Ma kēia ʻatikala e hōʻike mākou i ka hoʻonohonoho 3proxy ma kahi kikowaena i hoʻolaʻa ʻia e ka ʻōnaehana hana ArchLinux/CentOS. ʻO 3proxy kekahi o nā mea hana pono a me ka hana. Kākoʻo ia i nā ʻano protocols like ʻole: HTTP, HTTPS, FTP, SOCKS, a me nā mea ʻē aʻe. E kōkua iā ʻoe e hoʻonohonoho i kāu kikowaena proxy ma kahi mau minuke.
Aia ka ʻatikala i ke alakaʻi i kēlā me kēia ʻanuʻu i ka hoʻonohonoho pono a me kāna hoʻonohonoho hou. ʻO nā pilikia e like me ka hoʻokomo ʻana mai kahi kumu mana, ka hoʻonohonoho ʻana i nā faila hoʻonohonoho, ka wehe ʻana i nā awa maʻamau ʻole e noʻonoʻo ʻia, me ka wehewehe ʻana i nā hewa maʻamau a hāʻawi ʻia nā ʻōlelo aʻoaʻo kūpono no ka hoʻoponopono ʻana iā lākou. Ma mua o ka hoʻomaka ʻana, pono ʻoe e kauoha i kahi VPS or server hoʻolaha hoʻohana ʻia e ka CentOS a i ʻole ArchLinux ʻōnaehana hana. E hana ʻia nā hana a pau ma ka laʻana ma kahi kikowaena i hoʻolaʻa ʻia e ka ʻōnaehana hana CentOS7 me hoʻokahi helu IP ākea ākea.
mea hoʻonoho
'anuʻu 1
Hoʻokomo pololei ʻia ʻo 3proxy mai nā kumu. gc e hoʻohana ʻia e like me ka mea hoʻopili. Hoʻopili mākou i ke kikowaena ma ke ʻano he kumu (superuser) a hoʻokomo i ka compiler.
yum install gcc'anuʻu 2
I kēia manawa pono e hoʻoiho i nā faila kumu 3proxy. Hiki iā ʻoe ke hana i kēia ma ka hele ʻana i ka oihana kahua a e kope ana i ka loulou i ka mana o kēia manawa:
Inā makemake ʻia kahi mana waihona, hiki iā ʻoe ke hoʻoiho pololei i ka loulou mai GitHub:
I ka manawa e kākau ai i kēia ʻatikala, ʻo 0.9.3 ka mana o kēia manawa. Hoʻoiho a wehe koke iā ia:
wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz'anuʻu 3
E hele i ka papa kuhikuhi me ka papahana unpacked a hōʻuluʻulu:
cd 3proxy-0.9.3/
make -f Makefile.Linux
'anuʻu 4
Hana mākou i nā papa kuhikuhi a kope i ka faila 3proxy i /usr/bin:
mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/
'anuʻu 5
Hoʻokumu mākou i mea hoʻohana e hana me ka papa inoa. I kēia hihia, ʻo ka mea hoʻohana 3 mea hoʻohana proxy:
useradd -s /usr/sbin/nologin -U -M -r 3proxyuserHāʻawi mākou i nā kuleana e hana me nā papa kuhikuhi i ka mea hoʻohana i hana ʻia:
chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy
I kēia manawa e hana mākou i kahi faila hoʻonohonoho me ke kauoha:
touch /etc/3proxy/3proxy.cfgInā pono, hiki iā ʻoe ke hoʻonohonoho i nā ʻae i ka faila hoʻonohonoho no ka mea hoʻohana kumu. ʻAʻole pono kēia hana, akā e hoʻohui i ka pale:
chmod 600 /etc/3proxy/3proxy.cfg3 hoʻonohonoho proxy
'anuʻu 6
Pono e hoʻopiha pono i ka faila hoʻonohonoho i hana ʻia ma mua. ʻO ka mua, e ʻike i ka uid a me gid o ka mea hoʻohana ma ke kauoha:
id 3proxyuserI kā mākou hihia, eia nā waiwai penei:
No ka hoʻopiha ʻana i ka faila hoʻonohonoho, hiki iā ʻoe ke lawe i nā hoʻonohonoho i mākaukau a hoʻohana paha i ka palapala kuhikuhi ma ka punaewele oihana. Ua hoʻokomo mua ʻia kahi faila me kahi laʻana e ka paʻamau; hiki iā ʻoe ke loaʻa iā ia ma ke ala: /cfg/3proxy.cfg.sample
No ka laʻana, e noʻonoʻo mākou i 2 mau ʻano o ka hoʻonohonoho: me ka hoʻopaʻa inoa ʻole. E hui pū ʻia kēlā me kēia laina me nā manaʻo (ua kaha ʻia lākou me ka hōʻailona "#").
