"Kuv tau txais qhov kev ntxhov siab no,
pib nrog Zello tsis txaj muag; LinkedIn
thiab xaus nrog "txhua tus neeg" ntawm Telegram platform
hauv kuv lub ntiaj teb no.Thiab ces hiccup,
Tus nom hais ntxiv nrawm thiab nrov nrov:
tab sis kuv yuav muab cov khoom hauv kev txiav txim (ntawm no hauv IT)"
(...).
Durov, rightly ntseeg hais tias nws yog authoritarian xeev uas yuav tsum ntshai ntawm nws, ib tug cypherpunk, thiab Roskomnadzor thiab golden shields nrog lawv DPI lim tsis tshua thab nws.
(Kev nom kev tswv)
Kuv txoj kev cai lij choj yooj yim dua, Kuv tuaj yeem piav qhia ntawm no kuv cov kev xav txog kev tsis saib xyuas hauv Runet, tab sis kuv ntseeg tias cov pej xeem loj hlob ntawm niaj hnub Lavxias thiab Habr cov neeg siv tau hnov qhov tsis muaj kev tshaj lij ntawm tsoomfwv tam sim no hauv lawv cov tawv nqaij, yog li kuv yuav txwv kuv tus kheej rau ib kab lus: peb txoj cai lij choj yog "Digital Resistance". "muab cov txheeb ze thiab phooj ywg nrog kev sib txuas lus ruaj khov."
Deploying MTProto proxy Telegram
- Cov txheej txheem ntawm kev nyuaj yog "yooj yim", yog tias, piv txwv li, koj ua raws li daim ntawv tsis ncaj ncees no.
- Cov qib kev ntseeg tau yog "siab tshaj qhov nruab nrab": cov duab docker ua haujlwm ruaj khov, nws tsis tas yuav rov pib dua txhua hnub, raws li cov neeg tsim tawm tau sau rau hauv lawv cov ntaub ntawv Telegram, tab sis lub thawv tej zaum muaj qee qhov tsis zoo.
- Cov theem ntawm kev tawm tsam / kev ntxhov siab - 10 ISIS cov tswv cuab weave lawv conspiracies "cov txheeb ze siv", qhov txwv tsis pub los ntawm RKN txawm ib zaug txhua lub sijhawm (txij li lub caij nplooj ntoo hlav).
- Qhov kev ntseeg siab yog "public menyuam tsis ntseeg", ib qho teeb meem ntawm tus neeg siv khoom (qee tus phooj ywg xav tsis thoob txog kuv MtprotoProxy).
- Testosterone qib - "tsis tau siab dua."
- Cov nqi nyiaj txiag - "0₽".
- Cov nqi zog nyiaj txiag - "tsis yog nyob ntawm pej xeem Durov." Kev tshaj tawm - lub peev xwm los tsim kev tshaj tawm.
Peb yuav tsa peb TelegramProxy ntawm "dawb / tus kheej" muaj peev xwm ntawm Amazon-ec2: t2.micro. kuv siv tsheb.
Okay, deployed koj free server, mus rau lub official lub website thiab rub tawm lub thawv docker.
Tsis tas yuav nrhiav qee cov duab, cov ntaub ntawv, lossis khawm khawv koob - "lawv tsis nyob ntawd", tag nrho cov khawv koob ua tiav hauv CLI:
$ docker pull telegrammessenger/proxy #образ скачан.Tab sis ua ntej "qhov ntawd", nruab docker rau CLI:
sudo apt-get install docker.io dockerTsis tas li ntawd, hauv cov ntaub ntawv raug cai ntawm MtprotoProxyTelegram, peb tau muab ua qee yam zoo li hauv qab no, peb ua:
$ sudo su && docker run -d -p443:443 --name=mtproto-proxy --restart=always -v proxy-config:/data telegrammessenger/proxy:latest #запускаем наш контейнер «mtproto-proxy».
Tom qab cov lus txib no, ib txoj hlua HEX yuav tshwm sim hauv lub davhlau ya nyob twg, tab sis peb tsis txaus siab rau nws.
Peb sau hauv CLI:
$ docker logs mtproto-proxyThiab peb tau txais cov ntaub ntawv xav tau:
Hauv cov zis ntawm lub cav no, peb tau pom (smeared):
A) peb tus IP server (sab nraud server ip);
B) thiab random zais cia - ib txoj hlua random hauv HEX.
