2015-09-03 04:46:51 +02:00
|
|
|
fteproxy
|
|
|
|
|
========
|
|
|
|
|
|
|
|
|
|
[fteproxy][1] provides transport-layer protection to resist keyword filtering,
|
2015-05-27 01:14:55 +02:00
|
|
|
censorship and discriminatory routing policies.
|
|
|
|
|
|
|
|
|
|
Its job is to relay datastreams, such as web browsing traffic,
|
|
|
|
|
by encoding streams as messages that match a user-specified regular expression.
|
|
|
|
|
|
|
|
|
|
fteproxy is fast, free, open source, and cross platform.
|
2015-09-03 04:46:51 +02:00
|
|
|
It works very well with [vimagick/openvpn][2](TCP mode).
|
2015-05-27 01:14:55 +02:00
|
|
|
|
|
|
|
|
In the following example, I will setup a server/client pair to connect www.google.com:80.
|
|
|
|
|
|
2015-09-03 04:46:51 +02:00
|
|
|
## Internet Censorship
|
|
|
|
|
|
|
|
|
|
### The problem
|
|
|
|
|
|
2015-05-27 13:17:15 +02:00
|
|
|
|
|
|
|
|
|
2015-09-03 04:46:51 +02:00
|
|
|
### The solution
|
|
|
|
|
|
2015-05-27 13:17:15 +02:00
|
|
|
|
|
|
|
|
|
2015-05-27 01:14:55 +02:00
|
|
|
## Create a docker-compose.yml
|
|
|
|
|
|
2015-05-27 14:02:23 +02:00
|
|
|
```yaml
|
2015-05-27 01:14:55 +02:00
|
|
|
server:
|
|
|
|
|
image: vimagick/fteproxy
|
|
|
|
|
ports:
|
|
|
|
|
- "80"
|
|
|
|
|
environment:
|
|
|
|
|
- "MODE=server"
|
|
|
|
|
- "SERVER_IP=0.0.0.0"
|
|
|
|
|
- "SERVER_PORT=80"
|
|
|
|
|
- "PROXY_IP=www.google.com"
|
|
|
|
|
- "PROXY_PORT=80"
|
2015-05-27 04:25:59 +02:00
|
|
|
- "KEY=CB2FBA2BC70490526E749E01BB050F6B555964290DFF58CF24785B4A093F7B18"
|
2015-05-27 01:14:55 +02:00
|
|
|
|
|
|
|
|
client:
|
|
|
|
|
image: vimagick/fteproxy
|
|
|
|
|
ports:
|
|
|
|
|
- "9009:80"
|
|
|
|
|
links:
|
|
|
|
|
- server
|
|
|
|
|
environment:
|
|
|
|
|
- "MODE=client"
|
|
|
|
|
- "SERVER_IP=server"
|
|
|
|
|
- "SERVER_PORT=80"
|
|
|
|
|
- "CLIENT_IP=0.0.0.0"
|
|
|
|
|
- "CLIENT_PORT=80"
|
2015-05-27 04:25:59 +02:00
|
|
|
- "KEY=CB2FBA2BC70490526E749E01BB050F6B555964290DFF58CF24785B4A093F7B18"
|
2015-05-27 01:14:55 +02:00
|
|
|
```
|
|
|
|
|
|
2015-05-27 04:25:59 +02:00
|
|
|
> To generate random key:
|
|
|
|
|
> `xxd -u -p -c32 /dev/urandom | head -n1`
|
|
|
|
|
|
2015-05-27 01:14:55 +02:00
|
|
|
## Run fteproxy server/client
|
|
|
|
|
|
2015-05-27 14:02:23 +02:00
|
|
|
```bash
|
2015-05-27 01:14:55 +02:00
|
|
|
$ docker-compose up -d
|
|
|
|
|
Creating fteproxy_server_1...
|
|
|
|
|
Creating fteproxy_client_1...
|
|
|
|
|
|
|
|
|
|
$ docker-compose ps
|
|
|
|
|
Name Command State Ports
|
|
|
|
|
----------------------------------------------------------------------------------
|
|
|
|
|
fteproxy_client_1 /bin/sh -c /fteproxy/ftepr ... Up 0.0.0.0:9009->80/tcp
|
|
|
|
|
fteproxy_server_1 /bin/sh -c /fteproxy/ftepr ... Up 0.0.0.0:32768->80/tcp
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Test with curl
|
|
|
|
|
|
2015-05-27 14:02:23 +02:00
|
|
|
```html
|
2015-05-27 01:14:55 +02:00
|
|
|
$ curl http://localhost:9009/
|
|
|
|
|
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
|
|
|
|
|
<TITLE>302 Moved</TITLE></HEAD><BODY>
|
|
|
|
|
<H1>302 Moved</H1>
|
|
|
|
|
The document has moved
|
|
|
|
|
<A HREF="http://www.google.com/">here</A>.
|
|
|
|
|
</BODY></HTML>
|
|
|
|
|
```
|
2015-09-03 04:46:51 +02:00
|
|
|
|
|
|
|
|
[1]: https://fteproxy.org/
|
|
|
|
|
[2]: https://hub.docker.com/r/vimagick/openvpn/
|
