Jagorar Shadowsocks (shadowsocks-tsatsa / shadowsocks-libev): VPS, Windows, macOS, Linux, Android, iPhone

Shadowsocks wani tsari ne mai sauƙi, wanda aka ƙera bisa SOCKS5 wanda aka ƙera shi don magance matsalar zirga-zirga da toshe hanyoyin sadarwa na yau da kullun. Ba kamar cikakken VPN ba, yana wakiltar zirga-zirgar da aikace-aikacen ya aika masa a sarari, ba shi da wani ƙarin tsari, kuma yana aiki da kyau ko da a kan hanyoyin haɗi masu iyaka. Ba ya ƙoƙarin yin kwaikwayon ainihin TLS musabaha kamar yadda VLESS+Reality yake yi - ƙarfinsa shine sauƙi, tallafin abokin ciniki mai faɗi (na'urorin sadarwa, wayoyi, masu bincike), da ƙarancin latency, wanda hakan ke nufin ya zama mai sauƙin sawun yatsa ta hanyar tsarin zirga-zirga akan hanyar sadarwa mai cikakken bincike.

Akwai aiwatar da sabar guda biyu masu aiki da gaske:

• shadowsocks-tsatsa — aiwatar da tunani na zamani daga ƙungiyar shadowsocks, wanda aka rubuta a cikin Rust. Yana goyan bayan sabon dangin cipher na AEAD-2022, an haɓaka shi sosai, kuma shine aiwatarwar da wannan jagorar ke shigarwa da saitawa dalla-dalla.
• shadowsocks-libev — tsohon tsarin C. Har yanzu ana kiyaye shi don gyara kurakurai, ana jigilar shi azaman fakiti mai dacewa wanda aka shirya tare da na'urorin tsarin sa, kuma zaɓi ne mai kyau idan kuna son shigarwa mafi sauƙi ba tare da sarrafa binary da hannu ba. Wannan jagorar ta rufe shi azaman madadin hanyar shigarwa a Sashe na 3.

Wannan jagorar ta bayyana yadda ake saita sabar da hannu ta hanyar layin umarni—ba tare da amfani da kwamitin yanar gizo ko Docker ba. Duk inda filin "adireshin IP" ya bayyana, a maye gurbinsa da ainihin adireshin IP na VPS ɗinku.

Abin da za ku buƙaci: VPS mai gudanar da Ubuntu 22.04/24.04 ko Debian 11/12, tushen shiga, adireshin IP na VPS ɗinku, da tashar UDP/TCP kyauta (wannan jagorar tana amfani da 8388, tsohuwar Shadowsocks).

Ba ka da sabar tukuna? Duba Yadda ake yin odar sabar kuma a biya kuɗinta.

Da farko za a kwatanta wannan da sauran zaɓuɓɓukan da aka ɗauka da kansu? Duba Jagorar Gaskiya ta Xray VLESS don madadin da aka yi da TLS-camouflage, Jagorar Aiki na AmneziaWG Server don zaɓin da aka yi da WireGuard, ko kuma saitin Hysteria2 da TUIC don wasu yarjejeniyoyi biyu na zamani na wakili.

Haɗawa zuwa sabar

Windows (PuTTY)

Buɗe PuTTY, shigar da adireshin IP na VPS ɗinku a cikin filin Sunan Mai masaukin baki, saita tashar jiragen ruwa zuwa 22, kuma shiga azaman tushen ta amfani da kalmar sirri da mai ba da sabis na VPS ɗinku ya aiko muku da imel.

Adireshin IP na uwar garken: adireshin IP ɗinka

shiga as: tushen

Kalmar sirri: kalmar sirrinka

Don ƙarin bayani game da haɗawa ta hanyar PuTTY/SSH, duba Yadda ake haɗawa zuwa sabar Linux ta hanyar SSH.

