shadowsocks (ss)

#安装libsodium支持高级加密(支持chacha20-ietf-poly1305加密)
sudo apt install libsodium-dev

# 另一安装支持chacha20-ietf-poly1305加密:
# (Ubuntu)https://linuxssh.com/ubuntu-anzhuang-chacha20-ietf-poly1305-jiami-shadowsocks/
# Ubuntu17.04和17.10自带Shadowsocks-libev，可直接安装。
#sudo apt install shadowsocks-libev

# 安装libsodium支持高级加密(支持chacha20-ietf-poly1305加密)注意安装shadowsocks3.0的版本(从github安装)
# yum源:
#   wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo # epel(RHEL 7)
#   wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-6.repo # epel(RHEL 6)
yum install libsodium -y  # for Yum-base install


# 以下是另一安装加密支持的方式: (支持chacha20-ietf-poly1305加密)
# (Centos)https://linuxssh.com/cntos7-anzhuang-chacha20-ietf-poly1305-shadowsocks/
# YUM源: https://copr.fedorainfracloud.org/coprs/librehat/shadowsocks/
#cd /etc/yum.repos.d/
##curl -O https://copr.fedorainfracloud.org/coprs/librehat/shadowsocks/repo/epel-6/librehat-shadowsocks-epel-6.repo
#curl -O https://copr.fedorainfracloud.org/coprs/librehat/shadowsocks/repo/epel-7/librehat-shadowsocks-epel-7.repo
#yum install -y shadowsocks-libev

# 依赖Python 2.6 or 2.7 +
# https://www.python.org/downloads/
# PyPI安装:
#pip install shadowsocks
install git+https://github.com/shadowsocks/shadowsocks.git@master

# 或
# GitHub安装:
git clone https://github.com/shadowsocks/shadowsocks.git
cd shadowsocks
git checkout master
python setup.py build
python setup.py install

# 关于ss加密方式: https://blog.csdn.net/Bleachswh/article/details/78079185
# 总结一点:
#   AES兼顾效率和安全。在拥有AES指令集的机器上， 效率比XCHACHA20更高。推荐：sodium:aes-256-gcm
#   XCHACHA20兼顾效率和安全。在没有AES指令集的机器上，效率比AES高。推荐：xchacha20-ietf-poly1305

# 查看设备cpu指令集是否有AES指令集
grep --color aes /proc/cpuinfo && echo '此设备CPU有AES指令集'

# 直接使用命令选项启动服务:
nohup ssserver -s 0.0.0.0 -p 1111 -k "z7T0XRpassword" -m chacha20-ietf-poly1305 -t 600 </dev/null &>/tmp/ssserver.log &


# 或着启动服务指定配置文件:
nohup ssserver -c /path/to/ssserver.json </dev/null &>/tmp/ssserver.log &


# To run in the background
#   默认PID文件 --pid-file /var/run/shadowsocks.pid
#   默认日志文件 --log-file /var/log/shadowsocks.log
ssserver -s 0.0.0.0 -p 1111 -k z7T0XRpassword -m chacha20-ietf-poly1305 -t 600 --fast-open --user nobody --pid-file /var/run/shadowsocks.pid --log-file /dev/null -d start
# 停止damon程序直接kill进程号，或使用-d stop：
# ssserver [--pid-file /var/run/shadowsocks.pid] -d stop
ssserver -d stop

{
    "server": "0.0.0.0",
    "server_port": 1111,
    "password":"z7T0XRpassword",
    "timeout": 60,
    "method":"chacha20-ietf-poly1305",
    "fast_open": false,
    "user": "nobody",
    "PID_FILE": "/var/run/shadowsocks_ssserver.pid",
    "LOG_FILE": "/var/run/shadowsocks_ssserver.log"
}

echo '* soft nofile 51200' >> /etc/security/limits.conf
echo '* hard nofile 51200' >> /etc/security/limits.conf

fs.file-max = 51200

net.core.rmem_max = 67108864
net.core.wmem_max = 67108864
net.core.netdev_max_backlog = 250000
net.core.somaxconn = 4096

net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_tw_reuse = 1
net.ipv4.tcp_tw_recycle = 0
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 1200
net.ipv4.ip_local_port_range = 10000 65000
net.ipv4.tcp_max_syn_backlog = 8192
net.ipv4.tcp_max_tw_buckets = 5000
# tcp_fastopen是开启TCP Fast Open参数(TCP快速打开，缩略为TFO)
net.ipv4.tcp_fastopen = 3
net.ipv4.tcp_mem = 25600 51200 102400
net.ipv4.tcp_rmem = 4096 87380 67108864
net.ipv4.tcp_wmem = 4096 65536 67108864
net.ipv4.tcp_mtu_probing = 1
net.ipv4.tcp_congestion_control = hybla

# 下载bbr自动安装脚本执行
wget --no-check-certificate https://github.com/teddysun/across/raw/master/b
br.sh && chmod +x bbr.sh && ./bbr.sh

# 升级内核并开启bbr加速后，会提示重启系统，输入y即可
# 重启完毕后，就成功开启bbr加速了。
# 查看是否成功开启，可以执行如下命令，返回值里有bbr就表示成功开启了
sysctl net.ipv4.tcp_available_congestion_control

# 直接使用sslocal命令选项启动:
nohup sslocal -s 48.48.48.48 -p 1111 -b 192.168.1.209 -l 1080 -k 'z7T0XRpassword' -m chacha20-ietf-poly1305 -t 600 --user nobody </dev/null &>/tmp/ssserver.log &


# 或着启动时指定配置文件:
sslocal -c /path/to/sslocal.json


# To run in the background
#   默认PID文件 --pid-file /var/run/shadowsocks.pid
#   默认日志文件 --log-file /var/log/shadowsocks.log
sslocal -s 48.48.48.48 -p 1111 -b 192.168.1.209 -l 1080 -k 'z7T0XRpassword' -m chacha20-ietf-poly1305 -t 600 --fast-open --user nobody --pid-file /var/run/shadowsocks.pid --log-file /dev/null -d start
# 停止damon程序直接kill进程号，或使用-d stop：
# sslocal [--pid-file /var/run/shadowsocks.pid] -d stop
sslocal -d stop

{
    "server": "48.38.87.48",
    "server_port": 1111,
    "local_address": "127.0.0.1",
    "local_port":1080,
    "password":"z7T0XRpassword",
    "timeout": 60,
    "method":"chacha20-ietf-poly1305",
    "fast_open": false,
    "user": "nobody",
    "PID_FILE": "/var/run/shadowsocks_sslocal.pid",
    "LOG_FILE": "/var/run/shadowsocks_sslocal.log"
}

# 这个脚本使用的方式来源 http://openwrt-dist.sourceforge.net/
# 不要再安装ShadowVPN(没什么用了)
wget http://openwrt-dist.sourceforge.net/auto_install.sh
chmod +x auto_install.sh
./auto_install.sh

curl 'https://www.google.com/' --socks5-hostname 127.0.0.1:1080

# On Debian/Ubuntu:
sudo apt install proxychains

strict_chain
proxy_dns 
remote_dns_subnet 224
tcp_read_time_out 15000
tcp_connect_time_out 8000
localnet 127.0.0.0/255.0.0.0
quiet_mode

[ProxyList]
socks5  127.0.0.1 1080

# Run command with proxychains. Examples:
proxychains4 curl https://www.twitter.com/
proxychains4 git push origin master

# Or just proxify bash:
proxychains4 bash
curl https://www.twitter.com/
git push origin master