第一版发布

Author: anexplore

Dockerfile

@@ -0,0 +1,8 @@
+FROM openjdk:8
+LABEL MAINTAINER anexplore@github.com
+
+ADD run_fakeserver.sh  run_sslendpoint.sh entrypoint.sh logback.xml proxytunnel-jar-with-dependencies.jar certs /home/proxytunnel/
+WORKDIR /home/proxytunnel
+RUN chmod 755 run_fakeserver.sh run_sslendpoint.sh entrypoint.sh
+ENTRYPOINT ["./entrypoint.sh"]
+CMD ["fakeserver"]

README.md

@@ -1,5 +1,111 @@
-# Http Proxy Tunnel
+# Proxy Tunnel
 
-建立流量加密转发通道
 
-浏览器 -------FakeHttpProxy------加密流量------ FakeHttpProxy------解密流量------ 最终目标 HttpProxy 
+### 建立TCP流量加密转发通道从而可以更安全的使用Proxy
+
+![intro](img/intro.png)
+
+Fake Proxy 与 Ssl Endpoint 之间使用SSL的双向认证。
+
+* Browser: 想要使用Real Proxy的客户端
+* Fake Proxy: 假代理，这个代理只是接收browser(其它使用代理的客户端)的TCP流量，并将流量加密转发给ssl endpoint或者将ssl endpoint的加密流量解密传递给brwoser
+* Ssl Endpoint: 流量转发中继，其负责接收fake proxy的加密流量解密后传送给最终Real Proxy 或者将real proxy的流量加密后传送给Fake proxy
+* Real Proxy: 最终要使用的Proxy
+
+## 使用说明
+### Fake Proxy 与 Ssl Endpoint证书
+Fake Proxy 与 Ssl EndPoint 之间需要进行证书的双向认证，因此需要分别为其生成证书以及密钥文件；
+
+建议使用自签发的CA证书，分别生成Fake Proxy 与 Ssl Endpoint的证书与密钥
+
+> certs文件夹里已经生成了一套自签发证书 偷懒可以直接使用
+
+### 配置
+
+|配置项|是否必须|默认值|说明|
+|:---:|:----:|:---:|:---:|
+|proxyHost|ssl endpoint必须配置|-|real proxy的host|
+|proxyPort|ssl endpoint必须配置|-|real proxy的port|
+|serverBindLocalAddress|false|0.0.0.0|fake server 和ssl endpoint的绑定地址|
+|serverBindLocalPort|false|80|fake server和ssl endpoint的绑定端口|
+|maxConnectionBacklog|false|1000|fake server 和 ssl endpoint的tcp backlog|
+|workerEventGroupNumber|false|cpu逻辑核数|io worker thread number|
+|idleTimeoutForClient|false|60000|idle timeout when no io, ms|
+|connectionTimeoutToProxyServer|false|10000|fake proxy 与 ssl endpoint连接超时时间|
+|openNettyLoggingHandler|false|0|是否开启netty LoggingHandler, 1打开|
+|sslEndPointHost|fake proxy必须配置|-|ssl endpoint地址|
+|sslEndPointPort|fake proxy必须配置|-|ssl endpoint端口|
+|keyCertChainFile|必须|-|fake proxy或者 ssl endpoint的证书|
+|keyFile|必须|-|fake proxy或者 ssl endpoint的证书密钥|
+|keyPassword|否|-|密钥密码|
+|trustCertFile|必须|-|签发证书的根证书CA|
+
+
+### 启动
+
+* Fake Proxy: 127.0.0.1:8080
+* Ssl Endpoint: sslendpoint.com:3389
+* Real Proxy: http proxy （realproxy.com:3128） 账号密码 user:password
+
+#### Browser
+在Browser中配置代理地址为 127.0.0.1:8080 账号密码: user:password
+
+#### Fake Proxy
+修改run_fakeserver.sh
+
+~~~shell script
+-DserverBindLocalAddress=127.0.0.1 -DserverBindLocalPort=8080
+-DsslEndPointHost=sslendpoint.com -DsslEndPointPort=3389
+-DkeyCertChainFile=certs/users/client.crt -DkeyFile=certs/users/client.pk8 -DkeyPassword=123456 
+-DtrustCertFile=certs/ca/ca.crt
+~~~
+
+~~~shell script
+sh run_fakeserver.sh &
+~~~
+
+
+### Ssl EndPoint
+修改 run_sslendpoint.sh
+
+~~~shell script
+-DserverBindLocalAddress=0.0.0.0 -DserverBindLocalPort=3389
+-DproxyHost=realproxy.com -DproxyPort=3128
+-DkeyCertChainFile=certs/server/server.crt -DkeyFile=certs/server/server.pk8 -DkeyPassword=123456
+-DtrustCertFile=certs/ca/ca.crt"
+~~~
+
+~~~shell script
+sh run_sslendpoint.sh
+~~~
+
+### Docker 模式
+拉取镜像
+
+~~~shell script
+docker pull blueoom/proxytunnel
+~~~
+
+> 通 -e 传递环境变量来设置serverBindLocalAddress等配置项
+
+启动fake server
+
+~~~shell script
+docker run -d --rm -e DOCKER_MODE=1 -e serverBindLocalAddress=0.0.0.0 -e sslEndPointHost=xxxx -e xxx=xxx -p 8080:8080 blueoom/proxytunnel fakeserver
+~~~
+
+启动ssl endpoint
+
+~~~shell script
+docker run -d --rm -e DOCKER_MODE=1 -e serverBindLocalAddress=0.0.0.0 -e proxyHost=xxxx -e xxx=xxx -p 3389:3389 blueoom/proxytunnel sslendpoint
+~~~
+
+
+### 没有做的
+* test测试用例未上传
+* browser与fake proxy，fake proxy 与 ssl endpoint ， ssl endpoint 与 real proxy之间，没有对整条链路上各个节点进行流量发送控制，在各个网络传输速度不对等的情况下可能会有问题
+* fake proxy 与 ssl endpoint之间的流量可以加以混淆
+
+
+### 注意
+* 如果real proxy是为了越过gfw且real proxy是http类型，那么fake proxy与browser一定要在一个内网里

