Isiphequluli segatsha ku-proxy: ukuxhumana okubili, imizila emibili

Isiphequluli segatsha ngemuva kwe-proxy ecacile sivula ukuxhumana okubili, futhi kwehluleka ngezizathu ezihlukene. Okokuqala ukusuka kwisiphequluli kuye kwisilaleli se-proxy, okuthwalwa nge-VPN yegatsha. Okwesibili ukusuka ku-proxy kuye kusayithi, kusetshenziswa isixazululi, umzila kanye nenqubomgomo yokuphuma ye-proxy ngokwayo. Amathikithi okusekela abakubheka njengokugeleza okukodwa athumela abantu kudivayisi engafanele amahora. Lungiselela ngakunye ngamabomu futhi ukuhlole ngalolo hlelo.

Isinyathelo 1: bhala ukugeleza okubili

Indawo okuya kuyo ngokuqondile yesiphequluli yisilaleli se-proxy, hhayi wonke amasayithi umsebenzisi agcina ewahambile. Lowo musho owodwa uxazulula iningi lokudideka kulo mklamo.

branch browser -> site VPN -> central proxy listener
central proxy -> approved egress policy -> website

Imithombo ehlukene, imizila ehlukene, izimvume ezihlukene. Gcina umdwebo kurekhodi yoshintsho, ngoba konke ukuhlola okulandelayo kubhekisela kwelinye lamahafu akhe amabili.

Isinyathelo 2: nikeza isiphequluli indlela eya kusilaleli

Rekhoda igama lomsingathi we-proxy, imbobo yesilaleli, izidingo zokuqinisekisa kanye nemithombo yegatsha evunyelwe. Lolo hlu luyimibandela yokwamukela yokugeleza kokuqala, futhi kufanele lufake ukuxazululwa kwamagama angaphakathi kanye nomzila weshubhu.

Sebenzisa umthetho wamanethiwekhi omncane wesevisi ehlosiwe esikhundleni sokushicilela i-proxy engenamkhawulo ku-inthanethi. I-proxy ingahlala kunethiwekhi yangaphakathi lapho amaklayenti ayo ahlosiwe enendlela esekelwayo eya kuyo.

Isinyathelo 3: lungiselela isiphequluli, hhayi ithebula lemizila kuphela

Sebenzisa isethingi ye-proxy yesiphequluli, ifayela le-PAC noma indlela yokuthola ephethwe yinhlangano. Ukuthumela amaphakethe ajwayelekile esayithi ekhelini le-proxy ngomzila akwenzi isiphequluli sikhulume iphrothokholi ye-proxy; lokho ukungenelela okusobala futhi kungokomunye umklamo wesango.

Bhala ukuthi yiziphi izinhlelo ezihlonipha isethingi. Amaklayenti e-imeyili, izibuyekezi kanye nemidlalo kaningi awazihloniphi, futhi zizoqhubeka zisebenzisa indlela ejwayelekile.

Isinyathelo 4: fakazela ukuxhumana okuqhubekayo kwe-proxy

I-proxy idinga isixazululi sayo kanye nomzila ovunyelwe oya kusayithi, kanye nanoma iyiphi inqubomgomo ye-firewall noma yokuhumusha edingwa umngcele wayo we-inthanethi. Isiphequluli esifinyelela kusilaleli asifakazeli lutho kwalokho. Hlola ukugeleza kwesibili kusukela ku-proxy ngokwayo, ngendawo efanayo nembobo umsebenzisi akubike.

Kwe-HTTPS, i-CONNECT ivula ishubhu eliya endaweni eceliwe. Ukudlulisela okuvamile akunikezi i-proxy ikhasi elisusiwe ukubethela, futhi ukucisha ukuqinisekiswa kwesitifiketi ukuze kwenziwe ukuhlola akusona isisombululo.

Isinyathelo 5: hlukanisa ukwehluleka okune

Inselelo yokuqinisekisa ye-proxy i-407 evela kusilaleli. I-CONNECT enqatshiwe isinqumo senqubomgomo ku-proxy, ngokuvamile enesimo sayo nomugqa welogi. Ukuxhumana okuqhubekayo okwehlulekile kubonakala njengokuphela kwesikhathi noma ukusethwa kabusha i-proxy ekurekhodayo ngokumelene nendawo. Impendulo yesayithi isho ukuthi kokubili ukuxhumana kwasebenza futhi inkinga isemthonjeni.

Bika umngcele oyibonile, hhayi isifinyezo sokuthi i-VPN yehlulekile.

Isinyathelo 6: chaza ububanzi futhi uhlele indlela yokubuyela emuva

Nquma ukuthi kwenzekani lapho i-proxy noma ishubhu lingatholakali, futhi usho ngokucacile ukuthi yiluphi ukuxhumana umklamo lo awumbozayo. Ithwala ukufinyelela kwewebhu okuvela kumaklayenti ahlonipha isethingi ye-proxy; ayithwali i-imeyili, amaphrothokholi edivayisi angafanele noma isofthiwe edebesela ukulungiselelwa.

Qinisekisa umsebenzi wesiphequluli odingekayo kanye nokwenqatshwa okukodwa okudingekayo ngaphansi kohlelo olugunyaziwe ngaphambi kokunweba umklamo kumaklayenti amaningi.