{"id":1733,"date":"2017-04-11T12:16:03","date_gmt":"2017-04-11T05:16:03","guid":{"rendered":"https:\/\/engisv.info\/?p=1733"},"modified":"2017-04-11T12:16:03","modified_gmt":"2017-04-11T05:16:03","slug":"pfsense-firewall-trien-khai-web-proxy-voi-https","status":"publish","type":"post","link":"https:\/\/www.engisv.info\/?p=1733","title":{"rendered":"Pfsense Firewall &#8211; Tri\u1ec3n khai web proxy v\u1edbi HTTPS"},"content":{"rendered":"<p>V\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u1ee7a c\u00e1c website s\u1eed d\u1ee5ng giao th\u1ee9c HTTPS thay cho HTTP \u0111\u1ec3 t\u0103ng t\u00ednh b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch m\u00e3 h\u00f3a d\u1eef li\u1ec7u gi\u1eefa web server v\u00e0 tr\u00ecnh duy\u1ec7t web. \u0110\u1ec3 \u0111\u00e1p \u1ee9ng nhu c\u1ea7u cache v\u00e0 l\u1ecdc c\u00e1c th\u00f4ng tin web trong HTTPS, Squid \u0111\u00e3 cung c\u1ea5p g\u00f3i gi\u1ea3i ph\u00e1p m\u1edbi v\u00e0 n\u00f3 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p tr\u00ean Pfsense.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1734 aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-1-1024x553.png\" alt=\"\" width=\"592\" height=\"320\" \/><\/p>\n<p>\u1ede b\u00e0i n\u00e0y, m\u1eb7c \u0111\u1ecbnh b\u1ea1n \u0111\u00e3<a href=\"https:\/\/www.engisv.info\/?p=339\" target=\"_blank\" rel=\"noopener\"> thi\u1ebft l\u1eadp \u0111\u01b0\u1ee3c web proxy cho giao th\u1ee9c HTTP<\/a>, ch\u00fang ta c\u00f3 m\u00f4 h\u00ecnh tri\u1ec3n khai nh\u01b0 sau:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1735 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-13.png\" alt=\"\" width=\"456\" height=\"384\" \/><\/p>\n<p>\u0110\u1ea7u ti\u00ean, tr\u00ean Pfsense ch\u00fang ta s\u1ebd t\u1ea1o m\u1ed9t CA, trong <strong>System &gt; Cert. Manager &gt; CAs<\/strong> nh\u1ea5n n\u00fat <strong>Add<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1736 size-large aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-2-1024x245.png\" alt=\"\" width=\"640\" height=\"153\" \/><\/p>\n<p>Ti\u1ebfp theo, b\u1ea1n \u0111\u1eb7t t\u00ean cho CA trong <strong>Descriptive name<\/strong>, \u00a0trong<strong> Method<\/strong> ch\u1ecdn \u00a0<strong>Create an internal Certificate Authority<\/strong> v\u00e0 \u0111i\u1ec1n \u0111\u1ea7y \u0111\u1ee7 c\u00e1c th\u00f4ng tin b\u00ean d\u01b0\u1edbi, nh\u1ea5n <strong>Save<\/strong> t\u1ea1o CA.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1737 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-3.png\" alt=\"\" width=\"550\" height=\"285\" \/><\/p>\n<p>Sau khi Save, ch\u00fang ta s\u1ebd \u0111\u01b0\u1ee3c CA .<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1738 size-large aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-4-1024x302.png\" alt=\"\" width=\"640\" height=\"189\" \/><\/p>\n<p>Nh\u01b0 \u0111\u00e3 n\u00f3i \u1edf tr\u00ean, khi tri\u1ec3n khai proxy cho HPPTS th\u00ec m\u1eb7c \u0111\u1ecbnh b\u1ea1n <a href=\"https:\/\/www.engisv.info\/?p=339\" target=\"_blank\" rel=\"noopener\">\u0111\u00e3 c\u1ea5u h\u00ecnh \u0111\u01b0\u1ee3c Proxy cho HTTP<\/a>, b\u1ea1n v\u00e0o <strong>Status &gt; Services<\/strong> \u0111\u1ec3 ki\u1ec3m tra l\u00e0 <strong>Squid Proxy Server Service<\/strong> \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1739 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-5.png\" alt=\"\" width=\"644\" height=\"310\" \/><\/p>\n<p>Ti\u1ebfp theo, b\u1ea1n v\u00e0o <strong>Service &gt; Squid Proxy Server<\/strong>, k\u00e9o xu\u1ed1ng ph\u1ea7n <strong>SSL Man In the Middle Filtering<\/strong>, ch\u1ecdn check