[5 Mins Docker] Online Web Proxy Projects to Hide Your IP or Reverse Proxy to Access Other Websites

In this blog post, I am introducing two online web proxy projects which you can create by yourself using docker or Cloudflare workers.

Table of Contents

Hideipnetwork

hideipnetwork-web GitHub：https://github.com/Hideipnetwork/hideipnetwork-web

hideipnetwork-web website：https://official.hideip.network/

Docker-hub : https://hub.docker.com/r/jesmora/hnet-server

Demo ：https://hideip.network, https://hide.51sec.eu.org/

HideIPNetwork Docker Deployment

HideIPNetwork = HNet, is an open source web proxy.

1 # download the installation script

git clone https://github.com/Hideipnetwork/hideipnetwork-web.git

or directly create docker-compose file as show in step 3:

2 # Enter downloaded folder

cd hideipnetwork-web

3 # Install && initialization

vi docker-compose.yml

version: '3.3'

services:
  app:
    image: jesmora/hnet-server:latest
    ports:
      - "8010:56559"
    environment:
      HOST: 0.0.0.0
      SECRET: "hnet-secret"
      HNET_USER: "hnet-admin"
      HNET_PWD: "hnet-passwd"
      REDIRECT_HOST: "www.google.com"
      MONGDB_CONNECTION: null #如果不需要數據庫請為null
      MODO: "normal"
      SOCKS5: "username:[email protected]:1080"

docekr compose up -d

4 Test

Docker-compose.yaml content:

root@instance-20240630-135832:~/hideipnetwork-web# cat docker-compose.yaml
version: ‘3.3’
services:
app:
image: jesmora/hnet-server:v1.0.4
ports:
– “56559:56559”
environment:
HOST: 0.0.0.0
SECRET: “hnet-secret”
HNET_USER: “hnet-admin”
HNET_PWD: “hnet-passwd”
REDIRECT_HOST: “www.google.com”
MONGDB_CONNECTION: null #如果不需要數據庫請為null
MODO: “normal”
SOCKS5: “username:[email protected]:1080”
root@instance-20240630-135832:~/hideipnetwork-web#

There is not much configuration you can make, other than blacklist. Setting page is under development.

From the build-in search page, you can see the public ip is this VM’s ip, which means it is proxying your request to the destination sites.

Demo site: https://hide.51sec.eu.org/

Siteproxy

Siteproxy 2.0 uses a service worker to make the proxy more stable, enabling it to support a wider range of websites. It replaces Express with Hono, which increases the speed by four times. It supports deployment on Cloudflare Workers. This reverse proxy allows for the access to YouTube/Google without the need for a VPN, and supports login for GitHub and Telegram web (please be cautious not to log in through untrusted proxies). It’s a purely web-based online proxy that requires no configuration on the client’s side, acting as a reverse proxy to the internet. It supports duckduckgo AI Chat(can access gpt3.5 and claude3 for free).

Github:

https://github.com/netptop/siteproxy/

Screenshot:

Siteproxy deployment on Cloudflare

Deploying to Cloudflare Worker

Assume your domain is already managed under Cloudflare (in case you want to use your domain name)
Download the link and use a text editor to open it. (https://github.com/netptop/siteproxy/blob/master/build/worker.js)
Search for the string http://localhost:5006 and replace it with your proxy server’s domain, such as https ://your-proxy-domain.name. Must be https please. Also, search for user22334455 and change it to a password of your choosing, empty password means no password is needed.
Create a worker and edit it by copying and pasting the modified worker.js into the worker, then save and deploy.
If you use cloudflare worker domain, skip this step, If you want to use your own domain name, on the Workers & Pages page, open the worker you just saved, click ‘Settings’->’Triggers’ at the top, then ‘Add custom domain’, setting it to your proxy domain.
Now you can directly access https://your-proxy-domain.name/user-your-password/, don’t miss the last ‘/’ please. And please replace the domain and password with your own.

