Tilmaamaha Xaqiiqada Xray VLESS: VPS, Windows, Mac, Android, iPhone

Tilmaamahan dejinta server-ka Xray VLESS Reality wuxuu ku hagayaa inaad adeegsato wakiil casri ah oo ku jira VPS-gaaga. VLESS oo leh lakabka amniga gaadiidka ee Reality hadda waa dejinta wakiilka ee ugu badan ee la codsado VLESS oo leh lakabka amniga gaadiidka ee Reality hadda waa dejinta wakiilka ee ugu badan ee la codsado: si ka duwan VPN-ka caadiga ah ma soo saarto gacan-qabasho gaar ah ama saxiix baakad go'an. Reality waxay nuqul ka sameysaa gacan-qabashada TLS 1.3 ee degel dhab ah oo caan ah (bartilmaameedka), sidaa darteed nidaamka DPI ee daawanaya fiilada, xiriirka server-kaaga wuxuu u eg yahay qof booqanaya degelkaas - ma jiro shahaado been abuur ah ama is-saxiix ah oo faraha lagu saarayo, sababtoo ah server-kaagu wuxuu si kooban u gudbinayaa shahaadada dhabta ah ee goobta bartilmaameedka inta lagu jiro gacan-qabashada.

Isugeynta borotokoolka waa: VLESS (aqoonsiga maaraynta borotokoolka wakiil ee fudud, oo aan lahayn dawlad) oo ka socda XTLS Vision (qaab xakameyn socod ah oo dedejiya isku xirka isagoo nuqul ka sameynaya diiwaannada TLS ee hore loo qariyay heerka godka cayriin) oo ay xaqiijisay Reality (lakabka qarinta ee kor lagu sharaxay). Saddexduba waxay ka yimaadeen isla mashruuca, Xray-core, oo ah badalka si firfircoon loo ilaaliyo ee mashruuca asalka ah ee V2Ray/V2Fly.

Hagahan wuxuu gacanta ku dejiyaa server Xray ah, oo gebi ahaanba ka yimid khadka taliska, iyada oo aan lahayn guddi shabakadeed iyo Docker - raadadka ugu yar ee suurtogalka ah ee VPS. Looma baahna magac domain iyo iibsi shahaado TLS ah: Reality waxay amaahsataa shahaadada goobta bartilmaameedka ah ee is-gacan-qaadka mana soo bandhigto mid u gaar ah. Marka xigta, meesha ay ku qoran tahay your_IP, waxaad u baahan doontaa inaad geliso cinwaanka IP-gaaga loo qoondeeyay.

Waxaad u baahan doontaa: VPS oo ku shaqeeya Ubuntu 22.04/24.04 ama Debian 11/12, marin u helidda xididka, cinwaanka IP-ga ee VPS-gaaga, iyo dekedda TCP 443 oo bilaash ah (ma jiro server shabakadeed, guddi, ama wakiil kale oo hore u dhegaysanayay).

Ma haysatid server weli? Eeg Sida loo dalbado server oo loo bixiyo.

Marka hore ma isbarbar dhigaysaa xulashooyinka kale ee iskood isu martigeliya? Eeg Hagaha Hawlgalinta Adeegga AmneziaWG ee beddelka ku salaysan WireGuard, ama dejinta Hysteria2 iyo TUIC ee laba hab-raac oo kale oo casri ah oo u adkaysta faafreebka.

Ku xidhidda Server-ka

Daaqadaha (PuTTY)

Fur PuTTY, geli cinwaankaaga IP-ga VPS-ga ee goobta Magaca Martida, u deji dekedda 22, oo gal asal ahaan adoo isticmaalaya erayga sirta ah ee uu bixiyahaaga VPS kuu soo diray email ahaan.

Cinwaanka IP-ga ee server-ka: cinwaanka IP-gaaga
gal sida: root
Furaha sirta ah: eraygaaga sirta ah

• Fur PuTTY, geli cinwaankaaga IP-ga VPS ee ku yaal goobta Magaca Martigeliyaha.

• Dekedda u deji 22.

• Geli gal sida xidid.

• Isticmaal erayga sirta ah ee uu bixiyahaaga VPS kuu soo diray email ahaan. Kadib waa inaad ku dhacdaa codsiga qolofka server-ka.

