diff options
| author |   Guo Ruijing <ruijing.guo@intel.com> | 2017-05-10 15:05:30 -0700 |
|---|---|---|
| committer | Guo Ruijing <ruijing.guo@intel.com> | 2017-05-13 00:32:18 +0800 |
| commit | 5a14ee34314b6d500c63dc19523ee4748734c8c0 (patch) | |
| tree | 4f82b4514f9ab5517372916372a1227d31b9f61e /vagrant/setup_proxy.sh | |
| parent | 62e3159bb6e3f90e2ad53b8da39a7ea34c819b4f (diff) | |
setup onap demo by vagrant
Change-Id: I7d46f7f6081e7aed0cc2ea2506a47925171f9be2
Co-Authored-By: Chen, Wei <wei.d.chen@intel.com>
Signed-off-by: Guo Ruijing <ruijing.guo@intel.com>
Diffstat (limited to 'vagrant/setup_proxy.sh')
| -rwxr-xr-x | vagrant/setup_proxy.sh | 49 |
1 files changed, 49 insertions, 0 deletions
diff --git a/vagrant/setup_proxy.sh b/vagrant/setup_proxy.sh new file mode 100755 index 00000000..2161f295 --- /dev/null +++ b/vagrant/setup_proxy.sh @@ -0,0 +1,49 @@ +#!/bin/sh +set -ex + +SOCKS5_IP=${SOCKS5_IP:-127.0.0.1} +SOCKS5_PORT=${SOCKS5:-1080} +DNS_SERVER=${DNS_SERVER:-10.248.2.5} + +sudo apt-get install -y redsocks iptables + +cat <<EOF | sudo tee /etc/redsocks.conf +base { + log_debug = on; + log_info = on; + log = "file:/root/proxy.log"; + daemon = on; + redirector = iptables; +} + +redsocks { + local_ip = 0.0.0.0; + local_port = 6666; + ip = $SOCKS5_IP; + port = $SOCKS5_PORT; + type = socks5; +} +EOF + +echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward +sudo iptables -t filter -F +sudo iptables -t mangle -F +sudo iptables -t nat -F + +sudo iptables -t nat -N REDSOCKS || true +sudo iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN +sudo iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN +sudo iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 6666 +sudo iptables -t nat -A OUTPUT -p tcp -j REDSOCKS +sudo iptables -t nat -A PREROUTING -p tcp -j REDSOCKS +sudo iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j MASQUERADE +sudo iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT --to-destination $DNS_SERVER + +sudo service redsocks restart +wget --no-proxy www.sina.com.cn -O /dev/null |