Ua ntej sau npe rau peb MtproProxy, koj yuav tsum tau teeb tsa lub firewall tseem ceeb tshaj iptables (txawm li cas los xij koj redirect tsheb mus rau VPC no, nws yuav tsis zoo, vim lub ntsiab firewall hauv Amazon-EC2 nyob rau hauv lub web interface thiab muaj qhov tseem ceeb dua. iptables).
Peb mus rau " Amazon-EC2" nyob rau hauv Pawg Kev Ruaj Ntseg thiab qhib qhov chaw nres nkoj 443 (cov ntaub ntawv pov thawj thawj zaug).
Peb nqa peb cov ntaub ntawv "ip thiab zais cia" los ntawm lub cav thiab mus rau Telegram tus tub txib, nrhiav tus nom MTProxy Admin Bot (@MTProxybot) thiab sau npe peb MtproProxy: khiav [/newproxy] cov lus txib thiab nkag mus [our_ip: 443], thiab ces peb [secret /HEX].
Yog tias koj mess thaum nkag mus rau cov ntaub ntawv, bot yuav npau taws thiab xa koj mus rau ...
Yog tias koj sau ob kab yam tsis muaj qhov yuam kev, koj yuav tau txais kev pom zoo thiab ua haujlwm txuas rau koj qhov MtprotoProxyTelegram tam sim no, uas koj tuaj yeem qhia rau leej twg.
Tsis tas li ntawd, los ntawm qhov bot no, koj tuaj yeem ntxiv koj qhov kev txhawb nqa channel (tab sis tsis yog kev sib tham), qhov twg koj yuav ua rau koj cov kev xav rau cov neeg siv uas tau txuas nrog koj lub server, lossis koj tsis tuaj yeem "spam" thiab tsis thab koj cov neeg siv khoom muaj peev xwm yam tsis muaj qhia cov channel hauv daim ntawv teev tus tub txib pinned.
Ob peb lo lus ntxiv txog bot, qhov twg koj tuaj yeem thov txheeb cais, tab sis "kuj ib qho khoom noj". Pom tau tias, "kev txheeb cais" muaj thaum koj muaj "cov neeg coob coob ntawm cov neeg thauj khoom dawb" qab koj Makhachkala.
Saib xyuas
Muaj pes tsawg tus neeg siv peb tuaj yeem txuas rau peb lub server? Thiab qhov twg, leej twg / dab tsi nyob ntawd? Dab tsi? Thiab pes tsawg?
Peb saib dab tsi muaj raws li cov ntaub ntawv raug cai ... Yog, ntawm no, ua li no:
$ curl http://localhost:2398/stats или вот так $ docker exec mtproto-proxy curl http://localhost:2398/stats # и нам выдадут статистику прямо в CLI."Ua kom koj lub hnab ntim dav dua" Raws li cov lus qhia, peb yuav tau txais qhov yuam kev zoo sib xws:
«curl: (7) Tsis tau txuas mus rau localhost chaw nres nkoj 2398: Kev sib txuas tsis kam»
Peb lub npe yuav ua haujlwm. Tab sis! Bagel, tsis yog txheeb cais peb tau txais.
Koj tuaj yeem ua tej yam rau qhov muag liab: kos
$ netstat -an | grep 2398 и...Thaum xub thawj kuv xav tias qhov no yog lwm qhov jamb tom qab Telegram cov neeg tsim khoom (thiab kuv tseem xav li ntawd), tom qab ntawd kuv pom ib qho kev daws teeb meem zoo: polish Docker Container nrog cov ntaub ntawv.
Tom qab ntawd, ib tug infa ntes tau kuv lub qhov muag:
hais txog lub xeev seev cev ntawm Roskomnadzor nyob ib ncig ntawm "statistics".
"Peb tau thaiv qee qhov kev tshaj tawm pej xeem ntawm peb cov servers siv cov ntaub ntawv ntawm qhov project firehol. Qhov project no saib xyuas cov npe nrog pej xeem proxies thiab ua databases nrog lawv.
Txij li lub sijhawm ntawd (uas yog, yuav luag ob hnub dhau los), tsis muaj ib tus IP chaw nyob ntawm peb tus neeg sawv cev Lavxias tau raug txwv.
3. Peb qhia rau koj paub yuav ua li cas ua ib tug proxy uas yuav luag invulnerable rau Roskomnadzor thiab qhia ib tsab ntawv rau thaiv cov pej xeem proxies.