Wixii faahfaahin dheeraad ah oo ku saabsan isku xirka iyada oo loo marayo PuTTY/SSH, fiiri Sida loogu xidho server-ka Linux iyada oo loo marayo SSH.

Linux / macOS (terminal)

ssh root@your_IP

Dhammaan amarrada hoose waxaa lagu maamulaa server-ka, isla kalfadhigan SSH - kaas oo daboolaya Qaybaha 2 ilaa 6, oo lagu daray hubinta dhinaca server-ka ee Qaybta 10. Qaybaha 7-9 (rakibidda iyo habaynta macmiilka VPN) waxay ka dhacaan qalabkaaga Windows/Android/iOS, maadaama taasi tahay qalabka wakiilku u baahan yahay inuu ku shaqeeyo; mid kasta oo ka mid ah qaybahaas ayaa si cad u sheegaya khadadka, haddii ay jiraan, ee weli taabanaya server-ka.

Diyaarinta Server-ka

Cusbooneysii nidaamka

Kahor intaadan wax rakibin, cusbooneysii liiska xirmada oo cusbooneysii xirmooyinka la rakibay:

apt update -y && apt upgrade -y

Haddii kalfadhiga la joojiyo ka dib casriyeynta habboon, tan ayaa la filayaa (dbus/polkit dib ayaa loo bilaabay) - kaliya dib ugu xidh SSH. 

Haddii tani ay kor u qaaddo kernel-ka, dib-u-bilaabiddu waa fikrad wanaagsan ka hor inta aan la sii wadin. (Si aad u hesho dib-u-eegis ku saabsan apt iyo sida maamulayaasha xirmooyinka Linux u shaqeeyaan, eeg Maamulayaasha Xirmooyinka Linux .) Hubi:

cat /var/run/reboot-required

Haddii faylka uu jiro, marka hore dib u bilow adigoo isticmaalaya 'dib u bilow', sug ~ 30 ilbiriqsi, ka dibna dib u xidh.

Ku rakib aaladaha uu buugani isticmaalo

apt install -y curl wget unzip openssl ufw qrencode

Qallooc iyo furid ayaa looga baahan yahay rakibaha Xray laftiisa; opensl wuxuu soo saaraa aqoonsiga gaaban ee Qaybta 4; ufw waa dab-damiska hoos ku habaysan; qrencode wuxuu isku xirka macmiilka ee dhammaaday u rogaa kood QR ah oo la sawiri karo Qaybta 7.

Hubi saacadda nidaamka

Gacan-qaadka Reality waxaa ku jira hubinta waqtiga (goobta maxTimeDiff, oo si caadi ah loo naafeeyay laakiin u qalanta in la ogaado), saacad si muuqata u luntay ayaa sidoo kale ka dhigi karta xaqiijinta shahaadada TLS ee caadiga ah mid aan habboonayn meel kale oo server-ka ah. Xaqiiji in saacaddu ay isku mid tahay:

timedatectl status

Haddii "Saacadaha nidaamku ay isku-dubaridmaan" ay muujiyaan "maya", ku daar:

timedatectl set-ntp true

Hagaaji dab-damiska (UFW)

Wixii dheeraad ah oo ku saabsan xeerarka UFW, fiiri Habaynta Dab-damiska ee Linux.

Fur labada dekedood ee aad u baahan doonto: 22/tcp SSH (ka bood xeerkan waxaadna halis ugu jirtaa inaad lumiso marin u helidda server-ka) iyo 443/tcp, dekedda Xray ayaa dhegaysan doonta isla dekeddaas oo taraafikada caadiga ah ee HTTPS ay isticmaasho - waana sababta saxda ah ee ay u tahay doorashada saxda ah ee Reality.

ufw allow 22/tcp

ufw allow 443/tcp

ufw --force enable

ufw status

Labada xeerba waa inay muujiyaan sida ALLOW ee wax soo saarka xaaladda ufw.

Ku rakibidda Xray-core ee VLESS Reality Server

Mashruuca Xray-core (XTLS) wuxuu daabacaa qoraal rasmi ah oo rakibaad iyo casriyeyn ah kaas oo ku rakibaya binary-ga adeeg nidaamsan. Dib u eeg qoraal kasta oo dhinac saddexaad ah ka hor intaadan ku shubin bash - kan ayaa si toos ah uga yimid kaydka mashruuca.

