gen_config.lua 23 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712
  1. #!/usr/bin/lua
  2. local ucursor = require "luci.model.uci".cursor()
  3. local json = require "luci.jsonc"
  4. local server_section = arg[1]
  5. local proto = arg[2] or "tcp"
  6. local local_port = arg[3] or "0"
  7. local socks_port = arg[4] or "0"
  8. local chain = arg[5] or "0"
  9. local chain_local_port = string.split(chain, "/")[2] or "0"
  10. local server = ucursor:get_all("shadowsocksr", server_section)
  11. local socks_server = ucursor:get_all("shadowsocksr", "@socks5_proxy[0]") or {}
  12. local xray_fragment = ucursor:get_all("shadowsocksr", "@global_xray_fragment[0]") or {}
  13. local xray_noise = ucursor:get_all("shadowsocksr", "@xray_noise_packets[0]") or {}
  14. local outbound_settings = nil
  15. local node_id = server_section
  16. local remarks = server.alias or ""
  17. function vmess_vless()
  18. outbound_settings = {
  19. vnext = {
  20. {
  21. address = server.server,
  22. port = tonumber(server.server_port),
  23. users = {
  24. {
  25. id = server.vmess_id,
  26. alterId = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and tonumber(server.alter_id) or nil,
  27. security = (server.v2ray_protocol == "vmess" or not server.v2ray_protocol) and server.security or nil,
  28. encryption = (server.v2ray_protocol == "vless") and server.vless_encryption or "none",
  29. flow = (((server.xtls == '1') or (server.tls == '1') or (server.reality == '1')) and (((server.tls_flow ~= "none") and server.tls_flow) or ((server.xhttp_tls_flow ~= "none") and server.xhttp_tls_flow))) or nil
  30. }
  31. }
  32. }
  33. }
  34. }
  35. end
  36. function trojan_shadowsocks()
  37. outbound_settings = {
  38. servers = {
  39. {
  40. address = server.server,
  41. port = tonumber(server.server_port),
  42. password = server.password,
  43. method = ((server.v2ray_protocol == "shadowsocks") and server.encrypt_method_ss) or nil,
  44. uot = (server.v2ray_protocol == "shadowsocks") and (server.uot == '1') or nil,
  45. ivCheck = (server.v2ray_protocol == "shadowsocks") and (server.ivCheck == '1') or nil,
  46. }
  47. }
  48. }
  49. end
  50. function socks_http()
  51. outbound_settings = {
  52. version = server.socks_ver or nil,
  53. servers = {
  54. {
  55. address = server.server,
  56. port = tonumber(server.server_port),
  57. users = (server.auth_enable == "1") and {
  58. {
  59. user = server.username,
  60. pass = server.password
  61. }
  62. } or nil
  63. }
  64. }
  65. }
  66. end
  67. function wireguard()
  68. outbound_settings = {
  69. secretKey = server.private_key,
  70. address = server.local_addresses,
  71. peers = {
  72. {
  73. publicKey = server.peer_pubkey,
  74. preSharedKey = server.preshared_key,
  75. endpoint = server.server .. ":" .. server.server_port,
  76. keepAlive = tonumber(server.keepaliveperiod),
  77. allowedIPs = (server.allowedips) or nil,
  78. }
  79. },
  80. noKernelTun = (server.kernelmode == "1") and true or false,
  81. reserved = {server.reserved} or nil,
  82. mtu = tonumber(server.mtu)
  83. }
  84. end
  85. local outbound = {}
  86. function outbound:new(o)
  87. o = o or {}
  88. setmetatable(o, self)
  89. self.__index = self
  90. return o
  91. end
  92. function outbound:handleIndex(index)
  93. local switch = {
  94. vmess = function()
  95. vmess_vless()
  96. end,
  97. vless = function()
  98. vmess_vless()
  99. end,
  100. trojan = function()
  101. trojan_shadowsocks()
  102. end,
  103. shadowsocks = function()
  104. trojan_shadowsocks()
  105. end,
  106. socks = function()
  107. socks_http()
  108. end,
  109. http = function()
  110. socks_http()
  111. end,
