{"id":112621,"date":"2024-01-01T03:10:24","date_gmt":"2024-01-01T01:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika"},"modified":"2024-01-01T03:10:24","modified_gmt":"2024-01-01T01:10:24","slug":"fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","title":{"rendered":"fproxy v83 \u2014 en lokal proxy-server for filtrering av http(s)-trafikk","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den 83. versjonen av cache- og anti-spam proxy-serveren for personlig bruk med fleksible innstillinger er publisert.<\/p>\n

Hovedfunksjoner (alt kan tilpasses):<\/p>\n

    \n
  1. filtrering av u\u00f8nsket innhold (hvite\/svarte lister p\u00e5 URL-er, forbud mot informasjonskapsler);<\/li>\n
  2. tvungen og tidsbegrenset caching av mottatte data (prim\u00e6rt nyttig for bilder og skript);<\/li>\n
  3. korreksjon av innhold p\u00e5 nettsider i sanntid (gjennom redigering av kildekoden i C, eksempler finnes for \u00e5 erstatte innhold p\u00e5 klonede sider av stackoverflow med lenker til originalen);<\/li>\n
  4. hvite\/svarte lister for sertifikater og sertifikatpinning basert p\u00e5 liste;<\/li>\n
  5. ommressing av IP-adresse\/domene\/sti\/protokoll i HTTP-foresp\u00f8rselen basert p\u00e5 konfigurasjon (en utvidet versjon av \/etc\/hosts);<\/li>\n
  6. HTTP\/HTTPS-sniffer.<\/li>\n<\/ol>\n

    Passer perfekt for \u00e5 surfe p\u00e5 nettsteder gjennom treg internettforbindelse eller p\u00e5 en treg enhet (takket v\u00e6re punktene 1 og 2, som var \u00e5rsaken til opprettelsen), men er uansett nyttig.<\/p>\n

    Proxy-serveren er delt opp i tre deler for sikkerhet og for \u00e5 forenkle logikken i arbeidet: TLS-server (som terminerer nettleserforbindelser), sentral proxy-modul og klient, som terminerer utg\u00e5ende forbindelser.<\/p>\n

    Programmet er designet for personlig bruk, noe som betyr at alle konfigurasjoner og mappen med n\u00e5v\u00e6rende data fra proxy-serveren er knyttet til en spesifikk bruker, eller til og med en spesifikk nettleserprofil. \u00c5 kj\u00f8re proxyen som et systemomfattende demon er teknisk mulig, men det vil gj\u00f8re det vanskelig \u00e5 bruke en av dens viktigste funksjoner \u2014 aggressiv caching av alt som helst, siden cached data for hver nettleserprofil kan v\u00e6re unike og m\u00e5 isoleres fra hverandre av sikkerhetsgrunner.<\/p>\n

    Eksempel p\u00e5 blokkliste:<\/p>\n

    deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? deny nosub spec vk.com query \/share.php deny nosub spec yastatic.net query \/pcode\/adfox\/loader.js query \/share2\/share.js deny nosub spec www.youtube.com query \/subscribe_widget deny nosub spec pano.img.ria.ru query \/adriver\/flashplagin\/movie.swf deny nosub spec a.ria.ru query \/ping deny nosub spec n-ssl.ria.ru query \/polling deny nosub spec apis.google.com query \/js\/plusone.js deny nosub spec yandex.ru pref \/clck\/safeclick\/ pref \/clck\/click\/ pref \/clck\/jclck\/ deny all spec query \/tnc # index.ru proxied counter exact \/tnc.js # index.ru proxied counter query \/pixel.gif # noens spammere bruker dette <\/p>\n

    Eksempel p\u00e5 ruteringsliste:<\/p>\n

    https:\/\/my.local.site set proxy none set target http:\/\/127.0.0.1:1234\/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5:\/\/127.0.0.1:3333 <\/p>\n

    Ved oppgradering fra en versjon eldre enn 78 m\u00e5 hurtigbufferen konverteres: g\u00e5 til arbeidskatalogen til proxy-serveren fra bruker (uid\/gid) og kj\u00f8r fproxy-cacheconv-78 (dette programmet kompileres ikke som standard).<\/p>\n

