基于IP的开源代理服务器拦截模式认证机制的设计与实现
Design and Implementation of an IP based authentication mechanism for Open Source Proxy Servers in Interception Mode
摘要：
代理服务器正越来越多地部署在组织中以获得性能益处;然而，主要对于开源代理服务器，在拦截代理模式中的客户端认证的容易性方面仍然存在缺点。从技术上讲，拦截模式不是为客户端身份验证设计的，但在某些组织中的实现确实需要此功能。本文以万维网为研究对象，分析了现有的透明代理认证机制及其不足，提出了一种基于客户端IP地址的外部脚本的透明代理用户认证方案。该认证机制已在使用最广泛的HTTP开源代理服务器Squid上实现和验证。
英文摘要：
Proxy servers are being increasingly deployed at organizations for performance benefits; however, there still exists drawbacks in ease of client authentication in interception proxy mode mainly for Open Source Proxy Servers. Technically, an interception mode is not designed for client authentication, but implementation in certain organizations does require this feature. In this paper, we focus on the World Wide Web, highlight the existing transparent proxy authentication mechanisms, its drawbacks and propose an authentication scheme for transparent proxy users by using external scripts based on the clients Internet Protocol Address. This authentication mechanism has been implemented and verified on Squid-one of the most widely used HTTP Open Source Proxy Server.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
