企业级代理架构实践指南：从浏览器到远程隧道的优雅方案

# 方案A: Chrome Web Store (推荐)
# 搜索 "Proxy SwitchyOmega 3 (ZeroOmega)"

# 方案B: 离线安装
# GitHub Release: https://github.com/zero-peak/ZeroOmega/releases

# 推荐配置结构
Proxy_Profiles:
  - name: "Production"
    protocol: HTTP
    host: 127.0.0.1
    port: 7890
  
  - name: "Development"  
    protocol: SOCKS5
    host: 127.0.0.1
    port: 7891

// 基于域名的智能路由
{
  "RuleSet": [
    {
      "condition": "DomainSuffix",
      "pattern": "google.com",
      "profile": "Proxy",
      "comment": "国际服务走代理"
    },
    {
      "condition": "DomainSuffix", 
      "pattern": "taobao.com",
      "profile": "Direct",
      "comment": "国内电商直连"
    },
    {
      "condition": "DomainKeyword",
      "pattern": "localhost",
      "profile": "Direct",
      "comment": "本地开发环境"
    }
  ]
}

# 标准部署命令
ssh -D 1080 -N -f user@your-server.com

# 参数解析:
# -D 1080    创建本地SOCKS5代理监听端口
# -N         禁用远程命令执行(安全加固)
# -f         后台守护进程模式

# 1. 密钥对生成(推荐Ed25519算法)
ssh-keygen -t ed25519 -C "proxy@your-domain"

# 2. 公钥部署
ssh-copy-id -i ~/.ssh/id_ed25519.pub user@your-server.com

# 3. 连接测试
ssh -o BatchMode=yes user@your-server.com exit && echo "Auth Success"

# 4. 生产环境部署
ssh -D 1080 -N -f \
    -o ServerAliveInterval=60 \
    -o ServerAliveCountMax=3 \
    -o ExitOnForwardFailure=yes \
    user@your-server.com

# 方案A: 传统进程管理
ps aux | grep "ssh -D" | grep -v grep

# 方案B: 端口监听检测
lsof -i :1080 -P -n | grep LISTEN

# 方案C: 系统级服务(推荐)
# 创建 systemd 服务实现自动重启

# 代理功能测试
curl --socks5 127.0.0.1:1080 \
     --connect-timeout 5 \
     https://api.ipify.org

# 期望输出: 服务器公网IP

# 完整性测试
curl --socks5 127.0.0.1:1080 \
     -I https://www.google.com 2>&1 | head -1
# 期望输出: HTTP/2 200

# 精准停止
pkill -f "ssh -D 1080"

# 或基于PID
kill $(lsof -ti :1080)

# ~/.zshrc 或 ~/.bashrc

# 代理管理套件
alias proxy-on='ssh -D 1080 -N -f user@your-server.com'
alias proxy-off='pkill -f "ssh -D 1080"'
alias proxy-status='lsof -i :1080 -P -n'
alias proxy-test='curl --socks5 127.0.0.1:1080 https://api.ipify.org'

# 重载配置
source ~/.zshrc

#!/bin/bash
# proxy-manager.sh - 代理生命周期管理

PROXY_PORT=1080
SERVER="user@your-server.com"

start_proxy() {
    if lsof -i :$PROXY_PORT >/dev/null 2>&1; then
        echo "⚠️  Proxy already running on port $PROXY_PORT"
        return 1
    fi
    
    ssh -D $PROXY_PORT -N -f \
        -o ServerAliveInterval=60 \
        -o ExitOnForwardFailure=yes \
        $SERVER
    
    sleep 2
    if lsof -i :$PROXY_PORT >/dev/null 2>&1; then
        echo "✅ Proxy started successfully"
        proxy-test
    else
        echo "❌ Failed to start proxy"
        return 1
    fi
}

stop_proxy() {
    pkill -f "ssh -D $PROXY_PORT"
    echo "🛑 Proxy stopped"
}

case "${1:-status}" in
    start)   start_proxy ;;
    stop)    stop_proxy ;;
    status)  lsof -i :$PROXY_PORT -P -n ;;
    restart) stop_proxy; sleep 1; start_proxy ;;
    *)       echo "Usage: $0 {start|stop|status|restart}" ;;
esac

生产环境架构:
┌─────────────────────────────────────┐
│  Browser → ZeroOmega (Rule Engine)  │
│              ↓                       │
│    Proxy ← SSH Tunnel → Remote      │
│              ↓                       │
│         Target Services             │
└─────────────────────────────────────┘