k
/
v2ray
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add VLESS_WebSocket_TLS

Browse Source
pull/690/head
233boy 4 years ago
parent 750dcfc5d6
commit 8e944269f7
12 changed files with 503 additions and 344 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 150
      config/client/vless_ws_tls.json
  2. 113
      config/server/vless_ws.json
  3. 132
      install.sh
  4. 2
      src/caddy-config.sh
  5. 18
      src/download-caddy.sh
  6. 9
      src/mtproto.sh
  7. 1
      src/transport.sh
  8. 88
      src/uninstall.sh
  9. 32
      src/v2ray-info.sh
  10. 8
      src/vmess-config.sh
  11. 196
      v2ray.sh

150
config/client/vless_ws_tls.json
Unescape View File

@ -0,0 +1,150 @@
{
"outbounds": [
{
"protocol": "vless",
"settings": {
"vnext": [
{
"address": "233blog.com",
"port": 2333,
"users": [
{
"id": "e55c8d17-2cf3-b21a-bcf1-eeacb011ed79",
"encryption": "none",
"security": "auto"
}
]
}
]
},
"streamSettings": {
"network": "ws",
"security": "tls",
"tlsSettings": {
"serverName": "233blog.com"
},
"wsSettings": {
"path": "/233blog",
"headers": {
"Host": "233blog.com"
}
}
},
"mux": {
"enabled": true
}
},
{
"protocol": "freedom",
"settings": {},
"tag": "direct"
},
{
"protocol": "blackhole",
"settings": {},
"tag": "blocked"
},
{
"protocol": "dns",
"tag": "dns-out"
}
],
"inbounds": [
{
"port": "1099",
"protocol": "dokodemo-door",
"settings": {
"network": "tcp,udp",
"timeout": 0,
"followRedirect": true
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls"]
}
},
{
"port": 2133,
"tag": "dns-in",
"protocol": "dokodemo-door",
"settings": {
"address": "119.29.29.29",
"port": 53,
"timeout": 0,
"network": "tcp,udp"
}
},
{
"port": 2333,
"protocol": "socks",
"settings": {
"auth": "noauth",
"udp": true
}
},
{
"port": 6666,
"protocol": "http",
"settings": {
"auth": "noauth",
"udp": true
}
}
],
"dns": {
"servers": [
{
"address": "119.29.29.29",
"port": 53,
"domains": [
"geosite:cn"
],
"expectIPs": [
"geoip:cn"
]
},
{
"address": "1.1.1.1",
"port": 53,
"domains": [
"geosite:geolocation-!cn"
]
},
"8.8.8.8",
"localhost"
]
},
"routing": {
"domainStrategy": "IPOnDemand",
"rules": [
{
"type": "field",
"inboundTag": [
"dns-in"
],
"outboundTag": "dns-out"
},
{
"type": "field",
"ip": [
"geoip:private"
],
"outboundTag": "blocked"
},
{
"type": "field",
"ip": [
"geoip:cn"
],
"outboundTag": "direct"
},
{
"type": "field",
"domain": [
"geosite:cn"
],
"outboundTag": "direct"
}
]
}
}

113
config/server/vless_ws.json
Unescape View File

@ -0,0 +1,113 @@
{
"log": {
"access": "/var/log/v2ray/access.log",
"error": "/var/log/v2ray/error.log",
"loglevel": "warning"
},
"inbounds": [
{
"port": 2333,
"protocol": "vless",
"settings": {
"clients": [
{
"id": "e55c8d17-2cf3-b21a-bcf1-eeacb011ed79",
"level": 1,
"alterId": 233
}
],
"decryption": "none"
},
"listen": "127.0.0.1",
"streamSettings": {
"network": "ws"
},
"sniffing": {
"enabled": true,
"destOverride": [
"http",
"tls"
]
}
}
//include_ss
//include_socks
//include_mtproto
//include_in_config
//
],
"outbounds": [
{
"protocol": "freedom",
"settings": {
"domainStrategy": "UseIP"
},
"tag": "direct"
},
{
"protocol": "blackhole",
"settings": {},
"tag": "blocked"
},
{
"protocol": "mtproto",
"settings": {},
"tag": "tg-out"
}
//include_out_config
//
],
"dns": {
"servers": [
"https+local://cloudflare-dns.com/dns-query",
"1.1.1.1",
"1.0.0.1",
"8.8.8.8",
"8.8.4.4",
"localhost"
]
},
"routing": {
"domainStrategy": "IPOnDemand",
"rules": [
{
"type": "field",
"ip": [
"0.0.0.0/8",
"10.0.0.0/8",
"100.64.0.0/10",
"127.0.0.0/8",
"169.254.0.0/16",
"172.16.0.0/12",
"192.0.0.0/24",
"192.0.2.0/24",
"192.168.0.0/16",
"198.18.0.0/15",
"198.51.100.0/24",
"203.0.113.0/24",
"::1/128",
"fc00::/7",
"fe80::/10"
],
"outboundTag": "blocked"
},
{
"type": "field",
"inboundTag": ["tg-in"],
"outboundTag": "tg-out"
}
//include_ban_xx
//include_ban_bt
//include_ban_ad
//include_rules
//
]
},
"transport": {
"kcpSettings": {
"uplinkCapacity": 100,
"downlinkCapacity": 100,
"congestion": true
}
}
}

