Table of Contents

1. Proxysmart manual [v2].

1.1. The goal of the software.

The software allows running your own 4g proxy farm. It runs on a Linux box (PC) with USB hub and the modems.

Functions:

1.2. Architecture

Online services are used:

1.3. Configuration.

Variables are set in the WebApp→Global_settings and in /etc/proxysmart/conf.txt.

Each variable has brief description in place.

1.4. Mongodb integration

Mongodb Schema

Mongodb contains 2 collections: modems and ports.

It contains real modems, array of associative arrays, take allowed fields in store_modem API call.

It contains proxy ports given to the users. Each port is connected to a modem by the IMEI key. So you can attach 1 or more ports to a modem. It is array of associative arrays, take allowed fields in store_port API call.

MongoDB Configuration

MongoDB URI is defined in /etc/proxysmart/conf.txt :

If you want to use other Mongodb collection names instead of modems and ports , define them in /etc/proxysmart/conf.txt :

after changes:

Moving Mongodb to other server

Sometimes you want to move Mongodb to a cloud server.

2. Installation

2.1. Initial installation

Supported OS and Architectures:

Armhf (arm 32 bit) doesn’t have Mongodb support!

Install a fresh OS.

Unplug any USB modems. 

curl https://proxysmart.org/install-v2 | bash

Reboot or run proxysmart.sh reset_complete.

After that either enjoy the Demo version at http://localhost:8080 or check License section.

**Rockpi Notes**

2.2. Adding modems

2.3. Forwarding proxies ports

Why? In order to make proxy ports available for all users around the world.

Basic info on forwarding ports

You have 2 methods of forwarding ports :

Which to choose?

If these conditions are met:

.. then choose port forwarding through your LAN router. Otherwise, choose port forwarding through a VPS.

2.4. Forwarding proxies ports through a VPS.

The VPS server can be a cheap 1GB DigitalOcean / Linode / Vultr VPS or similar.

It has to be located as close as possible to the 4g farm server ( for lowest ping ).

On Proxysmart multi modem server

Go to the WebApp , copy content of the SSH public key from the bottom of the page. We will refer to it as PUBKEY below.

Also it is stored on disk as /root/.ssh/fwd.pub

On VPS

Check if your VPS has no firewall. Disable it if it has – Both inside Linux OS and in hoster panel.

Install & run Ansible. 

apt update && apt install git ansible -y
cd ~/
git clone https://github.com/ezbik/proxysmart-vps.git
cd proxysmart-vps

If running Proxysmart v2.3+ : 

git checkout v2.3

edit the file vars.txt 

nano vars.txt

Replace PUBKEY with the PUBKEY . Save the file by pressing Control O and exit the editor by pressing Control x .

Run Ansible: 

ansible-playbook proxysmart-vps.yml

done.

On Proxysmart multi modem server

in WebApp→Global_Settings:

Run proxysmart.sh reset_complete

On VPS

issue the command ss -tnlp and you will see proxy ports are bound with sshd daemon. That means the ports are forwarded.

On your private desktop or any other PC

So VPN client certificates will be generated with these values and VPN clients will connect there ( 3.3.3.3:1501 )

Go to the WebApp main screen and download OpenVPN profiles for each port.

Cloud VPS IP change

If Cloud VPS IP is changed, update it on multi-modem-server side by defining new VPS variable in WebApp→Global_settings and rerun proxysmart.sh reset_complete there (or reboot).

2.5. Forwarding ports through your own LAN router.

Steps

Consult with documentation of your LAN router. Forward these ports from ISP IP address to the LAN IP of proxysmart server:

Notes

Replace myrouter.com with your actual external Hostname or external IP addresss.

Then finally reconfigure the system by running proxysmart.sh reset_complete .

2.6. Upgrade

2.6.1. Upgrade from older V2

NOTE when dpkg will ask whether to replace old config file with new one, answer N (No) or just press Enter. So old config file is saved.

Run these commands: 

curl https://proxysmart.org/install-v2 | bash

Reboot or run proxysmart.sh reset_complete.

2.6.2. Upgrade from V1

Show

2.7. Development version installation (v2.2)

Why? To unlock new features that are not yet in the Main version. 

curl https://proxysmart.org/install-v2.2 | bash

Reboot or run proxysmart.sh reset_complete.

