How-to setup a proxy in the cloud

Transcription

1 This article describes the setup of a proxy-server in a cloud. You can use a proxy like this from everywhere through the internet. Reasons to do this could be: Your internet access is filtered but you need access to sites which are filtered. You want to have a log of all sites and files you ve visited from different browsers. You need to speed up your internet connection through caching. You want to filter the internet access of your kids. prerequisites: virtual machine with public ip in a cloud (e.g. Amazon EC2) contents: 1. Setup a virtual machine in Amazon s cloud 1 2. Connect to the virtual machine in the cloud 6 3. Install FreeProxy 9 4. Open tcp-ports in the cloud Change your browsers proxy-settings Install Techlogica http-server and change log-settings (optional) Change DNS-Servers in the virtual machine (optional) Change your proxy-authentication (highly recommended) Setup a virtual machine in Amazon s cloud a. Go to and Sign Up for Amazon EC2 b. Go to which is called AWS Management Console c. Launch a new instance by clicking on Launch Instances - 1 -

2 d. Choose Basic Microsoft Windows Server 2003 (32 bit) e. Click on Key Pair Name Create to create a Key Pair (you will need to generate Admin-Login) - 2 -

3 f. Give it a name and click on Create and Download your Key Pair g. Save the pem-file to your important documents and click Continue - 3 -

4 h. Choose 1 as a number of instances, your new Key Pair and click Launch i. Click on View your instances on the Instance page for viewing your new VM - 4 -

5 j. Check your new VM and click on More Actions >> Get Windows Password k. Follow the instructions and paste the content of your pem-file (open it with an editor) into the text-field and click Decrypt Password l. Note your password and click Close - 5 -

6 2. Connect to the virtual machine in the cloud a. Check your VM in the AWS Management Console and click Connect b. Click on Download shortcut file and open it (your RDP-Session should start immediately) - 6 -

7 c. Enter your Administrator-Password from Step 1l d. Now you should change the Administrator-Password to something you can remember ;-) Right-Click the MyComputer-Symbol in the Start-Menu and choose Manage - 7 -

8 e. Go to Local Users and Groups, Right-Click the Administrator and choose Set Password f. Click Proceed - 8 -

9 g. Enter the new password twice 3. Install FreeProxy a. Connect to your virtual machine through a RDP-Session (see point 2) b. Download FreeProxy from c. Open the zip-file and launch setup.exe d. Click Next on the Welcome-Screen - 9 -

10 e. Accept the license agreement and click Next f. Click Next for Default Location

11 g. Click Yes h. Click Next

12 i. Click Install j. Click Next

13 k. Click Finish l. Launch the FreeProxy Control Center

14 m. Click on Start/Stop n. Click on Start in Service-Mode Your proxy is running now Go on to the next step

15 4. Open tcp-ports in the cloud a. Go to the AWS Management Console and go to security groups b. Click on Create Security Group

16 c. Give it a name and description d. Check your new Security Group and choose the following values: i. Connection Method = Custom ii. Protocol = tcp iii. From Port = 8080 iv. To Port = 8080 v. Source (IP or group) = /0 e. Click Save under Actions

17 5. Change your browsers proxy-settings a. Go to the AWS Management Center and click on Instances to see your VM b. Check your VM and copy the Public DNS value

18 c. Go to your browsers proxy-settings (e.g. Firefox) d. Click on Network >> Connection >> settings

19 e. Click on Manual proxy configuration and fill the Public DNS of your VM in the http Proxy field Set the Port to 8080 and click OK Your Browser is now set to use your new proxy in the cloud

20 6. Install Techlogica http-server and change log-settings (optional) If you want to check the sites and files which were opened through your proxy, you have to change the log-settings oft he FreeProxy program and install a little http-server to make the logs easily accessible. Advanced users may use the http-service of Freeproxy (which is not described here) instead of the Techlogica http-server. a. Connect to your VM using a RDP-Session (see point 2) b. Open the FreeProxy Control Center and click on Options c. Set the options as they are set in the following screenshot For further details about the Format string press F1 ;-)

21 d. Download the Techlogica http-server: e. Launch the setup.exe and click I Agree f. Click Install g. Click Yes

22 h. Click Next i. Click Finish

23 j. Click on Local Server and change it to Internet Server and click Apply k. Click on Browse and navigate to the Folder where your logs are saved (in our example it is D:\proxylogs) and click OK + Apply

24 l. Now you have to open port 80 in the cloud Go to the AWS Management Console m. Click on Security Groups and check the security group you created in step 4c n. Choose the following values: i. Connection Method = HTTP o. Click Save under Actions Now you can access the connection-log through :)

25 7. Change DNS-Servers in the virtual machine (optional) Due to government filtering you may want to change the used DNS-Servers of your proxyserver. Therefor you might want to use the following DNS-Servers: Europe: United States: (dnscache.berlin.ccc.de) (n cnet.hosteurope.de) (resolver1.opendns.com) (resolver2.opendns.com) To change DNS-Servers to use in the VM do the following: a. Connect to your VM using a RDP-Session (see point 2.) b. Open the properties of the Network Connections

26 c. Mark Internet Protocol and click Properties d. Choose Use the following DNS Server addresses and fill in the DNS-Servers from the beginning of point 7. e. Click OK Now your Proxy-Server uses the new DNS-Server

27 8. Change your proxy-authentication (highly recommended) You may not want the bad guys to use your proxy-server for doing bad things Therefor you should activate authentication in your proxy-service: a. Connect to your VM using a RDP-Session (see point 2.) b. Open the FreeProxy Control Center c. Click on Users d. Click on Groups and click the button Add

28 e. Give it a name and description and click done f. Click on Users and click the button Add g. Give it a name, description and password

29 h. Click on your new group and click Add i. Choose your new user and click Done

30 j. Click Done k. Double-Click the Port

31 l. Check Use http Authentication, fill something in the Realm and click on Permissions m. Click Add Ressource

32 n. Change the settings like they are set on the following screenshot and click Done o. Click Done and go back to the FreeProxy Control Center p. Click on Start/Stop

33 q. Restart the Service Now your proxy-servers wants everybody to authenticate Test it!