132
install.sh
Unescape View File

@ -110,6 +110,7 @@ transport=(
QUIC_wechat-video_dynamicPort
QUIC_dtls_dynamicPort
QUIC_wireguard_dynamicPort
VLESS_WebSocket_TLS
)
ciphers=(
@ -175,7 +176,7 @@ v2ray_config() {
read -p "$(echo -e "(默认协议: ${cyan}TCP$none)"):" v2ray_transport
[ -z "$v2ray_transport" ] && v2ray_transport=1
case $v2ray_transport in
[1-9] | [1-2][0-9] | 3[0-2])
[1-9] | [1-2][0-9] | 3[0-3])
echo
echo
echo -e "$yellow V2Ray 传输协议 = $cyan${transport[$v2ray_transport - 1]}$none"
@ -192,7 +193,7 @@ v2ray_config() {
}
v2ray_port_config() {
case $v2ray_transport in
4 | 5)
4 | 5 | 33)
tls_config
;;
*)
@ -215,7 +216,7 @@ v2ray_port_config() {
;;
esac
done
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
v2ray_dynamic_port_start
fi
;;
@ -331,7 +332,7 @@ tls_config() {
while :; do
echo
echo -e "请输入一个 $magenta正确的域名$none，一定一定一定要正确，不！能！出！错！"
echo -e "请输入一个 ${magenta}正确的域名${none}，一定一定一定要正确，不！能！出！错！"
read -p "(例如：233blog.com): " domain
[ -z "$domain" ] && error && continue
echo
@ -372,7 +373,7 @@ tls_config() {
done
if [[ $v2ray_transport -ne 5 ]]; then
if [[ $v2ray_transport -eq 4 ]]; then
auto_tls_config
else
caddy=true
@ -683,7 +684,7 @@ install_info() {
echo
echo -e "$yellow V2Ray 传输协议 = $cyan${transport[$v2ray_transport - 1]}$none"
if [[ $v2ray_transport == [45] ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]]; then
echo
echo -e "$yellow V2Ray 端口 = $cyan$v2ray_port$none"
echo
@ -701,7 +702,7 @@ install_info() {
echo
echo -e "$yellow 路径分流 = ${cyan}/${path}$none"
fi
elif [[ $v2ray_transport -ge 18 ]]; then
elif [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
echo
echo -e "$yellow V2Ray 端口 = $cyan$v2ray_port$none"
echo
@ -826,74 +827,6 @@ install_v2ray() {
_mkdir_dir
}
open_port() {
if [[ $cmd == "apt-get" ]]; then
if [[ $1 != "multiport" ]]; then
iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
iptables -I INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
ip6tables -I INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
ip6tables -I INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
# firewall-cmd --permanent --zone=public --add-port=$1/tcp
# firewall-cmd --permanent --zone=public --add-port=$1/udp
# firewall-cmd --reload
else
local multiport="${v2ray_dynamic_port_start_input}:${v2ray_dynamic_port_end_input}"
iptables -I INPUT -p tcp --match multiport --dports $multiport -j ACCEPT
iptables -I INPUT -p udp --match multiport --dports $multiport -j ACCEPT
ip6tables -I INPUT -p tcp --match multiport --dports $multiport -j ACCEPT
ip6tables -I INPUT -p udp --match multiport --dports $multiport -j ACCEPT
# local multi_port="${v2ray_dynamic_port_start_input}-${v2ray_dynamic_port_end_input}"
# firewall-cmd --permanent --zone=public --add-port=$multi_port/tcp
# firewall-cmd --permanent --zone=public --add-port=$multi_port/udp
# firewall-cmd --reload
fi
iptables-save >/etc/iptables.rules.v4
ip6tables-save >/etc/iptables.rules.v6
# else
# service iptables save >/dev/null 2>&1
# service ip6tables save >/dev/null 2>&1
fi
}
del_port() {
if [[ $cmd == "apt-get" ]]; then
if [[ $1 != "multiport" ]]; then
# if [[ $cmd == "apt-get" ]]; then
iptables -D INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
iptables -D INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
ip6tables -D INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
