代理安全注意事项

🌐 Proxy security considerations

内置代理支持通过 HTTP(S) 代理路由出站请求，通常是因为防火墙要求使用代理才能访问外部网络。这不是一个匿名或隐藏流量的功能，也不会试图对代理、本地网络、网络运营商或管理部署的相关机构隐藏流量。

🌐 Built-in proxy support routes outbound requests through an HTTP(S) proxy, often because a firewall requires one to access external networks. It is not an anonymity or traffic-hiding feature and does not attempt to hide traffic from the proxy, the local network, network operators, or authorities that govern the deployment.

只配置那些在部署中被信任和授权的代理。代理可以查看连接的元数据；对于普通的 HTTP 请求，或者当 TLS 在代理处终止或被拦截时，它也可以查看请求和响应的内容。Node.js 不支持将不受信任的代理当作隐私边界。部署操作人员需要负责控制代理配置，并满足特定部署的网络策略和法律要求。

🌐 Configure only proxies that are trusted and authorized for the deployment. A proxy can observe connection metadata; for plain HTTP requests, or when TLS is terminated or intercepted by the proxy, it can also observe request and response contents. Node.js does not support treating an untrusted proxy as a privacy boundary. Deployment operators are responsible for controlling proxy configuration and for meeting deployment-specific network policy and legal requirements.