配置Tor網(wǎng)橋
教程參考 https://dreamcreator108.com/dreams/tor-bridge/index.html
Obfsproxy Instructions
client torrcclient torrc
這是安裝Python版本obfsproxy的向?qū)г簦绻阍趹?yīng)用C版本嗅绰,我們建議您升級(jí)為Python版本厢绝。
Step 0:安裝Python
安裝obfsproxy需要Python(版本>=2.7)和pip,如果用Debian測(cè)試版本(或者不穩(wěn)定版本),或者比Oneiric更新的Ubuntu版本,這很容易:
apt-get install python2.7 python-pip python-dev build-essential
在Fedora操作系統(tǒng)上,命令可能看起來(lái)是這樣:
yum install make automake gcc python-pip python-devel libyaml-devel
Step 1:Install Tor
需要一個(gè)最近的Tor版本( >=0.2.4.1 )
在 /etc/apt/sources.list 中添加源
deb http://deb.torproject.org/torproject.org xenial main
deb-src http://deb.torproject.org/torproject.org xenial main
添加gpg key:
gpg --keyserver keys.gnupg.net --recv A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -
安裝tor:
apt update && apt install tor deb.torproject.org-keyring -y
Step 2:Install obfsproxy
在 /etc/apt/sources.list 中添加源
deb http://deb.torproject.org/torproject.org obfs4proxy main
Step 3:setup tor
現(xiàn)在在安裝Tor 的/etc/tor/torrc 中增加:
#Bridge config
Log notice file /var/log/tor/notices.log
RunAsDaemon 1
ORPort 443
Exitpolicy reject *:*
BridgeRelay 1
ServerTransportPlugin obfs4 exec /usr/bin/obfs4proxy
ExtORPort auto
PublishServerDescriptor 0
#Set your bridge nickname and contact info
ContactInfo 88888
Nickname GentleNi
Step 4:?jiǎn)?dòng)Tor并進(jìn)行驗(yàn)證
使用新配置文件重啟Tor(可能需要用sudo命令權(quán)限)
service tor restart
查看日志文件,命令:tail -F /var/log/tor/notices.log
饰迹,當(dāng)看到有類似的輸出,證明很成功:
[notice] Your Tor server's identity key fingerprint is 'Unnamed 530FA95A79B9145D315F15F01215BE2F3BE921EB'
[notice] Your Tor bridge's hashed identity key fingerprint is 'Unnamed 83D1AC9EC2F15D7024278461DC91A8B2E9BBF43A'
[notice] Registered server transport 'obfs4' at '[::]:46396'
[notice] Tor has successfully opened a circuit. Looks like client functionality is working.
[notice] Bootstrapped 100%: Done
[notice] Now checking whether ORPort <redacted>:443 is reachable... (this may take up to 20 minutes -- look for log messages indicating success)
[notice] Self-testing indicates your ORPort is reachable from the outside. Excellent.
記住輸出中 obfs4 監(jiān)聽的端口(本例中是 46396)余舶。并且還能找到你的server identity fingerprint(本例中是 530FA95A79B9145D315F15F01215BE2F3BE921EB)啊鸭,也復(fù)制下來(lái)。
在/var/lib/tor/pt_state/obfs4_bridgeline.txt
文件中可以看到類似如下的內(nèi)容:
Bridge obfs4 <IP ADDRESS>:<PORT> <FINGERPRINT> cert=6LMNcXh6MIfApbZiMksnS4Kj+2sffZ5pybSqtcOO5YoHgfrMpkBJqvLxhuR2Ppau0L2seg iatmode=0
把 Bridge 去了匿值,ip 換了赠制,端口寫對(duì)了,fingerprint 粘貼了挟憔,之后钟些,把這行復(fù)制即可,這個(gè)绊谭,就是你的網(wǎng)橋了政恍。
本例中最后成品:
obfs4 123.456.789.10:46396 530FA95A79B9145D315F15F01215BE2F3BE921EB cert=6LMNcXh6MIfApbZiMksnS4Kj+2sffZ5pybSqtcOO5YoHgfrMpkBJqvLxhuR2Ppau0L2seg iatmode=0