{"id":74613,"date":"2020-03-18T20:43:03","date_gmt":"2020-03-18T17:43:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej"},"modified":"2026-05-20T21:31:10","modified_gmt":"2026-05-20T19:31:10","slug":"besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","title":{"rendered":"Tasuta puhverserver ettev\u00f5tetele, millel on domeenil p\u00f5hinev volitamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Tasuta<\/p>\n

pfSense + Squid koos HTTPS-filterimise ja \u00fchtse sisselogimise (SSO) tehnoloogiaga Active Directory gruppide j\u00e4rgi filtreerimisega<\/p>\n

L\u00fchike taustalugu<\/h4>\n

Ettev\u00f5ttes tekkis vajadus rakendada puhverserverit, mis v\u00f5imaldaks ligip\u00e4\u00e4su veebisaitidele (sh https) filtreerida AD-gruppide j\u00e4rgi, et kasutajad ei peaks sisestama mingeid t\u00e4iendavaid paroole ja haldamine oleks v\u00f5imalik veebiliidese kaudu. Ei ole ju halb idee, eks?<\/p>\n

\u00d5ige vastus oleks olnud soetada sellised lahendused nagu Kerio Control v\u00f5i UserGate, kuid nagu ikka, raha pole, samas vajadus on.<\/p>\n

Siin tuleb appi vana hea Squid, aga j\u00e4lle \u2014 kust v\u00f5tta veebiliides? SAMS2? Moraalselt aegunud. Siin tulevad appi pfSense.<\/p>\n

Kirjeldus<\/h4>\n

Selles artiklis kirjeldatakse Squidi puhverserveri seadistamise viisi.
\nKasutajate autentimiseks kasutatakse Kerberost.
\nDomeenigruppide j\u00e4rgi filtreerimiseks kasutatakse SquidGuardi.<\/p>\n

J\u00e4lgimiseks kasutatakse Lightsquid, sqstat ning pfSense'i sisemisi j\u00e4lgimisse s\u00fcsteeme.
\nSamuti lahendame selle tavalise probleemi, mis on seotud \u00fchtse sisselogimise tehnoloogia (SSO) rakendustega, mis \u00fcritavad internetti p\u00e4\u00e4seda oma s\u00fcsteemi kasutaja kontoga.
\n<\/a><\/p>\n

Valmistamine Squidi installimiseks<\/h4>\n

Aluseks v\u00f5etakse pfSense, Paigaldusjuhend.<\/a><\/p>\n

Mille sees organiseerime autentimise tulem\u00fc\u00fcri enda kasutajakontode abil. Juhend.<\/a><\/p>\n

V\u00e4ga oluline!<\/p>\n

Enne Squidi installimise alustamist tuleb seadistada DNS serverile<\/a> pfSense'is, luua sellele A ja PTR kirjed meie DNS-serveris ning seadistada NTP, et kellaaeg ei erineks domeenikontsentratori ajast.<\/p>\n

Ja teie v\u00f5rgus tuleb anda WAN-liidesele pfSense v\u00f5imalus internetti p\u00e4\u00e4seda ning kasutajatele kohalikus v\u00f5rgus \u00fchenduda LAN-liidese kaudu, sealhulgas portide 7445 ja 3128 (minu puhul 8080) kaudu.<\/p>\n

Kas k\u00f5ik on valmis? Kas domeeni LDAP-\u00fchendus pfSense'i volitamiseks on seadistatud ja kellaaeg on s\u00fcnkroonitud? Suurep\u00e4rane. Aeg alustada p\u00f5hiprotsessi.<\/p>\n

Squidi, SquidGuardi ja LightSquidi installimine ja esialgne seadistamine<\/h4>\n

Installime pfSense'i pakihalduri kaudu jaotises \u201eS\u00fcsteem \/ Pakihaldur\u201d.<\/p>\n

P\u00e4rast edukat installimist liikume jaotisse \u201eTeenused\/Squid Proxy server\u201d ja seet\u00f5ttu seadistame esmalt vahekaardil Local Cache vahem\u00e4lu, mina seadistasin k\u00f5ik v\u00e4\u00e4rtused 0, kuna ma ei n\u00e4e erilist m\u00f5tet veebilehtede vahem\u00e4llu salvestamisel \u2013 sellega saavad brauserid suurep\u00e4raselt hakkama. Seadistamise l\u00f5petamiseks vajutame ekraani allosas nuppu \u201eSalvesta\u201d, mis annab meile v\u00f5imaluse teha p\u00f5hiseadeid proxy jaoks.<\/p>\n

