3whirihoranga takawaenga i runga i te CentOS/ArchLinux

I roto i tenei tuhinga ka whakaatu matou i te whirihoranga 3proxy i runga i te tūmau i whakatapua e te punaha whakahaere ArchLinux/CentOS. Ko te 3proxy tetahi o nga taputapu tino whaitake me te mahi. Ka tautokohia nga momo kawa: HTTP, HTTPS, FTP, SOCKS, me etahi atu. Ka awhina koe ki te whakarite i to ake tūmau takawaenga i roto i te meneti.

Kei roto i te tuhinga nga aratohu taahiraa-i-te-taahiraa mo te whakaurunga taputapu me tana whirihoranga ano. Ko nga take penei i te whakaurunga mai i tetahi puna mana, te whakarite i nga konae whirihoranga, te whakatuwhera i nga tauranga kore-paerewa ka whakaarohia, me nga hapa noa e whakaahuahia ana me nga tohutohu whaihua mo te whakaoti. I mua i te whakarewatanga, me tono he VPS or tūmau i whakatapua i whakakahangia e te punaha whakahaere CentOS, ArchLinux ranei. Ko nga mahi katoa i roto i te tauira ka mahia ki runga i te tūmau i whakatapua e te punaha whakahaere CentOS7 me tetahi wahitau IP tūmatanui i whakatapua.

tāutanga

1 Hipanga

Ko te 3proxy kua whakauruhia tika mai i nga puna. gcc ka whakamahia hei kaikohi. Ka hono atu matou ki te tūmau hei pakiaka (superuser) me te whakauru i te kohinga.

yum install gcc

2 Hipanga

Inaianei me tango nga konae puna 3proxy. Ka taea e koe tenei ma te haere ki te paetukutuku mōhiohio me te tārua i te hono ki te putanga o nāianei:

Mena ka hiahiatia he putanga putunga, ka taea ano e koe te tango i te hono mai i GitHub:

I te wa i tuhia ai tenei tuhinga, ko te putanga o naianei ko 0.9.3. Tikiake ka wetewete tonu:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

3 Hipanga

Haere ki te whaiaronga me te kaupapa kua wetewetehia ka whakahiato:

cd 3proxy-0.9.3/
make -f Makefile.Linux

4 Hipanga

Ka waihangahia e matou he whaiaronga ka kape i te konae 3proxy ki /usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

5 Hipanga

Ka hangaia e matou he kaiwhakamahi ki te mahi me te putumōhio. I tenei take ko te ingoa kaiwhakamahi 3kaiwhakamahi takawaenga:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

Ka whakawhiwhia e matou nga motika ki te mahi me nga raarangi whaiaronga ki te kaiwhakamahi i hanga:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

Inaianei me hanga he konae whirihoranga ma te whakamahi i te whakahau:

touch /etc/3proxy/3proxy.cfg

Mena e tika ana, ka taea e koe te whakarite whakaaetanga ki te konae whirihoranga mo te kaiwhakamahi pakiaka. Ehara tenei taahiraa i te here, engari ka taapiri atu he whakamarumaru:

chmod 600 /etc/3proxy/3proxy.cfg

3whirihoranga takawaenga

6 Hipanga

He mea tika kia whakakiia te konae whirihoranga i hangaia i mua. Tuatahi, kimihia te uid me te gid o te kaiwhakamahi ma te whakahau:

id 3proxyuser

I roto i to maatau, ko enei nga uara e whai ake nei:

Hei whakaki i te konae whirihoranga, ka taea e koe te tango i nga whirihoranga kua oti te hanga, te whakamahi ranei i te tuhinga i runga i te paetukutuku mana. He konae me tetahi tauira kua oti kee te whakauru ma te taunoa; ka kitea e koe i te huarahi: /cfg/3proxy.cfg.sample

Hei tauira, ka whakaarohia e 2 nga momo whirihoranga: me te kore takiuru. Ko ia rarangi ka haere tahi me nga korero (kua tohua ki te tohu "#").

He tauira tenei mo te whirihora kua rite kahore he takiuru:

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

I whakaarohia e matou te whiringa o te konae whirihoranga me te kore e takiuru. Inaianei ka hangaia e matou he konae whirihoranga me takiuru me te whakamanatanga kaiwhakamahi; ka whakamahia i muri mai i te wa o te tatūnga tūmau.

Me mohio kei te whakarato koe i nga korero whakamana, i te mea ka kitea te tūmau ahakoa i runga i nga tauranga kore-paerewa.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Ka whakaoti tenei i te tatūnga o te kōnae whirihoranga matua. Ka neke atu ki te waahi whakamutunga ka whakarewahia.

7 Hipanga

Waihangatia he kōnae arawhiti mo systemd:

touch /etc/systemd/system/3proxy.service

Tukuna nga motika e tika ana:

chmod 664 /etc/systemd/system/3proxy.service

Tāruatia ka whakapiri i nga uara e whai ake nei ki te konae ka tiakina:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

Me mōhio: i roto i te uara "ExecStop" me tohu e koe te ingoa kaiwhakamahi i hangaia i te taahiraa Nama 5.

