gen_config.lua 22 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668
  1. #!/usr/bin/lua
  2. local ucursor = require "luci.model.uci".cursor()
  3. local json = require "luci.jsonc"
  4. local server_section = arg[1]
  5. local proto = arg[2] or "tcp"
  6. local local_port = arg[3] or "0"
  7. local socks_port = arg[4] or "0"
  8. local chain = arg[5] or "0"
  9. local chain_local_port = string.split(chain, "/")[2] or "0"
  10. local server = ucursor:get_all("shadowsocksr", server_section)
  11. local socks_server = ucursor:get_all("shadowsocksr", "@socks5_proxy[0]") or {}
  12. local xray_fragment = ucursor:get_all("shadowsocksr", "@global_xray_fragment[0]") or {}
  13. local xray_noise = ucursor:get_all("shadowsocksr", "@xray_noise_packets[0]") or {}
  14. local outbound_settings = nil
  15. local node_id = server_section
  16. local remarks = server.alias or ""
  17. function vmess_vless()
  18. outbound_settings = {
  19. vnext = {
  20. {
  21. address = server.server,
  22. port = tonumber(server.server_port),
  23. users = {
  24. {
  25. id = server.vmess_id,
  26. alterId = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and tonumber(server.alter_id) or nil,
  27. security = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and server.security or nil,
  28. encryption = (server.v2ray_protocol == "vless") and server.vless_encryption or nil,
  29. flow = (((server.xtls == '1') or (server.tls == '1') or (server.reality == '1')) and (((server.tls_flow ~= "none") and server.tls_flow) or ((server.xhttp_tls_flow ~= "none") and server.xhttp_tls_flow))) or nil
  30. }
  31. }
  32. }
  33. }
  34. }
  35. end
  36. function trojan_shadowsocks()
  37. outbound_settings = {
  38. servers = {
  39. {
  40. address = server.server,
  41. port = tonumber(server.server_port),
  42. password = server.password,
  43. method = ((server.v2ray_protocol == "shadowsocks") and server.encrypt_method_ss) or nil,
  44. uot = (server.v2ray_protocol == "shadowsocks") and (server.uot == '1') or nil,
  45. ivCheck = (server.v2ray_protocol == "shadowsocks") and (server.ivCheck == '1') or nil,
  46. }
  47. }
  48. }
  49. end
  50. function socks_http()
  51. outbound_settings = {
  52. version = server.socks_ver or nil,
  53. servers = {
  54. {
  55. address = server.server,
  56. port = tonumber(server.server_port),
  57. users = (server.auth_enable == "1") and {
  58. {
  59. user = server.username,
  60. pass = server.password
  61. }
  62. } or nil
  63. }
  64. }
  65. }
  66. end
  67. function wireguard()
  68. outbound_settings = {
  69. secretKey = server.private_key,
  70. address = server.local_addresses,
  71. peers = {
  72. {
  73. publicKey = server.peer_pubkey,
  74. preSharedKey = server.preshared_key,
  75. endpoint = server.server .. ":" .. server.server_port,
  76. keepAlive = tonumber(server.keepaliveperiod),
  77. allowedIPs = (server.allowedips) or nil,
  78. }
  79. },
  80. noKernelTun = (server.kernelmode == "1") and true or false,
  81. reserved = {server.reserved} or nil,
  82. mtu = tonumber(server.mtu)
  83. }
  84. end
  85. local outbound = {}
  86. function outbound:new(o)
  87. o = o or {}
  88. setmetatable(o, self)
  89. self.__index = self
  90. return o
  91. end
  92. function outbound:handleIndex(index)
  93. local switch = {
  94. vmess = function()
  95. vmess_vless()
  96. end,
  97. vless = function()
  98. vmess_vless()
  99. end,
  100. trojan = function()
  101. trojan_shadowsocks()
  102. end,
  103. shadowsocks = function()
