香港节点

v2ray示例/香港节点/0-xtls-reality的配置.json

@@ -0,0 +1,38 @@
+{
+    "listen": "0.0.0.0",
+    "port": 29999,
+    "protocol": "vless",
+    "settings": {
+        "clients": [
+            {
+                "id": "RoMoH00dOl3zaQjdUKB6W0SS-wDYENgI3I7cREYwp1M",
+                "flow": "xtls-rprx-vision"
+            }
+        ],
+        "decryption": "none"
+    },
+    "streamSettings": {
+        "network": "tcp",
+        "security": "reality",
+        "realitySettings": {
+            "dest": "speed.cloudflare.com",
+            "serverNames": [
+                "speed.cloudflare.com"
+            ],
+            "privateKey": "yNsDptp-3i-KqhLHA-RBLrVlJuiYeDUekirp-fkerQA",
+            "shortIds": [
+                "abc124cc",
+                "666asdcd"
+            ]
+        },
+        "sniffing": {
+            "enabled": true,
+            "destOverride": [
+                "http",
+                "tls",
+                "quic"
+            ],
+            "routeOnly": true
+        }
+    }
+}

v2ray示例/香港节点/0-分层代理回落.json

@@ -0,0 +1,94 @@
+{
+  "log": {
+    "loglevel": "debug"
+  },
+  "inbounds": [
+    {
+      "port": 443,
+      "protocol": "vless",
+      "settings": {
+        "clients": [
+          {
+            "id": "b4bdf874-8c03-5bd8-8fd7-5e409dfd82c0",
+            "flow": "xtls-rprx-vision",
+            "email": "cc@vless.com",
+            "level": 0
+          }
+        ],
+        "decryption": "none",
+        "fallbacks": [
+          {
+            "name": "xx.tc.hk.go.107421.xyz",
+            "alpn": "h2",
+            "dest": "@trojan-h2"
+          },
+          {
+            "dest": "/dev/shm/h2c.sock",
+            "xver": 1,
+            "alpn": "h2"
+          },
+          {
+            "dest": "/dev/shm/h1.sock",
+            "xver": 2
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "tcp",
+        "security": "tls",
+        "tlsSettings": {
+          "certificates": [
+            {
+              "ocspStapling": 3600,
+              "certificateFile": "/root/.acme.sh/book.107421.xyz_ecc/fullchain.cer",
+              "keyFile": "/root/.acme.sh/book.107421.xyz_ecc/book.107421.xyz.key"
+            },
+            {
+              "ocspStapling": 3600,
+              "certificateFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/fullchain.cer",
+              "keyFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/xx.tc.hk.go.107421.xyz.key"
+            }
+          ],
+          "minVersion": "1.2",
+          "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
+          "alpn": [
+            "h2",
+            "http/1.1"
+          ]
+        }
+      },
+      "sniffing": {
+        "enabled": true,
+        "destOverride": [
+          "http",
+          "tls"
+        ]
+      }
+    },
+    {
+      "listen": "@trojan-h2",
+      "protocol": "trojan",
+      "settings": {
+        "clients": [
+          {
+            "email": "ice@qq.com",
+            "password": "Vad3.123a)asd1234-asdasd.asdazzS.123",
+            "level": 0
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "h2",
+        "security": "none",
+        "httpSettings": {
+          "path": "/trh2"
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}

