I-API yokuxhumana eqondile ye-TCP ne-UDP iyathuthukiswa ye-Chrome

Google waqala ukusebenzisa i-API entsha ku-Chrome Amasokhethi Aluhlaza, okuvumela izinhlelo zokusebenza zewebhu ukusungula ukuxhumana kwenethiwekhi okuqondile kusetshenziswa izivumelwano ze-TCP ne-UDP. Ngo-2015, i-W3C consortium isivele yazama ukumisa i-API ".I-TCP ne-UDP Socket", kodwa amalungu eqembu elisebenzayo awazange afinyelele ukuvumelana futhi ukuthuthukiswa kwale API kwamiswa.

Isidingo sokwengeza i-API entsha sichazwa ngokunikeza amandla okuxhumana namadivayisi enethiwekhi asebenzisa izivumelwano zomdabu ezisebenza phezu kwe-TCP ne-UDP futhi ezingasekeli ukuxhumana nge-HTTPS noma i-WebSockets. Kuyaphawulwa ukuthi i-Raw Sockets API izohambisana nezinga eliphansi lokuhlangana lokuhlela i-WebUSB, i-WebMIDI ne-WebBluetooth eseyivele ikhona kusiphequluli, evumela ukusebenzisana namadivayisi wendawo.

Ukuze ugweme umthelela omubi kwezokuphepha, i-Raw Sockets API izovumela kuphela amakholi enethiwekhi aqaliswe ngemvume yomsebenzisi futhi akhawulelwe kuhlu lwabasingathi oluvunyelwe umsebenzisi. Umsebenzisi kuzodingeka aqinisekise ngokusobala umzamo wokuqala wokuxhumana womsingathi omusha. Ngokusebenzisa ifulegi elikhethekile, umsebenzisi angakhubaza ukuboniswa kwezicelo zokuqinisekisa ukusebenza okuphindaphindiwe kokuxhumeka okuphindaphindiwe kumsingathi ofanayo. Ukuze uvimbele ukuhlaselwa kwe-DDoS, ukushuba kwezicelo nge-Raw Sockets kuzokhawulwa, futhi ukuthumela izicelo kuzotholakala kuphela ngemva kokusebenzelana komsebenzisi nekhasi. Amaphakethe e-UDP atholwe kubasingathi angagunyazwanga umsebenzisi azoshaywa indiva futhi ngeke afinyelele isicelo sewebhu.

Ukuqaliswa kokuqala akuhlinzeki ngokudalwa kwamasokhethi okulalela, kodwa esikhathini esizayo kungenzeka ukunikeza amakholi ukuze wamukele uxhumo olungenayo olusuka ku-localhost noma uhlu lwabasingathi abaziwayo. Okunye okushiwo yisidingo sokuvikela ekuhlaselweni "I-DNS iyabophezela"(Umhlaseli angashintsha ikheli le-IP legama lesizinda eligunyazwe umsebenzisi ezingeni le-DNS futhi athole ukufinyelela kwabanye ababungazi). Kuhlelelwe ukuvimba ukufinyelela ezizindeni ezixazulula ku-127.0.0.0/8 namanethiwekhi e-intranethi (ukufinyelela ku-localhost kuhlongozwa ukuthi kuvunyelwe kuphela uma ikheli le-IP lifakwe ngokucacile efomini lokuqinisekisa).

Phakathi kwezingozi ezingase ziphakame lapho kusetshenziswa i-API entsha ukwenqatshwa kwayo okungenzeka ngabakhiqizi bezinye iziphequluli, okungaholela ezinkingeni zokusebenzisana. Abathuthukisi bezinjini ze-Mozilla Gecko kanye ne-WebKit basekhona akusebenzanga isikhundla sayo ekusetshenzisweni okungenzeka kwe-Raw Sockets API, kodwa iMozilla yayihlongoze ngaphambili iphrojekthi yeFirefox OS (B2G) i-API efanayo. Uma kuvunywe esigabeni sokuqala, i-Raw Sockets API ihlelelwe ukuthi isebenze ku-Chrome OS, bese inikezwa kuphela abasebenzisi be-Chrome kwamanye amasistimu.

Abathuthukisi bewebhu impela iphendule i-API entsha futhi yaveza imibono eminingi emisha mayelana nokusetshenziswa kwayo ezindaweni lapho i-XMLHttpRequest, WebSocket kanye ne-WebRTC APIs enganele khona (kusukela ekudaleni amaklayenti esiphequluli se-SSH, RDP, IMAP, SMTP, IRC kanye nezivumelwano zokuphrinta kuya ekuthuthukiseni izinhlelo ze-P2P ezisabalalisiwe I-DHT (Ithebula Le-Hash Esatshalaliswa), ukwesekwa kwe-IPFS nokusebenzisana nezivumelwano ezithile zamadivayisi we-IoT).

Source: opennet.ru