He laʻana kēia o kahi hoʻonohonoho i hoʻomākaukau ʻia me ke kālai ʻole:
# We specify the user's data that we found out in the previous command
setgid 995
setuid 997
# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8
# Cache size
nscache 65536
# Timeouts
timeouts 1 5 30 60 180 1800 15 60
# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile
# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "
# Launch mode. Daemon only.
Daemon
# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128
socks -p1080
Ua noʻonoʻo mākou i ke koho o kahi faila hoʻonohonoho me ka ʻole o ka logging. I kēia manawa e hana mākou i kahi faila hoʻonohonoho me hoʻopaʻa inoa a me ka mana mea hoʻohana; e hoʻohana ʻia ma hope i ka wā o ka hoʻonohonoho kikowaena.
E hōʻoia e hāʻawi ʻoe i ka ʻike ʻae, no ka mea hiki ke ʻike ʻia ke kikowaena ma nā awa maʻamau ʻole.
# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy
# Specify the user's uid and gid
setgid 995
setuid 997
# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8
# Timeouts
timeouts 1 5 30 60 180 1800 15 60
# Cache size (standard)
nscache 65536
# Indicate the launch mode
daemon
# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001
# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002
# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30
Hoʻopau kēia i ka hoʻonohonoho o ka faila hoʻonohonoho nui. Hele mākou i ka pae hope a hoʻomaka.
'anuʻu 7
E hana i kahi faila hoʻomaka no systemd:
touch /etc/systemd/system/3proxy.serviceE hoʻopuka i nā pono kūpono:
chmod 664 /etc/systemd/system/3proxy.serviceE kope a paʻi i kēia mau waiwai i loko o ka faila a mālama:
[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»Please e hoailona oukou: i ka waiwai "ExecStop" pono ʻoe e kuhikuhi i ka inoa inoa i hana ʻia ma ka ʻanuʻu No. 5.
A laila pono ʻoe e hoʻonui i ka hoʻonohonoho Daemon me ke kauoha:
systemctl daemon-reload'anuʻu 8
ʻO ka mea wale nō e pono ai mākou e hoʻomaka i ka 3proxy i hoʻonohonoho ʻia, hoʻohui iā ia i autostart, a wehe pū i nā awa i ka pā ahi.
Hoʻohui iā ia i autostart, hoʻomaka a nānā i ke kūlana:
systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxyMa hope o ka nānā ʻana i ke kūlana, ʻike mākou i ka ʻike ua hoʻomaka maikaʻi ʻia ʻo 3proxy:
ʻO ka mea wale nō i koe e wehe i nā awa:
firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reloadInā pono, e hoʻomaka hou i ke kikowaena. Hiki ke nānā inā wehe ʻia nā awa me ke kauoha:
firewall-cmd --list-allHe aha ka mea e pono ai:
E like me kā mākou e ʻike ai, ua wehe maikaʻi ʻia nā awa ʻelua a ke hoʻolohe ʻia nei. Aia ka pilina http ma ke awa mua, aia nā pūkini ma ke awa ʻelua.
E nānā i ka pilina ma o kekahi lawelawe kūpono:
Ke hana nei nā mea a pau. No ko makou aoao, ʻAʻole mākou e paipai i ka hoʻohana ʻana i kahi pilina paʻa ʻole me ka ʻole o ka ʻae ʻana a me ka ʻae ʻana i ka ʻōlelo huna, a me kahi hoʻonohonoho maʻamau o nā awa.. I ka hoʻonohonoho ʻana i ka faila hoʻonohonoho, e hōʻoia i ka hoʻopaʻa inoa a hana i kahi ʻōlelo huna paʻakikī, a hoʻololi pū i nā awa i nā mea maʻamau ʻole. I nā hihia kūikawā, hiki ke hoʻohana i ka mana IP address
Nā pilikia maʻamau
Ua hewa kekahi a ʻaʻole hana ka mea koho? Ua hewa paha ka hoʻonohonoho 3proxy. E noʻonoʻo kākou i nā pilikia maʻamau a me kā lākou hoʻonā i ka wā e hoʻokomo a hoʻonohonoho i ka pono.
