{"id":390,"date":"2025-02-05T11:18:38","date_gmt":"2025-02-05T11:18:38","guid":{"rendered":"https:\/\/replicounts.org\/network\/subnet\/"},"modified":"2025-02-05T11:18:38","modified_gmt":"2025-02-05T11:18:38","slug":"subnet","status":"publish","type":"post","link":"https:\/\/replicounts.org\/vi\/network\/subnet\/","title":{"rendered":"M\u1ea1ng con"},"content":{"rendered":"

Ph\u00e2n t\u00edch k\u1ef9 thu\u1eadt c\u1ee7a m\u1ea1ng con trong b\u1ed1i c\u1ea3nh m\u1ea1ng proxy<\/h3>\n

M\u1ea1ng con l\u00e0 g\u00ec?<\/h4>\n

\u1ede c\u1ea5p \u0111\u1ed9 k\u1ef9 thu\u1eadt, m\u1ed9t m\u1ea1ng con<\/strong> (vi\u1ebft t\u1eaft c\u1ee7a subnetwork) l\u00e0 m\u1ed9t ph\u1ea7n \u0111\u01b0\u1ee3c ph\u00e2n \u0111o\u1ea1n c\u1ee7a m\u1ed9t m\u1ea1ng l\u1edbn h\u01a1n. N\u00f3 cho ph\u00e9p qu\u1ea3n l\u00fd hi\u1ec7u qu\u1ea3 c\u00e1c \u0111\u1ecba ch\u1ec9 IP b\u1eb1ng c\u00e1ch chia m\u1ed9t m\u1ea1ng l\u1edbn h\u01a1n th\u00e0nh c\u00e1c ph\u1ea7n nh\u1ecf h\u01a1n, d\u1ec5 qu\u1ea3n l\u00fd h\u01a1n. Ph\u00e2n m\u1ea1ng con r\u1ea5t quan tr\u1ecdng \u0111\u1ec3 t\u1ed1i \u01b0u h\u00f3a \u0111\u1ecbnh tuy\u1ebfn v\u00e0 c\u1ea3i thi\u1ec7n hi\u1ec7u su\u1ea5t m\u1ea1ng. Trong b\u1ed1i c\u1ea3nh c\u1ee7a c\u00e1c m\u1ea1ng proxy, vi\u1ec7c hi\u1ec3u c\u00e1c m\u1ea1ng con l\u00e0 \u0111i\u1ec1u c\u1ea7n thi\u1ebft \u0111\u1ec3 \u0111\u1ecbnh tuy\u1ebfn hi\u1ec7u qu\u1ea3 c\u00e1c y\u00eau c\u1ea7u v\u00e0 qu\u1ea3n l\u00fd t\u00e0i nguy\u00ean.<\/p>\n

M\u1ed9t m\u1ea1ng con \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh b\u1edfi \u0111\u1ecba ch\u1ec9 IP v\u00e0 m\u1eb7t n\u1ea1 m\u1ea1ng con. M\u1eb7t n\u1ea1 m\u1ea1ng con x\u00e1c \u0111\u1ecbnh ph\u1ea7n n\u00e0o c\u1ee7a \u0111\u1ecba ch\u1ec9 IP tham chi\u1ebfu \u0111\u1ebfn m\u1ea1ng v\u00e0 ph\u1ea7n n\u00e0o tham chi\u1ebfu \u0111\u1ebfn m\u00e1y ch\u1ee7. S\u1ef1 ph\u00e2n chia n\u00e0y r\u1ea5t quan tr\u1ecdng \u0111\u1ec3 ph\u00e2n bi\u1ec7t gi\u1eefa c\u00e1c m\u1ea1ng kh\u00e1c nhau v\u00e0 c\u00e1c thi\u1ebft b\u1ecb c\u1ee7a ch\u00fang.<\/p>\n

