Xray+XTLS

TLS 与 XTLS区别，我在网络上找到了如下解释：

XTLS去掉了旧时代翻墙模式中不必要的对加密数据的重复加密。即:

• 如果原始数据是已经经过TLS加密的数据，此时XTLS不再和旧时代工具一样进行无用的重复加密，从而获得卓越性能。
• 如果原始数据不是经过TLS加密的，而是明文数据，XTLS会进行TLS加密。

1. 下载xray

wget https://github.com/XTLS/Xray-core/releases/download/v1.4.2/Xray-linux-64.zip
mkdir /etc/xray && mv Xray-linux-64.zip /etc/xray/
cd /etc/xray && unzip Xray-linux-64.zip 
ln -sv /etc/xray/xray /usr/sbin/

2. 生成UUID(V5)

$ xray uuid -i "example"
feb54431-301b-52bb-a6dd-e1e93e81bb9e

3. 配置xray

vim /etc/xray/server.json

{
    "log": {
        "loglevel": "warning"
    }, 
    "inbounds": [
        {
            "listen": "0.0.0.0", 
            "port": 443,  
            "protocol": "vless", 
            "settings": {
                "clients": [
                    {
                        "id": "feb54431-301b-52bb-a6dd-e1e93e81bb9e", 
                        "level": 0, 
                        "email": "xxx@xxx.com",
                        "flow":"xtls-rprx-direct"
                    }
                ], 
                "decryption": "none", 
                "fallbacks": [
                    {
                        "alpn": "",
                        "path": "",
                        "dest": 8080, //无效的流量转发到此端口
                        "xver": 0
                    }
                ]
            }, 
            "streamSettings": {
                "network": "tcp", 
                "security": "xtls", 
                "xtlsSettings": {
                    "serverName": "www.xxx.com",
                    "alpn": [
                        "h2", 
                        "http/1.1"
                    ], 
                    "certificates": [
                        {
                            "certificateFile": "/etc/nginx/ssl/www.xxx.com.crt",
                            "keyFile": "/etc/nginx/ssl/www.xxx.com.key" 
                        }
                    ]
                }
            }
        }
    ], 
    "outbounds": [
        {
            "protocol": "freedom" 
        }
    ]
}

4. supervisor启动

[program:xray]
command=/etc/xray/xray run -c /etc/xray/server.json 
stdout_logfile=/var/log/xray.log
stderr_logfile=/var/log/xray.log
autostart=true
autorestart=true
startsecs=5
priority=1
stopasgroup=true
killasgroup=true

附：About Client

• shadowrocket for ios

• 本文作者： GaryWu
• 本文链接： https://garywu520.github.io/2021/07/03/Xray-XTLS/
• 版权声明： 本博客所有文章除特别声明外，均采用 MIT 许可协议。转载请注明出处！