{"id":112621,"date":"2024-01-01T03:10:24","date_gmt":"2024-01-01T01:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika"},"modified":"2024-01-01T03:10:24","modified_gmt":"2024-01-01T01:10:24","slug":"fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","title":{"rendered":"fproxy v83 \u2014 viet\u0113jais starpniekserveris http(s)-trafika filtr\u0113\u0161anai","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ir public\u0113ta 83. versija ke\u0161\u0113\u0161anas un pretspama proxy servera person\u012bgai lieto\u0161anai ar elast\u012bg\u0101m iestat\u012bjumiem.<\/p>\n

Galven\u0101s funkcijas (viss ir konfigur\u0113jams):<\/p>\n

    \n
  1. nev\u0113lama satura filtr\u0113\u0161ana (baltiem\/melniem sarakstiem uz URL, s\u012bkdat\u0146u aizlieg\u0161ana);<\/li>\n
  2. piespiedu un beztermi\u0146a sa\u0146emto datu ke\u0161\u0113\u0161ana (\u012bpa\u0161i \u0113rti att\u0113liem un skriptiem);<\/li>\n
  3. web lapu satura labo\u0161ana re\u0101laj\u0101 laik\u0101 (izc\u0113lot avotu C valod\u0101, ir piem\u0113rs lapu klonu satura aizst\u0101\u0161anai ar saiti uz ori\u0123in\u0101lu);<\/li>\n
  4. melni\/balti sertifik\u0101tu saraksti un sertifik\u0101ta piesaistes saraksts;<\/li>\n
  5. IP adreses\/domenes\/ce\u013ca\/http piepras\u012bjuma protokola aizst\u0101\u0161ana p\u0113c konfigur\u0101cijas (t\u0101ds papla\u0161in\u0101ts variants \/etc\/hosts);<\/li>\n
  6. http\/https uzraudz\u012bt\u0101js.<\/li>\n<\/ol>\n

    Lieliski piem\u0113rots t\u012bmek\u013ca viet\u0146u p\u0101rl\u016bko\u0161anai caur l\u0113nu internetu vai uz l\u0113nas iek\u0101rtas (pateicoties p.1 un 2, kuriem s\u0101kotn\u0113ji tika izstr\u0101d\u0101ts viss), bet visp\u0101r noder\u012bgi jebkur\u0101 gad\u012bjum\u0101.<\/p>\n

    Proxy serveris dro\u0161\u012bbas nol\u016bkos un darba lo\u0123ikas vienk\u0101r\u0161o\u0161anai ir sadal\u012bts tr\u012bs da\u013c\u0101s: TLS serveris (termin\u0113 p\u0101rl\u016bka savienojumus), centr\u0101lais proxy modulis un klienta da\u013ca, kas termin\u0113 izejo\u0161os savienojumus.<\/p>\n

    Programma ir izstr\u0101d\u0101ta personaliz\u0113tai lieto\u0161anai, tas ir, visi iestat\u012bjumi un direktorija ar pa\u0161reiz\u0113jiem datiem par proxy serveri ir saist\u012bti ar konkr\u0113tu lietot\u0101ju vai pat konkr\u0113tu p\u0101rl\u016bka profilu. Tehniski ir iesp\u0113jams palaist proxy k\u0101 visp\u0101r\u0113ju sist\u0113mas d\u0113mona, bet \u0161\u0101d\u0101 veid\u0101 ir gr\u016bti izmantot vienu no t\u0101 galvenaj\u0101m funkcij\u0101m \u2014 agres\u012bvu visu ke\u0161\u0113\u0161anu, jo katram p\u0101rl\u016bka profilam var b\u016bt savi ke\u0161\u0113tie dati, un tie ir j\u0101izol\u0113 viens no otra dro\u0161\u012bbas nol\u016bkos.<\/p>\n

    Blo\u0137\u0113\u0161anas saraksta piem\u0113rs:<\/p>\n

    deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? deny nosub spec vk.com query \/share.php deny nosub spec yastatic.net query \/pcode\/adfox\/loader.js query \/share2\/share.js deny nosub spec www.youtube.com query \/subscribe_widget deny nosub spec pano.img.ria.ru query \/adriver\/flashplagin\/movie.swf deny nosub spec a.ria.ru query \/ping deny nosub spec n-ssl.ria.ru query \/polling deny nosub spec apis.google.com query \/js\/plusone.js deny nosub spec yandex.ru pref \/clck\/safeclick\/ pref \/clck\/click\/ pref \/clck\/jclck\/ deny all spec query \/tnc # index.ru proxied counter exact \/tnc.js # index.ru proxied counter query \/pixel.gif # da\u017ei surog\u0101ti izmanto \u0161o <\/p>\n

    Mar\u0161rutu saraksta piem\u0113rs:<\/p>\n

    https:\/\/my.local.site set proxy none set target http:\/\/127.0.0.1:1234\/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5:\/\/127.0.0.1:3333 <\/p>\n

    Ja tiek atjaunin\u0101ts no versijas, kas ir vec\u0101ka par 78, j\u0101veic ke\u0161atmi\u0146as konversija: j\u0101ielien lietot\u0101ja (uid\/gid) proxy servera darba direktorij\u0101 un j\u0101izpilda fproxy-cacheconv-78 (p\u0113c noklus\u0113juma \u0161is r\u012bks netiek kompil\u0113ts).<\/p>\n