Linux / macOS (Terminal)

ssh root@your_IP_address

Duk umarnin da ke ƙasa ana gudanar da su ne a kan sabar, a cikin wannan zaman SSH ɗaya - wanda ya shafi Sashe na 2 zuwa 7, tare da duba ɓangaren sabar a Sashe na 13. Sashe na 8-12 (shigarwa da saita ƙa'idodin abokin ciniki) suna faruwa ne a kan na'urar Windows/macOS/Linux/Android/iOS ɗinku, tunda wannan ita ce na'urar da wakili ke buƙatar kunnawa; kowanne daga cikin waɗannan sassan yana faɗi a sarari waɗanne layuka, idan akwai, har yanzu suna taɓa sabar.

Shirya Sabar

Sabunta tsarin

Kafin shigar da wani abu, sabunta jerin fakitin kuma haɓaka fakitin da aka shigar:

apt update -y && apt upgrade -y

Idan wannan ya inganta kernel, sake kunnawa kyakkyawan ra'ayi ne kafin a ci gaba. (Don ƙarin bayani game da apt da yadda manajojin kunshin Linux ke aiki, duba Manajan Kunshin Linux .) Duba tare da:

cat /var/run/reboot-required

Idan fayil ɗin yana nan, sai a sake kunna shi da farko da 'sake kunnawa', a jira ~ daƙiƙa 30, sannan a sake haɗawa.

Shigar da kayan aikin da wannan jagorar ke amfani da su

apt install -y curl wget tar xz-utils ufw qrencode

Ana buƙatar curl/wget da tar/xz-utils don ɗaukowa da buɗe rumbun adana bayanai na shadowsocks-rust; ufw shine firewall ɗin da aka saita a ƙasa; qrencode yana juya hanyar haɗin abokin ciniki da aka gama zuwa lambar QR mai iya dubawa a Sashe na 7.

Saita maɓallin wuta (UFW)

Don ƙarin bayani game da ƙa'idodin UFW, duba Saita Firewall akan Linux.

Buɗe tashoshin jiragen ruwa guda biyu da za ku buƙaci: 22/tcp don SSH (ku tsallake wannan doka kuma kuna fuskantar haɗarin rasa damar shiga sabar) da 8388, duka tcp da udp - Shadowsocks proxies suna da alaƙa da haɗin TCP da UDP (yana da amfani ga DNS da wasu wasanni/ka'idoji), don haka dole ne dukkan hanyoyin tashar jiragen ruwa su kasance a buɗe.

ufw allow 22/tcp
ufw allow 8388/tcp
ufw allow 8388/udp
ufw --force enable
ufw status

Duk ƙa'idodi uku ya kamata su bayyana a matsayin ALLOW a cikin fitowar yanayin ufw. Idan daga baya ka canza tashar jiragen ruwa a cikin config.json, sabunta waɗannan ƙa'idodi don daidaitawa.

Shigar da Software na Sabar

Zaɓi ɗaya daga cikin zaɓuɓɓuka biyu da ke ƙasa. Ana ba da shawarar Zaɓin A (shadowsocks-rust): shine aiwatarwa da aka haɓaka sosai kuma yana goyan bayan bayanan sirri na AEAD-2022 na zamani da aka yi amfani da su daga baya a cikin wannan jagorar. Zaɓin B (shadowsocks-libev) zaɓi ne mai kyau idan kuna son amfani da fakiti mai sauƙi tare da na'urar da aka riga aka yi kuma ba kwa buƙatar AEAD-2022.

Zabi na A — shadowsocks-tsatsa (an ba da shawarar)

Shadowsocks-rust ba ya aika da fakiti mai dacewa tare da fitowar yanzu, don haka ana shigar da shi ta hanyar saukar da binary mai tsauri da aka riga aka gina daga fitowar GitHub na aikin. Nemo sabon alamar fitarwa daga GitHub API kuma sauke tarihin Linux x86_64 mai dacewa:

SS_VER=$(curl -s https://api.github.com/repos/shadowsocks/shadowsocks-rust/releases/latest | grep -Po '"tag_name": "\K[^"]*')
echo "Latest version: $SS_VER"
cd /root

wget "https://github.com/shadowsocks/shadowsocks-rust/releases/download/${SS_VER}/shadowsocks-${SS_VER}.x86_64-unknown-linux-gnu.tar.xz"

Idan VPS ɗinku arm64 ne maimakon x86_64 (duba da `uname -m`), maye gurbin x86_64-unknown-linux-gnu da aarch64-unknown-linux-gnu a cikin sunan fayil ɗin da ke sama.

