ProHoster > Blog > internet nhau > fproxy v83 - yemuno proxy server yekusefa http (s) traffic

fproxy v83 - yemuno proxy server yekusefa http (s) traffic

Iyo 83rd vhezheni ye caching uye anti-spam proxy server yekushandisa wega ine inochinjika marongero yakaburitswa.

Mabasa makuru (zvese zvinogoneka):

  1. kusefa kwezvinhu zvisingadiwe (zvichena / zvitema zvinyorwa pa URL, kurambidza makuki);
  2. kumanikidzwa uye kusingagumi caching ye data yakagamuchirwa (kunyanya yakanakira mifananidzo uye zvinyorwa);
  3. kugadzirisa zvinyorwa zvemapeji ewebhu pane nhunzi (nekugadzirisa kodhi yekodhi muC, pane muenzaniso wekutsiva zvinyorwa zve stackoverflow clone mapeji nekubatanidza kune yekutanga);
  4. dema / chena zvinyorwa zvezvitupa uye zvitupa pinning zvinoenderana nerondedzero;
  5. kutsiva IP kero/domain/path/protocol ye http chikumbiro zvinoenderana ne config (yakadaro yakawedzera vhezheni ye /etc/hosts);
  6. http/https mufeki.

Yakakwana yekuona mawebhusaiti painononoka Internet kana kubva kune inononoka mudziyo (nekuda kunhamba 1 uye 2, iyo zvese zvakatangwa), asi kazhinji inobatsira chero zvakadaro.

Nezvekuchengetedza uye kurerutsa iyo logic yekushanda, iyo proxy server yakakamurwa kuita zvikamu zvitatu: TLS sevha (kumisa browser yekubatanidza), yepakati proxy module, uye mutengi anomisa anobuda.

Iyo purogiramu yakagadzirirwa kushandiswa kwemunhu, ndiko kuti, ese magadzirirwo uye dhairekitori ine yazvino proxy server data yakasungirirwa kune chaiyo mushandisi, kana kunyange kune chaiyo browser profile. Zvinogoneka nehunyanzvi kumhanyisa proxy sesystem-wide daemon, asi mune iyi fomu zvakaoma kushandisa rimwe remabasa ayo makuru - aggressive caching yezvese, sezvo yega yega browser profile inogona kuve neyayo cached data uye inofanirwa kuparadzaniswa kubva. mumwe nemumwe kuitira kuchengetedza.

Block list muenzaniso:

deny nosub all share.yandex.ru browser-updater.yandex.net deny nosub all a.ria.ru # ? ramba nosub spec vk.com query /share.php ramba nosub spec yastatic.net query /pcode/adfox/loader.js mubvunzo /share2/share.js ramba nosub spec www.youtube.com query /subscribe_widget ramba nosub spec pano.img .ria.ru mubvunzo /adriver/flashplagin/movie.swf deny nosub spec a.ria.ru query /ping deny nosub spec n-ssl.ria.ru query /polling deny nosub spec apis.google.com query /js/plusone .js deny nosub spec yandex.ru pref /click/safeclick/ pref /click/click/ pref /clck/jclck/ ramba zvese zvakatsanangurwa /tnc # index.ru proxied counter exact /tnc.js # index.ru proxied counter query /pixel.gif # vamwe spammers vanoshandisa izvi

Muenzaniso werondedzero yenzira:

https://my.local.site set proxy none set target http://127.0.0.1:1234/localsite set http_host new.host:1234 .intel.com resolve off set proxy socks5://127.0.0.1:3333

Muchiitiko chekuvandudza kubva kushanduro yakakura kupfuura 78, iwe unofanirwa kushandura cache: enda kudhairekitori rekushanda reiyo proxy server kubva kumushandisi (uid/gid) weiyo proxy server uye mhanyisa fproxy-cacheconv-78 (nekudaro chirongwa ichi. haina kuumbwa).

Shanduko kubva mushanduro yekupedzisira yakabudiswa (80):

  1. fproxy-dashboard ikozvino ine sarudzo yekuratidza zvemukati saizi mumabhaiti pane kbytes;
  2. tsigiro yemasevha e-buggy anoregeredza iyo "Connection: close" musoro;
  3. tsigiro yemasevha e-buggy anodzosera iyo isiriyo "Content-Encoding: identity" musoro;
  4. kutumira TLS sarudzo ALPN;
  5. kunatsiridzwa kweTLS terminator yebato rekunze (mutengi): ikozvino haitsigire TLS chete, asiwo yekubatanidza nguva dzose, inotsigira kushanda sedaemon yakazvimirira nekugamuchira zvikumbiro kubva kune mukuru proxy pamusoro petiweki, uye inogona zvakare kutumira ayo anobuda kubatana kuburikidza. imwe proxy, saka nokudaro zvichibvumira kupatsanurwa kwemabasa pakati pemanodhi mumamiriro ekusagadzikana kweInternet uye / kana kudiwa kwekuronga "kubuda" kwemotokari kune imwe nzvimbo pane sevha iri kure yezviyero zvakasiyana-siyana zvekuvimba; iyo vhezheni itsva zvakare iri nyore kushandisa pamaoko kubva kumutsara wekuraira seyekunyaradza TLS mutengi ane proxy rutsigiro;
  6. ungano yakarerutswa, iko zvino kwave neMakefile pachinzvimbo chezvinyorwa zveganda
  7. pre-built .deb mapakeji anorongwa munzvimbo inochengeterwa (yeDebian shanduro 8-12)
  8. configuration faira shanduko, kumashure-isingaenderani
  9. gadziriso nyowani yekutarisira nzira yekukumbira, iyo yakabatanidza iyo yakambopatsanurwa configs ye resolv uye inogonesa kutumira kweinobuda yekubatanidza kune iri kure server, uye zvakare yakagamuchira dzinoverengeka sarudzo: ikozvino unogona kusarudza kuti ndeupi mutengi wekushandisa kune yega yega url (protocol, domain, port, path) , iyo proxy ichatumirwa kwairi, kuburikidza neiyo DNS server yayo IP kero ichatemwa (kusanganisira sarudzo yekutumira basa iri kune yekunze http kana socks5 proxy), kana kuisa kero nemaoko, pamwe chete tsiva iyo protocol, port kana url nzira prefix -A
  10. yakawedzera tsigiro yeSAN zvitupa zveIP kero mune zvese mutengi uye sevha (mabhurawuza achangomira kugamuchira IP kero muCommonName)

Zvirongwa zveramangwana:

  1. tsigiro yeCGI/FastCGI/.so zvikorekedzo zvemitm kugadzirisa zvemukati zvakagamuchirwa kubva kumasaiti
  2. proxy mbiri uye maneja wekugadzirisa
  3. inopindirana manejimendi yekutarisa zvitupa zvemasaiti ari kure uye kuvharira zvinyorwa

Source: linux.org.ru

Voeg