Qaabeynta 3proxy ee CentOS/ArchLinux

Maqaalkan waxaan ku tusi doonaa qaabeynta 3proxy ee server u go'an oo ay ku shaqeeyaan nidaamka hawlgalka ArchLinux/CentOS. 3proxy waa mid ka mid ah qalabka ugu habboon uguna shaqeeya. Waxay taageertaa noocyada kala duwan ee borotokoollada: HTTP, HTTPS, FTP, SOCKS, iyo kuwa kale. Waxay kaa caawin doontaa inaad dejiso server-kaaga wakiil daqiiqado gudahood.

Maqaalku wuxuu ka kooban yahay hagitaan tallaabo-tallaabo ah oo ku saabsan rakibidda qalabka iyo habayntiisa dheeraadka ah. Arrimaha sida rakibidda laga helo ilo rasmi ah, dejinta faylasha habaynta, furitaanka dekedaha aan caadiga ahayn ayaa la tixgeliyaa, iyo sidoo kale khaladaadka caadiga ah ayaa la sharraxay waxaana la bixiyaa talooyin wax ku ool ah oo lagu xallinayo. Kahor inta aan la bilaabin, waa inaad dalbataa VPS ama server u gaar ah oo ay ku shaqeeyaan nidaamka hawlgalka CentOS ama ArchLinux. Dhammaan ficillada tusaalaha ku jira waxaa lagu samayn doonaa server u gaar ah oo ay ku shaqeeyaan nidaamka hawlgalka CentOS7 oo leh hal cinwaan IP dadweyne oo go'an.

Rakibaadda

Talaabada 1

3proxy waxaa si toos ah looga rakibay ilaha. gcc waxaa loo isticmaali doonaa sida compiler-ka. Waxaan ku xireynaa server-ka sidii root (superuser) oo waxaan ku rakibnaa compiler-ka.

yum install gcc

Talaabada 2

Hadda waa lagama maarmaan inaad soo dejiso faylasha isha 3proxy. Waxaad tan ku samayn kartaa adoo aadaya mareegaha rasmiga ah oo aad nuqul ka samaynayso xiriirka nooca hadda jira:

Haddii loo baahdo nooc kaydsan, waxaad sidoo kale si toos ah uga soo dejisan kartaa xiriirka GitHub :

Waqtiga qorista maqaalkan, nooca hadda jira waa 0.9.3. Soo deji oo isla markiiba ka soo saar:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

Talaabada 3

Tag hagaha mashruuca aan xidhnayn oo soo ururi:

cd 3proxy-0.9.3/
make -f Makefile.Linux

Talaabada 4

Waxaan abuurnaa hagayaal waxaanan koobiyeynaa faylka 3proxy to /usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

Talaabada 5

Waxaan abuurnaa isticmaale si uu ula shaqeeyo buugga macluumaadka. Xaaladdan magaca isticmaalaha waa 3proxyuser:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

Waxaan siinaa xuquuqda lagu la shaqeeyo hagaha isticmaalaha la abuuray:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

Hadda aan abuurno faylka qaabeynta anagoo adeegsanayna amarka:

touch /etc/3proxy/3proxy.cfg

Haddii loo baahdo, waxaad dejin kartaa rukhsadaha faylka habaynta ee isticmaalaha xididka. Tallaabadani qasab maaha, laakiin waxay ku dari doontaa ilaalin:

chmod 600 /etc/3proxy/3proxy.cfg

3 qaabeynta wakiil

Talaabada 6

Waa lagama maarmaan in si sax ah loo buuxiyo faylka qaabeynta ee hore loo abuuray. Marka hore, ogow uid iyo gid isticmaalaha amarka:

id 3proxyuser

Xaaladeena kuwani waa qiimayaasha soo socda:

Si aad u buuxiso faylka habaynta, waxaad qaadan kartaa habayn diyaarsan ama waxaad isticmaali kartaa dukumeentiyada ku yaal bogga rasmiga ah. Sidoo kale fayl leh tusaale ayaa hore loogu sii rakibay si caadi ah; waxaad ka heli kartaa wadada: /cfg/3proxy.cfg.sample

Tusaale ahaan, waxaan tixgelin doonnaa 2 nooc oo habayn ah: oo leh iyo aan lahayn diiwaan gelin . Khad kasta waxaa la socon doona faallooyin (waxaa lagu calaamadeeyay calaamadda "#").

Kani waa tusaale habayn diyaarsan oo aan diiwaan gelin :

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

Waxaan tixgelinnay ikhtiyaarka faylka habaynta iyada oo aan la gelin. Hadda waxaan abuuri doonnaa fayl habayn ah oo leh diiwaangelinta iyo oggolaanshaha isticmaalaha ; waxaa loo isticmaali doonaa hadhow inta lagu jiro dejinta server-ka.

Hubi inaad bixiso macluumaadka oggolaanshaha, maadaama server-ka laga ogaan karo xitaa dekedaha aan caadiga ahayn.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Tani waxay dhamaystiraysaa habaynta faylka qaabeynta ugu weyn. Waxaan u gudubnaa marxaladda ugu dambeysa oo aan bilaabayno.

Talaabada 7

U samee faylka bilowga ee systemd:

touch /etc/systemd/system/3proxy.service

Soo saar xuquuqda lagama maarmaanka ah:

chmod 664 /etc/systemd/system/3proxy.service

Nuqul ka samee oo ku dheji qiyamka soo socda faylka oo kaydi:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

Fadlan ogow: qiimaha "ExecStop" waa inaad qeexdaa magaca isticmaalaha ee lagu sameeyay tallaabada Lambarka 5.