v\u00e0o \u00f4 <strong>Enable SSL filtering<\/strong>. \u1ede m\u1ee5c <strong>SSL\/MITM Mode<\/strong> s\u1ebd c\u00f3 3 t\u00f9y ch\u1ecdn:<\/p>\n<ul>\n<li><strong>Splice Whitelist, Bump Otherwise<\/strong>: T\u00f9y ch\u1ecdn n\u00e0y \u0111\u01b0\u1ee3c ch\u1ecdn m\u1eb7c \u0111\u1ecbnh, t\u1ea5t c\u1ea3 \u00a0c\u00e1c n\u1ed9i dung \u0111\u01b0\u1ee3c khai b\u00e1o trong Whitelist c\u1ee7a ACLs s\u1ebd \u0111\u01b0\u1ee3c cho qua, c\u00e1c n\u1ed9i dung kh\u00e1c s\u1ebd \u0111\u01b0\u1ee3c x\u1eed l\u00fd. \u1ede t\u00f9y ch\u1ecdn n\u00e0y c\u00e1c n\u1ed9i dung s\u1ebd \u0111\u01b0\u1ee3c loc (nh\u01b0 Antivirus), tr\u1eeb Whitelist. Ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i c\u00e0i \u0111\u1eb7t CA certificate \u0111\u01b0\u1ee3c t\u1ea1o ra cho vi\u1ec7c l\u1ecdc.<\/li>\n<li><strong>Splice All<\/strong>: T\u00f9y ch\u1ecdn n\u00e0y ph\u00f9 h\u1ee3p cho vi\u1ec7c b\u1ea1n d\u1eed d\u1ee5ng\u00a0SquidGuard l\u1ecdc web, n\u00f3 cho ph\u00e9p \u00a0SquidGuard x\u1eed l\u00fd t\u1ea5t c\u1ea3 c\u00e1c \u0111\u1ecbch \u0111\u1ebfn th\u00f4ng qua rule c\u1ee7a\u00a0\u00a0SquidGuard nh\u01b0 \u0111\u1ed1i v\u1edbi HTTP. Ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t CA certificate, nh\u01b0ng n\u00f3 s\u1ebd kh\u00f4ng l\u1ecdc n\u1ed9i dung (nh\u01b0 Antivirus)<\/li>\n<li><strong>Custom<\/strong>: Ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb s\u1ebd ph\u1ea3i khai b\u00e1o \u1edf\u00a0Advanced Features d\u01b0\u1edbi c\u00f9ng c\u1ee7a Web Proxy Service.<\/li>\n<\/ul>\n<p>\u1ede \u0111\u00e2y, ch\u00fang ta gi\u1eef ch\u1ecdn m\u1eb7c \u0111\u1ecbnh\u00a0<strong>Splice Whitelist, Bump Otherwise<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1740 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-6.png\" alt=\"\" width=\"585\" height=\"252\" \/><\/p>\n<p>Ti\u1ebfp t\u1ee5c, v\u1eabn trong <strong>SSL Man In the Middle Filtering<\/strong>, ch\u00fang ta k\u00e9o xu\u1ed1ng v\u00e0 ch\u1ecdn CA cho d\u1ecbch v\u1ee5. Sau c\u00f9ng nh\u1ea7n Save \u0111\u1ec3 l\u01b0u c\u1ea5u h\u00ecnh.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1741 size-full aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-7.png\" alt=\"\" width=\"706\" height=\"83\" \/><\/p>\n<p>Sau khi c\u1ea5u h\u00ecnh xong\u00a0SSL Man In the Middle Filtering, b\u1ea1n s\u1ebd import CA certificate cho m\u00e1y t\u00ednh client. Trong System &gt; Cert. Manager &gt; CAs, b\u1ea1n nh\u1ea5n v\u00e0o n\u00fat Export CA tr\u00ean CA certificate c\u1ea5p cho d\u1ecbch v\u1ee5 n\u00e0y<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1748 aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-14-1024x310.png\" alt=\"\" width=\"528\" height=\"160\" \/><\/p>\n<p>Sau khi export CA xong, ch\u00fang ta ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t CA cho client. C\u00f3 hai c\u00e1ch, m\u1ed9t l\u00e0 b\u1ea1n c\u00e0i \u0111\u1eb7t b\u1eb1ng tay cho t\u1eebng m\u00e1y v\u00e0 c\u00e1ch th\u1ee9 hai l\u00e0 s\u1ebd d\u00f9ng Group Policy \u0111\u1ec3 c\u00e0i \u0111\u1eb7t t\u1ef1 \u0111\u1ed9ng cho client n\u1ebfu c\u00e1c m\u00e1y t\u00ednh n\u00e0y thu\u1ed9c th\u00e0nh vi\u00ean c\u1ee7a m\u1ed9t Domain Controller.<\/p>\n<p><strong>C\u00e0i \u0111\u1eb7t CA b\u1eb1ng tay cho client:<\/strong><\/p>\n<p>B\u1ea1n m\u1edf CA c\u1ea7n c\u00e0i, ch\u1ecdn <strong>Install Certificate&#8230;<\/strong> ti\u1ebfp theo b\u1ea1n l\u00e0m theo Wizard c\u1ee7a h\u00ea th\u1ed1ng, b\u1ea1n ch\u1ecdn n\u01a1i l\u01b0u tr\u1eef \u00a0<strong>Certificate l\u00e0 Trusted Root Certtification Authorities<\/strong>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1749 aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-8.png\" alt=\"\" width=\"659\" height=\"428\" \/><\/p>\n<p>V\u00ec \u0111\u00e2y l\u00e0 Certificate cho ch\u00fang ta t\u1ef1 t\u1ea1o, n\u00ean h\u1ec7 th\u1ed1ng c\u1ea3nh b\u00e1o v\u1ec1 an to\u00e0n, b\u1ea1n ch\u1ecdn <strong>Yes<\/strong> \u0111\u1ec3 ti\u1ebfp t\u1ee5c c\u00e0i \u0111\u1eb7t.