Whai muri ka hiahia koe ki te whakahou i te whirihoranga Daemon me te whakahau:

systemctl daemon-reload

8 Hipanga

Ko te mea anake e hiahia ana matou ko te whakarewa i te 3proxy kua whirihorahia, ka taapiri atu ki te autostart, me te whakatuwhera i nga tauranga i te papaahi.

Tāpirihia ki te tiimata aunoa, whakarewa me te tirotiro i te mana:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

I muri i te tirotiro i te mana, ka kite matou i nga korero kua whakarewahia te 3proxy:

Ko te mea e toe ana ko te whakatuwhera i nga tauranga:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Ki te tika, whakaara ano i te tūmau. Ka taea te tirotiro mena kei te tuwhera nga tauranga ma te whakahau:

firewall-cmd --list-all

Me aha:

Kei te kite tatou, kua pai te whakatuwhera i nga tauranga e rua, kei te whakarongohia. Ko te hononga http kei te tauranga tuatahi, ko nga toka kei te tauranga tuarua.

Tirohia te hononga ma tetahi ratonga watea:

Kei te mahi nga mea katoa. Mo tatou, Kaore matou e kii ki te whakamahi i tetahi hononga haumaru me te kore e uru ki te whakauru / kupuhipa, me te huinga paerewa o nga tauranga. I a koe e whakarite ana i te konae whirihora, kia mohio koe ki te tautuhi i te takiuru me te hanga i tetahi kupuhipa matatini, me te huri ano i nga tauranga ki nga mea kore-paerewa. I roto i nga take motuhake, ka taea te whakamahi i te whakamanatanga IP IP

Nga raru noa

I raru tetahi, karekau te takawaenga i te mahi? I hē pea te whirihoranga 3proxy. Kia whai whakaaro tatou ki nga raru tino noa me o raatau otinga i te wa e whakauru ana me te whirihora i te taputapu.

Kaore he hononga

Ko te raru nui mo te maha o nga kaiwhakamahi he hononga e kore e taea te uru i te wa e ahua tika ana nga konae whirihora. Mena ka tino mohio koe kua whirihora tika nga tautuhinga katoa, kaore te kaiwhakarato manaaki e whakawhäiti i te tauranga kua tohua, ka tohuhia e nga raraunga katoa he ratonga mahi, kei roto pea te raruraru i roto i te Patuahi, he mea tika ranei, ko tana whirihoranga he. Hei tauira, neke atu i te rua nga papatono kua whakauruhia ki te punaha ka taupatupatu tetahi ki tetahi. Hei whakatau i te raru, he nui noa te whakamahi i tetahi Paahiahi motuhake. Ka tohutohu koe ki a koe me kowhiri i nga iptables me te papangaahi-cmd anake.

Kaore te ratonga e whakarewahia

Kaore te ratonga e timata i muri i te whakaturanga i nga konae whirihoranga e tika ana. Ka puta tenei ina ngaro tetahi taahiraa whirihoranga, kaore i te hoatu nga motika e tika ana, he hapa iti ranei i roto i nga konae whirihoranga. Ka tūtohu koe kia ata ako ano koe i nga tohutohu, tera pea i ngaro koe i tetahi o nga taahiraa. Mena kaore he awhina, he pai ki te whakauru ano i te OS me te whai i nga mahi katoa mai i te timatanga. Ka tūtohu mātou ki te whakamahi tauira kei /cfg/3proxy.cfg.sample, hei whirihoranga whakamatautau, me te mea kua oti te whakauru pātūahi-cmd hei pātūahi.

Te takiuru

Ko te take whakamutunga, engari ko te take nui rawa atu e pa ana ki te rokiroki konae. He maha nga mb te roa o te 3proxy i te wa o te whakaurunga, engari ka taea te whakanui i te rahi ma te takiuru me te haere o te waa. Ko te meka he maha nga kaiwhakamahi ka taea te tuhi i te raarangi ki roto i tetahi konae motuhake, engari kaua e whakarite i te hurihanga me te kore e whakakore i nga raarangi koretake. E toru nga whiringa ka taea te whakamahi mo tenei raru:

1. Whakahohe te takiuru;
2. Me whakakore i ia wa nga rangitaki koretake;
3. Whakahohehia te hurihanga, pera i te whirihoranga i runga ake nei. Hei tauira, "hurihia te 30" i roto i te konae whirihoranga ko te tikanga ka penapenahia e 3proxy nga konae 30 hou.

Opaniraa

Ko te whakauru me te whirihora i te 3proxy i runga i nga punaha whakahaere CentOS me ArchLinux he tino ngawari, engari i te wa ano he mahi whai hua. I hipokina e te tuhinga nga huarahi ki te whakauru i nga kohinga e tika ana, te whirihora i nga konae whirihoranga, me te whakarewa i te ratonga. Ma te mohiotanga ka taea e koe te whakauru me te whirihora i to tuunga takawaenga me te kore he uaua.