  104. trojan_shadowsocks()
  105. end,
  106. socks = function()
  107. socks_http()
  108. end,
  109. http = function()
  110. socks_http()
  111. end,
  112. wireguard = function()
  113. wireguard()
  114. end
  115. }
  116. if switch[index] then
  117. switch[index]()
  118. end
  119. end
  120. local settings = outbound:new()
  121. settings:handleIndex(server.v2ray_protocol)
  122. local Xray = {
  123. log = {
  124. -- error = "/var/ssrplus.log",
  125. loglevel = "warning"
  126. },
  127. -- 初始化 inbounds 表
  128. inbounds = {},
  129. -- 初始化 outbounds 表
  130. outbounds = {},
  131. }
  132. -- 传入连接
  133. -- 添加 dokodemo-door 配置,如果 local_port 不为 0
  134. if local_port ~= "0" then
  135. table.insert(Xray.inbounds, {
  136. -- listening
  137. port = tonumber(local_port),
  138. protocol = "dokodemo-door",
  139. settings = {network = proto, followRedirect = true},
  140. sniffing = {
  141. enabled = true,
  142. destOverride = {"http", "tls", "quic"},
  143. metadataOnly = false,
  144. domainsExcluded = {
  145. "courier.push.apple.com",
  146. "rbsxbxp-mim.vivox.com",
  147. "rbsxbxp.www.vivox.com",
  148. "rbsxbxp-ws.vivox.com",
  149. "rbspsxp.www.vivox.com",
  150. "rbspsxp-mim.vivox.com",
  151. "rbspsxp-ws.vivox.com",
  152. "rbswxp.www.vivox.com",
  153. "rbswxp-mim.vivox.com",
  154. "disp-rbspsp-5-1.vivox.com",
  155. "disp-rbsxbp-5-1.vivox.com",
  156. "proxy.rbsxbp.vivox.com",
  157. "proxy.rbspsp.vivox.com",
  158. "proxy.rbswp.vivox.com",
  159. "rbswp.vivox.com",
  160. "rbsxbp.vivox.com",
  161. "rbspsp.vivox.com",
  162. "rbspsp.www.vivox.com",
  163. "rbswp.www.vivox.com",
  164. "rbsxbp.www.vivox.com",
  165. "rbsxbxp.vivox.com",
  166. "rbspsxp.vivox.com",
  167. "rbswxp.vivox.com",
  168. "Mijia Cloud",
  169. "dlg.io.mi.com"
  170. }
  171. }
  172. })
  173. end
  174. -- 开启 socks 代理
  175. -- 检查是否启用 socks 代理
  176. if proto and proto:find("tcp") and socks_port ~= "0" then
  177. table.insert(Xray.inbounds, {
  178. -- socks
  179. protocol = "socks",
  180. port = tonumber(socks_port),
  181. settings = {
  182. auth = socks_server.socks5_auth or "noauth",
  183. udp = true,
  184. mixed = ((socks_server.socks5_mixed == '1') and true or false) or (socks_server.server == 'same') and nil,
  185. accounts = (socks_server.server ~= "same" and (socks_server.socks5_auth and socks_server.socks5_auth ~= "noauth")) and {
  186. {
  187. user = socks_server.socks5_user,
  188. pass = socks_server.socks5_pass
  189. }
  190. } or nil
  191. } or nil
  192. })
  193. end
  194. -- 传出连接
  195. Xray.outbounds = {
  196. {
  197. protocol = server.v2ray_protocol,
  198. settings = outbound_settings,
  199. -- 底层传输配置
  200. streamSettings = (server.v2ray_protocol ~= "wireguard") and {
  201. network = server.transport or "tcp",
  202. security = (server.xtls == '1') and "xtls" or (server.tls == '1') and "tls" or (server.reality == '1') and "reality" or nil,
  203. tlsSettings = (server.tls == '1') and {
  204. -- tls
  205. alpn = (server.transport == "xhttp" and server.xhttp_alpn ~= "") and server.xhttp_alpn or server.tls_alpn,
  206. fingerprint = server.fingerprint,
  207. allowInsecure = (server.insecure == "1"),
  208. serverName = server.tls_host,
  209. certificates = server.certificate and {
  210. usage = "verify",
  211. certificateFile = server.certpath
  212. } or nil,
  213. echConfigList = (server.enable_ech == "1") and server.ech_config or nil,
  214. echForceQuery = (server.enable_ech == "1") and (server.ech_ForceQuery or "none") or nil
