Jagorar Gaskiya ta Xray VLESS: VPS, Windows, Mac, Android, iPhone

Wannan jagorar saitin sabar Xray VLESS Reality tana jagorantar ku ta hanyar tura wakili na zamani akan VPS ɗinku. VLESS tare da matakin tsaro na sufuri na Reality a halin yanzu shine saitin wakili da aka fi buƙata da kansa VLESS tare da matakin tsaro na sufuri na Reality a halin yanzu shine saitin wakili da aka fi buƙata da kansa: ba kamar VPN na gargajiya ba, ba ya samar da musayar hannu ta musamman ko sa hannun fakiti mai tsayayye. Reality yana ƙididdige musayar hannu ta TLS 1.3 na ainihin gidan yanar gizo mai shahara (abin da aka nufa), don haka ga tsarin DPI da ke kallon waya, haɗin zuwa sabar ɗinku yayi kama da wanda ke ziyartar wannan gidan yanar gizon - babu takardar shaidar karya ko ta sa hannu ta kai tsaye zuwa yatsan hannu, saboda sabar ɗinku tana tura takardar shaidar ainihin wurin da aka nufa a lokacin musayar hannu.

Tarin yarjejeniyar shine: VLESS (tabbacin sarrafa yarjejeniya mai sauƙi, mara ƙa'ida) wanda ke gudana akan XTLS Vision (yanayin sarrafa kwarara wanda ke hanzarta haɗin ta hanyar kwafin bayanan TLS da aka riga aka ɓoye a matakin soket ɗin) wanda Reality ta tabbatar (matakin ɓoyewa da aka bayyana a sama). Duk ukun sun fito ne daga aikin iri ɗaya, Xray-core, wanda ke magajin aikin V2Ray/V2Fly na asali.

Wannan jagorar tana saita sabar Xray da hannu, gaba ɗaya daga layin umarni, ba tare da kwamitin yanar gizo ba kuma babu Docker - ƙaramin sawun da zai yiwu akan VPS. Ba a buƙatar sunan yanki da siyan takardar shaidar TLS: Gaskiya tana aro takardar shaidar shafin da aka nufa don musafi kuma ba ta taɓa gabatar da ɗaya daga cikin nata ba. Na gaba, inda ya ce your_IP, za ku buƙaci shigar da adireshin IP ɗinku da aka sanya muku.

Abin da za ku buƙaci: VPS mai gudanar da Ubuntu 22.04/24.04 ko Debian 11/12, tushen shiga, adireshin IP na VPS ɗinku, da tashar TCP 443 kyauta (babu sabar yanar gizo, panel, ko wani wakili da ke sauraro a kai).

Ba ka da sabar tukuna? Duba Yadda ake yin odar sabar kuma a biya kuɗinta.

Da farko za a kwatanta wannan da sauran zaɓuɓɓukan da kai ke amfani da su? Duba Jagorar Tura Sabar AmneziaWG don madadin da ke tushen WireGuard, ko kuma saitin Hysteria2 da TUIC don wasu ƙa'idodi biyu na zamani, waɗanda ba sa jure takunkumi.

Haɗawa zuwa sabar

Windows (PuTTY)

Buɗe PuTTY, shigar da adireshin IP na VPS ɗinku a cikin filin Sunan Mai masaukin baki, saita tashar jiragen ruwa zuwa 22, kuma shiga azaman tushen ta amfani da kalmar sirri da mai ba da sabis na VPS ɗinku ya aiko muku da imel.

Adireshin IP na uwar garken: adireshin IP ɗinka
shiga kamar haka: tushen
Kalmar sirri: kalmar sirrinka

• Buɗe PuTTY, shigar da adireshin IP na VPS ɗinku a cikin filin Sunan Mai masauki.

• Saita tashar jiragen ruwa zuwa 22.

• Shigar da shiga a matsayin tushen.

