gen_config.lua 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692
  1. #!/usr/bin/lua
  2. local ucursor = require "luci.model.uci".cursor()
  3. local json = require "luci.jsonc"
  4. local server_section = arg[1]
  5. local proto = arg[2] or "tcp"
  6. local local_port = arg[3] or "0"
  7. local socks_port = arg[4] or "0"
  8. local chain = arg[5] or "0"
  9. local chain_local_port = string.split(chain, "/")[2] or "0"
  10. local server = ucursor:get_all("shadowsocksr", server_section)
  11. local socks_server = ucursor:get_all("shadowsocksr", "@socks5_proxy[0]") or {}
  12. local xray_fragment = ucursor:get_all("shadowsocksr", "@global_xray_fragment[0]") or {}
  13. local xray_noise = ucursor:get_all("shadowsocksr", "@xray_noise_packets[0]") or {}
  14. local outbound_settings = nil
  15. local node_id = server_section
  16. local remarks = server.alias or ""
  17. function vmess_vless()
  18. outbound_settings = {
  19. vnext = {
  20. {
  21. address = server.server,
  22. port = tonumber(server.server_port),
  23. users = {
  24. {
  25. id = server.vmess_id,
  26. alterId = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and tonumber(server.alter_id) or nil,
  27. security = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and server.security or nil,
  28. encryption = (server.v2ray_protocol == "vless") and server.vless_encryption or nil,
  29. flow = (((server.xtls == '1') or (server.tls == '1') or (server.reality == '1')) and (((server.tls_flow ~= "none") and server.tls_flow) or ((server.xhttp_tls_flow ~= "none") and server.xhttp_tls_flow))) or nil
  30. }
  31. }
  32. }
  33. }
  34. }
  35. end
  36. function trojan_shadowsocks()
  37. outbound_settings = {
  38. servers = {
  39. {
  40. address = server.server,
  41. port = tonumber(server.server_port),
  42. password = server.password,
  43. method = ((server.v2ray_protocol == "shadowsocks") and server.encrypt_method_ss) or nil,
  44. uot = (server.v2ray_protocol == "shadowsocks") and (server.uot == '1') or nil,
  45. ivCheck = (server.v2ray_protocol == "shadowsocks") and (server.ivCheck == '1') or nil,
  46. }
  47. }
  48. }
  49. end
  50. function socks_http()
  51. outbound_settings = {
  52. version = server.socks_ver or nil,
  53. servers = {
  54. {
  55. address = server.server,
  56. port = tonumber(server.server_port),
  57. users = (server.auth_enable == "1") and {
  58. {
  59. user = server.username,
  60. pass = server.password
  61. }
  62. } or nil
  63. }
  64. }
  65. }
  66. end
  67. function wireguard()
  68. outbound_settings = {
  69. secretKey = server.private_key,
  70. address = server.local_addresses,
  71. peers = {
  72. {
  73. publicKey = server.peer_pubkey,
  74. preSharedKey = server.preshared_key,
  75. endpoint = server.server .. ":" .. server.server_port,
  76. keepAlive = tonumber(server.keepaliveperiod),
  77. allowedIPs = (server.allowedips) or nil,
  78. }
  79. },
  80. noKernelTun = (server.kernelmode == "1") and true or false,
  81. reserved = {server.reserved} or nil,
  82. mtu = tonumber(server.mtu)
  83. }
  84. end
  85. local outbound = {}
  86. function outbound:new(o)
  87. o = o or {}
  88. setmetatable(o, self)
  89. self.__index = self
  90. return o
  91. end
  92. function outbound:handleIndex(index)
  93. local switch = {
  94. vmess = function()
  95. vmess_vless()
  96. end,
  97. vless = function()
  98. vmess_vless()
  99. end,
  100. trojan = function()
  101. trojan_shadowsocks()
  102. end,
  103. shadowsocks = function()
  104. trojan_shadowsocks()
  105. end,
  106. socks = function()