  112. wireguard = function()
  113. wireguard()
  114. end
  115. }
  116. if switch[index] then
  117. switch[index]()
  118. end
  119. end
  120. local settings = outbound:new()
  121. settings:handleIndex(server.v2ray_protocol)
  122. local Xray = {
  123. log = {
  124. -- error = "/var/ssrplus.log",
  125. loglevel = "warning"
  126. },
  127. -- 初始化 inbounds 表
  128. inbounds = {},
  129. -- 初始化 outbounds 表
  130. outbounds = {},
  131. }
  132. -- 传入连接
  133. -- 添加 dokodemo-door 配置,如果 local_port 不为 0
  134. if local_port ~= "0" then
  135. table.insert(Xray.inbounds, {
  136. -- listening
  137. port = tonumber(local_port),
  138. protocol = "dokodemo-door",
  139. settings = {network = proto, followRedirect = true},
  140. sniffing = {
  141. enabled = true,
  142. destOverride = {"http", "tls", "quic"},
  143. metadataOnly = false,
  144. domainsExcluded = {
  145. "courier.push.apple.com",
  146. "rbsxbxp-mim.vivox.com",
  147. "rbsxbxp.www.vivox.com",
  148. "rbsxbxp-ws.vivox.com",
  149. "rbspsxp.www.vivox.com",
  150. "rbspsxp-mim.vivox.com",
  151. "rbspsxp-ws.vivox.com",
  152. "rbswxp.www.vivox.com",
  153. "rbswxp-mim.vivox.com",
  154. "disp-rbspsp-5-1.vivox.com",
  155. "disp-rbsxbp-5-1.vivox.com",
  156. "proxy.rbsxbp.vivox.com",
  157. "proxy.rbspsp.vivox.com",
  158. "proxy.rbswp.vivox.com",
  159. "rbswp.vivox.com",
  160. "rbsxbp.vivox.com",
  161. "rbspsp.vivox.com",
  162. "rbspsp.www.vivox.com",
  163. "rbswp.www.vivox.com",
  164. "rbsxbp.www.vivox.com",
  165. "rbsxbxp.vivox.com",
  166. "rbspsxp.vivox.com",
  167. "rbswxp.vivox.com",
  168. "Mijia Cloud",
  169. "dlg.io.mi.com"
  170. }
  171. }
  172. })
  173. end
  174. -- 开启 socks 代理
  175. -- 检查是否启用 socks 代理
  176. if proto and proto:find("tcp") and socks_port ~= "0" then
  177. table.insert(Xray.inbounds, {
  178. -- socks
  179. protocol = "socks",
  180. port = tonumber(socks_port),
  181. settings = {
  182. auth = socks_server.socks5_auth or "noauth",
  183. udp = true,
  184. mixed = ((socks_server.socks5_mixed == '1') and true or false) or (socks_server.server == 'same') and nil,
  185. accounts = (socks_server.server ~= "same" and (socks_server.socks5_auth and socks_server.socks5_auth ~= "noauth")) and {
  186. {
  187. user = socks_server.socks5_user,
  188. pass = socks_server.socks5_pass
  189. }
  190. } or nil
  191. } or nil
  192. })
  193. end
  194. -- 传出连接
  195. Xray.outbounds = {
  196. {
  197. protocol = server.v2ray_protocol,
  198. settings = outbound_settings,
  199. -- 底层传输配置
  200. streamSettings = (server.v2ray_protocol ~= "wireguard") and {
  201. network = server.transport or "raw",
  202. security = (server.xtls == '1') and "xtls" or (server.tls == '1') and "tls" or (server.reality == '1') and "reality" or nil,
  203. tlsSettings = (server.tls == '1') and {
  204. -- tls
  205. alpn = (server.transport == "xhttp") and (function()
  206. local alpn = {}
  207. if server.tls_alpn and server.tls_alpn ~= "" then
  208. string.gsub(server.tls_alpn, '[^,]+', function(w)
  209. table.insert(alpn, w)
  210. end)
  211. end
  212. if #alpn > 0 then
  213. return alpn
  214. else
  215. return nil
  216. end
  217. end)() or nil,
  218. fingerprint = server.fingerprint,
  219. allowInsecure = (server.insecure == "1"),
  220. serverName = server.tls_host,
  221. certificates = server.certificate and {
  222. usage = "verify",
  223. certificateFile = server.certpath
  224. } or nil,
  225. echConfigList = (server.enable_ech == "1") and server.ech_config or nil,
  226. echForceQuery = (server.enable_ech == "1") and (server.ech_ForceQuery or "none") or nil
  227. } or nil,
  228. xtlsSettings = (server.xtls == '1') and server.tls_host and {
  229. -- xtls