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1743 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-9.png\" alt=\"\" width=\"342\" height=\"291\" \/><\/p>\n<p><strong>Tri\u1ec3n khai b\u1eb1ng Group Policy tren Domain Controller:<\/strong><\/p>\n<p>B\u1ea1n ch\u1ecdn OU ch\u1ee9a c\u00e1c m\u00e1y t\u00ednh c\u1ea7n c\u00e0i \u0111\u1eb7t, t\u1ea1o m\u1ed9t GPO m\u1edbi, ho\u1eb7c edit m\u1ed9t GPO c\u00f3 s\u1eb5n c\u00f3 th\u1ec3 tri\u1ec3n khai \u0111\u01b0\u1ee3c. Trong m\u1ee5c <strong>Computer Configuration &gt; Policy &gt; Windows Settings &gt; Public Key Policies &gt; Trusted Root Certification Authorities &gt;<\/strong> click ph\u1ea3i ch\u1ecdn<strong> Import<\/strong> \u0111\u1ec3 import certificate c\u1ea7n tri\u1ec3n khai v\u00e0o. B\u1ea1n l\u01b0u \u00fd, certificate ph\u1ea3i \u0111\u01b0\u1ee3c \u0111\u1eb7t trong m\u1ed9t th\u01b0 m\u1ee5c chia s\u1ebb.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1744 aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-12-1024x524.png\" alt=\"\" width=\"619\" height=\"317\" \/><\/p>\n<p><strong>Ki\u1ec3m tra k\u1ebft qu\u1ea3:<\/strong><\/p>\n<p>N\u1ebfu ch\u01b0a c\u00e0i \u0111\u1eb7t CA, th\u00ec tr\u00ecnh duy\u1ec7t web s\u1ebd b\u00e1o l\u1ed7i k\u1ebft n\u1ed1i kh\u00f4ng an to\u00e0n, c\u00f3 th\u1ec3 b\u1ea1n \u0111ang b\u1ecb t\u1ea5n c\u00f4ng v\u00e0 kh\u00f4ng cho b\u1ea1n ti\u1ebfp t\u1ee5c truy c\u1eadp v\u00e0o website.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1746 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-11-1024x386.png\" alt=\"\" width=\"454\" height=\"171\" \/><\/p>\n<p>Sau khi c\u00e0i \u0111\u1eb7t xong CA, b\u1ea1n c\u00f3 th\u1ec3 truy c\u1eadp web v\u1edbi https b\u00ecnh th\u01b0\u1eddng.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1747 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-10-1.png\" alt=\"\" width=\"447\" height=\"276\" \/><\/p>\n<p>L\u00fac n\u00e0y, khi \u0111i ki\u1ec3m tra certificate, b\u1ea1n s\u1ebd th\u1ea5y certificate c\u1ee7a c\u00e1c trang web l\u00e0 m\u1ed9t nh\u00e1nh c\u1ee7a certificate c\u1ee7a ch\u00fang ta.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1756 aligncenter zoooom\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-15.png\" alt=\"\" width=\"565\" height=\"213\" \/><\/p>\n<p>M\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p b\u1ea1n c\u00f3 th\u1ec3 g\u1eb7p kh\u00f3 kh\u0103n khi import certificate v\u00e0o h\u1ec7 \u0111i\u1ec1u h\u00e0nh, ho\u1eb7c tr\u00ecnh duy\u1ec7t c\u00f3 th\u1ec3 kh\u00f4ng nh\u1eadn certificate import v\u00e0o t\u1eeb h\u1ec7 \u0111i\u1ec1u h\u00e0nh, trong nh\u1eefng tr\u01b0\u1eddng h\u1ee3p n\u00e0y \u00a0b\u1ea1n c\u00f3 th\u1ec3 import tr\u1ef1c ti\u1ebfp certificate v\u00e0o tr\u00ecnh duy\u1ec7t. B\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o b\u00e0i vi\u1ebft <a href=\"https:\/\/www.engisv.info\/?p=1764\" target=\"_blank\" rel=\"noopener\">Import certificate v\u00e0o tr\u00ecnh duy\u1ec7t Chrome v\u00e0 Firefox<\/a>.<\/p>\n<p><iframe loading=\"lazy\" title=\"Tri\u1ec3n khai web proxy v\u1edbi HTTPS tr\u00ean Pfsense\" width=\"640\" height=\"480\" src=\"https:\/\/www.youtube.com\/embed\/kjBHpae3e3E?