Muchikamu chino ticharatidza 3proxy kumisikidzwa pane yakatsaurwa sevha inofambiswa neArchLinux/CentOS inoshanda sisitimu. 3proxy ndeimwe yeanonyanya kukosha uye anoshanda maturusi. Inotsigira marudzi akasiyana-siyana emaprotocol: HTTP, HTTPS, FTP, SOCKS, nezvimwe. Zvichakubatsira iwe kumisikidza yako wega proxy server mune imwe nyaya yemaminetsi.
Chinyorwa chine nhanho-ne-nhanho nhungamiro pane yekumisikidza utility uye nekumwe kugadziridzwa kwayo. Nyaya dzakadai sekuisa kubva kune yepamutemo sosi, kumisikidza mafaera ekugadzirisa, kuvhura zvisiri-standard zviteshi zvinotariswa, pamwe nezvikanganiso zvakajairika zvinotsanangurwa uye kurudziro inoshanda yekuzvigadzirisa inopihwa. Usati watanga, unofanira kuodha a VPS or dedicated server inofambiswa neCentOS kana ArchLinux inoshanda sisitimu. Zvese zviito mumuenzaniso zvichaitwa pane yakatsaurirwa sevha inofambiswa neCentOS7 sisitimu yekushandisa ine imwe yakatsaurirwa static yeruzhinji IP kero.
kugadzwa
Step 1
3proxy inoiswa zvakananga kubva kune zvinyorwa. gcc ichashandiswa semugadziri. Isu tinobatanidza kune sevha semudzi (superuser) uye kuisa compiler.
yum install gcc
Step 2
Zvino zvakakosha kurodha 3proxy source mafaira. Iwe unogona kuita izvi nekuenda kune pamutemo Website uye kukopa chinongedzo kune yazvino vhezheni:
Kana vhezheni yakachengetwa ichidikanwa, unogona zvakare kudhawunirodha chinongedzo kubva GitHub:
Panguva yekunyora chinyorwa ichi, shanduro yezvino ndeye 0.9.3. Dhaunirodha wobva waiburitsa pakarepo:
wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz
Step 3
Enda kune dhairekitori neiyo isina kurongedzerwa purojekiti uye nyora:
cd 3proxy-0.9.3/
make -f Makefile.Linux
Step 4
Isu tinogadzira madhairekitori uye tinokopa iyo 3proxy faira ku / usr/bin:
mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/
Step 5
Isu tinogadzira mushandisi kuti ashande nekabhuku. Muchiitiko ichi zita rekushandisa ndiro 3proxyuser:
useradd -s /usr/sbin/nologin -U -M -r 3proxyuser
Isu tinopa kodzero dzekushanda nemadhairekitori kune akagadzirwa mushandisi:
chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy
Zvino ngatigadzire faira rekugadzirisa tichishandisa murairo:
touch /etc/3proxy/3proxy.cfg
Kana zvichidikanwa, unogona kuseta mvumo pane yekumisikidza faira yemudzi mushandisi. Danho iri harisungirwe, asi ichawedzera dziviriro:
chmod 600 /etc/3proxy/3proxy.cfg
3 proxy kugadzirisa
Step 6
Izvo zvinodikanwa kuzadza nemazvo iyo faira yekumisikidza iyo yakagadzirwa kare. Kutanga, tsvaga iyo uid uye gid yemushandisi nemurairo:
id 3proxyuser
Muchiitiko chedu izvi ndizvo zvinotevera zvakakosha:
Kuzadza iyo faira yekumisikidza, unogona kutora akagadzirira-akagadzirwa masisitimu kana kushandisa iyo mapepa pane webhusaiti yepamutemo. Zvakare faira rine muenzaniso rakatomisikidzwa neyakagadzika; unogona kuzviwana munzira: /cfg/3proxy.cfg.sample
Semuenzaniso, isu tichatarisa 2 marudzi ekugadzirisa: ne uye pasina kutema matanda. Mutsara wega wega uchaperekedzwa nemacomments (iwo akaiswa chiratidzo che "#" .
Uyu muenzaniso weyakagadzirirwa-yakagadzirwa config pasina kutema matanda:
# We specify the user's data that we found out in the previous command
setgid 995
setuid 997
# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8
# Cache size
nscache 65536
# Timeouts
timeouts 1 5 30 60 180 1800 15 60
# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile
# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "
# Launch mode. Daemon only.
Daemon
# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128
socks -p1080
Isu takafunga nezve sarudzo yefaira yekumisikidza pasina kutema matanda. Iye zvino tichagadzira faira rekugadzirisa ne kutema miti uye mvumo yemushandisi; ichashandiswa gare gare panguva yekuseta server.
Ita shuwa kuti iwe unopa ruzivo rwemvumo, sezvo sevha inogona kuwonekwa kunyangwe pane isiri-standard ports.
# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy
# Specify the user's uid and gid
setgid 995
setuid 997
# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8
# Timeouts
timeouts 1 5 30 60 180 1800 15 60
# Cache size (standard)
nscache 65536
# Indicate the launch mode
daemon
# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001
# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002
# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30
Izvi zvinopedzisa kuseta kweiyo main configuration file. Isu tinoenda kune yekupedzisira nhanho uye kutanga.