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install

Hubi in binary-gu uu meesha ku jiro oo hubi nooca la rakibay:

/usr/local/bin/xray version

Haddii wax soo saarka amarka uu yahay mid bogsan oo u muuqda inuu laalaadayo, riix Q si aad uga baxdo. Binary-ga Xray waxaa loo rakibay si /usr/local/bin/xray, faylasha habaynteedana waxaa lagu kaydiyaa /usr/local/etc/xray/.

Waxa kale oo aad isticmaali kartaa isla qoraalka rakibaha si aad u cusbooneysiiso rakibaad hore u jirtay. Si aad u hesho liis dhammaystiran oo ikhtiyaarro ah (oo ay ku jiraan ka saarista, cusbooneysiinta xogta-geodata-kaliya, iyo wareegga log), socodsii:

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" --help

Soo saarista Furayaasha iyo Aqoonsiga

Xaqiijinta xaqiiqada waxay ku tiirsan tahay afar xog. Hadda soo saar dhammaantood; waxaad ku dhejin doontaa habaynta server-ka Qaybta 5.

Abuur UUID macmiilka

/usr/local/bin/xray uuid

Kani waa aqoonsiga isticmaalaha VLESS — u dhaqan sidii aqoonsi, maadaama ay tahay waxa macmiilka u xaqiijiya server-ka. Mar kale ku socodsii amarka qalab kasta oo dheeraad ah ama qof kasta oo aad rabto inaad u ogolaato marin u helid.

Abuur lammaanaha furaha ee Reality X25519

/usr/local/bin/xray x25519

Tani waxay daabacdaa saddex sadar: PrivateKey , Password , iyo Hash32 . PrivateKey waxay gashaa oo keliya habaynta server-ka waana in aan waligood la wadaagin. Furaha sirta ah waa furaha dadweynaha ee u dhigma - inkasta oo magaca la leeyahay, tani waa qiimaha macmiil kastaa galo; Xray wuxuu goobta uga beddelay PublicKey una beddelay Password si gaar ah si looga niyad jabiyo dadka inay si taxaddar la'aan ah u daabacaan. Hash32 waxaa loo isticmaalaa oo keliya sifada VLESS ee gaarka ah ee Encryption-ka mana loo baahna dejinta Reality.

Samee aqoonsi gaaban

openssl rand -hex 8

Tani waxay soo saartaa xarig lix-geesood ah oo 16-xaraf ah oo loo isticmaalo in lagu kala saaro macaamiil kala duwan ama kooxaha macaamiisha. Labada server-ka iyo macmiilkuba waa inay isticmaalaan qiime isku mid ah.

Dooro oo tijaabi bartilmaameedka Xaqiiqada ah

Bartilmaameedku waa bogga internetka ee dhabta ah ee TLS uu gacantiisa ku saleeyo server-kaagu. Waa inuu taageeraa TLS 1.3 iyo HTTP/2, waa inaanu gadaashiisa ku fadhiisan CDN sida Cloudflare (Xray wuxuu u gudbiyaa taraafikada kasta oo ku guuldareysata xaqiijinta xaqiiqada si toos ah bartilmaameedka, sidaa darteed bartilmaameedka CDN-ka ee hore loo sii wado wuxuu server-kaaga u rogi karaa relay furan oo loogu talagalay CDN-kaas), waana ku habboon yahay in lagu martigeliyo qiyaastii isla gobolka shabakadda sida VPS-gaaga si aad u hesho muuqaal daahitaan oo macquul ah. Tijaabi musharax si toos ah server-ka:

/usr/local/bin/xray tls ping www.microsoft.com:443

Isticmaal magaca martida ee qaawan, ee ha isticmaalin URL. Dhowr domain oo caadi ahaan loo isticmaalo bartilmaameedyada xaqiiqada sababtoo ah waa kuwo deggan, awood u leh TLS 1.3, oo aan ahayn CDN-fronted: www.microsoft.com, addons.mozilla.org, dl.google.com. Tijaabi dhowr oo dooro mid si kalsooni leh uga jawaaba goobta VPS-gaaga; waxaad isticmaali doontaa isla magaca martida ee la midka ah labada bartilmaameed iyo galka serverNames ee Qaybta 5.

