Ukudluliswa kwendawo kwe-SSH kuya ku-proxy ye-HTTP ekhona: amakheli amabili e-loopback

I-proxy yakho egunyaziwe isebenza kumsingathi wokugxuma lapho ilalela khona kuphela ku-loopback, ngakho akukho lutho olungaphandle kwalowo mshini olungayifinyelela. Awudingi i-VPN noma i-proxy entsha; udinga imbobo eyodwa yalowo mshini ilethwe embotsheni yakho eyodwa. Ukudluliswa kwendawo kwenza khona lokho, futhi kudinga umyalo owodwa kanye nesilungiselelo esisodwa sohlelo. Ukudideka kuvame ukuvela ekuhlanganiseni ukuthi iyiphi ikheli le-loopback elikhombisa umshini uphi.

Nquma ukuthi i-proxy engaguquki isivele ikhona yini

Le ndlela idlulisela insebenzo esevele isebenza. Uma umsingathi okude unedemon ye-SSH kuphela futhi ungenayo i-proxy, akukho nobuningi bokudlulisa obuzodala eyodwa, futhi ukuxhumana kuzonqatshwa ohlangothini olude. Qinisekisa ukuthi i-proxy iboshiwe, iyiphi imbobo yayo, nokuthi ilalela ku-127.0.0.1 noma ikheli elithile le-interface, ngoba lelo kheli yilona okumele ukudluliswa kuliqondise.

Ukuqinisekisa lokhu kuqala kukusindisa ekulungiseni iphutha lomhubhe ongakaze uxhumane nalutho.

Akha ukudluliswa bese ufunda umyalo

Isimo osifunayo sibopha imbobo ye-loopback kukhompyutha yakho ephathwayo bese uyixhuma, ohlangothini lweseva, ekhelini le-proxy njengoba iseva ilibona.

ssh -NT -o ControlPath=none -o ExitOnForwardFailure=yes \
  -L 127.0.0.1:13128:127.0.0.1:3128 [email protected]

-N icindezela umyalo okude futhi -T icindezela ukwabiwa kwe-termios, ngoba ufuna umhubhe hhayi igobolondo. Ikheli lokuqala le-loopback yilapho ilaptop ilalela khona; elesibili lixazululwa yiseva ye-SSH, ngakho i-127.0.0.1 lapho isho i-proxy kulelo mshini. ExitOnForwardFailure yenza umyalo wehluleke ngomsindo uma imbobo yasendaweni isivele ithathiwe, esikhundleni sokuqala isikhathi esingadlulisi lutho. Bhala ikheli lomgomo njengoba iseva ilixazulula, ngoba igama elingaxazululwa kuphela ilaptop yakho lizohluleka ngaphesheya.

Inqubomgomo yeseva ngokwayo iyasebenza ngaphambi kokuba noma yini yalokhu isebenze. AllowTcpForwarding kumele ikuvumele, futhi PermitOpen ingakhawulela ukuthi isikhathi singafinyelela kuphi nasekuphi, ngakho ukudluliswa okwamukelwa iklayenti kungase kunqatshwe yiseva. Ukunqatshwa kubonakala njengephutha lokudlulisa noma lesiteshi kuklayenti, futhi ukufunda lowo mlayezo kushesha kunokuhlela umyalo.

Qondisa uhlelo olulodwa ekudlulisweni

Lungiselela uhlelo ukuthi lusebenzise i-proxy ye-HTTP ku-http://127.0.0.1:13128, nemininingwane yokungena uma i-proxy ekude iyidinga. Gcina ukuqinisekiswa kwezitifiketi kohlelo ngokwalo ezinhlosweni ze-HTTPS, ngoba umhubhe we-proxy awukuthathi isikhundla salokho. Lokhu ukudluliswa okungaguquki kwensebenzo eyodwa, ngakho uhlelo kumele lutshelwe nge-proxy esikhundleni sokuyeka lutholele yona.

Ukuhlola okusheshayo ngaphambi kokulungiselela noma yini ehlala njalo: curl -x http://127.0.0.1:13128 -I https://example.com, okwenza indlela ye-HTTP CONNECT i-proxy okumele iyisekele.

Gcina igunya lapho lalikhona

I-proxy ekude isanquma ukuthi yiziphi izindawo nezindlela eziyivumelayo, futhi ukungena nge-SSH akumele kunikeze yonke i-akhawunti i-relay yewebhu evamile ngokuthula. Ukubopha ku-127.0.0.1 kule laptop kugwema ukushicilela imbobo kunethiwekhi yakho yasendaweni, futhi akwenzi imbobo ibe yimfihlo kwezinye izinqubo ezikulo mshini ofanayo. Ukushintsha lokho kubopha ngekheli le-wildcard ukuze kwabelwana nge-proxy yiyona ndlela i-relay evulekile engalawulwa eyenzeka ngayo.

Ukuthutha kwe-SSH kuvikela ukugxuma okuya kuseva. Ngalé kwalelo phuzu i-proxy ivula ukuxhumana kwayo, ngakho isicelo se-HTTP esilula esiya endaweni sihlala silula ngale kwe-seva, nakuba ingxenye yokuqala yayifihliwe.

Qinisekisa iziphetho zombili, bese uhlanza

Ukulungiselela umhubhe wasendaweni nokuphumelela kwensebenzo ekude kuyimiphumela ehlukene, futhi isimo sokuphuma somyalo sikutshela ngokokuqala kuphela. Hlola ukuthi isilaleli sikhona nge-ss -ltn, bese wenza isicelo sohlelo esivunyelwe nesicelo i-proxy okumele isinqabe. Uma zombili ziziphatha njengoba kulindelekile, indlela ingeqiniso; uma umhubhe uvuliwe futhi zonke izicelo zehluleka, i-proxy iyanqaba noma ayikwazi ukufinyelela endaweni.

Uma usuqedile, misa inqubo ye-SSH engumnikazi wayo, susa isilungiselelo se-proxy ohlelweni, futhi qinisekisa ukuthi imbobo yasendaweni ihambile esikhundleni sokushiya isilaleli esizophila isikhathi eside kunomsebenzi.