  230. allowInsecure = (server.insecure == "1") and true or nil,
  231. serverName = server.tls_host,
  232. minVersion = "1.3"
  233. } or nil,
  234. realitySettings = (server.reality == '1') and {
  235. publicKey = server.reality_publickey,
  236. shortId = server.reality_shortid or "",
  237. spiderX = server.reality_spiderx or "",
  238. fingerprint = server.fingerprint,
  239. mldsa65Verify = (server.enable_mldsa65verify == '1') and server.reality_mldsa65verify or nil,
  240. serverName = server.tls_host
  241. } or nil,
  242. rawSettings = (server.transport == "raw" or server.transport == "tcp") and {
  243. -- tcp
  244. header = {
  245. type = server.tcp_guise,
  246. request = (server.tcp_guise == "http") and {
  247. -- request
  248. path = {server.http_path} or {"/"},
  249. headers = {Host = {server.http_host} or {}}
  250. } or nil
  251. }
  252. } or nil,
  253. kcpSettings = (server.transport == "kcp") and {
  254. -- kcp
  255. mtu = tonumber(server.mtu),
  256. tti = tonumber(server.tti),
  257. uplinkCapacity = tonumber(server.uplink_capacity),
  258. downlinkCapacity = tonumber(server.downlink_capacity),
  259. congestion = (server.congestion == "1") and true or false,
  260. readBufferSize = tonumber(server.read_buffer_size),
  261. writeBufferSize = tonumber(server.write_buffer_size),
  262. header = {type = server.kcp_guise},
  263. seed = server.seed or nil
  264. } or nil,
  265. wsSettings = (server.transport == "ws") and (server.ws_path or server.ws_host or server.tls_host) and {
  266. -- ws
  267. host = server.ws_host or server.tls_host or nil,
  268. path = server.ws_path or "/",
  269. maxEarlyData = tonumber(server.ws_ed) or nil,
  270. earlyDataHeaderName = server.ws_ed_header or nil
  271. } or nil,
  272. httpupgradeSettings = (server.transport == "httpupgrade") and {
  273. -- httpupgrade
  274. host = (server.httpupgrade_host or server.tls_host) or nil,
  275. path = server.httpupgrade_path or ""
  276. } or nil,
  277. xhttpSettings = (server.transport == "xhttp" or server.transport == "splithttp") and {
  278. -- xhttp
  279. mode = server.xhttp_mode or "auto",
  280. host = (server.xhttp_host or server.tls_host) or nil,
  281. path = server.xhttp_path or "/",
  282. extra = (server.enable_xhttp_extra == "1" and server.xhttp_extra) and (function()
  283. local success, parsed = pcall(json.parse, server.xhttp_extra)
  284. if success then
  285. return parsed.extra or parsed
  286. else
  287. return nil
  288. end
  289. end)() or nil
  290. } or nil,
  291. httpSettings = (server.transport == "h2") and {
  292. -- h2
  293. path = server.h2_path or "",
  294. host = {server.h2_host} or nil,
  295. read_idle_timeout = tonumber(server.read_idle_timeout) or nil,
  296. health_check_timeout = tonumber(server.health_check_timeout) or nil
  297. } or nil,
  298. quicSettings = (server.transport == "quic") and {
  299. -- quic
  300. security = server.quic_security,
  301. key = server.quic_key,
  302. header = {type = server.quic_guise}
  303. } or nil,
  304. grpcSettings = (server.transport == "grpc") and {
  305. -- grpc
  306. serviceName = server.serviceName or "",
  307. multiMode = (server.grpc_mode == "multi") and true or false,
  308. idle_timeout = tonumber(server.idle_timeout) or nil,
  309. health_check_timeout = tonumber(server.health_check_timeout) or nil,
  310. permit_without_stream = (server.permit_without_stream == "1") and true or nil,
  311. initial_windows_size = tonumber(server.initial_windows_size) or nil
  312. } or nil,
  313. sockopt = {
  314. mark = 250,