certs/ca/ca.crt

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----
+MIIDBjCCAe4CCQD7hJvZGf30AzANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJV
+UzELMAkGA1UECAwCVVMxCzAJBgNVBAcMAldDMRwwGgYDVQQKDBNEZWZhdWx0IENv
+bXBhbnkgTHRkMB4XDTIwMDgxMTAzNDM1NFoXDTMwMDgwOTAzNDM1NFowRTELMAkG
+A1UEBhMCVVMxCzAJBgNVBAgMAlVTMQswCQYDVQQHDAJXQzEcMBoGA1UECgwTRGVm
+YXVsdCBDb21wYW55IEx0ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+AOQIfbhl+SlVn89FkK5hzJ3oVlYadq2IUZMlCfwoVCqnZJyQNTEMWZWIPhjkoR/Y
+WDg9SKoDFmCOrixOYR+QRoqaVwtQbw56U7A/sJPUsaQyek34toY/nJutOpsoworb
+IhrrHDaP9+Z8FsgbsVcQApucZiLomiIlevtTiHptaUj9AtVxpjpGKctYYhkwsK+d
+g3MafFQkInrb3aUZEJVWUYxkf2Qgpx2oq9y2/R6Y33nf+BRfCoI3XkbLyeJeUrVZ
+bdw0MSpRZFOKExSIrq8K5yWkn2JbPB/QgXjJmHdI/cNNjDeQ63hO4uuZ1qaxWhEC
+5RQhrCinLN20CumitVg2FxECAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAreS0BcsZ
+txvpW2J/ku/Zrm5VGSuvtHRVIJqxCDVHzneg1WMYPZNjY9RCs4NrKS+MveeocYSZ
+nuqYs4YZyisY0+eAWJjsZm4Igzrrc675EqeuLTx69NVCHJW0huNeWc236dL7y4o/
+wKnDteFgZm/r7/5WcTV+di4kgAhca1ppK8ybX2ktNGO0uk2cZMHSQQSCT1/qR1wg
+9ufhiIaWMzgcmFUzw/PG1Cu6SnynwfwVJGxP0PDFtttO55cSKaP7z+icko/ce3p9
+AKtY+fjtCEpA6ylHo4oQojuB8ZzYW19kvNOlu9EoaFrSDQvr3LalWb7s7v3K2hsk
+6CSGekaiX/DnWA==
+-----END CERTIFICATE-----

