Ingabe i-proxy isesekhelweni elidala lomhubhe ngemva kokuxhuma kabusha kwe-VPN?

Ukuxhuma kabusha kungase kushiye umhambisi wakho eboshelwe ekhelini umhubhe ongalona. Izinhlo zokuhlola ezine ngokulandelana, ukunikezelwa okunezinombolo kanye nesicelo sokuhlola sangempela.

Ukuqala kabusha iklayenti le-VPN kufakazela kuphela ukuthi umhubhe ubuyile. Akusho lutho nge-proxy eyayiyalelwe ukuphuma ngayo. I-Squid, i-tinyproxy kanye nabanye abahambisi abaningi bagcina ikheli lomthombo wendawo abalithola ekuqaleni kuze kube yilapho okuthile kubaphoqa ukuthi balayishe kabusha. Lapho ukuxhuma kabusha kunikeza ikheli elisha lomhubhe, umhambisi uyehluleka kukho konke ukuxhumana okuphumayo, noma uqala ukuphuma ngomzila wakho ojwayelekile.

Ukwehluleka kwesibili yikho okuyingozi: umhubhe uyasebenza, amakhasi ayasilayisha, futhi ikheli lokuphuma kuphela elilokhu lingalungile.

Qala kumlaleli, hhayi emhubheni

Izindida ezintathu ziyadlalwa, futhi ukuxhuma kabusha kuhambisa ezinye kuphela. Umlaleli yilapho isiphequluli sakho sikomba khona, ngokuvamile okuyi-127.0.0.1 noma ikheli le-LAN, futhi akunandaba ukuthi umhubhe usushintshile. Umthombo wendawo ophumayo yilokho umhambisi akucela ku-kernel ukuthi kusetshenziswe lapho kudayela isinyathelo esilandelayo, futhi kuxhunywe kudivaysi yomhubhe. Ukuphuma komphakathi yilokho okubhalwa iseva yewebhu, futhi kungase kube ikheli elihunyushelwe eminyathelweni embalwa kude.

Ukusesha nge-IP yomphakathi kuphendula umbuzo wokugcina kuphela. Akukwazi ukukutshela ukuthi umhambisi kufanele aboshelwe kukheli lendawo eliphi, ngoba ukuphuma komphakathi okukodwa kungase kufihle imithombo eminingi yangaphakathi. Funda ikheli kumuntu onokuxhumana: umphumela wesimo seklayenti, isixhumi ngokwaso, noma isikhala samagama lapho umhubhe uhlala khona. Ukuthatha isixhumi sokuqala esinegama elibonakala njengomhubhe kunikeza impendulo engalungile ngokushesha lapho kunephrofayili yesibili.

Izakhwo zezitsha namasikhala amagama ziphula lesi sicabango buthule. Umhambisi osekhaleni elilodwa lamagama enethiwekhi awakwazi ukubopha umhubhe okhona kwelinye, futhi akukho ukuhlelwa kokucushwa okukulungisayo lokho.

Izinhlo zokuhlola ezine ngaphambi kokuhlela noma yini

Zenze ngokulandelana. Ukuhlola kokuqala okwehlulekayo yikhona lapho umayo khona, ngoba okulandelayo kucabanga ukuthi okwangaphambili kuliqiniso.

  1. Qinisekisa ukuthi umhubhe osetshenziswayo uyiphrofayili i-proxy eyakhiwe ngayo, hhayi iphrofayili yesibili ezixhume yona.
  2. Phrinta ikheli elikhona kuleyo divaysi njengamanje bese uliqhathanisa nekheli elikucushweni olusebenzayo.
  3. Buza umhambisi ukuthi yimuphi umthombo awutholile, hhayi lokho okushiwo yifayela elikudiski.
  4. Qinisekisa ukuthi ithrafikhi evela kumhambisi ingaphansi kwenqubomgomo yokuhambisa kanye nokuvimba umlilo oyilindele.

Ikheli ledivaysi lilula: ip -4 addr show dev tun0 liphrenta elamanje, ip -4 route get 1.1.1.1 likhombisa ukuthi i-kernel izokhetha isixhumi siphi kuleyo ndawo. Umhambisi obopha ikheli eliqondile wehluleka ngomsindo lapho ikheli linyamalala. Umhambisi obopha idivaysi, noma obuyela emthonjeni okuzenzakalelayo, uyaqhubeka usebenza futhi avuze, futhi lowo umphumela othule.

Hlanganisa imibhalo nomklamo owusebenzisayo, hhayi umphumela wokuqala wosesho. Umyalo wekheli lokuphuma we-Squid ubhalwe kumibhalo ye-v7 nangaphambili, futhi imibhalo ye-v8 isho ngokucacile ukuthi umyalo awutholakali lapho, ngakho iskripthi esakhiwe ngayo asidluli lowo mkhawulo (bona isithenjwa se-Squid tcp_outgoing_address). Qinisekisa ngomhlaziyi womkhiqizo uqobo ngaphambi kokulayisha kabusha noma yini: squid -k parse ubika amaphutha bese uphuma ngaphandle kokuthinta inqubo esebenzayo.