ʻAʻohe pili
ʻO ka pilikia maʻamau no ka nui o nā mea hoʻohana he pilina hiki ʻole ke ʻike ʻia ke hoʻonohonoho pono ʻia nā faila hoʻonohonoho. Inā maopopo iā ʻoe ua hoʻonohonoho pono ʻia nā hoʻonohonoho āpau, ʻaʻole i kaupalena ka mea hoʻolako kikowaena i ke awa i koho ʻia a hōʻike nā ʻikepili āpau i kahi lawelawe hana, aia paha ka pilikia ma ka Firewall, a i ʻole, ʻoi aku ka pololei o kāna hoʻonohonoho hewa. No ka laʻana, ʻoi aku paha ma mua o ʻelua mau polokalamu i hoʻokomo ʻia ma ka ʻōnaehana e hakakā kekahi me kekahi. No ka hoʻoponopono ʻana i ka pilikia, ua lawa ka hoʻohana ʻana i hoʻokahi Firewall kikoʻī. Paipai mākou iā ʻoe e koho i nā iptables a i ʻole firewall-cmd.
ʻAʻole hoʻomaka ka lawelawe
ʻAʻole hoʻomaka ka lawelawe ma hope o ka hoʻonohonoho ʻana i nā faila hoʻonohonoho pono. Hana ʻia kēia i ka wā i hala ʻole ai kahi hana hoʻonohonoho, ʻaʻole i hāʻawi ʻia nā kuleana kūpono, a i ʻole i hana ʻia kahi hapa liʻiliʻi i nā faila hoʻonohonoho. Paipai mākou iā ʻoe e noʻonoʻo pono i nā ʻōlelo aʻo i kēlā me kēia pae, malia paha ua hala ʻoe i kekahi o nā ʻanuʻu. Inā ʻaʻohe mea kōkua, he manaʻo maikaʻi e hoʻokomo hou i ka OS a hahai i nā ʻanuʻu āpau mai ka hoʻomaka. Paipai mākou e hoʻohana hāpana aia ma /cfg/3proxy.cfg.sample, ma ke ʻano he hoʻonohonoho hoʻāʻo, a me ka mea i kau mua ʻia. pā ahi-cmd ma ke ʻano he pā ahi.
kālai lāʻauʻana
ʻO ka hopena hope, akā ʻaʻole i emi iki ka mea nui e pili ana i ka mālama faila. Lawe ʻo 3proxy i mau mb i ka wā o ka hoʻokomo ʻana, akā hiki ke hoʻonui nui ʻia ka nui ma o ka hoʻopaʻa inoa ʻana me ka hala ʻana o ka manawa. ʻO ka mea ʻoiaʻiʻo, hiki i nā mea hoʻohana he nui ke hoʻopaʻa log i kahi faila ʻokoʻa, akā ʻaʻole e hoʻonohonoho i ka rotation a ʻaʻole e holoi i nā lāʻau pili ʻole. Hiki ke hoʻohana ʻia ʻekolu mau koho no ka hoʻoponopono ʻana i kēia pilikia:
- Hiki ke hoʻopaʻa inoa;
- Holoi i kēlā me kēia manawa i nā moʻolelo pili ʻole;
- E ʻae i ka hoʻololi ʻana, e like me ka hana ʻana ma ka hoʻonohonoho ma luna. No ka laʻana, "hoʻololi 30" i ka faila hoʻonohonoho ʻo ia ka mea e mālama ʻo 3proxy i nā faila 30 hou loa.
Panina
ʻO ka hoʻonohonoho ʻana a me ka hoʻonohonoho ʻana i ka 3proxy ma CentOS a me nā ʻōnaehana hana ArchLinux he maʻalahi maʻalahi, akā i ka manawa like ka hana kūpono. Ua uhi ka ʻatikala i nā ʻanuʻu e hoʻokomo i nā pūʻolo pono, hoʻonohonoho i nā faila hoʻonohonoho, a hoʻomaka i ka lawelawe. ʻO ka ʻike i loaʻa e ʻae iā ʻoe e hoʻokomo a hoʻonohonoho i kāu kikowaena proxy iā ʻoe iho me ka pilikia ʻole.