T\u01b0\u01a1ng t\u00e1c v\u1edbi Proxy v\u00e0 M\u1ea1ng<\/h4>\n

Proxy \u0111\u00f3ng vai tr\u00f2 l\u00e0 trung gian gi\u1eefa m\u00e1y kh\u00e1ch v\u00e0 m\u00e1y ch\u1ee7. Ch\u00fang c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng \u1edf nhi\u1ec1u c\u1ea5p \u0111\u1ed9 kh\u00e1c nhau c\u1ee7a m\u00f4 h\u00ecnh OSI (v\u00ed d\u1ee5: \u1ee9ng d\u1ee5ng, v\u1eadn chuy\u1ec3n). Khi proxy \u0111\u01b0\u1ee3c tri\u1ec3n khai trong m\u1ed9t m\u1ea1ng con, n\u00f3 th\u01b0\u1eddng x\u1eed l\u00fd c\u00e1c y\u00eau c\u1ea7u b\u1eaft ngu\u1ed3n t\u1eeb c\u00e1c thi\u1ebft b\u1ecb trong m\u1ea1ng con \u0111\u00f3 v\u00e0 chuy\u1ec3n ti\u1ebfp ch\u00fang \u0111\u1ebfn \u0111\u00edch th\u00edch h\u1ee3p.<\/p>\n

T\u01b0\u01a1ng t\u00e1c ch\u00ednh:<\/strong>
\n1. Qu\u1ea3n l\u00fd giao th\u00f4ng:<\/strong> Proxy c\u00f3 th\u1ec3 qu\u1ea3n l\u00fd l\u01b0u l\u01b0\u1ee3ng trong c\u00e1c m\u1ea1ng con, cho ph\u00e9p c\u00e2n b\u1eb1ng t\u1ea3i v\u00e0 gi\u1ea3m t\u1eafc ngh\u1ebdn.
\n2. B\u1ea3o v\u1ec7:<\/strong> Proxy c\u00f3 th\u1ec3 cung c\u1ea5p l\u1edbp b\u1ea3o m\u1eadt gi\u1eefa c\u00e1c thi\u1ebft b\u1ecb trong m\u1ea1ng con v\u00e0 m\u1ea1ng b\u00ean ngo\u00e0i, gi\u00fap gi\u1ea3m thi\u1ec3u c\u00e1c m\u1ed1i \u0111e d\u1ecda.
\n3. Ki\u1ec3m so\u00e1t truy c\u1eadp:<\/strong> C\u00e1c t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 tri\u1ec3n khai ch\u00ednh s\u00e1ch truy c\u1eadp \u1edf c\u1ea5p \u0111\u1ed9 m\u1ea1ng con, ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb n\u00e0o c\u00f3 th\u1ec3 giao ti\u1ebfp v\u1edbi proxy ho\u1eb7c m\u1ea1ng b\u00ean ngo\u00e0i n\u00e0o.<\/p>\n

C\u00e1c tham s\u1ed1 ho\u1eb7c \u0111\u1ecbnh d\u1ea1ng ch\u00ednh<\/h4>\n
    \n
  1. \n

    \u0110\u1ecba ch\u1ec9 IP:<\/strong> M\u00e3 \u0111\u1ecbnh danh duy nh\u1ea5t cho m\u1ed9t thi\u1ebft b\u1ecb tr\u00ean m\u1ea1ng, th\u01b0\u1eddng \u0111\u01b0\u1ee3c bi\u1ec3u th\u1ecb theo \u0111\u1ecbnh d\u1ea1ng IPv4 (v\u00ed d\u1ee5: 192.168.1.10) ho\u1eb7c IPv6 (v\u00ed d\u1ee5: 2001:0db8:85a3:0000:0000:8a2e:0370:7334).<\/p>\n<\/li>\n

  2. \n

    M\u1eb7t n\u1ea1 m\u1ea1ng con:<\/strong> M\u1ed9t s\u1ed1 32 bit chia \u0111\u1ecba ch\u1ec9 IP th\u00e0nh ph\u1ea7n m\u1ea1ng v\u00e0 ph\u1ea7n m\u00e1y ch\u1ee7. C\u00e1c \u0111\u1ecbnh d\u1ea1ng ph\u1ed5 bi\u1ebfn bao g\u1ed3m:<\/p>\n<\/li>\n

  3. K\u00fd hi\u1ec7u CIDR:<\/strong> M\u1ed9t bi\u1ec3u di\u1ec5n vi\u1ebft t\u1eaft (v\u00ed d\u1ee5: 192.168.1.0\/24) trong \u0111\u00f3 \/24<\/code> ch\u1ec9 ra r\u1eb1ng 24 bit \u0111\u1ea7u ti\u00ean l\u00e0 ph\u1ea7n m\u1ea1ng.<\/li>\n
  4. \n

