3 proxy kumisikidza paCentOS/ArchLinux

Muchikamu chino ticharatidza 3proxy kumisikidzwa pane yakatsaurwa sevha inofambiswa neArchLinux/CentOS inoshanda sisitimu. 3proxy ndeimwe yeanonyanya kukosha uye anoshanda maturusi. Inotsigira marudzi akasiyana-siyana emaprotocol: HTTP, HTTPS, FTP, SOCKS, nezvimwe. Zvichakubatsira iwe kumisikidza yako wega proxy server mune imwe nyaya yemaminetsi.

Nyaya iyi ine gwara rematanho-nhanho pamusoro pekuiswa kweutility uye mamwe magadzirirwo ayo. Nyaya dzakadai sekuiswa kubva kune imwe nzvimbo yepamutemo, kugadzirisa mafaira ekugadzirisa, kuvhura maports asiri emhando yepamusoro zvinofungwa, pamwe nezvikanganiso zvakajairika zvinotsanangurwa uye mazano anoshanda ekugadzirisa anopiwa. Usati watanga, unofanirwa kuodha VPS kana sevha yakatsaurirwa inofambiswa neCentOS kana ArchLinux operating system. Zvese zviito zviri mumuenzaniso zvichaitwa pasevha yakatsaurirwa inofambiswa neCentOS7 operating system ine kero imwe chete yeIP yakatsaurirwa.

kugadzwa

Step 1

3proxy yakaiswa zvakananga kubva kumasosi. gcc ichashandiswa semusanganisi. Tinobatanidza neseva semudzi (superuser) toisa musanganisi.

yum install gcc

Step 2

Zvino zvave kuda kudhawunirodha mafaira e3proxy source. Unogona kuita izvi nekuenda kuwebhusaiti yepamutemo uye kukopa chinongedzo cheshanduro yazvino:

Kana uchida vhezheni yakachengetwa, unogona zvakare kudhawunirodha link yacho zvakananga kubva kuGitHub :

Panguva yekunyora chinyorwa ichi, shanduro yezvino ndeye 0.9.3. Dhaunirodha wobva waiburitsa pakarepo:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

Step 3

Enda kune dhairekitori neiyo isina kurongedzerwa purojekiti uye nyora:

cd 3proxy-0.9.3/
make -f Makefile.Linux

Step 4

Isu tinogadzira madhairekitori uye tinokopa iyo 3proxy faira ku / usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

Step 5

Tinogadzira mushandisi wekushanda nekatalogu. Muchiitiko ichi zita rekushandisa ndi3proxyuser:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

Isu tinopa kodzero dzekushanda nemadhairekitori kune akagadzirwa mushandisi:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

Zvino ngatigadzire faira rekugadzirisa tichishandisa murairo:

touch /etc/3proxy/3proxy.cfg

Kana zvichidikanwa, unogona kuisa mvumo pafaira rekugadzirisa remushandisi weroot. Danho iri harisi remutemo, asi richawedzera dziviriro:

chmod 600 /etc/3proxy/3proxy.cfg

3 proxy kugadzirisa

Step 6

Izvo zvinodikanwa kuzadza nemazvo iyo faira yekumisikidza iyo yakagadzirwa kare. Kutanga, tsvaga iyo uid uye gid yemushandisi nemurairo:

id 3proxyuser

Muchiitiko chedu izvi ndizvo zvinotevera zvakakosha:

Kuti uzadze faira rekugadzirisa, unogona kutora magadzirirwo akagadziriswa kana kushandisa magwaro ari pawebhusaiti yepamutemo. Zvakare faira rine muenzaniso rakatoiswa kare kare; unogona kuriwana munzira: /cfg/3proxy.cfg.sample

Semuenzaniso, tichafunga nezvemhando mbiri dzekugadzirisa: ine uye isina kunyorwa . Mutsetse wega wega uchaperekedzwa nemashoko (akanyorwa nechiratidzo che "#").

Uyu muenzaniso wegadziriro yakagadzirwa isina kunyorwa :

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

Takafunga nezvesarudzo yefaira rekugadzirisa pasina kunyoresa. Iye zvino tichagadzira faira rekugadzirisa rine kunyoresa uye mvumo yemushandisi ; richazoshandiswa gare gare panguva yekugadzika kweseva.

Iva nechokwadi chekuti wapa ruzivo rwekubvumidza, sezvo sevha ichigona kuonekwa kunyangwe pamaports asiri e standard.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Izvi zvinopedzisa kuseta kweiyo main configuration file. Isu tinoenda kune yekupedzisira nhanho uye kutanga.

Step 7

Gadzira faira yekutanga ye systemd:

touch /etc/systemd/system/3proxy.service

Kupa kodzero dzinodiwa:

chmod 664 /etc/systemd/system/3proxy.service

Kopa uye unamate zvinotevera zvakakosha mufaira uye chengeta:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

Ndapota cherechedzai: mu "ExecStop" munofanira kutsanangura zita rekushandisa rakagadzirwa padanho renhamba 5.