Qorista Habaynta Server-ka

Ku kaydi hab-dhismeedka rakibaha la soo diray, ka dibna fur faylka si aad wax uga beddesho:

cp /usr/local/etc/xray/config.json /usr/local/etc/xray/config.json.orig
nano /usr/local/etc/xray/config.json

Fur faylka habaynta si aad wax uga beddesho:

nano /usr/local/etc/xray/config.json

Ku beddel faylka oo dhan qaab-dhismeedka hoose, adoo beddelaya UUID-gaaga, PrivateKey-gaaga, aqoonsiga gaaban, iyo magaca martida bartilmaameedka ee Qaybta 4 (iyo dekedda aad ka furtay Qaybta 2, haddii aad ka beddeshay 443):

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "listen": "0.0.0.0",
      "port": 443,
      "protocol": "vless",
      "settings": {
        "users": [
          {
            "id": "YOUR-UUID-HERE",
            "flow": "xtls-rprx-vision",
            "email": "client1"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "method": "raw",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "target": "www.microsoft.com:443",
          "serverNames": ["www.microsoft.com"],
          "privateKey": "YOUR-SERVER-PRIVATE-KEY",
          "shortIds": ["YOUR-SHORT-ID"]
        }
      }
    }
  ],
  "outbounds": [
    { "protocol": "freedom", "tag": "direct" },
    { "protocol": "blackhole", "tag": "blocked" }
  ]
}

Riix Ctrl+O (WriteOut) si aad u kaydiso faylka.

Riix Enter si aad u xaqiijiso magaca faylka.

Riix Ctrl + X si aad uga baxdo nano.

Meelaha muhiimka ah: users[].id waa UUID laga bilaabo Qaybta 4; users[].flow wuxuu shidaa XTLS Vision; habka (oo hore loogu yeeri jiray shabakad) wuxuu doortaa gaadiidka RAW, habka caadiga ah ee ku salaysan TCP ee Reality u baahan tahay; bartilmaameedka iyo serverNames waa goobta aad ku tijaabisay Qaybta 4; privateKey waa furaha dhinaca server-ka X25519, waligiis qiimaha erayga sirta ah; shortIds wuxuu taxayaa dhammaan macaamiisha aqoonsiga gaaban ee loo ogol yahay inay soo bandhigaan. Si aad ugu darto isticmaaleyaal badan hadhow, ku dar walxo dheeraad ah safka isticmaalayaasha, mid walbana wuxuu leeyahay UUID iyo calaamadda iimaylka, ka dibna dib u bilow adeegga.

Tan iyo Xray 26.3.27, Reality inbound oo aan lahayn goob minClientVer ah oo cad ayaa dhaqan gelinaysa qaab caadi ah oo ah nooca asaasiga ah ee server-ka - barnaamijyada macmiilka ee duugoobay (v2rayN oo duugoobay, v2rayNG, ama Streisand build build oo ku xidha Xray-core-kii hore) si aamusnaan ah ayaa loogu wareejinayaa bogga dib u dhaca bartilmaameedka halkii laga xiri lahaa, iyada oo aan wax qalad ah ku jirin macmiilka iyo wax si cad u khaldan diiwaanka server-ka. Haddii macmiil si lama filaan ah u shaqayn jiray uu ka dib markii la cusbooneysiiyo, marka hore isku day inaad cusboonaysiiso abka macmiilka laftiisa; haddii taasi aysan suurtogal ahayn, ku dar "minClientVer": "25.9.11" (ama saldhig kale oo duug ah) gudaha realitySettings, iyadoo kharashka ka dhigaysa faraha TLS ee macmiilka da'da weyn mid aan la jaan qaadi karin biraawsarka casriga ah.

Xaqiiji oo dib u bilow

Tijaabi habaynta ka hor intaadan dib u bilaabin adeegga tooska ah - tani waxay qabataa khaladaadka JSON iyo meelaha aan la taageerin ka hor inta aysan hoos u dhigin wakiilka:

/usr/local/bin/xray run -test -c /usr/local/etc/xray/config.json

Bilaabidda Adeegga iyo Hirgelinta Bilaabidda Auto

Dib u bilow Xray iyadoo la adeegsanayo qaabaynta cusub oo u suurtagelisa inuu si toos ah u bilaabo marka dib loo bilaabo:

systemctl enable --now xray

systemctl restart xray

systemctl status xray --no-pager

Xaaladdu waa inay muujisaa firfircoon (socda). Xaqiiji in wax dhab ahaantii ay dhageysanayaan dekedda 443:

ss -lntp | grep ':443'