Faka izinombolo kuwo wonke umhubhe bese ulahla ukushintshana okugugile

Ukuxhuma kabusha ukunikezelwa, futhi ukunikezelwa kudinga ukulandelana. Maka konke ukuxhumana okubonwe ngesibali noma isigxivizo sesikhathi esikhula lapho kusungulwa ngempumelelo, bese uletha lowo maka kucusho lomgadlangi. Lapho umaka kumgadlangi umdala kunowamanje, lahla umgadlangi esikhundleni sokusebenzisa, ngoba isibuyekezo esisheshayo esibhalelwe umhubhe wangaphambili sizobhala phezu kwezilungiselelo zowamanje. Hlanganisa iziqhumo zezehlakalo ukuze isixhumanisi esinyakazayo silethe ushintsho olulodwa esikhundleni seshumi nanhlanu.

Hlela umsebenzi ngezinyathelo ezine: yenza isimo sokugcina esidala singasebenzi, linda ukuthi umnikazi wokuxhumana abike ukuqedwa, yakha ingxenye elawulwayo kuphela, bese uqinisekisa futhi usize ukusebenza ngomphathi wensiza. Ukukhiqiza kabusha yonke ifayela kusuka kumagugu amabili ekheli yikho okwenza imikhawulo yomlaleli, ukuqinisekiswa kanye nenqubomgomo yendawo kunyamalale buthule. Hlonipha nokumiswa ngamabomu. Umsizi oqhubeka eshayela umhubhe umsebenzisi awucimile kuyiphutha, hhayi ukuqina.

Amasokhethi avuliwe ngeke alandele ikheli elisha

Ukucushwa kabusha komhambisi akusho lutho ngezixhumaniso esezivele zisunguliwe. Ukuthi ziyophuma noma zife kuncike kumkhiqizo, ngakho qaphela ukuziphatha esikhundleni sokukucabangela.

Isicelo esilethwa ngesokhethi evulwe ngaphambi kokushintshana sisaphuma ngomzila wakudala, ngisho nalapho ukucushwa okusha kulungile. Uma lokho kubalulekile, thatha isinqumo ngokucacile: vumela iwindi elifushane lokukhipha futhi uyeke ukwamukela umsebenzi omusha, noma vala amasokhethi amadala futhi wamukele amaphutha. Bese uhlola ngokuxhumana okusha futhi ugcine lowo mphumela uhlukile ekuhloleni kokukhipha. Ukubopha emthonjeni nakho akulona umngcele wokuphepha. Lapho ithrafikhi kungafanele neze ithinte umzila ojwayelekile, iphoqe ngamamaki nemithetho yokuvimba umlilo, kuhlanganise ne-DNS ne-IPv6, ukuze ukulayisha kabusha okwehlulekile kushiye i-proxy icishiwe ngokucacile hhayi ivulekile.

Fakazela ukuphuma okusha ngesicelo esisha

Okubalulekile isicelo esivulwe ngemva kokwenza kusebenze, hhayi i-ping futhi hhayi ikhasi eselivele likusihluthulelo. Cela i-proxy nge-URL yangempela bese ufunda ikheli lokuphuma elibikwa uwela kude, bese uliqhathanisa nombono weklayenti ngokwalo ngomhubhe lapho umhlinzeki ekhombisa owodwa.

Gcina ukuhlaziya, ukulayisha kabusha kanye nesicelo njengezimiso ezihlukene ukuze ukwehluleka kukhombe isinyathelo esisodwa. Ezimbili zokuqala azishintshi lutho lapho zihluleka, futhi yikho kanye okwenza zisebenze ngaphambi kokuqala kabusha.

squid -k parse
sudo squid -k reconfigure
curl -x http://127.0.0.1:3128 -sS -o /dev/null -w '%{http_code} %{remote_ip}\n' https://example.com

Uma ukulayisha kabusha kwehluleka, misa insiza bese ulungisa ingxenye; i-proxy esebenza ngokuphuma okugugile kubi ukwedlula ukuphazamiseka okufushane. Uma ukulayisha kabusha kuphumelela kodwa isicelo esisha sisaphuma endaweni engalindelekile, buyela ekuhloleni kokuhambisa esikhundleni sokuphinda uhlele amakheli. Bhala isizukulwane somhubhe owakuqinisekisa, ukuze ukuxhuma kabusha okulandelayo kube nokuthile okuqondile okungaqhathaniswa.

Izihloko ezihlobene