- Hloov kho MTProto lub npe docker thawv (los yog daemon) mus rau qhov tseeb version: RKN xam cov qub versions los ntawm qhov chaw nres nkoj txheeb cais, uas tau khi rau 0.0.0.0 thiab cim nws tus kheej rau tag nrho Is Taws Nem. Zoo dua, qhib cov chaw nres nkoj tsim nyog siv iptables, thiab kaw qhov seem (nco ntsoov tias nyob rau hauv rooj plaub ntawm lub thawv docker, koj yuav tsum siv txoj cai FORWARD).
- Roskomnadzor kawm paub yuav ua li cas pov tseg tsheb khiav ntev dhau los: lawv pom kev thov hauv HTTP thiab SOCKS5 tus neeg sawv cev, thiab lawv kuj pom cov qub version ntawm MTProto npe obfuscation.
Thaum cov neeg siv khoom ntawm qee cov chaw muab kev pabcuam uas muaj cov pob tseg no tau teeb tsa Telegram los ntawm cov neeg sawv cev zoo li no, RKN pom cov kev thov no thiab tam sim ntawd thaiv cov npe no. Tib yam mus rau MTProto npe nrog cov qub obfuscation.
Kev daws: faib tsis pub lwm tus paub nrog dd thaum pib rau cov neeg siv khoom uas txuas rau lub npe (tsis tas yuav qhia cov ntawv ntxiv dd hauv qhov chaw ntawm mtproto npe nws tus kheej). Qhov no yuav pab kom muaj kev sib cav sib ceg uas dumppiles tsis tuaj yeem ntes tau.
Thiab tsis muaj HTTP lossis SOCKS5 tus neeg sawv cev.
- Kev hloov kho, nrog kev pab los ntawm txhua tus tswv ntawm lub npe hu xov tooj, uas raug txwv tsis tu ncua los ntawm RKN, tuaj yeem ua tiav (lossis yuav luag tag nrho) nres (thiab tib lub sijhawm kom paub tseeb tias RKN dag).
Ib tsab ntawv txwv pej xeem proxies thiab phau ntawv me me rau nws.
→
Peb lub npe yog pro-Western, Kuv tsis tau ntsib ib qho teeb meem / blockages thaum lub caij nplooj ntoos hlav thiab lub caij ntuj sov txias, nws tsis nyiam txoj haujlwm muaj tswv yim, yog li kuv tsis poob pace thiab tsis ntxiv dd * ua ntej rau tus yuam sij.
Phau ntawv "tau txais kev txheeb cais / saib xyuas" raws li cov lus qhia ntawm MtprotoProxyTelegram tsis ua haujlwm / tsis tu ncua, koj yuav tau kho cov duab docker.
Peb kho nws.
Lub thawv tseem tab tom khiav:
$ docker stop mtproto-proxy #останавливаем наш запущенный docker-контейнер и запускаем новый образ с пропущенным флагом статистики
$ docker run --net=host --name=mtproto-proxy2 -d -p443:443 -v proxy-config:/data -e SECRET=ваш_предыдущий_секрет_hex telegrammessenger/proxy:latest
Cia peb tshawb xyuas cov txheeb cais:
$ curl http://localhost:2398/stats
curl: (7) Txuas mus rau 0.0.0.0 chaw nres nkoj 2398: Kev sib txuas tsis kam
Statistics tseem tsis tau muaj.!..
Tshawb nrhiav tus ID ntawm lub thawv docker:
$ docker ps
CONTAINER ID IMAGE COMMANAND CREATED STATUS PORTS NAMES
f423c209cfdc telegrammessenger/proxy:latest "/bin/sh -c '/bin/ba…" Hais txog ib teev dhau los Txog ib feeb 0.0.0.0:443->443/tcp mtproto-proxy2
Peb mus nrog peb charter nyob rau hauv lub docker thawv:
$ sudo docker exec -it f423c209cfdc /bin/bash
$ apt-get update
$ apt-get install nano
$ nano -$ run.sh
Thiab nyob rau hauv kab kawg ntawm "run.sh" tsab ntawv, ntxiv tus chij uas ploj lawm:
«--http-stats»
"exec /usr/local/bin/mtproto-proxy -p 2398 -H 443 -M "$WORKERS" -C 60000 --aes-pwd /etc/telegram/hello-explorers-how-are-you-doing -u hauv paus $CONFIG --allow-skip-d h --nat-info "$INTERNAL_IP:$IP" $SECRET_CMD $TAG_CMD"
Ntxiv "--http-stats", tej yam zoo li no yuav tsum ua haujlwm:
«exec /usr/local/bin/mtproto-proxy -p 2398 --http-stats -H 443 -M "$WORKERS" -C 60000 --aes-pwd /etc/telegram/hello-explorers-how-are-you-doing -u root $CONFIG --allow-skip-d h --nat-info "$INTERNAL_IP:$IP" $SECRET_CMD $TAG_CMD»
Ctrl + o / Ctrl + x / Ctrl + d (txuag / tawm nano / tawm lub thawv).
