客户端需要前置代理要怎么配置?

[newcastlecy]

goflyway -k="password" -up="VPS:PORT" -l=":LOCAL_PORT"

前置代理 要配置代理ip 10.10.81.12 端口5366 才能上网

goflyway这个支持么?

[coyove]

10.10.81.12:5366 是什么类型的代理，认证方式是什么

[newcastlecy]

HTTP代理

[coyove]

现在release和master都没有前置代理功能，需要切换gdev分支下

如果是纯HTTP代理（应该不太可能吧），需要mitm模式，导入根证书ca.pem后命令：

./goflyway -up="[email protected]:5366;VPS:PORT" -k=...

如果是https代理，命令：

./goflyway -up="10.10.81.12:5366@VPS:PORT" -k=...

[newcastlecy]

应该是squid 做成的Http代理，可以编译个win的包么

[coyove]

请使用https://github.com/coyove/goflyway/releases/tag/v1.0.11a 版本进行测试

[newcastlecy]

goflyway -k="password" -up="[email protected]:5366;VPS:PORT" -l=":8100"
goflyway (build 1711200915366)

• launched as client
• ca.pem loaded, read 1024 bytes
• key.pem not found, using the default one
• man-in-the-middle to intercept HTTPS
• all reqeusts sent out will have VPS:PORT as the host name
• proxy Onotib started at [ :8100 ], upstream [ 10.10.81.12:5366 ]
• access client web console at [ 127.0.0.1:8101 ]
  [E1122/125908.624:httpmux.go(159)] prefetch err: i/o read timeout
  [E1122/125916.329:client.go(341)] dns lookup err: mtalk.google.com
  [E1122/125916.403:mitm.go(133)] cannot read request: malformed HTTP request ")\x02\xc2\x01"
  [E1122/125923.385:client.go(341)] dns lookup err: www.googleapis.com
  ... 3 similar message(s)
  [E1122/125923.460:client.go(341)] dns lookup err: accounts.google.com
  [E1122/125923.547:client.go(341)] dns lookup err: clients2.google.com
  [E1122/125929.392:client.go(341)] dns lookup err: www.google.com
  [E1122/125933.674:client.go(341)] dns lookup err: android.clients.google.com
  [E1122/125944.556:mitm.go(156)] proxy pass: https://www.googleapis.com/oauth2/v4/token, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
  ... 2 similar message(s)
  [E1122/125944.567:mitm.go(156)] proxy pass: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumAccountReconcilor,counter:4,load_time_ms:115221&json=standard, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
  [E1122/125944.571:mitm.go(156)] proxy pass: https://www.googleapis.com/oauth2/v4/token, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
  [E1122/125944.607:mitm.go(156)] proxy pass: https://clients2.google.com/service/update2/crx?os=win&arch=x64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=62.0.3202.94&lang=zh-CN&acceptformat=crx2,crx3&x=id%3Dlhikkakcmddjomilpjgdepfgmakpekeh%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D1&x=id%3Dgadafnnkijfmbbmeielphlapddbmgbgo%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Didknbmbdnapjicclomlijcgfpikmndhd%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dlhfmcbnidnkaalleepapkdnfblbiaacl%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Djlmmdfhaddlgkgcigccmlfhapliiacoh%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dmgjjeipcdnnjhgodgjpfkffcejoljijf%26v%3D0.0.0.0%26uc%26ping%3Dr%253D1%2526e%253D0%2526dr%253D1&x=id%3Deeilbciljmgcdilcidohcgihnlknkhbe%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Ddnpdkjaahjndfknkobdfakmaiepcoabo%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Daocdmnhdeeenokebhpljlfhcmfhhkcnj%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Ddedkgoaamppfeibgahalfcihekdgedip%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D1&x=id%3Dmjaenbjdjmgolhoafkohbhhbaiedbkno%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dlfmhcpmkbdkbgbmkjoiopeeegenkdikp%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dobhlfmheblhjhkmacldlhdnbgbaiigba%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dhikppniaiehchkgcnnjdkcpmoddhjfcm%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Dmgndgikekgjfcpckkfioiadnlibdjbkf%26v%3D0.0.0.0%26uc&x=id%3Dfgbjpbdfegnodokpoejnbhnblcojccal%26v%3D0.0.0.0%26uc%26ping%3Dr%253D20%2526e%253D0%2526dr%253D1&x=id%3Damigcgbheognjmfkaieeeadojiibgbdp%26v%3D2.2%26uc&x=id%3Danlllmnpjodopgbkbpnghnjlelnogfjc%26v%3D2017.6%26uc&x=id%3Daphanomkkjgledipighdfjnilhfenpam%26v%3D2017.11.10%26uc&x=id%3Dbfbmjmiodbnnpllbbbfblcplfjjepjdn%26v%3D3.4.33.0%26uc, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
  [E1122/125946.391:client.go(341)] dns lookup err: www.googleapis.com
  [E1122/125950.438:mitm.go(156)] proxy pass: https://www.google.com/, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
  [E1122/125951.247:client.go(341)] dns lookup err: ssl.google-analytics.com
  [E1122/125953.503:client.go(341)] dns lookup err: www.google.com
  [E1122/125954.807:mitm.go(156)] proxy pass: https://android.clients.google.com/checkin, proxyconnect, dial tcp 10.10.81.12:5366: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

