92 lines
2.7 KiB
Markdown
92 lines
2.7 KiB
Markdown
1. Конфиг
|
|
```json
|
|
{
|
|
"log": {
|
|
"level": "info"
|
|
},
|
|
"dns": {
|
|
"servers": [
|
|
{
|
|
"tag": "google",
|
|
"address": "https://8.8.8.8/dns-query",
|
|
"address_strategy": "ipv4_only",
|
|
"detour": "proxy"
|
|
}
|
|
],
|
|
"strategy": "ipv4_only"
|
|
},
|
|
"inbounds": [
|
|
{
|
|
"type": "tun",
|
|
"tag": "tun-in",
|
|
"interface_name": "tun0",
|
|
"address": "172.19.0.1/30",
|
|
"mtu": 1400,
|
|
"auto_route": true,
|
|
"strict_route": false,
|
|
"stack": "system",
|
|
"route_exclude_address": [
|
|
"192.168.31.0/24",
|
|
"195.135.254.66/32",
|
|
"100.64.0.0/10"
|
|
]
|
|
}
|
|
],
|
|
"outbounds": [
|
|
{
|
|
"type": "vless",
|
|
"tag": "proxy",
|
|
"server": "195.135.254.66",
|
|
"server_port": 8888,
|
|
"uuid": "96639c6e-553f-4389-95d6-e9e3e808f22f",
|
|
"tls": {
|
|
"enabled": true,
|
|
"server_name": "www.microsoft.com",
|
|
"utls": {
|
|
"enabled": true,
|
|
"fingerprint": "chrome"
|
|
},
|
|
"reality": {
|
|
"enabled": true,
|
|
"public_key": "da-vsnYvc3G8nSguWmo0ort1nWBWcFs2nWY_kAcdYjI",
|
|
"short_id": "a1b2c3d4"
|
|
}
|
|
}
|
|
},
|
|
{
|
|
"type": "direct",
|
|
"tag": "direct"
|
|
}
|
|
],
|
|
"route": {
|
|
"rules": [
|
|
{
|
|
"protocol": "dns",
|
|
"action": "hijack-dns"
|
|
},
|
|
{
|
|
"ip_cidr": [
|
|
"192.168.31.0/24",
|
|
"100.64.0.0/10"
|
|
],
|
|
"outbound": "direct"
|
|
}
|
|
],
|
|
"final": "proxy",
|
|
"auto_detect_interface": true
|
|
}
|
|
}
|
|
```
|
|
2. Команды
|
|
```sh
|
|
sudo systemctl start sing-box\nsleep 3\ncurl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
|
|
sudo ip route add 195.135.254.66/32 via 192.168.31.1 dev ens18 2>/dev/null true
|
|
curl --max-time 5 ifconfig.me
|
|
sudo systemctl restart sing-box\nsleep 2 sudo ip route add 195.135.254.66/32 via 192.168.31.1 dev ens18 2>/dev/null true\n sudo ip route add 100.64.0.0/10 via 192.168.31.1 dev ens18 2>/dev/null true\n sleep 3\n journalctl -u sing-box -n 10 --no-pager\n curl --max-time 5 ifconfig.me
|
|
sudo iptables -t mangle -A POSTROUTING -o ens18 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1000\nsudo iptables -t mangle -A PREROUTING -i ens18 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1000\ncurl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
|
|
sudo systemctl stop sing-box
|
|
curl --max-time 5 http://34.160.111.145 -H "Host: ifconfig.me"
|
|
sudo tcpdump -i ens18 -n 'host 195.135.254.66' -c 10 &\nsleep 1\ncurl --max-time 3 http://34.160.111.145 -H "Host: ifconfig.me"
|
|
sudo systemctl start sing-box\nsleep 2\nsudo tcpdump -i ens18 -n 'host 195.135.254.66' -c 10 &\nsleep 1\ncurl --max-time 3 http://34.160.111.145 -H "Host: ifconfig.me"
|
|
sudo systemctl stop sing-box
|
|
``` |