glider/README.md

177 lines
6.0 KiB
Markdown
Raw Normal View History

# [glider](https://github.com/nadoo/glider)
2017-07-24 17:16:40 +08:00
glider is a forward proxy with multiple protocols support.
2017-07-13 21:55:41 +08:00
2017-07-24 17:16:40 +08:00
we can set up local listeners as proxy, and forward requests to internet via forwarders.
2017-07-23 01:57:05 +08:00
```
|Forwarder ----------------->|
Listener --> | | Internet
|Forwarder --> Forwarder->...|
2017-07-23 01:57:05 +08:00
```
2017-07-27 01:22:56 +08:00
## Features
2017-08-31 00:08:22 +08:00
Listen(local server):
2017-07-27 01:22:56 +08:00
- Socks5 proxy
- Http proxy
- SS proxy
- Linux transparent proxy(iptables redirect)
- TCP tunnel
2017-08-31 00:08:22 +08:00
- DNS forwarding server(udp2tcp)
- Listen on UDP and forward dns requests to remote dns server in TCP via forwarders
- Specify different upstream dns server based on destinations(in rule file)
- Tunnel mode: forward to a specified upstream dns server
- Add resolved IPs to proxy rules
- Add resolved IPs to ipset
2017-07-27 01:22:56 +08:00
Forward(upstream proxy):
- Socks5 proxy
- Http proxy
- SS proxy
General:
- Http and socks5 on the same port
2017-07-27 01:22:56 +08:00
- Forward chain
- HA or RR strategy for multiple forwarders
- Periodical proxy checking
2017-08-31 00:08:22 +08:00
- Rule proxy based on destinations: [Config Examples](config/examples)
- Ipset management
- Add ip/cidrs from rule files on startup
- Add resolved ips for domains from rule files by dns forwarding server
2017-07-30 10:57:24 +08:00
TODO:
2017-08-31 00:08:22 +08:00
- [ ] UDP Tunnel
- [ ] Linux tproxy support & UDP Relay
- [ ] TUN/TAP device support
- [ ] Code refactoring: support proxy registering so it can be pluggable
- [ ] Conditional compilation so we can abandon needless proxy type and get a smaller binary size
- [ ] IPv6 support
- [ ] SSH tunnel support
2017-07-27 01:22:56 +08:00
2017-07-13 21:55:41 +08:00
## Install
2017-07-21 18:58:51 +08:00
Binary:
- [https://github.com/nadoo/glider/releases](https://github.com/nadoo/glider/releases)
2017-07-13 21:55:41 +08:00
2017-08-23 23:04:03 +08:00
Go Get (requires Go 1.9 or newer):
2017-07-21 18:58:51 +08:00
```bash
go get -u github.com/nadoo/glider
```
ArchLinux:
```bash
sudo pacman -S glider
```
## Run
2017-07-29 18:15:22 +08:00
command line:
2017-07-21 18:58:51 +08:00
```bash
glider -listen :8443 -verbose
```
2017-07-29 18:15:22 +08:00
config file:
2017-07-21 18:58:51 +08:00
```bash
glider -config CONFIGPATH
```
2017-07-13 21:55:41 +08:00
2017-07-29 18:15:22 +08:00
command line with config file:
```bash
glider -config CONFIGPATH -listen :8080 -verbose
```
2017-07-13 21:55:41 +08:00
## Usage
```bash
glider v0.3.1 usage:
2017-07-18 19:25:54 +08:00
-checkduration int
proxy check duration(seconds) (default 30)
-checkwebsite string
proxy check HTTP(NOT HTTPS) website address, format: HOST[:PORT], default port: 80 (default "www.apple.com")
2017-07-18 19:25:54 +08:00
-config string
config file path
-forward value
2017-07-13 21:55:41 +08:00
forward url, format: SCHEMA://[USER|METHOD:PASSWORD@][HOST]:PORT[,SCHEMA://[USER|METHOD:PASSWORD@][HOST]:PORT]
2017-07-18 19:25:54 +08:00
-listen value
2017-07-13 21:55:41 +08:00
listen url, format: SCHEMA://[USER|METHOD:PASSWORD@][HOST]:PORT
-rulefile value
rule file path
2017-07-18 19:25:54 +08:00
-strategy string
2017-07-13 21:55:41 +08:00
forward strategy, default: rr (default "rr")
2017-07-18 19:25:54 +08:00
-verbose
verbose mode
2017-07-13 21:55:41 +08:00
Available Schemas:
mixed: serve as a http/socks5 proxy on the same port. (default)
ss: ss proxy
socks5: socks5 proxy
http: http proxy
redir: redirect proxy. (used on linux as a transparent proxy with iptables redirect rules)
tcptun: a simple tcp tunnel
dnstun: listen on udp port and forward all dns requests to remote dns server via forwarders(tcp)
Available schemas for different modes:
listen: mixed ss socks5 http redir tcptun dnstun
forward: ss socks5 http
Available methods for ss:
AEAD_AES_128_GCM AEAD_AES_192_GCM AEAD_AES_256_GCM AEAD_CHACHA20_POLY1305 AES-128-CFB AES-128-CTR AES-192-CFB AES-192-CTR AES-256-CFB AES-256-CTR CHACHA20-IETF XCHACHA20
NOTE: chacha20-ietf-poly1305 = AEAD_CHACHA20_POLY1305
2017-07-13 21:55:41 +08:00
Available forward strategies:
rr: Round Robin mode
ha: High Availability mode
2017-07-23 01:46:06 +08:00
Config file format(see `glider.conf.example` as an example):