  107. socks_http()
  108. end,
  109. http = function()
  110. socks_http()
  111. end,
  112. wireguard = function()
  113. wireguard()
  114. end
  115. }
  116. if switch[index] then
  117. switch[index]()
  118. end
  119. end
  120. local settings = outbound:new()
  121. settings:handleIndex(server.v2ray_protocol)
  122. local Xray = {
  123. log = {
  124. -- error = "/var/ssrplus.log",
  125. loglevel = "warning"
  126. },
  127. -- 初始化 inbounds 表
  128. inbounds = {},
  129. -- 初始化 outbounds 表
  130. outbounds = {},
  131. }
  132. -- 传入连接
  133. -- 添加 dokodemo-door 配置,如果 local_port 不为 0
  134. if local_port ~= "0" then
  135. table.insert(Xray.inbounds, {
  136. -- listening
  137. port = tonumber(local_port),
  138. protocol = "dokodemo-door",
  139. settings = {network = proto, followRedirect = true},
  140. sniffing = {
  141. enabled = true,
  142. destOverride = {"http", "tls", "quic"},
  143. metadataOnly = false,
  144. domainsExcluded = {
  145. "courier.push.apple.com",
  146. "rbsxbxp-mim.vivox.com",
  147. "rbsxbxp.www.vivox.com",
  148. "rbsxbxp-ws.vivox.com",
  149. "rbspsxp.www.vivox.com",
  150. "rbspsxp-mim.vivox.com",
  151. "rbspsxp-ws.vivox.com",
  152. "rbswxp.www.vivox.com",
  153. "rbswxp-mim.vivox.com",
  154. "disp-rbspsp-5-1.vivox.com",
  155. "disp-rbsxbp-5-1.vivox.com",
  156. "proxy.rbsxbp.vivox.com",
  157. "proxy.rbspsp.vivox.com",
  158. "proxy.rbswp.vivox.com",
  159. "rbswp.vivox.com",
  160. "rbsxbp.vivox.com",
  161. "rbspsp.vivox.com",
  162. "rbspsp.www.vivox.com",
  163. "rbswp.www.vivox.com",
  164. "rbsxbp.www.vivox.com",
  165. "rbsxbxp.vivox.com",
  166. "rbspsxp.vivox.com",
  167. "rbswxp.vivox.com",
  168. "Mijia Cloud",
  169. "dlg.io.mi.com"
  170. }
  171. }
  172. })
  173. end
  174. -- 开启 socks 代理
  175. -- 检查是否启用 socks 代理
  176. if proto and proto:find("tcp") and socks_port ~= "0" then
  177. table.insert(Xray.inbounds, {
  178. -- socks
  179. protocol = "socks",
  180. port = tonumber(socks_port),
  181. settings = {
  182. auth = socks_server.socks5_auth or "noauth",
  183. udp = true,
  184. mixed = ((socks_server.socks5_mixed == '1') and true or false) or (socks_server.server == 'same') and nil,
  185. accounts = (socks_server.server ~= "same" and (socks_server.socks5_auth and socks_server.socks5_auth ~= "noauth")) and {
  186. {
  187. user = socks_server.socks5_user,
  188. pass = socks_server.socks5_pass
  189. }
  190. } or nil
  191. } or nil
  192. })
  193. end
  194. -- 传出连接
  195. Xray.outbounds = {
  196. {
  197. protocol = server.v2ray_protocol,
  198. settings = outbound_settings,
  199. -- 底层传输配置
  200. streamSettings = (server.v2ray_protocol ~= "wireguard") and {
  201. network = server.transport or "tcp",
  202. security = (server.xtls == '1') and "xtls" or (server.tls == '1') and "tls" or (server.reality == '1') and "reality" or nil,
  203. tlsSettings = (server.tls == '1') and {
  204. -- tls
  205. alpn = (server.transport == "xhttp") and (function()
  206. local alpn = {}
  207. if server.xhttp_alpn and server.xhttp_alpn ~= "" then
  208. string.gsub(server.xhttp_alpn, '[^,]+', function(w)
  209. table.insert(alpn, w)
  210. end)
  211. end
  212. if #alpn > 0 then
  213. return alpn
  214. else
  215. return nil
  216. end
  217. end)() or nil,
  218. fingerprint = server.fingerprint,
  219. allowInsecure = (server.insecure == "1"),
  220. serverName = server.tls_host,
  221. certificates = server.certificate and {
  222. usage = "verify",
  223. certificateFile = server.certpath
  224. } or nil,
  225. echConfigList = (server.enable_ech == "1") and server.ech_config or nil,