Cire tarihin kuma shigar da tsarin binary a duk faɗin tsarin:

tar -xf shadowsocks-*.tar.xz
install -m 755 ssserver ssservice ssmanager ssurl /usr/local/bin/
rm -f shadowsocks-*.tar.xz ssserver ssservice ssmanager ssurl sslocal 2>/dev/null

Tabbatar cewa binary ɗin yana wurin kuma duba sigar da aka shigar:

ssserver --version

Ƙirƙiri kundin adireshin fayil ɗin sanyin da zai kasance a ciki:

mkdir -p /etc/shadowsocks-rust

Wannan jagorar tana shigar da sigar da aka gyara maimakon shigar da rubutun mai sakawa cikin bash. Don haɓakawa daga baya, sake gudanar da umarni biyu da ke sama tare da sabon binciken SS_VER, dakatar da sabis ɗin, maye gurbin binary, sannan sake kunna shi (Sashe na 6).

Zaɓin B — shadowsocks-libev (madadin, kunshin da ya dace)

Shadowsocks-libev yana cikin rumbun adana bayanai na sararin samaniya na Ubuntu (Ubuntu 16.10+) da kuma babban rumbun adana bayanai na Debian (Debian 8+), don haka ba a buƙatar PPA na ɓangare na uku akan 22.04/24.04 ko Debian 11/12:

apt install -y shadowsocks-libev

Idan ba a sami rahoton apt ba, za a kashe ma'ajiyar sararin samaniya; kunna shi kuma sake gwadawa:

add-apt-repository universe && apt update && apt install -y shadowsocks-libev

Kunshin yana shigar da nasa sassan tsarin (shadowsocks-libev.service don saitin tsoho, tare da [email protected] don saitin kowane misali mai suna) kuma yana ƙirƙirar /etc/shadowsocks-libev/config.json ta atomatik — Sashe na 4–6 lura da umarnin takamaiman libev da hanyoyin fayil tare da waɗanda suka yi tsatsa. Sauran sassan abokin ciniki na wannan jagorar (7–13) suna aiki iri ɗaya ga aiwatar da sabar ɗaya, tunda duka suna magana da yarjejeniyar Shadowsocks/SIP002 iri ɗaya akan waya.

Samar da Kalmar Sirri da Zaɓar Sirri

Tabbatar da Shadowsocks kalmar sirri ce guda ɗaya da aka raba tare da ɓoye sirri (hanyar ɓoye sirri) wanda dole ne ɓangarorin biyu su yarda a kai - babu wani UUID daban, maɓallan maɓalli, ko takardar shaidar da za a sarrafa.

Iyalan Cipher

• AEAD-2022 (an ba da shawarar, shadowsocks-rust kawai): 2022-blake3-aes-128-gcm, 2022-blake3-aes-256-gcm, 2022-blake3-chacha20-poly1305. Sabon ƙira (SIP022) tare da kariyar sake kunnawa mai ƙarfi da tallafi ga masu amfani da yawa waɗanda ke raba tashar jiragen ruwa ɗaya. Dole ne kalmar sirri ta zama igiya ta tushe64 daidai da tsawon maɓallin sirrin (bytes 16 don bambance-bambancen bit 128, bytes 32 don bambance-bambancen bit 256).
• AEAD na gargajiya (wanda aka tallafa da tsatsa da libev): aes-256-gcm, aes-128-gcm, chacha20-ietf-poly1305. Ya dace sosai da tsofaffin abokan ciniki da kuma tare da shadowsocks-libev; kalmar sirri na iya zama kowace kalmar sirri, tunda ana ciyar da ita ta hanyar aikin samowa na maɓalli maimakon amfani da ita kai tsaye azaman maɓalli.

Wannan jagorar tana amfani da 2022-blake3-aes-256-gcm don uwar garken shadowsocks-rust, tunda ita ce zaɓi mafi ƙarfi kuma mafi zamani kuma kowane abokin ciniki da aka ba da shawarar daga baya (v2rayN, v2rayNG, Shadowrocket, Streisand, ShadowsocksX-NG) yana goyan bayansa. Idan kun shigar da shadowsocks-libev a Sashe na 3, yi amfani da chacha20-ietf-poly1305 ko aes-256-gcm a maimakon haka, tunda libev baya aiwatar da AEAD-2022.