# COMMENT LINE
KEY=VALUE
KEY=VALUE
# KEY equals to command line flag name: listen forward strategy...
2017-07-13 21:55:41 +08:00
Examples:
2017-07-18 19:25:54 +08:00
glider -config glider.conf
-run glider with specified config file.
glider -config glider.conf -rulefile office.rule -rulefile home.rule
-run glider with specified global config file and rule config files.
2017-07-18 19:25:54 +08:00
glider -listen :8443
2017-07-13 21:55:41 +08:00
-listen on :8443, serve as http/socks5 proxy on the same port.
2017-07-18 19:25:54 +08:00
glider -listen ss://AEAD_CHACHA20_POLY1305:pass@:8443
2017-07-29 18:15:22 +08:00
-listen on 0.0.0.0:8443 as a ss server.
2017-07-13 21:55:41 +08:00
2017-07-18 19:25:54 +08:00
glider -listen socks5://:1080 -verbose
2017-07-13 21:55:41 +08:00
-listen on :1080 as a socks5 proxy server, in verbose mode.
2017-07-18 19:25:54 +08:00
glider -listen http://:8080 -forward socks5://127.0.0.1:1080
2017-07-13 21:55:41 +08:00
-listen on :8080 as a http proxy server, forward all requests via socks5 server.
glider -listen redir://:1081 -forward ss://method:pass@1.1.1.1:8443
2017-07-13 21:55:41 +08:00
-listen on :1081 as a transparent redirect server, forward all requests via remote ss server.
glider -listen tcptun://:80=2.2.2.2:80 -forward ss://method:pass@1.1.1.1:8443
2017-07-13 21:55:41 +08:00
-listen on :80 and forward all requests to 2.2.2.2:80 via remote ss server.
glider -listen socks5://:1080 -listen http://:8080 -forward ss://method:pass@1.1.1.1:8443
2017-07-13 21:55:41 +08:00
-listen on :1080 as socks5 server, :8080 as http proxy server, forward all requests via remote ss server.
2017-07-18 19:25:54 +08:00
glider -listen redir://:1081 -listen dnstun://:53=8.8.8.8:53 -forward ss://method:pass@server1:port1,ss://method:pass@server2:port2
2017-07-13 21:55:41 +08:00
-listen on :1081 as transparent redirect server, :53 as dns server, use forward chain: server1 -> server2.
2017-07-18 19:25:54 +08:00
glider -listen socks5://:1080 -forward ss://method:pass@server1:port1 -forward ss://method:pass@server2:port2 -strategy rr
2017-07-13 21:55:41 +08:00
-listen on :1080 as socks5 server, forward requests via server1 and server2 in roundrbin mode.
```
2017-08-31 11:45:01 +08:00
## Advance Usage
- [config file & rule file](config)
- [glider.conf.example](config/glider.conf.example)
- [office.rule.example](config/rules.d/office.rule.example)
- [examples](config/examples)
2017-08-31 11:45:01 +08:00
- Transparent Proxy:
- [with dnsmasq](config/examples/8.transparent_proxy_with_dnsmasq)
- [without dnsmasq](config/examples/9.transparent_proxy_without_dnsmasq)
2017-07-13 21:55:41 +08:00
## Service
- systemd: [https://github.com/nadoo/glider/blob/master/systemd/](https://github.com/nadoo/glider/blob/master/systemd/)
2017-07-14 11:20:02 +08:00
2017-07-18 19:45:35 +08:00
## Links
2017-07-16 20:13:01 +08:00
- [go-ss2](https://github.com/shadowsocks/go-shadowsocks2): the core ss protocol support
2017-07-21 18:58:51 +08:00
- [conflag](https://github.com/nadoo/conflag): command line and config file parse support
2017-07-23 01:46:06 +08:00
- [ArchLinux](https://www.archlinux.org/packages/community/x86_64/glider): a great linux distribution with glider pre-built package