A very small script to install MTProtoProxy On Centos or Ubuntu
- Generate random secret
- Automatically configure firewall
- Create a service to run it on background and start up
- Choose between Official Proxy and Python Proxy
- Easy to setup
- Revoke and add secrets after install
- Supports Centos 7 or Ubuntu 16 or later
Use python if:
- Your server's CPU has one core or you want to run proxy on one core.
- Your server is low-end.
- You are serving a small group of people. (Like family or small company)
- You want to limit user connections.
- You also have another application or service running on your server. (Openvpn, shadowsocks, nginx or ...)
Otherwise, use official proxy.
Python proxy says it can serve about 4000 concurrent connections with 1 CPU core (~2.5 GHz) and 1024MB RAM.
Official proxy can serve about 10000 to 16000 connections per core.
Before You Begin: Do not use OVH or IPHoster datacenters for MTProto.
On your server run
curl -o MTProtoProxyInstall.sh -L https://git.io/fjo34 && bash MTProtoProxyInstall.shWait until the setup finishes, you should be given the links. (using systemctl status mtprotoproxy -l will display said links as well)
To update, uninstall, change port, revoke secret or... the proxy, run this script again.
You can enable random padding with adding a dd at the beginning of secret in Telegram client. Read More If you enable secure mode, server drops the connections that are not using the random padding.
Use systemctl start mtprotoproxy to start, systemctl stop mtprotoproxy to stop and systemctl status mtprotoproxy -l to see logs of script.
To manually config, proxy edit config.py in /opt/mtprotoproxy to change the config; Then restart the server using systemctl restart mtprotoproxy or just run script again.
Should you want to test the stuff that are not available in the stable branch of mtprotoproxy, pass -m as argument to script to install master branch.
curl -o MTProtoProxyInstall.sh -L https://git.io/fjo34 && bash MTProtoProxyInstall.sh -mBefore You Begin: Do not use OVH or IPHoster datacenters for MTProto.
On your server run
curl -o MTProtoProxyOfficialInstall.sh -L https://git.io/fjo3u && bash MTProtoProxyOfficialInstall.shand wait until the setup finishes and you will see the links after install.
Each worker can handle more than 10000 connections on a modern CPU. Connections will be split between workers. Do not spawn workers more than your CPUs thread count.
You can use command below to automatically install MTProto proxy to without even pressing a key.
curl -o MTProtoProxyOfficialInstall.sh -L https://git.io/fjo3u && bash MTProtoProxyOfficialInstall.sh PORT STATS_PORT SECRET [TAG]You can enter more than one secret by splitting secrets by ,.
Example of using 443 as proxy port, generate random port for stats port, 00000000000000000000000000000000 and 0123456789abcdef0123456789abcdef as secrets , and empty tag:
curl -o MTProtoProxyOfficialInstall.sh -L https://git.io/fjo3u && bash MTProtoProxyOfficialInstall.sh 443 -1 00000000000000000000000000000000,0123456789abcdef0123456789abcdefUse systemctl start MTProxy to start, systemctl stop MTProxy to stop and systemctl status MTProxy -l to see logs of script.
The service file is saved in /etc/systemd/system/MTProxy.service. You can edit it manually. There is also a file named mtconfig.conf at /opt/MTProxy/objs/bin that is created by script. It’s used in loading proxy configs by script. You must not delete this file ,however, you can edit it. Also if you have enabled auto updater, you will have two other files named updater.sh and updater.log
There is a pull request that will do it for you. See here. Script will ask you if you want to enable random padding only or not.
Setup will try to configure the proxy on public zone. However you can manually enter these rules in case of any error or whatever. Just rerun the script and choose Generate Firewalld Rules and script will generate and apply firewall rules.
Due to some ISPs detecting MTProxy by packet sizes, random padding is added to packets if such mode is enabled. It's only enabled for clients which request it. Add dd prefix to secret (cafe...babe => ddcafe...babe) to enable this mode on client side.
It is possible to patch the script to make it partly compatible with Debian. However for windows you cannot patch the script, but I've written a small guide to install that on Windows. Please read wiki for more info.
The official installer will work on Debian too. So you can just replace all elif with just else. I may add debian support later.
You can use any VPS or Dedicated Server. If you want a cheap and low-end server, I personally recommend to buy one at Virmach; They also accept cryptos!
If you live in Iran and you want to pay with IRR you can buy one at Tikweb or ParsHost.
Persian guide to buying servers, installing script, making servers nearly censorship-resistant and FAQ
BEFORE YOU BEGIN: If you are going to invest in MTProto and you are going to publish your proxy's link, I think you should just turn back. I believe MTProto Proxy is a failed project in Iran. Continue reading for more info. Utilizing this for self-use could significantly lessen the chance of your server's IP getting censored. I don't say there is no way to make your server censorship-resistant, I just don't know them. Please do not contact me and ask me for other ways.
More info about Iran censorship: It roughly takes 15 ~ 2 hours to block your new public and non-resistant server. If you route your traffic through a local server, it speed will be throttled in 3 hours ~ 2 days. (Normal VPS)
Iran MAY use DPI to block your server. So private uses may not be safe too. I've written a small guide to route proxy with shadowsocks; or alternatively you can use kcptun. These methods are useful if you are using your proxy privately.
I DO NOT USE MTPROTO PROXY MYSELF. Use shadowsocks with Cloak(Highly Recommended) or wireguard or openvpn instead.
(If you are from Iran, you may need to open this link with VPN)
http://www.mediafire.com/folder/3zcys4aw9v232/Guide
https://www.reddit.com/r/Telegram/comments/95m5vi/how_to_deploy_mtproto_proxy_server_on_centos/
You can donate to me through bitcoin at 1XDgEkpnkJ7hC8Kwv5adfaDC1Z3FrkwsK, Ethereum at 0xbb527a28B76235E1C125206B7CcFF944459b4894, ZCash
at t1ZKYrYZCjxDYvo6mQaLZi3gNe2a6MydUo3 and Bitcoin Gold at GcNgxfyR3nnAsD3Nhuckvq14sXYuDFkK9P