certs/ca/ca.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

certs/server/server.crt

@@ -0,0 +1,67 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 43981 (0xabcd)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=US, L=WC, O=Default Company Ltd
+        Validity
+            Not Before: Aug 11 03:52:51 2020 GMT
+            Not After : Aug  9 03:52:51 2030 GMT
+        Subject: C=US, ST=US, L=US
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:ea:a4:3d:fb:36:d9:f4:1a:aa:85:43:23:04:a6:
+                    2a:bc:35:40:d5:f4:46:a9:7e:49:b8:48:93:c2:ca:
+                    6c:e6:66:6e:06:f4:19:ee:80:85:24:d5:08:ec:f4:
+                    78:e0:db:69:ab:f9:80:ae:02:25:29:e3:76:8c:c1:
+                    64:00:92:91:22:b9:4d:8c:aa:70:b7:91:d7:5c:13:
+                    c0:81:7f:c8:16:c5:e3:4f:35:18:3e:8e:dd:7c:8d:
+                    3e:41:a7:90:10:1c:39:b8:3d:53:89:08:ea:ed:9f:
+                    34:60:6e:e4:48:6f:7c:da:f6:2d:07:c1:af:01:6c:
+                    af:f4:61:b8:37:6c:08:87:4d:19:22:2c:68:38:1c:
+                    f2:f0:07:6c:ea:f4:e3:fa:04:1f:99:91:d2:00:74:
+                    eb:fc:e1:4e:3f:fd:06:4f:f5:99:89:54:51:73:09:
+                    9f:48:dc:26:c8:df:d7:db:cf:5c:af:58:54:20:14:
+                    64:0c:db:e4:bd:bf:ee:de:b9:6c:f0:57:be:03:ed:
+                    6d:d3:5d:aa:59:d2:f4:e8:34:5f:53:73:2a:6b:0e:
+                    69:f9:21:3a:e4:1a:29:24:86:e7:50:90:86:8e:96:
+                    09:d1:39:09:ef:49:f8:ae:64:48:d9:88:53:6e:9a:
+                    aa:2d:57:e7:4e:db:33:37:1f:ac:03:ac:2a:19:d5:
+                    b8:bb
+                Exponent: 65537 (0x10001)
+    Signature Algorithm: sha1WithRSAEncryption
+         77:55:db:cc:1d:f5:28:4d:dd:01:c6:06:39:3f:36:19:6f:7b:
+         1e:01:6e:67:30:d9:10:eb:f3:7d:cb:fd:6a:e7:79:ac:e4:65:
+         94:01:95:98:96:68:f2:81:55:21:e8:c2:82:09:9a:d0:92:7b:
+         42:86:26:8d:74:68:66:d1:f5:cb:07:0b:93:5a:63:8c:b5:9e:
+         43:62:19:08:1c:35:ad:c8:56:da:9c:c0:ca:29:96:56:49:ad:
+         97:2d:a0:1d:ca:bb:bc:95:e7:28:6d:13:3b:3f:c5:05:df:f9:
+         54:64:ec:6a:0c:7b:30:f6:43:5a:d2:46:be:da:f1:81:11:20:
+         59:1a:8a:8a:1d:cf:a9:c9:fc:99:f4:62:8a:1f:65:e5:cf:d9:
