Indlela yokukhonza iseva yokuthuthukisa ye-webpack ekhelini le-VPN

Khetha ikheli lokubopha ngokuya ngokuthi ubani kufanele afinyelele iseva yokuthuthukisa, bese unciphisa ukuhlolwa kwegama lomsingathi futhi uqinisekise ukuthi ikhasi nesokhethi yokulayisha kabusha bukhoma kuxhuma kokubili.

Iseva yokuthuthukisa ephendula kukhompyutha ephathwayo futhi ingaphenduli kwenye indawo ivamise ukuboshwa ekhelini elingalungile. Iseva eyamukela uxhumano kodwa yenqaba ikhasi ivamise ukwehluleka ukuhlolwa kwegama lomsingathi. Lawa amaphutha ahlukene anezixazululo ezihlukene, futhi ukukhetha ukulungiselelwa okulungile kuncike ekutheni ubani kufanele afinyelele isikhala somsebenzi nokuthi ufika kanjani.

Imibuzo emithathu inquma impendulo: ubani oxhumayo, iyiphi ikheli angayifinyelela, nokuthi ukulayisha kabusha bukhoma kufanele kusebenze kuye yini.

Qala ngesokhethi, hhayi ngefayela lokulungiselela

Funda ukuthi inqubo esebenzayo iboshelwe kuyiphi ngempela kusimo esifanayo senethiwekhi esiyiqalile, ngoba isiqukathi noma indawo yamagama kungase kube nesokhethi i-shell yomsingathi engayiboni. Ikholomu yokulalela iphendula umbuzo wokuqala: indlela yendawo kuphela, isixhumanisi esisodwa esithile, noma zonke izixhumanisi.

ss -ltn '( sport = :8080 )'
ss -ltnp | grep node

Ikheli le-loopback liwukuhlola okuvikekile okuyisisekelo futhi alilusizo kuklayenti ekude. Ukubopha nge-wildcard kulula futhi kuveza imbobo kuso sonke isixhumanisi esinomzila, okuyibanzi kunalokho iningi elikuhlosayo emshinini ophethe nombhoshongo. Ikheli elithile iyindlela ephakathi, futhi lisebenza kuphela uma isixhumanisi siphethe lelo kheli ngesikhathi sokhethi idalwa. Umehluko ubalulekile ngoba ezimbili kulezi zintathu zibukeka zifana kusiphequluli futhi ziziphatha ngokuhluke ngokuphelele uma kuba nesixhumanisi sesibili.

Hambisana nalokho okuqashiwe ngaphambi kokuthinta imizila noma imithetho yodonga lomlilo. Uma inqubo ilalela ekhelini elingalungile, akukho mzila wenqubomgomo ozokwenza iklayenti lifinyelele lapho.

Khetha ikheli lokubopha ngokuya ngokuthi ubani kufanele afinyelele kulo

Uma kunguwena kuphela kule mishini odinga ikhasi, gcina ukubopha kwe-loopback bese uma. Uma uzakwabo oyedwa kumbhoshongo ofanayo ekudinga, bopha ikheli lesixhumanisi sombhoshongo bese uvumela udonga lomlilo umthombo lowo kuphela. Ukushicilela iseva yokuthuthukisa ngale kwabantu abayihlola ngokukhuthele kuwumkhuba ogcina udalule isikhala somsebenzi ku-inthanethi.

Uma isiphequluli esingaphakathi kwesiqukathi sidinga ukufinyelela iseva, ikheli lokubopha kufanele kube yilelo inethiwekhi yesiqukathi engalihambisa, futhi lokho akuvamisile ukuba yikheli umsingathi alixazululela yena. Nquma icala ngaphambi kokuhlela ukulungiselelwa, ngoba amacala amathathu aletha amanani amathathu ahlukene futhi yinye kuphela elungile. Ukuqagela lapha kuchitha isikhathi esiningi kunanoma iyiphi enye ingxenye yokusetha.