ip6tables -D INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
# else
# firewall-cmd --permanent --zone=public --remove-port=$1/tcp
# firewall-cmd --permanent --zone=public --remove-port=$1/udp
# fi
else
# if [[ $cmd == "apt-get" ]]; then
local ports="${v2ray_dynamicPort_start}:${v2ray_dynamicPort_end}"
iptables -D INPUT -p tcp --match multiport --dports $ports -j ACCEPT
iptables -D INPUT -p udp --match multiport --dports $ports -j ACCEPT
ip6tables -D INPUT -p tcp --match multiport --dports $ports -j ACCEPT
ip6tables -D INPUT -p udp --match multiport --dports $ports -j ACCEPT
# else
# local ports="${v2ray_dynamicPort_start}-${v2ray_dynamicPort_end}"
# firewall-cmd --permanent --zone=public --remove-port=$ports/tcp
# firewall-cmd --permanent --zone=public --remove-port=$ports/udp
# fi
fi
iptables-save >/etc/iptables.rules.v4
ip6tables-save >/etc/iptables.rules.v6
# else
# service iptables save >/dev/null 2>&1
# service ip6tables save >/dev/null 2>&1
fi
}
config() {
cp -f /etc/v2ray/233boy/v2ray/config/backup.conf $backup
cp -f /etc/v2ray/233boy/v2ray/v2ray.sh $_v2ray_sh
@ -902,40 +835,29 @@ config() {
v2ray_id=$uuid
alterId=0
ban_bt=true
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
v2ray_dynamicPort_start=${v2ray_dynamic_port_start_input}
v2ray_dynamicPort_end=${v2ray_dynamic_port_end_input}
fi
_load config.sh
if [[ $cmd == "apt-get" ]]; then
cat >/etc/network/if-pre-up.d/iptables <<-EOF
#!/bin/sh
/sbin/iptables-restore < /etc/iptables.rules.v4
/sbin/ip6tables-restore < /etc/iptables.rules.v6
EOF
chmod +x /etc/network/if-pre-up.d/iptables
# else
# [ $(pgrep "firewall") ] && systemctl stop firewalld
# systemctl mask firewalld
# systemctl disable firewalld
# systemctl enable iptables
# systemctl enable ip6tables
# systemctl start iptables
# systemctl start ip6tables
fi
# if [[ $cmd == "apt-get" ]]; then
# cat >/etc/network/if-pre-up.d/iptables <<-EOF
# #!/bin/sh
# /sbin/iptables-restore < /etc/iptables.rules.v4
# /sbin/ip6tables-restore < /etc/iptables.rules.v6
# EOF
# chmod +x /etc/network/if-pre-up.d/iptables
# # else
# # [ $(pgrep "firewall") ] && systemctl stop firewalld
# # systemctl mask firewalld
# # systemctl disable firewalld
# # systemctl enable iptables
# # systemctl enable ip6tables
# # systemctl start iptables
# # systemctl start ip6tables
# fi
[[ $shadowsocks ]] && open_port $ssport
if [[ $v2ray_transport == [45] ]]; then
open_port "80"
open_port "443"
open_port $v2ray_port
elif [[ $v2ray_transport -ge 18 ]]; then
open_port $v2ray_port
open_port "multiport"
else
open_port $v2ray_port
fi
# systemctl restart v2ray
do_service restart v2ray
backup_config
@ -944,13 +866,13 @@ config() {
backup_config() {
sed -i "18s/=1/=$v2ray_transport/; 21s/=2333/=$v2ray_port/; 24s/=$old_id/=$uuid/" $backup
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
sed -i "30s/=10000/=$v2ray_dynamic_port_start_input/; 33s/=20000/=$v2ray_dynamic_port_end_input/" $backup
fi
if [[ $shadowsocks ]]; then
sed -i "42s/=/=true/; 45s/=6666/=$ssport/; 48s/=233blog.com/=$sspass/; 51s/=chacha20-ietf/=$ssciphers/" $backup
fi
[[ $v2ray_transport == [45] ]] && sed -i "36s/=233blog.com/=$domain/" $backup
[[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && sed -i "36s/=233blog.com/=$domain/" $backup
[[ $caddy ]] && sed -i "39s/=/=true/" $backup
[[ $ban_ad ]] && sed -i "54s/=/=true/" $backup
if [[ $is_path ]]; then

