乱读天书，不求甚解

周祎骏的个人云笔记

乱读天书，不求甚解

Linux网络 5.1 redsocks 代理

2017-08-26 06:15:33 65 0 0

admin

> 一款结合iptables，将TCP连接重定向到socks代理或者https代理的开源软件

主要用于socks5代理，socks5是一种通用代理协议，可以代理tcp/udp等，还可以增加用户名密码验证功能
https://github.com/darkk/redsocks
#安装
1.安装依赖
yum -y install libevent libevent-devel
2.编译
cd redsocks
make
3.配置
cp redsocks.conf.example redsocks.conf
vim ./redsocks.conf
```
base {
        log_debug = off;
        log_info = on;
        log = stderr;
        daemon = off;
        redirector = iptables;
}
redsocks {
        local_ip = 监听的ip;
        local_port = 监听的端口;
        ip = 代理机的ip;
        port = 代理机的端口;
        type = socks5;
}
```
4.启动
```
nohup ./redsocks -c ./redsocks.conf &
```
5.配置对应的iptables
*摘自redsocks的README*
```
# Create new chain
root# iptables -t nat -N REDSOCKS

# Ignore LANs and some other reserved addresses.
# See http://en.wikipedia.org/wiki/Reserved_IP_addresses#Reserved_IPv4_addresses
# and http://tools.ietf.org/html/rfc5735 for full list of reserved networks.
root# iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN
root# iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN
root# iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN
root# iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN
root# iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN
root# iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN
root# iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN
root# iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN

# Anything else should be redirected to port 12345
root# iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 12345
```
***
#可以配合以下代理使用：
[ssh代理](/blog/post/admin/Linux_ssh_proxy)

上一篇: Linux网络 1.1 相关命令

下一篇: Mongodb 0.0 介绍

文档导航