Xray

# 安装最新稳定版
bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh) install

bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh) install -version v1.8.24

bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh) install

bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh) remove

# 以 Linux amd64 为例
wget https://github.com/XTLS/Xray-core/releases/latest/download/Xray-linux-64.zip
unzip Xray-linux-64.zip
chmod +x xray
mv xray /usr/local/bin/xray

# 下载 GeoIP 和 GeoSite 数据文件
mkdir -p /usr/local/share/xray
wget https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geoip.dat -O /usr/local/share/xray/geoip.dat
wget https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geosite.dat -O /usr/local/share/xray/geosite.dat

xray version

brew install xray

# 生成新的 UUID
xray uuid

# 生成 X25519 密钥对（用于 Reality）
xray x25519

# 生成随机短 ID（用于 Reality）
xray rand -l 8   # 生成 8 字节（16 位十六进制）的随机字符串

# 验证配置文件语法
xray run -test -config /usr/local/etc/xray/config.json

# 运行配置文件中指定的程序（非 run 模式，用于调试）
xray run -config /usr/local/etc/xray/config.json

{
  "log": { ... },         // 日志配置
  "api": { ... },         // API 接口（可选）
  "dns": { ... },         // DNS 配置
  "routing": { ... },     // 路由规则
  "policy": { ... },      // 连接策略（超时、统计等）
  "inbounds": [ ... ],    // 入站配置
  "outbounds": [ ... ],   // 出站配置
  "transport": { ... },   // 全局传输层配置（可选）
  "stats": { ... },       // 流量统计（可选）
  "reverse": { ... },     // 反向代理（可选）
  "fakedns": { ... },     // FakeDNS（可选）
  "observatory": { ... }  // 节点健康检测（可选）
}

# 生成 Reality 所需的 X25519 密钥对
xray x25519

Private key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Public key:  yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy

# 生成用户 UUID
xray uuid

9f67b8a2-3c1d-4e5f-a6b7-c8d9e0f1a2b3

# 生成 shortId（8 字节随机十六进制字符串）
openssl rand -hex 8

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "9f67b8a2-3c1d-4e5f-a6b7-c8d9e0f1a2b3",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "www.apple.com:443",
          "serverNames": [
            "www.apple.com"
          ],
          "privateKey": "your-private-key-here",
          "shortIds": [
            "a1b2c3d4e5f6g7h8"
          ]
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls", "quic"]
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "tag": "block"
    }
  ],
  "routing": {
    "domainStrategy": "AsIs",
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private"],
        "outboundTag": "block"
      }
    ]
  }
}

systemctl enable xray
systemctl start xray
systemctl status xray

# 查看实时日志
journalctl -u xray -f

# UFW
ufw allow 443/tcp

# iptables
iptables -A INPUT -p tcp --dport 443 -j ACCEPT

# 安装 acme.sh
curl https://get.acme.sh | sh
source ~/.bashrc

# 申请证书（HTTP 验证，确保 80 端口可访问）
~/.acme.sh/acme.sh --issue -d your.domain.com --webroot /var/www/html

# 安装证书到 Xray 目录
mkdir -p /usr/local/etc/xray/certs
~/.acme.sh/acme.sh --install-cert -d your.domain.com \
  --cert-file /usr/local/etc/xray/certs/cert.pem \
  --key-file /usr/local/etc/xray/certs/key.pem \
  --reloadcmd "systemctl restart xray"

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "your-uuid-here",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 8080,
            "xver": 1
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "security": "tls",
        "tlsSettings": {
          "minVersion": "1.3",
          "certificates": [
            {
              "certificateFile": "/usr/local/etc/xray/certs/cert.pem",
              "keyFile": "/usr/local/etc/xray/certs/key.pem"
            }
          ]
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    }
  ]
}

# 安装 Nginx
apt install nginx

# 创建网站根目录和示例页面
mkdir -p /var/www/html
echo "<html><body><h1>Welcome</h1></body></html>" > /var/www/html/index.html

server {
    listen 8080;
    server_name your.domain.com;

    set_real_ip_from 127.0.0.1;
    real_ip_header X-Real-IP;

    root /var/www/html;
    index index.html;

    access_log /var/log/nginx/access.log;
}

systemctl enable nginx
systemctl start nginx

{
  "inbounds": [
    {
      "port": 10086,
      "listen": "127.0.0.1",
      "protocol": "vmess",
      "settings": {
        "clients": [
          {
            "id": "your-uuid-here",
            "alterId": 0
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "wsSettings": {
          "path": "/your-secret-path-here"
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom"
    }
  ]
}

server {
    listen 443 ssl;
    server_name your.domain.com;

    ssl_certificate     /usr/local/etc/xray/certs/cert.pem;
    ssl_certificate_key /usr/local/etc/xray/certs/key.pem;
    ssl_protocols TLSv1.2 TLSv1.3;

    location /your-secret-path-here {
        proxy_pass http://127.0.0.1:10086;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_read_timeout 300s;
        proxy_send_timeout 300s;
    }

    location / {
        root /var/www/html;
    }
}

server {
    listen 80;
    server_name your.domain.com;
    return 301 https://$host$request_uri;
}