2
src/caddy-config.sh
Unescape View File

@ -1,7 +1,7 @@
# local email=$(((RANDOM << 22)))
# tls ${email}@gmail.com
case $v2ray_transport in
4)
4|33)
if [[ $is_path ]]; then
cat >/etc/caddy/Caddyfile <<-EOF
$domain {

18
src/download-caddy.sh
Unescape View File

@ -24,7 +24,7 @@ _download_caddy_file() {
fi
}
_install_caddy_service() {
setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/caddy
# setcap CAP_NET_BIND_SERVICE=+eip /usr/local/bin/caddy
if [[ $systemd ]]; then
cp -f ${caddy_tmp}init/linux-systemd/caddy.service /lib/systemd/system/
@ -35,7 +35,7 @@ _install_caddy_service() {
if [[ ! $(grep "ReadWriteDirectories" /lib/systemd/system/caddy.service) ]]; then
sed -i "/ReadWritePaths/a ReadWriteDirectories=/etc/ssl/caddy" /lib/systemd/system/caddy.service
fi
# # sed -i "s/www-data/root/g" /lib/systemd/system/caddy.service
sed -i "s/www-data/root/g" /lib/systemd/system/caddy.service
# sed -i "/on-abnormal/a RestartSec=3" /lib/systemd/system/caddy.service
# sed -i "s/on-abnormal/always/" /lib/systemd/system/caddy.service
@ -67,23 +67,23 @@ _install_caddy_service() {
systemctl enable caddy
else
cp -f ${caddy_tmp}init/linux-sysvinit/caddy /etc/init.d/caddy
# sed -i "s/www-data/root/g" /etc/init.d/caddy
sed -i "s/www-data/root/g" /etc/init.d/caddy
chmod +x /etc/init.d/caddy
update-rc.d -f caddy defaults
fi
if [ -z "$(grep www-data /etc/passwd)" ]; then
useradd -M -s /usr/sbin/nologin www-data
fi
# if [ -z "$(grep www-data /etc/passwd)" ]; then
# useradd -M -s /usr/sbin/nologin www-data
# fi
# chown -R www-data.www-data /etc/ssl/caddy
# ref https://github.com/caddyserver/caddy/tree/master/dist/init/linux-systemd
mkdir -p /etc/caddy
chown -R root:root /etc/caddy
# chown -R root:root /etc/caddy
mkdir -p /etc/ssl/caddy
chown -R root:www-data /etc/ssl/caddy
chmod 0770 /etc/ssl/caddy
# chown -R root:www-data /etc/ssl/caddy
# chmod 0770 /etc/ssl/caddy
## create sites dir
mkdir -p /etc/caddy/sites

9
src/mtproto.sh
Unescape View File

@ -1,3 +1,12 @@
###----
echo
echo -e "$red V2RAY Telegram MTProto 相关配置暂时不推荐使用 $none"
echo
echo -e "$green 推荐使用 https://github.com/cutelua/mtg-dist $none"
echo
exit
###----
_view_mtproto_info() {
if [[ $mtproto ]]; then
_mtproto_info

1
src/transport.sh
Unescape View File

@ -31,4 +31,5 @@ transport=(
QUIC_wechat-video_dynamicPort
QUIC_dtls_dynamicPort
QUIC_wireguard_dynamicPort
VLESS_WebSocket_TLS
)

88
src/uninstall.sh
Unescape View File

@ -58,28 +58,28 @@ if [[ $is_uninstall_v2ray && $is_uninstall_caddy ]]; then
pause
echo
if [[ $shadowsocks ]]; then
del_port $ssport
fi
if [[ $socks ]]; then
del_port $socks_port
fi
if [[ $mtproto ]]; then
del_port $mtproto_port
fi
if [[ $v2ray_transport == [45] ]]; then
del_port "80"
del_port "443"
del_port $v2ray_port
elif [[ $v2ray_transport -ge 18 ]]; then
del_port $v2ray_port
del_port "multiport"
else
del_port $v2ray_port
fi
[ $cmd == "apt-get" ] && rm -rf /etc/network/if-pre-up.d/iptables
# if [[ $shadowsocks ]]; then
# del_port $ssport
# fi
# if [[ $socks ]]; then
# del_port $socks_port
# fi
# if [[ $mtproto ]]; then
# del_port $mtproto_port
# fi
# if [[ $v2ray_transport == [45] ]]; then
# del_port "80"
# del_port "443"
# del_port $v2ray_port
# elif [[ $v2ray_transport -ge 18 ]]; then
# del_port $v2ray_port
# del_port "multiport"
# else
# del_port $v2ray_port
# fi
[[ -f /etc/network/if-pre-up.d/iptables ]] && rm -rf /etc/network/if-pre-up.d/iptables
# [ $v2ray_pid ] && systemctl stop v2ray
[ $v2ray_pid ] && do_service stop v2ray
@ -121,28 +121,28 @@ elif [[ $is_uninstall_v2ray ]]; then
pause
echo
if [[ $shadowsocks ]]; then
del_port $ssport
fi
if [[ $socks ]]; then
del_port $socks_port
fi
if [[ $mtproto ]]; then
del_port $mtproto_port
fi
if [[ $v2ray_transport == [45] ]]; then
del_port "80"
del_port "443"
del_port $v2ray_port
elif [[ $v2ray_transport -ge 18 ]]; then
del_port $v2ray_port
del_port "multiport"
else
del_port $v2ray_port
fi
[ $cmd == "apt-get" ] && rm -rf /etc/network/if-pre-up.d/iptables
# if [[ $shadowsocks ]]; then
# del_port $ssport
# fi
# if [[ $socks ]]; then
# del_port $socks_port
# fi
# if [[ $mtproto ]]; then
# del_port $mtproto_port
# fi
# if [[ $v2ray_transport == [45] ]]; then
# del_port "80"
# del_port "443"
# del_port $v2ray_port
# elif [[ $v2ray_transport -ge 18 ]]; then
# del_port $v2ray_port
# del_port "multiport"
# else
# del_port $v2ray_port
# fi
[[ -f /etc/network/if-pre-up.d/iptables ]] && rm -rf /etc/network/if-pre-up.d/iptables
# [ $v2ray_pid ] && systemctl stop v2ray
[ $v2ray_pid ] && do_service stop v2ray

