加载中...

搭建ssr,增强混淆协议,防止被Q

前言:上个月用 hostwinds 搭 ssr 来着,奈何也是经常被强,稍微百度了以下。原来在搭建 ssr 的时候选择的协议和混淆分别是:Original、Plain。 好像是这样的拼写吧。这都不重要,重要的是这样的协议和混淆容易被 GFW 检测到,以致封端口、IP。所以,万能的百度是无所不能的。😄

直接获取请直接移动至文末

😋 重磅脚本

具体请见github:https://github.com/lonuslan/SSR.Go

如果你的 VPS 刚刚新装过系统,强烈建议你输入以下命令,重启并再次连接,否则安装的过程中,会出现各种各样未知的问题。

I really recommend you to restart your VPS when your installed system just now and you need to reconnect it manual in order to avoid lots of unknown mistakes.

reboot

然后开始安装此工具(简体中文版)。

bash -c "$(curl -fsSL https://git.io/fNpuL)"

And then you can install it ( An English version ).

bash -c "$(curl -fsSL https://git.io/fAUCt)"

需要注意的是,简体中文版 SSR.Go 和英文版 SSR.Go 只能同时使用其中的一个,不可共存。

You need to consider that only one version of simplified Chinese or English version of SSR.Go can run on your environment.

老用户升级过程中,会出现以下提示,这是由于旧的安装脚本,先将主程序解压到本地 /usr/local/目录中,再将 shadowsocksr 目录中的单用户版 ssr 程序目录:shadowsocks 移动到上一级目录后,没有清理存储在 shadowsocksr 目录中的 gitclone 缓存导致的,你只需要输入大写的 A ,继续即可。新版本的脚本已对这一问题做了调整。

Old users should notice that the following reminds because the former installation unzipped "manyusr.zip" to /usr/local direction created a "shadowsocksr" folder and then shell moved ssr single user's main program which included in many-user(shadowsocksr) to /usr/local, so this folder contains two folders: "shadowsocks" and "shadowsocksr". Cache belongs to gitclone had been storaged in shadowsocksr before so when it updates, Git will ask you whether replace shadowsocksr/.gitingnore. Just press "A: will be okay.

🐹 特性(Specs)

  1. 一键部署 ShadowSocksR 和 SSR.Go,无需额外设置运行环境

Once bash command, ShadowSocksR with it's manager————SSR.Go and included operating environment will be installed.

  1. 在你的 VPS 里的任意位置,输入 ssr 即可启动,对话框式操作界面,方便快捷

It's so convince that you just need input "ssr" to run it everywhere in your Linux system then dialog operation will lead you to config with ShadowSocksR.

  1. 默认采用最新版实验型协议————akarrin 系列,抗封锁能力较强,目前只有 Windows 客户端支持,手机/路由器均不能用,但仍然强烈建议使用,下载链接:ShadowsocksR-win-4.9.0.zip-dev

注:GitHub 下载缓慢的见文末另附下载方式。

Use akarrin series protocol as ShadowSocksR's config, **I recommend this protocol because it has strong anti-blocking ability but it can only supported on Windows and doesn't work on smartphone or wireless-router.**Press it to download: ShadowsocksR-win-4.9.0.zip-dev.

  1. 可快速直观地生成、查看客户端配置信息,无需费劲巴拉地手动修改 config.json 文件。

You can quickly and intuitively generate, look up client configurate information instead of manually modifiy a fuckin "config.json" which you don't have any patient to deal with!

  1. 专为 CentOS 6/7 解决了复杂的二维码生成组件配置环境(你知道我 TM 花了多大劲吗!),你可以在 CentOS 系统上愉快地使用它们。

Especially complained a complex compatibility problem about qrcode generation library on CentOS 6/7(do you know how much fuckin difficult I had suffered!), now you can have a perfect experience on CentOS.

  1. 有关新特性————“重定向”参数的一些说明:

设置重定向,意味着当来访的请求不符合 ShadowSocksR 数据包类型的时候,ShadowSocksR 会自动将该请求重定向到本机的或其他域的空间

典型的配置,是将外界访问本机 80、443 端口且不符合以上规则的请求,全部重定向到本机的某个端口,然后由 Apache、Nginx 或 Caddy 来监听该端口,实现 ShadowSocksR 在正常网站背后的隐藏或反代功能。

由于无法完全确定您使用了何种 Web 服务器,何种配置,本功能仅对 ShadowSocksR 配置文件中的重定向参数进行设置,本来有引入一键安装 Caddy 并申请加密证书的计划。但 Web 服务器的用途广泛,配置、需求不一,为了尽量避免对您的生产环境造成干扰,造成配置絮乱,烦请您后续还要手动在 Web 服务器里做好相应的监听设置,敬请谅解

本脚本除了在安装、卸载功能里,添加可供 ShadowSocksR 所有正常功能运行的全部依赖以外,在日常配置的过程中,仅对 ShadowSocksR 的配置文件进行修改,不会干涉您运行环境中其他组件的组织和运行。

设置好重定向功能后,ShadowSocksR 的主通信端口会被还原为 443,若曾用过本脚本设置重定向,取消配置后主端口仍为 443。

Once after configuring redirection, Request datatype ingress to server which don't correspond with ShadowSocksR will be redirected to localhost or another domain automatically.

A default configuration is setting all ingress request by 80/443 port redirect to localhost by some-port which you have configurated and then let a Web server(Apache, Nginx or Caddy) to listen to it so you can achieve ShadowSocksR hide behind in an normal website or set up reverse proxy.

Because this shell can't distinguish that which Web server you had installed and which configuration you had set, I originally have a plan to provide caddy's one-key installation and apply https certificate at the begging. But I found that there are so many different Web servers and various configurations, according to cause less consequence to your normal production environment or do not disturb your formal configuration. I'm sorry to explain and hope you to config Nginx listen to somewhere redirected by ShadowSocksR for example manually.

My aims to write this shell is to set up ShadowSocksR's config and as far as possible to reduce any accident(regardless of profits or consequence) influence to your execute environment with many important componets.

细节还请参考原文:
https://github.com/lonuslan/SSR.Go

注:2020 年 9 月 18 日更新

参考以下步骤:
如果您的伺务器刚刚开通,强烈建议您按照如下步骤进行安装..

运行如下脚本。

wget -N --no-check-certificate https://raw.githubusercontent.com/ToyoDAdoubi/doubi/master/ssr.sh
&& chmod +x ssr.sh 
&& bash ssr.sh
  1. 按照提示先安装 shadowsocksR ,再安装 libsodium

    2 升级 CentOS 系统内核
    参考: https://blog.csdn.net/u012739198/article/details/90108131

  2. 运行本文脚本:

    bash -c "$(curl -fsSL https://git.io/fNpuL)"
    
  3. 按照引导设置。(协议和混淆建议选择文中推荐的)。

  4. 下载文末客户端使用。

windows 客户端附件 --(解压请使用7ZIP软件)


标题:搭建ssr,增强混淆协议,防止被Q
作者:lonuslan
地址:https://www.lonuslan.com/articles/2020/05/02/1588410466081.html


评论