• Yi amfani da kalmar sirri da mai samar da VPS ɗinka ya aiko maka da imel. Sannan ya kamata ka sauka akan saƙon harsashi na uwar garken.

Don ƙarin bayani game da haɗawa ta hanyar PuTTY/SSH, duba Yadda ake haɗawa zuwa sabar Linux ta hanyar SSH.

Linux / macOS (Terminal)

ssh root@your_IP

Duk umarnin da ke ƙasa ana gudanar da su ne a kan sabar, a cikin wannan zaman SSH ɗaya - wanda ya shafi Sashe na 2 zuwa 6, tare da duba ɓangaren sabar a Sashe na 10. Sashe na 7-9 (shigarwa da saita abokin ciniki na VPN) yana faruwa ne a kan na'urarka ta Windows/Android/iOS, tunda wannan ita ce na'urar da wakili ke buƙatar kunnawa; kowanne daga cikin waɗannan sassan yana faɗi a sarari waɗanne layuka, idan akwai, har yanzu suna taɓa sabar.

Shirya Sabar

Sabunta tsarin

Kafin shigar da wani abu, sabunta jerin fakitin kuma haɓaka fakitin da aka shigar:

apt update -y && apt upgrade -y

Idan zaman ya katse bayan an inganta shi, ana sa ran wannan (an sake kunna dbus/polkit) - kawai a sake haɗawa ta hanyar SSH. 

Idan wannan ya inganta kernel, sake kunnawa kyakkyawan ra'ayi ne kafin a ci gaba. (Don ƙarin bayani game da apt da yadda manajojin kunshin Linux ke aiki, duba Manajan Kunshin Linux .) Duba tare da:

cat /var/run/reboot-required

Idan fayil ɗin yana nan, sai a sake kunna shi da farko da 'sake kunnawa', a jira ~ daƙiƙa 30, sannan a sake haɗawa.

Shigar da kayan aikin da wannan jagorar ke amfani da su

apt install -y curl wget unzip openssl ufw qrencode

Mai saka Xray da kansa yana buƙatar lanƙwasa da buɗe zip; opensl yana samar da ɗan gajeren ID a Sashe na 4; ufw shine firewall ɗin da aka saita a ƙasa; qrencode yana mayar da hanyar haɗin abokin ciniki da aka gama zuwa lambar QR mai iya dubawa a Sashe na 7.

Duba agogon tsarin

Mu'amalar Reality ta haɗa da duba tambarin lokaci (filin maxTimeDiff, wanda aka kashe ta hanyar tsoho amma ya cancanci a sani), kuma agogon da ya yi shuru sosai zai iya sa tabbatar da takardar shaidar TLS ta yau da kullun ta yi mummunan aiki a wani wuri a kan sabar. Tabbatar cewa agogon ya daidaita:

timedatectl status

Idan "Agogon tsarin da aka daidaita" ya nuna "a'a", kunna shi da:

timedatectl set-ntp true

Saita maɓallin wuta (UFW)

Don ƙarin bayani game da ƙa'idodin UFW, duba Saita Firewall akan Linux.

Buɗe tashoshin jiragen ruwa guda biyu da za ku buƙaci: 22/tcp don SSH (ku tsallake wannan doka kuma kuna fuskantar haɗarin rasa damar shiga sabar) da 443/tcp, tashar jiragen ruwa ta Xray za ta saurara kuma tashar jiragen ruwa iri ɗaya da zirga-zirgar HTTPS ta yau da kullun ke amfani da ita - shi ya sa ya zama zaɓin da ya dace ga Reality.

ufw allow 22/tcp

ufw allow 443/tcp

ufw --force enable

ufw status

Dole ne duka ƙa'idodin su nuna kamar ALLOW a cikin fitowar yanayin ufw.

Shigar da Xray-core don VLESS Reality Server

Aikin Xray-core (XTLS) yana buga wani rubutun shigarwa da haɓakawa na hukuma wanda ke shigar da binary a matsayin sabis na tsarin. Yi bitar duk wani rubutun ɓangare na uku kafin a saka shi cikin bash - wannan ya fito kai tsaye daga ma'ajiyar aikin.