32
src/v2ray-info.sh
Unescape View File

@ -15,7 +15,7 @@ _v2_args() {
header="http"
host="www.baidu.com"
;;
3 | 4 | 20)
3 | 4 | 20 | 33)
net="ws"
;;
5)
@ -96,7 +96,35 @@ _v2_info() {
echo
echo -e "$yellow 路径 (path) = ${cyan}${_path}$none"
echo
echo -e "$yellow TLS (Enable TLS) = ${cyan}打开$none"
echo -e "$yellow 底层传输安全 (TLS) = ${cyan}tls$none"
echo
if [[ $ban_ad ]]; then
echo " 备注: 广告拦截已开启.."
echo
fi
elif [[ $v2ray_transport == 33 ]]; then
echo
echo -e "$green ---提示..这是 VLESS 服务器配置--- $none"
echo
echo -e "$yellow 地址 (Address) = $cyan${domain}$none"
echo
echo -e "$yellow 端口 (Port) = ${cyan}443${none}"
echo
echo -e "$yellow 用户ID (User ID / UUID) = $cyan${v2ray_id}$none"
echo
echo -e "$yellow 流控 (Flow) = ${cyan}空${none}"
echo
echo -e "$yellow 加密 (Encryption) = ${cyan}none${none}"
echo
echo -e "$yellow 传输协议 (Network) = ${cyan}${net}$none"
echo
echo -e "$yellow 伪装类型 (header type) = ${cyan}${header}$none"
echo
echo -e "$yellow 伪装域名 (host) = ${cyan}${domain}$none"
echo
echo -e "$yellow 路径 (path) = ${cyan}${_path}$none"
echo
echo -e "$yellow 底层传输安全 (TLS) = ${cyan}tls$none"
echo
if [[ $ban_ad ]]; then
echo " 备注: 广告拦截已开启.."

8
src/vmess-config.sh
Unescape View File

@ -44,6 +44,10 @@ case $v2ray_transport in
v2ray_server_config_file="/etc/v2ray/233boy/v2ray/config/server/dynamic/kcp.json"
v2ray_client_config_file="/etc/v2ray/233boy/v2ray/config/client/kcp.json"
;;
33)
v2ray_server_config_file="/etc/v2ray/233boy/v2ray/config/server/vless_ws.json"
v2ray_client_config_file="/etc/v2ray/233boy/v2ray/config/client/vless_ws_tls.json"
;;
*)
v2ray_server_config_file="/etc/v2ray/233boy/v2ray/config/server/dynamic/quic.json"
v2ray_client_config_file="/etc/v2ray/233boy/v2ray/config/client/quic.json"
@ -58,7 +62,7 @@ cp -f $v2ray_client_config_file $v2ray_client_config
sed -i "9s/2333/$v2ray_port/; 14s/$old_id/$v2ray_id/; 16s/233/$alterId/" $v2ray_server_config
# change dynamic port
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
local multi_port="${v2ray_dynamicPort_start}-${v2ray_dynamicPort_end}"
sed -i "s/10000-20000/$multi_port/" $v2ray_server_config
fi
@ -97,7 +101,7 @@ esac
## change client config file
[[ -z $ip ]] && get_ip
if [[ $v2ray_transport == [45] ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]]; then
sed -i "s/233blog.com/$domain/; 9s/2333/443/; 12s/$old_id/$v2ray_id/; 13s/233/$alterId/" $v2ray_client_config
if [[ $is_path ]]; then
sed -i "27s/233blog/$path/" $v2ray_client_config

