XTLSVision项目地址：https://github.com/XTLS/Xray-core/discussions/1295
1、关闭防火墙或放行指定端口
ufwdisable
2、开启BBR加速
echo"net.core.default_qdisc=fq">>/etc/sysctl.conf
echo"net.ipv4.tcp_congestion_control=bbr">>/etc/sysctl.conf
sysctl-p
3、更新软件源
aptupdate
aptupgrade
aptfull-upgrade
4、安装组件
aptinstallsocat
5、安装Xray
bash-c"$(curl-Lhttps://github.com/XTLS/Xray-install/raw/main/install-release.sh)"@install--beta
6、生成uuid账号
cat/proc/sys/kernel/random/uuid
7、修改Xray配置文件
{
"log":{
"loglevel":"warning"
},
"routing":{
"domainStrategy":"IPIfNonMatch",
"rules":[
"type":"field",
"ip":[
"geoip:cn",
"geoip:private"
],
"outboundTag":"block"
}
]
"inbounds":[
"port":443,//端口
"protocol":"vless",
"settings":{
"clients":[
"id":"uuid",//uuid账号
"flow":"xtls-rprx-vision"//流控
"decryption":"none",
"fallbacks":[
"dest":12345,//回落到12345
"xver":1
"streamSettings":{
"network":"tcp",
"security":"tls",
"tlsSettings":{
"rejectUnknownSni":true,
"alpn":[
"http/1.1"
"certificates":[
"certificateFile":"/etc/ssl/private/fullchain.cer",//证书位置
"keyFile":"/etc/ssl/private/private.key"//私钥位置
"sniffing":{
"enabled":true,
"destOverride":[
"http",
"tls"
"port":12345,//12345端口配置
"listen":"127.0.0.1",
"protocol":"trojan",
"password":"password"//密码
"dest":80//回落到80端口
"security":"none",
"tcpSettings":{
"acceptProxyProtocol":true
"outbounds":[
"protocol":"freedom",
"tag":"direct"
"protocol":"blackhole",
"tag":"block"
8、申请安装证书
curlhttps://get.acme.sh|sh
aliasacme.sh=~/.acme.sh/acme.sh
acme.sh--upgrade--auto-upgrade
acme.sh--set-default-ca--serverletsencrypt
acme.sh--issue-d域名--standalone--keylengthec-256
acme.sh--install-cert-d域名--ecc--fullchain-file/etc/ssl/private/fullchain.cer--key-file/etc/ssl/private/private.key
chown-Rnobody:nogroup/etc/ssl/private/
9、安装Nginx
aptinstallnginx
10、修改nginx配置文件
userwww-data;
worker_processesauto;
pid/run/nginx.pid;
include/etc/nginx/modules-enabled/*.conf;
events{
worker_connections768;
http{
server{
listen80default_server;
listen[::]:80default_server;
location/{
proxy_passhttps://www.bing.com;#伪装网址
proxy_ssl_server_nameon;
proxy_redirectoff;
sub_filter_onceoff;
sub_filter"www.bing.com"$server_name;#伪装网址
proxy_set_headerHost"www.bing.com";#伪装网址
proxy_set_headerReferer$http_referer;
proxy_set_headerX-Real-IP$remote_addr;
proxy_set_headerUser-Agent$http_user_agent;
proxy_set_headerX-Forwarded-For$proxy_add_x_forwarded_for;
proxy_set_headerX-Forwarded-Protohttps;
proxy_set_headerAccept-Encoding"";
proxy_set_headerAccept-Language"zh-CN";
11、重新加载nginx
systemctlreloadnginx
12、查看nginx启动状态
systemctlstatusnginx
13、重启Xray
systemctlrestartxray
14、查看Xray启动状态
systemctlstatusxray