Haddii Xray uu ku guuldareysto inuu bilaabo, habka ugu dhaqsaha badan ee lagu ogaan karo sababta waa joornaalka nidaamka (si aad u ogaato asalka akhrinta diiwaannada Linux guud ahaan, fiiri Sida loo akhriyo diiwaannada Linux iyo meesha laga heli karo ):

journalctl -u xray -n 50 --no-pager

Dhisidda Xiriirka Xiriirka Macaamiisha

Macaamiisha Xray waxay soo dejiyaan hal xiriiriye oo vless:// ah halkii ay ka soo dejisan lahaayeen fayl habayn ah. Ka dhis qiimayaasha laga soo saaray Qaybta 4 (qaabka isku xirka wadaagga ee abka macaamiisha ayaa wali isticmaalaya magaca hore ee nooca=tcp ee gaadiidka, inkastoo goobta JSON lafteeda hadda loo yaqaan habka):

AAD-UUID — laga bilaabo xray uuid (tusaale ahaan, a1b2c3d4-e5f6-7890-abcd-ef1234567890)

FURAHAAGA-FURAHA-DAAWAN - waa erayga sirta ah ee ka yimid xray x25519 (MAYA PrivateKey!)

Aqoonsigaaga-GAABAN — laga bilaabo openssl rand -hex 8 (tusaale ahaan, a1b2c3d4e5f67890)

your_IP — (IP-ga server-kaaga)

SNI — www.microsoft.com (ama bartilmaameedkaaga)

vless://YOUR-UUID-HERE@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server

Tusaalaha isku xidhka: 

vless://a1b2c3d4-e5f6-7890-abcd-ef1234567890@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=xyz_public_key_here&sid=a1b2c3d4e5f67890&type=tcp&flow=xtls-rprx-vision#My-Xray-Server

pbk waa qiimaha erayga sirta ah ee laga helo xray x25519 (furaha dadweynaha, waligiis furaha gaarka ah), sni wuxuu la mid yahay magaca martida loo yahay ee bartilmaameedka ah, qoraalka ka dambeeya # waa calaamad muujinaysa oo aad si xor ah ugu beddeli karto macaamiil kasta.

U rog koodka QR si macaamiisha moobaylku si toos ah u sawiraan:

qrencode -o ~/vless-client.png "vless://YOUR-UUID@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server"

Ama si toos ah ugu daabac terminal-ka adigoon fayl kaydin:

qrencode -t ansiutf8 "vless://YOUR-UUID@your_IP:443?encryption=none&security=reality&sni=www.microsoft.com&fp=chrome&pbk=YOUR-PASSWORD-PUBLIC-KEY&sid=YOUR-SHORT-ID&type=tcp&flow=xtls-rprx-vision#My-Xray-Server"

Ku koobi garee PNG-ka kombiyuutarkaaga adiga oo isticmaalaya scp, ka shaqee terminal-ka kombiyuutarkaaga (ama PowerShell-ka Windows), ee ha ka shaqeyn server-ka:

scp root@your_IP:~/vless-client.png .

Ku xidhitaanka Windows

Wax kasta oo qaybtan ku jira waxay ku dhacaan PC-gaaga Windows, ee maaha SSH - macmiilku waa inuu ku shaqeeyaa qalabka dhab ahaantii isticmaali doona wakiilka.

Ku rakib v2rayN

v2rayN waa qalab bilaash ah oo si firfircoon loo ilaaliyo oo loogu talagalay macaamiisha GUI oo leh Xray-core, oo leh taageero VLESS/Reality oo asal ah. Kala soo deg sii deynta ugu dambeysay bogga mashruuca :

Soo qaado hantida Windows 64-bit .zip (dhisme iskiis u shaqeeya uma baahna waqti go'an oo .NET ah sida noocyada v2rayN ee dhawaan), ka soo saar meel kasta, oo socodsii v2rayN.exe.

Soo dejiso server-ka

Ku koobi xiriirka vless:// ee ku dhex jira Qaybta 7 ee ku jira boodhkaaga (ama koobi QR PNG oo ku dul saar scp oo fur), ka dibna v2rayN dooro Servers dheeraad ah Soo dejiso URL-ka badan ee ku jira boodhka (ama iskaan koodka QR iyada oo loo marayo iskaanka ku dhex jira). Bogga cusub ee server-ka ayaa ka muuqda liiska oo leh calaamadda aad dejisay ka dib #.

