vault backup: 2026-04-07 11:53:46

Sing-box.md

@@ -0,0 +1,92 @@
+1. Конфиг
+```json
+{
+  "log": {
+    "level": "info"
+  },
+  "dns": {
+    "servers": [
+      {
+        "tag": "google",
+        "address": "https://8.8.8.8/dns-query",
+        "address_strategy": "ipv4_only",
+        "detour": "proxy"
+      }
+    ],
+    "strategy": "ipv4_only"
+  },
+  "inbounds": [
+    {
+      "type": "tun",
+      "tag": "tun-in",
+      "interface_name": "tun0",
+      "address": "172.19.0.1/30",
+      "mtu": 1400,
+      "auto_route": true,
+      "strict_route": false,
+      "stack": "system",
+      "route_exclude_address": [
+        "192.168.31.0/24",
+        "195.135.254.66/32",
+        "100.64.0.0/10"
+      ]
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "vless",
+      "tag": "proxy",
+      "server": "195.135.254.66",
+      "server_port": 8888,
+      "uuid": "96639c6e-553f-4389-95d6-e9e3e808f22f",
+      "tls": {
+        "enabled": true,
+        "server_name": "www.microsoft.com",
+        "utls": {
+          "enabled": true,
+          "fingerprint": "chrome"
+        },
+        "reality": {
+          "enabled": true,
+          "public_key": "da-vsnYvc3G8nSguWmo0ort1nWBWcFs2nWY_kAcdYjI",
+          "short_id": "a1b2c3d4"
+        }
+      }
+    },
+    {
+      "type": "direct",
+      "tag": "direct"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "action": "hijack-dns"
+      },
+      {
+        "ip_cidr": [
+          "192.168.31.0/24",
+          "100.64.0.0/10"
+        ],
+        "outbound": "direct"
+      }
+    ],
+    "final": "proxy",
+    "auto_detect_interface": true
+  }
+}
+```
+2. Команды
+```sh
+sudo systemctl start sing-box\nsleep 3\ncurl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
+sudo ip route add 195.135.254.66/32 via 192.168.31.1 dev ens18 2>/dev/null  true
+curl --max-time 5 ifconfig.me
+sudo systemctl restart sing-box\nsleep 2 sudo ip route add 195.135.254.66/32 via 192.168.31.1 dev ens18 2>/dev/null  true\n  sudo ip route add 100.64.0.0/10 via 192.168.31.1 dev ens18 2>/dev/null  true\n  sleep 3\n  journalctl -u sing-box -n 10 --no-pager\n  curl --max-time 5 ifconfig.me
+sudo iptables -t mangle -A POSTROUTING -o ens18 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1000\nsudo iptables -t mangle -A PREROUTING -i ens18 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1000\ncurl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
+sudo systemctl stop sing-box 
+curl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
+sudo tcpdump -i ens18 -n 'host 195.135.254.66' -c 10 &\nsleep 1\ncurl --max-time 3 http://34.160.111.145 -H "Host: ifconfig.me"
+sudo systemctl start sing-box\nsleep 2\nsudo tcpdump -i ens18 -n 'host 195.135.254.66' -c 10 &\nsleep 1\ncurl --max-time 3 http://34.160.111.145 -H "Host: ifconfig.me"
+sudo systemctl stop sing-box
+```