196
v2ray.sh
Unescape View File

@ -10,7 +10,7 @@ none='\e[0m'
# Root
[[ $(id -u) != 0 ]] && echo -e " 哎呀……请使用 ${red}root ${none}用户运行 ${yellow}~(^_^) ${none}" && exit 1
_version="v3.37"
_version="v3.40"
cmd="apt-get"
@ -69,7 +69,7 @@ fi
if [[ $mark != "v3" ]]; then
. /etc/v2ray/233boy/v2ray/tools/v3.sh
fi
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
dynamicPort=true
port_range="${v2ray_dynamicPort_start}-${v2ray_dynamicPort_end}"
fi
@ -103,7 +103,7 @@ if [ $v2ray_pid ]; then
else
v2ray_status="$red未在运行$none"
fi
if [[ $v2ray_transport == [45] && $caddy ]] && [[ $caddy_pid ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy_pid && $caddy ]]; then
caddy_run_status="$green正在运行$none"
else
caddy_run_status="$red未在运行$none"
@ -301,7 +301,6 @@ shadowsocks_config() {
shadowsocks_password_config
shadowsocks_ciphers_config
pause
open_port $new_ssport
backup_config +ss
ssport=$new_ssport
sspass=$new_sspass
@ -337,7 +336,7 @@ shadowsocks_port_config() {
error
;;
[1-9] | [1-9][0-9] | [1-9][0-9][0-9] | [1-9][0-9][0-9][0-9] | [1-5][0-9][0-9][0-9][0-9] | 6[0-4][0-9][0-9][0-9] | 65[0-4][0-9][0-9] | 655[0-3][0-5])
if [[ $v2ray_transport == [45] ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]]; then
local tls=ture
fi
if [[ $tls && $new_ssport == "80" ]] || [[ $tls && $new_ssport == "443" ]]; then
@ -455,7 +454,7 @@ change_shadowsocks_port() {
error
;;
[1-9] | [1-9][0-9] | [1-9][0-9][0-9] | [1-9][0-9][0-9][0-9] | [1-5][0-9][0-9][0-9][0-9] | 6[0-4][0-9][0-9][0-9] | 65[0-4][0-9][0-9] | 655[0-3][0-5])
if [[ $v2ray_transport == [45] ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]]; then
local tls=ture
fi
if [[ $tls && $new_ssport == "80" ]] || [[ $tls && $new_ssport == "443" ]]; then
@ -488,8 +487,6 @@ change_shadowsocks_port() {
echo
pause
backup_config ssport
del_port $ssport
open_port $new_ssport
ssport=$new_ssport
config
clear
@ -601,7 +598,6 @@ disable_shadowsocks() {
echo
pause
backup_config -ss
del_port $ssport
shadowsocks=''
config
# clear
@ -757,8 +753,6 @@ change_v2ray_port() {
echo
pause
backup_config v2ray_port
del_port $v2ray_port
open_port $v2ray_port_opt
v2ray_port=$v2ray_port_opt
config
clear
@ -838,7 +832,7 @@ change_v2ray_transport() {
echo " 哎呀...跟当前传输协议一毛一样呀...修改个鸡鸡哦"
error
;;
4 | 5)
4 | 5 | 33)
if [[ $v2ray_port == "80" || $v2ray_port == "443" ]]; then
echo
echo -e " 抱歉...如果你想要使用${cyan} ${transport[$v2ray_transport_opt - 1]} $none传输协议.. ${red}V2Ray 端口不能为 80 或者 443 ...$none"
@ -872,7 +866,7 @@ change_v2ray_transport() {
break
fi
;;
[1-9] | [1-2][0-9] | 3[0-2])
[1-9] | [1-2][0-9] | 3[0-3])
echo
echo
echo -e "$yellow V2Ray 传输协议 = $cyan${transport[$v2ray_transport_opt - 1]}$none"
@ -889,14 +883,13 @@ change_v2ray_transport() {
done
pause
if [[ $v2ray_transport_opt == [45] ]]; then
if [[ $v2ray_transport_opt == [45] || $v2ray_transport_opt == 33 ]]; then
tls_config
elif [[ $v2ray_transport_opt -ge 18 ]]; then
elif [[ $v2ray_transport_opt -ge 18 && $v2ray_transport_opt -ne 33 ]]; then
v2ray_dynamic_port_start
v2ray_dynamic_port_end
pause
old_transport
open_port "multiport"
backup_config v2ray_transport v2ray_dynamicPort_start v2ray_dynamicPort_end
port_range="${v2ray_dynamic_port_start_input}-${v2ray_dynamic_port_end_input}"
v2ray_transport=$v2ray_transport_opt
@ -916,9 +909,7 @@ change_v2ray_transport() {
}
old_transport() {
if [[ $v2ray_transport == [45] ]]; then
del_port "80"
del_port "443"
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]]; then
if [[ $caddy && $caddy_pid ]]; then
do_service stop caddy
if [[ $systemd ]]; then
@ -936,8 +927,6 @@ old_transport() {
if [[ $is_path ]]; then
backup_config -path
fi
elif [[ $v2ray_transport -ge 18 ]]; then
del_port "multiport"
fi
}
@ -946,7 +935,7 @@ tls_config() {
echo
echo
echo
echo -e "请输入一个 $magenta正确的域名$none，一定一定一定要正确，不！能！出！错！"
echo -e "请输入一个 ${magenta}正确的域名${none}，一定一定一定要正确，不！能！出！错！"
read -p "(例如：233blog.com): " new_domain
[ -z "$new_domain" ] && error && continue
echo
@ -999,13 +988,8 @@ tls_config() {
is_path=true
fi
if [[ $v2ray_transport -ge 18 ]]; then
del_port "multiport"
fi
domain=$new_domain
open_port "80"
open_port "443"
if [[ $systemd ]]; then
systemctl enable caddy >/dev/null 2>&1
