自建代理 - 折腾手记

553 字

3 分钟

自建代理

2026-04-29

做这个之前先进行安全防护

此教程以sing-box代理服务端和vless-reality为例

vless-reality是当前代理协议中综合实力最强的，无需域名、证书

开启bbr#

1
sudo cat<<EOF >> /etc/sysctl.conf
2
net.core.default_qdisc = fq
3
net.ipv4.tcp_congestion_control = bbr
4
net.ipv4.tcp_mtu_probing = 1
5
net.ipv4.tcp_slow_start_after_idle = 0
6
net.ipv4.tcp_syncookies = 1
7
EOF
8

9
# 载入规则
10
sudo sysctl -p

安装代理服务端#

1
sudo mkdir -p /etc/apt/keyrings &&
2
   sudo curl -fsSL https://sing-box.app/gpg.key -o /etc/apt/keyrings/sagernet.asc &&
3
   sudo chmod a+r /etc/apt/keyrings/sagernet.asc &&
4
   echo '
5
Types: deb
6
URIs: https://deb.sagernet.org/
7
Suites: *
8
Components: *
9
Enabled: yes
10
Signed-By: /etc/apt/keyrings/sagernet.asc
11
' | sudo tee /etc/apt/sources.list.d/sagernet.sources &&
12
   sudo apt-get update &&
13
   sudo apt-get install sing-box

生成密钥、UUID、short-id#

这三个要保存好，配置文件要用

1
# 生成sing-box的PrivateKey和PublicKey
2
sudo sing-box generate reality-keypair
3
# 生成UUID
4
cat /proc/sys/kernel/random/uuid
5
# 生成8位short-id
6
openssl rand -hex 8

开放端口#

ssh端口总数为65536，范围0~65535

使用随机高端口，最好是20000以上；实在不知道用哪个使用以下命令来生成
Terminal window
1
shuf -i 1024-65535 -n 1

1
sudo ufw allow 26375/tcp
2
sudo ufw reload

配置信息#

1
sudo vim /etc/sing-box/config.json

使用以下内容替换掉原有内容

1
{
2
  "log": {
3
    "level": "warn",
4
    "timestamp": true
5
  },
6
  "inbounds": [
7
    {
8
      "type": "vless",
9
      "tag": "in-vless-reality",
10
      "listen": "0.0.0.0",
11
      "listen_port": [随机端口],
12

13
      "reuse_addr": true,
14
      "tcp_fast_open": true,
15

16
      "users": [
17
        {
18
          "name": "client",
19
          "uuid": "你的uuid",
20
          "flow": "xtls-rprx-vision"
21
        }
22
      ],
23
      "tls": {
24
        "enabled": true,
25
        "server_name": "www.cloudflare.com",
26
        "alpn": ["h2", "http/1.1"],
27
        "reality": {
28
          "enabled": true,
29
          "handshake": {
30
            "server": "www.cloudflare.com",
31
            "server_port": 443
32
          },
33
          "private_key": "[你的私钥]",
34
          "short_id": ["[你的short-id]"]
35
        }
36
      }
37
    }
38
  ],
39
  "dns": {
40
    "servers": [
41
      { "type": "local", "tag": "local" },
42
      { "type": "https", "tag": "cf", "server": "1.1.1.1" }
43
    ],
44
    "strategy": "prefer_ipv6",
45
    "final": "local",
46
    "cache_capacity": 4096
47
  },
48
  "outbounds": [
49
    { "type": "direct", "tag": "direct" }
50
  ],
51
  "route": {
52
    "default_domain_resolver": {
53
      "server": "local",
54
      "strategy": "prefer_ipv6"
55
    },
56
    "rules": [
57
      { "ip_is_private": true, "action": "reject" },
58
      { "protocol": "bittorrent", "action": "reject" }
59
    ],
60
    "final": "direct"
61
  }
62
}

使用上面的随机高端口、私钥、uuid、short-id替换掉配置中的相关信息

像这样"listen_port": [随机端口], —> "listen_port": 26375,

使用以下命令检验配置文件是否有语法错误

1
sudo sing-box check -c /etc/sing-box/config.json

启动服务#

1
# 设置开机自启
2
sudo systemctl enable sing-box
3
# 启动服务
4
sudo systemctl start sing-box
5
# 查看服务状态
6
sudo systemctl status sing-box

代理链接#

1
vless://[UUID]@[服务器IP]:[端口]?type=tcp&encryption=none&security=reality&flow=xtls-rprx-vision&sni=www.cloudflare.com&fp=chrome&pbk=[公钥]&sid=[short-id]#节点名字

使用生成的公钥、uuid、服务器ip、sing-box端口、公钥、short-id替换[相关内容]

测试#

在[V2rayN](2dust/v2rayN: A GUI client for Windows, Linux and macOS, support Xray and sing-box and others)软件里导入测试是否连通

自建代理

https://blog.vian.im/自建代理/

作者

woioeow

发布于

2026-04-29

许可协议

CC BY-NC-SA 4.0

安全防护