  215. } or nil,
  216. xtlsSettings = (server.xtls == '1') and server.tls_host and {
  217. -- xtls
  218. allowInsecure = (server.insecure == "1") and true or nil,
  219. serverName = server.tls_host,
  220. minVersion = "1.3"
  221. } or nil,
  222. realitySettings = (server.reality == '1') and {
  223. alpn = (server.transport == "xhttp" and server.xhttp_alpn ~= "") and server.xhttp_alpn or nil,
  224. publicKey = server.reality_publickey,
  225. shortId = server.reality_shortid,
  226. spiderX = server.reality_spiderx,
  227. fingerprint = server.fingerprint,
  228. mldsa65Verify = (server.enable_mldsa65verify == '1') and server.reality_mldsa65verify or nil,
  229. serverName = server.tls_host
  230. } or nil,
  231. rawSettings = (server.transport == "raw" or server.transport == "tcp") and {
  232. -- tcp
  233. header = {
  234. type = server.tcp_guise,
  235. request = (server.tcp_guise == "http") and {
  236. -- request
  237. path = {server.http_path} or {"/"},
  238. headers = {Host = {server.http_host} or {}}
  239. } or nil
  240. }
  241. } or nil,
  242. kcpSettings = (server.transport == "kcp") and {
  243. -- kcp
  244. mtu = tonumber(server.mtu),
  245. tti = tonumber(server.tti),
  246. uplinkCapacity = tonumber(server.uplink_capacity),
  247. downlinkCapacity = tonumber(server.downlink_capacity),
  248. congestion = (server.congestion == "1") and true or false,
  249. readBufferSize = tonumber(server.read_buffer_size),
  250. writeBufferSize = tonumber(server.write_buffer_size),
  251. header = {type = server.kcp_guise},
  252. seed = server.seed or nil
  253. } or nil,
  254. wsSettings = (server.transport == "ws") and (server.ws_path or server.ws_host or server.tls_host) and {
  255. -- ws
  256. Host = server.ws_host or server.tls_host or nil,
  257. path = server.ws_path,
  258. maxEarlyData = tonumber(server.ws_ed) or nil,
  259. earlyDataHeaderName = server.ws_ed_header or nil
  260. } or nil,
  261. httpupgradeSettings = (server.transport == "httpupgrade") and {
  262. -- httpupgrade
  263. host = (server.httpupgrade_host or server.tls_host) or nil,
  264. path = server.httpupgrade_path or ""
  265. } or nil,
  266. splithttpSettings = (server.transport == "splithttp") and {
  267. -- splithttp
  268. host = (server.splithttp_host or server.tls_host) or nil,
  269. path = server.splithttp_path or "/"
  270. } or nil,
  271. xhttpSettings = (server.transport == "xhttp") and {
  272. -- xhttp
  273. mode = server.xhttp_mode or "auto",
  274. host = (server.xhttp_host or server.tls_host) or nil,
  275. path = server.xhttp_path or "/",
  276. extra = (server.enable_xhttp_extra == "1" and server.xhttp_extra) and (function()
  277. local success, parsed = pcall(json.parse, server.xhttp_extra)
  278. if success then
  279. return parsed.extra or parsed
  280. else
  281. return nil
  282. end
  283. end)() or nil
  284. } or nil,
  285. httpSettings = (server.transport == "h2") and {
  286. -- h2
  287. path = server.h2_path or "",
  288. host = {server.h2_host} or nil,
  289. read_idle_timeout = tonumber(server.read_idle_timeout) or nil,
  290. health_check_timeout = tonumber(server.health_check_timeout) or nil
  291. } or nil,
  292. quicSettings = (server.transport == "quic") and {
  293. -- quic
  294. security = server.quic_security,
  295. key = server.quic_key,
  296. header = {type = server.quic_guise}
  297. } or nil,
  298. grpcSettings = (server.transport == "grpc") and {
  299. -- grpc