else
@ -1018,7 +1002,7 @@ tls_config() {
view_v2ray_config_info
# download_v2ray_config_ask
else
if [[ $v2ray_transport_opt == 5 ]]; then
if [[ $v2ray_transport_opt -ne 4 ]]; then
path_config_ask
pause
domain_check
@ -1029,13 +1013,8 @@ tls_config() {
proxy_site=$new_proxy_site
is_path=true
fi
if [[ $v2ray_transport -ge 18 ]]; then
del_port "multiport"
fi
domain=$new_domain
install_caddy
open_port "80"
open_port "443"
v2ray_transport=$v2ray_transport_opt
caddy_config
config
@ -1085,13 +1064,8 @@ auto_tls_config() {
proxy_site=$new_proxy_site
is_path=true
fi
if [[ $v2ray_transport -ge 18 ]]; then
del_port "multiport"
fi
domain=$new_domain
install_caddy
open_port "80"
open_port "443"
v2ray_transport=$v2ray_transport_opt
caddy_config
config
@ -1109,12 +1083,7 @@ auto_tls_config() {
pause
domain_check
backup_config v2ray_transport domain
if [[ $v2ray_transport -ge 18 ]]; then
del_port "multiport"
fi
domain=$new_domain
open_port "80"
open_port "443"
v2ray_transport=$v2ray_transport_opt
config
clear
@ -1340,12 +1309,10 @@ v2ray_dynamic_port_end() {
}
change_v2ray_dynamicport() {
if [[ $v2ray_transport -ge 18 ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
change_v2ray_dynamic_port_start
change_v2ray_dynamic_port_end
pause
del_port "multiport"
open_port "multiport"
backup_config v2ray_dynamicPort_start v2ray_dynamicPort_end
port_range="${v2ray_dynamic_port_start_input}-${v2ray_dynamic_port_end_input}"
config
@ -1534,10 +1501,10 @@ change_v2ray_id() {
done
}
change_domain() {
if [[ $v2ray_transport == [45] ]] && [[ $caddy ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
while :; do
echo
echo -e "请输入一个 $magenta正确的域名$none，一定一定一定要正确，不！能！出！错！"
echo -e "请输入一个 ${magenta}正确的域名${none}，一定一定一定要正确，不！能！出！错！"
read -p "$(echo -e "(当前域名: ${cyan}$domain$none):") " new_domain
[ -z "$new_domain" ] && error && continue
if [[ $new_domain == $domain ]]; then
@ -1609,7 +1576,7 @@ change_domain() {
fi
}
change_path_config() {
if [[ $v2ray_transport == [45] ]] && [[ $caddy && $is_path ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy && $is_path ]]; then
echo
while :; do
echo -e "请输入想要 ${magenta}用来分流的路径$none , 例如 /233blog , 那么只需要输入 233blog 即可"
@ -1647,7 +1614,7 @@ change_path_config() {
clear
view_v2ray_config_info
# download_v2ray_config_ask
elif [[ $v2ray_transport == [45] ]] && [[ $caddy ]]; then
elif [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
path_config_ask
if [[ $new_path ]]; then
backup_config +path
@ -1685,7 +1652,7 @@ change_path_config() {
}
change_proxy_site_config() {
if [[ $v2ray_transport == [45] ]] && [[ $caddy && $is_path ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy && $is_path ]]; then
echo
while :; do
echo -e "请输入 ${magenta}一个正确的 $none ${cyan}网址$none 用来作为 ${cyan}网站的伪装$none , 例如 https://liyafly.com"
@ -1724,7 +1691,7 @@ change_proxy_site_config() {
echo -e " 赶紧打开你的域名 ${cyan}https://${domain}$none 检查一下看看"
echo
echo
elif [[ $v2ray_transport == [45] ]] && [[ $caddy ]]; then
elif [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
path_config_ask
if [[ $new_path ]]; then
backup_config +path
@ -1780,7 +1747,7 @@ domain_check() {
fi
}
disable_path() {
if [[ $v2ray_transport == [45] ]] && [[ $caddy && $is_path ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy && $is_path ]]; then
echo
while :; do
@ -2201,7 +2168,35 @@ create_v2ray_config_text() {
echo
echo "路径 (path) = ${_path}"
echo
echo "TLS (Enable TLS) = 打开"
echo "底层传输安全 (TLS) = tls"
echo
if [[ $ban_ad ]]; then
echo " 备注: 广告拦截已开启.."
echo
fi
elif [[ $v2ray_transport == 33 ]]; then
echo
echo '---提示..这是 VLESS 服务器配置---'
echo
echo "地址 (Address) = ${domain}"
echo
echo "端口 (Port) = 443"
echo
echo "用户ID (User ID / UUID) = ${v2ray_id}"
echo
echo "流控 (Flow) = 空"
echo
echo "加密 (Encryption) = none"
echo
echo "传输协议 (Network) = ${net}"
echo
echo "伪装类型 (header type) = ${header}"
echo
echo "伪装域名 (host) = ${domain}"
echo
echo "路径 (path) = ${_path}"
echo
echo "底层传输安全 (TLS) = tls"
echo
if [[ $ban_ad ]]; then
echo " 备注: 广告拦截已开启.."
@ -2223,10 +2218,10 @@ create_v2ray_config_text() {
echo "伪装类型 (header type) = ${header}"
echo
fi
if [[ $v2ray_transport -ge 18 ]] && [[ $ban_ad ]]; then
