3proxy iṣeto ni lori CentOS/ArchLinux

Ninu nkan yii a yoo ṣafihan iṣeto proxy 3 lori olupin iyasọtọ ti o ni agbara nipasẹ ẹrọ iṣẹ ArchLinux/CentOS. 3proxy jẹ ọkan ninu awọn irinṣẹ to wulo julọ ati iṣẹ ṣiṣe. O ṣe atilẹyin awọn oriṣi awọn ilana: HTTP, HTTPS, FTP, SOCKS, ati awọn miiran. Yoo ṣe iranlọwọ fun ọ lati ṣeto olupin aṣoju tirẹ ni iṣẹju diẹ.

Nkan naa ni itọsọna igbese-nipasẹ-igbesẹ lori fifi sori ẹrọ ati iṣeto ni siwaju rẹ. Awọn ọran bii fifi sori ẹrọ lati orisun osise, ṣeto awọn faili atunto, ṣiṣi awọn ebute oko oju omi ti kii ṣe deede ni a gbero, bakanna bi awọn aṣiṣe ti o wọpọ ti ṣapejuwe ati awọn iṣeduro to wulo fun lohun wọn ni a fun. Ṣaaju ifilọlẹ, o gbọdọ paṣẹ a VPS or olupin ifiṣootọ agbara nipasẹ awọn CentOS tabi ArchLinux ẹrọ. Gbogbo awọn iṣe ninu apẹẹrẹ yoo ṣee ṣe lori olupin iyasọtọ ti o ni agbara nipasẹ ẹrọ ṣiṣe CentOS7 pẹlu adiresi IP aimi kan ti a ṣe iyasọtọ.

fifi sori

igbese 1

3proxy ti fi sori ẹrọ taara lati awọn orisun. gcc yoo ṣee lo bi alakojo. A sopọ si olupin bi root (superuser) ati fi ẹrọ akojọpọ sori ẹrọ.

yum install gcc

igbese 2

Bayi o jẹ dandan lati ṣe igbasilẹ awọn faili orisun 3proxy. O le ṣe eyi nipa lilọ si osise aaye ayelujara ati didakọ ọna asopọ si ẹya lọwọlọwọ:

Ti o ba nilo ẹya ti o ti fipamọ, o tun le ṣe igbasilẹ ọna asopọ taara lati GitHub:

Ni akoko kikọ nkan yii, ẹya lọwọlọwọ jẹ 0.9.3. Ṣe igbasilẹ rẹ ki o si tu silẹ lẹsẹkẹsẹ:

wget https://github.com/z3APA3A/3proxy/archive/0.9.3.tar.gz
tar -xvzf 0.9.3.tar.gz

igbese 3

Lọ si itọsọna pẹlu iṣẹ akanṣe ti a ko ṣajọ ki o ṣajọ:

cd 3proxy-0.9.3/
make -f Makefile.Linux

igbese 4

A ṣẹda awọn ilana ati daakọ faili 3proxy si / usr/bin:

mkdir -p /var/log/3proxy
mkdir /etc/3proxy
cp bin/3proxy /usr/bin/

igbese 5

A ṣẹda olumulo kan lati ṣiṣẹ pẹlu katalogi. Ni idi eyi orukọ olumulo jẹ 3 aṣoju:

useradd -s /usr/sbin/nologin -U -M -r 3proxyuser

A funni ni awọn ẹtọ lati ṣiṣẹ pẹlu awọn ilana si olumulo ti o ṣẹda:

chown -R 3proxyuser:3proxyuser /etc/3proxy
chown -R 3proxyuser:3proxyuser /var/log/3proxy
chown -R 3proxyuser:3proxyuser /usr/bin/3proxy

Bayi jẹ ki a ṣẹda faili iṣeto ni lilo aṣẹ:

touch /etc/3proxy/3proxy.cfg

Ti o ba jẹ dandan, o le ṣeto awọn igbanilaaye lori faili iṣeto ni fun olumulo root. Igbesẹ yii kii ṣe ọranyan, ṣugbọn yoo ṣafikun aabo:

chmod 600 /etc/3proxy/3proxy.cfg

3proxy iṣeto ni

igbese 6

O jẹ dandan lati fọwọsi faili iṣeto ni deede ti o ṣẹda tẹlẹ. Ni akọkọ, wa uid ati gid ti olumulo nipasẹ aṣẹ naa:

id 3proxyuser

Ninu ọran wa iwọnyi ni awọn iye wọnyi:

Lati kun faili iṣeto ni, o le mu awọn atunto ti a ti ṣetan tabi lo iwe lori oju opo wẹẹbu osise. Paapaa faili pẹlu apẹẹrẹ ti fi sii tẹlẹ nipasẹ aiyipada; O le rii ni ọna: /cfg/3proxy.cfg.sample

Fun apẹẹrẹ, a yoo ṣe akiyesi awọn oriṣi meji ti iṣeto: pẹlu ati laisi gedu. Laini kọọkan yoo wa pẹlu awọn asọye (wọn ti samisi pẹlu aami “#).