v2ray示例/香港节点/nginx.conf

@@ -0,0 +1,43 @@
+# Restrict access to the website by IP or wrong domain name) and return 400
+server {
+    listen unix:/dev/shm/h1.sock proxy_protocol default_server;
+    listen unix:/dev/shm/h2c.sock http2 proxy_protocol default_server;
+    set_real_ip_from unix:;
+    real_ip_header proxy_protocol;
+    server_name _;
+    return 400;
+}
+
+# HTTP1 UDS listener
+server {
+    listen unix:/dev/shm/h1.sock proxy_protocol; # HTTP/1.1 server monitor process and enable PROXY protocol reception
+    set_real_ip_from unix:;
+    real_ip_header proxy_protocol;
+    server_name book.107421.xyz xx.tc.hk.go.107421.xyz; # Change to your own domain name(s)
+
+    location / {
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # enable HSTS
+        root /var/www/html; # Modify to the path of the WEB file stored by yourself (check the permissions)
+        index index.html index.htm;
+    }
+}
+
+# HTTP2 UDS listener
+server {
+    listen unix:/dev/shm/h2c.sock http2 proxy_protocol; # H2C server monitor process and enable PROXY protocol reception
+    set_real_ip_from unix:;
+    real_ip_header proxy_protocol;
+    server_name book.107421.xyz xx.tc.hk.go.107421.xyz; # Change to your own domain name(s) (don't forget to add the certificates to xray config)
+
+    # grpc settings
+    grpc_read_timeout 1h;
+    grpc_send_timeout 1h;
+    grpc_set_header X-Real-IP $remote_addr;
+
+    # Decoy website
+    location / {
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # enable HSTS
+        root /var/www/html; # Modify to the path of the WEB file stored by yourself (check the permissions)
+        index index.html index.htm;
+    }
+}

v2ray示例/香港节点/分层代理回落.json

@@ -1,126 +0,0 @@
-{
-  "log": {
-    "loglevel": "debug"
-  },
-  "inbounds": [
-    {
-      "port": 443,
-      "protocol": "vless",
-      "settings": {
-        "clients": [
-          {
-            "id": "b4bdf874-8c03-5bd8-8fd7-5e409dfd82c0",
-            "flow": "xtls-rprx-vision"
-          }
-        ],
-        "decryption": "none",
-        "fallbacks": [
-          {
-            "name": "xx.tc.hk.go.107421.xyz",
-            "path": "/status",
-            "dest": 5000,
-            "xver": 1
-          },
-          {
-            "name": "book.107421.xyz",
-            "dest": 5003,
-            "xver": 1
-          },
-          {
-            "name": "book.107421.xyz",
-            "alpn": "h2",
-            "dest": 5004,
-            "xver": 1
-          },
-          {
-            "dest": 5001,
-            "xver": 1
-          },
-          {
-            "alpn": "h2",
-            "dest": 5002,
-            "xver": 1
-          }
-        ]
-      },
-      "streamSettings": {
-        "network": "tcp",
-        "security": "tls",
-        "tlsSettings": {
-          "alpn": ["h2", "http/1.1"],
-          "certificates": [
-            {
-              "certificateFile": "/root/.acme.sh/book.107421.xyz_ecc/fullchain.cer",
-              "keyFile": "/root/.acme.sh/book.107421.xyz_ecc/book.107421.xyz.key"
-            }
-          ]
-        }
-      }
-    },
-    {
-      "port": 5000,
-      "listen": "127.0.0.1",
-      "protocol": "vless",
-      "settings": {
-        "clients": [
-          {
-            "id": "481d1403-de9a-5ae1-b921-18c04a4a9da0",
-            "level": 0,
-            "email": "dd@qq.com"
-          }
-        ],
-        "decryption": "none"
-      },
-      "streamSettings": {
-        "network": "ws",
-        "security": "tls",
-        "wsSettings": {
-          "acceptProxyProtocol": true,
-          "path": "/status"
-        },
-        "tlsSettings": {
-          "alpn": ["h2", "http/1.1"],
-          "certificates": [
-            {
-              "certificateFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/fullchain.cer",
-              "keyFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/xx.tc.hk.go.107421.xyz.key"
-            }
-          ]
-        }
-      }
-    },
-    {
-      "listen": "0.0.0.0",
-      "port": 29999,
-      "protocol": "trojan",
-      "settings": {
-        "clients": [
-          {
-            "password": "V2ryStr0ngP0ss"
-          }
-        ]
-      },
-      "streamSettings": {
-        "network": "tcp",
-        "security": "tls",
-        "tlsSettings": {
-          "alpn": [
-            "h2",
-            "http/1.1"
-          ],
-          "certificates": [
-            {
-              "certificateFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/fullchain.cer",
-              "keyFile": "/root/.acme.sh/xx.tc.hk.go.107421.xyz_ecc/xx.tc.hk.go.107421.xyz.key"
-            }
-          ]
-        }
-      }
-    }
-  ],
-  "outbounds": [
-    {
-      "protocol": "freedom"
-    }
-  ]
-}