Show

3. Adding modems

Proxy credentials for new modems

When adding new modems, please use

3.1 Adding a new modem (USB)

3.2. Adding a LAN modem.

Configure the server with 2 LAN cards

Assume you have 2 LAN cards, e.g. enp6s0 main LAN, enp2s0 is dedicated for LAN modems:

nmcli con 

NAME                UUID                                  TYPE      DEVICE 
Wired connection 1  bbbee134-51c3-3830-801f-9636470e0708  ethernet  enp6s0
Wired connection 2  000ed912-2d99-3f37-882b-d79ad13102e7  ethernet  enp2s0 
nmcli con modify Wired\ connection\ 2 con-name HUBS
nmcli con modify HUBS ipv4.method manual ipv4.addresses 192.168.10.100/24 ipv6.method link-local ipv4.route-metric 300

So you will add the LAN modems to 192.168.10.0/24 network as 192.168.10.1, 192.168.10.2 etc. 

systemctl restart NetworkManager

Delete old route: 

ip ro del default via 192.168.10.1

Confirm you have only 1 default route via main LAN, query with 

ip ro

Output: 

default via 192.168.1.1 dev enp6s0 proto static metric 100

Add the modem

Then either wait 5 minutes or run the command sudo proxysmart reset_gently, it will find new modems. Then , refresh the proxysmart Web App and assign proxy logins and passwords to the new modems.

3.3. Adding an Android phone

Main guide dedicated to adding Android Phones: Android phones guide

3.4. Adding a virtual modem (backend proxy).

A virtual modem is a in fact a redirect to a 3rd party proxy (HTTP or SOCKS5) so you can build own proxies based on that and resell them.

They even can be rotated if the backend proxy supports it.

How to add?

Make sure BACKEND_PROXIES_ENABLE is enabled in WebApp→Global_settings .

Add them the Webapp→Edit_modems→Virtual modems

, scroll to the bottom, and add each with the following fields

  1. id has to be in the form 'bproxy' + a number e.g. bproxy1 or bproxy2
  2. creds is a line with credentials of the backend proxy e.g. http://Mylogin:Mypassword@Server:3128 or socks5://Mylogin:Mypassword@Server:1080
  3. ip_reset is an optional parameter , the URL for triggering IP rotation of the backend proxy

Click SAVE

Then either wait 5 minutes or run the command sudo proxysmart reset_gently, it will find new modems. Then , refresh the proxysmart Web App and assign proxy logins and passwords to the new modems.

3. CLI API

1. show status

Show full status of all modems, table (slower). 

# proxysmart.sh  show_status

Output:

Show brief status of all modems, table, (faster)

Run 

# proxysmart.sh  show_status_brief

Output:

Show full status of all modems , json 

# proxysmart.sh  show_status_json

Output:

Show status for a single modem, JSON

Arguements - NICK or IMEI. 

# proxysmart.sh  show_single_status_json dongle111

Output:

2. full reconfiguration

Run 

# proxysmart.sh reset_complete

Output:

3. apply setting for a modem by IMEI

JSON output 

# proxysmart.sh   apply_settings_for_a_modem_by_imei  868723029999406

Output:

Plain text output: 

 proxysmart.sh  apply_settings_for_a_modem_by_imei_raw    359999999999999

output:

4. reset IP on a modem

Args: IMEI or NICKNAME.

JSON output: 

# proxysmart.sh   reset_modem_by_imei    899999999999999 
# proxysmart.sh   reset_modem_by_imei    Dongle222

Output:

Plain text output: 

# proxysmart.sh  reset_quick_nick  899999999999999
# proxysmart.sh  reset_quick_nick  Dongle222

Output:

5. reboot a modem

Args: Nickname or IMEI.

TEXT Output

JSON Output

6.1. Reset a modem via USB

Can accept DEV name, IMEI or Nickname. So

For Text output:

For Json output.

6. Run speedtest

On a single modem:

Args: NICKNAME or IMEI. 

# proxysmart.sh  speedtest 353990074160000
# proxysmart.sh  speedtest sierra

Response:

7. report bandwitdh

On a single port

With arbitrary time interval.

8. reset bandwidth counter on a port

ARGS: portID

JSON output

9. list sms on a modem

JSON output

10. send sms

Plain output:

JSON output:

11. purge SMS

Purges SMS from all folders.

Call by IMEI or nickname,

json output:

12. send ussd

Plain output

JSON output:

13. get bandwidth counters from a modem

..use bandwidth stats..

14. Get IP rotations log for a modem

By Nickname or IMEI

15. Get Top hosts from a modem

By PORTID <code> proxysmart.sh top_hosts port92848428 </code> Response: <code> { "bbc.com": 10, "gmail.com": 20 } </code> ++++ ==== 16. Report IP uniqueness ==== ++++ JSON output.

TEXT output.

4. WEB API

1. Web API description.

WEB API endpoint is the URL that Proxysmart WebApp available at.

It can be

Also attach proper username:password (the -u parameter).

Whenever below you are seeing localhost:8080, replace it with the actual WEB API endpoint.

