• https://blogs.wl4g.com/archives/121

• 与 privoxy(服务级) 同类软件 (应用级, 类似javaagent, 强制tcp连接走socks代理)：

  • https://github.com/wl4g-collect/proxychains
  • 应用场景，如：https://github.com/wl4g-collect/ChatGPT-Next-Web/blob/v2.8.8/Dockerfile#L30
  • 安装

  sudo apt install proxychains-ng # proxychains4
  

  • 本地调试启动，如：

  /usr/bin/proxychains -f /etc/proxychains4.conf node server.js
  

Deploy privoxy(http) to socks5

• Building from source code

cd /opt/go-workspace/src/go-shadowsocks2/
make linux-amd64

• Run shadowsocks server (remote)

bin/shadowsocks2-linux -s 'ss://AEAD_CHACHA20_POLY1305:abcd1234%2F@:28472' -verbose

• Run shadowsocks client (local)

nohup /bin/shadowsocks2-linux -c ss://AEAD_CHACHA20_POLY1305:abcd1234%[email protected]:28472 -socks :1080 -verbose > /tmp/shadowsocks-client.stdout 2>&1 &

• Run privoxy (local)

yum install -y privoxy

# 1. configure forward:
vim /etc/privoxy/config
# open comment:
forward-socks5    /               127.0.0.1:1080 .

# 2. add gfw filter. see: /etc/privoxy/gfwlist.action

systemctl restart privoxy

• Tests for terminal

export https_proxy=127.0.0.1:8118
curl -v <https://google.com>

• Configure docker proxy (local)

sudo mkdir -p /lib/systemd/system/docker.service.d/
sudo cat </lib/systemd/system/docker.service.d/proxy.conf
[Service]
Environment="HTTP_PROXY=http://127.0.0.1:8118" "HTTPS_PROXY=127.0.0.1:8118"
EOF

# Check environment
sudo systemctl show --property Environment docker

systemctl daemon-reload && systemctl restart docker

Architecture

• Data stream flow graph

curl(https_proxy=127.0.0.1:8118)
    ↓↑
http.8118(local)
    ↓↑
socks5.client.1080(local)
    ↓↑
socks5.server.18472(remote)
    ↓↑
google.com