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install

Tabbatar cewa binary ɗin yana wurin kuma duba sigar da aka shigar:

/usr/local/bin/xray version

Idan fitowar umarnin ta yi kama da ta rataye kuma ta bayyana a rataye, danna Q don fita. An shigar da binary na Xray don /usr/local/bin/xray, kuma fayilolin saitinsa suna adanawa a cikin /usr/local/etc/xray/.

Haka kuma za ka iya amfani da irin wannan rubutun mai sakawa don haɓaka shigarwar da ke akwai. Don cikakken jerin zaɓuɓɓuka (gami da cirewa, sabuntawar geodata kawai, da juyawar rajista), gudanar da:

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" --help

Samar da Maɓallan da Takardun Shaida

Tabbatar da gaskiya ya dogara ne akan bayanai guda huɗu. Samar da su duka yanzu; za ku liƙa su cikin tsarin sabar a Sashe na 5.

Samar da UUID ga abokin ciniki

/usr/local/bin/xray uuid

Wannan shine ID ɗin mai amfani na VLESS — a ɗauke shi a matsayin takardar shaida, tunda shine abin da ke tabbatar da abokin ciniki ga sabar. A sake gudanar da umarnin ga kowace ƙarin na'ura ko mutumin da kake son ba wa damar shiga.

Haɗa maɓallan maɓalli na Reality X25519

/usr/local/bin/xray x25519

Wannan yana buga layuka uku: PrivateKey , Password , da Hash32 . PrivateKey yana shiga cikin tsarin sabar ne kawai kuma ba dole ba ne a taɓa raba shi. Kalmar sirri ita ce maɓallin jama'a da ta dace - duk da sunan, wannan shine ƙimar da kowane abokin ciniki ya shiga; Xray ya sake sunan filin daga PublicKey zuwa Kalmar sirri musamman don hana mutane buga shi ba tare da kulawa ba. Ana amfani da Hash32 ne kawai don fasalin VLESS Encryption daban kuma ba a buƙatar saitin Gaskiya.

Samar da ɗan gajeren ID

openssl rand -hex 8

Wannan yana samar da igiyar hexadecimal mai haruffa 16 da ake amfani da ita don raba abokan ciniki daban-daban ko ƙungiyoyin abokan ciniki. Dole ne uwar garken da abokin ciniki su yi amfani da ƙima iri ɗaya.

Zaɓi kuma gwada abin da ake nufi da Gaskiya

Manufar ita ce ainihin gidan yanar gizon da TLS ke yi wa uwar garkenka musabaha. Ya kamata ya goyi bayan TLS 1.3 da HTTP/2, bai kamata ya kasance a bayan CDN kamar Cloudflare ba (Xray yana tura duk wani zirga-zirga da ya gaza tantance gaskiya kai tsaye zuwa ga abin da aka nufa, don haka manufa ta gaba da CDN na iya mayar da uwar garkenka zuwa buɗaɗɗen relay don wannan CDN), kuma mafi kyau shine a dauki bakuncin kusan yankin cibiyar sadarwa iri ɗaya da VPS ɗinka don bayanin martaba mai yuwuwa na latency. Gwada ɗan takara kai tsaye daga uwar garken:

/usr/local/bin/xray tls ping www.microsoft.com:443

Yi amfani da sunan mai masaukin baki, ba URL ba. Wasu yankuna da aka saba amfani da su azaman maƙasudin Gaskiya saboda suna da ƙarfi, TLS 1.3-masu iyawa, kuma ba CDN-fronted ba: www.microsoft.com, addons.mozilla.org, dl.google.com. Gwada kaɗan kuma zaɓi wanda ke amsawa da aminci daga wurin VPS ɗinku; za ku yi amfani da sunan mai masauki iri ɗaya kamar shigarwar sunan manufa da kuma sunan uwar garken a Sashe na 5.