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><\/p>\n<p>\u0110\u1ec3 \u0111\u1ea3m b\u1ea3o d\u1ecbch v\u1ee5 ch\u1ea1y \u1ed5n \u0111\u1ecbnh v\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i import certificate m\u1ed9t c\u00e1ch ph\u1ee9c t\u1ea1p, b\u1ea1n c\u00f3 th\u1ec3 mua c\u00e1c certificate c\u1ee7a c\u00e1c t\u1ed5 ch\u1ee9c \u0111\u01b0\u1ee3c ph\u00e9p c\u1ea5p ph\u00e1t CA v\u00e0 s\u1eed d\u1ee5ng cho d\u1ecbch v\u1ee5.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1759 aligncenter\" src=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2017\/04\/Squithttps-16.png\" alt=\"\" width=\"549\" height=\"157\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>V\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u1ee7a c\u00e1c website s\u1eed d\u1ee5ng giao th\u1ee9c HTTPS thay cho HTTP \u0111\u1ec3 t\u0103ng t\u00ednh b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch m\u00e3 h\u00f3a d\u1eef li\u1ec7u gi\u1eefa web server v\u00e0 tr\u00ecnh duy\u1ec7t web. \u0110\u1ec3 \u0111\u00e1p \u1ee9ng nhu c\u1ea7u cache v\u00e0 l\u1ecdc c\u00e1c th\u00f4ng tin web trong HTTPS, Squid \u0111\u00e3 cung c\u1ea5p g\u00f3i gi\u1ea3i ph\u00e1p m\u1edbi v\u00e0 n\u00f3 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p tr\u00ean Pfsense. \u1ede b\u00e0i n\u00e0y, m\u1eb7c \u0111\u1ecbnh b\u1ea1n \u0111\u00e3 thi\u1ebft l\u1eadp \u0111\u01b0\u1ee3c web proxy cho giao th\u1ee9c HTTP, ch\u00fang ta c\u00f3 m\u00f4 h\u00ecnh tri\u1ec3n khai nh\u01b0 sau:&hellip;<\/p>\n","protected":false},"author":2,"featured_media":260,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[4,5],"tags":[54,69],"class_list":["post-1733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mang","category-firewall-proxy","tag-pfsense","tag-web-proxy"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.engisv.info\/?p=1733\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV\" \/>\n<meta property=\"og:description\" content=\"V\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u1ee7a c\u00e1c website s\u1eed d\u1ee5ng giao th\u1ee9c HTTPS thay cho HTTP \u0111\u1ec3 t\u0103ng t\u00ednh b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch m\u00e3 h\u00f3a d\u1eef li\u1ec7u gi\u1eefa web server v\u00e0 tr\u00ecnh duy\u1ec7t web. \u0110\u1ec3 \u0111\u00e1p \u1ee9ng nhu c\u1ea7u cache v\u00e0 l\u1ecdc c\u00e1c th\u00f4ng tin web trong HTTPS, Squid \u0111\u00e3 cung c\u1ea5p g\u00f3i gi\u1ea3i ph\u00e1p m\u1edbi v\u00e0 n\u00f3 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p tr\u00ean Pfsense. \u1ede b\u00e0i n\u00e0y, m\u1eb7c \u0111\u1ecbnh b\u1ea1n \u0111\u00e3 thi\u1ebft l\u1eadp \u0111\u01b0\u1ee3c web proxy cho giao th\u1ee9c HTTP, ch\u00fang ta c\u00f3 m\u00f4 h\u00ecnh tri\u1ec3n khai nh\u01b0 sau:&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.engisv.info\/?p=1733\" \/>\n<meta property=\"og:site_name\" content=\"EngISV\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/engisv\" \/>\n<meta property=\"article:published_time\" content=\"2017-04-11T05:16:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"500\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"hoanghiepktv\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hoanghiepktv\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733\"},\"author\":{\"name\":\"hoanghiepktv\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#\\\/schema\\\/person\\\/dcbab2ddc35f4c71f45c7e13f36367bf\"},\"headline\":\"Pfsense Firewall &#8211; Tri\u1ec3n khai web proxy v\u1edbi HTTPS\",\"datePublished\":\"2017-04-11T05:16:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733\"},\"wordCount\":1139,\"publisher\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/PFSense-1.png\",\"keywords\":[\"Pfsense\",\"Web