwarsu ya dogara da yadda buƙatar ta zo.
Rubutun da ake gudanarwa a matsayin ƙugiya ta layin umarni na VPN wani mahallin aiwatarwa ne daban. Ba shi da buƙatar yanar gizo, ba shi da soket na abokin ciniki kuma ba shi da REMOTE_ADDR, shi ya sa lambar yanar gizon da aka kwafa cikin ƙugiya ke bayar da ƙima marasa komai maimakon kuskure. Ƙugiyar tana da nata yanayi wanda daemon ke cika, kuma an rubuta shi daban. Kai zuwa REMOTE_ADDR a wurin kai ne zuwa ga mai canji da ba a taɓa saita shi ba.
Ka riƙe wannan bambanci a zuciya kafin ka kwatanta tarihi biyu. Wataƙila kana kwatanta buƙatar shafi da ƙugiya, kuma wannan ba kwatance ba ne kwata-kwata. Duba mahallin aiwatarwa da farko, sannan adireshin.
Bi hanyar buƙatar kafin ka amince da lambar
Adireshin da aka bayar shi ne abokin haɗin da uwar garken yanar gizo ya gani. Sanya wani abu tsakanin abokin ciniki da wannan uwar garke kuma abokin yana canzawa. Fassara, ƙarewa da daidaita nauyi kowanne yana motsa lura nisa mataki ɗaya daga mai amfani.
Hanyoyi huɗu na yau da kullum suna bayar da lura huɗu daban-daban.
| Path to the listener | What can be reported |
|---|---|
| Client routed straight to the private listener, no translation | The client's tunnel address |
| Gateway translates the source before forwarding | The gateway's translated address |
| Reverse proxy terminates the client and opens its own backend connection | The proxy's backend address |
| Load balancer in front of two proxies | Whichever hop the server treats as its peer |
Rubuta hanyar tare da sunan manufa, iyalin adireshi da kowane wurin fassara. Idan ba tare da wannan taswira ba, ƙimar daidai da ƙimar kuskure suna kama da juna a layin tarihi. Layuka biyu na zane suna ceton rana ɗaya ta muhawara.
Sauya yana faruwa ne kawai a inda aka saita shi
Uwar garke ko tsarin aiki na iya musanya adireshin abokin ciniki da gangan. Modul ɗin remote-IP na Apache da modul ɗin real-IP na NGINX duka suna yin haka, kuma ƙimar da PHP ke karɓa ta dogara da wannan saitin da sigogin da aka miƙa wa mai sarrafa rubutun.
Don haka REMOTE_ADDR ba koyaushe ne abokin TCP da ba a taɓa shi ba. Shi ne abokin kamar yadda uwar garke ta zaɓa ta bayar da shi bayan ta yi amfani da nata manufar. Wannan bambanci ne ke tabbatar da ko ƙimar shaida ce ko ado.
Tambayi mai uwar garke wace fili ce mai iko a wannan girke-girke kuma yadda ake kiyaye ainihin abokin lokacin da sauya ya faru. Idan babu wanda zai iya amsawa, tarihin bai tabbatar da komai ba tukuna.
Kada ka karanta kawunan turawa da amincewa
Mai kira na iya aika kawunan turawa da kansa. Ɗaukar shigarwar farko da aka raba da waƙafi a matsayin tabbataccen adireshin mai amfani shi ne yanke shawara a amince da duk wanda ya haɗa, wanda shi ne kishiyar manufar kawunan. Kawunan yana bayanin sarkar, kuma wani layi na aminci ne kawai zai iya lamuncing sarkar.
Yi amfani da tallafin wakilai na aminci na uwar garke ko tsarin aiki tare da ainihin sarkar wakilai da aka saita, kuma ka bar shi ya jefar da ƙimomin da suka fito daga tushen da ke wajen wannan sarkar. Binciken da aka rubuta da hannu shi ne wurin da yawancin gazawa masu ban sha'awa suke zaune.
Adireshin da wakili ya bayar shima ba ya canza tushen fakiti da bangon wuta na sama ke gani. Ka riƙe bayanan HTTP da tacewar cibiyar sadarwa a matsayin lura daban-daban, domin suna amsa tambayoyi daban-daban.
Yi amfani da asalin manhajar don yanke shawara
Don isa ga bayanan mai amfani, dogara ga tabbataccen ɓangare da ka'idojin izini na manhajar. Ana iya sake raba adireshin ciki, kuma adireshi ɗaya da aka fassara zai iya wakiltar ɗaruruwan masu amfani a lokaci ɗaya. Babu ɗaya daga cikin waɗannan halaye da binciken adireshi zai iya gyara.
Idan ayyuka suna buƙatar danganta buƙata da zaman VPN, haɗa adireshin da aka lura da tambarin lokaci da bayanan zaman masu iko bisa tsarin fassarar da ka rubuta. Wannan yana samar da dangantaka da za ka iya karewa; adireshi shi kaɗai ba ya yin haka.
Don bincike, rubuta filaye kaɗan da ake buƙata maimakon dukan jerin uwar garke, wanda zai iya ɗaukar kawuna da kayan tabbatarwa. Amfani mai kyau shine ya faɗi abin da wannan ƙima take nufi a wannan girke-girke, ba wace ƙima ta fi kama da abokin ciniki ba.