+         4f:e7:b8:6f:7d:03:a1:97:6f:b5:77:cd:91:75:07:d0:b4:3a:
+         e8:93:67:ad:ed:79:ce:7a:4e:8a:69:6c:54:f8:be:a6:91:ad:
+         0c:9f:43:33:46:16:73:3b:b0:1a:85:f9:65:82:fb:8a:2e:27:
+         84:d8:64:90:9c:9b:64:21:85:69:3d:69:54:cf:5e:a9:42:8b:
+         32:a5:4b:96:d2:26:24:35:75:66:2b:e5:73:73:b9:81:2e:1b:
+         1b:37:fa:75:49:2d:bc:05:93:a6:32:5e:87:4f:d1:7e:c5:9d:
+         b5:ea:0a:c3
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/server/server.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEA6qQ9+zbZ9BqqhUMjBKYqvDVA1fRGqX5JuEiTwsps5mZuBvQZ
+7oCFJNUI7PR44Ntpq/mArgIlKeN2jMFkAJKRIrlNjKpwt5HXXBPAgX/IFsXjTzUY
+Po7dfI0+QaeQEBw5uD1TiQjq7Z80YG7kSG982vYtB8GvAWyv9GG4N2wIh00ZIixo
+OBzy8Ads6vTj+gQfmZHSAHTr/OFOP/0GT/WZiVRRcwmfSNwmyN/X289cr1hUIBRk
+DNvkvb/u3rls8Fe+A+1t012qWdL06DRfU3Mqaw5p+SE65BopJIbnUJCGjpYJ0TkJ
+70n4rmRI2YhTbpqqLVfnTtszNx+sA6wqGdW4uwIDAQABAoIBAB8x8M+aTkXG2c7X
+yysOEHZvOgx36oEUOibW91YZZXsIOS6Re3Ua/xiTfhlKs1tpsFXd2P7JaDl2dUdn
+Wq08zzDno+jErDGroQ8rzRcqbuagLoVUUMHYapfpi1JdPaj2p7HX7Wg1mE45MVR0
+ycLbl6Tgv8HdPTAaTBZYe45avZOHKlCqbqbgZ4GuzTLq+O4i8CFPFwKCyFGqv6sZ
+OfiGJ/aKDvBcuneXw9xanT37lNDng7wIQ6IBKjrvQWArpnvuagVsQzPe2XeiQTcW
+Gr25c+mv6YjrMb3NTXfiBDFzI6lwT/BZwy5eQpINDTJPlWG9FmSRHcCAc5Xdn/0V
+b4iXQNkCgYEA/W+kNzA4Bcyiz6Cz+/lIn/KODdx3L2wSao+d3KusIaVHYfL5sPsz
+Bevf0EUnx3cA8HWqFPKP4OQWbqvSBKO0mFBySWRrUoag0jh8sWZypifINkUsp+Hh
+3Dg5dJhJNewlqLhBB3U/WLYbBNwa909bPYITnBlfLVd5Sv/BaaNKxJUCgYEA7QPt
+BOQToaeosc52+PPliRsfnECdXuJ1AHy467aO+Gn4Ykfslw+DH/p0p/5JtxynheEB
+g/OyG8OGDsYxKjMMka62gPOSm8yfYUI7qmexZzrYzv0QcBMGWBymaagb6ldIO7R2
+vs68LarKCXObBw2xeqoqKhP0Tsn11Jw3toCCZA8CgYBBHxbLN5CtrM+JGnolHQEU
+WHc4CJZ3kQWKbCzcLyCj5JxbBtwyJdoOg3WXRq3aCzIql5GEoG9oEjPRbEUi/A3D
+tagoQ61wHzfjzK/9xZ1gJIjFqTC4Usp+k9PvqdHmES/8EpxjFjWYzfJTZVtogPOo
+8muniL10IS4Bn4ZLZrInoQKBgBxGHZ45vwXHxF4BrTuhjL5AWBMBukQ5a4+1UTH9
+QyzrJ1BCGD0lApVsAUKRGSYY6vsTjmS5S4P4XSOiDPdlw5gVaXwUkma3kEO/7PI1
+EHqqEHcQxUc5XcZhFJECFuJrqxhEPO4iJ1yjRRq/ibzbq1Jgvkrqungzq3nDcPn6
+dpONAoGAHmft/wccg4yMMQE82nO877CDmh7nTvD3hTE+9Sp9NAhMRmMOnsEX0ETX
+w3TgJW6zCkuHvQeKMQJsidDnBWKZYiHOXa2SM4L+4lRA6KjA+Hank+C/eBsNeyT3
+rghcb8r717BtX5ELjjoLeyXAdp9mPdZUKwj1+4SsbszrBn+8aGw=
+-----END RSA PRIVATE KEY-----