    <\/p>\n

    Endringer siden den sist publiserte versjonen (80<\/a>):<\/p>\n

    <\/noindex><\/noindex> <\/p>\n

      \n
    1. fproxy-dashboard har n\u00e5 et alternativ for \u00e5 vise innholdsst\u00f8rrelser i byte i stedet for kilobyte;<\/li>\n
    2. st\u00f8tte for defekte servere som ignorerer headeren \u00abConnection: close\u00bb;<\/li>\n
    3. st\u00f8tte for defekte servere som gir en feil header \u00abContent-Encoding: identity\u00bb;<\/li>\n
    4. sending av TLS-alternativ ALPN;<\/li>\n
    5. forbedring i arbeidet til TLS-terminalen p\u00e5 klientsiden: den st\u00f8tter n\u00e5 ikke bare TLS, men ogs\u00e5 vanlige forbindelser, kan operere som en uavhengig demon som mottar foresp\u00f8rsel fra hovedproxyen over nettverket, og kan ogs\u00e5 sende sine utg\u00e5ende forbindelser gjennom en annen proxy, noe som gir fleksibilitet til \u00e5 dele oppgaver mellom noder under forhold med d\u00e5rlig internettforbindelse og\/eller behov for \u00e5 organisere \u00abutgang\u00bb av trafikk et sted p\u00e5 en eller annen fjerntliggende server med varierende grad av tillit; den nye versjonen er ogs\u00e5 lettere \u00e5 bruke manuelt fra kommandolinjen som en konsollbasert TLS-klient med proxy-st\u00f8tte;<\/li>\n
    6. forenklet bygging, n\u00e5 er det en Makefile i stedet for shell-skript<\/li>\n
    7. organisert forh\u00e5ndsbygde .deb-pakker i depotet (for versjoner av Debian 8-12)<\/li>\n
    8. konfigurasjonsfilendringer, bakoverkompatible<\/li>\n
    9. ny konfigurasjon for styring av foresp\u00f8rselruting som kombinerer tidligere separate konfigurasjoner for resolv og videresending av utg\u00e5ende forbindelser til en ekstern server, og som har f\u00e5tt flere nye alternativer: n\u00e5 kan man for hver URL (protokoll, domene, port, sti) velge hvilken klient og hvilken proxy den skal sendes gjennom, hvilken DNS-server som skal brukes til \u00e5 bestemme IP-adressen (inkludert mulig delegasjon til en ekstern http- eller socks5-proxy), eller angi adressen manuelt, samt bytte protokoll, port eller prefiks av URL-stien.<\/li>\n
    10. lagt til st\u00f8tte for SAN-sertifikater for IP-adresser b\u00e5de i klienten og serveren (nettlesere har nylig sluttet \u00e5 akseptere IP-adresser i CommonName)<\/li>\n<\/ol>\n

      Planer for fremtiden:<\/p>\n

        \n
      1. CGI\/FastCGI\/.so-hooks-st\u00f8tte for MITM-behandling av innhold hentet fra nettsteder<\/li>\n
      2. profiler- og proxykonfigurasjonsadministrator<\/li>\n
      3. interaktiv kontroll av sertifikatvalidering for eksterne nettsteder og blokkeringlister<\/li>\n<\/ol>\n

        Kilde: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

        \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (\u0431\u0435\u043b\u044b\u0435\/\u0447\u0451\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u0443\u0440\u043b\u044b, \u0437\u0430\u043f\u0440\u0435\u0442 \u043a\u0443\u043a); \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438 \u0431\u0435\u0441\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432); \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043b\u0435\u0442\u0443 (\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430 \u043d\u0430 \u0421\u0438, \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446-\u043a\u043b\u043e\u043d\u043e\u0432 stackoverflow […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112621","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47fproxy v83 \u2014 lokal proxy-server for filtrering av http(s)-trafikk | ProHoster","description":"Versjon 83 av cache- og antispamproxy-serveren for personlig bruk med fleksible innstillinger. Hovedfunksjoner (alt kan tilpasses): filtrering av u\u00f8nsket innhold.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47fproxy v83 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 http(s)-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-01T01:10:24+00:00","article:modified_time":"2024-01-01T01:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/112621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=112621"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/112621\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=112621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=112621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=112621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}