  226. echForceQuery = (server.enable_ech == "1") and (server.ech_ForceQuery or "none") or nil
  227. } or nil,
  228. xtlsSettings = (server.xtls == '1') and server.tls_host and {
  229. -- xtls
  230. allowInsecure = (server.insecure == "1") and true or nil,
  231. serverName = server.tls_host,
  232. minVersion = "1.3"
  233. } or nil,
  234. realitySettings = (server.reality == '1') and {
  235. alpn = (server.transport == "xhttp" and server.xhttp_alpn ~= "") and server.xhttp_alpn or nil,
  236. publicKey = server.reality_publickey,
  237. shortId = server.reality_shortid,
  238. spiderX = server.reality_spiderx,
  239. fingerprint = server.fingerprint,
  240. mldsa65Verify = (server.enable_mldsa65verify == '1') and server.reality_mldsa65verify or nil,
  241. serverName = server.tls_host
  242. } or nil,
  243. rawSettings = (server.transport == "raw" or server.transport == "tcp") and {
  244. -- tcp
  245. header = {
  246. type = server.tcp_guise,
  247. request = (server.tcp_guise == "http") and {
  248. -- request
  249. path = {server.http_path} or {"/"},
  250. headers = {Host = {server.http_host} or {}}
  251. } or nil
  252. }
  253. } or nil,
  254. kcpSettings = (server.transport == "kcp") and {
  255. -- kcp
  256. mtu = tonumber(server.mtu),
  257. tti = tonumber(server.tti),
  258. uplinkCapacity = tonumber(server.uplink_capacity),
  259. downlinkCapacity = tonumber(server.downlink_capacity),
  260. congestion = (server.congestion == "1") and true or false,
  261. readBufferSize = tonumber(server.read_buffer_size),
  262. writeBufferSize = tonumber(server.write_buffer_size),
  263. header = {type = server.kcp_guise},
  264. seed = server.seed or nil
  265. } or nil,
  266. wsSettings = (server.transport == "ws") and (server.ws_path or server.ws_host or server.tls_host) and {
  267. -- ws
  268. Host = server.ws_host or server.tls_host or nil,
  269. path = server.ws_path,
  270. maxEarlyData = tonumber(server.ws_ed) or nil,
  271. earlyDataHeaderName = server.ws_ed_header or nil
  272. } or nil,
  273. httpupgradeSettings = (server.transport == "httpupgrade") and {
  274. -- httpupgrade
  275. host = (server.httpupgrade_host or server.tls_host) or nil,
  276. path = server.httpupgrade_path or ""
  277. } or nil,
  278. splithttpSettings = (server.transport == "splithttp") and {
  279. -- splithttp
  280. host = (server.splithttp_host or server.tls_host) or nil,
  281. path = server.splithttp_path or "/"
  282. } or nil,
  283. xhttpSettings = (server.transport == "xhttp") and {
  284. -- xhttp
  285. mode = server.xhttp_mode or "auto",
  286. host = (server.xhttp_host or server.tls_host) or nil,
  287. path = server.xhttp_path or "/",
  288. extra = (server.enable_xhttp_extra == "1" and server.xhttp_extra) and (function()
  289. local success, parsed = pcall(json.parse, server.xhttp_extra)
  290. if success then
  291. return parsed.extra or parsed
  292. else
  293. return nil
  294. end
  295. end)() or nil
  296. } or nil,
  297. httpSettings = (server.transport == "h2") and {
  298. -- h2
  299. path = server.h2_path or "",
  300. host = {server.h2_host} or nil,
  301. read_idle_timeout = tonumber(server.read_idle_timeout) or nil,
  302. health_check_timeout = tonumber(server.health_check_timeout) or nil
  303. } or nil,
  304. quicSettings = (server.transport == "quic") and {
  305. -- quic
  306. security = server.quic_security,
  307. key = server.quic_key,
  308. header = {type = server.quic_guise}
  309. } or nil,
  310. grpcSettings = (server.transport == "grpc") and {
  311. -- grpc