1.1. Workflow

quick start:

Detailed start

Assume you have given a fresh Proxysmart server with multiple modems, by default each of the modems has generated a random modem nickname and random ports on it.

IMEI is a unique identifier for a modem.

So, query full status with /apix/show_status_json, gather IMEI's where nicknames are like random, for each of these IMEI do:

(done)

if you edited a modem

call 'Apply settings for a modem' WEB API call for the modem.

if you edited a port

call 'Apply settings for a port' WEB API call for the port (faster)

or

call 'Apply settings for a modem' WEB API call for the modem. (slower, affects all modem's ports)

if you deleted a port

call 'Purge port' WEB API call for the port (faster)

or

call 'Apply settings for a modem' WEB API call for the modem. (slower, affects all modem's ports))

2. List all modems

Request: 

curl 'http://localhost:8080/apix/show_status_json' -u proxy:proxy

Response:

3. List all active ports

Request: 

curl http://localhost:8080/apix/list_ports_json -u proxy:proxy

Response:

4. Single modem status

Request:

( either by IMEI or Nickname ) 

curl http://localhost:8080/apix/show_single_status_json?arg=dongle111    -u proxy:proxy
curl http://localhost:8080/apix/show_single_status_json?arg=899999999999999    -u proxy:proxy

Response:

5. Reset (change) IP on a modem.

Request:

( either by IMEI or Nickname ) 

curl http://localhost:8080/apix/reset_modem_by_imei?IMEI=899999999999999 -u proxy:proxy
curl http://localhost:8080/apix/reset_modem_by_nick?NICK=dongle22 -u proxy:proxy

Response:

6. Reboot a modem

Request:

( either by IMEI or Nickname ) 

curl http://localhost:8080/apix/reboot_modem_by_imei?IMEI=860493043888886 -u proxy:proxy
curl http://localhost:8080/apix/reboot_modem_by_nick?NICK=dongle2 -u proxy:proxy

Response:

ETA: ~ 1.5 minute

7. Send SMS

Request: 

curl 'http://localhost:8080/modem/send-sms' -u proxy:proxy \
    --data-urlencode 'imei=899999999999999' \
    --data-urlencode 'phone=+11111111111' \
    --data-urlencode "sms=txt txt fff"

Response:

8. Send USSD and read response

Request: 

curl 'http://localhost:8080/modem/send-ussd' -u proxy:proxy \
    --data-urlencode 'imei=899999999999999' --data-urlencode 'ussd=*100#'

Response:

9. Read SMS from a modem

Request: 

curl 'http://localhost:8080/modem/sms/862329888888888?json=1' -u proxy:proxy

Response:

10. Read bandwidth stats from a port

Args: porID

Request: 

curl localhost:8080/apix/bandwidth_report_json?arg=portJFJHFHJ -u proxy:proxy

Response:

With arbitrary time interval:

ARGS: portID, start time, end time.

Request: 

curl -G http://localhost:8080/apix/get_counters_port -X GET -d PORTID=portKFJKJKDD --data-urlencode 'START=2023-01-28 18:10' --data-urlencode 'END=2023-01-28 19:20:01' -u proxy:proxy

Response:

11. del

del

12. Reset bandwidth stats for a port

Request (by portID ): 

curl localhost:8080/apix/bandwidth_reset_counter?arg=portJKJKDHJ83  -u proxy:proxy

Response: 

{"result":"success","debug":null}

13. Reset a modem via USB

Request either - by network interface e.g. modem77 - by Nickname - by IMEI 

curl localhost:8080/apix/usb_reset_modem_json?arg=modem77      -u proxy:proxy
curl localhost:8080/apix/usb_reset_modem_json?arg=dongle22      -u proxy:proxy
curl localhost:8080/apix/usb_reset_modem_json?arg=868888888888889      -u proxy:proxy

Response:

14. Get IP rotations log for a modem

Request - by Nickname - by IMEI 

curl localhost:8080/apix/get_rotation_log?arg=899999999999999  -u proxy:proxy 
curl localhost:8080/apix/get_rotation_log?arg=dongle2          -u proxy:proxy

Response:

15. Apply settings for a modem

Request: 

curl http://localhost:8080/modem/settings -d imei=862329099999999 -u proxy:proxy

Response:

15.1. Apply settings for a port

Args: portID

Request: 

curl http://localhost:8080/apix/apply_port?arg=port029348 -u proxy:proxy

Response:

15.2. Purge a port

Args: portID

Request: 

curl http://localhost:8080/apix/purge_port?arg=port029348 -u proxy:proxy

Response:

16. Purge SMS from a modem

Request either - by Nickname - by IMEI 

curl localhost:8080/apix/purge_sms_json?arg=Nick77      -u proxy:proxy
curl localhost:8080/apix/purge_sms_json?arg=868888888888889      -u proxy:proxy

Response: 

{ "result": "success", "msg": "" }

17. Get Top hosts from a modem

By PORTID

Request: 

curl localhost:8080/apix/top_hosts?arg=port2847472 -u proxy:proxy

Response:

18. Report IP uniquness

Request: 

curl localhost:8080/apix/unique_ips_json -u proxy:proxy

Response:

19. Store a modem object in Mongodb

This call just stores the object. Then you have to call “Apply Settings for a modem”.

