wujcheng

vps配置科学上网]shadowsocks服务端配置

标签: 垃圾箱

1. Update 2015/03/30 竟然乱码...整个重新整理编辑了一下。非专业行为，如有不当之处，欢迎指出。
2. Update 2015/04/05 linux可参考Fedora21[配置shadowsocks for chrome](http://blog.csdn.net/bit_Line/article/details/44888213)，用于配置客户端，Debian系列/Red Hat系列可通用。
相比Python版本的ss客户端，会轻量级一些。windows用户客户端安装很方便，直接下载后一路“下一步”，下载见：
[shadowsocks-c#版](http://sourceforge.net/projects/shadowsocksgui/files/dist/)win7/XP或者已安装.Net2.0的用户，下载Shadowsocks-win-x.x.x.zip; Win8+/.Net4.0下载Shadowsocks-win-dotnet4.0-x.x.x.zip即可。
最后只需要配置参数（包括linux和windows），请直接参看第3条更新中的链接文章。

#前言由于大家都懂的, 国内使用go get的时候, 经常会各种失败, 如果有vpn的话, 打开vpn, 问题就解决了, 但vpn其实挺不灵活的.

相对来说shadowsock则灵活得多.

#解决方案 shadowsock + Privoxy

思路就是, 使用shadowsock建立一个本地sock5代理, 但因为go get 需要http代理, 所以需要使用privoxy把sock5代理转为http代理.

#准备一台CentOS 7 操作系统的机器，通过源码编译安装sniproxy

enable epel repo

sudo yum install epel-release -y

检查yum repo

sudo yum repolist

安装gcc git

sudo yum install git gcc -y

安装sniproxy 编译依赖环境

sudo yum install autoconf automake curl gettext-devel libev-devel pcre-devel perl pkgconfig rpm-build udns-devel

下载 sniproxy 源码到本地,cd /tmp

开启ipv4转发

vi /etc/sysctl.conf
# 将net.ipv4.ip_forward=0更改为net.ipv4.ip_forward=1
sysctl -p

安装dnsmasq 和pdnsd解决dns污染

DNS的解析方案为 resolve.conf ==> dnsmasq ==> pdnsd

如何在路由器中实现透明代理？

0 互联网现状

目前整个互联网环境，被破坏最严重地部分，是 Web 服务体验。当直接破坏难以实现时，就会从流程链的上下游着手，如：DNS 污染。

其它地互联网服务类型，例如：邮件，可能小部分会受到 Web 服务上下游破坏地余震，但整体上基本不受影响。

	cd C:\Windows\System32\drivers\etc
	cp hosts hosts-bak
	wget https://raw.githubusercontent.com/lennylxx/ipv6-hosts/master/hosts -O hosts-ipv6
	#wget https://raw.githubusercontent.com/racaljk/hosts/master/hosts -O hosts-ipv4
	wget https://raw.githubusercontent.com/googlehosts/hosts/master/hosts-files/hosts -O hosts-ipv4
	wget https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts -O hosts-blacklist
	cat hosts-other hosts-ipv4 hosts-ipv6 hosts-blacklist > hosts
	#sed -i '/vidia/d' hosts
	ipconfig/flushdns
	echo 'end'

	#!/bin/bash
	# This tool can be used to sync down Red Hat based packages from RHN using only Red Hat shipped tools
	# Brian "Red Beard" Harrington <[email protected]>
	# To satisfy the pre-reqs for this script install the following two rpms:
	# yum-utils
	# createrepo

	download_dir="/var/www/html/RHN"

	/usr/bin/reposync --gpgcheck -m --download-metadata -l -p ${download_dir}/ >> /var/log/reposync.log 2>&1

	# GistID: 1924422
	# Author:: Couchbase <[email protected]>
	# Copyright:: 2011, 2012 Couchbase, Inc.
	# License:: Apache License, Version 2.0
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0

	global
	log 127.0.0.1 local0
	log 127.0.0.1 local1 notice
	maxconn 4096
	user haproxy
	group haproxy
	daemon

	listen rabbitmq 0.0.0.0:5672
	mode tcp

	# Make sure you have these installed
	yum install -y make gcc perl pcre-devel zlib-devel
	# Download/Extract source
	wget -O /tmp/haproxy.tgz http://www.haproxy.org/download/1.7/src/haproxy-1.7.2.tar.gz
	tar -zxvf /tmp/haproxy.tgz -C /tmp
	cd /tmp/haproxy-*
	# Compile HAProxy
	# https://github.com/haproxy/haproxy/blob/master/README
	make \
	TARGET=linux2628 USE_LINUX_TPROXY=1 USE_ZLIB=1 USE_REGPARM=1 USE_PCRE=1 USE_PCRE_JIT=1 \