{"id":112621,"date":"2024-01-01T03:10:24","date_gmt":"2024-01-01T01:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika"},"modified":"2024-01-01T03:10:24","modified_gmt":"2024-01-01T01:10:24","slug":"fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","title":{"rendered":"fproxy v83 \u2014 lokalni proxy poslu\u017eitelj za filtriranje http(s) prometa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Objavljena je 83. verzija cache i antispam proxy poslu\u017eitelja za osobnu upotrebu s fleksibilnim postavkama.<\/p>\n

Glavne funkcije (sve se mo\u017ee konfigurirati):<\/p>\n

    \n
  1. filtriranje ne\u017eeljenog sadr\u017eaja (bijele\/crne liste URL-ova, zabrana kola\u010di\u0107a);<\/li>\n
  2. prisilno i trajno ke\u0161iranje primljenih podataka (uglavnom korisno za slike i skripte);<\/li>\n
  3. ispisivanje sadr\u017eaja web stranica u hodu (mijenjanjem izvora u C, postoji primjer za zamjenu sadr\u017eaja kloniranih stranica stackoverflow linkom na izvor);<\/li>\n
  4. crne\/bijele liste certifikata i certificate pinning prema popisu;<\/li>\n
  5. zamjena IP adrese\/domena\/putanje\/protokola http zahtjeva prema konfiguraciji (takva pro\u0161irena varijanta \/etc\/hosts);<\/li>\n
  6. http\/https sniffer.<\/li>\n<\/ol>\n

    Odli\u010dno pristaje za pregledavanje web stranica preko sporog interneta ili sporih ure\u0111aja (zahvaljuju\u0107i to\u010dkama 1 i 2, zbog kojih je sve zapravo i zapo\u010deto), ali je korisno u svakom slu\u010daju.<\/p>\n

    Proxy poslu\u017eitelj u svrhu sigurnosti i pojednostavljivanja logike rada podijeljen je na tri dijela: TLS server (terminira browser veze), sredi\u0161nji proxy modul i klijent koji terminira odlazne veze.<\/p>\n

    Program je osmi\u0161ljena za personaliziranu upotrebu, \u0161to zna\u010di da su svi konfiguracijski datoteke i direktorij s trenutnim podacima proxy poslu\u017eitelja vezani uz odre\u0111enog korisnika ili \u010dak uz odre\u0111eni pregledni\u010dki profil. Tehni\u010dki je mogu\u0107e pokrenuti proxy kao sustavni demon, ali u tom obliku je te\u0161ko koristiti jednu od njegovih glavnih funkcija \u2014 agresivno ke\u0161iranje svega, jer ke\u0161irani podaci za svaki pregledni\u010dki profil mogu biti vlastiti i moraju biti izolirani jedni od drugih zbog sigurnosti.<\/p>\n

    Primjer popisa za blokiranje:<\/p>\n

    deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? deny nosub spec vk.com query \\\/share.php deny nosub spec yastatic.net query \\\/pcode\\\/adfox\\\/loader.js query \\\/share2\\\/share.js deny nosub spec www.youtube.com query \\\/subscribe_widget deny nosub spec pano.img.ria.ru query \\\/adriver\\\/flashplagin\\\/movie.swf deny nosub spec a.ria.ru query \\\/ping deny nosub spec n-ssl.ria.ru query \\\/polling deny nosub spec apis.google.com query \\\/js\\\/plusone.js deny nosub spec yandex.ru pref \\\/clck\\\/safeclick\\\/ pref \\\/clck\\\/click\\\/ pref \\\/clck\\\/jclck\\\/ deny all spec query \\\/tnc # index.ru proxied counter exact \\\/tnc.js # index.ru proxied counter query \\\/pixel.gif # neki spameri koriste ovo <\/p>\n

    Primjer popisa usmjeravanja:<\/p>\n

    https:\/\/my.local.site set proxy none set target http:\/\/127.0.0.1:1234\/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5:\/\/127.0.0.1:3333 <\/p>\n

    U slu\u010daju a\u017euriranja s verzije starije od 78 potrebno je konvertirati cache: u\u0107i u radnu direktoriju proxy poslu\u017eitelja korisnika (uid\/gid) proxy poslu\u017eitelja i izvr\u0161iti fproxy-cacheconv-78 (po defaultu, ovaj program nije kompajliran).<\/p>\n