Bese usetha ikheli ngendlela isiqalisi sakho esiyifunda ngempela. Ifayela lokulungiselela kanye neskripthi esakha iseva ngezinhlelo akusisebenzisi izinketho ezifanayo:

devServer: {
  host: "10.77.0.20",
  port: 8080,
  allowedHosts: ["dev.corp.example"],
}

Ikheli kuleso siqeshana liyisibonelo futhi limelela ikheli le-VPN umsingathi analo. Uma iphrojekthi yakha iseva nge new WebpackDevServer(options, compiler) dlulisa izinketho ngengxabano yesakhi esikhundleni salokho, ngoba impahla ehlukile devServer kukulungiselelwa kwe-webpack ayibhekwa kuleyo ndlela. Lowo mehluko phakathi kwefayela lokulungiselela ne-Node API ubamba abantu abakhopha isiqeshana bangene kuphrojekthi engasifundi neze. Imibhalo ye-dev-server ihlukanisa izitayela ezimbili zokuqalisa futhi iyisithenjwa okufanele kuqhathaniswe nayo inguqulo esetshenziswayo.

Fananisa ukuhlolwa kwegama lomsingathi namagama owamukelayo

Ukuhlolwa kwegama lomsingathi kukhona ukuze kuvinjwe ikhasi elikhishwe egameni elilawulwa umhlaseli ekutheni likhulume neseva yakho yokuthuthukisa ngesiphequluli. Ukukukhulisa nge allowedHosts: "all" kususa lokho kuvikela, futhi ukunethezeka akuvamisile ukufaneleka emshinini ongafinyelela izinsizakalo zangaphakathi. Ukuhlolwa kushibhile ukukwanelisa ngendlela efanele uma usazi ukuthi yimaphi amagama isiphequluli esizowathumela.

Bhala amagama anembe ozowasebenzisa, kuhlanganise negama langasese elixazululwa ekhelini lombhoshongo. Uma iklayenti lixazulula igama ekhelini elihlukile kunalelo olibophile, unenkinga yokuxazululwa kwamagama hhayi inkinga yokulungiselelwa kweseva, futhi ukwengeza igama ohlwini oluvunyelwe ngeke kuyilungise. Qinisekisa ukuxazululwa kusuka kuklayenti, hhayi esevani.

Gcina izilawuli ezintathu zihlukene engqondweni yakho: ikheli lokubopha linquma ukuthi yiziphi izixhumanisi ezamukela uxhumano, uhlu oluvunyelwe lunquma ukuthi yiziphi izihloko ze-Host ezamukelwayo, futhi ukuqinisekisa kunquma ukuthi ubani uvunyelwe ukungena. Eyesithathu kuphela iwukulawulwa kokufinyelela, futhi iseva yokuthuthukisa ivamise ukungabi nakho neze. Ikheli lombhoshongo nalo alisona isu lokuqinisekisa, ngoba noma ubani ongahambisa kuwo usevele engaphakathi komngcele owawuthembele kuwo.

Qinisekisa ikhasi nesokhethi yokulayisha kabusha bukhoma ndawonye

Layisha isicelo esisha kuklayenti elihlosiwe ngohlelo olulungiselelwe, futhi ufunde umphumela hhayi inqolobane. Ku-HTTPS gcina igama lomsingathi elilindelekile nokuqinisekiswa kwesitifiketi, ngoba isexwayiso sesiphequluli akulona ukuhlolwa kokwamukelwa okuphumelelayo. Ikhasi eliboniswayo ngesikhathi ukulayisha kabusha bukhoma kwehluleka buthule yimpumelelo yengxenye ejwayeleke kakhulu lapha, futhi kulula ukuyiphosa ngesikhathi sokuhlola okusheshayo.

curl -sS -o /dev/null -w "%{http_code} %{remote_ip}\n" http://dev.corp.example:8080/
curl -sS -i http://10.77.0.20:8080/ | head -n 5

Bese uvula ukuxilongwa kwenethiwekhi kwesiphequluli futhi ubuke uxhumano lwe-WebSocket. Ikhasi lingalayishwa ngegama lomsingathi, imbobo nohlelo olulodwa ngesikhathi isokhethi yokulayisha kabusha isebenzisa enye, yingakho kokubili kufanele kuhlolwe ngokwahlukana. Lungiselela i-URL yeklayenti ebhaliwe kuphela uma indlela esetshenzisiwe idinga ngempela inani elihlukile, futhi ukhethe ukulungisa indlela kunokufundisa iklayenti indlela yokugwema.

Rekhoda ikheli lomlaleli, igama elamukelwe, umthombo ovunyelwe kanye nemiphumela yomibili kumanothi ephrojekthi. Lowo mbhalo uhlala kumuntu olandelayo oqala isikhala somsebenzi futhi azibuze ukuthi kungani ikhasi lilayishwa kodwa lingakaze livuselelwe.

Izihloko ezihlobene