  312. serviceName = server.serviceName or "",
  313. multiMode = (server.grpc_mode == "multi") and true or false,
  314. idle_timeout = tonumber(server.idle_timeout) or nil,
  315. health_check_timeout = tonumber(server.health_check_timeout) or nil,
  316. permit_without_stream = (server.permit_without_stream == "1") and true or nil,
  317. initial_windows_size = tonumber(server.initial_windows_size) or nil
  318. } or nil,
  319. sockopt = {
  320. mark = 250,
  321. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  322. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  323. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  324. tcpcongestion = server.custom_tcpcongestion, -- 连接服务器节点的 TCP 拥塞控制算法
  325. dialerProxy = (xray_fragment.fragment == "1" or xray_fragment.noise == "1") and
  326. ((remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id) or nil
  327. }
  328. } or nil,
  329. mux = (server.v2ray_protocol ~= "wireguard") and {
  330. -- mux
  331. enabled = (server.mux == "1" or server.xmux == "1") and true or false, -- Mux
  332. concurrency = (server.mux == "1" and ((server.concurrency ~= "0") and tonumber(server.concurrency) or 8)) or (server.xmux == "1" and -1) or nil, -- TCP 最大并发连接数
  333. xudpConcurrency = ((server.xudpConcurrency ~= "0") and tonumber(server.xudpConcurrency)) or nil, -- UDP 最大并发连接数
  334. xudpProxyUDP443 = (server.mux == "1") and server.xudpProxyUDP443 or nil -- 对被代理的 UDP/443 流量处理方式
  335. } or nil
  336. }
  337. }
  338. -- 添加带有 fragment 设置的 dialerproxy 配置
  339. if xray_fragment.fragment ~= "0" or (xray_fragment.noise ~= "0" and xray_noise.enabled ~= "0") then
  340. table.insert(Xray.outbounds, {
  341. protocol = "freedom",
  342. tag = (remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id,
  343. settings = {
  344. domainStrategy = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and xray_noise.domainStrategy,
  345. fragment = (xray_fragment.fragment == "1") and {
  346. packets = (xray_fragment.fragment_packets ~= "") and xray_fragment.fragment_packets or nil,
  347. length = (xray_fragment.fragment_length ~= "") and xray_fragment.fragment_length or nil,
  348. interval = (xray_fragment.fragment_interval ~= "") and xray_fragment.fragment_interval or nil,
  349. maxSplit = (xray_fragment.fragment_maxsplit ~= "") and xray_fragment.fragment_maxsplit or nil
  350. } or nil,
  351. noises = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and {
  352. {
  353. type = xray_noise.type,
  354. packet = xray_noise.packet,
  355. delay = xray_noise.delay:find("-") and xray_noise.delay or tonumber(xray_noise.delay),
  356. applyTo = xray_noise.applyto
  357. }
  358. } or nil
  359. },
  360. streamSettings = {
  361. sockopt = {
  362. mark = 250,
  363. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  364. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  365. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  366. tcpcongestion = server.custom_tcpcongestion -- 连接服务器节点的 TCP 拥塞控制算法
  367. }
  368. }
  369. })
  370. end
  371. local cipher = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
  372. local cipher13 = "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384"
  373. local trojan = {
  374. log_level = 3,
  375. run_type = (proto == "nat" or proto == "tcp") and "nat" or "client",
  376. local_addr = "0.0.0.0",
  377. local_port = tonumber(local_port),
  378. remote_addr = server.server,
  379. remote_port = tonumber(server.server_port),
  380. udp_timeout = 60,
  381. -- 传入连接
  382. password = {server.password},
  383. -- 传出连接
  384. ssl = {