P\u00f5hiseaded seadistame j\u00e4rgmiselt:<\/p>\n

\"Tasuta<\/p>\n

Vaikimisi port on 3128, aga mina eelistan kasutada 8080.<\/p>\n

Valitud parameetrid vahekaardil Proxy Interface m\u00e4\u00e4ravad, milliseid liideseid meie proxy kuulab. server<\/a>Kuna see tulem\u00fc\u00fcr on \u00fcles ehitatud nii, et interneti\u00fchendus l\u00e4heb WAN-liidese kaudu, isegi kui LAN ja WAN v\u00f5ivad olla \u00fches ja samas lokaalses alams\u00fcsteemis, soovitan kasutada proxy jaoks just LAN-i.<\/p>\n

Loopback on vajalik sqstat'i jaoks.<\/p>\n

Allpool leiate seadistused l\u00e4bipaistva (transparent) proxy jaoks ja ka SSL Filter, kuid need pole meile vajalikud, meie proxy ei ole l\u00e4bipaistev ja me ei tegele HTTPS-i sertifikaadi asendamisega (kuna meil on dokumentide k\u00e4ive, pangakliendid jne), vaid vaatame lihtsalt k\u00e4epidet.<\/p>\n

Sel hetkel peame liikuma oma domeenikontrollerisse ja looma seal autentimise konto (v\u00f5ite kasutada ka seda, mille olete seadistanud autentimiseks pfSense'is). Siin on v\u00e4ga oluline tegur \u2013 kui plaanite kasutada AES128 v\u00f5i AES256 \u0161ifrimist, m\u00e4rkige vastavad linnukesed konto seadetes.<\/p>\n

Kui teie domeen on v\u00e4ga keeruline mets, kus on palju katalooge, v\u00f5i teie domeen on .local, siis on V\u00d5IMALIK, kuid mitte t\u00e4pselt, et peate selle konto jaoks kasutama lihtsat parooli; see on tuntud viga, kuid keeruline parool v\u00f5ib lihtsalt mitte t\u00f6\u00f6tada, tuleb kontrollida konkreetse juhtumi puhul.<\/p>\n

\"Tasuta<\/p>\n

P\u00e4rast seda loome Kerberi v\u00f5tme faili, avame domeenikontrolleris administraatori \u00f5igustega k\u00e4surea ja sisestame:<\/p>\n

