VPN ye-Mac kanye ne-proxy ye-PAC: izinqumo ezimbili, hhayi isethingi eyodwa

I-Mac yakho ilanda iskripthi somgomo bese ibuza leso skripthi ukuthi yimuphi umlamuli okufanele usetshenziswe isicelo, kuyilapho umhubhe unquma kuphela ukuthi kufinyelelwa kanjani ku-hop ekhethiwe. Zombili izimpendulo zihlala ku-socket eyodwa, ngakho isicelo esihlulekayo ngemva kokuba zombili ziphumelele sibonakala njengephutha elilodwa kuyilapho kungamabili. Ukuhlukanisa ukulanda ekukhetheni, nokukhetha emzileni, ingxenye enkulu yomsebenzi kula mathikithi. Ukulandelana ngezansi kulandela lokho i-macOS ekwenzayo ngempela, kanye nokuhlola okwenza isigaba ngasinye sibonakale.

Lapho ikheli le-PAC nomlamuli behlukana khona

Ikheli elifana ne-https://config.corp.example/proxy.pac libiza idokhumenti okufanele ilandwe, futhi leyodokhumenti ibiza iseva okufanele i-traffic idlule kuyo. Ukunamathisela i-URL emkhakheni we-host yomlamuli kucela iklayenti ukuthi livule ukuxhumana komlamuli nesiseva samafayela esingakaze silalele okunjalo. Ngaphakathi kwefayela kunesisebenzi iklayenti elibiza ngasinye isicelo, futhi inani elibuyayo iyi-hop elandelayo yaleyo ndawo eyodwa. Lokhu kungaqondile kuchaza ukuthi kungani imishini emibili kusevisi eyodwa yenethiwekhi ingaziphatha ngendlela ehlukile nakuba yomibili inayo i-URL efanele. Kuchaza futhi ukuthi kungani ushintsho lomgomo luqala ukusebenza ngaphandle kokuthi kube khona othinta umlamuli ngokwakhe.

Funda iskripthi ngaphambi kokuhumusha noma yini ezansi, ngoba imithetho engaphakathi iqukethe okuhlukile kwenhlangano kanye nokulandelana okusetshenziswa ngakho. Ibanga elibanzi lokuqala lingafihla isijobelelo sangaphakathi sakamuva, futhi i-host okufanele ngokusobala yeqe umlamuli iqhubeka nokuwusebenzisa. Lapho othile egcizelela ukuthi umgomo awulungile, iskripthi yindawo kuphela okuxazululwa kuyo lokho kusho.

Iskripthi kufanele sitholwe ngaphambi kokuthi sinqume noma yini

Ukulanda umgomo kudinga igama elixazululiwe kanye nomzila oya kulokho okusebenzela ifayela, futhi umhubhe oxhunyiwe awuqinisekisi kokubili. Uma i-host ixazululwa kuphela nge-DNS yangasese, isixazululi esisetshenziswayo ngaleso sikhathi sinquma ukuthi ukulanda kungaqala yini. Uma i-host isebangeni langasese, umzila kufanele ube khona usuka kulo mshini hhayi kusuka kukhompyutha ephathwayo yozakwenu. Ikhophi egcinwe kunqolobane kuseshini yangaphambilini ifihla konke lokhu kuze kuphele inqolobane noma kuqale kabusha umshini.

Gijimisa ukuhlola okuthathu ngezansi ngokulandelana futhi ume ekwehlulekeni kokuqala, ngoba izigaba azihlanganyeli imbangela. Ndawonye zibonisa ukuthi umgomo uhleliwe yini, ufinyeleleka yini, nokuthi ubuyisa ini.

scutil --proxy
networksetup -getautoproxyurl "Wi-Fi"
curl -sS -o /dev/null -w "%{http_code}\n" https://config.corp.example/proxy.pac

Umyalo wokuqala uphrinta isichazamazwi somlamuli sesevisi esebenzayo, kuhlanganise nanoma iyiphi i-URL yokumisa okuzenzakalelayo ephethwe uhlelo. Owesibili ubika i-URL exhunywe kusevisi eyodwa enegama, okubalulekile kukhompyutha ephathwayo ehamba phakathi kwe-Wi-Fi ne-Ethernet. Owesithathu uthola ifayela ngaphandle kokulihlungisa, ngakho i-404, ukuphela kwesikhathi nokwehluleka kwesixazululi kuhlala kwehlukile. Uma lowo myalo wokugcina ubuyisa iskripthi kuyilapho izinhlelo zisahluleka, inkinga isivele yeqe ukutholwa.

