pptp dial-up server: steps to build a private server and protocol analysis

Can you be a network engineer at home? Private PPTP servers by hand!

A lot of friends have been asking lately how to get a private server on their own, especially with theproxy IPTo improve network flexibility. Today, we will break open the rubbing of this PPTP dial-up server to build the door, to ensure that you can get started after reading the operation.

What the heck is the PPTP protocol?

Simply put, it's a "network tunneler" that packages and encrypts your network traffic for transmission. Compared with the popular L2TP and SSTP protocols, PPTP is like acourier boy-Simple packaging but fast delivery, especially good for scenarios where a connection needs to be established quickly.

Five Steps to Build a Foolproof Tutorial

1. Preparation tablescloud server(Don't buy domestic, recommend AliCloud Hong Kong node)
2. Find [Network and Security] - [Configuration] in the console.
3. Enable PPTP service and setupshared key(Don't use passwords like 123456!)
4. Remember to check "MS-CHAP v2″ authentication when creating user accounts.
5. Create a new connection on the local computer, fill in the server IP and account password.

Tips for using proxy IPs

Here's the kicker.ipipgoThe proxy service of their home residential IP covers more than 240 countries around the world. For example, if you configure a U.S. IP on a Hong Kong server, you can instantly get a localized network environment. The actual test when using his home dynamic IP, the connection success rate can be improved about 40%.

Here's a tip: add two lines to the pptp.conf configuration file:
proxy-arp = yes
plugin pptp.so
This trick allows the server to automatically adapt IP segments for different regions

Frequently Asked Questions First Aid Kit

Q: Internet speed becomes turtle after connecting?
A: Eighty percent of the server bandwidth is not enough, or proxy IP quality is not good. It is recommended to change to ipipgo's static residential IP, their line optimization does have a set of

Q: Can't connect my cell phone to the server all the time?
A：Check the system time of your cell phone, incorrect time zone will lead to certificate verification failure. Remember to turn off the proxy in the APN settings for Android machines.

Q: Why can't I get on the Internet even though the connection is successful?
A: Try running this command on the server:
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
This is the ancestral recipe for solving NAT forwarding problems

Safety and security cannot be underestimated

Don't think that everything will be fine if you build a server! There was a case last year where a company's server was used by hackers as a broiler for three months because they didn't change the default port (1723). It is recommended to do these three things:
1. Monthly change of connection password
2. Access whitelisting with ipipgo's IP pools
3. Install a fail2ban on the server to prevent blasting.

To be honest, building your own server is really not as hassle-free as using a ready-made service directly. Like ipipgo, which specializes in proxy IP, not only has abundant IP resources, but also supports full protocol adaptation. In particular, theirResidential IP qualityIt's a great way to run automated scripts or data collection, and it's a lot less work than building your own server.