Eyi jẹ apẹẹrẹ ti atunto ti o ti ṣetan lai gedu:

# We specify the user's data that we found out in the previous command
setgid 995
setuid 997

# Type the NS-servers. It is possible to clarify your own servers at /etc/resolv.conf
nserver 1.1.1.1
nserver 8.8.8.8

# Cache size
nscache 65536

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Authorization of users by login/password (if required). You may not to use it or specify the path to the file in which authorization data is stored, for example, users $/etc/3proxy/.authfile

# If you insert a password in md5 format, replace “CL” with “CR”, as indicated in the example. You can use 2 methods at the same time.
auth cache strong
users "userproxy:CL:passwordproxy"
users "userproxy2:CR:b89097a7ad0b94f13b3c313ae76699d4 "

# Launch mode. Daemon only.
Daemon

# We write the port through which the http connection will take place. The example shows the standard one. To establish a socks connection, use the command specified in the second line, the port is also standard.
proxy -p3128			
socks -p1080

A ṣe akiyesi aṣayan ti faili atunto laisi gedu. Bayi a yoo ṣẹda faili iṣeto ni pẹlu gedu ati aṣẹ olumulo; yoo ṣee lo nigbamii lakoko iṣeto olupin.

Rii daju pe o pese alaye aṣẹ, nitori olupin le ṣee wa-ri paapaa lori awọn ebute oko oju omi ti kii ṣe boṣewa.

# Configuring the server to launch from the userproxy user and the passwordproxy password.
users userproxy:CL:passwordproxy

# Specify the user's uid and gid
setgid 995
setuid 997

# Nameservers (NS-servers)
nserver 1.1.1.1
nserver 8.8.8.8

# Timeouts
timeouts 1 5 30 60 180 1800 15 60

# Cache size (standard)
nscache 65536

# Indicate the launch mode
daemon

# We install http proxy on a non-standard 50001 port. If there are several IP addresses on the server, be sure to specify a specific address for connecting the network. For example, "-e91.150.32.146". The argument "i" is a local address.
proxy –p50001	

# In a same way as socks proxy, we conduct the installation on a 50002 port.
socks –p50002			

# Path to the directory with logs, logs format and proxy rotation
Log /var/log/3proxy/3proxy.log D	
logformat "- +_L%t.%. %N.%p %E %U %C:%c %R:%r %O %I %h %T"
rotate 30

Eyi pari iṣeto ti faili iṣeto akọkọ. A tẹsiwaju si ipele ikẹhin ati ifilọlẹ.

igbese 7

Ṣẹda faili ipilẹṣẹ fun eto eto:

touch /etc/systemd/system/3proxy.service

Pese awọn ẹtọ to wulo:

chmod 664 /etc/systemd/system/3proxy.service

Daakọ ati lẹẹmọ awọn iye wọnyi sinu faili ki o fipamọ:

[Unit]
Description=3proxy Proxy Server
After=network.target
[Service]
Type=simple
ExecStart=/usr/bin/3proxy /etc/3proxy/3proxy.cfg
ExecStop=/bin/kill `/usr/bin/pgrep 3proxyuser`
RemainAfterExit=yes
Restart=on-failure
[Install]
WantedBy=multi-user.target»

Jọwọ ṣakiyesi: ni iye “ExecStop” o gbọdọ pato orukọ olumulo ti o ṣẹda ni igbesẹ No.. 5.

Lẹhin eyi o nilo lati ṣe imudojuiwọn iṣeto Daemon pẹlu aṣẹ:

systemctl daemon-reload

igbese 8

Nikan ti a nilo ni lati ṣe ifilọlẹ 3proxy ti tunto, ṣafikun si autostart, ati tun ṣii awọn ebute oko oju omi ni ogiriina.

Ṣafikun-un si adaṣe adaṣe, ifilọlẹ ati ṣayẹwo ipo:

systemctl enable 3proxy
systemctl start 3proxy
systemctl status 3proxy

Lẹhin ti ṣayẹwo ipo naa, a rii alaye ti 3proxy ti ṣe ifilọlẹ ni aṣeyọri:

Ohun kan ṣoṣo ti o ku ni lati ṣii awọn ibudo:

firewall-cmd --zone=public --add-port=50001/tcp
firewall-cmd --zone=public --add-port=50002/tcp
firewall-cmd –reload

Ti o ba jẹ dandan, tun atunbere olupin naa. O ṣee ṣe lati ṣayẹwo boya awọn ebute oko oju omi wa ni sisi pẹlu aṣẹ:

firewall-cmd --list-all

Kini o yẹ ki o jẹ:

Gẹgẹbi a ti le rii, awọn ebute oko oju omi mejeeji ti ṣii ni aṣeyọri ati pe a ti tẹtisi. Asopọ http wa lori ibudo akọkọ, awọn ibọsẹ wa lori ibudo keji.