Samar da maɓalli (shadowsocks-tsatsa)

ssservice genkey -m "2022-blake3-aes-256-gcm"

Wannan yana buga igiyar base64 — wannan shine kalmar sirrinka. Kwafi shi a wani wuri mai aminci; za ku manna shi a cikin tsarin sabar a Sashe na 5 da kuma hanyar haɗin abokin ciniki a Sashe na 7.

Zaɓi kalmar sirri (shadowsocks-libev)

Ga tsoffin kalmomin sirri na AEAD da shadowsocks-libev ke amfani da su, duk wani dogon zaren da bazuwar ya isa ya yi aiki, tunda yana gudana ta cikin PBKDF/HKDF maimakon amfani da shi azaman maɓalli mara amfani. Samar da ɗaya tare da:

openssl rand -base64 32

Rubuta Saitin Sabar

Inuwa-tsatsa

Buɗe fayil ɗin sanyi don gyarawa:

nano /etc/shadowsocks-rust/config.json

Manna a cikin samfurin da ke ƙasa, ta hanyar maye gurbin kalmar sirrinka daga Sashe na 4 (da kuma tashar jiragen ruwa daga Sashe na 2, idan ka canza ta daga 8388):

{
    "server": "0.0.0.0",
    "server_port": 8388,
    "password": "YOUR-GENERATED-KEY-HERE",
    "method": "2022-blake3-aes-256-gcm",
    "mode": "tcp_and_udp",
    "timeout": 300,
    "nofile": 51200
}

Danna Ctrl+O (WriteOut) don adana fayil ɗin, Shigar don tabbatar da sunan fayil ɗin, sannan Ctrl+X don fita daga nano.

Muhimman fannoni: uwar garken yana sauraro akan duk hanyoyin sadarwa (0.0.0.0); uwar garken_tashar jiragen ruwa ita ce tashar jiragen ruwa da aka buɗe a Sashe na 2; kalmar sirri/hanyar ita ce takardar shaida da ɓoye bayanai daga Sashe na 4; yanayin yana ba da damar watsawa ta TCP da UDP; lokacin ƙarewa shine lokacin haɗin mara aiki a cikin daƙiƙa; nofile yana ɗaga iyakar bayanin fayil ɗin ga sabar da ke aiki.

Tabbatar da JSON kuma binary ya yarda da shi kafin haɗa shi cikin systemd:

ssserver -c /etc/shadowsocks-rust/config.json --help >/dev/null && echo "binary OK"

python3 -m json.tool /etc/shadowsocks-rust/config.json >/dev/null && echo "JSON OK"

Ƙirƙiri na'urar systemd (shadowsocks-tsatsa)

Sakin binary baya aika da na'urar systemd, don haka ƙirƙiri ɗaya:

nano /etc/systemd/system/ssserver.service

[Unit]
Description=Shadowsocks-Rust Server
Documentation=https://github.com/shadowsocks/shadowsocks-rust
After=network.target
 
[Service]
Type=simple
ExecStart=/usr/local/bin/ssserver -c /etc/shadowsocks-rust/config.json
Restart=on-failure
RestartSec=5s
LimitNOFILE=51200
User=root
 
[Install]
WantedBy=multi-user.target

Ajiye kuma fita kamar yadda yake a sama, sannan ka gaya wa systemd ya ɗauki sabon fayil ɗin naúrar:

systemctl daemon-reload

Shadowsocks-libev

Kunshin apt ya riga ya ƙirƙiri /etc/shadowsocks-libev/config.json tare da tsarin tsoho (loopback-only, bazuwar kalmar sirri) da kuma na'urar tsarin sa. Buɗe shi don gyarawa:

nano /etc/shadowsocks-libev/config.json

Maye gurbin abinda ke ciki da:

{
    "server":"0.0.0.0",
    "server_port":8388,
    "password":"YOUR-PASSPHRASE-HERE",
    "method":"chacha20-ietf-poly1305",
    "mode":"tcp_and_udp",
    "timeout":300
}

Tsarin tsoho yana amfani da uwar garken: ["::1", "127.0.0.1"] (loopback kawai); canza shi zuwa "0.0.0.0" shine abin da ke sa uwar garken ya zama mai sauƙin isa daga adireshin IP na jama'a - kar a tsallake wannan idan kun kwafi fayil ɗin ajiya maimakon samfurin da ke sama.

