FYI: ultimate security proxy with tor

[7v5w7go9ub0o]

Eugen Leitl wrote:
> FYI: http://howtoforge.com/ultimate-security-proxy-with-tor
> 
> Ultimate Security Proxy With Tor
> 
> Nowadays, within the growing web 2.0 environment you may want to have some anonymity, and use other IP addresses than your own IP. Or, for some special purposes - a few IPs or more, frequently changed. So no one will be able to track you. A solution exists, and it is called Tor Project, or simply tor. There are a lot of articles and howtos giving you the idea of how it works, I'm not going to describe here onion routing and its principles, I'll rather tell you how practically pull out the maximum out of it.
> 
> So, let's start.
> 
> Major disadvantages of tor, with all its benefits like security (however, tor manufacturers advice not to rely on its strong anonymity, because there are some cases, when it is possible to track young h4x0r...) are:
> 
> 1. Long enough session (60 seconds for one connection per one exit node, that means, that you will have one external IP for a minute)
> 2. Slow perfomance (request takes up to 20 seconds to complete, what makes surfing sites with lot of elements a disaster)
> 3. All the requests come through one node, and possibly route how your requests arrive can be calculated.
> 
> In order to fight these three we are going to use:
> 
> 1. 8 tor processes, each using separate spool directory
> 2. 8 privoxy processes, each configured to talk to separate tor.
> 3. First squid, with malware domains blacklist, will have 8 round robin cache peers configured. (squid-in)
> 4. Havp, with squid-in as parent. (Anti-virus proxy, using clamav :) )
> 5. Second squid, that will use havp as parent (squid-out). Users will connect to this one.
> 
> etc.
> 


Thanks for posting this.

IIUC, Squid sequentially accesses peer proxies. Alternatively, could one 
achieve the same benefit using iptables load-balancing and those peer 
proxies?

Would there be more sophisticated controls using one or the other (e.g. 
multiple requests when one peer slows down)?

TIA, Newbie