  300. serviceName = server.serviceName or "",
  301. multiMode = (server.grpc_mode == "multi") and true or false,
  302. idle_timeout = tonumber(server.idle_timeout) or nil,
  303. health_check_timeout = tonumber(server.health_check_timeout) or nil,
  304. permit_without_stream = (server.permit_without_stream == "1") and true or nil,
  305. initial_windows_size = tonumber(server.initial_windows_size) or nil
  306. } or nil,
  307. sockopt = {
  308. mark = 250,
  309. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  310. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  311. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  312. tcpcongestion = server.custom_tcpcongestion, -- 连接服务器节点的 TCP 拥塞控制算法
  313. dialerProxy = (xray_fragment.fragment == "1" or xray_fragment.noise == "1") and
  314. ((remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id) or nil
  315. }
  316. } or nil,
  317. mux = (server.v2ray_protocol ~= "wireguard") and {
  318. -- mux
  319. enabled = (server.mux == "1" or server.xmux == "1") and true or false, -- Mux
  320. concurrency = (server.mux == "1" and ((server.concurrency ~= "0") and tonumber(server.concurrency) or 8)) or (server.xmux == "1" and -1) or nil, -- TCP 最大并发连接数
  321. xudpConcurrency = ((server.xudpConcurrency ~= "0") and tonumber(server.xudpConcurrency)) or nil, -- UDP 最大并发连接数
  322. xudpProxyUDP443 = (server.mux == "1") and server.xudpProxyUDP443 or nil -- 对被代理的 UDP/443 流量处理方式
  323. } or nil
  324. }
  325. }
  326. -- 添加带有 fragment 设置的 dialerproxy 配置
  327. if xray_fragment.fragment ~= "0" or (xray_fragment.noise ~= "0" and xray_noise.enabled ~= "0") then
  328. table.insert(Xray.outbounds, {
  329. protocol = "freedom",
  330. tag = (remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id,
  331. settings = {
  332. domainStrategy = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and xray_noise.domainStrategy,
  333. fragment = (xray_fragment.fragment == "1") and {
  334. packets = (xray_fragment.fragment_packets ~= "") and xray_fragment.fragment_packets or nil,
  335. length = (xray_fragment.fragment_length ~= "") and xray_fragment.fragment_length or nil,
  336. interval = (xray_fragment.fragment_interval ~= "") and xray_fragment.fragment_interval or nil,
  337. maxSplit = (xray_fragment.fragment_maxsplit ~= "") and xray_fragment.fragment_maxsplit or nil
  338. } or nil,
  339. noises = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and {
  340. {
  341. type = xray_noise.type,
  342. packet = xray_noise.packet,
  343. delay = xray_noise.delay:find("-") and xray_noise.delay or tonumber(xray_noise.delay),
  344. applyTo = xray_noise.applyto
  345. }
  346. } or nil
  347. },
  348. streamSettings = {
  349. sockopt = {
  350. mark = 250,
  351. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  352. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  353. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  354. tcpcongestion = server.custom_tcpcongestion -- 连接服务器节点的 TCP 拥塞控制算法
  355. }
  356. }
  357. })
  358. end
  359. local cipher = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
  360. local cipher13 = "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384"
  361. local trojan = {
  362. log_level = 3,
  363. run_type = (proto == "nat" or proto == "tcp") and "nat" or "client",
  364. local_addr = "0.0.0.0",
  365. local_port = tonumber(local_port),
  366. remote_addr = server.server,
  367. remote_port = tonumber(server.server_port),
  368. udp_timeout = 60,
  369. -- 传入连接