# ktpass -princ HTTP\/pfsense.domain.local@DOMAIN.LOCAL -mapuser pfsense -pass 3EYldza1sR -crypto {DES-CBC-CRC|DES-CBC-MD5|RC4-HMAC-NT|AES256-SHA1|AES128-SHA1|All} -ptype KRB5_NT_PRINCIPAL -out C:keytabsPROXY.keytab<\/code><\/pre>\n
Kus m\u00e4\u00e4rame oma pfSense FQDN, j\u00e4rgides rangelt suurte ja v\u00e4ike t\u00e4htede j\u00e4rgimist, parameetri mapuser alla sisestame oma domeeni kasutajakonto ja selle parooli ning kr\u00fcpto all valime \u0161ifreerimise meetodi; mina kasutasin t\u00f6\u00f6ks rc4 ja v\u00e4lja -out valime, kuhu saadame meie valmis v\u00f5tme faili.
\n\u00d5nnestunud v\u00f5tme faili loomise j\u00e4rel saadame selle meie pfSense'ile, kasutasin selleks Far'i, kuid seda saab teha ka k\u00e4skude, putty v\u00f5i pfSense'i veebiliidese kaudu jaotises 'Diagnostika -> K\u00e4skude rida'.<\/p>\n
N\u00fc\u00fcd saame redigeerida v\u00f5i luua \/etc\/krb5.conf<\/p>\n
\"Tasuta<\/p>\n
kus \/etc\/krb5.keytab on meie loodud v\u00f5tmefail.<\/p>\n
Kohustuslik on kontrollida Kerberose t\u00f6\u00f6d kinitiga, kui see ei t\u00f6\u00f6ta, ei ole m\u00f5tet edasi lugeda.<\/p>\n
Squidi autentimise ja autentimiseta juurdep\u00e4\u00e4su seadistamine<\/h4>\n
P\u00e4rast Kerberose edukat seadistamist \u00fchendame selle meie Squid'iga.<\/p>\n
Selleks minge teenustesse Squid Proxy Server ja p\u00f5hiseadetest rullige alla, seal leiate nuppu 'T\u00e4iendavad seadistused'.<\/p>\n
V\u00e4lja Custom Options (Before Auth) sisestame:<\/p>\n
#\u0425\u0435\u043b\u043f\u0435\u0440\u044b\nauth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth -s GSS_C_NO_NAME -k \/usr\/local\/etc\/squid\/squid.keytab -t none\nauth_param negotiate children 1000\nauth_param negotiate keep_alive on\n#\u0421\u043f\u0438\u0441\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430\nacl auth proxy_auth REQUIRED\nacl nonauth dstdomain \"\/etc\/squid\/nonauth.txt\" \n#\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \nhttp_access allow nonauth \nhttp_access deny !auth\nhttp_access allow auth<\/code><\/pre>\n
kus auth_param negotiate program \/usr\/local\/libexec\/squid\/negotiate_kerberos_auth<\/i> \u2014 valib vajaliku Kerberose autentimise abilduse.<\/p>\n
Ala -s<\/i> v\u00e4\u00e4rtusega GSS_C_NO_NAME<\/i> \u2014 m\u00e4\u00e4rab, et kasutatakse mis tahes kontot v\u00f5tmefailist.<\/p>\n
Ala -k<\/i> v\u00e4\u00e4rtusega \/usr\/local\/etc\/squid\/squid.keytab<\/i> \u2014 m\u00e4\u00e4rab, et kasutada just seda keytab faili. Minu puhul on see sama genereeritud keytab fail, mille kopeerisin kausta \/usr\/local\/etc\/squid\/ ja nimetasime \u00fcmber, sest squid ei tahtnud selle kaustaga s\u00f5brustada, ilmselt j\u00e4\u00e4vad \u00f5igused v\u00e4ikeseks.<\/p>\n
Ala -t<\/i> v\u00e4\u00e4rtusega -t none<\/i> \u2014 deaktiveerib ts\u00fcklilised p\u00e4ringud domeenikontrollerile, mis v\u00e4hendab oluliselt selle koormust, kui teil on rohkem kui 50 kasutajat.
\nTestimise ajaks saab lisada ka v\u00f5tme -d \u2014 st diagnostika, kuna siis prinditakse rohkem logisid.
\nauth_param negotiate children 1000<\/i> \u2014 m\u00e4\u00e4rab, kui palju samaaegseid autentimisprotsesse v\u00f5ib k\u00e4ivitada
\nauth_param negotiate keep_alive on<\/i> \u2014 ei lase katkestada \u00fchendust autoriseerimisahelat k\u00fcsides
\nacl auth proxy_auth REQUIRED<\/i> \u2014 loob ja n\u00f5uab juurdep\u00e4\u00e4su kontrollimise nimekirja, mis sisaldab autentimise l\u00e4binud kasutajaid
\nacl nonauth dstdomain<\/i> \u2014 teatame squidile nonauth juurdep\u00e4\u00e4su nimekirjast, kus on sihtdomeenid, millele on alati lubatud juurdep\u00e4\u00e4s k\u00f5igile. Koostame faili ja kirjutame selle sisse domeenid formaadis<\/p>\n
.whatsapp.com\n.whatsapp.net<\/code><\/pre>\n
Whatsapp ei ole p\u00f5hjuseta n\u00e4ide \u2014 see on v\u00e4ga n\u00f5udlik autentimist vajavate proxyde osas ja ei t\u00f6\u00f6ta, kui seda ei lubata enne autentimist.
\nhttp_access allow nonauth<\/i> \u2014 lubame juurdep\u00e4\u00e4su sellele nimekirjale k\u00f5igile
\nhttp_access deny !auth<\/i> \u2014 keelame juurdep\u00e4\u00e4su mittetuvastatud kasutajatele teistele saitidele
\nhttp_access allow auth<\/i> \u2014 lubame juurdep\u00e4\u00e4su autentitud kasutajatele.
\nK\u00f5ik, squid on teie jaoks h\u00e4\u00e4lestatud, n\u00fc\u00fcd on \u00f5ige aeg alustada r\u00fchmade filtreerimist.<\/p>\n
SquidGuardi seadistamine<\/h4>\n
Liigume teenuste men\u00fc\u00fcsse SquidGuard Proxy Filter.<\/p>\n
LDAP Choices all sisestame andmed oma konto kohta, mida kasutatakse Kerberose autentimiseks, kuid j\u00e4rgmises formaadis:<\/p>\n
CN=pfsense,OU=teenuse-\u00fchikud,DC=domain,DC=local<\/code><\/pre>\n
Kui on t\u00fchikuid v\u00f5i mitte-latin\u00fcksusi, tuleks see kirje sulgeda \u00fchekordsete v\u00f5i topelt jutum\u00e4rkidega:<\/p>\n
'CN=sg,OU=teenuse-\u00fchikud,DC=domain,DC=local'\n\"CN=sg,OU=teenuse-\u00fchikud,DC=domain,DC=local\"<\/code><\/pre>\n
Seej\u00e4rel peaksite need linnukesed kindlasti panema:<\/p>\n
\"Tasuta<\/p>\n