  315. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  316. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  317. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  318. tcpcongestion = server.custom_tcpcongestion, -- 连接服务器节点的 TCP 拥塞控制算法
  319. dialerProxy = (xray_fragment.fragment == "1" or xray_fragment.noise == "1") and
  320. ((remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id) or nil
  321. }
  322. } or nil,
  323. mux = (server.v2ray_protocol ~= "wireguard") and {
  324. -- mux
  325. enabled = (server.mux == "1" or server.xmux == "1") and true or false, -- Mux
  326. concurrency = (server.mux == "1" and ((server.concurrency ~= "0") and tonumber(server.concurrency) or 8)) or (server.xmux == "1" and -1) or nil, -- TCP 最大并发连接数
  327. xudpConcurrency = ((server.xudpConcurrency ~= "0") and tonumber(server.xudpConcurrency)) or nil, -- UDP 最大并发连接数
  328. xudpProxyUDP443 = (server.mux == "1") and server.xudpProxyUDP443 or nil -- 对被代理的 UDP/443 流量处理方式
  329. } or nil
  330. }
  331. }
  332. -- 添加带有 fragment 设置的 dialerproxy 配置
  333. if xray_fragment.fragment ~= "0" or (xray_fragment.noise ~= "0" and xray_noise.enabled ~= "0") then
  334. table.insert(Xray.outbounds, {
  335. protocol = "freedom",
  336. tag = (remarks ~= nil and remarks ~= "") and (node_id .. "." .. remarks) or node_id,
  337. settings = {
  338. domainStrategy = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and xray_noise.domainStrategy,
  339. fragment = (xray_fragment.fragment == "1") and {
  340. packets = (xray_fragment.fragment_packets ~= "") and xray_fragment.fragment_packets or nil,
  341. length = (xray_fragment.fragment_length ~= "") and xray_fragment.fragment_length or nil,
  342. interval = (xray_fragment.fragment_interval ~= "") and xray_fragment.fragment_interval or nil,
  343. maxSplit = (xray_fragment.fragment_maxsplit ~= "") and xray_fragment.fragment_maxsplit or nil
  344. } or nil,
  345. noises = (xray_fragment.noise == "1" and xray_noise.enabled == "1") and {
  346. {
  347. type = xray_noise.type,
  348. packet = xray_noise.packet,
  349. delay = xray_noise.delay:find("-") and xray_noise.delay or tonumber(xray_noise.delay),
  350. applyTo = xray_noise.applyto
  351. }
  352. } or nil
  353. },
  354. streamSettings = {
  355. sockopt = {
  356. mark = 250,
  357. tcpFastOpen = ((server.transport == "xhttp" and server.tcpfastopen == "1") and true or false) or (server.transport ~= "xhttp") and nil, -- XHTTP Tcp Fast Open
  358. tcpMptcp = (server.mptcp == "1") and true or nil, -- MPTCP
  359. Penetrate = (server.mptcp == "1") and true or nil, -- Penetrate MPTCP
  360. tcpcongestion = server.custom_tcpcongestion -- 连接服务器节点的 TCP 拥塞控制算法
  361. }
  362. }
  363. })
  364. end
  365. local cipher = "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA"
  366. local cipher13 = "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384"
  367. local trojan = {
  368. log_level = 3,
  369. run_type = (proto == "nat" or proto == "tcp") and "nat" or "client",
  370. local_addr = "0.0.0.0",
  371. local_port = tonumber(local_port),
  372. remote_addr = server.server,
  373. remote_port = tonumber(server.server_port),
  374. udp_timeout = 60,
  375. -- 传入连接
  376. password = {server.password},
  377. -- 传出连接
  378. ssl = {
  379. verify = (server.insecure == "0") and true or false,
  380. verify_hostname = (server.tls == "1") and true or false,
  381. cert = (server.certificate) and server.certpath or nil,
  382. cipher = cipher,
  383. cipher_tls13 = cipher13,
  384. sni = server.tls_host,
  385. alpn = {"h2", "http/1.1"},
  386. curve = "",
  387. reuse_session = true,
  388. session_ticket = (server.tls_sessionTicket == "1") and true or false
  389. },
  390. udp_timeout = 60,
  391. tcp = {
  392. -- tcp
  393. no_delay = true,
  394. keep_alive = true,
