Okushiwo yi-REMOTE_ADDR ye-PHP ngempela ngemuva kwe-VPN
Leli yinani elinikezwe iseva yakho yewebhu, hhayi umbuzo ongena kuthumbu. Landela indlela yesicelo, hlola ukuthi ubani angayibhala kabusha, futhi gcina ubunikazi kuhlelo lokusebenza.
Othile uyabuza ukuthi kungani umsebenzisi we-VPN evela kurekhodi lohlelo lokusebenza nekheli elingelesango, noma nekheli elishintshile ngemuva kwesidlo sasemini. Impendulo iqala ngokuthi leli nani liyini: okufakiwe iseva yewebhu ekubeke ekuvumeni kwesicelo. Akusona umbuzo ongena kuthumbu, akusona ubunikazi besitifiketi, futhi akusona isethembiso sokuthi inombolo ingeyomuntu oyedwa. Ukulifunda njengenye yalezi zinto ezintathu kukhiqiza izimpendulo eziqinile ezingalungile ngezindlela ezihlukile.
Inani livela kuseva, hhayi kuthumbu
I-PHP ithola ukuvuma kwesicelo kulokho okwasebenzisa umbhalo. Inkomba yeziguquguquki zeseva ye-PHP ichaza lokhu kufakiwe njengokwakhiwe iseva yewebhu, futhi ukutholakala kwakho kuncike endleleni isicelo esifike ngayo.
Umbhalo osebenza njenge-hook yomugqa womyalo we-VPN uyisimo esihluke ngokuphelele sokwenza. Awunasicelo sewebhu, awunasokhethi yeklayenti futhi awuna-REMOTE_ADDR, yingakho ikhodi yewebhu ekopishwe ku-hook inikeza amanani angenalutho esikhundleni samanani angalungile. I-hook inendawo yayo eyedwa egcwaliswa i-daemon, futhi ibhalwe ngokwehlukile. Ukufinyelela ku-REMOTE_ADDR lapho ukufinyelela kokuguquguqukayo okungakaze kusethwe.
Gcina lo mehluko engqondweni ngaphambi kokuthi uqhathanise amarekhodi amabili. Kungenzeka uqhathanisa isicelo sekhasi ne-hook, futhi lokho akusona ukuhlaziya nhlobo. Hlola isimo sokwenza kuqala, bese kuba ikheli.
Landela indlela yesicelo ngaphambi kokukholwa yinombolo
Ikheli elibikiwe ungumlingani wokuxhumana okwabonwa iseva yewebhu. Faka noma yini phakathi kweklayenti naleyo seva futhi umlingani uyashintsha. Ukuhumusha, ukuqedela nokulinganisa umthwalo ngakunye kususa ukubonwa isinyathelo esisodwa kude nomsebenzisi.
Izindlela ezine ezijwayelekile zikhiqiza ukubonwa okune okuhlukile.
| Path to the listener | What can be reported |
|---|---|
| Client routed straight to the private listener, no translation | The client's tunnel address |
| Gateway translates the source before forwarding | The gateway's translated address |
| Reverse proxy terminates the client and opens its own backend connection | The proxy's backend address |
| Load balancer in front of two proxies | Whichever hop the server treats as its peer |
Bhala indlela kanye negama lendawo okuyiwa kuyo, umndeni wamakheli kanye nendawo ngayinye yokuhumusha. Ngaphandle kwalelo mephu, inani elilungile nelingalungile kubonakala kufana emugqeni werekhodi. Imigqa emibili yomdwebo yonga intambama yempikiswano.
Ukushintshwa kwenzeka kuphela lapho kuhlelwe khona
Iseva noma uhlaka lungashintsha ngamabomu ikheli leklayenti. Imojuli ye-remote-IP ye-Apache kanye nemojuli ye-real-IP ye-NGINX zombili ziyakwenza lokhu, futhi inani elitholwa i-PHP lincike kulolo hlelo kanye namapharamitha adluliselwe kusibambisi sombhalo.
Ngakho i-REMOTE_ADDR ayisolayo iyona mlingani we-TCP ongathintekile. Ingumlingani njengoba iseva yakhetha ukukubika ngemuva kokusebenzisa inqubomgomo yayo. Lowo mehluko unquma ukuthi inani liwubufakazi noma ingumhlobiso.
Buza umnikazi weseva ukuthi iyiphi insimu enegunya kulolu kufakwa futhi umlingani wokuqala ugcinwa kanjani lapho kwenzeka ukushintshwa. Uma kungekho ongakuphendula, irekhodi alikafakazeli lutho.
Ungafundi izihloko zokudlulisa ngokwethemba
Umfoni angathumela yena izihloko zokudlulisa. Ukuthatha okufakiwe kokuqala okuhlukaniswe ngokhefana njengekheli lomsebenzisi eliqinisekisiwe kuyisinqumo sokukholwa noma ubani oxhumayo, okuphambene nenjongo yesihloko. Isihloko sichaza uchungechunge, futhi isendlalelo esithembekile kuphela esingaqinisekisa lolo chungechunge.
Sebenzisa ukusekelwa kweproksi ethembekile yeseva noma yohlaka ngohlu lwangempela lweproksi oluhleliwe, futhi uyivumele ilahle amanani avela emithonjeni engaphandle kwalolo hlu. Ukuhlaziya okubhalwe ngesandla yindawo lapho iningi lamaphutha athakazelisayo lihlala khona.
Ikheli elibikwe iproksi alilishintshi futhi umthombo wamaphakethe obonwa uthango lomlilo olungaphezulu. Gcina imethadatha ye-HTTP nokuhlunga kwenethiwekhi njengokubonwa okuhlukile, ngoba ziphendula imibuzo ehlukile.
Sebenzisa ubunikazi bohlelo ezinqumweni
Ukuze ufinyelele amarekhodi omsebenzisi, thembela kumuntu oqinisekisiwe kanye nemithetho yokugunyaza yohlelo. Ikheli langaphakathi lingabelwa kabusha, futhi ikheli elilodwa elihunyushiwe lingamela amakhulu abasebenzisi ngesikhathi esisodwa. Azikho lezi zici ezingalungiswa ukuhlolwa kwekheli.
Uma imisebenzi idinga ukuxhumanisa isicelo nesikhathi se-VPN, xhumanisa ikheli eliboniwe nesigxivizo sesikhathi namarekhodi esikhathi anegunya ngokwemodeli yokuhumusha oyibhalile. Lokho kukhiqiza ubudlelwano ongabuvikela; ikheli lodwa alikwenzi lokho.
Ukuze uxilonge, bhalisa izinsimu ezimbalwa ezidingekayo esikhundleni sohlu lweseva lonke, olungathwala izihloko nezinto zokuqinisekisa. Isiphetho esiwusizo sisho ukuthi leli nani lisho ukuthini kulolu kufakwa, hhayi ukuthi yiliphi inani elibukeka lifana neklayenti.