    K\u00fd hi\u1ec7u th\u1eadp ph\u00e2n ch\u1ea5m:<\/strong> M\u1ed9t \u0111\u1ecbnh d\u1ea1ng truy\u1ec1n th\u1ed1ng h\u01a1n (v\u00ed d\u1ee5: 255.255.255.0) ch\u1ec9 \u0111\u1ecbnh tr\u1ef1c ti\u1ebfp m\u1eb7t n\u1ea1 m\u1ea1ng con.<\/p>\n<\/li>\n

  5. \n

    C\u1ed5ng v\u00e0o:<\/strong> \u0110\u1ecba ch\u1ec9 IP c\u1ee7a b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn trong m\u1ea1ng con \u0111\u1ecbnh tuy\u1ebfn l\u01b0u l\u01b0\u1ee3ng \u0111\u1ebfn c\u00e1c m\u1ea1ng kh\u00e1c.<\/p>\n<\/li>\n

  6. \n

    \u0110\u1ecba ch\u1ec9 ph\u00e1t s\u00f3ng:<\/strong> \u0110\u1ecba ch\u1ec9 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 g\u1eedi d\u1eef li\u1ec7u \u0111\u1ebfn t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb trong m\u1ea1ng con. \u0110\u00e2y th\u01b0\u1eddng l\u00e0 \u0111\u1ecba ch\u1ec9 cao nh\u1ea5t trong m\u1ea1ng con.<\/p>\n<\/li>\n<\/ol>\n

    V\u00ed d\u1ee5 c\u01a1 b\u1ea3n v\u1edbi gi\u1ea3i th\u00edch k\u1ef9 thu\u1eadt<\/h4>\n

    H\u00e3y xem x\u00e9t m\u1ed9t v\u00ed d\u1ee5 \u0111\u01a1n gi\u1ea3n v\u1ec1 m\u1ed9t m\u1ea1ng con \u0111\u01b0\u1ee3c \u0111\u1ecbnh ngh\u0129a l\u00e0 192.168.1.0\/24<\/code>. <\/p>\n

      \n
    • \u0110\u1ecba ch\u1ec9 IP m\u1ea1ng con:<\/strong> 192.168.1.0<\/li>\n
    • M\u1eb7t n\u1ea1 m\u1ea1ng con:<\/strong> 255.255.255.0 (ho\u1eb7c \/24)<\/li>\n
    • Ph\u1ea1m vi IP c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng:<\/strong> 192.168.1.1 \u0111\u1ebfn 192.168.1.254<\/li>\n
    • \u0110\u1ecba ch\u1ec9 ph\u00e1t s\u00f3ng:<\/strong> 192.168.1.255<\/li>\n<\/ul>\n
      Gi\u1ea3i th\u00edch:<\/h5>\n
        \n
      1. \n

        Chia m\u1ea1ng con:<\/strong> C\u00e1c \/24<\/code> subnet mask ch\u1ec9 ra r\u1eb1ng 24 bit \u0111\u1ea7u ti\u00ean c\u1ee7a \u0111\u1ecba ch\u1ec9 x\u00e1c \u0111\u1ecbnh m\u1ea1ng (192.168.1) v\u00e0 8 bit c\u00f2n l\u1ea1i (0) \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho \u0111\u1ecba ch\u1ec9 m\u00e1y ch\u1ee7. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p t\u1ed1i \u0111a 256 \u0111\u1ecba ch\u1ec9 (0-255), trong \u0111\u00f3 254 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c g\u00e1n cho c\u00e1c thi\u1ebft b\u1ecb (kh\u00f4ng bao g\u1ed3m \u0111\u1ecba ch\u1ec9 m\u1ea1ng v\u00e0 \u0111\u1ecba ch\u1ec9 ph\u00e1t s\u00f3ng).<\/p>\n<\/li>\n