Rubuta Saitin Sabar

Ajiye tsarin da mai sakawa ya aika da shi, sannan buɗe fayil ɗin don gyarawa:

cp /usr/local/etc/xray/config.json /usr/local/etc/xray/config.json.orig
nano /usr/local/etc/xray/config.json

Buɗe fayil ɗin sanyi don gyarawa:

nano /usr/local/etc/xray/config.json

Sauya dukkan fayil ɗin da samfurin da ke ƙasa, ta hanyar maye gurbin UUID ɗinku, PrivateKey, gajeriyar ID, da sunan mai masaukin da aka nufa daga Sashe na 4 (da kuma tashar da kuka buɗe a Sashe na 2, idan kun canza shi daga 443):

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "listen": "0.0.0.0",
      "port": 443,
      "protocol": "vless",
      "settings": {
        "users": [
          {
            "id": "YOUR-UUID-HERE",
            "flow": "xtls-rprx-vision",
            "email": "client1"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "method": "raw",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "target": "www.microsoft.com:443",
          "serverNames": ["www.microsoft.com"],
          "privateKey": "YOUR-SERVER-PRIVATE-KEY",
          "shortIds": ["YOUR-SHORT-ID"]
        }
      }
    }
  ],
  "outbounds": [
    { "protocol": "freedom", "tag": "direct" },
    { "protocol": "blackhole", "tag": "blocked" }
  ]
}

Danna Ctrl+O (WriteOut) don adana fayil ɗin.

Danna Shigar don tabbatar da sunan fayil ɗin.

Danna Ctrl + X don fita daga nano.

Muhimman fannoni: users[].id shine UUID daga Sashe na 4; users[].flow yana kunna XTLS Vision; hanya (wanda a da ake kira network) tana zaɓar jigilar RAW, hanyar da aka dogara da TCP mai sauƙi Reality ke buƙata; manufa da serverNames sune shafin da kuka gwada a Sashe na 4; privateKey shine maɓallin X25519 na gefen uwar garken, ba ƙimar Kalmar sirri ba; shortIds yana lissafa duk abokan cinikin ID na gajere da aka yarda su gabatar. Don ƙara ƙarin masu amfani daga baya, ƙara ƙarin abubuwa zuwa jerin masu amfani, kowannensu yana da nasa UUID da lakabin imel, sannan sake kunna sabis ɗin.

Tun daga Xray 26.3.27, Reality inbound ba tare da takamaiman filin minClientVer ba yana tilasta tsoho na babban sigar uwar garken - tsoffin manhajojin abokin ciniki (tsohon manhajar abokin ciniki (tsohon manhajar v2rayN, v2rayNG, ko Streisand building containing wanda ke haɗa tsohuwar manhajar Xray-core) ana tura su cikin shiru zuwa shafin faɗuwar abin da aka nufa maimakon haɗawa, ba tare da wani kuskure a cikin manhajar ba kuma babu wani abu da ya faru a cikin log ɗin uwar garken. Idan abokin ciniki wanda ya saba aiki ba zato ba tsammani ya ƙare bayan sabuntawa, da farko gwada sabunta manhajar abokin ciniki da kansa; idan hakan ba zai yiwu ba, ƙara "minClientVer": "25.9.11" (ko wani tsohon tushe) a cikin realitySettings, a farashin sanya yatsan TLS na tsohon abokin ciniki ya zama ƙasa da na mai bincike na zamani.