Kustutame ebavajalikud DOMAINpfsense DOMAIN<\/a>.LOCAL, millest kogu s\u00fcsteem on v\u00e4ga tundlik.<\/p>\n
Liigume n\u00fc\u00fcd edasi Group Acl-i ja seome oma domeenigruppide juurdep\u00e4\u00e4su, ma kasutan lihtsaid nimesid nagu group_0, group_1 jne kuni 3, kus 3 t\u00e4histab ainult valge nimekirja juurdep\u00e4\u00e4su ja 0 \u2014 lubatud on k\u00f5ik.<\/p>\n
Gruppide sidumine toimub j\u00e4rgmiselt:<\/p>\n
ldapusersearch ldap:\/\/dc.domain.local:3268\/DC=DOMAIN,DC=LOCAL?sAMAccountName?sub?(&(sAMAccountName=%s)(memberOf=CN=group_0OU=squidOU=service-groupsDC=DOMAINDC=LOCAL))<\/code><\/pre>\n
Salvestame oma grupi, liigume Times-i, seal olen loonud \u00fche ajavahemiku, mis t\u00e4hendab, et t\u00f6\u00f6tame alati, n\u00fc\u00fcd liigume Target Categories ja loome nimekirjad vastavalt soovidele, p\u00e4rast nimekirjade loomist naaseme oma gruppidesse ja gruppide sees nuppudega valime, kes kuhu p\u00e4\u00e4seb ja kes mitte.<\/p>\n
LightSquid ja sqstat<\/h4>\n
Kui seadistamise k\u00e4igus valisime loopbacki squid'i seadetes ja avasime juurdep\u00e4\u00e4sul 7445 tulem\u00fc\u00fcris nii meie v\u00f5rgus kui ka pfSense'is, siis liigeldes DiagnostikaSquid Proxy Reports-i saame probleemideta avada nii sqstat'i kui ka LightSquid'i; viimase jaoks tuleb seal ka m\u00f5elda kasutajanimi ja parool, samuti on v\u00f5imalus valida kujundus.<\/p>\n
L\u00f5petamine<\/h4>\n
pfSense on v\u00e4ga v\u00f5imas t\u00f6\u00f6riist, mis suudab teha palju asju \u2014 alates liikluse p\u00f6\u00f6ramisest kuni kasutajate interneti juurdep\u00e4\u00e4su kontrollimiseni, kuid see on vaid v\u00e4ike osa kogu funktsionaalsusest. Siiski lahendas see ettev\u00f5ttes, kus on 500 masinat, probleemi ning aitas kokku hoida proxy ostmisel.<\/p>\n
Loodan, et see artikkel aitab kedagi lahendada keskmiste ja suurte ettev\u00f5tete jaoks piisavalt \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u00fclesande.<\/p>\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 https + \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c Active Directory \u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u044b\u0441\u0442\u043e\u0440\u0438\u044f \u041d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c(\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 https) \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0438\u0437 AD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0437\u0430\u044f\u0432\u043e\u0447\u043a\u0430, \u043d\u0435 \u043f\u0440\u0430\u0432\u0434\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74614,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tasuta proxy-server ettev\u00f5ttele domeeni autentimisega | ProHoster","description":"pfSense+Squid koos HTTPS-i filtreerimisega + \u00dchiseid sisselogimise tehnoloogia (SSO) Active Directory grupi j\u00e4rgi filtreerimisega. L\u00fchike taust. Ettev\u00f5ttes tekkis vajadus kehtestada proxy server, mis v\u00f5imaldaks filtreerida veebisaitide juurdep\u00e4\u00e4su (sealhulgas HTTPS) AD-gruppide p\u00f5hjal, nii et kasutajad ei peaks sisestama t\u00e4iendavaid paroole ja haldamine oleks v\u00f5imalik veebiliidese kaudu. Ei ole halb, eks?","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 | ProHoster","og:description":"pfSense+Squid \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 https + \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c Active Directory \u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043f\u0440\u0435\u0434\u044b\u0441\u0442\u043e\u0440\u0438\u044f \u041d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0430\u043c(\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 https) \u043f\u043e \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0438\u0437 AD, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0435 \u0432\u0432\u043e\u0434\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441 \u0432\u0435\u0431 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041d\u0435\u043f\u043b\u043e\u0445\u0430\u044f \u0437\u0430\u044f\u0432\u043e\u0447\u043a\u0430, \u043d\u0435 \u043f\u0440\u0430\u0432\u0434\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/besplatnyj-proksi-server-dlya-predpriyatiya-s-domennoj-avtorizacziej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-18T17:43:03+00:00","article:modified_time":"2026-05-20T19:31:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74613","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:11:25","updated":"2022-09-28 14:47:46"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/74613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=74613"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/74613\/revisions"}],"predecessor-version":[{"id":181598,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/74613\/revisions\/181598"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/74614"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=74613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=74613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=74613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}