Why do you need to set up your own dedicated IP?
Many people ask as soon as they come up, wouldn't it be better to directly use a ready-made proxy IP service? Why bother setting up your own server? This is true, but not entirely true. If you only use it occasionally, such as checking information, then it is enough to just use the dynamic residential IP provided by a service provider like ipipgo, which is convenient and worry-free. But if you are doing a job that requires IP, such as requiring a stable connection for a long time, or having extremely high requirements for the purity of the IP (you know), then an exclusive IP that is completely controlled by you will have great advantages.
The most direct benefit is gachas. This IP is only for your use. No one has done anything messy with it before, so the risk of being blocked is naturally low. The second is estabilizar. The line and bandwidth are exclusive to you. It will not be like the IP in the shared pool, where the speed is fast and slow, and the connection is disconnected at every turn. Finally, it is controllable. You can configure it however you want, giving you full freedom.
Choosing the right server is half the battle
The first step in setting up a proxy server is to get an overseas cloud server. If you choose the wrong step, there will be many pitfalls later. Don't just look at the cheap price, the key is the quality of the line. For example, if your target users are mainly in Southeast Asia, then if you choose a server on the West Coast of the United States, it may be higher.
Here is a little tip. You can first find a service provider like ipipgo. They provide static residential proxy IPs, covering high-quality ISPs around the world, and the lines are very stable. You can buy a short-term one first and test the speed of connecting to different computer rooms from the target area to help you determine which computer room is most suitable. This is much more reliable than blind selection. ipipgo has 500,000+ static residential IP resources, which are accurate to city-level positioning. It is very suitable for this kind of preliminary testing.
There is no need to pursue top-end server configurations. The basic configuration of 1 core and 1G memory is enough to run a proxy service. The key point is that the bandwidth must be sufficient, preferably one that is billed by traffic or that provides relatively generous bandwidth.
Step by step configuration of Squid proxy service
After the server is installed, we have to install the agent software on it. Here we use the most classic Squid as an example. It is stable and relatively simple to configure. The following is a set of almost universal installation and basic configuration processes. You can just follow the commands.
Connect to your server using SSH, update the system and install Squid:
sudo apt update
sudo apt install squid -y
After the installation is complete, it is a good habit to back up the default configuration file:
sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.backup
Next, let’s modify Squid’s main configuration file /etc/squid/squid.conf. You can open it with nano or vim editor.
sudo nano /etc/squid/squid.conf
Find or add the following key configuration items. Note, it is very important to replace `your_server_ip` with the actual public IP address of your server!
设置Squid监听的端口和IP，这里表示监听所有IP的3128端口
http_port 3128
定义访问控制列表（ACL）
acl localnet src 0.0.0.0/0 这里简单允许所有来源，生产环境要收紧
允许定义的ACL进行访问
http_access allow localnet
默认拒绝所有其他访问（这条规则通常默认存在，确保它在最后）
http_access deny all
可见主机名，填写你的服务器IP或域名
visible_hostname your_server_ip
After saving and exiting, start the Squid service and set it to start automatically at boot:
sudo systemctl start squid
sudo systemctl enable squid
Don’t forget to release the 3128 port we just set in the server’s fire proxy (taking UFW as an example):
sudo ufw allow 3128
Now, your exclusive proxy server is theoretically up and running! You can try configuring the proxy in the local network tool. Fill in your server IP for the address and 3128 for the port.
Don’t be careless about security settings
The server is exposed on the public Internet, and security is a top priority. The above configuration is for testing whether it works. If you really want to use it, you can't be so "open".
First, restrict access to IP. It's best to only allow IP addresses you commonly use to connect to the proxy. Change `acl localnet src 0.0.0.0/0` in the configuration to `acl myoffice src your office IP/32`, and then change `http_access allow localnet` to `http_access allow myoffice`.
Second, change the port. 3128 is the default port and is easily scanned. Changing to a less commonly used high port, such as 54321, can reduce a lot of unnecessary harassment.
Third, consider certification. If it is inconvenient to restrict IP, you can add username and password authentication to the agent. Squid supports multiple authentication methods, such as Basic Auth. Although it is not top-level security, it is better than nothing.
Common rollover scenes and first aid guide (QA)
Q1: There is no response at all after connecting to the agent. It times out?
A: 90% of the time it’s a network problem. First ping your server IP and see if it makes any sense. If it fails, the server may not be started or the fire proxy may not have a port opened. If the ping succeeds but the proxy cannot be connected, go back and check whether the port settings in the Squid configuration file and the order of the http_access rules are correct.
Q2: It worked fine at first, but suddenly I can’t connect?
A: First check the server status sudo systemctl status squid to see if the Squid process has crashed. If the service is good, it is likely that your IP has been recognized as a proxy IP by the target website and has been blocked. This is why for high-frequency and high-demand services, I recommend directly using ipipgo’s exclusive IP solution. They provide pure residential IP, and the probability of being blocked is much lower, which saves worry.
Q3: The speed is as slow as a snail, what should I do?
A: Speed is affected by server bandwidth, line quality, and physical distance. You can try changing the location of the server room or upgrading the server bandwidth. If you have extreme requirements for speed, such as TikTok live broadcast without lag, then the ordinary VPS you set up may not be enough. You can consider ipipgo's TikTok solution, which is a specially optimized exclusive high-speed channel.
Q4: How do you choose to build and use a service like ipipgo yourself?
A: It depends on your needs. Build it yourself, the cost is controllable, and it is completely independent. It is suitable for technology enthusiasts or users with specific customization needs. Using ipipgo's services is essentially solving problems with professionalism. You don’t need to worry about trivial matters such as server maintenance, IP blocking, and line optimization. They provide a dynamic residential IP pool of up to 90 million+, static residential IPs that are pure and stable, and various solutions for specific scenarios (such as cross-border e-commerce, data collection), allowing you to focus more on the business itself. For the vast majority of enterprises and users pursuing stable efficiency, the latter has a higher input-output ratio.
Two final words
Deploying an exclusive proxy server from scratch is a very fulfilling thing. It can help you deeply understand what a network proxy is all about. But we have to be realistic, not all scenarios are suitable for you to toss around. If your business requires high availability, high anonymity, or large-scale IP resources, then it is often a wiser choice to leave professional matters to professional service providers, such as ipipgo. Their products such as static residential agents and cross-border dedicated lines are designed for this type of demand. Hopefully this guide will help you make the decision that’s best for you.