Demo:

https://your-worker-domain.com/your-password/
https://proxy.51sec.eu.org/NNNSSS
https://siteproxy.itprosec.eu.org/51sec

worker.js

Deploying to Cloudflare Pages

Assume your domain is already managed under Cloudflare.
Run git clone https://github.com/netptop/siteproxy.git.
Open siteproxy/build/cf_page/_worker.js with a text editor. Search for the string http://localhost:5006 and replace it with your proxy server’s domain, such as https://your-proxy-domain.name. Make sure to switch it to HTTPS.
Also, search for user22334455 and change it to the password you want to set. If left empty, it will allow access without a password. Save the changes.
Log in to Cloudflare. In the “Workers & Pages” section, use the “Direct Upload” feature to create a new page by uploading the siteproxy/build/cf_page directory.
In the Workers & Pages interface, open the page you just deployed, click on ‘Custom Domains’ at the top, and then ‘Add Custom Domain’. Set it to your proxy domain. Activate the domain.
Now you can directly access https://your-proxy-domain.name/user-your-password/. The trailing slash is required. Make sure to replace the domain and password with your own.

Siteproxy deployment Using Docker

Configure SSL Certificate and Nginx:
- Configure the SSL certificate and Nginx for the domain, directing it to the local port 5006.
Clone Repository:
- Execute the command: git clone https://github.com/netptop/siteproxy.git

Edit Configuration File:

Open and modify the config.json file as follows:

{
   "proxy_url": "https://your-proxy-domain.com", // Replace with your obtained proxy server domain
   "token_prefix": "/user-SetYourPasswordHere/",  // Set the website password to prevent unauthorized access, keep the slashes
   "description": "Note: token_prefix is equivalent to a website password, please set it carefully. The combination of proxy_url and token_prefix is the access URL."
}

Save the file.

Start Docker Container:
- Enter the docker-node subdirectory.
- Execute the command: sudo docker compose up
Access Proxy Service:
- Now you can access the proxy service via https://your-proxy-domain.com/user-your-password/. Please replace the domain and password with your own.

Self Hosted Docker Installation Pre-requirements

Free resources you might need to complete this docker project:

Server: Oracle Free VPS, Azure Free VPS, Google Cloud Free VPS, and others

System: Cloud Vendor Ubuntu, Debian, or DD an original version

SWAP size increase: wget https://raw.githubusercontent.com/51sec/swap/main/swap.sh && bash swap.sh
Enable Password ssh login
Enable BBR

systemctl restart docker

Domain: (Optional) EU.ORG to get a free one, free Cloudflare account to manage your domain
Confirm port has not been used (you might need to install lsof using command : apt install lsof):

lsof -i:8088

Pre-installed services:

Docker,

apt update
apt install docker.io
apt install docker-compose
apt upgrade docker.io
mkdir /root/data/docker_data/<docker_name>

Docker-Compose (Using Ubuntu OS for the commands)

Docker-compose down
Optional command : use following command to backup your Docker data. You might need to change your folder name based on your docker configuraiton

cp -r /root/data/docker_data/<docker_name> /root/data/docker_data_backup/<docker_name>

docker-compose pull
docker-compose up -d
docker image prune

Portainer (Optional)

docker volume create portainer_data
docker run -d -p 9000:9000 –name portainer –restart always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce:latest

Install some applications: apt install wget curl sudo vim git (Optional)
aapanel with Nginx (Optional)
Nginx Proxy Manager (Optional)
Install screen (Optional)

Install screen (Depends on the Linux Distribution if it came pre installed or not) : yum install screen
Initiate a Screen : screen or screen -S <screen name> <command to execute>
Detach from the screen : “CTRL+A,D” not “CTRL+A+D”
List all the screen currently working : screen -ls
Reattach to a screen : screen -r <session number> or screen -r <screen name>
Kill specific screen: screen -X -S <screen name> quit
Kill all screens : pkill screen

Monitoring Usage

Docker stats
ncdu

apt install ncdu

Remove Docker and Related folders

docker stop <Docker Name> # stop the docker but not remove anything.
docker rm -f <Docker Name> # remove speficic container, but will not delete mapped volumes
rm -rf /root/data/docker_data/<Docker Mapped Volumns> # remove all mapped volumes

Restrick Journal Log File Size:

journalctl –vacuum-size=100M
Limit it to 25M:

nano /etc/systemd/journald.conf
SystemMaxUse=25M
systemctl restart systemd-journald.service

sudo bash -c 'echo "SystemMaxUse=100M" >> /etc/systemd/journald.conf'
sudo systemctl restart systemd-journald

