fproxy v83 - ihe nkesa proxy mpaghara maka nzacha okporo ụzọ http(s).

Ebipụtala ụdị nke 83 nke sava proxy caching na mgbochi spam maka ojiji nkeonwe nwere ntọala mgbanwe.

Isi ọrụ (ihe niile nwere ike ịhazi):

  1. nzacha nke ọdịnaya achọghị (ndepụta ọcha / oji na URL, machibido kuki);
  2. caching na-amanye na enweghị njedebe nke data enwetara (nke kachasị adaba maka foto na edemede);
  3. na-edozi ọdịnaya nke ibe weebụ na ofufe (site na-edezi koodu isi na C, e nwere ihe atụ maka iji dochie ọdịnaya nke ibe stackoverflow clone na njikọ nke mbụ);
  4. Ndepụta ojii / ọcha nke asambodo na ntinye akwụkwọ dịka ndepụta si dị;
  5. nnọchi nke adreesị IP / ngalaba / ụzọ / protocol nke arịrịọ http dị ka nhazi (ụdị ụdị /etc/hosts).
  6. http/https sniffer.

Zuru oke maka ikiri saịtị na ịntanetị dị nwayọ ma ọ bụ site na ngwa ngwa ngwa (n'ihi isi 1 na 2, nke emere ihe niile na mbụ), mana ọ bara uru n'ọnọdụ ọ bụla.

Maka ebumnuche nchekwa yana ime ka echiche nke ọrụ dị mfe, a na-ekewa ihe nkesa proxy n'ime akụkụ atọ: ihe nkesa TLS (na-akwụsị njikọ ihe nchọgharị), modul proxy nke etiti, na onye ahịa na-akwụsị njikọ na-apụ apụ.

Emebere mmemme ahụ maka iji ahaziri onwe ya, ya bụ, nhazi niile na ndekọ aha nwere data ihe nkesa proxy ugbu a na otu onye ọrụ, ma ọ bụ ọbụna na profaịlụ ihe nchọgharị akọwapụtara. Ọ ga-ekwe omume na teknụzụ iji mee proxy dị ka daemon zuru oke, mana n'ụdị a, ọ na-esiri ike iji otu n'ime ọrụ ya bụ isi - caching caching nke ihe niile, ebe ọ bụ na profaịlụ ihe nchọgharị ọ bụla nwere ike ịnwe data echekwara nke ya na a ga-ekewapụ ya na ya. ibe ha maka nchekwa.

Ihe atụ igbochi ndepụta:

deny nosub niile share.yandex.ru browser-updater.yandex.net deny nosub niile a.ria.ru # ? deny nosub spec vk.com query /share.php jụ nosub spec yastatic.net query /pcode/adfox/loader.js ajụjụ /share2/share.js jụrụ nosub spec www.youtube.com ajụjụ /subscribe_widget agọnahụ nosub spec pano.img ria.ru ajụjụ /adriver/flashplagin/movie.swf jụ nosub spec a.ria.ru ajụjụ /ping deny nosub spec n-ssl.ria.ru ajụjụ /polling deny nosub spec apis.google.com query /js/plusone .js jụ nosub spec yandex.ru pref /clck/safeclick/ pref /clck/click/ pref /clck/jclck/ jụ ajụjụ niile spec /tnc # index.ru proxied counter exact /tnc.js # index.ru proxied counter query /pixel.gif # ụfọdụ ndị spammers na-eji nke a

Ọmụmaatụ nke ndepụta ngagharị:

https://my.local.site set proxy none set target http://127.0.0.1:1234/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5://127.0.0.1:3333

Ọ bụrụ na emelite site na ụdị karịa 78, ị kwesịrị ịtụgharị cache: gaa na ndekọ ọrụ nke ihe nkesa proxy site na onye ọrụ (uid/gid) nke ihe nkesa proxy wee mee fproxy-cacheconv-78 (site na ndabara mmemme a). anaghị achịkọta ya).

Mgbanwe sitere na ụdị ebipụtara ikpeazụ (80):

  1. fproxy-dashboard ugbu a nwere nhọrọ igosi nha ọdịnaya na bytes karịa kbytes;
  2. nkwado maka sava buggy na-eleghara isi okwu "njikọ: nso" anya;
  3. nkwado maka sava buggy na-eweghachite nkụnye eji isi mee "Ọdịnaya-Encoding: njirimara" ezighi ezi;
  4. izipu nhọrọ TLS ALPN;
  5. mmelite nke TLS terminator nke mpụga ọzọ (onye ahịa): ọ na-akwado ugbu a ọ bụghị naanị TLS, kamakwa njikọ mgbe niile, na-akwado ọrụ dị ka daemon nọọrọ onwe ya na-anata arịrịọ sitere na proxy isi na netwọkụ, ma nwee ike ibuga njikọ ya na-apụ apụ site na. ọzọ proxy, ya mere na-ekwe ka mgbanwe nkewa nke aga-eme n'etiti ọnụ na ọnọdụ nke ogbenye njikọ Ịntanetị na / ma ọ bụ mkpa iji hazie "mmepụta" nke okporo ụzọ ebe na n'ime ime obodo nkesa nke iche iche nke ntụkwasị obi; ụdị ọhụrụ ahụ dịkwa mma karịa iji aka ya site na ahịrị iwu dị ka onye ahịa TLS console nwere nkwado proxy;
  6. mgbakọ e mfe, e nwere ugbu a a Makefile kama shei scripts
  7. A haziri ngwungwu .deb arụgoro mbụ na ebe nchekwa (maka ụdị Debian 8-12)
  8. mgbanwe faịlụ nhazi, azu-anaghị ekwekọ
  9. nhazi ọhụrụ maka ijikwa usoro ntinye arịrịọ, nke jikọtara nhazi nhazi nke resolv na mbụ na-enyefe njikọ na-apụ apụ na sava dịpụrụ adịpụ, ma nwetakwa ọtụtụ nhọrọ ọhụrụ: ugbu a ị nwere ike ịhọrọ onye ahịa ị ga-eji maka url ọ bụla (protocol, ngalaba, ọdụ ụgbọ mmiri, ụzọ), nke a ga-ezigara ya proxy, site na onye nkesa DNS ga-ekpebi adreesị IP ya (gụnyere ndị nnọchi anya nhọrọ nke ọrụ a na proxy http ma ọ bụ socks5), ma ọ bụ jiri aka tinye adreesị ahụ, yana dochie protocol, ọdụ ụgbọ mmiri ma ọ bụ url ụzọ prefix -A
  10. nkwado agbakwunyere maka asambodo SAN maka adreesị IP na ma onye ahịa na nkesa (ihe nchọgharị akwụsịla ịnakwere adreesị IP n'oge na-adịbeghị anya na CommonName)

Atụmatụ ọdịnihu:

  1. nkwado maka CGI/ FastCGI/.so nko maka nhazi ọdịnaya nke sitere na saịtị
  2. profaịlụ proxy na njikwa nhazi
  3. njikwa mmekọrịta nke ịlele asambodo nke saịtị dịpụrụ adịpụ na ndepụta igbochi

isi: linux.org.ru

Tinye a comment