{"id":112621,"date":"2024-01-01T03:10:24","date_gmt":"2024-01-01T01:10:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika"},"modified":"2024-01-01T03:10:24","modified_gmt":"2024-01-01T01:10:24","slug":"fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","title":{"rendered":"fproxy v83 \u2014 lok\u00e1lny proxy server na filtrovanie http(s) prev\u00e1dzky","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bola zverejnen\u00e1 83. verzia cache a antispamov\u00e9ho proxy servera na osobn\u00e9 pou\u017eitie s flexibiln\u00fdm nastaven\u00edm.<\/p>\n

Hlavn\u00e9 funkcie (v\u0161etko je nastavite\u013en\u00e9):<\/p>\n

    \n
  1. filtr\u00e1cia ne\u017eiad\u00faceho obsahu (biele\/\u010dierne zoznamy URL, zak\u00e1zanie cookies);<\/li>\n
  2. povinn\u00e9 a neobmedzen\u00e9 cacheovanie prijat\u00fdch d\u00e1t (predov\u0161etk\u00fdm vhodn\u00e9 pre obr\u00e1zky a skripty);<\/li>\n
  3. oprava obsahu webov\u00fdch str\u00e1nok v re\u00e1lnom \u010dase (\u00fapravou zdrojov\u00e9ho k\u00f3du v C, existuje pr\u00edklad na nahradenie obsahu klonovan\u00fdch str\u00e1nok stackoverflow odkazom na origin\u00e1l);<\/li>\n
  4. \u010dierne\/biele zoznamy certifik\u00e1tov a certificate pinning pod\u013ea zoznamu;<\/li>\n
  5. zmena IP adresy\/domeny\/cesty\/protokolu HTTP po\u017eiadavky pod\u013ea konfigur\u00e1cie (roz\u0161\u00edren\u00e1 verzia \/etc\/hosts);<\/li>\n
  6. HTTP\/HTTPS sniffer.<\/li>\n<\/ol>\n

    Skvele sa hod\u00ed na prezeranie str\u00e1nok cez pomal\u00fd internet alebo na pomalom zariaden\u00ed (v\u010faka bodom 1 a 2, kv\u00f4li \u010domu to cel\u00e9 bolo p\u00f4vodne navrhnut\u00e9), ale je striktne u\u017eito\u010dn\u00e9 v ka\u017edom pr\u00edpade.<\/p>\n

    Proxy server je z poh\u013eadu bezpe\u010dnosti a zjednodu\u0161enia logiky pr\u00e1ce rozdelen\u00fd na tri \u010dasti: TLS server (terminuj\u00faci prehliada\u010dov\u00e9 pripojenia), centr\u00e1lna modul proxy a klient, terminuj\u00faci odch\u00e1dzaj\u00face pripojenia.<\/p>\n

    Program je ur\u010den pro personalizovan\u00e9 pou\u017eit\u00ed, co\u017e znamen\u00e1, \u017ee v\u0161echny konfigurace a adres\u00e1\u0159 s aktu\u00e1ln\u00edmi daty proxy serveru jsou sv\u00e1z\u00e1ny s konkr\u00e9tn\u00edm u\u017eivatelem, nebo dokonce s konkr\u00e9tn\u00edm profilem prohl\u00ed\u017ee\u010de. Spustit proxy jako syst\u00e9mov\u00e9ho d\u00e9mona je technicky mo\u017en\u00e9, ale v tomto p\u0159\u00edpad\u011b je obt\u00ed\u017en\u00e9 vyu\u017e\u00edt jednu z jej\u00edch hlavn\u00edch funkc\u00ed \u2014 agresivn\u00ed cachov\u00e1n\u00ed v\u0161eho, nebo\u0165 cachovan\u00e1 data mohou m\u00edt ka\u017ed\u00e9 profil prohl\u00ed\u017ee\u010de specifick\u00e1 a mus\u00ed b\u00fdt mezi sebou izolov\u00e1na z hlediska bezpe\u010dnosti.<\/p>\n

