summaryrefslogtreecommitdiffstats
path: root/vagrant/setup_proxy.sh
diff options
context:
space:
mode:
authorMarco Platania <platania@research.att.com>2017-05-12 13:43:35 +0000
committerGerrit Code Review <gerrit@onap.org>2017-05-12 13:43:35 +0000
commit00929652c87ccd38b2d526bd2d382c31673928ab (patch)
treeb4023832790f0ec67f396a67edf00db468af2db7 /vagrant/setup_proxy.sh
parent1eedef71fae11bc1ceeb8e79543905d3a4905d41 (diff)
parent5a14ee34314b6d500c63dc19523ee4748734c8c0 (diff)
Merge "setup onap demo by vagrant"
Diffstat (limited to 'vagrant/setup_proxy.sh')
-rwxr-xr-xvagrant/setup_proxy.sh49
1 files changed, 49 insertions, 0 deletions
diff --git a/vagrant/setup_proxy.sh b/vagrant/setup_proxy.sh
new file mode 100755
index 00000000..2161f295
--- /dev/null
+++ b/vagrant/setup_proxy.sh
@@ -0,0 +1,49 @@
+#!/bin/sh
+set -ex
+
+SOCKS5_IP=${SOCKS5_IP:-127.0.0.1}
+SOCKS5_PORT=${SOCKS5:-1080}
+DNS_SERVER=${DNS_SERVER:-10.248.2.5}
+
+sudo apt-get install -y redsocks iptables
+
+cat <<EOF | sudo tee /etc/redsocks.conf
+base {
+ log_debug = on;
+ log_info = on;
+ log = "file:/root/proxy.log";
+ daemon = on;
+ redirector = iptables;
+}
+
+redsocks {
+ local_ip = 0.0.0.0;
+ local_port = 6666;
+ ip = $SOCKS5_IP;
+ port = $SOCKS5_PORT;
+ type = socks5;
+}
+EOF
+
+echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward
+sudo iptables -t filter -F
+sudo iptables -t mangle -F
+sudo iptables -t nat -F
+
+sudo iptables -t nat -N REDSOCKS || true
+sudo iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN
+sudo iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN
+sudo iptables -t nat -A REDSOCKS -p tcp -j REDIRECT --to-ports 6666
+sudo iptables -t nat -A OUTPUT -p tcp -j REDSOCKS
+sudo iptables -t nat -A PREROUTING -p tcp -j REDSOCKS
+sudo iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j MASQUERADE
+sudo iptables -t nat -A PREROUTING -p udp --dport 53 -j DNAT --to-destination $DNS_SERVER
+
+sudo service redsocks restart
+wget --no-proxy www.sina.com.cn -O /dev/null