Ṣayẹwo asopọ nipasẹ iṣẹ irọrun eyikeyi:

Ohun gbogbo n ṣiṣẹ. Fun apakan tiwa, a ko ṣeduro lilo asopọ ti ko ni aabo laisi iwọle / igbanilaaye ọrọ igbaniwọle, ati pẹlu eto awọn ebute oko oju omi boṣewa. Lakoko ti o ṣeto faili iṣeto, rii daju lati pato iwọle kan ati ṣẹda ọrọ igbaniwọle eka kan, ati tun yi awọn ebute oko oju omi pada si awọn ti kii ṣe boṣewa. Ni awọn iṣẹlẹ alailẹgbẹ, o ṣee ṣe lati lo aṣẹ adiresi IP

Awọn iṣoro ti o wọpọ

Nkankan ti ko tọ ati pe aṣoju ko ṣiṣẹ? Boya iṣeto 3proxy ti ṣe ni aṣiṣe. Jẹ ki a gbero awọn iṣoro ti o wọpọ julọ ati awọn solusan wọn lakoko fifi sori ẹrọ ati tunto ohun elo naa.

Ko si asopọ

Iṣoro ti o wọpọ julọ fun ọpọlọpọ awọn olumulo jẹ asopọ ti ko le wọle nigbati awọn faili iṣeto ba dabi pe o tunto ni deede. Ti o ba ni idaniloju pe gbogbo awọn eto ti tunto ni deede, olupese alejo gbigba ko ni opin ibudo ti o yan ati gbogbo data tọka iṣẹ iṣẹ kan, iṣoro naa le wa ninu Ogiriina, tabi, diẹ sii ni deede, iṣeto ti ko tọ. Fun apẹẹrẹ, o le jẹ diẹ sii ju awọn eto meji ti a fi sori ẹrọ ti yoo koju ara wọn. Lati yanju iṣoro naa, o to lati lo ogiriina kan pato. A ni imọran ọ lati yan awọn iptables nikan tabi ogiriina-cmd.

Iṣẹ naa ko ṣe ifilọlẹ

Iṣẹ naa ko bẹrẹ lẹhin ti ṣeto gbogbo awọn faili iṣeto ni pataki. Eyi waye nigbati igbesẹ iṣeto ba padanu, awọn ẹtọ ti o yẹ ko fun, tabi aṣiṣe kekere kan ni awọn faili iṣeto ni. A ṣeduro fun ọ lati farabalẹ ka awọn ilana ni igbese nipa igbese lẹẹkansi, boya o padanu ọkan ninu awọn igbesẹ naa. Ti ohunkohun ko ba ṣe iranlọwọ, yoo jẹ imọran ti o dara lati tun fi OS naa sori ẹrọ ki o tẹle gbogbo awọn igbesẹ lati ibẹrẹ. A ṣe iṣeduro lilo ayẹwo ti o wa ni /cfg/3proxy.cfg.sample, bi iṣeto idanwo, ati fifi sori ẹrọ tẹlẹ ogiriina-cmd bi ogiriina.

gedu

Ipari, ṣugbọn kii ṣe ọrọ pataki ti o kere ju ti o nii ṣe pẹlu ibi ipamọ faili. 3proxy gba ọpọlọpọ mb lakoko fifi sori ẹrọ, ṣugbọn iwọn le pọ si ni pataki nikan nipasẹ gedu pẹlu akoko ti o kọja. Otitọ ni pe ọpọlọpọ awọn olumulo mu gbigbasilẹ log ṣiṣẹ ni faili lọtọ, ṣugbọn maṣe ṣeto yiyi ati maṣe paarẹ awọn akọọlẹ ti ko ṣe pataki. Awọn aṣayan mẹta le ṣee lo lati yanju iṣoro yii:

1. Mu iwọle ṣiṣẹ;
2. Lokọọkan paarẹ awọn akọọlẹ ti ko ṣe pataki;
3. Mu yiyi ṣiṣẹ, bi o ti ṣe ni iṣeto ni oke. Fun apẹẹrẹ, “yi 30” ninu faili atunto tumọ si pe 3proxy yoo tọju awọn faili 30 tuntun nikan.

ipari

Fifi ati tunto 3proxy lori CentOS ati awọn ọna ṣiṣe ArchLinux jẹ irọrun ti o rọrun, ṣugbọn ni akoko kanna iṣẹ ṣiṣe ti o munadoko. Nkan naa bo awọn igbesẹ lati fi sori ẹrọ awọn idii pataki, tunto awọn faili iṣeto, ati ṣe ifilọlẹ iṣẹ naa. Imọ ti o gba yoo gba ọ laaye lati fi sori ẹrọ ati tunto olupin aṣoju rẹ funrararẹ laisi awọn iṣoro eyikeyi.