certs/server/server.pk8

@@ -0,0 +1,29 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

certs/users/client.crt

@@ -0,0 +1,68 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 43982 (0xabce)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=US, L=WC, O=Default Company Ltd
+        Validity
+            Not Before: Aug 11 03:58:22 2020 GMT
+            Not After : Aug  9 03:58:22 2030 GMT
+        Subject: C=US, O=Default Company Ltd, L=Default City
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bc:53:10:0c:c6:a5:62:84:98:8d:e6:6b:24:71:
+                    9a:12:ab:3e:77:4c:44:6b:e5:ee:d4:03:d3:0e:21:
+                    a9:32:60:9c:27:50:5f:d9:da:48:1e:4f:28:ab:fa:
+                    3c:0c:58:3c:6a:e2:ea:cc:fc:cf:34:d4:56:6b:b7:
+                    29:05:3a:6b:44:fd:64:31:42:13:25:a5:4e:eb:b4:
+                    63:45:de:5f:3e:5c:91:cf:08:6e:43:94:1a:14:19:
+                    e6:cb:1f:f1:d4:3c:98:92:14:3a:ab:40:3e:a4:67:
+                    99:11:26:f0:4f:c1:81:e3:bb:73:35:a4:eb:18:aa:
+                    73:22:c6:e1:a5:c9:05:9c:27:b9:10:44:8c:db:c7:
+                    1e:f3:ab:96:37:4f:9d:60:a6:9c:f4:10:e0:4c:4c:
+                    49:34:aa:f4:c7:0b:56:48:50:35:11:0c:44:06:71:
+                    1c:d2:c4:9e:2f:0b:d1:0c:7f:ab:67:38:d4:7d:c0:
+                    6e:49:87:95:db:77:95:40:5e:81:08:b0:54:f8:69:
+                    3d:89:fa:61:bc:83:75:2b:ec:44:08:c8:5d:2a:f5:
+                    f8:67:41:38:91:30:f1:87:27:19:2e:bf:c0:d0:41:
+                    da:b1:05:cf:8b:0b:06:a5:a4:42:50:90:1c:f9:42:
+                    df:ba:a0:0b:d6:c0:57:bf:c6:44:05:9c:e5:a7:29:
+                    33:1f
+                Exponent: 65537 (0x10001)
+    Signature Algorithm: sha1WithRSAEncryption
+         3f:8e:d0:17:f5:f7:98:eb:14:d1:07:ee:ea:ba:5d:6d:e3:5f:
+         6a:0d:9b:df:f1:6d:7e:36:2a:b4:10:00:42:56:ca:41:fa:58:
+         e4:13:f5:4c:4e:58:b4:be:b2:e4:2a:7d:ca:e3:74:2e:f1:fd:
+         48:98:b7:ad:6d:dc:80:cf:62:af:d5:e9:06:a6:e1:72:20:17:
+         d5:c5:62:54:19:f9:6a:8f:a2:26:34:d8:59:c8:88:37:57:17:
+         e2:73:6d:eb:83:7e:98:9e:9d:df:ee:46:64:27:ec:91:8d:3c:
+         1e:bd:96:39:d2:ed:65:66:c2:8d:0e:2d:1c:af:43:ab:b4:0c:
+         fc:44:d4:7e:98:77:65:a6:74:51:2e:73:0c:5d:36:22:c5:6b:
+         53:55:3c:c9:ef:ee:f8:3e:fa:02:71:ef:51:a3:73:fb:e3:3d:
+         f7:f7:e5:87:98:c5:0f:47:a8:90:a8:4a:75:56:3a:57:bc:a5:
+         3d:30:d9:8c:34:57:65:33:98:eb:9c:e9:8a:95:34:99:9e:58:
+         43:f4:2e:b5:c8:2b:a7:31:9c:fa:b4:32:d1:32:0f:59:0e:b8:
+         6e:f0:b5:ab:58:d2:95:67:9f:7b:5f:b2:16:23:ff:19:50:19:
+         c9:2d:96:64:71:75:db:2f:29:d4:27:b3:b4:27:ce:8d:08:bc:
+         6b:3f:40:92
+-----BEGIN CERTIFICATE-----
+MIIC/TCCAeUCAwCrzjANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQGEwJVUzELMAkG
+A1UECAwCVVMxCzAJBgNVBAcMAldDMRwwGgYDVQQKDBNEZWZhdWx0IENvbXBhbnkg
+THRkMB4XDTIwMDgxMTAzNTgyMloXDTMwMDgwOTAzNTgyMlowQjELMAkGA1UEBhMC
+VVMxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQxFTATBgNVBAcMDERlZmF1
+bHQgQ2l0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALxTEAzGpWKE
+mI3mayRxmhKrPndMRGvl7tQD0w4hqTJgnCdQX9naSB5PKKv6PAxYPGri6sz8zzTU
+Vmu3KQU6a0T9ZDFCEyWlTuu0Y0XeXz5ckc8IbkOUGhQZ5ssf8dQ8mJIUOqtAPqRn
+mREm8E/BgeO7czWk6xiqcyLG4aXJBZwnuRBEjNvHHvOrljdPnWCmnPQQ4ExMSTSq
+9McLVkhQNREMRAZxHNLEni8L0Qx/q2c41H3AbkmHldt3lUBegQiwVPhpPYn6YbyD
+dSvsRAjIXSr1+GdBOJEw8YcnGS6/wNBB2rEFz4sLBqWkQlCQHPlC37qgC9bAV7/G
+RAWc5acpMx8CAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAP47QF/X3mOsU0Qfu6rpd
+beNfag2b3/FtfjYqtBAAQlbKQfpY5BP1TE5YtL6y5Cp9yuN0LvH9SJi3rW3cgM9i
+r9XpBqbhciAX1cViVBn5ao+iJjTYWciIN1cX4nNt64N+mJ6d3+5GZCfskY08Hr2W
+OdLtZWbCjQ4tHK9Dq7QM/ETUfph3ZaZ0US5zDF02IsVrU1U8ye/u+D76AnHvUaNz
+++M99/flh5jFD0eokKhKdVY6V7ylPTDZjDRXZTOY65zpipU0mZ5YQ/QutcgrpzGc
++rQy0TIPWQ64bvC1q1jSlWefe1+yFiP/GVAZyS2WZHF12y8p1CeztCfOjQi8az9A
+kg==
+-----END CERTIFICATE-----