Okushiye ukuphendula kwe-DIRECT empeleni

Isicaciso se-PAC sinikeza iklayenti isilulumagama esincane, futhi i-DIRECT ingelinye lamagama aso. Lelo gama litshela iklayenti ukuthi likweqe umlamuli kuleso sicelo futhi alisho lutho mayelana nokuthi i-socket izosebenzisa yiphi i-interface ngemva kwalokho. I-socket eqondile emhubheni ogcwele isaphuma nge-VPN futhi isabonisa indawo ephumayo yomhubhe kuyo indawo.

Ukufunda i-DIRECT njengangaphandle kwe-VPN yiphutha elithumela abantu kuphaneli yezilungiselelo okungeyona. Isithombe sesibuko naso sivamile, ngoba umlamuli wangasese ungafinyelelwa ngomzila ohlukanisiwe kuyilapho umshini osele uhlala ngaphandle komhubhe. Lokho okubikwa yindawo ngaleso sikhathi kungokwaphuma komlamuli ngokwakhe, okungenzeka kusesinye isizwe. Ukubhala okulindelekile kwe-host eyodwa yangaphakathi ne-host eyodwa yomphakathi kubeka lokhu obala ngokushesha, ngoba iskripthi savamise ukuphendula kokubili ngendlela ehlukile. Uma usukwazi ukuthi iyiphi i-hop eyakha ikheli, umbiko awusamangazi.

Ukwehluleka okuthathu okuvela njengekhasi elilodwa lephutha

Umgomo ungase uhluleke ukulandwa, umlamuli okhethiwe ungase ungafinyeleleki, futhi isicelo esifika kusevisi singase senqatshwe lapho. Zontathu zifika njengokuphela kwesikhathi noma ikhasi lephutha elijwayelekile, futhi akukho okubiza isigaba esephukile. Ukubamba isinqumo eduze kwephutha yikho okuzihlukanisayo. Izinhlolo ezimbili ngezansi zihlola i-hop ekhethwe iskripthi, eyodwa yegatsha ngalinye engalibuyisa.

curl -v --max-time 8 http://proxy.corp.example:8080/
curl -v --max-time 8 https://intranet.corp.example/

Ukuxhumana okuqediwe kumlamuli kudlulisela umbuzo ekugunyazweni noma kumgomo womlamuli ngokwakhe, onomnikazi ohlukile. Ukuxhumana okuqediwe kwi-host yangaphakathi ngaphandle komlamuli emzileni kukhipha umzila futhi kukhombisa umgomo. Yomibili imiyalo iziba isichazamazwi somlamuli se-macOS ngaphandle uma i-shell ikhipha okuguquguqukayo komlamuli, ngakho kuqala kuzisule. Akukho nhlolo eyodwa eqinisekisa enye, yingakho ikhasi elilodwa lephutha lidukisa isikhathi eside kangaka.

Okufanele kunikelwe kanye nethikithi

Thumela isevisi yenethiwekhi esebenzayo, i-URL ye-PAC, umphumela wokuhlola we-host ehlulekayo, kanye nesigaba lapho kwavela khona iphutha. Lokhu kune kuvumela umuntu olandelayo ukuthi aphinde enze isinqumo esikhundleni sokuqagela ukuthi yiluphi ungqimba oluhilelekile. Engeza isimo somhubhe ngesikhathi sokuhlola, ngoba umphumela othathwe ngaphambi kokuxhuma kabusha usuphelelwe yisikhathi. Gcina futhi inguqulo yeskripthi, ngoba ifayela lomgomo lishintsha ngaphandle kwesaziso futhi impendulo yayizolo ingase ingasasebenzi.

Rekhoda ukuthi iklayenti liziphatha kanjani lapho iskripthi singenakutholwa, ngoba ukusetshenziswa kuyahlukana futhi isinqumo somlamuli akusona iswishi yokuvimba yonke idivayisi. Amanye abuyela ekuxhumekeni okuqondile kanti amanye ahluleka evaliwe, futhi lowo mehluko ushintsha ukuthi ukuphazamiseka kubonakala njengomlamuli ophukile noma njengomgomo osebenzayo. Qinisekisa ukuziphatha kweklayenti nenguqulo eqondile ngaphambi kokuthembela kukho ngesikhathi sesigameko.