Request: 

curl -u proxy:proxy localhost:8080/crud/store_modem --data-raw data='{"IMEI": "123456789012345", "name":"MyModem"}'

Response:

Mandatory Fields

Optional Fields

Example 1, only mandatory fields. 

{
  "IMEI": "862329041087714",
  "name": "dongle2"
}

Example 2, mandatory + optional fields. 

{
  "IMEI": "862329041087719",
  "name": "dongle21",
  "AUTO_IP_ROTATION": 10,
  "PHONE_NUMBER": "+1111111111",
  "TARGET_MODE": "4g",
  "WAN_APN": "internet",
  "mtu": 1400
}

20. Store a port object in Mongodb

This call just stores the object. Then you have to call “Apply Settings for a port”.

Request: 

curl -u proxy:proxy localhost:8080/crud/store_port --data-raw data='{"IMEI": "353990074165890", "portID":"lel9999", "portName":"yyyyyyyy", "proxy_password":"aaaaaaaaa", "proxy_login":"aaaaaaaaaa", "http_port":8005, "socks_port": 5005}'

Response:

Mandatory fields :

Optional fields :

Example 1, only mandatory fields. 

{
  "portID": "portO",
  "IMEI": "862329041087719",
  "portName": "PEPA",
  "http_port": "8005",
  "socks_port": "5005",
  "proxy_login": "kileq",
  "proxy_password": "Jdh27dh"
}

Example 2, mandatory + optional fields. 

{
  "portID": "portQ",
  "portName": "DEDA",
  "IMEI": "862329041087719",
  "MAXCONN": 100,
  "CONNLIM": 100,
  "DENIED_SITES_ENABLE": 1,
  "DENIED_SITES_LIST": [
    "bad.com",
    "porn.com"
  ],
  "PROXY_VALID_BEFORE": "2028-02-22T12:54",
  "IP_MODE": "46",
  "OS": "ios:2",
  "bandlimin": "10",
  "bandlimout": "10",
  "bw_quota": 200,
  "QUOTA_TYPE": "monthly",
  "http_port": "8004",
  "proxy_login": "mokos",
  "proxy_password": "rQ1h6J",
  "socks_port": "5004",
  "white_list": [
    "192.168.0.0/16",
    "78.140.162.201",
    "78.140.162.202"
  ]
}

21. Export backup

Destination format: v2

So it can be later imported in V2 version of Proxysmart.

Request: 

curl -u proxy:proxy localhost:8080/crud/backup_export

Response:

22. Storing Backend Proxies (virtual modems)

Request: 

curl -u proxy:proxy localhost:8080/crud/backend_proxies -X POST --header "Content-Type: application/json" -d \
  '[ 
    { 
    "id" : "bproxy1" , 
    "creds" : "http://MyLogin:MyPass@MyProxyHost1:3128" ,
    "ip_reset": "http://MyProxyHost1/reset1"
    },
    { 
    "id" : "bproxy2" , 
    "creds" : "http://MyLogin:MyPass@MyProxyHost2:3128" 
    } 
  ]'

Response:

23. Getting current Backend Proxies (virtual modems)

Request: 

curl -u proxy:proxy localhost:8080/crud/backend_proxies -X GET --header "Content-Type: application/json"

Response:

24. Storing LAN modems

Request: 

curl -u proxy:proxy localhost:8080/crud/lanmodems -X POST --header "Content-Type: application/json" -d \
  '[ 
      {
        "dev": "lanmodem3",
        "gw": "192.168.8.3"
      },
      {
        "dev": "lanmodem2",
        "gw": "192.168.8.2"
      }
  ]'

Response:

25. Getting current LAN modems list

Request: 

curl -u proxy:proxy localhost:8080/crud/lanmodems -X GET --header "Content-Type: application/json"

Response:

7. License

1. Demo license

Installation is shipped with default demo license.

It allows you to run proxy on 1 modem.

In order to run more modems, buy a License.