  395. reuse_port = true,
  396. fast_open = (server.fast_open == "1") and true or false,
  397. fast_open_qlen = 20
  398. }
  399. }
  400. local naiveproxy = {
  401. proxy = (server.username and server.password and server.server and server.server_port) and "https://" .. server.username .. ":" .. server.password .. "@" .. server.server .. ":" .. server.server_port,
  402. listen = (proto == "redir") and "redir" .. "://0.0.0.0:" .. tonumber(local_port) or "socks" .. "://0.0.0.0:" .. tonumber(local_port),
  403. ["insecure-concurrency"] = tonumber(server.concurrency) or 1
  404. }
  405. local ss = {
  406. server = (server.kcp_enable == "1") and "127.0.0.1" or server.server,
  407. server_port = tonumber(server.server_port),
  408. local_address = "0.0.0.0",
  409. local_port = tonumber(local_port),
  410. mode = (proto == "tcp,udp") and "tcp_and_udp" or (proto .. "_only"),
  411. password = server.password,
  412. method = server.encrypt_method_ss,
  413. timeout = tonumber(server.timeout),
  414. fast_open = (server.fast_open == "1") and true or false,
  415. reuse_port = true
  416. }
  417. local hysteria2 = {
  418. server = (
  419. server.server_port and
  420. (
  421. server.port_range and
  422. (server.server .. ":" .. server.server_port .. "," .. string.gsub(server.port_range, ":", "-"))
  423. or
  424. (server.server .. ":" .. server.server_port)
  425. )
  426. or
  427. (
  428. server.port_range and
  429. server.server .. ":" .. string.gsub(server.port_range, ":", "-")
  430. or
  431. server.server .. ":443"
  432. )
  433. ),
  434. bandwidth = (server.uplink_capacity or server.downlink_capacity) and {
  435. up = tonumber(server.uplink_capacity) and tonumber(server.uplink_capacity) .. " mbps" or nil,
  436. down = tonumber(server.downlink_capacity) and tonumber(server.downlink_capacity) .. " mbps" or nil
  437. } or nil,
  438. socks5 = (proto:find("tcp") and tonumber(socks_port) and tonumber(socks_port) ~= 0) and {
  439. listen = "0.0.0.0:" .. tonumber(socks_port),
  440. disableUDP = false
  441. } or nil,
  442. transport = server.transport_protocol and {
  443. type = server.transport_protocol or "udp",
  444. udp = (server.port_range and (server.hopinterval) and {
  445. hopInterval = (server.port_range and (tonumber(server.hopinterval) .. "s") or nil)
  446. } or nil)
  447. } or nil,
  448. --[[
  449. tcpTProxy = (proto:find("tcp") and local_port ~= "0") and {
  450. listen = "0.0.0.0:" .. tonumber(local_port)
  451. } or nil,
  452. ]]--
  453. tcpRedirect = (proto:find("tcp") and local_port ~= "0") and {
  454. listen = "0.0.0.0:" .. tonumber(local_port)
  455. } or nil,
  456. udpTProxy = (proto:find("udp") and local_port ~= "0") and {
  457. listen = "0.0.0.0:" .. tonumber(local_port)
  458. } or nil,
  459. obfs = (server.flag_obfs == "1") and {
  460. type = server.obfs_type,
  461. salamander = { password = server.salamander }
  462. } or nil,
  463. quic = (server.flag_quicparam == "1" ) and {
  464. initStreamReceiveWindow = (server.initstreamreceivewindow and server.initstreamreceivewindow or nil),
  465. maxStreamReceiveWindow = (server.maxstreamreceivewindow and server.maxstreamreceivewindow or nil),
  466. initConnReceiveWindow = (server.initconnreceivewindow and server.initconnreceivewindow or nil),
  467. maxConnReceiveWindow = (server.maxconnreceivewindow and server.maxconnreceivewindow or nil),
  468. maxIdleTimeout = (tonumber(server.maxidletimeout) and tonumber(server.maxidletimeout) .. "s" or nil),
  469. keepAlivePeriod = (tonumber(server.keepaliveperiod) and tonumber(server.keepaliveperiod) .. "s" or nil),
  470. disablePathMTUDiscovery = (server.disablepathmtudiscovery == "1") and true or false