Taas ka dib waxaad u baahan tahay inaad cusbooneysiiso qaabeynta Daemon oo leh amarka:

systemctl daemon-reload

Talaabada 8

Waxa kaliya ee aan u baahanahay waa inaan bilowno 3proxy-ga la habeeyay, ku dar autostart, iyo sidoo kale furitaanka dekedaha dabka.

Kudar autostart, billow oo hubi heerka:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

Kadib hubinta heerka, waxaan aragnaa macluumaadka in 3proxy si guul leh loo bilaabay:

Waxa kaliya ee hadhay waa in la furo dekedaha:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Haddii loo baahdo, dib u kabo server-ka. Waa suurtagal in la hubiyo in dekedu ay furan yihiin amarka:

firewall-cmd --list-all

Maxay noqon lahayd:

Sida aan aragno, labada dekedoodba si guul leh ayaa loo furay, waana la dhegaysanayaa. Xidhiidhka http wuxuu ku yaalaa dekedda koowaad, sharabaadadu waxay saaran yihiin dekedda labaad.

Ka hubi xidhiidhka adeeg kasta oo ku habboon:

Wax walba way shaqeynayaan. Dhankeenna, kuma talineyno in la isticmaalo xiriir aan la hubin iyada oo aan la helin oggolaanshaha galitaanka/furaha sirta ah, iyo sidoo kale dekedo caadi ah . Inta aad dejineyso faylka qaabeynta, hubi inaad cayimto galitaanka oo aad abuurto eray sir ah oo adag, oo sidoo kale beddel dekedaha kuwa aan caadiga ahayn . Xaaladaha gaarka ah, waxaa suurtagal ah in la isticmaalo oggolaanshaha cinwaanka IP-ga.

Dhibaatooyinka guud

Wax baa khaldamay oo wakiilku ma shaqaynayo? Waxaa laga yaabaa in qaabeynta 3proxy loo sameeyay si qaldan. Aynu tixgelinno dhibaatooyinka ugu caansan iyo xalkooda inta lagu jiro rakibidda iyo habaynta utility.

Xiriir la'aan

Dhibaatada ugu badan ee isticmaaleyaal badan ayaa ah isku xirka aan la heli karin marka faylasha qaabeynta ay u muuqdaan kuwo si sax ah loo habeeyey. Haddii aad hubiso in dhammaan goobaha si sax ah loo habeeyey, bixiyaha martigelinta ma xaddido dekedda la doortay oo dhammaan xogta waxay tilmaamaysaa adeeg shaqo, dhibaatadu waxay ku jiri kartaa Firewall, ama, si sax ah, qaabeynteeda khaldan. Tusaale ahaan, waxaa jiri kara in ka badan laba barnaamij oo lagu rakibay nidaamka kuwaas oo isku dhici doona midba midka kale. Si loo xalliyo dhibaatada, waa ku filan inaad isticmaasho hal Firewall gaar ah. Waxaan kugula talineynaa inaad doorato kaliya iptables ama firewall-cmd.

Adeeggu ma bilaabo

Adeeggu ma bilaabmo ka dib marka la dejiyo dhammaan faylasha habaynta ee lagama maarmaanka ah. Tani waxay dhacdaa marka tallaabo habayn la waayo, xuquuqda ku habboon aan la bixin, ama khalad yar lagu sameeyo faylasha habaynta. Waxaan kugula talinaynaa inaad si taxaddar leh u barato tilmaamaha tallaabo tallaabo mar kale, laga yaabee inaad seegtay mid ka mid ah tallaabooyinka. Haddii aysan waxba caawin, waxay noqon lahayd fikrad wanaagsan inaad dib u rakibto OS-ka oo aad raacdo dhammaan tallaabooyinka laga bilaabo bilowgii. Waxaan kugula talineynaa inaad isticmaasho muunad ku taal /cfg/3proxy.cfg.sample, oo ah habayn tijaabo ah, iyo firewall-cmd oo hore loo rakibay oo ah firewall.

Gelitaanka

Arrinka kama dambaysta ah, laakiin aan ka muhiimsanayn waxa la xidhiidha kaydinta faylka. 3proxy waxay qaadataa dhowr mb inta lagu jiro rakibidda, laakiin cabbirka si weyn ayaa loo kordhin karaa oo keliya iyada oo la gooyo wakhtigu dhaafo. Xaqiiqdu waxay tahay in isticmaaleyaal badan ay awood u yeeshaan duubista log ee fayl gaar ah, laakiin ha dejin wareejin oo ha tirtirin diiwaannada aan khusayn. Saddex doorasho ayaa loo isticmaali karaa xalinta dhibaatadan:

1. Daar gaynta;
2. Mar mar tirtir qoraalada aan khusayn;
3. Daree wareegtada, sida lagu sameeyay qaabaynta sare. Tusaale ahaan, "wareejin 30" ee faylka qaabeynta macnaheedu waa in 3proxy uu kaydin doono kaliya 30kii faylal ee ugu dambeeyay.

Ugu Dambeyn

Ku rakibida iyo habaynta 3proxy ee CentOS iyo ArchLinux nidaamyada hawlgalka waa wax fudud, laakiin isla mar ahaantaana hawl waxtar leh. Maqaalku wuxuu daboolay tillaabooyinka lagu rakibo xirmooyinka lagama maarmaanka ah, habaynta faylasha qaabeynta, iyo bilaabida adeegga. Aqoonta la helay waxay kuu ogolaanaysaa inaad rakibto oo aad habayso server-kaaga adiga oo aan wax dhib ah la kulmin.