使用 Nginx 代理 V2ary 使用 https 协议

科学上网

实验平台：CentOS 7.4

Nginx版本：nginx/1.12.1

1.GitHub

https://github.com/v2fly/fhs-install-v2ray
https://github.com/v2ray/v2ray-core

2、安装 v2ray

$ wget https://install.direct/go.sh
$ bash go.sh
#已废弃
使用以下：
$ sudo bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh)
#会生成以下文件
installed: /usr/local/bin/v2ray
installed: /usr/local/bin/v2ctl
installed: /usr/local/share/v2ray/geoip.dat
installed: /usr/local/share/v2ray/geosite.dat
installed: /usr/local/etc/v2ray/config.json
installed: /var/log/v2ray/
installed: /var/log/v2ray/access.log
installed: /var/log/v2ray/error.log
installed: /etc/systemd/system/v2ray.service
installed: /etc/systemd/system/v2ray@.service

3.编辑配置文件

$ vim /usr/local/etc/v2ray/config.json

{
  "log": {
     "access": "/var/log/v2ray/access.log",
     "error": "/var/log/v2ray/error.log",
     "loglevel": "warning"
  },
  "inbounds": [{
    "address": "127.0.0.1",
    "port": 9318,
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id":"25c65699-31c2-43fe-9304-1d8f13164dbd",
          "level": 1,
          "alterId": 64,
          "security": "auto",
          "email": "linlikesi@gmail.com"
          #id:VMess 用户的主 ID。必须是一个合法的 UUID
          #alterId:为了进一步防止被探测，一个用户可以在主 ID 的基础上，再额外生成多个 ID。这里只需要指定额外的 ID 的数量，推荐值为 4。不指定的话，默认值是 0。最大值 65535。这个值不能超过服务器端所指定的值。
          #level:用户等级
          #security：security: "aes-128-gcm" | "chacha20-poly1305" | "auto" | "none"
          #加密方式，客户端将使用配置的加密方式发送数据，服务器端自动识别，无需配置
          #"aes-128-gcm"：推荐在 PC 上使用
          #"chacha20-poly1305"：推荐在手机端使用
          #"auto"：默认值，自动选择（运行框架为 AMD64、ARM64 或 s390x 时为aes-128-gcm加密方式，其他情况则为 Chacha20-Poly1305 加密方式）
          #"none"：不加密
        },
        {
          "id":"85bf9010-af32-4e6a-96df-1daf28f81864",
          "level": 1,
          "alterId": 64,
          "email": "linlikesi@phone.com"
        }
      ]
    },
    "streamSettings": {
         "network": "ws",
         "wsSettings": {
                 "path": "/upload/file"
        }
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  },{
    "protocol": "blackhole",
    "settings": {},
    "tag": "blocked"
  }],
  "routing": {
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private"],
        "outboundTag": "blocked"
      }
    ]
   }
}

4.创建伪装路径

$ mkdir /upload/
$ touch file

3.安装 Nginx

$ yum -y install nginx

4.编辑 Nginx 配置文件

$ vim /etc/nginx/conf.d/vpn.conf

server {
        listen 443 ssl http2 default_server;
        server_name ***.***.***;

        ssl_certificate /etc/nginx/*.pem;
        ssl_certificate_key /etc/nginx/*.key;

        location /upload/file {
                proxy_redirect off;
                proxy_pass      http://127.0.0.1:9318;
                proxy_http_version      1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_set_header Host $http_host;
        }

        location / {
                root /etc/nginx/;
        }
}

5.连接方式

地址:*
端口:443
用户id:
额外id:64
加密方式:自动
传输协议:ws
伪装域名:*
路径:/upload/file
底层传输安全:tls

6.客户端

• exe

https://github.com/2dust/v2rayN

• Android

https://github.com/2dust/v2rayNG

Over~

1177 0 2020-09-02

打赏一下，各位朋友请随意打赏！

×

如果觉得我的文章对你有用，请随意赞赏

取消