3proxy hoʻonohonoho ma CentOS / ArchLinux

Ma kēia ʻatikala e hōʻike mākou i ka hoʻonohonoho 3proxy ma kahi kikowaena i hoʻolaʻa ʻia e ka ʻōnaehana hana ArchLinux/CentOS. ʻO 3proxy kekahi o nā mea hana pono a me ka hana. Kākoʻo ia i nā ʻano protocols like ʻole: HTTP, HTTPS, FTP, SOCKS, a me nā mea ʻē aʻe. E kōkua iā ʻoe e hoʻonohonoho i kāu kikowaena proxy ma kahi mau minuke.

Aia i loko o ka ʻatikala nā alakaʻi ʻanuʻu e pili ana i ka hoʻonohonoho ʻana o ka pono hana a me kāna hoʻonohonoho hou aʻe. Ua noʻonoʻo ʻia nā pilikia e like me ka hoʻonohonoho ʻana mai kahi kumu kūhelu, ka hoʻonohonoho ʻana i nā faila hoʻonohonoho, ka wehe ʻana i nā awa maʻamau ʻole, a me nā hewa maʻamau i wehewehe ʻia a hāʻawi ʻia nā ʻōlelo aʻoaʻo kūpono no ka hoʻoponopono ʻana iā lākou. Ma mua o ka hoʻomaka ʻana, pono ʻoe e kauoha i kahi VPS a i ʻole kikowaena i hoʻolaʻa ʻia e ka ʻōnaehana hana CentOS a i ʻole ArchLinux. E hana ʻia nā hana āpau ma ka laʻana ma kahi kikowaena i hoʻolaʻa ʻia e ka ʻōnaehana hana CentOS7 me hoʻokahi helu wahi IP lehulehu i hoʻolaʻa ʻia.

mea hoʻonoho

'anuʻu 1

Hoʻokomo pololei ʻia ʻo 3proxy mai nā kumu. e hoʻohana ʻia ʻo gcc ma ke ʻano he mea hōʻuluʻulu. Hoʻopili mākou i ke kikowaena ma ke ʻano he aʻa (superuser) a hoʻokomo i ka mea hōʻuluʻulu.

yum install gcc

'anuʻu 2

I kēia manawa, pono e hoʻoiho i nā faila kumu 3proxy. Hiki iā ʻoe ke hana i kēia ma ka hele ʻana i ka pūnaewele kūhelu a kope i ka loulou i ka mana o kēia manawa:

Inā pono kahi mana i waiho ʻia, hiki iā ʻoe ke hoʻoiho pololei i ka loulou mai GitHub :

I ka manawa e kākau ai i kēia ʻatikala, ʻo 0.9.3 ka mana o kēia manawa. Hoʻoiho a wehe koke iā ia:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

'anuʻu 3

E hele i ka papa kuhikuhi me ka papahana unpacked a hōʻuluʻulu:

cd 3proxy-0.9.3/
make -f Makefile.Linux

'anuʻu 4

Hana mākou i nā papa kuhikuhi a kope i ka faila 3proxy i /usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

'anuʻu 5

Hoʻokumu mākou i kahi mea hoʻohana e hana me ka papa inoa. I kēia hihia, ʻo ka inoa inoa ʻo 3proxyuser:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

Hāʻawi mākou i nā kuleana e hana me nā papa kuhikuhi i ka mea hoʻohana i hana ʻia:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

I kēia manawa e hana mākou i kahi faila hoʻonohonoho me ke kauoha:

touch /etc/3proxy/3proxy.cfg

Inā pono, hiki iā ʻoe ke hoʻonohonoho i nā ʻae ma ka faila hoʻonohonoho no ka mea hoʻohana kumu. ʻAʻole koi ʻia kēia hana, akā e hoʻohui i ka palekana:

chmod 600 /etc/3proxy/3proxy.cfg

3 hoʻonohonoho proxy

'anuʻu 6

Pono e hoʻopiha pono i ka faila hoʻonohonoho i hana ʻia ma mua. ʻO ka mua, e ʻike i ka uid a me gid o ka mea hoʻohana ma ke kauoha:

id 3proxyuser

I kā mākou hihia, eia nā waiwai penei:

No ka hoʻopiha ʻana i ka faila hoʻonohonoho, hiki iā ʻoe ke lawe i nā hoʻonohonoho i hana mua ʻia a i ʻole e hoʻohana i nā palapala ma ka pūnaewele kūhelu. Eia kekahi, ua hoʻokomo mua ʻia kahi faila me kahi laʻana ma ka paʻamau; hiki iā ʻoe ke loaʻa ma ke ala: /cfg/3proxy.cfg.sample

Eia kekahi laʻana, e noʻonoʻo mākou i 2 mau ʻano hoʻonohonoho: me ka hoʻopaʻa inoa ʻana a me ka ʻole o ka hoʻopaʻa inoa ʻana . E hele pū ʻia kēlā me kēia laina me nā manaʻo (ua hōʻailona ʻia lākou me ka hōʻailona "#").

Eia kahi laʻana o kahi hoʻonohonoho i hana mua ʻia me ka ʻole o ka hoʻopaʻa inoa ʻana :

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

Ua noʻonoʻo mākou i ke koho o kahi faila hoʻonohonoho me ka ʻole o ka hoʻopaʻa inoa ʻana. I kēia manawa e hana mākou i kahi faila hoʻonohonoho me ka hoʻopaʻa inoa ʻana a me ka ʻae ʻana o ka mea hoʻohana ; e hoʻohana ʻia ia ma hope i ka wā o ka hoʻonohonoho ʻana o ke kikowaena.

E hōʻoia i kāu hāʻawi ʻana i ka ʻike ʻae, no ka mea, hiki ke ʻike ʻia ke kikowaena ʻoiai ma nā awa maʻamau ʻole.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Hoʻopau kēia i ka hoʻonohonoho o ka faila hoʻonohonoho nui. Hele mākou i ka pae hope a hoʻomaka.

'anuʻu 7

E hana i kahi faila hoʻomaka no systemd:

touch /etc/systemd/system/3proxy.service

E hoʻopuka i nā pono kūpono:

chmod 664 /etc/systemd/system/3proxy.service

E kope a paʻi i kēia mau waiwai i loko o ka faila a mālama:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

E ʻoluʻolu e hoʻomaopopo: ma ka waiwai "ExecStop" pono ʻoe e kuhikuhi i ka inoa inoa i hana ʻia ma ka hana No. 5.

A laila pono ʻoe e hoʻonui i ka hoʻonohonoho Daemon me ke kauoha:

systemctl daemon-reload

'anuʻu 8

ʻO ka mea wale nō e pono ai mākou e hoʻomaka i ka 3proxy i hoʻonohonoho ʻia, hoʻohui iā ia i autostart, a wehe pū i nā awa i ka pā ahi.

Hoʻohui iā ia i autostart, hoʻomaka a nānā i ke kūlana:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

Ma hope o ka nānā ʻana i ke kūlana, ʻike mākou i ka ʻike ua hoʻomaka maikaʻi ʻia ʻo 3proxy:

ʻO ka mea wale nō i koe e wehe i nā awa:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Inā pono, e hoʻomaka hou i ke kikowaena. Hiki ke nānā inā wehe ʻia nā awa me ke kauoha:

firewall-cmd --list-all

He aha ka mea e pono ai:

E like me kā mākou e ʻike ai, ua wehe maikaʻi ʻia nā awa ʻelua a ke hoʻolohe ʻia nei. Aia ka pilina http ma ke awa mua, aia nā pūkini ma ke awa ʻelua.

E nānā i ka pilina ma o kekahi lawelawe kūpono:

Ke holo nei nā mea a pau. No mākou, ʻaʻole mākou e paipai i ka hoʻohana ʻana i kahi pilina palekana ʻole me ka ʻole o ka ʻae ʻana i ka inoa komo/ʻōlelo huna, a me kahi hoʻonohonoho maʻamau o nā awa . I ka wā e hoʻonohonoho ai i ka faila hoʻonohonoho, e hōʻoia e kuhikuhi i kahi inoa komo a hana i kahi ʻōlelo huna paʻakikī, a hoʻololi pū i nā awa i nā mea maʻamau ʻole . I nā hihia kūikawā, hiki ke hoʻohana i ka ʻae ʻana i ka helu wahi IP.

Nā pilikia maʻamau

Ua hewa kekahi a ʻaʻole hana ka mea koho? Ua hewa paha ka hoʻonohonoho 3proxy. E noʻonoʻo kākou i nā pilikia maʻamau a me kā lākou hoʻonā i ka wā e hoʻokomo a hoʻonohonoho i ka pono.

