WeAir

反向代理Google

前期准备

反代Google之前要准备的各种乱七八糟的包括但不限于一台国外的VPS、一个域名、SSL证书等等,请提前准备好。

配置Nginx反代

Nginx需编译安装nginx_substitutions_filter模块。

Nginx配置如下:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
server {
listen 80;
listen [::]:80;

server_name domain.name;

location / {
return 301 https://$server_name$request_uri;
}
}

server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;

server_name domain.name;

ssl_certificate /path/cert.crt;
ssl_certificate_key /path/cert.key;

#防止网络爬虫。
if ($http_user_agent ~* "360Spider|qihoobot|Bingbot|Baiduspider|Googlebot|Googlebot-Mobile|Googlebot-Image|Mediapartners-Google|Adsbot-Google|Feedfetcher-Google|Yahoo! Slurp|Yahoo! Slurp China|YoudaoBot|YandexBot|Yisouspider|Sosospider|Sogou spider|Sogou web spider|MSNBot|ia_archiver|Tomato Bot") {
return 403;
}

resolver 1.1.1.1 [2606:4700:4700::1111] valid=30s;

location / {
proxy_pass https://www.google.com;
proxy_redirect off;
proxy_cookie_domain google.com domain.name;
proxy_connect_timeout 60s;
proxy_read_timeout 5400s;
proxy_send_timeout 5400s;

proxy_set_header Accept-Encoding "";
proxy_set_header Host "www.google.com";
proxy_set_header User-Agent $http_user_agent;
proxy_set_header Referer https://www.google.com;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Accept-Language "zh-CN";
proxy_set_header Cookie "PREF=ID=047808f19f6de346:U=0f62f33dd8549d11:FF=2:LD=en-US:NW=1:TM=1325338577:LM=1332142444:GM=1:SG=2:S=rE0SyJh2W1IQ-Maw";

subs_filter_types text/css text/xml text/javascript application/javascript application/json;
#关键字符替换。
subs_filter www.google.com domain.name;
subs_filter www.google.com.hk domain.name;

sub_filter_once off;

#限制IP访问。
# allow 192.168.1.1;
# allow 192.168.1.0/24;
# deny all;
}
}

后记

domain.name替换成你自己的域名,为域名添加SSL证书,以及过滤IP访问。