Install the Socks5 agent
The socks5 agent software used for overseas agency selection is a software developed by NEC. It is actually a commercial version of software. However, according to its license file, it is free to use the software for non-commercial purposes. The RFC-1928 gives a detailed description of how socks5 runs. This standard was developed by NEC's "Ying-Da Lee" and HP and IBM. In the test, the performance of the socket 5 agent software of NEC is good. Although it has some security vulnerabilities, the installation using freebsd ports will automatically patch the source code to fix security risks.
Run make; make install on/usr/ports/net/socks5 to install the program. The corresponding files will be installed in the following directories:
The socks5 executable file is stored in/usr/local/bin.
The socks5.conf file is stored under/usr/local/etc.
Bugtraq once mentioned that the password verification section of socks5 has security risks, so this function is not used.
Socks5 proxy configuration
The configuration file of the Socks5 proxy is socks5.conf. The content is as follows:
set SOCKS5_MAXCHILD 8000permit - - 192.168. - (1024,65535) -permit - - 202.112.64.0/255.255.240.0 - (1024,65535) -permit - - 211.71.80.0/255.255.240.0 - (1024,65535) ?C |
You can use the socks5 proxy to restrict the target port from 1024 to 65535. You can set up to 8000 processes to run.
Configuration File Switching
To avoid bandwidth waste, the overseas proxy is set to cancel the maximum object download limit at night. This is done using crontab. Switch the configuration file to no maximum download object limit at every night. Switch back to the maximum download object limit at every day.
Iv. Usage Analysis
Traffic per unit time
input (total) outputpackets errs bytes packets errs bytes colls917 0 646248 1015 0 767928 0941 0 667858 1287 0 1548180 0832 0 673330 897 0 836839 0895 0 655289 1067 0 878449 0 |
* The data above is the data when the overseas proxy load is moderate.
The Chinanet exit is full. After the cache function, the output data is larger than the incoming data.
CPU load
Use the top command to view the CPU load: load averages: 0.72, 0.86, 0.861mi, 5 min, 15 min). This data is the data when the overseas proxy load is moderate.
Hourly usage[img:01091db545]http://www.frontfree.net/articles/pages /0000000597/hourlyusage.gif[/img:01091db545] |
This figure clearly shows the use of overseas agents.
When the first six hours, the dormitory was powered on. The usage frequency of overseas agents increases several times.
As early as 8 hours ago, data centers and laboratories began to be open, and the Use Frequency of overseas agents increased in the near future.
At eleven o'clock A.M., the course ended. Some students left the machine room and lab, and their lunch time usage decreased slightly.
At noon, the afternoon course starts and students leave the dormitory, reducing the usage frequency.
At fifteen o'clock P.M., the number of data center and lab users increased.
At seventeen o'clock P.M., some data centers and laboratories were closed, and teachers left the school, reducing the usage frequency.
When students go to self-study or electives at 18-20, the usage frequency decreases.
When the elective course ends at-22, students return to the dormitory, and their usage frequency increases sharply, reaching the highest point every day.
Some dormitories are powered off and the lab is powered off at 23 o'clock. The usage frequency is further reduced.
When-5, most of the dormitory students have rested, and the frequency of use decreases.
Daily usage [img:01091db545]http://www.frontfree.net/articles /pages/0000000597/dailyusage.gif[/img:01091db545] |
We can see the daily usage of the Chinanet line proxy server in our school. The daily access log of the overseas proxy is about 600 mb. The figure shows that the weekend traffic, especially on Sunday, is huge. This is because the dormitory of our school is continuously powered over the weekend, and the time for students to use the network is greatly increased. This is called the "weekend effect ".