Step 7
Gadzira faira yekutanga ye systemd:
touch /etc/systemd/system/3proxy.service
Kupa kodzero dzinodiwa:
chmod 664 /etc/systemd/system/3proxy.service
Kopa uye unamate zvinotevera zvakakosha mufaira uye chengeta:
[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»
Tapota cherechedza: mu "ExecStop" kukosha iwe unofanirwa kutsanangura zita rekushandisa rakagadzirwa munhanho Nha.
Mushure meizvozvo iwe unofanirwa kugadzirisa iyo Daemon kumisikidzwa nemurairo:
systemctl daemon-reload
Step 8
Isu chete chatinoda kuvhura iyo yakagadziriswa 3proxy, wedzera kune autostart, uye zvakare kuvhura madoko mufirewall.
Iwedzere kune autostart, tanga uye tarisa mamiriro:
systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy
Mushure mekutarisa chimiro, tinoona ruzivo rwekuti 3proxy yakatangwa zvinobudirira:
Chinhu chega chasara kuvhura ports:
firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload
Kana zvichidikanwa, reboot server. Zvinokwanisika kutarisa kana madoko akavhurika nemurairo:
firewall-cmd --list-all
Chii chinofanira kuva:
Sezvatinoona, zviteshi zvose zviri zviviri zvakavhurwa zvinobudirira uye zviri kuteererwa. http yekubatanidza iri pachiteshi chekutanga, masokisi ari pachiteshi chechipiri.
Tarisa kubatana kuburikidza nechero sevhisi iri nyore:
Zvose zviri kushanda. Nekuda kwedu, isu hatikurudzire kushandisa isina chengetedzo yekubatanidza pasina login / password mvumo, pamwe chete neyakajairwa seti yezviteshi.. Paunenge uchigadzira iyo faira yekumisikidza, iva nechokwadi chekutsanangura login uye kugadzira password yakaoma, uye zvakare shandura madoko kune asina-standard. Muzviitiko zvakasarudzika, zvinokwanisika kushandisa IP kero mvumo
Zvinetso zvakajairika
Pane chakaipa uye proxy haisi kushanda? Pamwe iyo 3proxy gadziriso yakaitwa zvisizvo. Ngatitarisei matambudziko akajairika uye mhinduro dzawo panguva yekuisa nekugadzirisa utility.
Hapana kubatana
Dambudziko rinowanzoitika kune vakawanda vashandisi nderekubatanidza kusingasvikike kana mafaera ekugadzirisa anoita seakagadziriswa nemazvo. Kana iwe uine chokwadi chekuti zvigadziriso zvese zvakagadziridzwa nenzira kwayo, mupi wekutambira haagadzirisi chiteshi chakasarudzwa uye data rese rinoratidza sevhisi inoshanda, dambudziko rinogona kunge riri muFirewall, kana, zvakanyanya, kurongeka kwayo kwakashata. Semuyenzaniso, panogona kunge paine mapurogiramu anopfuura maviri akaiswa pane system anozopokana. Kugadzirisa dambudziko, zvakakwana kushandisa imwe chaiyo Firewall. Tinokupa zano kuti usarudze chete iptables kana firewall-cmd.
Sevhisi haina kutanga
Iyo sevhisi haitangi mushure mekugadzira ese anodiwa ekugadzirisa mafaera. Izvi zvinoitika kana danho rekugadzirisa rapotsa, kodzero dzakakodzera hadzipihwe, kana kukanganisa kudiki kunoitwa mumafaira ekugadzirisa. Isu tinokukurudzira kuti unyatso kudzidza mirairo nhanho nhanho zvakare, pamwe wakapotsa imwe yematanho. Kana pasina chinobatsira, chingave chinhu chakanaka kudzorera OS uye kutevera matanho ose kubva pakutanga. Tinokurudzira kushandisa chiratidza zvizhinji iri pa/cfg/3proxy.cfg.sample, segadziriro yebvunzo, uye pre-yakaiswa firewall-cmd se firewall.
kutema
Yekupedzisira, asi isinganyanyi kukosha nyaya ine chekuita nekuchengetedza mafaira. 3proxy inotora akati wandei panguva yekuisa, asi saizi inogona kuwedzerwa zvakanyanya kuburikidza nekutema matanda nekufamba kwenguva. Icho chokwadi ndechekuti vashandisi vazhinji vanogonesa kurekodha kwegi mune imwe faira, asi usamise kutenderera uye usadzima matanda asina basa. Zvitatu zvingasarudzwa zvinogona kushandiswa kugadzirisa dambudziko iri:
- Bvumira matanda;
- Nguva nenguva bvisa matanda asina basa;
- Gonesa kutenderera, sezvakaitwa mukumisikidzwa pamusoro. Semuenzaniso, "tenderera makumi matatu" mufaira rekugadzirisa zvinoreva kuti 30proxy inongochengeta mafaira makumi matatu achangoburwa.
mhedziso
Kuisa nekugadzirisa 3proxy paCentOS uye ArchLinux masisitimu anoshanda ari nyore, asi panguva imwechete inoshanda. Chinyorwa chakafukidza matanho ekuisa mapakeji anodiwa, gadzirisa mafaera ekugadzirisa, uye kuvhura sevhisi. Ruzivo runowanikwa runokutendera kuti uise uye ugadzirise yako proxy server pachako pasina matambudziko.