    Pr\u00edklad zoznamu blokovania:<\/p>\n

    deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? deny nosub spec vk.com query \\\/share.php deny nosub spec yastatic.net query \\\/pcode\\\/adfox\\\/loader.js query \\\/share2\\\/share.js deny nosub spec www.youtube.com query \\\/subscribe_widget deny nosub spec pano.img.ria.ru query \\\/adriver\\\/flashplagin\\\/movie.swf deny nosub spec a.ria.ru query \\\/ping deny nosub spec n-ssl.ria.ru query \\\/polling deny nosub spec apis.google.com query \\\/js\\\/plusone.js deny nosub spec yandex.ru pref \\\/clck\\\/safeclick\\\/ pref \\\/clck\\\/click\\\/ pref \\\/clck\\\/jclck\\\/ deny all spec query \\\/tnc # index.ru proxied counter exact \\\/tnc.js # index.ru proxied counter query \\\/pixel.gif # niektor\u00ed spameri pou\u017e\u00edvaj\u00fa toto <\/p>\n

    Pr\u00edklad zoznamu smerovania:<\/p>\n

    https:\/\/my.local.site set proxy none set target http:\/\/127.0.0.1:1234\/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5:\/\/127.0.0.1:3333 <\/p>\n

    Pri aktualiz\u00e1cii z verzie star\u0161ej ako 78 je potrebn\u00e9 konvertova\u0165 cache: prejs\u0165 do pracovn\u00e9ho adres\u00e1ra proxy servera od pou\u017e\u00edvate\u013ea (uid\/gid) proxy servera a spusti\u0165 fproxy-cacheconv-78 (pod\u013ea predvolen\u00fdch nastaven\u00ed nie je tento program kompilovan\u00fd).<\/p>\n

    <\/p>\n

    Zmeny od poslednej publikovanej verzie (80<\/a>):<\/p>\n

    <\/noindex><\/noindex> <\/p>\n

      \n
    1. fproxy-dashboard teraz obsahuje mo\u017enos\u0165 zobrazenia ve\u013ekost\u00ed obsahu v bajtoch a nie kB;<\/li>\n
    2. podpora chybn\u00fdch server\u016f, kter\u00e9 ignoruj\u00ed hlavi\u010dku «Connection: close»;<\/li>\n
    3. podpora chybn\u00fdch server\u016f, kter\u00e9 vracej\u00ed nespr\u00e1vnou hlavi\u010dku «Content-Encoding: identity»;<\/li>\n
    4. odosielanie TLS mo\u017enosti ALPN;<\/li>\n
    5. zlep\u0161en\u00ed funkce TLS termin\u00e1toru na stran\u011b klienta: nyn\u00ed podporuje nejen TLS, ale tak\u00e9 b\u011b\u017en\u00e1 spojen\u00ed, funguje jako nez\u00e1visl\u00fd d\u00e9mon s p\u0159\u00edjmem po\u017eadavk\u016f od hlavn\u00edho proxy po s\u00edti, a m\u016f\u017ee tak\u00e9 p\u0159esm\u011brov\u00e1vat sv\u00e9 odchoz\u00ed spojen\u00ed p\u0159es jinou proxy, \u010d\u00edm\u017e umo\u017e\u0148uje flexibiln\u011b rozd\u011blit \u00fakoly mezi uzly v podm\u00ednk\u00e1ch \u0161patn\u00e9ho internetov\u00e9ho p\u0159ipojen\u00ed a\/nebo nutnosti organizovat «v\u00fdstup» datov\u00e9ho provozu na vzd\u00e1len\u00e9m serveru r\u016fzn\u00e9 \u00farovn\u011b d\u016fv\u011bry; nov\u00e1 verze je tak\u00e9 pohodln\u011bj\u0161\u00ed pro ru\u010dn\u00ed pou\u017eit\u00ed z p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku jako konzolov\u00fd TLS klient s podporou proxy;<\/li>\n
    6. zjednodu\u0161en\u00e1 kompil\u00e1cia, teraz je k dispoz\u00edcii Makefile namiesto shell skriptov<\/li>\n
    7. organizovan\u00e9 predpripraven\u00e9 .deb bal\u00ed\u010dky v repozit\u00e1ri (pre verzie Debian 8-12)<\/li>\n
    8. zmiany v konfigura\u010dnom s\u00fabore, sp\u00e4tn\u00e9 nekompatibiln\u00e9<\/li>\n
    9. nov\u00fd konfigura\u010dn\u00fd s\u00fabor na spr\u00e1vu smerovania po\u017eiadaviek, ktor\u00fd spojil predt\u00fdm oddelen\u00e9 konfigura\u010dn\u00e9 s\u00fabory resolv a konfigur\u00e1cie presmerovania odch\u00e1dzaj\u00facich spojen\u00ed na vzdialen\u00fd server, pri\u010dom dostal aj mno\u017estvo nov\u00fdch mo\u017enost\u00ed: teraz je mo\u017en\u00e9 pre ka\u017ed\u00fa url (protokol, dom\u00e9na, port, cesta) zvoli\u0165 cez ktor\u00e9ho klienta, cez ktor\u00e9 proxy bude odoslan\u00e9, prostredn\u00edctvom ktor\u00e9ho dns servera sa ur\u010d\u00ed jeho ip adresa (vr\u00e1tane volite\u013en\u00e9ho delegovania tejto \u00falohy vonkaj\u0161iemu proxy serveru http alebo socks5), alebo zada\u0165 adresu manu\u00e1lne, a tie\u017e zmeni\u0165 protokol, port alebo prefix cesty url.<\/li>\n
    10. pridan\u00e1 podpora SAN certifik\u00e1tov pre ip adresy v klientovi aj na serveri (prehliada\u010de pred nejak\u00fdm \u010dasom prestali akceptova\u0165 ip adresy v CommonName)<\/li>\n<\/ol>\n