Tabbatar da sake kunnawa

Gwada tsarin kafin sake kunna sabis ɗin kai tsaye - wannan yana kama kuskuren JSON da filayen da ba a tallafawa ba kafin su cire wakili:

/usr/local/bin/xray run -test -c /usr/local/etc/xray/config.json

Fara Sabis da Kunna Farawa ta atomatik

Sake kunna Xray tare da sabon saitin kuma kunna shi don farawa ta atomatik lokacin sake kunnawa:

systemctl enable --now xray

systemctl restart xray

systemctl status xray --no-pager

Ya kamata yanayi ya nuna aiki (yana gudana). Tabbatar cewa wani abu yana sauraro a tashar jiragen ruwa 443:

ss -lntp | grep ':443'

Idan Xray ya kasa farawa, hanya mafi sauri don ganin dalilin shine systemd journal (don ƙarin bayani game da karanta rajistan ayyukan Linux gabaɗaya, duba Yadda ake karanta rajistan ayyukan Linux da kuma inda za a same shi ):

journalctl -u xray -n 50 --no-pager

Gina Haɗin Haɗin Abokin Ciniki

Abokan ciniki na Xray suna shigo da hanyar haɗin raba vless:// guda ɗaya maimakon fayil ɗin tsari. Gina shi daga ƙimar da aka samar a Sashe na 4 (tsarin haɗin raba-manyan manhajojin abokin ciniki har yanzu yana amfani da tsohon suna type=tcp don jigilar kaya, kodayake filin JSON da kansa yanzu ana kiransa hanya):

KA-UUID — daga xray uuid (misali, a1b2c3d4-e5f6-7890-abcd-ef1234567890)

MABUƊINKA NA FARKO - MAƘAUNAR JAMA'A - shine Kalmar sirri daga xray x25519 (BA Maɓallin Sirri ba!)

Lambar ID ɗinka ta gajere — daga openssl rand -hex 8 (misali, a1b2c3d4e5f67890)

your_IP — (IP na sabar ku)

SNI — www.microsoft.com (ko kuma abin da kake so)

vless://YOUR-UUID-HERE@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server

Misali mahada: 

vless://a1b2c3d4-e5f6-7890-abcd-ef1234567890@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=xyz_public_key_here&sid=a1b2c3d4e5f67890&type=tcp&flow=xtls-rprx-vision#My-Xray-Server

pbk shine ƙimar Kalmar sirri daga xray x25519 (maɓallin jama'a, ba maɓallin sirri ba), sni ya dace da sunan mai masaukin da aka nufa, kuma rubutun bayan # kawai lakabin nuni ne da za ku iya sake suna kyauta a cikin kowane abokin ciniki.

Juya shi zuwa lambar QR don abokan ciniki na wayar hannu su iya duba shi kai tsaye:

qrencode -o ~/vless-client.png "vless://YOUR-UUID@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server"

Ko kuma a buga shi kai tsaye zuwa tashar ba tare da adana fayil ba:

qrencode -t ansiutf8 "vless://YOUR-UUID@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server"

Kwafi PNG zuwa kwamfutarka tare da scp, gudanar da shi daga tashar kwamfutarka (ko PowerShell akan Windows), ba uwar garken ba:

scp root@your_IP:~/vless-client.png .

Haɗawa daga Windows

Duk abin da ke cikin wannan sashe yana faruwa ne akan kwamfutarka ta Windows, ba ta hanyar SSH ba - dole ne abokin ciniki ya yi aiki akan na'urar da za ta yi amfani da wakili.

Shigar da v2rayN

v2rayN kyauta ne kuma mai kula da tsarin haɗin GUI na Xray-core, tare da tallafin VLESS/Reality na asali. Sauke sabon fitowar daga shafin aikin :

Sami kadarar .zip ta Windows 64-bit (gina mai zaman kansa ba ya buƙatar lokacin gudu na .NET daban kamar na sabbin nau'ikan v2rayN), cire shi ko'ina, kuma gudanar da v2rayN.exe.

Shigo da sabar

Kwafi hanyar haɗin vless:// da aka gina a Sashe na 7 zuwa allon rubutu (ko kwafi QR PNG a saman tare da scp sannan ka buɗe ta), sannan a cikin v2rayN zaɓi Servers. Shigo da URL mai yawa daga allon rubutu (ko duba lambar QR ta hanyar na'urar daukar hoto da aka gina). Sabon bayanin martaba na sabar yana bayyana a cikin jerin tare da lakabin da ka saita bayan #.