Mushure meizvozvo iwe unofanirwa kugadzirisa iyo Daemon kumisikidzwa nemurairo:

systemctl daemon-reload

Step 8

Isu chete chatinoda kuvhura iyo yakagadziriswa 3proxy, wedzera kune autostart, uye zvakare kuvhura madoko mufirewall.

Iwedzere kune autostart, tanga uye tarisa mamiriro:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

Mushure mekutarisa chimiro, tinoona ruzivo rwekuti 3proxy yakatangwa zvinobudirira:

Chinhu chega chasara kuvhura ports:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Kana zvichidikanwa, reboot server. Zvinokwanisika kutarisa kana madoko akavhurika nemurairo:

firewall-cmd --list-all

Chii chinofanira kuva:

Sezvatinoona, zviteshi zvose zviri zviviri zvakavhurwa zvinobudirira uye zviri kuteererwa. http yekubatanidza iri pachiteshi chekutanga, masokisi ari pachiteshi chechipiri.

Tarisa kubatana kuburikidza nechero sevhisi iri nyore:

Zvese zviri kushanda. Isu hatikurudzire kushandisa kubatana kusina kuchengetedzwa pasina mvumo yekupinda/password, pamwe chete nehurongwa hwemaports akajairwa . Paunenge uchigadzira faira rekugadzirisa, ita shuwa kuti wanyora login uye gadzira password yakaoma, uye shandura maports kuita asiri akajairwa . Muzviitiko zvisingawanzoitiki, zvinokwanisika kushandisa mvumo yekero ye IP

Zvinetso zvakajairika

Pane chakaipa uye proxy haisi kushanda? Pamwe iyo 3proxy gadziriso yakaitwa zvisizvo. Ngatitarisei matambudziko akajairika uye mhinduro dzawo panguva yekuisa nekugadzirisa utility.

Hapana kubatana

Dambudziko rinowanzoitika kune vakawanda vashandisi nderekubatanidza kusingasvikike kana mafaera ekugadzirisa anoita seakagadziriswa nemazvo. Kana iwe uine chokwadi chekuti zvigadziriso zvese zvakagadziridzwa nenzira kwayo, mupi wekutambira haagadzirisi chiteshi chakasarudzwa uye data rese rinoratidza sevhisi inoshanda, dambudziko rinogona kunge riri muFirewall, kana, zvakanyanya, kurongeka kwayo kwakashata. Semuyenzaniso, panogona kunge paine mapurogiramu anopfuura maviri akaiswa pane system anozopokana. Kugadzirisa dambudziko, zvakakwana kushandisa imwe chaiyo Firewall. Tinokupa zano kuti usarudze chete iptables kana firewall-cmd.

Sevhisi haina kutanga

Basa haritangi mushure mekugadzirisa mafaira ese anodiwa. Izvi zvinoitika kana danho rekugadzirisa rikasashandiswa, kodzero dzakakodzera dzikasapihwa, kana paine chikanganiso chidiki mumafaira ekugadzirisa. Tinokukurudzira kuti unyatsodzidza mirairo yacho nhanho nhanho zvakare, pamwe wakarasikirwa nerimwe rematanho. Kana pasina chinobatsira, zvingave zvakanaka kuisazve OS uye kutevera matanho ese kubva pakutanga. Tinokurudzira kushandisa sampuro iri pa /cfg/3proxy.cfg.sample, seyedzo yekugadzirisa, uye firewall-cmd yakaiswa kare sefirewall.

kutema

Yekupedzisira, asi isinganyanyi kukosha nyaya ine chekuita nekuchengetedza mafaira. 3proxy inotora akati wandei panguva yekuisa, asi saizi inogona kuwedzerwa zvakanyanya kuburikidza nekutema matanda nekufamba kwenguva. Icho chokwadi ndechekuti vashandisi vazhinji vanogonesa kurekodha kwegi mune imwe faira, asi usamise kutenderera uye usadzima matanda asina basa. Zvitatu zvingasarudzwa zvinogona kushandiswa kugadzirisa dambudziko iri:

1. Bvumira matanda;
2. Nguva nenguva bvisa matanda asina basa;
3. Gonesa kutenderera, sezvakaitwa mukumisikidzwa pamusoro. Semuenzaniso, "tenderera makumi matatu" mufaira rekugadzirisa zvinoreva kuti 30proxy inongochengeta mafaira makumi matatu achangoburwa.

mhedziso

Kuisa nekugadzirisa 3proxy paCentOS uye ArchLinux masisitimu anoshanda ari nyore, asi panguva imwechete inoshanda. Chinyorwa chakafukidza matanho ekuisa mapakeji anodiwa, gadzirisa mafaera ekugadzirisa, uye kuvhura sevhisi. Ruzivo runowanikwa runokutendera kuti uise uye ugadzirise yako proxy server pachako pasina matambudziko.