  471. } or nil,
  472. auth = server.hy2_auth,
  473. tls = (server.tls_host and server.tls_host ~= "") and {
  474. sni = server.tls_host,
  475. alpn = (server.type == "hysteria2") and (function()
  476. local alpn = {}
  477. if server.tls_alpn and server.tls_alpn ~= "" then
  478. string.gsub(server.tls_alpn, '[^,]+', function(w)
  479. table.insert(alpn, w)
  480. end)
  481. end
  482. if #alpn > 0 then
  483. return alpn
  484. else
  485. return nil
  486. end
  487. end)() or nil,
  488. --sni = server.tls_host or (server.tls_host and server.tls_alpn) or nil,
  489. insecure = (server.insecure == "1") and true or false,
  490. pinSHA256 = server.pinsha256 or nil
  491. } or {
  492. sni = server.server,
  493. alpn = (server.type == "hysteria2") and (function()
  494. local alpn = {}
  495. if server.tls_alpn and server.tls_alpn ~= "" then
  496. string.gsub(server.tls_alpn, '[^,]+', function(w)
  497. table.insert(alpn, w)
  498. end)
  499. end
  500. if #alpn > 0 then
  501. return alpn
  502. else
  503. return nil
  504. end
  505. end)() or nil,
  506. insecure = (server.insecure == "1") and true or false,
  507. pinSHA256 = server.pinsha256 or nil
  508. },
  509. fast_open = (server.fast_open == "1") and true or false,
  510. lazy = (server.lazy_mode == "1") and true or false
  511. }
  512. local shadowtls = {
  513. client = {
  514. server_addr = server.server_port and server.server .. ":" .. server.server_port or nil,
  515. listen = "127.0.0.1:" .. tonumber(local_port),
  516. tls_names = server.shadowtls_sni,
  517. password = server.password
  518. },
  519. v3 = (server.shadowtls_protocol == "v3") and true or false,
  520. disable_nodelay = (server.disable_nodelay == "1") and true or false,
  521. fastopen = (server.fastopen == "1") and true or false,
  522. strict = (server.strict == "1") and true or false
  523. }
  524. local chain_sslocal = {
  525. locals = local_port ~= "0" and {
  526. {
  527. local_address = "0.0.0.0",
  528. local_port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  529. mode = (proto:find("tcp,udp") and "tcp_and_udp") or proto .. "_only",
  530. protocol = "redir",
  531. tcp_redir = "redirect",
  532. --tcp_redir = "tproxy",
  533. udp_redir = "tproxy"
  534. },
  535. socks_port ~= "0" and {
  536. protocol = "socks",
  537. local_address = "0.0.0.0",
  538. local_port = tonumber(socks_port)
  539. } or nil
  540. } or {{
  541. protocol = "socks",
  542. local_address = "0.0.0.0",
  543. local_port = tonumber(socks_port)
  544. }},
  545. servers = {
  546. {
  547. server = "127.0.0.1",
  548. server_port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  549. method = server.sslocal_method,
  550. password = server.sslocal_password
  551. }
  552. }
  553. }
  554. local chain_vmess = {
  555. inbounds = (local_port ~= "0") and {
  556. {
  557. port = (chain_local_port == "0" and tonumber(server.local_port) or tonumber(chain_local_port)),
  558. protocol = "dokodemo-door",
  559. settings = {
  560. network = proto,
  561. followRedirect = true
  562. },
  563. streamSettings = {
  564. sockopt = {tproxy = "redirect"}
  565. },
  566. sniffing = {
  567. enable = true,
  568. destOverride = {"http","tls"}
  569. }
  570. },
  571. (proto:find("tcp") and socks_port ~= "0") and {
  572. protocol = "socks",
  573. port = tonumber(socks_port)
  574. } or nil
  575. } or { protocol = "socks",port = tonumber(socks_port) },
  576. outbound = {
  577. protocol = "vmess",
  578. settings = {
  579. vnext = {{
  580. address = "127.0.0.1",
  581. port = (tonumber(local_port) == 0 and tonumber(chain_local_port) or tonumber(local_port)),
  582. users = {{
  583. id = (server.vmess_uuid),
