letheanVPN / lthn-app-vpn

Client/Server dVPN
https://www.lt.hn
European Union Public License 1.2
36 stars 16 forks source link

chained proxy #95

Open mahdi-ln opened 5 years ago

mahdi-ln commented 5 years ago

It consider / as a part of Provider id

$ python3 lthnvpnc.py connect 579234f94d61626b3af456bdad83ee17bfbd9e4d8ee433633d753a50df41e066/1A//localhost:6544
/home/m/.local/lib/python3.6/site-packages/requests/__init__.py:91: RequestsDependencyWarning: urllib3 (1.25.2) or chardet (3.0.4) doesn't match a supported version!
  RequestsDependencyWarning)
INFO:audit:action=START,type=SERVICE,obj=lthnvpnc,
ERROR:lthnvpnc:Provider id 579234F94D61626B3AF456BDAD83EE17BFBD9E4D8EE433633D753A50DF41E066/1A/ does not exists!
pallas1 commented 5 years ago

Ok, but why are you using two slashes?

mahdi-ln commented 5 years ago

This says so: https://github.com/LetheanMovement/lethean-vpn/blob/master/CLIENT.md#more-complex-uri-provider-chaining

mahdi-ln commented 5 years ago

My problem solved using other method

limosek commented 5 years ago

Sorry, advanced chaining is not supported yet. We need to update documentation. If you want to use chaining, please refer to https://github.com/LetheanMovement/lethean-vpn/blob/master/CLIENT.md#chaining

lthnvpnc --fork-on-connect connect provider1/serviceid1 --proxy-port 7777 && \ lthnvpnc connect provider2/serviceid2 --https-proxy-host 127.0.0.1 --https-proxy-port 7777

ronnylov commented 5 years ago

For chaining to work, the port used for the second proxy server must be open in squid.conf on the first proxy? I don't use port 8080 on most of my exit nodes but only have port 80, 443 and 8080 open in squid.conf (actually in tinyproxy which I use but anyway). I have not tested chaining yet.

limosek commented 5 years ago

This is client part. It has nothing to do with your squid.conf. First command will connect to remote node and force listenning port for incomming proxy requests to port 7777. Second command will use local proxy port as outbound proxy, connect to second provider and force listening for proxy requests on port 7777.

Now, if you use 127.0.0.1:8186 (default proxy port of second dispatcher), you will be routed thru chained mode.

ronnylov commented 5 years ago

Interesting. Then port 7777 must be open on exit node firewalls? We need to document which ports must be opened. Hmmm, ports are stored in sdp so 7777 is only internally tunneled port?