Ubuntu下对于Websocket/HTTP2+TLS+web的探索

Author Avatar
LoLo 7月 09, 2019
  • 在其它设备中阅读本文章

首先你需要有caddy。

Caddy其实是特别傻瓜化的东西,它本身其实特别绿色纯净版,在CaddyServer里面勾选http.forwardproxy还有http.proxyprotocol,hook.service可以要也可以不要。

下载下来之后随便放在什么home之类的就可以了,要用的时候在和caddy一样的地方写一个Caddyfile,然后执行caddy它就会读取Caddyfile然后执行。

如果你想要ws+tls+web,那么Caddyfile里面填:

1
2
3
4
5
6
7
8
9
yourdomain.com
{
log ./caddy.log
root /www/public
proxy /test localhost:10000 {
websocket
header_upstream -Origin
}
}

把yourdomain.com改成你自己的域名,/www/public是你放网页的地方,proxy是把 yourdomain.com/test 指向10000端口反代。

另一边填:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
{
"inbound": {
"port": 10000,
"listen":"127.0.0.1",
"protocol": "vmess",
"settings": {
"clients": [
{
"id": "你的uuid",
"alterId": 64
}
]
},
"streamSettings": {
"network": "ws",
"wsSettings": {
"path": "/test"
}
}
},
"outbound": {
"protocol": "freedom",
"settings": {}
}
}

其中uuid换成自己的就可以了。


如果是h2+tls+web的话,那么Caddyfile里面填:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
https://yourdomain.com {
root /www/public
proxy /test https://localhost:10000 {
insecure_skip_verify
header_upstream X-Forwarded-Proto "https"
header_upstream Host "yourdomain.com"
}
header / {
Strict-Transport-Security "max-age=31536000;"
X-XSS-Protection "1; mode=block"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
}
}

然后你需要sudo -i切换到root模式,然后软链caddy的证书过来。

1
2
3
ln -s /etc/ssl/caddy/acme/acme-v02.api.letsencrypt.org/sites/<yourdomain.com>/<yourdomain.com>.crt /etc/v2ray/v2ray.crt

ln -s /etc/ssl/caddy/acme/acme-v02.api.letsencrypt.org/sites/<yourdomain.com>/<yourdomain.com>.key /etc/v2ray/v2ray.key

把命令里面的两个yourdomain.com都换成自己的域名。

然后另一边填:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
{
"log" : {
"access": "/var/log/v2ray/access.log",
"error": "/var/log/v2ray/error.log",
"loglevel": "warning"
},

"inbound": {
"port": 10000,
"listen": "127.0.0.1",
"protocol": "vmess",
"settings": {
"clients": [
{
"id": "你的uuid",
"level": 1,
"alterId": 64
}
]
},

"streamSettings": {
"network": "h2",
"security": "tls",
"httpSettings": {
"path": "/test",
"host": ["yourdomain.com"]
},
"tlsSettings": {
"serverName": "yourdomain.com",
"certificates": [
{
"certificateFile": "/etc/v2ray/v2ray.crt",
"keyFile": "/etc/v2ray/v2ray.key"
}
]
}
}
},

"outbound": {
"protocol": "freedom",
"settings": {}
},
"outboundDetour": [
{
"protocol": "blackhole",
"settings": {},
"tag": "blocked"
}
],

"routing": {
"strategy": "rules",
"settings": {
"rules": [
{
"type": "field",
"ip": [
"0.0.0.0/8",
"10.0.0.0/8",
"100.64.0.0/10",
"127.0.0.0/8",
"169.254.0.0/16",
"172.16.0.0/12",
"192.0.0.0/24",
"192.0.2.0/24",
"192.168.0.0/16",
"198.18.0.0/15",
"198.51.100.0/24",
"203.0.113.0/24",
"::1/128",
"fc00::/7",
"fe80::/10"
],
"outboundTag": "blocked"
}
]
}
}
}

如果ws需要加上mtproto服务的话:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
{
"inbounds": [
{
"port": 10000,
"listen":"127.0.0.1",
"protocol": "vmess",
"settings": {
"clients": [
{
"id": "你的uuid",
"alterId": 64
}
]
},
"streamSettings": {
"network": "ws",
"wsSettings": {
"path": "/test"
}
}
},
{
"tag": "tg-in",
"port": 10001,
"protocol": "mtproto",
"settings": {
"users": [
{
"secret": "你的uuid"
}
]
}
}
],
"outbounds": [
{
"protocol": "freedom",
"settings": { }
},
{
"tag": "tg-out",
"protocol": "mtproto",
"settings": { }
}
],
"routing": {
"rules": [
{
"type": "field",
"inboundTag": [
"tg-in"
],
"outboundTag": "tg-out"
}
]
}
}

如果h2需要加上mtproto的话:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
{
"inbounds": [
{
"port": 10000,
"listen": "127.0.0.1",
"protocol": "vmess",
"settings": {
"clients": [
{
"id": "你的uuid",
"level": 1,
"alterId": 64
}
]
},

"streamSettings": {
"network": "h2",
"security": "tls",
"httpSettings": {
"path": "/test",
"host": ["yourdomain.com"]
},
"tlsSettings": {
"serverName": "yourdomain.com",
"certificates": [
{
"certificateFile": "/etc/v2ray/v2ray.crt",
"keyFile": "/etc/v2ray/v2ray.key"
}
]
}
}
},
{
"tag": "tg-in",
"port": 10001,
"protocol": "mtproto",
"settings": {
"users": [
{
"secret": "你的uuid"
}
]
}
}
],
"outbounds": [
{
"protocol": "freedom",
"settings": { }
},
{
"tag": "tg-out",
"protocol": "mtproto",
"settings": { }
}
],
"routing": {
"rules": [
{
"type": "field",
"inboundTag": [
"tg-in"
],
"outboundTag": "tg-out"
}
]
}
}

以上。