Midig-guji profile-ka oo dooro mid firfircoon, ka dibna awood u yeelo wakiilka nidaamka (ama qaabka TUN, si loogu wareejiyo mashiinka oo dhan) laga bilaabo qalabka daaqadda weyn.

Ku xidhitaanka Android

Wax walba oo halkan ku yaal waxay ku dhacaan qalabkaaga Android, ee maaha SSH.

Ku rakib v2rayNG

v2rayNG waa Android-ka u dhigma v2rayN, oo ka yimid isla ilaaliyeha, waana macmiilka Xray ee ugu isticmaalka badan Android. Ku rakib Google Play, ama kala soo deg APK-ka si toos ah bogga sii deynta mashruuca haddii Play aan laga heli karin gobolkaaga:

Soo dejiso server-ka

Fur v2rayNG, taabo badhanka + ee ku yaal dhinaca sare ee midig, oo dooro Soo dejinta habaynta Clipboard ka dib markaad nuqul ka sameyso xiriirka vless://, ama Iskaan koodka QR oo kamaradda ku tilmaam PNG-ga laga soo saaray Qaybta 7. Taabo astaanta la soo dejiyay si aad u doorato, ka dibna taabo badhanka isku xirka wareega ee hoose. Android ayaa ku weydiin doonta ogolaanshaha VPN markii ugu horreysay - ansixin doonta si loo dhiso godka.

Ku xidhidda iOS

Wax walba halkan waxay ku dhacaan iPhone-kaaga ama iPad-kaaga, ee ma aha SSH. Tilmaamaha App Store-ka Apple waxay la macno tahay in macaamiisha Xray/VLESS ee iOS ay caadi ahaan bilaash yihiin laakiin mararka qaarkood lacag la bixiyo, barnaamijyo gooni ah halkii ay ka ahaan lahaayeen astaamo nidaam isku dhafan.

Ku rakib macmiil awood u leh xaqiiqada

Streisand waa macaamiil bilaash ah oo furan oo taageera VLESS oo leh Reality, oo ay weheliso dhowr borotokool oo kale. Ka raadi App Store, ama fur xiriirkan.

Buugaagta App Store way ku kala duwan yihiin dukaanka/gobolka waxayna isbeddeli karaan waqti ka dib; haddii Streisand uusan ka muuqan kanaga, beddellada taageerada VLESS+Reality waxaa ka mid ah Happ, V2Box, iyo V2rayTun - ka raadi App Store midka aad ka heli karto akoonkaaga.

Soo dejiso server-ka

Ku koobi xiriirka vless://-ka ku jira clipboard-kaaga, fur macmiilka, oo isticmaal ikhtiyaarka Ku dar kabka (ama "soo dejin") oo u dhigma, ama iskaan koodka QR-ka ee Qaybta 7 adoo isticmaalaya iskaanka ku dhex jira macmiilka. Shid profile-ka cusub; iOS wuxuu ku weydiin doonaa ogolaanshaha qaabeynta VPN markii ugu horreysay, kaas oo aad u baahan doonto inaad ku ansixiso Face ID, Touch ID, ama lambarkaaga sirta ah.

Xaqiijinta Xidhiidhka

Iyadoo tunnelku ka shaqeynayo Qaybta 8, 9, ama 10, dib ugu noqo qalabkaaga (ma aha kalfadhiga SSH) oo fur hubiye kasta oo "waa maxay IP-gayga" biraawsar - cinwaanka la muujiyay waa inuu la mid noqdaa cinwaankaaga IP-ga ee VPS-gaaga.

Si aad uga xaqiijiso dhinaca server-ka, hubi joornaalka systemd si aad u hesho dhaqdhaqaaqa isku xirka oo xaqiiji kalfadhi TCP ah oo la aasaasay oo ku yaal dekedda 443:

journalctl -u xray -n 50 --no-pager
ss -tnp | grep ':443'

Heerka diiwaanka "digniinta" ee caadiga ah, Xray wax badan kama daabacdo xiriirada shaqsiyeed; haddii aad u baahan tahay inaad aragto faahfaahin dheeraad ah inta aad xallinayso dhibaatada, si ku meel gaar ah u deji "loglevel": "info" ee config.json oo dib u bilow adeegga, ka dibna dib ugu celi digniinta marka waxyaabuhu shaqeeyaan.