  370. password = {server.password},
  371. -- 传出连接
  372. ssl = {
  373. verify = (server.insecure == "0") and true or false,
  374. verify_hostname = (server.tls == "1") and true or false,
  375. cert = (server.certificate) and server.certpath or nil,
  376. cipher = cipher,
  377. cipher_tls13 = cipher13,
  378. sni = server.tls_host,
  379. alpn = server.tls_alpn or {"h2", "http/1.1"},
  380. curve = "",
  381. reuse_session = true,
  382. session_ticket = (server.tls_sessionTicket == "1") and true or false
  383. },
  384. udp_timeout = 60,
  385. tcp = {
  386. -- tcp
  387. no_delay = true,
  388. keep_alive = true,
  389. reuse_port = true,
  390. fast_open = (server.fast_open == "1") and true or false,
  391. fast_open_qlen = 20
  392. }
  393. }
  394. local naiveproxy = {
  395. proxy = (server.username and server.password and server.server and server.server_port) and "https://" .. server.username .. ":" .. server.password .. "@" .. server.server .. ":" .. server.server_port,
  396. listen = (proto == "redir") and "redir" .. "://0.0.0.0:" .. tonumber(local_port) or "socks" .. "://0.0.0.0:" .. tonumber(local_port),
  397. ["insecure-concurrency"] = tonumber(server.concurrency) or 1
  398. }
  399. local ss = {
  400. server = (server.kcp_enable == "1") and "127.0.0.1" or server.server,
  401. server_port = tonumber(server.server_port),
  402. local_address = "0.0.0.0",
  403. local_port = tonumber(local_port),
  404. mode = (proto == "tcp,udp") and "tcp_and_udp" or (proto .. "_only"),
  405. password = server.password,
  406. method = server.encrypt_method_ss,
  407. timeout = tonumber(server.timeout),
  408. fast_open = (server.fast_open == "1") and true or false,
  409. reuse_port = true
  410. }
  411. local hysteria2 = {
  412. server = (
  413. server.server_port and
  414. (
  415. server.port_range and
  416. (server.server .. ":" .. server.server_port .. "," .. string.gsub(server.port_range, ":", "-"))
  417. or
  418. (server.server .. ":" .. server.server_port)
  419. )
  420. or
  421. (
  422. server.port_range and
  423. server.server .. ":" .. string.gsub(server.port_range, ":", "-")
  424. or
  425. server.server .. ":443"
  426. )
  427. ),
  428. bandwidth = (server.uplink_capacity or server.downlink_capacity) and {
  429. up = tonumber(server.uplink_capacity) and tonumber(server.uplink_capacity) .. " mbps" or nil,
  430. down = tonumber(server.downlink_capacity) and tonumber(server.downlink_capacity) .. " mbps" or nil
  431. } or nil,
  432. socks5 = (proto:find("tcp") and tonumber(socks_port) and tonumber(socks_port) ~= 0) and {
  433. listen = "0.0.0.0:" .. tonumber(socks_port),
  434. disableUDP = false
  435. } or nil,
  436. transport = server.transport_protocol and {
  437. type = server.transport_protocol or "udp",
  438. udp = (server.port_range and (server.hopinterval) and {
  439. hopInterval = (server.port_range and (tonumber(server.hopinterval) .. "s") or nil)
  440. } or nil)
  441. } or nil,
  442. --[[
  443. tcpTProxy = (proto:find("tcp") and local_port ~= "0") and {
  444. listen = "0.0.0.0:" .. tonumber(local_port)
  445. } or nil,
  446. ]]--
  447. tcpRedirect = (proto:find("tcp") and local_port ~= "0") and {
  448. listen = "0.0.0.0:" .. tonumber(local_port)
  449. } or nil,
  450. udpTProxy = (proto:find("udp") and local_port ~= "0") and {
  451. listen = "0.0.0.0:" .. tonumber(local_port)
  452. } or nil,
  453. obfs = (server.flag_obfs == "1") and {
  454. type = server.obfs_type,
  455. salamander = { password = server.salamander }