  385. verify = (server.insecure == "0") and true or false,
  386. verify_hostname = (server.tls == "1") and true or false,
  387. cert = (server.certificate) and server.certpath or nil,
  388. cipher = cipher,
  389. cipher_tls13 = cipher13,
  390. sni = server.tls_host,
  391. alpn = server.tls_alpn or {"h2", "http/1.1"},
  392. curve = "",
  393. reuse_session = true,
  394. session_ticket = (server.tls_sessionTicket == "1") and true or false
  395. },
  396. udp_timeout = 60,
  397. tcp = {
  398. -- tcp
  399. no_delay = true,
  400. keep_alive = true,
  401. reuse_port = true,
  402. fast_open = (server.fast_open == "1") and true or false,
  403. fast_open_qlen = 20
  404. }
  405. }
  406. local naiveproxy = {
  407. proxy = (server.username and server.password and server.server and server.server_port) and "https://" .. server.username .. ":" .. server.password .. "@" .. server.server .. ":" .. server.server_port,
  408. listen = (proto == "redir") and "redir" .. "://0.0.0.0:" .. tonumber(local_port) or "socks" .. "://0.0.0.0:" .. tonumber(local_port),
  409. ["insecure-concurrency"] = tonumber(server.concurrency) or 1
  410. }
  411. local ss = {
  412. server = (server.kcp_enable == "1") and "127.0.0.1" or server.server,
  413. server_port = tonumber(server.server_port),
  414. local_address = "0.0.0.0",
  415. local_port = tonumber(local_port),
  416. mode = (proto == "tcp,udp") and "tcp_and_udp" or (proto .. "_only"),
  417. password = server.password,
  418. method = server.encrypt_method_ss,
  419. timeout = tonumber(server.timeout),
  420. fast_open = (server.fast_open == "1") and true or false,
  421. reuse_port = true
  422. }
  423. local hysteria2 = {
  424. server = (
  425. server.server_port and
  426. (
  427. server.port_range and
  428. (server.server .. ":" .. server.server_port .. "," .. string.gsub(server.port_range, ":", "-"))
  429. or
  430. (server.server .. ":" .. server.server_port)
  431. )
  432. or
  433. (
  434. server.port_range and
  435. server.server .. ":" .. string.gsub(server.port_range, ":", "-")
  436. or
  437. server.server .. ":443"
  438. )
  439. ),
  440. bandwidth = (server.uplink_capacity or server.downlink_capacity) and {
  441. up = tonumber(server.uplink_capacity) and tonumber(server.uplink_capacity) .. " mbps" or nil,
  442. down = tonumber(server.downlink_capacity) and tonumber(server.downlink_capacity) .. " mbps" or nil
  443. } or nil,
  444. socks5 = (proto:find("tcp") and tonumber(socks_port) and tonumber(socks_port) ~= 0) and {
  445. listen = "0.0.0.0:" .. tonumber(socks_port),
  446. disableUDP = false
  447. } or nil,
  448. transport = server.transport_protocol and {
  449. type = server.transport_protocol or "udp",
  450. udp = (server.port_range and (server.hopinterval) and {
  451. hopInterval = (server.port_range and (tonumber(server.hopinterval) .. "s") or nil)
  452. } or nil)
  453. } or nil,
  454. --[[
  455. tcpTProxy = (proto:find("tcp") and local_port ~= "0") and {
  456. listen = "0.0.0.0:" .. tonumber(local_port)
  457. } or nil,
  458. ]]--
  459. tcpRedirect = (proto:find("tcp") and local_port ~= "0") and {
  460. listen = "0.0.0.0:" .. tonumber(local_port)
  461. } or nil,
  462. udpTProxy = (proto:find("udp") and local_port ~= "0") and {
  463. listen = "0.0.0.0:" .. tonumber(local_port)
  464. } or nil,
  465. obfs = (server.flag_obfs == "1") and {
  466. type = server.obfs_type,
  467. salamander = { password = server.salamander }
  468. } or nil,
  469. quic = (server.flag_quicparam == "1" ) and {
  470. initStreamReceiveWindow = (server.initstreamreceivewindow and server.initstreamreceivewindow or nil),
