Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Raspberry Pi as a decent residential proxy

wiringbits.net

Post reply on HN
Print view View original

11–20 of 47 posts

Re: A Raspberry Pi as a decent residential proxy

#13

Post by Snawoot »

AlexITC wrote: post #12
Snawoot wrote: post #11

> Surprisingly, 256 MB in RAM have been enough to maintain the app running for months until now. What is total RSS of all your proxy processes?

What's RSS?

Resident Set Size, a value reported by programs like top/htop with amount of physical RAM used by process.

Re: A Raspberry Pi as a decent residential proxy

#14

Post by oefrha »

tzs wrote: post #2

> Don’t expose the proxy to the world or attackers will be able to interact with your home devices Or use it to get stuff on the internet that they don't want to get directly themselves. Once upon a time I accidentally enabled open proxying on the web server on my Linux box. This was before smart phones and tablets and such, when my Linux box was the only network client I had, and so I didn't have a NAT router. Just…

I once accidentally left privoxy open on one of my Linux servers and misconfigured ACL. A couple hours later it started getting hit with loads of traffic. A Google search quickly revealed that my ip:port ended up on several “free proxy” lists. They probably found it on Shodan or something. I quickly fixed acl to drop the traffic, but IIRC my server persisted on the free proxy lists for a couple days afterwards.

That was the first hand experience that confirmed my suspicions of what those “free proxies” really are.

Re: A Raspberry Pi as a decent residential proxy

#15

Post by AlexITC »

oefrha wrote: post #14
tzs wrote: post #2

> Don’t expose the proxy to the world or attackers will be able to interact with your home devices Or use it to get stuff on the internet that they don't want to get directly themselves. Once upon a time I accidentally enabled open proxying on the web server on my Linux box. This was before smart phones and tablets and such, when my Linux box was the only network client I had, and so I didn't have a NAT router. Just…

I once accidentally left privoxy open on one of my Linux servers and misconfigured ACL. A couple hours later it started getting hit with loads of traffic. A Google search quickly revealed that my ip:port ended up on several “free proxy” lists. They probably found it on Shodan or something. I quickly fixed acl to drop the traffic, but IIRC my server persisted on the free proxy lists for a couple days afterwards. That…

Actually, you are giving one advantage to the custom-made proxy, it's not easily discoverable by bots, nor it could be used right away.

Re: A Raspberry Pi as a decent residential proxy

#16

Post by AlexITC »

Snawoot wrote: post #11

> Surprisingly, 256 MB in RAM have been enough to maintain the app running for months until now. What is total RSS of all your proxy processes?

    $ free -h
                  total        used        free      shared  buff/cache   available
    Mem:          432Mi       194Mi        26Mi        20Mi       211Mi       164Mi
    Swap:          99Mi       2.0Mi        97Mi



    $ top
    Tasks:  69 total,   1 running,  68 sleeping,   0 stopped,   0 zombie
    %Cpu(s):  7.3 us,  4.3 sy,  0.0 ni, 88.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
    MiB Mem :    432.4 total,     26.2 free,    194.7 used,    211.5 buff/cache
    MiB Swap:    100.0 total,     98.0 free,      2.0 used.    164.7 avail Mem

      PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND
     2915 pi        20   0  299.9m 173.8m  13.6m S   1.6  40.2 447:45.82 java
    32009 pi        20   0    7.5m   2.6m   2.2m R   1.0   0.6   0:00.31 top
    31991 pi        20   0   11.9m   3.8m   3.0m S   0.3   0.9   0:00.10 sshd

Re: A Raspberry Pi as a decent residential proxy

#17

Post by AlexITC »

tzs wrote: post #2

> Don’t expose the proxy to the world or attackers will be able to interact with your home devices Or use it to get stuff on the internet that they don't want to get directly themselves. Once upon a time I accidentally enabled open proxying on the web server on my Linux box. This was before smart phones and tablets and such, when my Linux box was the only network client I had, and so I didn't have a NAT router. Just…

Adding on this, I just checked the logs and looks like some persons started playing:

    Calling: https://nsa.gov, headers = BOMBTHEMOSQUE -> 911
    Calling: https://fbi.net
    Calling: file:///bin/sh
    Calling: file:///etc/passwd
    Calling: http://127.0.0.1:80

Re: A Raspberry Pi as a decent residential proxy

#18

Post by Snawoot »

AlexITC wrote: post #16
Snawoot wrote: post #11

> Surprisingly, 256 MB in RAM have been enough to maintain the app running for months until now. What is total RSS of all your proxy processes?

$ free -h total used free shared buff/cache available Mem: 432Mi 194Mi 26Mi 20Mi 211Mi 164Mi Swap: 99Mi 2.0Mi 97Mi $ top Tasks: 69 total, 1 running, 68 sleeping, 0 stopped, 0 zombie %Cpu(s): 7.3 us, 4.3 sy, 0.0 ni, 88.4 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 432.4 total, 26.2 free, 194.7 used, 211.5 buff/cache MiB Swap: 100.0 total, 98.0 free, 2.0 used. 164.7 avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TI…

Thank you!
Post reply on HN