    <\/p>\n

    Izmai\u0146as kop\u0161 iepriek\u0161\u0113j\u0101s public\u0113t\u0101s versijas (80<\/a>):<\/p>\n

    <\/noindex><\/noindex> <\/p>\n

      \n
    1. fproxy-dashboard tagad pied\u0101v\u0101 opciju par\u0101d\u012bt satura izm\u0113rus baitos, nevis kbyte;<\/li>\n
    2. atbalsts boj\u0101tiem serveriem, kas ignor\u0113 virsrakstu \u00abConnection: close\u00bb;<\/li>\n
    3. atbalsts boj\u0101tiem serveriem, kuri atgrie\u017e nepareizu virsrakstu \u00abContent-Encoding: identity\u00bb;<\/li>\n
    4. TLS opcijas ALPN nos\u016bt\u012b\u0161ana;<\/li>\n
    5. uzlabota TLS termin\u0101tora darb\u012bba \u0101r\u0113j\u0101 (klienta) pus\u0113: tas tagad atbalsta ne tikai TLS, bet ar\u012b parast\u0101s savienojumus, var darboties k\u0101 neatkar\u012bgs deamons, pie\u0146emot piepras\u012bjumus no galven\u0101 proxy t\u012bkl\u0101, k\u0101 ar\u012b var novirz\u012bt savus izejo\u0161os savienojumus caur citu proxy, t\u0101d\u0113j\u0101di \u013caujot elast\u012bgi sadal\u012bt uzdevumus starp mezgliem slikta interneta savienojuma un\/vai nepiecie\u0161am\u012bbas gad\u012bjum\u0101 organiz\u0113t trafika \u00abizeju\u00bb kaut kur uz att\u0101lin\u0101ta servera ar da\u017e\u0101du uzticam\u012bbas pak\u0101pi; jaun\u0101 versija ir viegl\u0101k lietojama manu\u0101li no komandrindas k\u0101 konsoles TLS klients ar proxy atbalstu;<\/li>\n
    6. saprotama kompil\u0101cija, tagad ir Makefile viet\u0101 shell skriptu<\/li>\n
    7. organiz\u0113ti priek\u0161kompil\u0113ti .deb paket\u0113 repozitorij\u0101 (Debian 8-12 versij\u0101m)<\/li>\n
    8. config faila izmai\u0146as, kas nav atpaka\u013csavietojamas<\/li>\n
    9. jauns config piepras\u012bjumu mar\u0161rut\u0113\u0161anai, kas apvieno agr\u0101k atsevi\u0161\u0137os config failus resolv un izejo\u0161o savienojumu novirz\u012b\u0161anu uz att\u0101lin\u0101tu serveri, k\u0101 ar\u012b ieguvis virkni jaunu opciju: tagad katram URL (protokols, dom\u0113ns, ports, ce\u013c\u0161) var izv\u0113l\u0113ties, caur kuru klientu, kuru proxy tas tiks nos\u016bt\u012bts, caur kura DNS serveri tiks noteikts t\u0101 IP adrese (iek\u013caujot iesp\u0113ju dele\u0123\u0113t \u0161o uzdevumu \u0101r\u0113jam HTTP vai SOCKS5 proxy), vai nor\u0101d\u012bt adresi manu\u0101li, k\u0101 ar\u012b main\u012bt protokolu, portu vai ce\u013ca prefiksu URL.<\/li>\n
    10. pievienots SAN sertifik\u0101tu atbalsts IP adres\u0113m gan klient\u0101, gan server\u012b (p\u0101rl\u016bkprogrammas k\u0101du laiku vairs nepie\u0146em IP adreses CommonName)<\/li>\n<\/ol>\n

      N\u0101kotnes pl\u0101nos:<\/p>\n

        \n
      1. atbalsts CGI\/FastCGI\/.so \u012bs\u0101kajiem skriptiem mitm apstr\u0101dei no vietn\u0113m sa\u0146emt\u0101 satura<\/li>\n
      2. profilu un konfigur\u0101ciju p\u0101rvaldnieks proxy<\/li>\n
      3. interakt\u012bva sertifik\u0101tu p\u0101rbaudes p\u0101rvald\u012bba att\u0101lin\u0101tajiem vietn\u0113m un blo\u0137\u0113\u0161anas sarakstiem<\/li>\n<\/ol>\n

        Avots: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

        \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (\u0431\u0435\u043b\u044b\u0435\/\u0447\u0451\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u0443\u0440\u043b\u044b, \u0437\u0430\u043f\u0440\u0435\u0442 \u043a\u0443\u043a); \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438 \u0431\u0435\u0441\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432); \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043b\u0435\u0442\u0443 (\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430 \u043d\u0430 \u0421\u0438, \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446-\u043a\u043b\u043e\u043d\u043e\u0432 stackoverflow […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112621","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47fproxy v83 \u2014 lok\u0101l\u0101s proxy serveris http(s) datu pl\u016bsmu filtr\u0113\u0161anai | ProHoster","description":"Public\u0113ta 83. versija ke\u0161atvas un pretspama proks\u012bservera personiskai lieto\u0161anai ar elast\u012bg\u0101m iestat\u012bjumiem. Galven\u0101s funkcijas (visi iestat\u012bjumi ir piel\u0101gojami): nev\u0113lam\u0101 satura filtr\u0113\u0161ana.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47fproxy v83 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 http(s)-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-01T01:10:24+00:00","article:modified_time":"2024-01-01T01:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/112621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=112621"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/112621\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=112621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=112621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=112621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}