ʻAʻohe pili

ʻO ka pilikia maʻamau no ka nui o nā mea hoʻohana he pilina hiki ʻole ke ʻike ʻia ke hoʻonohonoho pono ʻia nā faila hoʻonohonoho. Inā maopopo iā ʻoe ua hoʻonohonoho pono ʻia nā hoʻonohonoho āpau, ʻaʻole i kaupalena ka mea hoʻolako kikowaena i ke awa i koho ʻia a hōʻike nā ʻikepili āpau i kahi lawelawe hana, aia paha ka pilikia ma ka Firewall, a i ʻole, ʻoi aku ka pololei o kāna hoʻonohonoho hewa. No ka laʻana, ʻoi aku paha ma mua o ʻelua mau polokalamu i hoʻokomo ʻia ma ka ʻōnaehana e hakakā kekahi me kekahi. No ka hoʻoponopono ʻana i ka pilikia, ua lawa ka hoʻohana ʻana i hoʻokahi Firewall kikoʻī. Paipai mākou iā ʻoe e koho i nā iptables a i ʻole firewall-cmd.

ʻAʻole hoʻomaka ka lawelawe

ʻAʻole hoʻomaka ka lawelawe ma hope o ka hoʻonohonoho ʻana i nā faila hoʻonohonoho āpau e pono ai. Hana ʻia kēia ke hala ʻole kahi ʻanuʻu hoʻonohonoho, ʻaʻole i hāʻawi ʻia nā kuleana kūpono, a i ʻole ua hana ʻia kahi hewa liʻiliʻi i nā faila hoʻonohonoho. Paipai mākou iā ʻoe e aʻo pono i nā kuhikuhi i kēlā me kēia ʻanuʻu, malia paha ua hala ʻoe i kekahi o nā ʻanuʻu. Inā ʻaʻohe mea e kōkua, he manaʻo maikaʻi e hoʻouka hou i ka OS a hahai i nā ʻanuʻu āpau mai ka hoʻomaka. Paipai mākou e hoʻohana i ka laʻana i loaʻa ma /cfg/3proxy.cfg.sample, ma ke ʻano he hoʻonohonoho hoʻāʻo, a me ka firewall-cmd i hoʻokomo mua ʻia ma ke ʻano he firewall.

kālai lāʻauʻana

ʻO ka hopena hope, akā ʻaʻole i emi iki ka mea nui e pili ana i ka mālama faila. Lawe ʻo 3proxy i mau mb i ka wā o ka hoʻokomo ʻana, akā hiki ke hoʻonui nui ʻia ka nui ma o ka hoʻopaʻa inoa ʻana me ka hala ʻana o ka manawa. ʻO ka mea ʻoiaʻiʻo, hiki i nā mea hoʻohana he nui ke hoʻopaʻa log i kahi faila ʻokoʻa, akā ʻaʻole e hoʻonohonoho i ka rotation a ʻaʻole e holoi i nā lāʻau pili ʻole. Hiki ke hoʻohana ʻia ʻekolu mau koho no ka hoʻoponopono ʻana i kēia pilikia:

1. Hiki ke hoʻopaʻa inoa;
2. Holoi i kēlā me kēia manawa i nā moʻolelo pili ʻole;
3. E ʻae i ka hoʻololi ʻana, e like me ka hana ʻana ma ka hoʻonohonoho ma luna. No ka laʻana, "hoʻololi 30" i ka faila hoʻonohonoho ʻo ia ka mea e mālama ʻo 3proxy i nā faila 30 hou loa.

Panina

ʻO ka hoʻonohonoho ʻana a me ka hoʻonohonoho ʻana i ka 3proxy ma CentOS a me nā ʻōnaehana hana ArchLinux he maʻalahi maʻalahi, akā i ka manawa like ka hana kūpono. Ua uhi ka ʻatikala i nā ʻanuʻu e hoʻokomo i nā pūʻolo pono, hoʻonohonoho i nā faila hoʻonohonoho, a hoʻomaka i ka lawelawe. ʻO ka ʻike i loaʻa e ʻae iā ʻoe e hoʻokomo a hoʻonohonoho i kāu kikowaena proxy iā ʻoe iho me ka pilikia ʻole.