Tixraaca:

Ugu Dambeyn

Raacitaanka hagahan wuxuu ka tagayaa VPS-gaaga oo maamulaya server-kiisa Xray VLESS+Reality, oo loo qariyay sida taraafikada HTTPS ee caadiga ah ee degel dhab ah, iyada oo aan lahayn domain iyo shahaado la ilaaliyo. Adeeggu wuxuu u shaqeeyaa sida xray-ga cutubka nidaamka wuxuuna ka badbaaday dib-u-bilaabis iyada oo aan wax tallaabo ah lagaa qaadin dhinacaaga.

Ku dar macaamiil cusub wakhti kasta adoo ku daraya shay kale liiska isticmaalayaasha ee config.json oo leh UUID cusub oo ka yimid xray uuid iyo sumad iimayl oo gaar ah, ka dibna dib u bilaabaya adeegga (xray dib u bilow nidaamka systemctl) oo isticmaalahaas u dhisa xiriirkooda wadaagga ee Qaybta 7. Kala soocida UUIDs qof kasta ama qalab kasta waxay suurtogal ka dhigaysaa in laga noqdo mid iyada oo aan cid kale dhibin.

Caadooyin yar oo mudan in la ilaaliyo marka server-ku shaqeynayo:

• Xray ha la hagaajiyo. Dib u socodsii qoraalka rakibida ee Qaybta 3 si joogto ah - waxay cusboonaysiisaa rakibaad hore u jirtay - waxayna sidoo kale cusboonaysiisaa barnaamijyada macaamiisha, iyadoo la tixgelinayo dhaqanka minClientVer ee lagu xusay Qaybta 5.
• Ku kaydi config.json meel gaar ah oo ka baxsan server-ka. Waxay haysaa furaha gaarka ah ee server-ka ee Reality iyo UUID-ga macmiil kasta; luminta macnaheedu waa dib u soo celinta aqoonsiga qalab kasta.
• Si dhakhso ah uga noqo aaladaha lumay. Ka saar gelinta u dhiganta safka isticmaalayaasha ee ku jira config.json oo dib u bilow adeegga.

Haddii xiriirku soo bixi waayo, hubi kala horraysiinta:

• Xaaladda adeegga (xaaladda systemctl xray --no-pager) iyo joornaalka (journalctl -u xray -n 50 --no-pager)
• xeerarka dab-damiska (xaaladda ufw - dekedda 443/tcp waa inay furan tahay)
• dekeddaas 443 hore uma xidhna adeeg kale (ss -lntp | grep ':443' waa inay muujisaa oo keliya xray)
• in UUID, furaha dadweynaha, aqoonsiga gaaban, SNI, iyo socodka macaamilka uu si sax ah u ciyaaro config.json - hal dabeecad oo aan isku mid ahayn ayaa ku guuldareysatay gacan-qaadka si aamusnaan ah.
• Bartilmaameedka Xaqiiqadu lafteeda, iyadoo la adeegsanayo xray tls ping :443, haddii goobtu ay beddeshay habaynteeda TLS

Isbarbardhigga Xray iyo xulashooyinka kale? Eeg Tilmaamaha Hawlgalka Server-ka AmneziaWG iyo Sida loogu rakibo Wireguard VPN server-kaaga beddellada ku salaysan WireGuard, ama dejinta Hysteria2 iyo TUIC laba hab-raac oo kale oo u adkaysta faafreebka oo loo dhisay shabakadaha lumay ama aadka loo sifeeyay. Haddii aad u baahan tahay oo keliya wakiil fudud halkii aad ka ahaan lahayd dejis tunneling buuxa, habaynta 3proxy ee CentOS/ArchLinux waa beddel aad u fudud, dejinta server-ka VPN ee duugga ah ee Linux: PPTP ama OpenVPN? waxay daboolaysaa hab-raacyada fudud in la dejiyo laakiin aad ugu fudud DPI in la ogaado oo la xannibo. Adkaynta server-ka guud marka wakiilku shaqeeyo, eeg Isticmaalayaasha Linux: Maareynta iyo Ogolaanshaha.