Răsfoiți Sursa

Add VLESS-XHTTP3-Nginx

#203
xqzr 10 luni în urmă
părinte
comite
5f96ba40bc

+ 71 - 0
VLESS-XHTTP3-Nginx/client.jsonc

@@ -0,0 +1,71 @@
+{
+  "log": {},
+  "inbounds": [
+    {
+      "port": "1080",
+      "listen": "::1",
+      "protocol": "socks",
+      "settings": {
+        "udp": true
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "vless",
+      "settings": {
+        "vnext": [
+          {
+            "address": "example.com",
+            "port": 443,
+            "users": [
+              {
+                  "id": "" //填写你的 UUID
+              }
+            ]
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "xhttp",
+        "xhttpSettings": {
+          "path": "", //填写你的 path
+          "mode": "stream-one",
+          "xmux": {
+            "maxConcurrency": 128, //Nginx 默认上限 128。https://nginx.org/en/docs/http/ngx_http_v3_module.html#http3_max_concurrent_streams
+            "cMaxReuseTimes": 1000, //Nginx 默认上限 1000。https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_requests
+            "cMaxLifetimeMs": 3600000 //Nginx 默认上限 3600000ms(1h)。https://nginx.org/en/docs/http/ngx_http_core_module.html#keepalive_time
+          }
+        }
+        "security": "tls",
+        "tlsSettings": {
+          "alpn": [
+            "h3"
+          ]
+        }
+      }
+    },
+    {
+      "tag": "direct",
+      "protocol": "freedom",
+      "settings": {}
+    },
+    {
+      "tag": "blocked",
+      "protocol": "blackhole",
+      "settings": {}
+    }
+  ],
+  "routing": {
+    "domainStrategy": "IPOnDemand",
+    "rules": [
+      {
+        "type": "field",
+        "ip": [
+          "geoip:private"
+        ],
+        "outboundTag": "direct"
+      }
+    ]
+  }
+}

+ 26 - 0
VLESS-XHTTP3-Nginx/nginx.conf

@@ -0,0 +1,26 @@
+server {
+  listen [::]:443 ssl ipv6only=off reuseport;
+  listen [::]:443 quic reuseport ipv6only=off;
+  server_name example.com;
+
+  index index.html;
+  root /var/www/html;
+  
+  http2 on;
+  ssl_certificate /path/to/example.cer;
+  ssl_certificate_key /path/to/example.key;
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+
+  client_header_timeout 5m;
+  keepalive_timeout 5m;
+	# 在 location 后填写 /你的 path/
+	location /你的 path/ {
+        client_max_body_size 0;
+        grpc_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        client_body_timeout 5m;
+        grpc_read_timeout 315;
+        grpc_send_timeout 5m;
+        grpc_pass unix:/dev/shm/xrxh.socket;
+    }
+}

+ 50 - 0
VLESS-XHTTP3-Nginx/server.jsonc

@@ -0,0 +1,50 @@
+{
+  "log": {
+    "loglevel": "warning"
+  },
+  "inbounds": [
+    {
+      "listen": "/dev/shm/xrxh.socket,0666",
+      "protocol": "vless",
+      "settings": {
+        "clients": [
+          {
+            "id": "" // 填写你的 UUID
+          }
+        ],
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "xhttp",
+        "xhttpSettings": {
+          "mode": "stream-one",
+          "path": "" // 填写你的 path
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "direct",
+      "protocol": "freedom",
+      "settings": {}
+    },
+    {
+      "tag": "blocked",
+      "protocol": "blackhole",
+      "settings": {}
+    }
+  ],
+  "routing": {
+    "domainStrategy": "AsIs",
+    "rules": [
+      {
+        "type": "field",
+        "ip": [
+          "geoip:private"
+        ],
+        "outboundTag": "blocked"
+      }
+    ]
+  }
+}