Intranet penetration lanproxy deployment

The environment used this time is centos 7.9
Both windows and Linux environments support the installation of both the server and the client.jdk
It is best to download the server and client as a set
Server: proxy-server
Client: proxy-client

1. Server deployment
1. In the server server, under the root directory, create a proxy directory
Instruction: mkdir /root/proxy
Verification means: ls /root Check whether the displayed content isContains proxy directory

2. Upload all files in the "server" directly to the /root/proxy directory
3. Start the intranet penetration service
Command: chmod +x /root/proxy/bin/startup.sh
Command: /root/proxy/bin/startup.sh
Verification method: ps -ef |grep lanproxy to see if there is any feedback

4. Set the service to start automatically at boot
Command: echo /root/proxy/bin/startup.sh >> /etc/rc.local
Verification method: cat /etc/rc.local to check whether it contains/root/proxy/bin/startup.sh

5. Web page login verification http://server IP: 8090 (I have to use the virtual machine for the experimental environment)
Username: admin Password: admin #Available in the configuration file /root/proxy/conf/config.Modify in properties

server.bind=0.0.0.0server.port=4900server.ssl.enable=trueserver.ssl.bind=0.0.0.0server.ssl.port=4993server.ssl.jksPath=testca.jksserver.ssl.keyStorePassword=testserver.ssl.keyManagerPassword=testserver.ssl.needsClientAuth=falseconfig.server.bind=0.0.0.0config.server.port=8090config.admin.username=adminconfig.admin.password=admin

6. Port opening
Cloud host release: 4900, 4993, 8090, 10000-11000 port segment

Second, client deployment
1. In the client, under the root directory, create a proxy directory
Instruction: mkdir /root/proxy
Verification method: ls /root Check whether the displayed content containsproxy directory

2. Upload all files in the "client" directly to the /root/proxy directory
3. Create a client
Log in to the server web management interface and create a client


Copy client key

Log in to the client command line interface and modify the configuration file:
Modify the /root/proxy/conf/config.properties file as follows

ssl.enable=truessl.jksPath=testca.jksssl.keyStorePassword=testserver.host=192.168.163.100 #Here write the actual application scenario serverget IP#default ssl port is 4993server.port=4993client.key=a97d7d802a04430e886ccc7187d2f0c3 #client key

4. Start the intranet penetration client
Command: chmod +x /root/proxy/bin/startup.sh
Command: /root/proxy/bin/startup.sh
Verification means: ps -ef |grep lanproxy to see if there is any feedback

5. Set the service to start automatically at boot
Command: echo /root/proxy/bin/startup.sh >> /etc/rc.local
Verification means: cat /etc/rc.local to see if it contains/root/proxy/bin/startup.sh

6. Log in to the web management interface of the server and check the online status of the client.

Do client port mapping

"Proxy name": Named after the port name that needs to be mapped, here is port 22
"Public network port": Port between 10000-11000, generally a single client is assigned 10 consecutive port numbers, the firstClient port range 10000-10009, and so on
"backend IP port": 127.0.0.1:22 (22 here is consistent with "proxy name")

Multiple ports can be added, for example:

p>