Proxy\"],\"articleSection\":[\"D\u1ecbch v\u1ee5 m\u1ea1ng\",\"Firewall - Proxy\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733\",\"url\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733\",\"name\":\"Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/PFSense-1.png\",\"datePublished\":\"2017-04-11T05:16:03+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.engisv.info\\\/?p=1733\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#primaryimage\",\"url\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/PFSense-1.png\",\"contentUrl\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2015\\\/01\\\/PFSense-1.png\",\"width\":500,\"height\":500},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/?p=1733#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.engisv.info\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pfsense Firewall &#8211; Tri\u1ec3n khai web proxy v\u1edbi HTTPS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#website\",\"url\":\"https:\\\/\\\/www.engisv.info\\\/\",\"name\":\"EngISV\",\"description\":\"H\u00e3y b\u1eaft \u0111\u1ea7u t\u1eeb nh\u1eefng vi\u1ec7c nh\u1ecf!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.engisv.info\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#organization\",\"name\":\"EngISV\",\"url\":\"https:\\\/\\\/www.engisv.info\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/logo2-3-1-1.png\",\"contentUrl\":\"https:\\\/\\\/www.engisv.info\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/logo2-3-1-1.png\",\"width\":200,\"height\":76,\"caption\":\"EngISV\"},\"image\":{\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/engisv\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.engisv.info\\\/#\\\/schema\\\/person\\\/dcbab2ddc35f4c71f45c7e13f36367bf\",\"name\":\"hoanghiepktv\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g\",\"caption\":\"hoanghiepktv\"},\"url\":\"https:\\\/\\\/www.engisv.info\\\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.engisv.info\/?p=1733","og_locale":"en_US","og_type":"article","og_title":"Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV","og_description":"V\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh m\u1ebd c\u1ee7a c\u1ee7a c\u00e1c website s\u1eed d\u1ee5ng giao th\u1ee9c HTTPS thay cho HTTP \u0111\u1ec3 t\u0103ng t\u00ednh b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch m\u00e3 h\u00f3a d\u1eef li\u1ec7u gi\u1eefa web server v\u00e0 tr\u00ecnh duy\u1ec7t web. \u0110\u1ec3 \u0111\u00e1p \u1ee9ng nhu c\u1ea7u cache v\u00e0 l\u1ecdc c\u00e1c th\u00f4ng tin web trong HTTPS, Squid \u0111\u00e3 cung c\u1ea5p g\u00f3i gi\u1ea3i ph\u00e1p m\u1edbi v\u00e0 n\u00f3 \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p tr\u00ean Pfsense. \u1ede b\u00e0i n\u00e0y, m\u1eb7c \u0111\u1ecbnh b\u1ea1n \u0111\u00e3 thi\u1ebft l\u1eadp \u0111\u01b0\u1ee3c web proxy cho giao th\u1ee9c HTTP, ch\u00fang ta c\u00f3 m\u00f4 h\u00ecnh tri\u1ec3n khai nh\u01b0 sau:&hellip;","og_url":"https:\/\/www.engisv.info\/?p=1733","og_site_name":"EngISV","article_publisher":"https:\/\/www.facebook.com\/engisv","article_published_time":"2017-04-11T05:16:03+00:00","og_image":[{"width":500,"height":500,"url":"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png","type":"image\/png"}],"author":"hoanghiepktv","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hoanghiepktv","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.engisv.info\/?p=1733#article","isPartOf":{"@id":"https:\/\/www.engisv.info\/?p=1733"},"author":{"name":"hoanghiepktv","@id":"https:\/\/www.engisv.info\/#\/schema\/person\/dcbab2ddc35f4c71f45c7e13f36367bf"},"headline":"Pfsense