2. Requesting a License

2.1. Get the machine data

Method1. From the WebApp:

Method2. From the CLI:

2.2. Contact Sales Team

Send the copied value to proxysmart.org

2. License installation

You will be given the license and license signature. Both are sequences of numbers and characters. Then submit both either via WebApp or CLI:

submitting via WebApp

Open the WebApp , http://localhost:8080 , expand License section and type in the keys & submit both.

submitting via CLI

run commands 

proxysmart.sh submit_license LICENSE
proxysmart.sh submit_license_signature LICENSE_SIGNATURE

3. Restoring Demo license.

If your paid license expired or broken, restore DEMO license, run:

sudo cp -v /usr/share/doc/proxysmart/examples/license.txt* /etc/proxysmart/

8. FAQ and Troubleshooting.

1. Where is WebApp

One of

By default login/password are proxy / proxy.

2. How to use proxies

3. Speedtest for the clients

Why? In order to test quality of connnection between proxy/VPN users and the server, not involving mobile equipment.

How?

For the proxy users:

Open the URL in the browser: The WebApp plus /openspeedtest/ e.g. http://VPS_IP:7001/openspeedtest/ , login/password are speedtest / pw2000pw

For the VPN users:

While connnected over the VPN, open the URL in the browser: http://172.22.27.1/openspeedtest/ , login/password are speedtest / pw2000pw

4. Reconfigure all modems & proxies.

Method1. Click the button “Reset Complete” on the main screen of the WebApp in the bottom.

Method2. In linux console, run: proxysmart.sh reset_complete

Also it is done after reboot automatically by a Cron job.

5. How to change proxy credentials for a modem. How to rename a modem.

6. Reset (change) IP on a modem.

The options are below.

Click Reset Ip button.

Run: proxysmart.sh reset_quick_nick dongle1

Where dongle1 is a Dongle “nickname” that is seen from output of proxysmart.sh show_status

check WEB API section of this manual.

How to rotate a modem periodically?

Update modem’s settings in the WebApp and click APPLY.

Install a Cron job. Edit a file /etc/cron.d/proxysmart, add a line ( or uncomment a commented line.. )

*/10 * * * * root run-one /usr/local/bin/proxysmart.sh reset_quick_nick dongle3

so that a modem with the Nickname dongle3 is rotated every 10 min.

Repeat for each modem you want to rotate periodically.

7. How many modems can I run on a single computer?

Hi , technically it depends on how powerful this PC is, and how intensively proxies are used.

Also it depends on what Plan you buy.

Also it depends on USB configuration, for maximum number of modems:

8. How to set TTL and why?

In some cases custom TTL must be set in order to have Cell Operator think we are not using the modem in hotsport  tethering mode. I.e. we don’t share its data. By default Linux OS has ttl = 64. To change Cell Operator perception of the situation, we want to set it +1 i.e. 65.

Edit WebApp→GlobalSettings and set CUSTOM_TTL_SET and CUSTOM_TTL_VALUE=65 and regenerate settings.

9. How to set MTU and why?

In some cases different MTU values connect with different types of ISP’s. You may want to change it.

Mtu can be only lowered. E.g. if you have MTU 1390, you can set 1340. Not opposite.

- WebApp → GlobalSettings → enable CUSTOM_MTU_SET . - Set MTU in the WebApp for each modem.

10. How to set extra settings for a proxy port.

Those are optional and are set in the WebApp

11. How can I access the web interface admin panel of each modem?

Proxysmart 2.2+

All proxysmart versions

11.1. How can I prevent access to modems web interface via proxy?

Since 2023-09-10 it is enabled by default.

Edit WebApp→GlobalSettings and set 

PROXY_ADMIN_ENABLE  enabled
PROXY_ADMIN_LOGIN   SuperAdmin
PROXY_ADMIN_PASS    Hqmz81mmZr

And regenerate configs. So only admin user is allowed to use modems web interfaces, and normal proxy users are not.

12. How to set monthly traffic quota per modem?

In the WebApp, set monthly traffic quota. Click EDIT & APPLY.

13. How to make my proxes Open (i.e. not requiring authentication )

Set OPEN_PROXIES in WebApp→GlobalSettings and regenerate all configs.

Note, when proxy ports are forrwarded via a VPS, the proxies are available to any internet user. Use it with caution.

14. Get monthly/daily proxy usage.

Click Bandwitdh Stats in the WebApp, or use “Report Bandwidth” CLI or WEB API call.

15. How to get current number of connections for a modem?

Run a command

ss -o state established | grep -c :8038

But change 8038 with HTTP port of a desired proxy

16. How to read SMS from a modem.

You have these options.

17. How to change WebApp password

By default it is set to proxy / proxy.

In the WebApp→GlobalSettings scroll to the bottom, set new WebApp password. NOTE: login remains proxy.