  456. } or nil,
  457. quic = (server.flag_quicparam == "1" ) and {
  458. initStreamReceiveWindow = (server.initstreamreceivewindow and server.initstreamreceivewindow or nil),
  459. maxStreamReceiveWindow = (server.maxstreamseceivewindow and server.maxstreamseceivewindow or nil),
  460. initConnReceiveWindow = (server.initconnreceivewindow and server.initconnreceivewindow or nil),
  461. maxConnReceiveWindow = (server.maxconnreceivewindow and server.maxconnreceivewindow or nil),
  462. maxIdleTimeout = (tonumber(server.maxidletimeout) and tonumber(server.maxidletimeout) .. "s" or nil),
  463. keepAlivePeriod = (tonumber(server.keepaliveperiod) and tonumber(server.keepaliveperiod) .. "s" or nil),
  464. disablePathMTUDiscovery = (server.disablepathmtudiscovery == "1") and true or false
  465. } or nil,
  466. auth = server.hy2_auth,
  467. tls = server.tls_host and {
  468. sni = server.tls_host,
  469. --alpn = server.tls_alpn or nil,
  470. insecure = (server.insecure == "1") and true or false,
  471. pinSHA256 = (server.insecure == "1") and server.pinsha256 or nil
  472. } or {
  473. sni = server.server,
  474. insecure = (server.insecure == "1") and true or false
  475. },
  476. fast_open = (server.fast_open == "1") and true or false,
  477. lazy = (server.lazy_mode == "1") and true or false
  478. }
  479. local shadowtls = {
  480. client = {
  481. server_addr = server.server_port and server.server .. ":" .. server.server_port or nil,
  482. listen = "127.0.0.1:" .. tonumber(local_port),
  483. tls_names = server.shadowtls_sni,
  484. password = server.password
  485. },
  486. v3 = (server.shadowtls_protocol == "v3") and true or false,
  487. disable_nodelay = (server.disable_nodelay == "1") and true or false,
  488. fastopen = (server.fastopen == "1") and true or false,
  489. strict = (server.strict == "1") and true or false
  490. }
  491. local chain_sslocal = {
  492. locals = local_port ~= "0" and {
  493. {
  494. local_address = "0.0.0.0",
  495. local_port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  496. mode = (proto:find("tcp,udp") and "tcp_and_udp") or proto .. "_only",
  497. protocol = "redir",
  498. tcp_redir = "redirect",
  499. --tcp_redir = "tproxy",
  500. udp_redir = "tproxy"
  501. },
  502. socks_port ~= "0" and {
  503. protocol = "socks",
  504. local_address = "0.0.0.0",
  505. local_port = tonumber(socks_port)
  506. } or nil
  507. } or {{
  508. protocol = "socks",
  509. local_address = "0.0.0.0",
  510. local_port = tonumber(socks_port)
  511. }},
  512. servers = {
  513. {
  514. server = "127.0.0.1",
  515. server_port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  516. method = server.sslocal_method,
  517. password = server.sslocal_password
  518. }
  519. }
  520. }
  521. local chain_vmess = {
  522. inbounds = (local_port ~= "0") and {
  523. {
  524. port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  525. protocol = "dokodemo-door",
  526. settings = {
  527. network = proto,
  528. followRedirect = true
  529. },
  530. streamSettings = {
  531. sockopt = {tproxy = "redirect"}
  532. },
  533. sniffing = {
  534. enable = true,
  535. destOverride = {"http","tls"}
  536. }
  537. },
  538. (proto:find("tcp") and socks_port ~= "0") and {
  539. protocol = "socks",
  540. port = tonumber(socks_port)
  541. } or nil
  542. } or { protocol = "socks",port = tonumber(socks_port) },
  543. outbound = {
  544. protocol = "vmess",
  545. settings = {
  546. vnext = {{