Fara Sabis da Kunna Farawa ta atomatik

Inuwa-tsatsa

systemctl enable --now ssserver

systemctl status ssserver --no-pager

Ya kamata matsayi ya nuna aiki (yana gudana). Tabbatar cewa wani abu yana sauraro a tashar jiragen ruwa (dukkanin ladabi):

ss -lntp | grep ':8388'
ss -lunp | grep ':8388'

Idan sabis ɗin ya kasa farawa, hanya mafi sauri don ganin dalilin shine systemd journal (don ƙarin bayani game da karanta rajistan ayyukan Linux gabaɗaya, duba Yadda ake karanta rajistan ayyukan Linux da kuma inda za a same shi ):

journalctl -u ssserver -n 50 --no-pager

Shadowsocks-libev

systemctl restart shadowsocks-libev

systemctl enable shadowsocks-libev

systemctl status shadowsocks-libev --no-pager

Duba tashar jiragen ruwa da rajistan ayyukan kamar yadda yake a cikin shadowsocks-rust, maye gurbin sunan sabis ɗin:

ss -lntp | grep ':8388'
ss -lunp | grep ':8388'
journalctl -u shadowsocks-libev -n 50 --no-pager

Gina Haɗin Haɗin Abokin Ciniki

Abokan ciniki na Shadowsocks suna shigo da hanyar haɗin raba ss:// guda ɗaya (tsarin URL na SIP002) maimakon fayil ɗin saiti. Haɗin yana ɓoye sirrin da kalmar sirri a matsayin base64 a cikin ɓangaren bayanin mai amfani na URL:

ss://base64(method:password)@your_IP_address:port#label

Gina ɓangaren base64 akan sabar (wannan yana hana duk wani kuskuren rubutu daga rubutun hannu):

METHOD="2022-blake3-aes-256-gcm"
PASSWORD="YOUR-GENERATED-KEY-HERE"
USERINFO=$(echo -n "${METHOD}:${PASSWORD}" | base64 -w0)
echo "ss://${USERINFO}@your_IP_address:8388#My-SS-Server"

Misalin fitarwa (tare da maɓallin riƙe wuri):

ss://MjAyMi1ibGFrZTMtYWVzLTI1Ni1nY206eHl6X2V4YW1wbGVfa2V5X2hlcmU=@your_IP_address:8388#My-SS-Server

Rubutun bayan # kawai lakabin nuni ne da za ku iya sake suna cikin 'yanci a cikin kowane abokin ciniki. Don sabar shadowsocks-libev, maye gurbin METHOD="chacha20-ietf-poly1305" (ko aes-256-gcm) da kalmar sirrinsa daga Sashe na 4 maimakon. 

Juya shi zuwa lambar QR don abokan ciniki na wayar hannu su iya duba shi kai tsaye:

qrencode -o ~/ss-client.png "ss://${USERINFO}@your_IP_address:8388#My-SS-Server"

Kwafi PNG zuwa kwamfutarka tare da scp, gudanar da shi daga tashar kwamfutarka (ko PowerShell akan Windows), ba uwar garken ba:

scp root@your_IP_address:~/ss-client.png .

Haɗawa daga Windows

Duk abin da ke cikin wannan sashe yana faruwa ne akan kwamfutarka ta Windows, ba ta hanyar SSH ba - dole ne abokin ciniki ya yi aiki akan na'urar da za ta yi amfani da wakili.

Shigar da v2rayN

v2rayN abokin ciniki ne na GUI kyauta, mai kulawa sosai tare da tallafin Shadowsocks na asali tare da VLESS, VMess, Trojan, da sauransu. Sauke sabon fitowar daga shafin aikin.