Command line method. 

sudo htpasswd -b /etc/nginx/htpasswd proxy NewAweSomePassword999999

If you want to change username as well, just delete the file and then assign new password 

sudo rm /etc/nginx/htpasswd
sudo htpasswd -b -c /etc/nginx/htpasswd MyNewUsername NewAweSomePassword999999

18. OS Spoofing

Os Spoofing is used to simulate other OS TCP fingerprints.

What OS can I spoof?

MacOSX, iOS,  Windows,  Android.

How to enable OS Spoofing?

In the WebApp set the needed OS per each proxy port (click EDIT PORT).

How to test OS Spoofing ?

Visit one of these websites (IP checkers) through a proxy. Find something like “OS TCP fingerprints”.

Can I dump OS TCP fingerprint from a real device and use it?

Yes, contact me.

I enabled OS TCP spoofing, but it is not working!

The reason may be that the operator passes all traffic through its internal proxy, or in other way modifies TCP signatures. Then local OS TCP modifications are overwritten. Is it bad? No! Because still traffic looks natural as it was coming from this operator network.

Try other operator.

19. Performance tuning

When >50 modems are added, play with MAX_PARALLEL_WORKERS_STATUS variable, on faster CPU’s it can be set to 8 or 16 (to the number of CPU cores). It can be set by editing the file /etc/proxysmart/conf.txt. It affects number of threads

20. How to lock network mode per modem

Set TARGET_MODE the modem's settings in the Proxysmart WebApp. Allowed values:

21. What if a modem connected via 3G or 2G, and I want 4G?

Lock network mode to 4G and rotate its IP.

22. I want to add extra users on a modem

In the WebApp, create more ports on the modem, each port means a dedicated proxy.

23. Is IPV6 supported?

Yes but it’s off by default.

On modems , edit APN and set APN type for both IPv4 and IPv6 , e.g. Ip4Ip6 or Ip4+ip6, there is a dropdown list for that.

On Proxysmart box: Update WebApp→GlobalSettings → IPV6_SUPPORT On

and reset configuration proxysmart.sh reset_complete ; or even better do a reboot.

24. Nagios integration.

There is a plugin embedded, run it as root,

/usr/lib/nagios/plugins/proxysmart-nagios-helper.sh IMEI

or

/usr/lib/nagios/plugins/proxysmart-nagios-helper.sh NICKNAME

so it will return OK/WARN/CRIT/UNKNOWN and corresponding exit code.

These links

A link can be copied from the WebApp→Ports list. Each Port has its own IP rotation link. If one port rotates IP, then other ports of the same modem affected too.

If you realized you gave a link to a customer, and want to revoke it, just set new password for the proxy.

If you want to invalidate all links of all modems, set a new secret: set RESET_LINK_SECRET in WebApp→GlobalSettings .

26. QUIC (UDP) support on Socks5 proxies, for HTTP/3.0

On Proxysmart 2.3+ it is enabled by default.

It is needed for proper work of HTTP/3.0 which uses UDP.

QUIC (UDP over socks5) will work either in your LAN or via a VPS. Steps are below.

Steps on VPS :

Make sure you finished the Cloud VPS setup part, with Ansible 

cd /root/proxysmart-vps/
nano vars.txt

- set vps_socks5_udp: 1

Save the file (press Control O) and exit the editor (Control x)

Run Ansible again 

ansible-playbook ./proxysmart-vps.yml

Steps on Proxysmart server :

set in WebApp->GlobalSettings → QUIC_SUPPORT : On.

and reboot or reconfigure all proxies (run proxysmart.sh reset_complete ).

Note: make sure the VPS has enough RAM, each proxy needs 50MB of RAM. Also add swap if needed.

27. “Dirty” IP reset.

It may be needed when you need even faster IP reset. In this case, post-checks are not made, so it is not sure if the modem really went online after IP reset. It can be activated by DIRTY_IP_ROTATION in WebApp→GlobalSettings

28. Exclude some modems

In /etc/proxysmart/conf.txt

29. Use custom Speedtest server.

It is useful when for some reason you want to run speed tests towards a custom server, instead of Ookla servers.

Update WebApp→Global_settings with IP of the WEB server:

DL_URL can be an URL of a large enough file (~100Mb+). And UL_URL is an URL that accepts large enough POST request.

30. Minimum time between IP rotations

If you want to avoid too frequent IP rotations triggered by your users – in WebApp→Global_settings set MINIMUM_TIME_BETWEEN_ROTATIONS as 120, so for 120 seconds minimum delay.

31. How to block domains

How blocklists are processed:

Note for Socks5 proxies

When a domain blacklist is imposed, then by default users still can access blocked sites by their IP’s.

In order to prevent it, set DENY_IP_REQUESTS in WebApp→Global_settings and run proxysmart.sh reset_complete for resetting all configuration (or reboot).