  471. maxStreamReceiveWindow = (server.maxstreamseceivewindow and server.maxstreamseceivewindow or nil),
  472. initConnReceiveWindow = (server.initconnreceivewindow and server.initconnreceivewindow or nil),
  473. maxConnReceiveWindow = (server.maxconnreceivewindow and server.maxconnreceivewindow or nil),
  474. maxIdleTimeout = (tonumber(server.maxidletimeout) and tonumber(server.maxidletimeout) .. "s" or nil),
  475. keepAlivePeriod = (tonumber(server.keepaliveperiod) and tonumber(server.keepaliveperiod) .. "s" or nil),
  476. disablePathMTUDiscovery = (server.disablepathmtudiscovery == "1") and true or false
  477. } or nil,
  478. auth = server.hy2_auth,
  479. tls = server.tls_host and {
  480. sni = server.tls_host,
  481. --alpn = server.tls_alpn or nil,
  482. insecure = (server.insecure == "1") and true or false,
  483. pinSHA256 = (server.insecure == "1") and server.pinsha256 or nil
  484. } or {
  485. sni = server.server,
  486. insecure = (server.insecure == "1") and true or false
  487. },
  488. fast_open = (server.fast_open == "1") and true or false,
  489. lazy = (server.lazy_mode == "1") and true or false
  490. }
  491. local shadowtls = {
  492. client = {
  493. server_addr = server.server_port and server.server .. ":" .. server.server_port or nil,
  494. listen = "127.0.0.1:" .. tonumber(local_port),
  495. tls_names = server.shadowtls_sni,
  496. password = server.password
  497. },
  498. v3 = (server.shadowtls_protocol == "v3") and true or false,
  499. disable_nodelay = (server.disable_nodelay == "1") and true or false,
  500. fastopen = (server.fastopen == "1") and true or false,
  501. strict = (server.strict == "1") and true or false
  502. }
  503. local chain_sslocal = {
  504. locals = local_port ~= "0" and {
  505. {
  506. local_address = "0.0.0.0",
  507. local_port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  508. mode = (proto:find("tcp,udp") and "tcp_and_udp") or proto .. "_only",
  509. protocol = "redir",
  510. tcp_redir = "redirect",
  511. --tcp_redir = "tproxy",
  512. udp_redir = "tproxy"
  513. },
  514. socks_port ~= "0" and {
  515. protocol = "socks",
  516. local_address = "0.0.0.0",
  517. local_port = tonumber(socks_port)
  518. } or nil
  519. } or {{
  520. protocol = "socks",
  521. local_address = "0.0.0.0",
  522. local_port = tonumber(socks_port)
  523. }},
  524. servers = {
  525. {
  526. server = "127.0.0.1",
  527. server_port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  528. method = server.sslocal_method,
  529. password = server.sslocal_password
  530. }
  531. }
  532. }
  533. local chain_vmess = {
  534. inbounds = (local_port ~= "0") and {
  535. {
  536. port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  537. protocol = "dokodemo-door",
  538. settings = {
  539. network = proto,
  540. followRedirect = true
  541. },
  542. streamSettings = {
  543. sockopt = {tproxy = "redirect"}
  544. },
  545. sniffing = {
  546. enable = true,
  547. destOverride = {"http","tls"}
  548. }
  549. },
  550. (proto:find("tcp") and socks_port ~= "0") and {
  551. protocol = "socks",
  552. port = tonumber(socks_port)
  553. } or nil
  554. } or { protocol = "socks",port = tonumber(socks_port) },
  555. outbound = {
  556. protocol = "vmess",
  557. settings = {
  558. vnext = {{
  559. address = "127.0.0.1",
  560. port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  561. users = {{
  562. id = (server.vmess_uuid),
  563. security = server.vmess_method,
  564. level = 0
  565. }}
  566. }}
  567. }
  568. }
  569. }
