{"id":112621,"date":"2024-01-01T03:10:24","date_gmt":"2024-01-01T01:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika"},"modified":"2024-01-01T03:10:24","modified_gmt":"2024-01-01T01:10:24","slug":"fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","title":{"rendered":"fproxy v83 \u2014 un server proxy local pentru filtrarea traficului http(s)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A fost publicat\u0103 versiunea 83 a proxy-ului de caching \u0219i anti-spam pentru utilizare personal\u0103 cu set\u0103ri flexibile.<\/p>\n

Func\u021bii principale (totul este personalizabil):<\/p>\n

    \n
  1. filtrarea con\u021binutului nedorit (liste albe\/negre pentru URL-uri, interzicerea cookie-urilor);<\/li>\n
  2. caching for\u021bat \u0219i permanent al datelor ob\u021binute (\u00een principal util pentru imagini \u0219i scripturi);<\/li>\n
  3. corectarea con\u021binutului paginilor web \u00een timp real (prin modificarea sursei \u00een C, exist\u0103 un exemplu pentru \u00eenlocuirea con\u021binutului paginilor clone stackoverflow cu linkul c\u0103tre original);<\/li>\n
  4. liste negre\/albe pentru certificate \u0219i certificate pinning pe baza listei;<\/li>\n
  5. schimbarea adresei IP\/domeniului\/c\u0103ii\/protocolului HTTP al cererii conform configura\u021biei (o variant\u0103 extins\u0103 a \/etc\/hosts);<\/li>\n
  6. sniffer http\/https.<\/li>\n<\/ol>\n

    Se potrive\u0219te perfect pentru navigarea pe site-uri prin internet lent sau de pe un dispozitiv lent (datorit\u0103 punctelor 1 \u0219i 2, pentru care a fost creat ini\u021bial), dar este deosebit de util \u00een orice situa\u021bie.<\/p>\n

    Proxy-ul \u00een scopuri de securitate \u0219i simplificarea logicii de func\u021bionare este \u00eemp\u0103r\u021bit \u00een trei p\u0103r\u021bi: server TLS (care termin\u0103 conexiunile browserului), modulul central al proxy-ului \u0219i clientul, care termin\u0103 conexiunile de ie\u0219ire.<\/p>\n

    Programul este destinat utiliz\u0103rii personalizate, adic\u0103 toate configura\u021biile \u0219i directorul cu datele curente ale serverului proxy sunt legate de un anumit utilizator sau chiar de un anumit profil de browser. Rularea proxy-ului ca un demon de sistem general este tehnic posibil\u0103, dar \u00een aceast\u0103 form\u0103 este dificil de folosit una dintre func\u021biile sale principale \u2014 caching-ul agresiv al tuturor datelor, deoarece datele cache din fiecare profil de browser pot fi diferite \u0219i trebuie s\u0103 fie izolate unele de altele din motive de securitate.<\/p>\n

    Exemplu de list\u0103 de blocare:<\/p>\n

    deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? deny nosub spec vk.com query \\\/share.php deny nosub spec yastatic.net query \\\/pcode\\\/adfox\\\/loader.js query \\\/share2\\\/share.js deny nosub spec www.youtube.com query \\\/subscribe_widget deny nosub spec pano.img.ria.ru query \\\/adriver\\\/flashplagin\\\/movie.swf deny nosub spec a.ria.ru query \\\/ping deny nosub spec n-ssl.ria.ru query \\\/polling deny nosub spec apis.google.com query \\\/js\\\/+plusone.js deny nosub spec yandex.ru pref \\\/clck\\\/safeclick\\\/ pref \\\/clck\\\/click\\\/ pref \\\/clck\\\/jclck\\\/ deny all spec query \\\/tnc # index.ru proxied counter exact \\\/tnc.js # index.ru proxied counter query \\\/pixel.gif # unii spameri folosesc aceasta <\/p>\n

    Exemplu de list\u0103 de rutare:<\/p>\n

    https:\/\/my.local.site set proxy none set target http:\/\/127.0.0.1:1234\/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5:\/\/127.0.0.1:3333 <\/p>\n

    \u00cen cazul actualiz\u0103rii de la o versiune mai veche de 78, trebuie s\u0103 converti\u021bi cache-ul: accesa\u021bi directorul de lucru al serverului proxy de la utilizatorul (uid\/gid) serverului proxy \u0219i rula\u021bi fproxy-cacheconv-78 (\u00een mod implicit, acest program nu este compilat).<\/p>\n

    <\/p>\n

    Modific\u0103rile fa\u021b\u0103 de ultima versiune publicat\u0103 (80<\/a>):<\/p>\n