32. How to allow only whitelisted domains.

The feaure it not ready.

33. How to re-rotate IP when IP doesn’t change?

In WebApp→Global_settings set RETRY_IP_ROTATIONS .

So when Old_IP == New_IP, then IP rotation is retried. Up to MAX_RETRY_IP_ROTATIONS attempts which is by default 3.

34. Prevent non-unique IP’s after IP rotation.

For example to prevent using IP’s that were in use 1 time (or more) within last 24h: set in WebApp→Global_settings : 

RETRY_IP_ROTATIONS                 # enables Re-rotation, enable it.
NON_UNIQUE_IP_OCCURS 1             # how many times an IP must occur to be considered NonUnique. E.g. 1
NON_UNIQUE_IP_PERIOD 24hour        # during which period an IP must occur to be considered NonUnique. E.g. 1day or 1hour

35. How to enable client IP whitelisting?

On Proxysmart 2.3+ it is enabled by default

By default Proxysmart can't see original clients IP's. So we have to enable it:

Steps:

1. On Proxysmart server

2. On the VPS 

cd /root/proxysmart-vps/
nano vars.txt

set

haproxy_enabled: 1

Save the file (press Control O) and exit the editor (Control x)

Run Ansible again 

ansible-playbook ./proxysmart-vps.yml

36. Custom DNS server for the proxies

Edit /etc/proxysmart/conf.txt and set DNS_SERVER_PROXIES="1.1.1.1" where 1.1.1.1 is a custom DNS server, it must be publicly available.

Click the button “Reset Complete” on the main screen of the WebApp in the bottom or in the console, run: sudo proxysmart.sh reset_complete or reboot the server.

37. Where are proxy logs.

On the Proxysmart server in a folder /var/log/3proxy/ , each filename is named for HTTP proxy port.

Logs are rotated daily and 90 copies are saved, details are in /etc/logrotate.d/3proxy.

Logs of IP rotations are in a folder /var/log/proxysmart/dongle_rotations/.

38. No logs policy

If you want to run NoLogs policy, create a cron script that deletes the logs, i.e. the files 

/var/log/gost/*
/var/log/3proxy/*
/var/log/sniproxy*
/var/log/haproxy*

39. My proxies are slow.

Assume a chain UsbModem→PC→VPS→ProxyUser. Final Proxy speed is limited by:

Download speed of the modem.

It can be measured on the side of the PC e.g. in the Proxysmart WebApp by clicking the Speedtest button.

How to improve it?

Upload speed from PC to VPS.

Normally it correlates with quality of home internet (Fiber/xDSL) and can be measured by running speedtest on the PC in browser or in Terminal (speedtest-cli). Upload value has to be high.

With different types of port forwardings:

wan (Home Internet is used for ports forwarding) : remote proxy user's DownloadSpeed is limited to minimum of (ModemDownloadSpeed, HomeInternetUploadSpeed )

cell (each modem forwards its proxies through its internet) : remote proxy user's DownloadSpeed is limited to minimum of (ModemDownloadSpeed, ModemUploadSpeed )

How to improve it?

Download speed from VPS to the ProxyUser

It can be measured by downloading a file from VPS to the Proxyuser.

How to improve it?

40. My proxies are slower than the same SIM card in a Phone.

Reason 1: Compare LTE category of the modem and the phone. Phone has higher LTE cat e.g. 12..20, while modem has LTE cat 4..6 (depends).

Reason 2: when the speed is really bad (about 1mbps) then it is Operator's throttling. Perhaps you bought a plan that allows only phones/tablets and doesn't allow modems.

41. How to forward proxy ports via each modem individually?

Why is it needed? When home base internet is unstable or its upload speed <15mbps.

A VPS is needed in order to expose the ports this way ( see VPS integration chapter ).

How it works

Each proxy forwards its port through its modem, not using base internet.

PRO's :

CON's :

Steps: on Proxysmart server

42. Auto-rebooting modems.

Sometimes only a reboot can fix a modem. In order to enable, set AUTOREBOOT_DONGLES in WebApp→Global_settings. How it works: 

SCORE_IP_ROTATION_FAIL=10                   # score increments when IP rotation failed
SCORE_IP_NOT_DETECTED=2                     # score increments when IP not detected
SCORE_IP_RECONNECT_FAIL=10                  # score increments when IP not auto-reconnected
SCORE_WWAN_DATA_FAIL=10                     # score increments when WWAN device can't establish Data connection
SCORE_WEBAPP_FAIL=20                        # score increments when the modem's WebApp is stuck

43. My proxy is offline and showing Red in the WebApp.

44. How to host multiple Proxysmart servers

When ports forwarded through a VPS

Assume 2 Proxysmart servers:

On each, make sure the proxies are configured on these ports:

Make settings in the WebApp→GlobalSettings:

For Server1:

For Server2:

When ports forwarded through a static office IP

Assume 2 Proxysmart servers:

On each, make sure the proxies are configured on these ports:

Then on the router, make forwardings.

