Ukuxhumana kwe-IPv6 kuphela, isevisi ye-IPv4: vumela i-SOCKS proxy ukuba ibe ibhuloho

Awudingi ikheli elivela emkhakheni wamakheli wendawo oya kuyo ukuze uyifinyelele, inqobo nje uma kukhona okuthile endleleni okulungele ukudlulisela. Uhlelo luxhuma ku-proxy, futhi i-proxy ivula ukuxhumana kwesibili okuya endaweni. Lawa amasokhethi amabili anemikhakha yamakheli ezimele, futhi akukho lutho kuzo zombili izimiso okudinga ukuthi zihambisane. Lokhu kuwukudlulisela ezingeni lohlelo, hhayi indlela yemvelo ye-IPv4, futhi lo mehluko unquma okuzosebenza nokungeke kusebenze. Ukuhlanganisa lokhu kokubili yikho okwenza ikhompyutha ephathekayo ichazwe njengenokuxhumana kwe-IPv4 kuyilapho konke enakho kuyi-proxy.

Amasokhethi amabili, imikhakha emibili yamakheli

Isicelo se-SOCKS5 sisho indawo okuyiwa kuyo ngolunye lwezimo ezintathu: ikheli le-v4 elingokoqobo, ikheli le-v6 elingokoqobo, noma igama okufanele i-proxy ilixazulule. Isicelo sichaza lapho i-proxy kufanele ixhumane khona, hhayi ukuthi ukuxhumana kweklayenti ne-proxy kunjani.

Funda lezi zinhlobo zamakheli njengezinqumo ezintathu ezizimele ngaphakathi komlayezo owodwa. I-proxy efinyeleleka nge-IPv6 ingavula isokhethi yendawo ye-IPv4 noma nini lapho inokuphuma kokusebenza kwe-IPv4 futhi inqubomgomo yayo ivumela isicelo. Isicaciso se-SOCKS5 sizichaza ngaphandle kokukhuluma ngokuthutha kweklayenti.

Isibonelo se-SSH esilawulwayo

Thatha umhleli we-SSH ovyumelekile ukuwusebenzisa, ophendula nge-IPv6 futhi ongafinyelela yena uqobo isevisi ye-HTTPS ekhona kuphela ku-v4. Ukudlulisela okushintshayo kwe-OpenSSH kubeka isilaleli se-SOCKS sendawo emshinini wakho ngenkathi isikhathi sokungena sihamba nge-v6.

ssh -6 -N -D 127.0.0.1:1081 -o ExitOnForwardFailure=yes [email protected]

Umhleli ne-akhawunti angenhla ziyizibonelo, futhi ukubopha kwe-loopback kugcina isilaleli kule khompyutha. Ungakushintshi ngokubopha kwe-wildcard ukuze ihhovisi likwazi ukwabelana nge-proxy engaqinisekisiwe. ExitOnForwardFailure=yes ikhona ukuze ukudlulisela okwehlulekile kuqede isikhathi esikhundleni sokushiya umyalo othulile ugijima ngemuva.

Ngenkathi isikhathi sigijima, isicelo sibukeka kanje:

curl --proxy socks5h://127.0.0.1:1081 https://v4-only.example/

Ukuxhumana kwe-loopback akuyona indlela ye-inthanethi ye-IPv4. Okukhishwa emshinini wakho yisikhathi sokungena nge-v6, futhi uhlangothi olukude yilona oluvula isokhethi yendawo. Ifomu le-socks5h liphinde linikeze ukuxazululwa kwamagama kulolo hlangothi, okubalulekile lapho iklayenti lingenayo indlela yaso yokuxazulula i-IPv4.

Lokho indawo ekubonayo ngempela

Indawo ibona ikheli lokuphuma lomdlulisi. Alikho ikheli elomshini wakho elivela lapho. Uhlu lwemithombo evunyelwe kuleyo sevisi kufanele lusho umdlulisi. Namarekhodi ayo azobeka ukuxhumana kumdlulisi. Bhala lokhu kurekhodi loshintsho ngaphambi kokucwaninga, ngoba uhlu lwezimvume olwakhiwe lwezungezeleza amakheli eklayenti luhluleka esicelweni sokuqala.

Umdlulisi futhi uyindawo lapho izingxenye ezimbili zengxoxo zibonakala khona, okuyisici esiwusizo ngesikhathi sokuxilonga futhi kuwumthwalo uma umdlulisi wabiwa ngaphandle kwenqubomgomo.

Lokhu akusiyo i-DNS64 noma i-NAT64

I-DNS64 iphendula ngamarekhodi ahlanganisiwe angena esikhundleni sezindawo ze-v4, futhi i-NAT64 ibhala kabusha amaphakethe ngokulandela indlela emisiwe. Akukho kukho okuchaza okwenzeka lapha, lapho ingxoxo yokuthutha eyodwa iphela futhi enye iqala futhi akukho kheli elihlanganisiwe elichaza umphumela. Ngakho isicelo esiphumelelayo asisho lutho mayelana nezinsizakalo zokuhumusha umhlinzeki wakho azisebenzisayo, futhi i-proxy ingase isebenzise i-NAT ejwayelekile ekuphumeni kwayo.

Zombili izindlela zingaba khona kunethiwekhi eyodwa, ngakho chaza lokho okuhlola ngempela hhayi lokho okuzwakala kuseduze.

Yazi ububanzi ngaphambi kokuthembisa

Ukudlulisela okushintshayo kwe-OpenSSH kuthwala ukuxhumana kwe-TCP, hhayi ukuthutha kwe-IP okungafunwa, ngakho i-UDP, i-ICMP nanoma yisiphi isimiso esingayinaki i-proxy kudinga umklamo osekelwe ohlukile. Gcina ukuqinisekiswa kokhiye womhleli we-SSH, imikhawulo yokudlulisela yeseva nokuqinisekiswa kwesitifiketi se-HTTPS, ngoba i-proxy iyingxenye ethembekile eyengeziwe, hhayi isizathu sokwenza buthaka ukuhlolwa kobuwena. Uma umgomo uwukuthwala ukuthutha kwangaphandle kwe-VPN nge-proxy, qinisekisa ukuthi zombili iziphetho ziyakusekela lokho kuthutha esikhundleni sokucabanga ukuthi noma yisiphi isilaleli se-SOCKS singakudlulisela.

Akukho kulokhu okwenza iklayenti libe yiziteki ezimbili, futhi akukho okudingekayo. Kwenza uhlelo olulodwa lufinyelele isevisi eyodwa ngomdlulisi oyedwa, okuyisimangalo esincane futhi okulula kakhulu ukusiqinisekisa.