Rov pib peb lub thawv docker:
$ docker restart mtproto-proxy2Txhua yam, tam sim no ntawm cov lus txib:
$ curl http://localhost:2398/stats #получаем объемную статистику
Muaj ntau "khoom khib nyiab" hauv kev txheeb cais (1/3 ntawm nws nyob ntawm qhov screen), tsim ib lub npe:
$ echo "alias telega='curl localhost:2398/stats | grep -e total_special -e load_average_total'" >> .bashrc && bashPeb tau txais dab tsi lub thawv docker tau polished rau: tus naj npawb ntawm kev sib txuas thiab cov khoom thauj:
$ telega
Lub thawv Docker tab tom khiav, cov txheeb cais tau tig.
Cov peev txheej siv
Zoo li koj yog Stuart Redman, txawm tias koj tawm ntawm koj lub panties. Daim duab Docker khiav tawm ib qho hneev taw loj.
Nws ua rau tsis muaj kev nkag siab los piav txog qhov zoo thiab qhov tsis zoo ntawm cov duab docker, lub thawv docker yog lub tshuab mini-virtual uas siv cov peev txheej tsawg dua li "tiag" tshuab virtual, xws li VirtualBox, tab sis nws ua.
1) Tshaj tawm nrog lossis tsis muaj docker-cov duab txheeb cais, ob tus neeg siv khoom frolic lossis kaum - cov peev txheej tau siv ~ tib txoj kev: 75% ntawm tag nrho CPU t2.micro kev ua haujlwm.
2) Peb saib kev saib xyuas ntawm VPC server:
Los ntawm cov peev txheej siv cov duab kos ntawm VPC, peb pom tias lub thawv docker tas li siv ~ 7,5% ntawm tag nrho cov max. CPU kev ua tau zoo thiab lub Tsib Hlis 28 tau nres los ntawm kuv txhob txwm / ib ntus (Ceeb toom - OpenVPN & pptp kuj tseem khiav ntawm lub server).
Vim li cas 10% kev siv CPU tas li txwv rau cov neeg rau zaub mov no?
Vim tias muaj kev txwv los ntawm Amazon EC2 thiab lawv suav nrog cov qhab nia:
1 CPU credit = 1 CPU ua hauj lwm ntawm 100% load rau ib feeb, thiab peb muaj 6 khab nias (uas yog, ntawm peaks, 100% CPU siv tau nyob rau hauv 6 feeb, thiab ces lub CPU zog yuav txo). Lwm yam kev sib xyaw ua ke: piv txwv li, 1 CPU credit = 1 CPU khiav ntawm 50% load rau ob feeb (piv txwv li peb tuaj yeem siv CPU ntawm 50% load rau 12 feeb), lossis, piv txwv li, qhov tsis tu ncua 10% - th CPU load thaum lub sijhawm tag nrho lub sijhawm, thiab lwm yam.
tshawb pom
- Peb yog ib feem ntawm "Digital Resistance". Muab lawv "txiv thiab niam" nrog kev sib txuas lus zoo.
- Yog tias koj muaj MtprotoProxyTelegram thiab OpenVPN xa tawm ntawm lub server, tab sis tsis muaj ntxiv, yuav tsis muaj kev ncua / pings / tsis ua haujlwm, tab sis yog tias koj niaj hnub sim nrog koj t2 / micro, ces tos kev sib txuas lus nres.
- Kuv tus ping txawv teb chaws yog ~ 100-250ms, tsis muaj kev ncua hauv lub suab sib txuas lus.
- Cov nqi nyiaj txiag rau txhua qhov "qhov no" (nrog rau cov peev txheej VPC) = 0₽.
Reprint ntawm koj tsab xov xwm.
UPD: Ua tsaug rau qee tus habrausers rau cov lus qhia muaj txiaj ntsig, qhov tseeb, nws muaj peev xwm ua tau (puas yog cov txheeb cais txhawb nqa?), Muaj cov analogues zoo dua ntawm Mtproto proxy Telegram docker duab.
Tau qhov twg los: www.hab.com