有時在內(nèi)網(wǎng)無法訪問外網(wǎng)資源 泳猬， 但有些應(yīng)用如conda pip yum 需要在線更新制轰，本例使用一臺有兩網(wǎng)卡的機器（同時上內(nèi)外網(wǎng)）作為代理灯谣，為內(nèi)網(wǎng)提供在線更新服務(wù)。 （在內(nèi)網(wǎng)機器隔離比較嚴格的場景不推薦使用Ｇ）
使用python做簡單的http代理疾捍， 支持CONNECT 和GET方法， 支持http 和 https 栏妖。
import urllib.parse
import socket
import select
from http.server import BaseHTTPRequestHandler, HTTPServer
from socketserver import ThreadingMixIn
import sys
class MyHandler(BaseHTTPRequestHandler):
def do_CONNECT(self):
print('CONNECT:',self.client_address,self.requestline, self.headers)
uri = self.path
print("url:", uri)
host,port = urllib.parse.splittype(uri)
address = (host, port or 443)
try:
targetconn = socket.create_connection(address=address)
except socket.error:
self.send_error(504)
return
self.send_response(200, 'Connection Established')
self.send_header('Connection', 'close')
self.end_headers()
conns = [self.connection, targetconn]
keep_connection = True
while(keep_connection):
keep_connection = False
rlist, wlist, xlist = select.select(conns, [], conns, self.timeout)
if (xlist):
break
for r in rlist:
other = conns[1] if r is conns[0] else conns[0]
data = r.recv(8192)
if (data):
other.sendall(data)
keep_connection = True
targetconn.close()
print("Connect end!========================",self.client_address)
def do_GET(self):
print('GET:',self.client_address,self.requestline, self.headers)
uri = self.path
print("url:", uri)
protocol,rest = urllib.parse.splittype(uri)
print("protocol:", protocol)
host,rest = urllib.parse.splithost(rest)
print("host:", host)
path = rest
print("Path:", path)
if (path is None or len(path) == 0):
path = '/'
host,port = urllib.parse.splitnport(host)
print("host:", host)
port = 80 if port < 0 else port
host_ip = socket.gethostbyname(host)
print(host_ip, port)
# print("headers:", self.headers)
send_data = 'GET ' + path + ' ' + self.protocol_version + '\r\n'
head = ''
for key, val in self.headers.items():
head = head + "%s: %s\r\n" % (key,val)
send_data = send_data + head + '\r\n'
print("send_data:" , send_data)
client = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
client.connect((host_ip,port))
client.send(send_data.encode('utf-8'))
data = bytes()
while True:
tmp = client.recv(8192)
if not tmp:
break
data = data + tmp
client.close()
# print("resData:", data)
print("resData len:", len(data))
self.wfile.write(data)
print('GET end ! =====================',self.client_address)
class MyHttpServer(ThreadingMixIn, HTTPServer):
pass
def main(ip, port):
try:
server = MyHttpServer((ip, port), MyHandler)
print('Welcome to the machine...')
server.serve_forever()
except KeyboardInterrupt:
print('^C received, shutting down server')
server.socket.close()
if __name__ == '__main__':
# main()
if (len(sys.argv) == 3):
for arg in sys.argv:
print(arg)
else:
print("Error, arguments less!")
print("Usage: python httpProxy.py ip port ")
sys.exit()
ip = sys.argv[1]
port = int(sys.argv[2])
print("Starting proxy at ", ip, port )
main(ip,port)
https CONNECT
CONNECT 用于建立通道乱豆，后續(xù)將使用建立的通道進行通信 。
在收到CONNECT請求時 吊趾， 回復(fù)客戶端 200 宛裕， ‘Connection Established’ 瑟啃。
然后與目標(biāo)服務(wù)器建立連接，CONNECT頭中有host和端口（即目標(biāo)服務(wù)器的主機和端口）揩尸。
監(jiān)控與客戶端和目標(biāo)服務(wù)器的連接socket 蛹屿，當(dāng)有讀事件時， 讀取之然后發(fā)送出去岩榆；
客戶端--》 proxy --》 目標(biāo)服務(wù)器错负；
目標(biāo)服務(wù)器 --》 proxy --》 客戶端 ；
select 的使用
select.select(讀列表勇边， 寫列表湿颅， 執(zhí)行列表， timeout）
循環(huán)處理準(zhǔn)備好的讀寫執(zhí)行列表粥诫， 執(zhí)行相應(yīng)操作。
