Sing-Box Reality 节点搭建教程

-

1. 手动安装

执行以下命令来安装 sing-box：

bash <(curl -fsSL https://sing-box.app/deb-install.sh)

2. sing-box 服务端配置

在 /etc/sing-box/config.json 中写入以下配置。请务必替换 server_name、private_key 和 uuid 为您自己的信息。

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "alidns",
        "address": "https://223.5.5.5/dns-query",
        "strategy": "ipv4_only",
        "detour": "direct"
      },
      {
        "tag": "cloudflare",
        "address": "https://1.1.1.1/dns-query",
        "strategy": "ipv4_only",
        "detour": "direct"
      },
      {
        "tag": "block",
        "address": "rcode://success"
      }
    ],
    "rules": [
      {
        "rule_set": ["geosite-cn"],
        "server": "alidns",
        "rule_set_ip_cidr_accept_empty": true
      },
      {
        "rule_set": ["geosite-category-ads-all"],
        "server": "block",
        "rule_set_ip_cidr_accept_empty": true
      }
    ],
    "final": "cloudflare",
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "vless",
      "tag": "vless-in",
      "listen": "::",
      "listen_port": 443,
      "users": [
        {
          "uuid": "d76342ab-9f10-45ab-a573-9a27c47cdefd",
          "flow": "xtls-rprx-vision"
        }
      ],
      "tls": {
        "enabled": true,
        "server_name": "www.nhk.or.jp",
        "reality": {
          "enabled": true,
          "handshake": {
            "server": "www.nhk.or.jp",
            "server_port": 443
          },
          "private_key": "SOeAsvoPhjty-rrwxVW88At7wm3pxGvfLt9gBkC4rlc",
          "short_id": [
            "c845cf683a33a580"
          ]
        }
      }
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": ["dns"],
        "action": "hijack-dns"
      },
      {
        "rule_set": ["geosite-category-ads-all"],
        "action": "reject"
      },
      {
        "rule_set": ["geoip-cn", "geosite-cn"],
        "action": "route",
        "outbound": "direct"
      }
    ],
    "rule_set": [
      {
        "tag": "geoip-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs",
        "download_detour": "direct",
        "update_interval": "24h"
      },
      {
        "tag": "geosite-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-cn.srs",
        "download_detour": "direct",
        "update_interval": "24h"
      },
      {
        "tag": "geosite-category-ads-all",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-category-ads-all.srs",
        "download_detour": "direct",
        "update_interval": "24h"
      }
    ],
    "auto_detect_interface": true,
    "final": "direct"
  },
  "experimental": {
    "cache_file": {
      "enabled": true,
      "path": "cache.db",
      "cache_id": "mycacheid",
      "store_fakeip": true
    }
  }
}