      2. \n

        Tri\u1ec3n khai Proxy:<\/strong> Trong m\u1ea1ng con n\u00e0y, b\u1ea1n c\u00f3 th\u1ec3 tri\u1ec3n khai m\u1ed9t m\u00e1y ch\u1ee7 proxy v\u1edbi \u0111\u1ecba ch\u1ec9 IP 192.168.1.10<\/code>. C\u00e1c thi\u1ebft b\u1ecb trong m\u1ea1ng con c\u00f3 th\u1ec3 g\u1eedi y\u00eau c\u1ea7u c\u1ee7a ch\u00fang \u0111\u1ebfn proxy n\u00e0y, sau \u0111\u00f3 proxy n\u00e0y c\u00f3 th\u1ec3 chuy\u1ec3n ti\u1ebfp ch\u00fang \u0111\u1ebfn c\u00e1c m\u00e1y ch\u1ee7 b\u00ean ngo\u00e0i.<\/p>\n<\/li>\n

      3. \n

        L\u01b0u l\u01b0\u1ee3ng giao th\u00f4ng:<\/strong> Khi m\u1ed9t thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng (v\u00ed d\u1ee5, 192.168.1.50<\/code>) mu\u1ed1n truy c\u1eadp v\u00e0o m\u1ed9t t\u00e0i nguy\u00ean web, n\u00f3 s\u1ebd g\u1eedi m\u1ed9t y\u00eau c\u1ea7u \u0111\u1ebfn proxy (192.168.1.10<\/code>). Proxy \u0111\u00e1nh gi\u00e1 y\u00eau c\u1ea7u, \u00e1p d\u1ee5ng b\u1ea5t k\u1ef3 ch\u00ednh s\u00e1ch n\u00e0o (nh\u01b0 l\u01b0u tr\u1eef \u0111\u1ec7m ho\u1eb7c l\u1ecdc) v\u00e0 chuy\u1ec3n ti\u1ebfp y\u00eau c\u1ea7u \u0111\u00f3 \u0111\u1ebfn m\u00e1y ch\u1ee7 m\u1ee5c ti\u00eau b\u00ean ngo\u00e0i m\u1ea1ng con. Ph\u1ea3n h\u1ed3i t\u1eeb m\u00e1y ch\u1ee7 m\u1ee5c ti\u00eau s\u1ebd \u0111\u01b0\u1ee3c g\u1eedi l\u1ea1i cho proxy, sau \u0111\u00f3 proxy s\u1ebd chuy\u1ec3n \u0111\u1ebfn thi\u1ebft b\u1ecb kh\u00e1ch h\u00e0ng.<\/p>\n<\/li>\n<\/ol>\n

        Ph\u1ea7n k\u1ebft lu\u1eadn<\/h3>\n

        Hi\u1ec3u v\u1ec1 m\u1ea1ng con l\u00e0 r\u1ea5t quan tr\u1ecdng \u0111\u1ec3 qu\u1ea3n l\u00fd m\u1ea1ng proxy hi\u1ec7u qu\u1ea3. B\u1eb1ng c\u00e1ch t\u1eadn d\u1ee5ng m\u1ea1ng con, qu\u1ea3n tr\u1ecb vi\u00ean m\u1ea1ng c\u00f3 th\u1ec3 t\u0103ng c\u01b0\u1eddng qu\u1ea3n l\u00fd l\u01b0u l\u01b0\u1ee3ng, b\u1ea3o m\u1eadt v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp, cu\u1ed1i c\u00f9ng d\u1eabn \u0111\u1ebfn ki\u1ebfn tr\u00fac m\u1ea1ng m\u1ea1nh m\u1ebd h\u01a1n.<\/p>","protected":false},"excerpt":{"rendered":"

        Technical Breakdown of Subnet in the Context of Proxy Networks What is a Subnet? At a technical level, a subnet (short for subnetwork) is a segmented piece of a larger network. It allows for efficient management of IP addresses by dividing a larger network into smaller, manageable sections. Subnetting is critical for optimizing routing and […]<\/p>\n","protected":false},"author":1,"featured_media":391,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17],"tags":[29,18,22,23,31,33,19,32,30,28],"class_list":["post-390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-network","tag-cidr","tag-ip-address","tag-ipv4","tag-ipv6","tag-network-design","tag-network-security","tag-networking","tag-routing","tag-subnet-mask","tag-subnetting"],"acf":[],"_links":{"self":[{"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/posts\/390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/comments?post=390"}],"version-history":[{"count":0,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/posts\/390\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/media\/391"}],"wp:attachment":[{"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/media?parent=390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/categories?post=390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/replicounts.org\/vi\/wp-json\/wp\/v2\/tags?post=390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}