From IP packets to HTTP: the many faces of our Oxy framework
We have recently introduced Oxy, our Rust-based framework for proxies powering many Cloudflare services and products. Today, we will explain why and how it spans various layers of the OSI model, by handling directly raw IP packets, TCP connections and UDP payloads
本文介绍了Cloudflare的代理框架Oxy在OSI模型各层的操作,从处理原始IP数据包到应用层协议如HTTP和SSH。Oxy通过处理IP数据包支持Cloudflare One客户的流量扩展私有网络。它引入了IP隧道概念,为每个数据包关联上下文信息,并支持升级为TCP流。Oxy还能将TCP流升级为HTTP流,同时支持UDP流量。最后,Oxy将代理流量发送到上游目标,支持IP数据包、TCP/UDP套接字或直接的HTTP(S)形式下行。