    <\/p>\n

    Izmjene od pro\u0161le objavljene verzije (80<\/a>):<\/p>\n

    <\/noindex><\/noindex> <\/p>\n

      \n
    1. fproxy-dashboard sada ima opciju prikazivanja veli\u010dina sadr\u017eaja u bajtovima umjesto kB;<\/li>\n
    2. podr\u0161ka za problemati\u010dne poslu\u017eitelje koji ignoriraju zaglavlje \u00abConnection: close\u00bb;<\/li>\n
    3. podr\u0161ka za problemati\u010dne poslu\u017eitelje koji vra\u0107aju neispravno zaglavlje \u00abContent-Encoding: identity\u00bb;<\/li>\n
    4. slanje TLS opcije ALPN;<\/li>\n
    5. pobolj\u0161anje rada TLS terminatora na strani klijenta: sada podr\u017eava ne samo TLS, ve\u0107 i obi\u010dne veze, podr\u017eava rad kao neovisni demon s prihva\u0107anjem zahtjeva od glavnog proxyja putem mre\u017ee, a tako\u0111er mo\u017ee proslijediti svoje izlazne veze preko drugog proxyja, omogu\u0107uju\u0107i tako fleksibilno dijeljenje zadataka izme\u0111u \u010dvorova u uvjetima lo\u0161e internetske veze i\/ili potrebe za organiziranjem \u00abizlaza\u00bb prometa negdje na udaljenom poslu\u017eitelju razli\u010ditih razina povjerenja; nova verzija je tako\u0111er prikladnija za ru\u010dnu upotrebu iz naredbenog retka kao konzolni TLS klijent s podr\u0161kom za proksiranje;<\/li>\n
    6. olak\u0161ana izrada, sada postoji Makefile umjesto shell skripti<\/li>\n
    7. organizirane unaprijed sastavljene .deb pakete u repozitoriju (za verzije Debian 8-12)<\/li>\n
    8. izmjene u konfiguracijskoj datoteci, unatrag nekompatibilne<\/li>\n
    9. nova konfiguracija za upravljanje usmjeravanjem zahtjeva, koja je spojila ranije odvojene konfiguracije resolv i proslje\u0111ivanja odlaznih veza na udaljeni poslu\u017eitelj, a tako\u0111er je dobila niz novih opcija: sada se za svaki URL (protokol, domena, port, put) mo\u017ee odabrati kroz koji klijent, kojem proxyju \u0107e biti poslan, kroz \u010diji DNS poslu\u017eitelj \u0107e se provesti odre\u0111ivanje njegove IP adrese (uklju\u010duju\u0107i opcionalno delegiranje ovog zadatka vanjskom proxy poslu\u017eitelju http ili socks5), ili ru\u010dno unijeti adresu, kao i promijeniti protokol, port ili prefiks puta URL-a<\/li>\n
    10. dodana podr\u0161ka za SAN certifikate za IP adrese i u klijentu i u poslu\u017eitelju (preglednici su odnedavno prestali prihva\u0107ati IP adrese u CommonName)<\/li>\n<\/ol>\n

      U planovima za budu\u0107nost:<\/p>\n

        \n
      1. podr\u0161ka za CGI\/FastCGI\/.so hookove za mitm obradu sadr\u017eaja preuzetog s web stranica<\/li>\n
      2. upravitelj profila i konfiguracija proxy-a<\/li>\n
      3. interaktivno upravljanje provjerom certifikata udaljenih stranica i popisima blokada<\/li>\n<\/ol>\n

        Izvor: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

        \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (\u0431\u0435\u043b\u044b\u0435\/\u0447\u0451\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u0443\u0440\u043b\u044b, \u0437\u0430\u043f\u0440\u0435\u0442 \u043a\u0443\u043a); \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438 \u0431\u0435\u0441\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432); \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043b\u0435\u0442\u0443 (\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430 \u043d\u0430 \u0421\u0438, \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446-\u043a\u043b\u043e\u043d\u043e\u0432 stackoverflow […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112621","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47fproxy v83 \u2014 lokalni proxy server za filtriranje http(s) prometa | ProHoster","description":"Objavljena je 83. verzija cache proxy servera i antispam proxy servera za osobnu upotrebu s fleksibilnim postavkama. Glavne zna\u010dajke (sve je prilagodljivo): filtriranje nepo\u017eeljnog sadr\u017eaja.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47fproxy v83 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 http(s)-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-01T01:10:24+00:00","article:modified_time":"2024-01-01T01:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=112621"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112621\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=112621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=112621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=112621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}