Danna maɓallin bayanin martaba na dama ka zaɓi shi azaman mai aiki, sannan ka kunna wakilin tsarin (ko yanayin TUN, don sarrafa dukkan na'urar) daga babban kayan aikin taga.

Haɗawa daga Android

Duk abin da ke nan yana faruwa ne akan na'urarka ta Android, ba ta hanyar SSH ba.

Shigar da v2rayNG

v2rayNG shine abokin ciniki na Android da v2rayN, daga mai kula da shi ɗaya, kuma shine abokin ciniki na Xray da aka fi amfani da shi akan Android. Shigar da shi daga Google Play, ko sauke APK kai tsaye daga shafin fitarwa na aikin idan Play bai samuwa a yankinku ba:

Shigo da sabar

Buɗe v2rayNG, danna maɓallin + da ke sama dama, sannan zaɓi Shigo da tsari daga Clipboard bayan kwafi hanyar haɗin vless://, ko Duba lambar QR sannan ka nuna kyamarar zuwa PNG da aka samar a Sashe na 7. Danna bayanin martaba da aka shigo da shi don zaɓar sa, sannan ka danna maɓallin haɗin zagaye da ke ƙasa. Android zai nemi izinin VPN a karon farko - amince da shi don kafa ramin.

Haɗawa daga iOS

Duk abin da ke nan yana faruwa ne akan iPhone ko iPad ɗinku, ba ta hanyar SSH ba. Ka'idojin App Store na Apple sun nuna cewa abokan ciniki na Xray/VLESS akan iOS galibi suna da kyauta amma lokaci-lokaci ana biyan su, kuma ana amfani da su daban-daban maimakon fasalin da aka haɗa da tsarin.

Shigar da abokin ciniki mai iya aiki da Gaskiya

Streisand abokin ciniki ne kyauta, mai buɗe tushen bayanai wanda ke tallafawa VLESS tare da Reality, tare da wasu yarjejeniyoyi da yawa. Nemi shi a cikin Shagon App, ko buɗe wannan hanyar haɗin.

Kasuwanni na Shagon App sun bambanta dangane da shagon/yanki kuma suna iya canzawa akan lokaci; idan Streisand ba a bayyane yake a naka ba, madadin da ke da tallafin VLESS+Reality sun haɗa da Happ, V2Box, da V2rayTun - bincika Shagon App don duk wanda ke samuwa a asusunka.

Shigo da sabar

Kwafi hanyar haɗin vless:// zuwa allon rubutu, buɗe abokin ciniki, kuma yi amfani da zaɓin Ƙara daga allo (ko makamancin haka "shigo da kaya"), ko duba lambar QR daga Sashe na 7 tare da na'urar daukar hoto da aka gina a ciki ta abokin ciniki. Kunna sabon bayanin martaba; iOS zai nemi izinin saita VPN a karon farko, wanda zaku buƙaci amincewa ta hanyar ID na Fuskar, ID na taɓawa, ko lambar sirrinku.

Tabbatar da Haɗin

Da ramin yana aiki daga Sashe na 8, 9, ko 10, koma zuwa na'urarka (ba zaman SSH ba) kuma buɗe duk wani mai duba "menene IP dina" a cikin burauza - adireshin da aka nuna ya kamata ya dace da adireshin IP na VPS ɗinka.

