I-Listen, i-Bind ne-BindSame ku-Tinyproxy: iyiphi ikheli elinqobayo
I-Listen ikhetha ikheli elamukela amaklayenti, i-Bind ikhetha umthombo wezixhumanisi eziphumayo. Kokubili akubeki umzila, ngakho hlola umzila ngokwahlukile.
I-proxy iyaphendula, isicelo siyaphela, futhi noma kunjalo indawo ekuyiwa kuyo isabhalisa ikheli le-LAN. Akukho okubonakala kungalungile kungobo yomlando ye-proxy, futhi umugqa owushitshile yiwo umugqa idokhumenti eyakutshela ukuthi uwushintshe. Kusiphathi esinakho kokubili ikheli le-LAN nekheli lomhubhe, imiyalelo emithathu inquma ukuthi iyiphi ikheli evela kuphi, futhi owodwa kuphela kuyo ophathelene nohlangothi oluphumayo. Uma uzifunda ngokulandelana okungalungile, uzongena kuthebula yomzila ngaphandle kwesizathu.
Uphawu: indawo ekuyiwa kuyo ibona ikheli le-LAN
Iklayenti lixhuma ku-proxy ngekheli le-LAN, futhi i-proxy ivula uxhumanisi lwayo oluya endaweni ekuyiwa kuyo. Lolo xhumanisi lwesibili lukhetha ikheli lomthombo ngokwemithetho yenkundla, futhi ngokuzenzakalelayo yilona olukhethwa ukusesha komzila. Ngakho indawo ekuyiwa kuyo ibhalisa ikheli eliyinhloko lesiphathi nakuba yonke i-byte yadlula ku-proxy. Ngokwedluliselo akukho okonakele, futhi yikho lokho ingobo yomlando ye-proxy ingenakho okungakusho ngalokhu.
Isibuko salelo phutha silula ukusibona: gira ikheli lomthombo ophumayo ekhelini lomhubhe futhi amaklayenti e-LAN awasakwazi ukufinyelela isilaleli nakancane. Leyo nguqulo iyazimemezela, kanti eyokuqala icasha ngemuva kwesicelo esisebenzayo. Kokubili kuvela ekuphatheni umyalelo owodwa sengathi uphendula yomibili imibuzo.
Imiyalelo emithathu, amakheli amathathu ahlukene
I-Listen ibiza ikheli lasendaweni elamukela amaklayenti e-proxy. I-Bind inikeza ikheli lomthombo lezixhumanisi i-proxy ezenza ngaphandle, futhi i-BindSame iyitshela ukuthi iphinde isebenzise ikheli lasendaweni loxhumanisi olusanda kwamukelwa. Lezi yimibuzo emithathu ehlukene, futhi umugqa owodwa uphendula owodwa kuphela. Ukuzihlanganisa yikho okuyisizathu esivamile sokuthi ushintsho lubonakale lungenti lutho.
| What you observe | Check first |
|---|---|
| A client cannot connect at all | Listen: the local address the listener binds |
| The request works but the far side logs the LAN address | Bind: the outgoing source is not being applied |
| A configured Bind appears to have no effect | BindSame yes: the accepted local address overrides the Bind list |
| The lookup names the LAN interface | The route, not the proxy: the source cannot reach that destination |
Funda ukucushwa okunamazwana okuhambisana nenguqulo efakiwe, ngoba izimiso ezenzakalelayo kanye nesintaksi eyamukelekayo kuyashintsha phakathi kokukhishwa. Ukucushwa kwesibonelo kwephrojekthi kubhala wonke umyalelo eceleni kweminye. Qhathanisa lelo fayela nalelo elikusithombeni, hhayi nomhlahlandlela obhalelwe okunye ukusabalalisa.
Setha isilaleli nomthombo ophumayo ngokwahlukene
Thatha isiphathi esinekhili le-LAN elingu-192.168.50.10 nekheli lomhubhe elingu-10.90.0.3. Uma amaklayenti e-LAN kufanele afinyelele i-proxy kuyilapho izicelo zawo ziphuma ngomhubhe, lezi yizinqumo ezimbili ezizimele futhi kufanele kubhalwe zombili. Ingxenye engezansi iveza lokho kanye nalokho kuphela.