  547. address = "127.0.0.1",
  548. port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  549. users = {{
  550. id = (server.vmess_uuid),
  551. security = server.vmess_method,
  552. level = 0
  553. }}
  554. }}
  555. }
  556. }
  557. }
  558. local tuic = {
  559. relay = {
  560. server = server.server_port and server.server .. ":" .. server.server_port,
  561. ip = server.tuic_ip,
  562. uuid = server.tuic_uuid,
  563. password = server.tuic_passwd,
  564. certificates = server.certificate and { server.certpath } or nil,
  565. udp_relay_mode = server.udp_relay_mode,
  566. congestion_control = server.congestion_control,
  567. heartbeat = server.heartbeat and server.heartbeat .. "s" or nil,
  568. timeout = server.timeout and server.timeout .. "s" or nil,
  569. gc_interval = server.gc_interval and server.gc_interval .. "s" or nil,
  570. gc_lifetime = server.gc_lifetime and server.gc_lifetime .. "s" or nil,
  571. alpn = server.tls_alpn,
  572. disable_sni = (server.disable_sni == "1") and true or false,
  573. zero_rtt_handshake = (server.zero_rtt_handshake == "1") and true or false,
  574. send_window = tonumber(server.send_window),
  575. receive_window = tonumber(server.receive_window)
  576. },
  577. ["local"] = {
  578. server = tonumber(socks_port) and "[::]:" .. (socks_port == "0" and local_port or tonumber(socks_port)),
  579. dual_stack = (server.tuic_dual_stack == "1") and true or nil,
  580. max_packet_size = tonumber(server.tuic_max_package_size)
  581. }
  582. }
  583. local config = {}
  584. function config:new(o)
  585. o = o or {}
  586. setmetatable(o, self)
  587. self.__index = self
  588. return o
  589. end
  590. function config:handleIndex(index)
  591. local switch = {
  592. ss = function()
  593. ss.protocol = socks_port
  594. if server.enable_plugin == "1" and server.plugin and server.plugin ~= "none" then
  595. if server.plugin == "custom" then
  596. ss.plugin = server.custom_plugin
  597. else
  598. ss.plugin = server.plugin
  599. end
  600. ss.plugin_opts = server.plugin_opts or nil
  601. end
  602. print(json.stringify(ss, 1))
  603. end,
  604. ssr = function()
  605. ss.protocol = server.protocol
  606. ss.protocol_param = server.protocol_param
  607. ss.method = server.encrypt_method
  608. ss.obfs = server.obfs
  609. ss.obfs_param = server.obfs_param
  610. print(json.stringify(ss, 1))
  611. end,
  612. v2ray = function()
  613. print(json.stringify(Xray, 1))
  614. end,
  615. trojan = function()
  616. print(json.stringify(trojan, 1))
  617. end,
  618. naiveproxy = function()
  619. print(json.stringify(naiveproxy, 1))
  620. end,
  621. hysteria2 = function()
  622. print(json.stringify(hysteria2, 1))
  623. end,
  624. shadowtls = function()
  625. local chain_switch = {
  626. sslocal = function()
  627. if (chain:find("chain")) then
  628. print(json.stringify(chain_sslocal, 1))
  629. else
  630. print(json.stringify(shadowtls, 1))
  631. end
  632. end,
  633. vmess = function()
  634. if (chain:find("chain")) then
  635. print(json.stringify(chain_vmess, 1))
  636. else
  637. print(json.stringify(shadowtls, 1))
  638. end
  639. end
  640. }
  641. local ChainType = server.chain_type
  642. if chain_switch[ChainType] then
  643. chain_switch[ChainType]()
  644. end
  645. end,
  646. tuic = function()
  647. print(json.stringify(tuic, 1))
  648. end
  649. }
  650. if switch[index] then
  651. switch[index]()
  652. end
  653. end
  654. local f = config:new()
  655. f:handleIndex(server.type)