Qaabeynta 3proxy ee CentOS/ArchLinux

Maqaalkan waxaan ku tusi doonaa qaabeynta 3proxy ee server u go'an oo ay ku shaqeeyaan nidaamka hawlgalka ArchLinux/CentOS. 3proxy waa mid ka mid ah qalabka ugu habboon uguna shaqeeya. Waxay taageertaa noocyada kala duwan ee borotokoollada: HTTP, HTTPS, FTP, SOCKS, iyo kuwa kale. Waxay kaa caawin doontaa inaad dejiso server-kaaga wakiil daqiiqado gudahood.

Maqaalku wuxuu ka kooban yahay hagitaan tallaabo-tallaabo ah oo ku saabsan rakibidda tamarta iyo habayntiisa dheeraadka ah. Arrimaha sida ku rakibida ilaha rasmiga ah, dejinta faylasha qaabeynta, furitaanka dekedaha aan caadiga ahayn ayaa la tixgeliyaa, iyo sidoo kale khaladaadka caadiga ah ayaa lagu sharraxay waxaana la bixiyaa talooyin wax ku ool ah oo lagu xalliyo. Kahor intaanad bilaabin, waa inaad dalbataa a VPS or adeegga loo qoondeeyey ku shaqeeya CentOS ama ArchLinux. Dhammaan ficillada ku jira tusaalaha waxaa lagu samayn doonaa adeeg gaar ah oo ay ku shaqeeyaan nidaamka hawlgalka CentOS7 oo leh hal ciwaanka IP ee dadweynaha ee taagan.

Rakibaadda

Talaabada 1

3proxy si toos ah ayaa loogu rakibay ilaha. gcc waxaa loo isticmaali doonaa sida iskudubarid. Waxaan ku xireynaa server-ka xidid ahaan (superuser) oo waxaan ku dhejineynaa compiler.

yum install gcc

Talaabada 2

Hadda waa lagama maarmaan in la soo dejiyo faylasha isha ee 3proxy. Tan waxaad ku samayn kartaa adigoo aadaya website- iyo koobiyaynta isku xirka nooca hadda:

Haddii loo baahdo nooc kaydsan, waxa kale oo aad si toos ah uga soo dejisan kartaa xidhiidhka GitHub:

Waqtiga qorista maqaalkan, nooca hadda jira waa 0.9.3. Soo deji oo isla markiiba ka soo saar:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

Talaabada 3

Tag hagaha mashruuca aan xidhnayn oo soo ururi:

cd 3proxy-0.9.3/
make -f Makefile.Linux

Talaabada 4

Waxaan abuurnaa hagayaal waxaanan koobiyeynaa faylka 3proxy to /usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

Talaabada 5

Waxaan abuurnaa isticmaale si uu ula shaqeeyo buug-yaraha. Xaaladdan oo kale magaca isticmaalaha waa 3 proxyuser:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

Waxaan siinaa xuquuqda lagu la shaqeeyo hagaha isticmaalaha la abuuray:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

Hadda aan abuurno faylka qaabeynta anagoo adeegsanayna amarka:

touch /etc/3proxy/3proxy.cfg

Haddii loo baahdo, waxaad dejin kartaa oggolaanshaha faylka qaabeynta ee isticmaalaha xididka. Talaabadani maaha mid waajib ah, laakiin waxay ku dari doontaa ilaalinta:

chmod 600 /etc/3proxy/3proxy.cfg

3 qaabeynta wakiil

Talaabada 6

Waa lagama maarmaan in si sax ah loo buuxiyo faylka qaabeynta ee hore loo abuuray. Marka hore, ogow uid iyo gid isticmaalaha amarka:

id 3proxyuser

Xaaladeena kuwani waa qiimayaasha soo socda:

Si aad u buuxiso faylka qaabaynta, waxa aad qaadan kartaa habayn diyaarsan ama isticmaal kan dukumentiyada on website-ka rasmiga ah. Sidoo kale fayl leh tusaale ayaa horay loogu sii rakibay si caadi ah; waxaad ka heli kartaa wadada: /cfg/3proxy.cfg.sample

Tusaale ahaan, waxaan tixgelin doonaa 2 nooc oo qaabeynta: iyada oo aan la qorin. Sadar kasta waxaa la socda faallooyin (waxaa lagu calaamadeeyay calaamadda "#").

Tani waa tusaale habayn diyaarsan iyada oo aan la jarin:

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

Waxaan tixgelinay ikhtiyaarka faylka qaabeynta iyada oo aan la qorin. Hadda waxaan ku abuuri doonaa qaabeynta faylka goynta iyo ogolaanshaha isticmaalaha; waxa la isticmaali doona hadhow inta lagu jiro habaynta serverka.

Hubi inaad bixiso macluumaadka oggolaanshaha, maadaama server-ka laga ogaan karo xataa dekedaha aan caadiga ahayn.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Tani waxay dhamaystiraysaa habaynta faylka qaabeynta ugu weyn. Waxaan u gudubnaa marxaladda ugu dambeysa oo aan bilaabayno.

Talaabada 7

U samee faylka bilowga ee systemd:

touch /etc/systemd/system/3proxy.service

Soo saar xuquuqda lagama maarmaanka ah:

chmod 664 /etc/systemd/system/3proxy.service

Nuqul ka samee oo ku dheji qiyamka soo socda faylka oo kaydi:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

Fadlan ogow: Qiimaha "ExecStop" waa inaad ku qeexdaa magaca isticmaalaha ee lagu sameeyay tallaabada 5.