For Server1:

For Server2:

45. IP's are rotated on their own

If you don't rotate IP's and they are detected each time as a new IP - it is natural behaviour of mobile provider, when it routes its clients through random different gateways every 1 minute or so. T-Mobile USA is known of doing so.

Solution: in the WebApp→GlobalSettings set COLLECTD_PINGER_KEEPALIVE to On, so there will be a pinger daemon that keeps open connection to a hostname defined as COLLECTD_PINGER_HOSTNAME through each modem.

46. Install logging of all requests in single place

Why? Get single log of all requests from Proxies (HTTP/Socks5) clients and VPN clients.

Installation On Proxysmart server

In the WebApp→GlobalSettings set SNIFFER_ENABLED and click Apply.

run proxysmart.sh reset_complete

Watch the log /var/log/proxy_log.log on Proxysmart server.

It is rotated and 365 daily copies are stored on disk.

Then it is bound to a button “Download Proxy Logs”.

It can also be installed on a VPS if the VPS is working as proxies frontend.

Installation On VPS

not supported yet.

Log format

File: /var/log/proxy_log.log 

    _ws.col.Time  frame.interface_name   ip.src  tcp.srcport   ip.dst   tcp.dstport  
    #   1          2                        3       4           5           6
    
    socks.remote_name    socks.dst    socks.port   socks.dstport 
    # 7                         8         9         10
    
     http.request.method    http.host  
    #   11                  12        

     tls.handshake.extensions_server_name  x509ce.dNSName
    #   13                                  14

47. PPP modems

These are very old 3g modems like Huawei E303, E173, E156; ZTE MF110, MF193, MF190. In order to make them work with proxysmart,

edit WebApp→GlobalSettings and set PPP_MODEMS_ENABLE .

Make Quectel / Sierra Wireless LTE modules work in PPP mode

Why? sometimes they fail working in QMI mode. So: 

# ignore QMI_WWAN endpoints on Quectel, to make it work in PPP mode.
SUBSYSTEM=="net", ACTION=="add",  ATTRS{idVendor}=="2c7c" , ATTRS{idProduct}=="0125",  ENV{.LOCAL_ifNum}=="04", PROGRAM="/usr/local/bin/usb_ignore.sh %p"
# ignore QMI_WWAN endpoints on SierraWireless  , to make it work in PPP mode. Save to 21-wwan.rules:
SUBSYSTEM=="net", ACTION=="add",  ATTRS{idVendor}=="413c" , ATTRS{idProduct}=="81b6",  ENV{.LOCAL_ifNum}=="08", PROGRAM="/usr/local/bin/usb_ignore.sh %p"

48. Alerts to Telegram

In Telegram start a chat with a bot https://t.me/userinfobot and get your Telegram numeric ID.

In Proxysmart WebApp→GlobalSettings , set TG_ALERTS_ENABLE ; and set TG_ALERTS_RECEIVER to your Telegram numeric ID.

In Telegram start a chat with Proxysmart bot https://t.me/nagios737bot and send 'hi'.

After that the bot will send you alerts.

49. Mobile VPN

Together with building proxies, it is possible to build Mobile VPN.

It is enabled with WebApp→GlobalSettings → OpenVPN integration → OPENVPN_INTEGRATION

49.1. Mobile VPN, how to connect

So download the VPN profiles and connect using any VPN client software.

Windows: https://openvpn.net/community-downloads/ or https://openvpn.net/client-connect-vpn-for-windows/

MacOS: https://tunnelblick.net/

Android: https://play.google.com/store/apps/details?id=de.blinkt.openvpn or https://f-droid.org/en/packages/de.blinkt.openvpn/

IOS: https://apps.apple.com/us/app/openvpn-connect/id590379981

49.2. Mobile VPN, Switch Openvpn protocol

49.3. Mobile VPN logs

Logs of openvpn sessions - /var/log/openvpn/sessions.log. Format: 

'$time','$type','$local_port','$proto','$duration','$bytes_in','$bytes_out','$Real_IP','$Real_PORT','$Ovpn_CERT','$Ovpn_IP','$IMEI','$proxy_login','$auth_reject_why'

9. Bugs and Limitations

LTE modules

Android phones

VPN users

Port ranges

OS TCP Fingerprint spoofing

No spam

TCP port 25 is blocked, we don't send spam. If you want to send normal emails then you can use ports: 587, 465. Port 25 is for server2server communication only.