# 【探索】使用Tunnel加速VPS的连接

Last updated on March 19, 2024 pm

## 准备依赖

- 自建DoH服务

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13

    mkdir -p ~/app/ss && cd ~/app/ss && nano docker-compose.yml
    cat > ./config.json <<EOF
    {
        "server":"0.0.0.0",
        "server_port":9000,
        "password":"password0",
        "timeout":300,
        "method":"aes-256-gcm",
        "fast_open":false,
        "nameserver":"8.8.8.8",
        "mode":"tcp_and_udp"
    }
    EOF

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11

    version: '3.3'
    services:
      ss:
        restart: unless-stopped
        ports:
          - '20077:9000'
          - '20077:9000/udp'
        volumes:
          - './config.json:/etc/shadowsocks-libev/config.json'
          - '/etc/localtime:/etc/localtime:ro'
        image: teddysun/shadowsocks-libev

## 配置Tunnel

- 项目地址: Github; Wiki; Android
- GitHub 文件加速
- 新建规则-类型选`Local`-编辑文件，内容如下

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62

    mixed-port: 7890
    allow-lan: true
    bind-address: '*'
    mode: rule
    log-level: info
    external-controller: :9090
    geodata-mode: true
    geox-url:
      geoip: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip-lite.dat"
      geosite: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat"
      mmdb: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country-lite.mmdb"
    geo-auto-update: true
    geo-update-interval: 120
    profile:
      store-selected: true
      store-fake-ip: true
    tcp-concurrent: true
    global-client-fingerprint: iOS
    dns:
      enable: true
      ipv6: false
      default-nameserver: [223.5.5.5, 119.29.29.29]
      enhanced-mode: fake-ip
      fake-ip-range: 198.18.0.1/16
      use-hosts: true
      nameserver: ['https://my.com/token']
    proxies:
      - { name: '自建节点', type: ss, server: 127.0.0.1, port: 7777, cipher: aes-256-gcm, password: password0, udp: true }
    tunnels:
      - { network: [tcp, udp], address: 127.0.0.1:7777, target: ssip:20077, proxy: "手动选择"}
    proxy-providers:
      provider1:
        type: http
        path: ./provider1.yaml
        url: Clash的订阅地址
        interval: 86400
        health-check:
          enable: false
          url: https://www.gstatic.com/generate_204
          interval: 300
      provider2:
        type: http
        path: ./provider2.yaml
        url: Clash的订阅地址
        interval: 86400
        filter: "(?i)AA-中继-HK|AA-中继-JP|AA-V2ray-HK|AA-V2ray-JP"
        exclude-filter: "(?i)海外直连|打機神線"
        health-check:
          enable: false
          url: https://www.gstatic.com/generate_204
          interval: 300
    proxy-groups:
      - { name: PROXY, type: select, proxies: ["手动选择", "自建节点", DIRECT] }
      - { name: "手动选择", type: select, proxies: ["provider1", "provider2"] }
      - { name: "provider1", type: select, use: [provider1] }
      - { name: "provider2", type: select, use: [provider2] }
    rules:
      - GEOSITE,CN,DIRECT
      - GEOSITE,geolocation-!cn,PROXY
      - GEOIP,LAN,DIRECT
      - GEOIP,CN,DIRECT
      - MATCH,PROXY

## 测试加速

- DNS测试
- UDP测试

## 附加 格式转换

- 前端; 后端
- 因为 converter 时不时出现RCE漏洞，因此 `/token` 需要保密

    1
    2

    mkdir -p ~/app/converter && cd ~/app/converter && nano docker-compose.yml
    sudo docker-compose up -d # 反代地址 converter:25500, 将 /sub 反代到 /token，末尾没有 /

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10

    version: '3'
    services:
      converter:
        image: tindy2013/subconverter:latest
        restart: always

    networks:
      default:
        external: true
        name: ngpm

#探索 #clash #ss #Tunnel
【探索】使用Tunnel加速VPS的连接
https://hexo.limour.top/Use-Tunnel-to-speed-up-the-connection-of-VPS
Author
Limour
Posted on
October 29, 2023
Updated on
March 19, 2024
Licensed under

#### Search

Keyword