Sami kadarar .zip ta Windows 64-bit (gina mai zaman kansa ba ya buƙatar lokacin gudu na .NET daban kamar na sabbin nau'ikan v2rayN), cire shi ko'ina, kuma gudanar da v2rayN.exe.

Shigo da sabar

Kwafi hanyar haɗin ss:// da aka gina a Sashe na 7 zuwa allon rubutu (ko kwafi QR PNG a saman tare da scp sannan ka buɗe shi), sannan a cikin v2rayN zaɓi Servers → Shigo da URL mai yawa daga allon rubutu (ko duba lambar QR ta hanyar na'urar daukar hoto da aka gina). Sabon bayanin martaba na sabar yana bayyana a cikin jerin tare da lakabin da ka saita bayan #.

Danna maɓallin bayanin martaba na dama ka zaɓi shi azaman mai aiki, sannan ka kunna wakilin tsarin (ko yanayin TUN, don sarrafa dukkan na'urar) daga babban kayan aikin taga.

Haɗawa daga macOS

Duk abin da ke cikin wannan sashe yana faruwa ne akan Mac ɗinku, ba ta hanyar SSH ba.

Shigar da ShadowsocksX-NG

ShadowsocksX-NG shine abokin ciniki na macOS GUI na asali na Shadowsocks; layin fitarwa na yanzu yana jigilar ginin Apple Silicon na asali tare da Intel. Sauke sabon .dmg daga shafin fitarwa.

Buɗe .dmg sannan ka ja ShadowsocksX-NG zuwa cikin Aikace-aikace, sannan ka ƙaddamar da shi - yana bayyana azaman gunki a cikin sandar menu.

Shigo da sabar

Kwafi hanyar haɗin ss:// daga Sashe na 7 zuwa allo ɗinka, sannan ka danna gunkin sandar menu → Sabar → Zaɓuɓɓukan Sabar → + a ƙasan hagu, sannan ka zaɓi "Shigo Daga Pasteboard" (ko ka duba lambar QR ɗin tare da "Duba Lambar QR Daga Allo" bayan buɗe PNG). Zaɓi sabon bayanin martaba daga jerin abubuwan da ke cikin sandar menu, sannan ka kunna "Shadowsocks: Kunna" sannan ka zaɓi "PAC Auto" ko yanayin hanya "Global" daga menu ɗaya.

Haɗawa daga Linux Desktop

Duk abin da ke cikin wannan sashe yana faruwa ne akan na'urar Linux ɗinku, ba akan VPS ba.

Shigar da abokin ciniki na gida

Idan ka shigar da shadowsocks-rust akan sabar a Sashe na 3, wannan rumbun adana bayanai ya ƙunshi sslocal, abokin ciniki na SOCKS5/HTTP na gida. Sauke shi kuma shigar da shi kamar yadda sabar binary ke yi (gyara ƙarin OS/arch don tebur ɗinka idan ba x86_64-unknown-linux-gnu ba ne):

SS_VER=$(curl -s https://api.github.com/repos/shadowsocks/shadowsocks-rust/releases/latest | grep -Po '"tag_name": "\K[^"]*')
wget "https://github.com/shadowsocks/shadowsocks-rust/releases/download/${SS_VER}/shadowsocks-${SS_VER}.x86_64-unknown-linux-gnu.tar.xz"
tar -xf shadowsocks-*.tar.xz
sudo install -m 755 sslocal /usr/local/bin/

Saita kuma gudanar

Ƙirƙiri ƙaramin saitin gida mai sauraro akan 127.0.0.1:1080 azaman wakili na SOCKS5:

mkdir -p ~/.config/shadowsocks-rust

cat > ~/.config/shadowsocks-rust/local.json << 'EOF'
{
    "server": "your_IP_address",
    "server_port": 8388,
    "password": "YOUR-GENERATED-KEY-HERE",
    "method": "2022-blake3-aes-256-gcm",
    "local_address": "127.0.0.1",
    "local_port": 1080,
    "mode": "tcp_and_udp"
}
EOF

sslocal -c ~/.config/shadowsocks-rust/local.json

Nuna saitunan burauzarka ko tsarin hanyar sadarwa a madadin SOCKS5 akan 127.0.0.1:1080. Ga GUI, forks na Nekoray ko ShadowsocksX-Qt5 zasu iya shigo da hanyar haɗin ss:// iri ɗaya daga Sashe na 7 kuma su sarrafa sslocal a gare ku maimakon gudanar da shi da hannu.