3. 服务管理

使用 systemd 管理 sing-box 服务：

# 启动服务
systemctl start sing-box

# 设置开机自启
systemctl enable sing-box

# 查看服务状态
systemctl status sing-box

# 查看实时日志
journalctl -u sing-box --output cat -f

4. 启用 BBR

为了优化网络性能，建议启用 BBR 拥塞控制算法：

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p

执行后，使用以下命令检查 BBR 是否成功启用：

lsmod | grep bbr

5. sing-box 客户端配置

这是一个示例客户端配置，请根据您的服务端信息进行修改：

{
  "dns": {
    "servers": [
      {
        "tag": "alidns",
        "address": "https://223.5.5.5/dns-query",
        "strategy": "ipv4_only",
        "detour": "direct"
      },
      {
        "tag": "cloudflare",
        "address": "https://1.1.1.1/dns-query",
        "strategy": "ipv4_only",
        "detour": "proxy"
      },
      {
        "tag": "block",
        "address": "rcode://success"
      }
    ],
    "rules": [
      {
        "rule_set": ["geosite-cn"],
        "server": "alidns",
        "rule_set_ip_cidr_accept_empty": true
      },
      {
        "rule_set": ["geosite-category-ads-all"],
        "server": "block",
        "rule_set_ip_cidr_accept_empty": true
      }
    ],
    "final": "cloudflare",
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "address": "172.19.0.1/30",
      "mtu": 1500,
      "auto_route": true,
      "strict_route": true,
      "stack": "system",
      "platform": {
        "http_proxy": {
          "enabled": true,
          "server": "127.0.0.1",
          "server_port": 2080
        }
      }
    },
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080,
      "sniff": true,
      "users": []
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "type": "selector",
      "outbounds": [
        "auto",
        "direct",
        "sing-box-reality"
      ]
    },
    {
      "type": "vless",
      "tag": "sing-box-reality",
      "server": "141.147.179.207",
      "server_port": 443,
      "uuid": "d76342ab-9f10-45ab-a573-9a27c47cdefd",
      "flow": "xtls-rprx-vision",
      "tls": {
        "enabled": true,
        "server_name": "www.nhk.or.jp",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        },
        "reality": {
          "enabled": true,
          "public_key": "ZlTqXYDaMSa3EuiGqa7k8kzlAQ3o3ron_CNndNRc52U",
          "short_id": "c845cf683a33a580"
        }
      },
      "packet_encoding": "xudp"
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "tag": "auto",
      "type": "urltest",
      "outbounds": [
        "sing-box-reality"
      ],
      "url": "http://www.gstatic.com/generate_204",
      "interval": "1m",
      "tolerance": 50
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": ["dns"],
        "action": "hijack-dns"
      },
      {
        "inbound": ["tun-in", "mixed-in"],
        "action": "sniff"
      },
      {
        "rule_set": ["geosite-category-ads-all"],
        "action": "reject"
      },
      {
        "ip_is_private": true,
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_suffix": [".cn"],
        "action": "route",
        "outbound": "direct"
      },
      {
        "rule_set": ["geoip-cn", "geosite-cn", "geosite-private"],
        "action": "route",
        "outbound": "direct"
      },
      {
        "clash_mode": "direct",
        "action": "route",
        "outbound": "direct"
      },
      {
        "clash_mode": "global",
        "action": "route",
        "outbound": "proxy"
      },
      {
        "domain": [
          "clash.razord.top",
          "yacd.metacubex.one",
          "yacd.haishan.me",
          "d.metacubex.one"
        ],
        "action": "route",
        "outbound": "direct"
      }
    ],
    "rule_set": [
      {
        "tag": "geoip-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs",
        "download_detour": "proxy",
        "update_interval": "24h"
      },
      {
        "tag": "geosite-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-cn.srs",
        "download_detour": "proxy",
        "update_interval": "24h"
      },
      {
        "tag": "geosite-private",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-private.srs",
        "download_detour": "proxy",
        "update_interval": "24h"
      },
      {
        "tag": "geosite-category-ads-all",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-category-ads-all.srs",
        "download_detour": "proxy",
        "update_interval": "24h"
      }
    ],
    "auto_detect_interface": true,
    "final": "proxy"
  },
  "experimental": {
    "clash_api": {
      "external_controller": "0.0.0.0:9090",
      "external_ui": "dashboard",
      "secret": "",
      "default_mode": "rule",
      "access_control_allow_origin": [
        "http://127.0.0.1",
        "http://yacd.haishan.me"
      ],
      "access_control_allow_private_network": true
    },
    "cache_file": {
      "enabled": true,
      "path": "cache.db",
      "cache_id": "mycacheid",
      "store_fakeip": true
    }
  }
}

Comments

Post a Comment

Popular posts from this blog

VLESS-XTLS-Vision-uTLS-REALITY Setup Guide

-
  本配置TLS 由 REALITY 取代，可消除服务端 TLS 指纹特征，仍有前向保密性等，且证书链攻击无效，安全性超越常规 TLS。可指向别人的网站，无需自己买域名、配置 TLS 服务端，更方便，实现向中间人呈现指定 SNI 的全程真实 TLS，可解决 SNI 名单阻断问题。 #安装并将 Xray-core 升级到预发布版本 bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install 服务端配置(修改/usr/local/etc/xray/config.json) { "log" : { "loglevel" : "info" }, "routing" : { "domainStrategy" : "IPIfNonMatch" , "rules" : [ { "type" : "field" , "domain" : [ "geosite:category-ads-all" ], "outboundTag" : "block" }, { "type" : "field" , "ip" : [ "geoip:cn" ], "outboundTag" : "block" } ] }, "inbounds" : [ { "listen" : "0.0.0.0" , "por...
Read more

sing-box warp解锁abematv和chatgpt

-
  sing-box简介 Sing-box 是一个开源的通用代理平台，以其高性能、灵活性和广泛的协议支持而著称，被誉为网络代理的“瑞士军刀”。它支持多种操作系统，包括 Windows、macOS、Linux、Android 和 iOS，适用于创建代理服务器、客户端和透明代理。 广泛的协议支持：支持 Shadowsocks、Vmess、Trojan、Hysteria、ShadowTLS、VLESS、Socks、HTTP 等多种代理协议，满足多样化的网络需求。 灵活的配置：使用 JSON 格式配置文件，允许用户自定义复杂的路由规则和网络流量管理。配置文件包括日志、DNS、入口、出口、路由等模块，功能强大但配置相对复杂。 跨平台兼容性：支持多平台运行，Android 版本通过 VpnService 提供 TUN 透明代理功能，iOS 版本则支持本地和远程配置文件管理，操作简便。 高效性能：设计注重性能优化，支持一键安装和自动化证书管理（如 Let’s Encrypt），确保高效和安全的网络连接。 开源与社区支持：遵循 GNU General Public License v3.0，由 SagerNet 开发，拥有活跃的社区支持和定期更新。 WARP 和 WireGuard 节点简介 Cloudflare WARP 是一个基于 WireGuard 协议的 VPN 服务，通过 Cloudflare 的全球网络提供安全、高效的网络连接，支持 IPv4 和 IPv6 双栈，适用于隐私保护、网络加速及绕过地域限制。WARP 使用 Cloudflare 的 BoringTun（WireGuard 的用户空间实现），通过其边缘节点加密并优化网络流量。 WireGuard 节点 是指 WARP 使用的 WireGuard 协议配置中的服务器端点（endpoint），通常表现为一个 IP 地址或域名（如 engage.cloudflareclient.com:2408）以及对应的公钥和私钥对，用于建立安全的点对点隧道连接。提取 WARP 的 WireGuard 节点可以让用户在非官方 WARP 客户端的设备上（如 Linux VPS 或路由器）使用 WARP 服务，增加灵活性。 ABEMA 简介 ABEMA 是一家日本流媒体服务平台，最初于2016年4月11日以 AbemaTV 的...
Read more