Enable IPv6 and Limit Log File Size (Ubuntu)

Special command to cleans all logs and you don’t need to stop the containers.

sudo sh -c 'truncate -s 0 /var/lib/docker/containers/*/*-json.log'

Add customized self defined IPv6 address segment to enable container’s IPv6 fucntion. And limit log file’s size and numbers in case log file to fill all hard drive’s space.

cat > /etc/docker/daemon.json << EOF
{
    "log-driver": "json-file",
    "log-opts": {
        "max-size": "20m",
        "max-file": "3"
    },
    "ipv6": true,
    "fixed-cidr-v6": "fd00:dead:beef:c0::/80",
    "eixperimental":true,
    "ip6tables":true
}
EOF

If there is any error, or IPv6 part might not work in the platform you might want to change it to list:

cat <<EOF > /etc/docker/daemon.json
{
  "live-restore": true,
  "storage-driver": "overlay2",
  "log-opts": {
    "max-size": "10m"
  }
}
EOF

Restart Docker service:

systemctl restart docker

Limit number of log files:

cat /etc/logrotate.d/rsyslog

/var/log/syslog
/var/log/mail.info
/var/log/mail.warn
/var/log/mail.err
/var/log/mail.log
/var/log/daemon.log
/var/log/kern.log
/var/log/auth.log
/var/log/user.log
/var/log/lpr.log
/var/log/cron.log
/var/log/debug
/var/log/messages
{
    rotate 4
    weekly
    missingok
    notifempty
    compress
    delaycompress
    sharedscripts
    postrotate
        /usr/lib/rsyslog/rsyslog-rotate
    endscript
}

You can change 4 to some other value, such as 1, so that only one file is stored.

Videos

References

https://a8dog.com/zai-xian-WEB-dai-li-yi-jiu-wen-ding-fu-shang-zui-xin-da-jian-jiao-cheng
https://a8dog.com/gVXy5GGSCmd

[5 Mins Docker] Online Web Proxy Projects to Hide Your IP or Reverse Proxy to Access Other Websites

Bynetsec

Hideipnetwork

HideIPNetwork Docker Deployment

Siteproxy

Siteproxy deployment on Cloudflare

Deploying to Cloudflare Worker

worker.js

Deploying to Cloudflare Pages

Siteproxy deployment Using Docker

Self Hosted Docker Installation Pre-requirements

Free resources you might need to complete this docker project:

Pre-installed services:

Monitoring Usage

Remove Docker and Related folders

Restrick Journal Log File Size:

Enable IPv6 and Limit Log File Size (Ubuntu)

Videos

References

Like this:

Related

By netsec

Related Post

[5 Mins Docker] Deploy Your Own Online Toolbox – IT-Tools

[5 Mins Docker] Deploy a free, simple and safe honeypot with Own Domain – HFISH

[5 Mins Docker] Create Your Own Looking-Glass Website Deploying on Northflank Free Tier

Leave a ReplyCancel reply

You missed

Tenable Web Application Cerdential Scans For Web Appications and APIs

Steps to Update/Renew Your CyberArk Infrastrucure Certificates (PSM)

Tenable Lab Steps and Notes – Part 1 (Discovery, NNM, Assessment, Plugins, Compliance, VPR, Analysis)

Tenable Lab Steps and Notes – Part 2 (Dashboards, Reports, Core, Nessus, NNM, Agent, Scanner Groups)

Bynetsec

Hideipnetwork

HideIPNetwork Docker Deployment

Siteproxy

Siteproxy deployment on Cloudflare

Deploying to Cloudflare Worker

worker.js

Deploying to Cloudflare Pages

Siteproxy deployment Using Docker

Self Hosted Docker Installation Pre-requirements

Free resources you might need to complete this docker project:

Pre-installed services:

Monitoring Usage

Remove Docker and Related folders

Restrick Journal Log File Size:

Enable IPv6 and Limit Log File Size (Ubuntu)

Videos

References

Share this:

Like this:

Related

By netsec

Related Post

Leave a ReplyCancel reply

You missed