Firewall &#8211; Tri\u1ec3n khai web proxy v\u1edbi HTTPS","datePublished":"2017-04-11T05:16:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.engisv.info\/?p=1733"},"wordCount":1139,"publisher":{"@id":"https:\/\/www.engisv.info\/#organization"},"image":{"@id":"https:\/\/www.engisv.info\/?p=1733#primaryimage"},"thumbnailUrl":"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png","keywords":["Pfsense","Web Proxy"],"articleSection":["D\u1ecbch v\u1ee5 m\u1ea1ng","Firewall - Proxy"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.engisv.info\/?p=1733","url":"https:\/\/www.engisv.info\/?p=1733","name":"Pfsense Firewall - Tri\u1ec3n khai web proxy v\u1edbi HTTPS - EngISV","isPartOf":{"@id":"https:\/\/www.engisv.info\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.engisv.info\/?p=1733#primaryimage"},"image":{"@id":"https:\/\/www.engisv.info\/?p=1733#primaryimage"},"thumbnailUrl":"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png","datePublished":"2017-04-11T05:16:03+00:00","breadcrumb":{"@id":"https:\/\/www.engisv.info\/?p=1733#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.engisv.info\/?p=1733"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.engisv.info\/?p=1733#primaryimage","url":"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png","contentUrl":"https:\/\/www.engisv.info\/wp-content\/uploads\/2015\/01\/PFSense-1.png","width":500,"height":500},{"@type":"BreadcrumbList","@id":"https:\/\/www.engisv.info\/?p=1733#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.engisv.info\/"},{"@type":"ListItem","position":2,"name":"Pfsense Firewall &#8211; Tri\u1ec3n khai web proxy v\u1edbi HTTPS"}]},{"@type":"WebSite","@id":"https:\/\/www.engisv.info\/#website","url":"https:\/\/www.engisv.info\/","name":"EngISV","description":"H\u00e3y b\u1eaft \u0111\u1ea7u t\u1eeb nh\u1eefng vi\u1ec7c nh\u1ecf!","publisher":{"@id":"https:\/\/www.engisv.info\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.engisv.info\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.engisv.info\/#organization","name":"EngISV","url":"https:\/\/www.engisv.info\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.engisv.info\/#\/schema\/logo\/image\/","url":"https:\/\/www.engisv.info\/wp-content\/uploads\/2018\/06\/logo2-3-1-1.png","contentUrl":"https:\/\/www.engisv.info\/wp-content\/uploads\/2018\/06\/logo2-3-1-1.png","width":200,"height":76,"caption":"EngISV"},"image":{"@id":"https:\/\/www.engisv.info\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/engisv"]},{"@type":"Person","@id":"https:\/\/www.engisv.info\/#\/schema\/person\/dcbab2ddc35f4c71f45c7e13f36367bf","name":"hoanghiepktv","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/645a174195a58b43e64a66af9255c62adc3c73faba32dda89a76c2778e9b3172?s=96&d=mm&r=g","caption":"hoanghiepktv"},"url":"https:\/\/www.engisv.info\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/posts\/1733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.engisv.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1733"}],"version-history":[{"count":0,"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/posts\/1733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.engisv.info\/index.php?rest_route=\/wp\/v2\/media\/260"}],"wp:attachment":[{"href":"https:\/\/www.engisv.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.engisv.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.engisv.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}