Taas ka dib waxaad u baahan tahay inaad cusbooneysiiso qaabeynta Daemon oo leh amarka:

systemctl daemon-reload

Talaabada 8

Waxa kaliya ee aan u baahanahay waa inaan bilowno 3proxy-ga la habeeyay, ku dar autostart, iyo sidoo kale furitaanka dekedaha dabka.

Kudar autostart, billow oo hubi heerka:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

Kadib hubinta heerka, waxaan aragnaa macluumaadka in 3proxy si guul leh loo bilaabay:

Waxa kaliya ee hadhay waa in la furo dekedaha:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Haddii loo baahdo, dib u kabo server-ka. Waa suurtagal in la hubiyo in dekedu ay furan yihiin amarka:

firewall-cmd --list-all

Maxay noqon lahayd:

Sida aan aragno, labada dekedoodba si guul leh ayaa loo furay, waana la dhegaysanayaa. Xidhiidhka http wuxuu ku yaalaa dekedda koowaad, sharabaadadu waxay saaran yihiin dekedda labaad.

Ka hubi xidhiidhka adeeg kasta oo ku habboon:

Wax walba waa shaqeynayaan. Dhankayaga, kuma talineyno isticmaalka xiriirka aan sugneyn iyada oo aan la isticmaalin ogolaanshaha erayga sirta ah, iyo sidoo kale dekedo caadi ah. Markaad dejinayso faylka qaabeynta, Hubi inaad qeexdo gelitaanka oo aad samayso furaha sirta ah ee adag, oo sidoo kale u beddel dekedaha kuwo aan caadi ahayn. Xaalado gaar ah, waxaa suurtagal ah in la isticmaalo oggolaanshaha cinwaanka IP-ga

Dhibaatooyinka guud

Wax baa khaldamay oo wakiilku ma shaqaynayo? Waxaa laga yaabaa in qaabeynta 3proxy loo sameeyay si qaldan. Aynu tixgelinno dhibaatooyinka ugu caansan iyo xalkooda inta lagu jiro rakibidda iyo habaynta utility.

Xiriir la'aan

Dhibaatada ugu badan ee isticmaaleyaal badan ayaa ah isku xirka aan la heli karin marka faylasha qaabeynta ay u muuqdaan kuwo si sax ah loo habeeyey. Haddii aad hubiso in dhammaan goobaha si sax ah loo habeeyey, bixiyaha martigelinta ma xaddido dekedda la doortay oo dhammaan xogta waxay tilmaamaysaa adeeg shaqo, dhibaatadu waxay ku jiri kartaa Firewall, ama, si sax ah, qaabeynteeda khaldan. Tusaale ahaan, waxaa jiri kara in ka badan laba barnaamij oo lagu rakibay nidaamka kuwaas oo isku dhici doona midba midka kale. Si loo xalliyo dhibaatada, waa ku filan inaad isticmaasho hal Firewall gaar ah. Waxaan kugula talineynaa inaad doorato kaliya iptables ama firewall-cmd.

Adeeggu ma bilaabo

Adeeggu ma bilaabo ka dib dejinta dhammaan faylasha qaabeynta lagama maarmaanka ah. Tani waxay dhacdaa marka tallaabada qaabeynta la waayo, xuquuqaha ku habboon aan la bixin, ama qalad yar lagu sameeyo faylalka qaabeynta. Waxaan kugula talineynaa inaad si taxadar leh u barato tilmaamaha tallaabo-tallaabo mar labaad, laga yaabee inaad seegtay mid ka mid ah tillaabooyinka. Haddii aysan waxba caawin, waxay ahaan lahayd fikrad wanaagsan in dib loo rakibo OS-ka oo la raaco dhammaan tillaabooyinka bilowga. Waxaan kugula talineynaa isticmaalka Macnaha ku yaal /cfg/3proxy.cfg.sample, qaabeynta tijaabada ah, iyo horay loo rakibay firewall-cmd dab-damis ahaan.

Gelitaanka

Arrinka kama dambaysta ah, laakiin aan ka muhiimsanayn waxa la xidhiidha kaydinta faylka. 3proxy waxay qaadataa dhowr mb inta lagu jiro rakibidda, laakiin cabbirka si weyn ayaa loo kordhin karaa oo keliya iyada oo la gooyo wakhtigu dhaafo. Xaqiiqdu waxay tahay in isticmaaleyaal badan ay awood u yeeshaan duubista log ee fayl gaar ah, laakiin ha dejin wareejin oo ha tirtirin diiwaannada aan khusayn. Saddex doorasho ayaa loo isticmaali karaa xalinta dhibaatadan:

1. Daar gaynta;
2. Mar mar tirtir qoraalada aan khusayn;
3. Daree wareegtada, sida lagu sameeyay qaabaynta sare. Tusaale ahaan, "wareejin 30" ee faylka qaabeynta macnaheedu waa in 3proxy uu kaydin doono kaliya 30kii faylal ee ugu dambeeyay.

Ugu Dambeyn

Ku rakibida iyo habaynta 3proxy ee CentOS iyo ArchLinux nidaamyada hawlgalka waa wax fudud, laakiin isla mar ahaantaana hawl waxtar leh. Maqaalku wuxuu daboolay tillaabooyinka lagu rakibo xirmooyinka lagama maarmaanka ah, habaynta faylasha qaabeynta, iyo bilaabida adeegga. Aqoonta la helay waxay kuu ogolaanaysaa inaad rakibto oo aad habayso server-kaaga adiga oo aan wax dhib ah la kulmin.