  584. security = server.vmess_method,
  585. level = 0
  586. }}
  587. }}
  588. }
  589. }
  590. }
  591. local tuic = {
  592. relay = {
  593. server = server.server_port and server.server .. ":" .. server.server_port,
  594. ip = server.tuic_ip,
  595. uuid = server.tuic_uuid,
  596. password = server.tuic_passwd,
  597. certificates = server.certificate and { server.certpath } or nil,
  598. udp_relay_mode = server.udp_relay_mode,
  599. congestion_control = server.congestion_control,
  600. heartbeat = server.heartbeat and server.heartbeat .. "s" or nil,
  601. timeout = server.timeout and server.timeout .. "s" or nil,
  602. gc_interval = server.gc_interval and server.gc_interval .. "s" or nil,
  603. gc_lifetime = server.gc_lifetime and server.gc_lifetime .. "s" or nil,
  604. alpn = (server.type == "tuic") and (function()
  605. local alpn = {}
  606. if server.tuic_alpn and server.tuic_alpn ~= "" then
  607. string.gsub(server.tuic_alpn, '[^,]+', function(w)
  608. table.insert(alpn, w)
  609. end)
  610. end
  611. if #alpn > 0 then
  612. return alpn
  613. else
  614. return nil
  615. end
  616. end)() or nil,
  617. disable_sni = (server.disable_sni == "1") and true or false,
  618. zero_rtt_handshake = (server.zero_rtt_handshake == "1") and true or false,
  619. send_window = tonumber(server.send_window),
  620. receive_window = tonumber(server.receive_window)
  621. },
  622. ["local"] = {
  623. server = tonumber(socks_port) and "[::]:" .. (socks_port == "0" and local_port or tonumber(socks_port)),
  624. dual_stack = (server.tuic_dual_stack == "1") and true or nil,
  625. max_packet_size = tonumber(server.tuic_max_package_size)
  626. }
  627. }
  628. local config = {}
  629. function config:new(o)
  630. o = o or {}
  631. setmetatable(o, self)
  632. self.__index = self
  633. return o
  634. end
  635. function config:handleIndex(index)
  636. local switch = {
  637. ss = function()
  638. ss.protocol = socks_port
  639. if server.enable_plugin == "1" and server.plugin and server.plugin ~= "none" then
  640. if server.plugin == "custom" then
  641. ss.plugin = server.custom_plugin
  642. else
  643. ss.plugin = server.plugin
  644. end
  645. ss.plugin_opts = server.plugin_opts or nil
  646. end
  647. print(json.stringify(ss, 1))
  648. end,
  649. ssr = function()
  650. ss.protocol = server.protocol
  651. ss.protocol_param = server.protocol_param
  652. ss.method = server.encrypt_method
  653. ss.obfs = server.obfs
  654. ss.obfs_param = server.obfs_param
  655. print(json.stringify(ss, 1))
  656. end,
  657. v2ray = function()
  658. print(json.stringify(Xray, 1))
  659. end,
  660. trojan = function()
  661. print(json.stringify(trojan, 1))
  662. end,
  663. naiveproxy = function()
  664. print(json.stringify(naiveproxy, 1))
  665. end,
  666. hysteria2 = function()
  667. print(json.stringify(hysteria2, 1))
  668. end,
  669. shadowtls = function()
  670. local chain_switch = {
  671. sslocal = function()
  672. if (chain:find("chain")) then
  673. print(json.stringify(chain_sslocal, 1))
  674. else
  675. print(json.stringify(shadowtls, 1))
  676. end
  677. end,
  678. vmess = function()
  679. if (chain:find("chain")) then
  680. print(json.stringify(chain_vmess, 1))
  681. else
  682. print(json.stringify(shadowtls, 1))
  683. end
  684. end
  685. }
  686. local ChainType = server.chain_type
  687. if chain_switch[ChainType] then
  688. chain_switch[ChainType]()
  689. end
  690. end,
  691. tuic = function()
  692. print(json.stringify(tuic, 1))
  693. end
  694. }
  695. if switch[index] then
  696. switch[index]()
  697. end
  698. end
  699. local f = config:new()
  700. f:handleIndex(server.type)