Na'urar Duba Tashoshin TCP da Proxy ta Yanar Gizo
Updated:
Kafin gano matsalar tantancewar proxy (407) ko kuskuren saitin burawsa, tabbatar cewa ana iya samun tashar TCP ta uwar garken daga intanet. Shigar da kowane IP na jama'a ko sunan mai masauki tare da har zuwa tashoshin TCP 8 a sama domin auna jinkirin hadin gwiwar TCP ta hanyoyi uku (SYN → SYN-ACK).
Karin Bayani Kan Tashoshin TCP na Proxy da Uwar Garke da Aka Fi Sani
Shirye-shiryen proxy daban-daban (Squid, 3proxy, Dante, HAProxy, Nginx) da ayyukan uwar garke suna sauraro a kan daidaitattun tashoshin TCP ko masu lamba mai yawa:
| Tashar/Tashoshin TCP | Ka'idar Sadarwa / Sabis da Aka Fi Sani | Amfanin Proxy da Uwar Garke na Yau da Kullum |
|---|---|---|
8080, 3128, 8888 | Proxy na HTTP / HTTPS CONNECT | Daidaitattun tashoshi don Squid, 3proxy, da hanyoyin shiga HTTP(S) na VinaProxy |
1080, 1081 | Proxy na SOCKS4 / SOCKS5 | Daidaitattun tashoshin sauraro don Dante da relays na SOCKS5 |
80, 443 | Uwar Garken Yanar Gizo ta HTTP / TLS | Uwar garken yanar gizo, reverse proxies, da masu sauraron proxy masu dacewa da firewall |
10000–60000 | Kewayon Tashoshi Masu Lamba Mai Yawa na Musamman | Wadanda aka kebe don tsayayyen IPv4 da rabon proxy na ISP |
Gano Bambancin 'Connection Refused' da 'Timeout'
- OPEN (tare da jinkirin ms): Uwar garken da ke nesa ta karbi fakitinmu na TCP
SYNkuma ta dawo daSYN-ACK—shirin proxy ko sabis yana aiki yana sauraro. - CLOSED (
refused): Adireshin IP na uwar garken yana aiki, amma babu abin da ke sauraro a wannan tashar (ko kuma dokariptables REJECTta aiko da fakitinRST). - CLOSED (
timeout): Wata katangar tsaro ta firewall (AWS Security Group, UFW, Cloudflare, ko matatar ISP) ta yi watsi da fakitinSYNba tare da sanarwa ba kafin ya isa ga manhajar.
Mataki-mataki
- 1
Shigar da IP na jama'a ko sunan mai masauki da ake bukata
Manna IP na uwar garken proxy ko sunan mai masauki na VPS a cikin filin 'Target Public IP'.
- 2
Kayyade har zuwa tashoshin TCP 8
Rubuta lambobin tashoshi da aka raba da wakafi (misali,
80, 443, 1080, 3128, 8080ko tashar proxy ta musamman da aka ba ku). - 3
Danna 'Check Ports' don gudanar da binciken TCP kai tsaye
Uwar garkermu tana fara hadin gwiwar soket na TCP na hakika zuwa kowace tasha tare da tsauraran kariyar SSRF.
- 4
Duba matsayin Open/Closed da lokacin RTT na hadin gwiwa
Idan tashar tana OPEN amma proxy dinku ya kasa aiki a burawsa, tabbatar da bayanan shiga na
username:passworda cikin Na'urar Duba Proxy dinmu.
Tambayoyin da aka fi yi
Menene bambanci tsakanin wannan Na'urar Duba Tasha da Na'urar Duba Proxy?
Na'urar Duba Tasha tana gwada samun damar Layer 4 TCP (SYN / SYN-ACK) a kowace tasha ba tare da aika bayanan shiga na proxy ba. Proxy Checker kuma tana gwada tantancewar proxy ta Layer 7 (HTTP CONNECT ko SOCKS5) sannan tana tabbatar da IP na fita.
Me ya sa Na'urar Duba Tasha ke toshe adiresoshin `127.0.0.1` ko `192.168.x.x`?
Don tsaro (kariyar SSRF), uwar garkermu tana kiran adiresoshin intanet na jama'a kawai (isPublicIp) kuma tana kin kewayon loopback, keɓaɓɓen LAN na RFC1918, da kewayon link-local.
Me ya sa tashata ke OPEN a nan, amma ba a iya samun ta daga Wi-Fi na ofis dina?
Hanyoyin sadarwa na Wi-Fi na kamfanoni, jami'o'i, ko otal-otal sukan toshe hanyoyin fita zuwa tashoshi masu lamba mai yawa da ba daidaitattu ba (kamar 3128 ko 30000+). Gwada canza hanyar sadarwa ko amfani da proxy mai sauraro a daidaitacciyar tasha.
Ka Guje Wa Matsalolin Firewall na Uwar Garke da Shirye-Shiryen Proxies
Proxies na HTTP(S) Dedicated IPv4 da Static ISP na take da ake sanya wa ido 24/7 a kasashe 7.
Sayi Proxies na Take