Listen 192.168.50.10
Bind 10.90.0.3
BindSame noLokhu akukona ukucushwa okuphelele, ngakho gcina imbobo evunyelwe, ukuqinisekiswa, izilawuli zokufinyelela kwamaklayenti kanye nemikhawulo yendawo ekuyiwa kuyo. Womabili amakheli kufanele abe esesiphathini ngaphakathi kwendawo yamagama yenethiwekhi ye-Tinyproxy, ngoba inani le-Bind inqubo engakwazi ukulipha liyahluleka ngesikhathi sokuxhuma, hhayi ngesikhathi sokuqala. I-BindSame yes ichaza enye inqubomgomo, lapho ikheli lasendaweni loxhumanisi olwamukelwe liba umthombo ophumayo. Ezingugulweni zamanje lelo gatsha linokubaluleka ngaphezu kohlu lwe-Bind, futhi yileyo ndlela umthombo ocushiwe onyamalalayo ngaphandle kwephutha.
Hlola umzila okhonjwa umthombo
Ukukhetha ikheli lomthombo akudali umzila, ngakho buza inkundla ukuthi izokwenzani ngalowo mthombo nangaleyo ndawo ekuyiwa kuyo. Ukusesha okubiza isixhumi somhubhe kuwubufakazi obuncane, futhi okubiza isixhumi se-LAN kusho ukuthi umthombo awukwazi ukusebenza njengoba kubhaliwe. Ukusesha kuncike kumongo: kuhlola imithetho yenqubomgomo nethebula esebenzayo kuleyo ndawo yamagama. Akulona uxhumanisi, futhi akusho lutho ngalokho i-NAT engezansi ezokwethula khona enkonzweni.
ip -4 route get 203.0.113.25 from 10.90.0.3Sebenzisa ikheli ledokhumenti esibonelweni bese ufaka inkonzo oyigunyaziwe ukuyihlola. Gijimisa ukusesha ngaphakathi kwendawo yamagama ye-proxy uma i-proxy igijima kusiqukathi, ngoba imithetho yesiphathi akuyona imithetho inqubo eyibonayo. Uma umzila womhubhe ohlosiwe ungekho, vumela umnikazi wenethiwekhi ukuthi awulungise esikhundleni sokwengeza imithetho eqondene nendawo ekuyiwa kuyo kusiphathi se-proxy. Ungasuli imizila yesiphathi futhi ungakhubazi imizila ephushwa iseva ukuze ukusesha kuphumelele, ngisho nomhlahlandlela omdala wenza kanjalo, ngoba leyo zinguquko zisusa ukuziphatha kwe-VPN okuvunyiwe kwaso sonke isiphathi ukuze kulungiswe umzila owodwa we-proxy.
Qinisekisa umthombo endaweni ekuyiwa kuyo
Funda umthombo lapho isicelo sifika khona, hhayi lapho siphuma khona. Ingobo yomlando yohlelo endaweni ekuyiwa kuyo, noma idivayisi yomkhawulo engaphambi kwayo, ibhalisa ikheli eyalibona ngempela, kuyilapho i-proxy ingakutshela kuphela inhloso yayo. Yenza isicelo esisodwa esisha ngokudlula kwisilaleli esihlosiwe ngemva koshintsho, ngoba uxhumanisi olusegcekeni alufakazeli lutho ngokubopha okusha. Bese uqhathanisa lelo kheli elibhaliwe nalelo owalisetha.
ss -ltnp | grep tinyproxy
curl -x http://192.168.50.10:8888 https://example.com -o /dev/null -sSI-curl ingumakhi wethrafikhi kuphela; ikheli elifanele ukuqinisekiswa yilelo elibhalwe uhlangothi olukude, hhayi iqembu i-curl ehlangane nalo ngengozi. Uma kokubili kungavumelani, thola ukuthi umehluko uvela ekukhetheni umthombo noma ekuguqulweni okukuqhubekayo, ngoba lokho kulungiswa ezindaweni ezahlukene. Hlela izinguquko zamakheli nokuqalisa kabusha i-proxy ndawonye, ngoba ukubopha ikheli umhubhe ongasenalona kuyahluleka buthule ngemva kokuxhuma kabusha. Chaza futhi ngokwahlukene ukuziphatha kwe-DNS ne-IPv6, ngoba ingxenye ye-IPv4 engezansi ayifakazeli lutho ngakunye kwakho kokubili.