  570. local tuic = {
  571. relay = {
  572. server = server.server_port and server.server .. ":" .. server.server_port,
  573. ip = server.tuic_ip,
  574. uuid = server.tuic_uuid,
  575. password = server.tuic_passwd,
  576. certificates = server.certificate and { server.certpath } or nil,
  577. udp_relay_mode = server.udp_relay_mode,
  578. congestion_control = server.congestion_control,
  579. heartbeat = server.heartbeat and server.heartbeat .. "s" or nil,
  580. timeout = server.timeout and server.timeout .. "s" or nil,
  581. gc_interval = server.gc_interval and server.gc_interval .. "s" or nil,
  582. gc_lifetime = server.gc_lifetime and server.gc_lifetime .. "s" or nil,
  583. alpn = (server.type == "tuic") and (function()
  584. local alpn = {}
  585. if server.tls_alpn and server.tls_alpn ~= "" then
  586. string.gsub(server.tls_alpn, '[^,]+', function(w)
  587. table.insert(alpn, w)
  588. end)
  589. end
  590. if #alpn > 0 then
  591. return alpn
  592. else
  593. return nil
  594. end
  595. end)() or nil,
  596. disable_sni = (server.disable_sni == "1") and true or false,
  597. zero_rtt_handshake = (server.zero_rtt_handshake == "1") and true or false,
  598. send_window = tonumber(server.send_window),
  599. receive_window = tonumber(server.receive_window)
  600. },
  601. ["local"] = {
  602. server = tonumber(socks_port) and "[::]:" .. (socks_port == "0" and local_port or tonumber(socks_port)),
  603. dual_stack = (server.tuic_dual_stack == "1") and true or nil,
  604. max_packet_size = tonumber(server.tuic_max_package_size)
  605. }
  606. }
  607. local config = {}
  608. function config:new(o)
  609. o = o or {}
  610. setmetatable(o, self)
  611. self.__index = self
  612. return o
  613. end
  614. function config:handleIndex(index)
  615. local switch = {
  616. ss = function()
  617. ss.protocol = socks_port
  618. if server.enable_plugin == "1" and server.plugin and server.plugin ~= "none" then
  619. if server.plugin == "custom" then
  620. ss.plugin = server.custom_plugin
  621. else
  622. ss.plugin = server.plugin
  623. end
  624. ss.plugin_opts = server.plugin_opts or nil
  625. end
  626. print(json.stringify(ss, 1))
  627. end,
  628. ssr = function()
  629. ss.protocol = server.protocol
  630. ss.protocol_param = server.protocol_param
  631. ss.method = server.encrypt_method
  632. ss.obfs = server.obfs
  633. ss.obfs_param = server.obfs_param
  634. print(json.stringify(ss, 1))
  635. end,
  636. v2ray = function()
  637. print(json.stringify(Xray, 1))
  638. end,
  639. trojan = function()
  640. print(json.stringify(trojan, 1))
  641. end,
  642. naiveproxy = function()
  643. print(json.stringify(naiveproxy, 1))
  644. end,
  645. hysteria2 = function()
  646. print(json.stringify(hysteria2, 1))
  647. end,
  648. shadowtls = function()
  649. local chain_switch = {
  650. sslocal = function()
  651. if (chain:find("chain")) then
  652. print(json.stringify(chain_sslocal, 1))
  653. else
  654. print(json.stringify(shadowtls, 1))
  655. end
  656. end,
  657. vmess = function()
  658. if (chain:find("chain")) then
  659. print(json.stringify(chain_vmess, 1))
  660. else
  661. print(json.stringify(shadowtls, 1))
  662. end
  663. end
  664. }
  665. local ChainType = server.chain_type
  666. if chain_switch[ChainType] then
  667. chain_switch[ChainType]()
  668. end
  669. end,
  670. tuic = function()
  671. print(json.stringify(tuic, 1))
  672. end
  673. }
  674. if switch[index] then
  675. switch[index]()
  676. end
  677. end
  678. local f = config:new()
  679. f:handleIndex(server.type)