      Pl\u00e1ny do bud\u00facnosti:<\/p>\n

        \n
      1. podpora CGI\/FastCGI\/.so h\u00e1\u010dikov pre mitm-spracovanie z\u00edskan\u00e9ho obsahu zo str\u00e1nok<\/li>\n
      2. mana\u017e\u00e9r profilov a konfigur\u00e1ci\u00ed proxy<\/li>\n
      3. interakt\u00edvne riadenie overovania certifik\u00e1tov vzdialen\u00fdch str\u00e1nok a zoznamov blok\u00e1d<\/li>\n<\/ol>\n

        Zdroj: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

        \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 (\u0431\u0435\u043b\u044b\u0435\/\u0447\u0451\u0440\u043d\u044b\u0435 \u0441\u043f\u0438\u0441\u043a\u0438 \u043d\u0430 \u0443\u0440\u043b\u044b, \u0437\u0430\u043f\u0440\u0435\u0442 \u043a\u0443\u043a); \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438 \u0431\u0435\u0441\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043a\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u0434\u043e\u0431\u043d\u043e \u0434\u043b\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u043e\u043a \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432); \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043d\u0430 \u043b\u0435\u0442\u0443 (\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u0430 \u043d\u0430 \u0421\u0438, \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440 \u0434\u043b\u044f \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446-\u043a\u043b\u043e\u043d\u043e\u0432 stackoverflow […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112621","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47fproxy v83 \u2014 lok\u00e1lny proxy server pre filtrovanie http(s) prev\u00e1dzky | ProHoster","description":"Bola vydan\u00e1 83. verzia cache a anti-spam proxy servera pre osobn\u00e9 pou\u017eitie s flexibiln\u00fdmi nastaveniami. Hlavn\u00e9 funkcie (v\u0161etko je konfigurovate\u013en\u00e9): filtrovanie ne\u017eelan\u00e9ho obsahu.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47fproxy v83 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 http(s)-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 83-\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u044d\u0448\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0430\u043d\u0442\u0438\u0441\u043f\u0430\u043c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f c \u0433\u0438\u0431\u043a\u0438\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 (\u0432\u0441\u0451 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f): \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/fproxy-v83-lokalnyj-proksi-server-dlya-filtraczii-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-01T01:10:24+00:00","article:modified_time":"2024-01-01T01:10:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/112621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=112621"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/112621\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=112621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=112621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=112621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}