[coyove]

错误显示10.10.81.12:5366不可连接

[newcastlecy]

10.10.81.12:5366 应该是 纯HTTP代理，直接代理访问国内是没有问题的

[coyove]

直接将浏览器的代理设为10.10.81.12:5366可以访问？

[newcastlecy]

可以

[coyove]

如果有curl的话，请尝试

curl -v -X GET -H "Host: www.baidu.com" http://10.10.81.12:5366
curl -v -X GET -x 10.10.81.12:5366 http://www.baidu.com

看看有什么输出

[newcastlecy]

root@localhost# curl -v -X GET -x 10.10.81.12:5366 http://www.baidu.com
Note: Unnecessary use of -X or --request, GET is already inferred.

• Rebuilt URL to: http://www.baidu.com/
• Trying 10.10.81.12...
• Connected to 10.10.81.12 (10.10.81.12) port 5366 (#0)

GET http://www.baidu.com/ HTTP/1.1
Host: www.baidu.com
User-Agent: curl/7.47.0
Accept: /
Proxy-Connection: Keep-Alive

< HTTP/1.1 200 OK
< Server: bfe/1.0.8.18
< Date: Wed, 22 Nov 2017 06:14:27 GMT
< Content-Type: text/html
< Content-Length: 2381
< Last-Modified: Mon, 23 Jan 2017 13:28:11 GMT
< Connection: Keep-Alive
< ETag: "588604eb-94d"
< Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
< Pragma: no-cache
< Set-Cookie: BDORZ=27315; max-age=86400; domain=.baidu.com; path=/
< Accept-Ranges: bytes
<

<title>百度一下，你就知道</title>

新闻 hao123 地图 视频 贴吧 登录 <script>document.write('登录');</script> 更多产品

关于百度 About Baidu

©2017 Baidu 使用百度前必读  意见反馈 京ICP证030173号 

• Connection #0 to host 10.10.81.12 left intact

[coyove]

该问题无法重现

提议：
在服务器上git clone https://github.com/inaz2/proxy2这个简单的代理脚本，把proxy2.py里的第375行改为server_address = ('::', port)，然后使用python proxy2.py启动

客户端使用-up="mitm@VPS:8080;VPS:PORT"连接，看看是否可以正常工作

[jzp820927]

想请教一下，纯HTTP代理 为什么要 需要mitm模式？

[coyove]

浏览器发出的https请求走不了http代理，必须通过中间人把其中的数据拆出来。
同理websocket，http2因为要求全双工的连接，所以goflyway也并不支持