diff --git a/v2ray示例/香港节点/0-分层代理回落.json b/v2ray示例/香港节点/0-分层代理回落.json index be9e639..d09c7d2 100644 --- a/v2ray示例/香港节点/0-分层代理回落.json +++ b/v2ray示例/香港节点/0-分层代理回落.json @@ -23,12 +23,12 @@ "dest": "@trojan-h2" }, { - "dest": "/dev/shm/h2c.sock", - "xver": 1, + "dest": "5000", + "xver": 2, "alpn": "h2" }, { - "dest": "/dev/shm/h1.sock", + "dest": "5001", "xver": 2 } ] @@ -50,7 +50,7 @@ } ], "minVersion": "1.2", - "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256:TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", + "cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256:TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384:TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "alpn": [ "h2", "http/1.1" @@ -81,7 +81,7 @@ "network": "h2", "security": "none", "httpSettings": { - "path": "/trh2" + "path": "/status" } } } diff --git a/v2ray示例/香港节点/nginx.conf b/v2ray示例/香港节点/nginx.conf index 29a29ea..7c33ee1 100644 --- a/v2ray示例/香港节点/nginx.conf +++ b/v2ray示例/香港节点/nginx.conf @@ -1,43 +1,50 @@ # Restrict access to the website by IP or wrong domain name) and return 400 server { - listen unix:/dev/shm/h1.sock proxy_protocol default_server; - listen unix:/dev/shm/h2c.sock http2 proxy_protocol default_server; - set_real_ip_from unix:; - real_ip_header proxy_protocol; + # listen unix:/dev/shm/h1.sock proxy_protocol default_server; + # listen unix:/dev/shm/h2c.sock http2 proxy_protocol default_server; + listen 5000; + http2 on; + # set_real_ip_from unix:; + # real_ip_header proxy_protocol; server_name _; - return 400; + return 400 "not allowed"; +} +server { + listen 5001; + server_name _; + return 400 "not allowed"; } # HTTP1 UDS listener server { - listen unix:/dev/shm/h1.sock proxy_protocol; # HTTP/1.1 server monitor process and enable PROXY protocol reception - set_real_ip_from unix:; - real_ip_header proxy_protocol; - server_name book.107421.xyz xx.tc.hk.go.107421.xyz; # Change to your own domain name(s) + #listen unix:/dev/shm/h1.sock proxy_protocol; + listen 5001; + server_name xx.tc.hk.go.107421.xyz book.107421.xyz; location / { add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # enable HSTS - root /var/www/html; # Modify to the path of the WEB file stored by yourself (check the permissions) + root /var/www/html/; index index.html index.htm; } } # HTTP2 UDS listener server { - listen unix:/dev/shm/h2c.sock http2 proxy_protocol; # H2C server monitor process and enable PROXY protocol reception - set_real_ip_from unix:; - real_ip_header proxy_protocol; - server_name book.107421.xyz xx.tc.hk.go.107421.xyz; # Change to your own domain name(s) (don't forget to add the certificates to xray config) + # listen unix:/dev/shm/h2c.sock http2 proxy_protocol; + listen 5000; + http2 on; + + server_name xx.tc.hk.go.107421.xyz book.107421.xyz; # grpc settings - grpc_read_timeout 1h; - grpc_send_timeout 1h; - grpc_set_header X-Real-IP $remote_addr; + # grpc_read_timeout 1h; + # grpc_send_timeout 1h; + # grpc_set_header X-Real-IP $remote_addr; # Decoy website location / { add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # enable HSTS - root /var/www/html; # Modify to the path of the WEB file stored by yourself (check the permissions) + root /var/www/html; index index.html index.htm; } } \ No newline at end of file diff --git a/v2ray示例/香港节点/内核转发优化.txt b/v2ray示例/香港节点/内核转发优化.txt new file mode 100644 index 0000000..d34b04f --- /dev/null +++ b/v2ray示例/香港节点/内核转发优化.txt @@ -0,0 +1,75 @@ + + +cat > /etc/sysctl.d/proxy-wdd.conf <