Don tabbatarwa daga ɓangaren sabar maimakon haka, duba littafin systemd don ayyukan haɗi kuma tabbatar da zaman TCP da aka kafa akan tashar jiragen ruwa 443:

journalctl -u xray -n 50 --no-pager
ss -tnp | grep ':443'

A matakin rajista na "gargaɗi" na tsoho, Xray ba ya yin rubutu sosai game da haɗin kai ɗaya; idan kuna buƙatar ganin ƙarin bayani yayin gyara matsala, saita "loglevel" na ɗan lokaci a cikin config.json kuma sake kunna sabis ɗin, sannan ku mayar da shi zuwa gargaɗi da zarar abubuwa suna aiki.

reference:

Kammalawa

Bin wannan jagorar zai bar VPS ɗinku yana gudanar da sabar Xray VLESS+Reality ta kansa, wacce aka ɓoye a matsayin zirga-zirgar HTTPS ta yau da kullun zuwa gidan yanar gizo na gaske, ba tare da yanki ko takardar shaidar kulawa ba. Sabis ɗin yana gudana azaman xray naúrar systemd kuma yana tsira daga sake kunnawa ba tare da wani aiki daga ɓangarenku ba.

Ƙara sabbin abokan ciniki a kowane lokaci ta hanyar ƙara wani abu zuwa jerin masu amfani a cikin config.json tare da sabon UUID daga xray uuid da lakabin imel na musamman, sannan sake kunna sabis ɗin (tsarin sake farawa xray) da gina wannan mai amfani hanyar haɗin raba su daga Sashe na 7. Raba UUIDs ga kowane mutum ko na'ura yana ba da damar soke ɗaya ba tare da damun wani ba.

Wasu halaye da suka cancanci ci gaba da bin su idan uwar garken yana aiki:

• A ci gaba da gyara Xray. A sake gudanar da rubutun shigarwa daga Sashe na 3 lokaci-lokaci - yana haɓaka shigarwar da ke akwai a wurin - kuma a ci gaba da sabunta manhajojin abokin ciniki, idan aka yi la'akari da halayen minClientVer da aka lura a Sashe na 5.
• Ajiye config.json a wani wuri na sirri daga sabar. Yana riƙe da maɓallin sirri na uwar garken Reality da UUID na kowane abokin ciniki; rasa shi yana nufin sake samar da takaddun shaida ga kowace na'ura.
• Cire na'urorin da suka ɓace nan take. Cire shigarwar da ta dace daga jerin masu amfani a cikin config.json kuma sake kunna sabis ɗin.

Idan haɗin bai fito ba, duba tsari:

• Matsayin sabis (matsayin systemctl xray --no-pager) da kuma mujallar (journalctl -u xray -n 50 --no-pager)
• ƙa'idodin firewall (matsayin ufw - dole ne tashar jiragen ruwa 443/tcp ta kasance a buɗe)
• wannan tashar jiragen ruwa 443 ba ta riga ta ɗaure ta da wani sabis ba (ss -lntp | grep ':443' yakamata ya nuna xray kawai)
• cewa UUID, maɓallan jama'a, gajeren ID, SNI, da kwarara a cikin daidaitawar abokin ciniki config.json daidai - harafin da bai dace ba ɗaya ya kasa musabaha a hankali
• Gaskiyar ta kai hari kanta, tare da xray tls ping :443, idan shafin ya canza tsarin TLS ɗinsa

Kwatanta Xray da wasu zaɓuɓɓuka? Duba Jagorar Tura Sabar AmneziaWG da Yadda ake saita Wireguard VPN akan sabar ku don madadin tushen WireGuard, ko saitin Hysteria2 da TUIC don wasu ƙa'idodi guda biyu masu jure takunkumi waɗanda aka gina don hanyoyin sadarwa masu asara ko masu tacewa sosai. Idan kuna buƙatar wakili mai sauƙi kawai maimakon cikakken saitin rami, tsarin 3proxy akan CentOS/ArchLinux madadin ne mai sauƙi, kuma tsohon saitin sabar VPN akan Linux: PPTP ko OpenVPN? ya ƙunshi ƙa'idodi waɗanda suka fi sauƙi a saita amma sun fi sauƙi ga DPI don ganowa da toshewa. Don taurare sabar gabaɗaya da zarar wakili ya kasance kai tsaye, duba Masu Amfani da Linux: Gudanarwa da Izini.