Haɗawa daga Android

Duk abin da ke nan yana faruwa ne akan na'urarka ta Android, ba ta hanyar SSH ba.

Shigar da abokin ciniki

Zaɓuka biyu masu kyau:

• Shadowsocks don Android — abokin ciniki na hukuma daga ƙungiyar shadowsocks. Shigar da shi daga Google Play (bincika "Shadowsocks"), ko sauke APK kai tsaye daga shafin fitarwa na aikin idan Play bai samuwa a cikin na'urarka ba yankin.
• v2rayNG - takwaransa na Android zuwa v2rayN, yana tallafawa Shadowsocks tare da VLESS/VMess/Trojan; yana da amfani idan kuna son app ɗaya don yarjejeniya da yawa iri.

Shigo da sabar

A cikin kowanne manhaja: danna maɓallin +, zaɓi "Shigo daga allo" bayan kwafi hanyar haɗin ss:// daga Sashe na 7, ko "Duba lambar QR" sannan ka nuna kyamarar zuwa PNG. Danna bayanin martaba da aka shigo da shi don zaɓar sa, sannan ka danna maɓallin haɗawa. Android za ta nemi izinin VPN a karon farko - ta amince da shi don kafa ramin. 

Haɗawa daga iOS

Duk abin da ke nan yana faruwa ne akan iPhone ko iPad ɗinku, ba ta hanyar SSH ba.

Shigar da abokin ciniki mai iya aiki da Shadowsocks

Shadowrocket shine abokin ciniki na iOS da aka fi amfani da shi sosai tare da tallafin Shadowsocks; manhaja ce da ake biya a yawancin shagunan. Nemi ta a cikin App Store, ko kuma a buɗe.

Streisand madadin kyauta ne, mai buɗe tushen aiki wanda kuma ke tallafawa Shadowsocks tare da VLESS, Trojan, da sauran yarjejeniyoyi.

Kasuwanni na Shagon App sun bambanta dangane da shagon/yanki kuma suna iya canzawa akan lokaci; idan babu ɗayansu a cikin naka, bincika Shagon App don neman "Shadowsocks" ko "V2Box".

Shigo da sabar

Kwafi hanyar haɗin ss:// zuwa allon rubutu, buɗe abokin ciniki, kuma yi amfani da zaɓin Ƙara/Shigowa daga allon rubutu, ko duba lambar QR daga Sashe na 7 tare da na'urar daukar hoto da aka gina a ciki ta abokin ciniki. Kunna sabon bayanin martaba; iOS zai nemi izinin saita VPN a karon farko, wanda zaku buƙaci amincewa ta hanyar ID na Fuskar, ID na taɓawa, ko lambar sirrinku.

Tabbatar da Haɗin

Da ramin yana aiki daga Sashe na 8, 9, 10, 11, ko 12, koma zuwa na'urarka (ba zaman SSH ba) kuma buɗe duk wani mai duba "menene IP dina" a cikin mai bincike - adireshin da aka nuna ya kamata ya dace da adireshin IP na VPS ɗinka, adireshin_IP_ naka.

Don tabbatarwa daga ɓangaren sabar maimakon haka, duba mujallar systemd don ayyukan haɗi kuma tabbatar da zaman da aka kafa akan tashar jiragen ruwa (yi amfani da ssserver don rust journal, ko shadowsocks-libev don libev journal):

journalctl -u ssserver -n 50 --no-pager
ss -tnp | grep ':8388'

reference:

Kammalawa

Bin wannan jagorar zai bar VPS ɗinku yana gudanar da sabar Shadowsocks nasa - ko dai shadowsocks-rust tare da sirrin AEAD-2022 na zamani, ko kuma shadowsocks-libev daga ma'ajiyar Ubuntu/Debian - a matsayin sabis na tsarin da ke tsira daga sake kunnawa ba tare da wani aiki daga ɓangarenku ba.