    <\/noindex><\/noindex> <\/p>\n

      \n
    1. fproxy-dashboard are acum op\u021biunea de a afi\u0219a dimensiunile con\u021binutului \u00een octe\u021bi, nu \u00een kiloocte\u021bi;<\/li>\n
    2. suport pentru servere defectuoase care ignor\u0103 antetul \u00abConnection: close\u00bb;<\/li>\n
    3. suport pentru servere defectuoase care returneaz\u0103 un antet incorect \u00abContent-Encoding: identity\u00bb;<\/li>\n
    4. trimite op\u021biunea TLS ALPN;<\/li>\n
    5. \u00eembun\u0103t\u0103\u021birea func\u021bion\u0103rii terminatorului TLS pe partea exterioar\u0103 (client): acum suport\u0103 nu doar TLS, ci \u0219i conexiuni obi\u0219nuite, func\u021bioneaz\u0103 ca un demon independent accept\u00e2nd cereri de la proxy-ul principal prin re\u021bea, \u0219i de asemenea poate redirec\u021biona conexiunile sale ie\u0219ite printr-un alt proxy, permi\u021b\u00e2nd astfel o separare flexibil\u0103 a sarcinilor \u00eentre noduri \u00een condi\u021bii de conexiune slab\u0103 la internet \u0219i\/sau necesitatea de a organiza \u00abie\u0219irea\u00bb traficului undeva pe un server \u00eendep\u0103rtat de grad diferit de \u00eencredere; de asemenea, noua versiune este mai convenabil\u0103 pentru utilizarea manual\u0103 din linia de comand\u0103 ca un client TLS de console cu suport pentru proxy.<\/li>\n
    6. s-a simplificat construc\u021bia, acum exist\u0103 Makefile \u00een loc de scripturi shell<\/li>\n
    7. au fost organizate pachete .deb precompilate \u00een depozit (pentru versiunile Debian 8-12)<\/li>\n
    8. modific\u0103ri ale fi\u0219ierului de configurare, incompatibile cu versiunile anterioare<\/li>\n
    9. configura\u021bie nou\u0103 pentru gestionarea rut\u0103rii cererilor, care combin\u0103 configura\u021biile anterioare separate resolv \u0219i redirec\u021bionarea conexiunilor de ie\u0219ire c\u0103tre un server \u00eendep\u0103rtat, av\u00e2nd de asemenea o serie de op\u021biuni noi: acum se poate alege pentru fiecare url (protocol, domeniu, port, cale) prin care client, ce proxy va fi trimis, prin care server DNS se va determina adresa sa IP (inclusiv delegarea op\u021bional\u0103 a acestei sarcini c\u0103tre un server proxy extern http sau socks5), sau se poate scrie manual adresa, precum \u0219i schimba protocolul, portul sau prefixul c\u0103ii url-ului<\/li>\n
    10. a fost ad\u0103ugat suport pentru certificate SAN pentru adrese IP at\u00e2t \u00een client, c\u00e2t \u0219i pe server (browerele au \u00eencetat s\u0103 accepte adrese IP \u00een CommonName \u00een urm\u0103 cu ceva timp)<\/li>\n<\/ol>\n

      Planuri pentru viitor:<\/p>\n

        \n
      1. suport pentru CGI\/FastCGI\/.so hook-uri pentru prelucrarea mitm a con\u021binutului primit de la site-uri<\/li>\n
      2. manager de profiluri \u0219i configura\u021bii proxy<\/li>\n
      3. gestiune interactiv\u0103 a verific\u0103rii certificatelor site-urilor \u00eendep\u0103rtate \u0219i a listelor de blocare<\/li>\n<\/ol>\n

        Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

        \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (\u0431\u0435\u043b\u044b\u0435\/\u0447\u0451\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u0443\u0440\u043b\u044b, \u0437\u0430\u043f\u0440\u0435\u0442 \u043a\u0443\u043a); \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438 \u0431\u0435\u0441\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432); \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043b\u0435\u0442\u0443 (\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430 \u043d\u0430 \u0421\u0438, \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446-\u043a\u043b\u043e\u043d\u043e\u0432 stackoverflow […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112621","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47fproxy v83 \u2014 server proxy local pentru filtrarea traficului http(s) | ProHoster","description":"A fost lansat\u0103 versiunea 83 a serverului proxy de cache \u0219i anti-spam pentru utilizare personal\u0103 cu set\u0103ri flexibile. Func\u021bii principale (totul este personalizabil): filtrarea con\u021binutului nedorit.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47fproxy v83 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 http(s)-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-01T01:10:24+00:00","article:modified_time":"2024-01-01T01:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112621"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112621\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}