if [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]] && [[ $ban_ad ]]; then
echo "备注: 动态端口已启用...广告拦截已开启..."
echo
elif [[ $v2ray_transport -ge 18 ]]; then
elif [[ $v2ray_transport -ge 18 && $v2ray_transport -ne 33 ]]; then
echo "备注: 动态端口已启用..."
echo
elif [[ $ban_ad ]]; then
@ -2342,79 +2337,6 @@ uninstall_lotserver() {
rm -rf /tmp/appex.sh
}
open_port() {
if [[ $cmd == "apt-get" ]]; then
if [[ $1 != "multiport" ]]; then
# if [[ $cmd == "apt-get" ]]; then
iptables -I INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
iptables -I INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
ip6tables -I INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
ip6tables -I INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
# iptables-save >/etc/iptables.rules.v4
# ip6tables-save >/etc/iptables.rules.v6
# else
# firewall-cmd --permanent --zone=public --add-port=$1/tcp
# firewall-cmd --permanent --zone=public --add-port=$1/udp
# firewall-cmd --reload
# fi
else
# if [[ $cmd == "apt-get" ]]; then
local multiport="${v2ray_dynamic_port_start_input}:${v2ray_dynamic_port_end_input}"
iptables -I INPUT -p tcp --match multiport --dports $multiport -j ACCEPT
iptables -I INPUT -p udp --match multiport --dports $multiport -j ACCEPT
ip6tables -I INPUT -p tcp --match multiport --dports $multiport -j ACCEPT
ip6tables -I INPUT -p udp --match multiport --dports $multiport -j ACCEPT
# iptables-save >/etc/iptables.rules.v4
# ip6tables-save >/etc/iptables.rules.v6
# else
# local multi_port="${v2ray_dynamic_port_start_input}-${v2ray_dynamic_port_end_input}"
# firewall-cmd --permanent --zone=public --add-port=$multi_port/tcp
# firewall-cmd --permanent --zone=public --add-port=$multi_port/udp
# firewall-cmd --reload
# fi
fi
iptables-save >/etc/iptables.rules.v4
ip6tables-save >/etc/iptables.rules.v6
# else
# service iptables save >/dev/null 2>&1
# service ip6tables save >/dev/null 2>&1
fi
}
del_port() {
if [[ $cmd == "apt-get" ]]; then
if [[ $1 != "multiport" ]]; then
# if [[ $cmd == "apt-get" ]]; then
iptables -D INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
iptables -D INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
ip6tables -D INPUT -m state --state NEW -m tcp -p tcp --dport $1 -j ACCEPT
ip6tables -D INPUT -m state --state NEW -m udp -p udp --dport $1 -j ACCEPT
# else
# firewall-cmd --permanent --zone=public --remove-port=$1/tcp
# firewall-cmd --permanent --zone=public --remove-port=$1/udp
# fi
else
# if [[ $cmd == "apt-get" ]]; then
local ports="${v2ray_dynamicPort_start}:${v2ray_dynamicPort_end}"
iptables -D INPUT -p tcp --match multiport --dports $ports -j ACCEPT
iptables -D INPUT -p udp --match multiport --dports $ports -j ACCEPT
ip6tables -D INPUT -p tcp --match multiport --dports $ports -j ACCEPT
ip6tables -D INPUT -p udp --match multiport --dports $ports -j ACCEPT
# else
# local ports="${v2ray_dynamicPort_start}-${v2ray_dynamicPort_end}"
# firewall-cmd --permanent --zone=public --remove-port=$ports/tcp
# firewall-cmd --permanent --zone=public --remove-port=$ports/udp
# fi
fi
iptables-save >/etc/iptables.rules.v4
ip6tables-save >/etc/iptables.rules.v6
# else
# service iptables save >/dev/null 2>&1
# service ip6tables save >/dev/null 2>&1
fi
}
update() {
while :; do
echo
@ -2819,7 +2741,7 @@ bt)
;;
status)
echo
if [[ $v2ray_transport == [45] && $caddy ]]; then
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
echo -e " V2Ray 状态: $v2ray_status / Caddy 状态: $caddy_run_status"
else
echo -e " V2Ray 状态: $v2ray_status"
@ -2833,12 +2755,16 @@ stop)
stop_v2ray
;;
restart)
[[ $v2ray_transport == [45] && $caddy ]] && do_service restart caddy
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
do_service restart caddy
fi
restart_v2ray
;;
reload)
config
[[ $v2ray_transport == [45] && $caddy ]] && caddy_config
if [[ $v2ray_transport == [45] || $v2ray_transport == 33 ]] && [[ $caddy ]]; then
caddy_config
fi
clear
view_v2ray_config_info
;;
@ -2849,6 +2775,12 @@ log)
view_v2ray_log
;;
url | URL)
if [[ $v2ray_transport == 33 ]]; then
echo
echo ' V2RAY VLESS 协议相关暂不支持生成 URL ....'
echo
exit
fi
get_v2ray_vmess_URL_link
;;
u | update)

Write Preview
Loading…
Cancel
Save