Ƙara ƙarin masu amfani:

• Mafi sauƙi: samar da kalmar sirri ta biyu (Sashe na 4) sannan a gudanar da wani misali na ssserver/shadowsocks-libev na biyu a kan wani tashar jiragen ruwa daban tare da fayil ɗin saitinsa da naúrar tsarin, sannan a maimaita Sashe na 5-7 don wannan tashar jiragen ruwa.
• shadowsocks-rust tare da ɓoyewar AEAD-2022 kuma yana goyan bayan masu amfani da yawa waɗanda ke raba tashar jiragen ruwa ɗaya da maɓallin samo kalmar sirri ta hanyar jerin "masu amfani" a cikin config.json (Kalmomi Masu Fadadawa, SIP022) - duba sashin Saita na README na shadowsocks-rust don ainihin tsarin idan kuna buƙatar lissafin zirga-zirgar kowane mai amfani akan tashar jiragen ruwa ɗaya.

Wasu halaye da suka cancanci ci gaba da bin su idan uwar garken yana aiki:

• A ci gaba da sabunta sabar. Don shadowsocks-rust, a riƙa sake gudanar da matakan saukewa da shigarwa daga Sashe na 3 lokaci-lokaci tare da sabon bincike, sannan a sake kunna systemctl ssserver. Don shadowsocks-libev, ingantaccen haɓakawa mai kyau yana rufe shi.
• Ajiye config.json a wani wuri na sirri daga sabar. Yana riƙe da kalmar sirri ta kowane abokin ciniki; rasa shi yana nufin sake samar da takardun shaida ga kowace na'ura.
• Juya kalmar sirri idan na'ura ta ɓace ko kuma an yi wa abokin ciniki lahani: samar da sabuwa (Sashe na 4), sabunta config.json, sake kunna sabis ɗin, da kuma sake gina hanyar haɗin abokin ciniki (Sashe na 7) ga kowace na'ura da ta rage.

Idan haɗin bai fito ba, duba tsari:

• Matsayin sabis (tsarin systemctl ssserver --no-pager, ko shadowsocks-libev) da kuma mujallar (journalctl -u ssserver -n 50 --no-pager)
• ƙa'idodin firewall (matsayin ufw - dole ne tashar jiragen ruwa ta kasance a buɗe ga tcp da udp)
• cewa tashar jiragen ruwa ba ta da wani sabis da aka riga aka ɗaure ta (ss -lntp | grep ':8388' ​​ya kamata ya nuna ssserver/ss-server kawai)
• cewa kalmar sirri, hanya, da tashar jiragen ruwa a cikin abokin ciniki sun dace daidai da config.json - harafi ɗaya mara daidaituwa yana kasa musabaha a hankali, yawanci yana nunawa azaman lokacin ƙarewa maimakon kuskure bayyananne
• An saita wannan yanayin zuwa tcp_and_udp akan sabar idan abokin ciniki yana buƙatar UDP (DNS-over-proxy, wasu wasanni/apps) ba kawai tcp_only ba

Kwatanta Shadowsocks da wasu zaɓuɓɓuka? Duba Jagorar Gaskiya ta Xray VLESS don yarjejeniyar da ta dogara da TLS wacce ta fi wahalar sa hannu a kan hanyar sadarwa mai tacewa sosai, Jagorar Shigar da Sabar AmneziaWG da Yadda ake saita Wireguard VPN akan sabar ku don madadin tushen WireGuard, ko saitin Hysteria2 da TUIC don ladabi biyu da aka gina don hanyoyin sadarwa masu asara ko masu tacewa sosai. Idan kuna buƙatar wakili mai sauƙi kawai maimakon saitin rami mai cikakken tsari, tsarin wakili na 3 akan CentOS/ArchLinux madadin ne mai sauƙi, kuma tsohon saitin sabar VPN akan Linux: PPTP ko OpenVPN? ya ƙunshi ladabi waɗanda suka fi sauƙi a saita amma sun fi sauƙi ga DPI don ganowa da toshewa. Don taurare uwar garken gabaɗaya da zarar wakili ya kasance kai tsaye, duba Masu Amfani da Linux: Gudanarwa da Izini.