{
  "inbounds": [
    {
      "port": 443,
      "protocol": "trojan",
      "settings": {
        "clients": [
          {
            "password": "your-strong-password"
          }
        ],
        "fallbacks": [
          {
            "dest": 8080
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "security": "tls",
        "tlsSettings": {
          "minVersion": "1.3",
          "certificates": [
            {
              "certificateFile": "/usr/local/etc/xray/certs/cert.pem",
              "keyFile": "/usr/local/etc/xray/certs/key.pem"
            }
          ]
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom"
    }
  ]
}

vless://uuid@server_ip:443?security=reality&sni=www.apple.com&fp=chrome&pbk=public_key&sid=short_id&flow=xtls-rprx-vision&type=tcp#节点名称

# 启动服务
systemctl start xray

# 停止服务
systemctl stop xray

# 重启服务
systemctl restart xray

# 重新加载配置（部分更改无需完全重启）
systemctl reload xray

# 查看运行状态
systemctl status xray

# 查看实时日志
journalctl -u xray -f

# 查看最近 100 行日志
journalctl -u xray -n 100

# 开机自启
systemctl enable xray

# 禁止开机自启
systemctl disable xray

xray run -test -config /usr/local/etc/xray/config.json

bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh) install

# 从 Loyalsoldier 的 GitHub 仓库下载最新数据文件（包含更多中国域名）
wget https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geoip.dat \
  -O /usr/local/share/xray/geoip.dat

wget https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geosite.dat \
  -O /usr/local/share/xray/geosite.dat

# 重启 Xray 使新数据文件生效
systemctl restart xray

# 编辑 crontab
crontab -e

# 添加每周日凌晨 3 点更新
0 3 * * 0 wget -q https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geoip.dat -O /usr/local/share/xray/geoip.dat && wget -q https://github.com/Loyalsoldier/v2ray-rules-dat/releases/latest/download/geosite.dat -O /usr/local/share/xray/geosite.dat && systemctl restart xray

{
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "domainMatcher": "hybrid",
    "rules": [
      {
        "type": "field",
        "domain": ["geosite:category-ads-all"],
        "outboundTag": "block"
      },
      {
        "type": "field",
        "domain": ["geosite:cn"],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": ["geoip:cn", "geoip:private"],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "network": "tcp,udp",
        "outboundTag": "proxy"
      }
    ]
  }
}

{
  "dns": {
    "hosts": {
      "dns.google": "8.8.8.8",
      "dns.pub": "119.29.29.29"
    },
    "servers": [
      {
        "address": "https://1.1.1.1/dns-query",
        "domains": ["geosite:geolocation-!cn"],
        "queryStrategy": "UseIPv4"
      },
      {
        "address": "https://doh.pub/dns-query",
        "domains": ["geosite:cn"],
        "queryStrategy": "UseIPv4"
      },
      "localhost"
    ],
    "disableCache": false,
    "disableFallback": false,
    "queryStrategy": "UseIPv4"
  }
}

{
  "fakedns": [
    {
      "ipPool": "198.18.0.0/15",
      "poolSize": 32768
    },
    {
      "ipPool": "fc00::/18",
      "poolSize": 32768
    }
  ],
  "dns": {
    "servers": [
      {
        "address": "fakedns",
        "domains": ["geosite:geolocation-!cn"]
      },
      {
        "address": "https://doh.pub/dns-query",
        "domains": ["geosite:cn"]
      }
    ]
  }
}

{
  "sniffing": {
    "enabled": true,
    "destOverride": ["http", "tls", "quic", "fakedns"],
    "metadataOnly": false
  }
}

{
  "inbounds": [
    {
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "uuid-for-user1",
            "flow": "xtls-rprx-vision",
            "email": "user1@example.com"
          },
          {
            "id": "uuid-for-user2",
            "flow": "xtls-rprx-vision",
            "email": "user2@example.com"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "realitySettings": {
          "dest": "www.apple.com:443",
          "serverNames": ["www.apple.com"],
          "privateKey": "your-private-key-here",
          "shortIds": ["a1b2c3d4", "e5f6g7h8"]
        }
      }
    }
  ]
}

{
  "stats": {},
  "policy": {
    "levels": {
      "0": {
        "statsUserUplink": true,
        "statsUserDownlink": true
      }
    },
    "system": {
      "statsInboundUplink": true,
      "statsInboundDownlink": true,
      "statsOutboundUplink": true,
      "statsOutboundDownlink": true
    }
  },
  "api": {
    "tag": "api",
    "services": ["StatsService"]
  },
  "inbounds": [
    {
      "tag": "api",
      "port": 10085,
      "listen": "127.0.0.1",
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1"
      }
    }
  ],
  "routing": {
    "rules": [
      {
        "inboundTag": ["api"],
        "outboundTag": "api",
        "type": "field"
      }
    ]
  }
}

# 查询所有统计数据
xray api statsquery --server=127.0.0.1:10085

# 查询特定用户的流量
xray api statsquery --server=127.0.0.1:10085 -pattern "user1@example.com"

{
  "protocol": "shadowsocks",
  "settings": {
    "method": "2022-blake3-aes-256-gcm",
    "password": "server-master-key-base64",
    "clients": [
      {
        "password": "user1-key-base64",
        "email": "user1"
      },
      {
        "password": "user2-key-base64",
        "email": "user2"
      }
    ]
  }
}