{"id":1407,"date":"2026-10-01T09:48:53","date_gmt":"2026-10-01T01:48:53","guid":{"rendered":"https:\/\/www.suannai.link\/blog\/xray-%e9%85%8d%e7%bd%ae%e4%b8%8e%e4%bd%bf%e7%94%a8%e5%85%a8%e6%b5%81%e7%a8%8b%ef%bc%9a%e4%bb%8e%e5%8e%9f%e7%90%86%e5%88%b0%e5%ae%a2%e6%88%b7%e7%ab%af%e5%ae%9e%e6%93%8d\/"},"modified":"2026-10-01T09:48:53","modified_gmt":"2026-10-01T01:48:53","slug":"xray-%e9%85%8d%e7%bd%ae%e4%b8%8e%e4%bd%bf%e7%94%a8%e5%85%a8%e6%b5%81%e7%a8%8b%ef%bc%9a%e4%bb%8e%e5%8e%9f%e7%90%86%e5%88%b0%e5%ae%a2%e6%88%b7%e7%ab%af%e5%ae%9e%e6%93%8d","status":"publish","type":"post","link":"https:\/\/www.suannai.link\/blog\/xray-%e9%85%8d%e7%bd%ae%e4%b8%8e%e4%bd%bf%e7%94%a8%e5%85%a8%e6%b5%81%e7%a8%8b%ef%bc%9a%e4%bb%8e%e5%8e%9f%e7%90%86%e5%88%b0%e5%ae%a2%e6%88%b7%e7%ab%af%e5%ae%9e%e6%93%8d\/","title":{"rendered":"Xray \u914d\u7f6e\u4e0e\u4f7f\u7528\u5168\u6d41\u7a0b\uff1a\u4ece\u539f\u7406\u5230\u5ba2\u6237\u7aef\u5b9e\u64cd"},"content":{"rendered":"<p><a href=\"https:\/\/www.suannai.link\/blog\/v2ray%e5%92%8cxray%e5%8c%ba%e5%88%ab\/\" target=\"_blank\" rel=\"noopener\">Xray \u662f V2Ray \u7684\u4e00\u4e2a\u9ad8\u6027\u80fd\u5206\u652f\u7248\u672c<\/a>\uff0c\u5176\u6838\u5fc3\u4f18\u52bf\u5728\u4e8e\u5bf9\u591a\u79cd\u534f\u8bae\u7684\u5b8c\u6574\u652f\u6301\u4ee5\u53ca\u66f4\u9ad8\u6548\u7684\u4f20\u8f93\u63a7\u5236\u3002\u5bf9\u4e8e\u5e0c\u671b\u6df1\u5165\u7406\u89e3\u6216\u914d\u7f6e Xray \u7684\u7528\u6237\u800c\u8a00\uff0c\u5173\u952e\u5728\u4e8e\u5398\u6e05\u5176\u5e95\u5c42\u903b\u8f91\u3001\u6b63\u786e\u5b89\u88c5\u670d\u52a1\u7aef\u3001\u914d\u7f6e\u5ba2\u6237\u7aef\u8fde\u63a5\u53c2\u6570\u4ee5\u53ca\u6392\u67e5\u5e38\u89c1\u8fde\u63a5\u6545\u969c\u3002\u672c\u6587\u5c06\u8be6\u7ec6\u62c6\u89e3 Xray \u7684\u914d\u7f6e\u6d41\u7a0b\uff0c\u6db5\u76d6\u670d\u52a1\u7aef\u90e8\u7f72\u3001\u5ba2\u6237\u7aef\u5bf9\u63a5\u53ca\u6027\u80fd\u4f18\u5316\uff0c\u5e2e\u52a9\u7528\u6237\u5efa\u7acb\u6e05\u6670\u7684\u6280\u672f\u8ba4\u77e5\u5e76\u89e3\u51b3\u5b9e\u9645\u64cd\u4f5c\u4e2d\u7684\u914d\u7f6e\u96be\u9898\u3002<\/p>\n<h2>Xray \u7684\u6838\u5fc3\u67b6\u6784\u4e0e\u534f\u8bae\u57fa\u7840<\/h2>\n<p>\u5728\u4f7f\u7528 Xray \u4e4b\u524d\uff0c\u7406\u89e3\u5176\u5de5\u4f5c\u539f\u7406\u662f\u907f\u514d\u914d\u7f6e\u9519\u8bef\u7684\u524d\u63d0\u3002Xray \u5e76\u975e\u4e00\u4e2a\u5355\u4e00\u7684\u201c\u8f6f\u4ef6\u201d\uff0c\u800c\u662f\u4e00\u4e2a\u5305\u542b\u6838\u5fc3\uff08Core\uff09\u548c\u591a\u4e2a\u7ec4\u4ef6\uff08\u5982 DNS\u3001API\u3001Traffic \u7b49\uff09\u7684\u751f\u6001\u7cfb\u7edf\u3002\u5176\u6838\u5fc3\u529f\u80fd\u662f\u5c06\u672c\u5730\u6d41\u91cf\u901a\u8fc7\u7279\u5b9a\u7684\u4f20\u8f93\u534f\u8bae\u52a0\u5bc6\u5e76\u8f6c\u53d1\u81f3\u8fdc\u7aef\u670d\u52a1\u5668\uff0c\u518d\u7531\u8fdc\u7aef\u670d\u52a1\u5668\u89e3\u5bc6\u5e76\u8bbf\u95ee\u76ee\u6807\u7f51\u7edc\u3002<\/p>\n<p>Xray \u652f\u6301\u591a\u79cd\u4e3b\u6d41\u4f20\u8f93\u534f\u8bae\uff0c\u4e0d\u540c\u7684\u534f\u8bae\u5bf9\u5e94\u4e0d\u540c\u7684\u914d\u7f6e\u903b\u8f91\u548c\u9002\u7528\u573a\u666f\uff1a<\/p>\n<p>* <strong>VMess \u534f\u8bae<\/strong>\uff1a\u7531 V2Ray \u56e2\u961f\u5f00\u53d1\uff0cXray \u5bf9\u5176\u8fdb\u884c\u4e86\u4f18\u5316\u3002\u8be5\u534f\u8bae\u5177\u6709\u65f6\u95f4\u540c\u6b65\u6821\u9a8c\u673a\u5236\uff0c\u80fd\u6709\u6548\u62b5\u6297\u57fa\u4e8e\u65f6\u95f4\u7684\u6d41\u91cf\u7279\u5f81\u5206\u6790\u3002\u914d\u7f6e\u65f6\u9700\u786e\u4fdd\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u7aef\u7684 UUID \u548c AlterID \u5b8c\u5168\u4e00\u81f4\u3002<br \/>* <strong>VLESS \u534f\u8bae<\/strong>\uff1aXray \u7684\u6838\u5fc3\u8d21\u732e\u4e4b\u4e00\u3002\u5b83\u53bb\u9664\u4e86 VMess \u4e2d\u7684\u52a0\u5bc6\u5c42\uff0c\u4ec5\u4fdd\u7559\u8ba4\u8bc1\u4fe1\u606f\uff0c\u4ece\u800c\u964d\u4f4e\u4e86 CPU \u5f00\u9500\uff0c\u63d0\u5347\u4e86\u541e\u5410\u91cf\u3002VLESS \u652f\u6301 Trojan \u548c Reality \u4f20\u8f93\u65b9\u5f0f\uff0c\u662f\u76ee\u524d\u914d\u7f6e\u7684\u4e3b\u6d41\u9009\u62e9\u3002<br \/>* <strong>Trojan \u534f\u8bae<\/strong>\uff1a\u4f2a\u88c5\u4e3a\u6b63\u5e38\u7684 HTTPS \u6d41\u91cf\uff0c\u7a7f\u900f\u6027\u5f3a\u3002\u5728 Xray \u4e2d\uff0cTrojan \u901a\u5e38\u4f5c\u4e3a\u4f20\u8f93\u5c42\uff08Transport\uff09\u5b58\u5728\uff0c\u800c\u975e\u72ec\u7acb\u7684\u534f\u8bae\u5c42\uff0c\u9700\u914d\u5408 TLS \u4f7f\u7528\u3002<br \/>* <strong>Reality \u534f\u8bae<\/strong>\uff1aXray \u7279\u6709\u7684\u65b0\u578b\u4f20\u8f93\u65b9\u5f0f\u3002\u5b83\u4e0d\u4f7f\u7528\u4f20\u7edf\u7684 CA \u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff08CA\uff09\u8fdb\u884c TLS \u63e1\u624b\uff0c\u800c\u662f\u901a\u8fc7\u6307\u7eb9\u4f2a\u88c5\uff08SNI\uff09\u548c\u516c\u94a5\u9a8c\u8bc1\u6765\u5efa\u7acb\u8fde\u63a5\u3002\u8fd9\u79cd\u65b9\u5f0f\u80fd\u6709\u6548\u5bf9\u6297 SNI \u963b\u65ad\uff0c\u4f46\u914d\u7f6e\u96be\u5ea6\u76f8\u5bf9\u8f83\u9ad8\u3002<\/p>\n<p>\u7406\u89e3\u8fd9\u4e9b\u534f\u8bae\u7684\u533a\u522b\u6709\u52a9\u4e8e\u7528\u6237\u6839\u636e\u7f51\u7edc\u73af\u5883\u9009\u62e9\u5408\u9002\u7684\u914d\u7f6e\u65b9\u6848\u3002\u4f8b\u5982\uff0c\u5728\u9700\u8981\u9ad8\u6297\u5c01\u9501\u80fd\u529b\u7684\u573a\u666f\u4e0b\uff0cReality \u6216 Trojan \u914d\u5408 TLS \u662f\u66f4\u4f18\u9009\u62e9\uff1b\u800c\u5728\u8ffd\u6c42\u6781\u81f4\u901f\u5ea6\u548c\u4f4e\u5ef6\u8fdf\u7684\u5185\u7f51\u6216\u7279\u5b9a\u7f51\u7edc\u73af\u5883\u4e0b\uff0cVMess \u6216 VLESS \u914d\u5408 WebSocket (WS) \u53ef\u80fd\u66f4\u4e3a\u5408\u9002\u3002<\/p>\n\n<h2>\u670d\u52a1\u7aef\u90e8\u7f72\u4e0e\u57fa\u7840\u914d\u7f6e<\/h2>\n<p>Xray \u7684\u670d\u52a1\u7aef\uff08Server\uff09\u662f\u8fde\u63a5\u7684\u4e2d\u67a2\uff0c\u8d1f\u8d23\u63a5\u6536\u5ba2\u6237\u7aef\u8bf7\u6c42\u5e76\u8fdb\u884c\u8f6c\u53d1\u3002\u90e8\u7f72\u8fc7\u7a0b\u901a\u5e38\u6d89\u53ca\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u6587\u4ef6\u3001\u751f\u6210\u914d\u7f6e\u6587\u4ef6\u4ee5\u53ca\u8bbe\u7f6e\u9632\u706b\u5899\u89c4\u5219\u3002<\/p>\n<h3>1. \u73af\u5883\u51c6\u5907\u4e0e\u5b89\u88c5<\/h3>\n<p>Xray \u652f\u6301 Linux\u3001Windows \u548c macOS \u7b49\u591a\u79cd\u64cd\u4f5c\u7cfb\u7edf\u3002\u5728 Linux \u670d\u52a1\u5668\u4e0a\uff0c\u901a\u5e38\u901a\u8fc7\u5b98\u65b9\u811a\u672c\u4e00\u952e\u5b89\u88c5\uff0c\u6216\u624b\u52a8\u4e0b\u8f7d\u5bf9\u5e94\u67b6\u6784\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u5b89\u88c5\u5b8c\u6210\u540e\uff0c\u6838\u5fc3\u914d\u7f6e\u6587\u4ef6\u901a\u5e38\u4f4d\u4e8e `\/etc\/xray\/config.json`\uff08Linux\uff09\u6216\u5b89\u88c5\u76ee\u5f55\u4e0b\u7684 `config.json`\uff08Windows\uff09\u3002<\/p>\n<h3>2. \u914d\u7f6e\u6587\u4ef6\u7ed3\u6784\u89e3\u6790<\/h3>\n<p>Xray \u7684\u914d\u7f6e\u6587\u4ef6\u91c7\u7528 JSON \u683c\u5f0f\uff0c\u4e3b\u8981\u5305\u542b\u4ee5\u4e0b\u51e0\u4e2a\u5173\u952e\u90e8\u5206\uff1a<\/p>\n<p>* <strong>Inbounds\uff08\u5165\u7ad9\u914d\u7f6e\uff09<\/strong>\uff1a\u5b9a\u4e49\u670d\u52a1\u5668\u76d1\u542c\u7684\u7aef\u53e3\u3001\u534f\u8bae\u7c7b\u578b\u4ee5\u53ca\u5bf9\u5e94\u7684\u4f20\u8f93\u8bbe\u7f6e\u3002<br \/>* <strong>Outbounds\uff08\u51fa\u7ad9\u914d\u7f6e\uff09<\/strong>\uff1a\u5b9a\u4e49\u670d\u52a1\u5668\u5c06\u6d41\u91cf\u8f6c\u53d1\u81f3\u54ea\u91cc\u3002\u901a\u5e38\u9ed8\u8ba4\u4e3a `freedom` \u7b56\u7565\uff0c\u5373\u76f4\u63a5\u8bbf\u95ee\u4e92\u8054\u7f51\u3002<br \/>* <strong>Routing\uff08\u8def\u7531\u89c4\u5219\uff09<\/strong>\uff1a\u53ef\u9009\u914d\u7f6e\uff0c\u7528\u4e8e\u5206\u6d41\u56fd\u5185\u548c\u56fd\u5916\u6d41\u91cf\uff0c\u907f\u514d\u56de\u6e90\u5ef6\u8fdf\u3002<br \/>* <strong>Dns\uff08DNS \u8bbe\u7f6e\uff09<\/strong>\uff1a\u53ef\u9009\u914d\u7f6e\uff0c\u7528\u4e8e\u4f18\u5316\u57df\u540d\u89e3\u6790\u3002<\/p>\n<p>\u4ee5\u4e0b\u662f\u4e00\u4e2a\u57fa\u7840\u7684 VLESS + WebSocket + TLS \u5165\u7ad9\u914d\u7f6e\u793a\u4f8b\uff0c\u7528\u4e8e\u8bf4\u660e\u5173\u952e\u53c2\u6570\uff1a<\/p>\n<p>&#8220;`json<br \/>{<br \/> &#8220;inbounds&#8221;: [<br \/> {<br \/> &#8220;port&#8221;: 443,<br \/> &#8220;protocol&#8221;: &#8220;vless&#8221;,<br \/> &#8220;settings&#8221;: {<br \/> &#8220;clients&#8221;: [<br \/> {<br \/> &#8220;id&#8221;: &#8220;uuid-string-here&#8221;,<br \/> &#8220;flow&#8221;: &#8220;xtls-rprx-vision&#8221;<br \/> }<br \/> ],<br \/> &#8220;decryption&#8221;: &#8220;none&#8221;<br \/> },<br \/> &#8220;streamSettings&#8221;: {<br \/> &#8220;network&#8221;: &#8220;ws&#8221;,<br \/> &#8220;security&#8221;: &#8220;tls&#8221;,<br \/> &#8220;tlsSettings&#8221;: {<br \/> &#8220;certificates&#8221;: [<br \/> {<br \/> &#8220;certificateFile&#8221;: &#8220;\/path\/to\/cert.pem&#8221;,<br \/> &#8220;keyFile&#8221;: &#8220;\/path\/to\/key.pem&#8221;<br \/> }<br \/> ]<br \/> },<br \/> &#8220;wsSettings&#8221;: {<br \/> &#8220;path&#8221;: &#8220;\/ray&#8221;<br \/> }<br \/> }<br \/> }<br \/> ]<br \/>}<br \/>&#8220;`<\/p>\n<p>* <strong>port<\/strong>\uff1a\u76d1\u542c\u7aef\u53e3\u3002\u82e5\u4f7f\u7528 HTTPS \u6807\u51c6\u7aef\u53e3\uff0c\u901a\u5e38\u8bbe\u4e3a 443\uff1b\u82e5\u4f7f\u7528 HTTP\uff0c\u5219\u8bbe\u4e3a 80\u3002<br \/>* <strong>protocol<\/strong>\uff1a\u6307\u5b9a\u4f7f\u7528\u7684\u534f\u8bae\uff0c\u5982 `vless`\u3001`vmess` \u6216 `trojan`\u3002<br \/>* <strong>clients<\/strong>\uff1a\u7528\u6237\u5217\u8868\uff0c\u6bcf\u4e2a\u7528\u6237\u9700\u62e5\u6709\u552f\u4e00\u7684 ID\uff08UUID\uff09\u3002<br \/>* <strong>streamSettings<\/strong>\uff1a\u4f20\u8f93\u5c42\u8bbe\u7f6e\u3002`network` \u6307\u5b9a\u4f20\u8f93\u65b9\u5f0f\uff08\u5982 `ws`\u3001`tcp`\u3001`grpc`\uff09\uff0c`security` \u6307\u5b9a\u662f\u5426\u542f\u7528 TLS\uff0c`wsSettings` \u4e2d\u7684 `path` \u662f WebSocket \u63e1\u624b\u8def\u5f84\uff0c\u9700\u4e0e\u5ba2\u6237\u7aef\u4e00\u81f4\u3002<\/p>\n<h3>3. \u9632\u706b\u5899\u4e0e\u5b89\u5168\u7ec4\u914d\u7f6e<\/h3>\n<p>\u90e8\u7f72\u5b8c\u6210\u540e\uff0c\u5fc5\u987b\u786e\u4fdd\u670d\u52a1\u5668\u7684\u9632\u706b\u5899\u5141\u8bb8\u76f8\u5e94\u7aef\u53e3\u7684\u5165\u7ad9\u6d41\u91cf\u3002\u5728\u4e91\u670d\u52a1\u5668\u73af\u5883\u4e2d\uff0c\u8fd8\u9700\u5728\u4e91\u63a7\u5236\u53f0\u7684\u5b89\u5168\u7ec4\u4e2d\u6dfb\u52a0\u5bf9\u5e94\u7684\u5165\u7ad9\u89c4\u5219\u3002\u82e5\u914d\u7f6e\u4e86 TLS\uff0c\u9700\u786e\u4fdd 443 \u7aef\u53e3\u5f00\u653e\uff1b\u82e5\u4f7f\u7528 Reality\uff0c\u9700\u5f00\u653e\u6307\u5b9a\u7684 TCP \u7aef\u53e3\u3002<\/p>\n<h2>\u5ba2\u6237\u7aef\u914d\u7f6e\u4e0e\u8fde\u63a5\u5efa\u7acb<\/h2>\n<p>\u5ba2\u6237\u7aef\uff08Client\uff09\u662f\u7528\u6237\u76f4\u63a5\u64cd\u4f5c\u7684\u8f6f\u4ef6\uff0c\u8d1f\u8d23\u5c06\u672c\u5730\u6d41\u91cf\u52a0\u5bc6\u5e76\u53d1\u9001\u7ed9\u670d\u52a1\u7aef\u3002Xray \u63d0\u4f9b\u4e86\u6838\u5fc3\u547d\u4ee4\u884c\u5de5\u5177 `xray`\uff0c\u4f46\u666e\u901a\u7528\u6237\u901a\u5e38\u4f7f\u7528\u57fa\u4e8e Xray \u6838\u5fc3\u5f00\u53d1\u7684\u56fe\u5f62\u754c\u9762\u5ba2\u6237\u7aef\uff0c\u5982 Clash Meta (Mihomo)\u3001Hiddify\u3001NekoBox \u7b49\u3002<\/p>\n<h3>1. \u901a\u7528\u914d\u7f6e\u903b\u8f91<\/h3>\n<p>\u65e0\u8bba\u4f7f\u7528\u4f55\u79cd\u5ba2\u6237\u7aef\uff0c\u914d\u7f6e\u7684\u6838\u5fc3\u903b\u8f91\u5747\u56f4\u7ed5\u4ee5\u4e0b\u53c2\u6570\u5c55\u5f00\uff1a<\/p>\n<p>* <strong>\u5730\u5740 (Address)<\/strong>\uff1a\u670d\u52a1\u7aef\u7684 IP \u5730\u5740\u6216\u57df\u540d\u3002<br \/>* <strong>\u7aef\u53e3 (Port)<\/strong>\uff1a\u670d\u52a1\u7aef\u914d\u7f6e\u7684\u76d1\u542c\u7aef\u53e3\u3002<br \/>* <strong>\u7528\u6237 ID (ID\/UUID)<\/strong>\uff1a\u4e0e\u670d\u52a1\u7aef\u914d\u7f6e\u4e2d `clients` \u5217\u8868\u91cc\u5bf9\u5e94\u7684 UUID \u4e00\u81f4\u3002<br \/>* <strong>\u534f\u8bae (Protocol)<\/strong>\uff1a\u5fc5\u987b\u4e0e\u670d\u52a1\u7aef\u4e00\u81f4\uff0c\u5982 VLESS\u3001VMess \u7b49\u3002<br \/>* <strong>\u4f20\u8f93\u65b9\u5f0f (Network)<\/strong>\uff1a\u5982 WebSocket\u3001TCP\u3001gRPC \u7b49\u3002<br \/>* <strong>\u4f2a\u88c5\u57df\u540d (Host\/SNI)<\/strong>\uff1a\u82e5\u4f7f\u7528 WebSocket\uff0c\u9700\u586b\u5199\u57df\u540d\uff1b\u82e5\u4f7f\u7528 Reality\uff0c\u9700\u586b\u5199 SNI\u3002<br \/>* <strong>\u8def\u5f84 (Path)<\/strong>\uff1aWebSocket \u7684\u63e1\u624b\u8def\u5f84\uff0c\u9700\u4e0e\u670d\u52a1\u7aef `wsSettings.path` \u4e00\u81f4\u3002<\/p>\n<h3>2. \u8ba2\u9605\u94fe\u63a5\u7684\u4f7f\u7528<\/h3>\n<p>\u5927\u591a\u6570\u73b0\u4ee3\u5ba2\u6237\u7aef\u652f\u6301\u901a\u8fc7<a href=\"https:\/\/www.suannai.link\/blog\/v2ray%e8%ae%a2%e9%98%85%e9%93%be%e6%8e%a5%e4%bd%bf%e7%94%a8%e6%96%b9%e6%b3%95%ef%bc%9a%e4%bb%8e%e9%85%8d%e7%bd%ae%e5%88%b0%e9%aa%8c%e8%af%81%e7%9a%84%e5%ae%8c%e6%95%b4%e6%b5%81%e7%a8%8b\/\" target=\"_blank\" rel=\"noopener\">\u8ba2\u9605\u94fe\u63a5<\/a>\uff08Subscription URL\uff09\u81ea\u52a8\u66f4\u65b0\u914d\u7f6e\u3002\u8ba2\u9605\u94fe\u63a5\u901a\u5e38\u662f\u4e00\u4e2a Base64 \u7f16\u7801\u7684 URI \u5b57\u7b26\u4e32\uff0c\u683c\u5f0f\u5982\u4e0b\uff1a<\/p>\n<p>`vless:\/\/uuid@address:port?encryption=none&#038;security=tls&#038;type=ws&#038;host=example.com&#038;path=%2Fray&#038;sni=example.com#remark`<\/p>\n<p>\u5ba2\u6237\u7aef\u89e3\u6790\u8be5\u94fe\u63a5\u540e\uff0c\u4f1a\u81ea\u52a8\u586b\u5145\u4e0a\u8ff0\u6240\u6709\u53c2\u6570\u3002\u7528\u6237\u53ea\u9700\u786e\u4fdd\u8ba2\u9605\u94fe\u63a5\u6709\u6548\uff0c\u5e76\u5728\u5ba2\u6237\u7aef\u4e2d\u5bfc\u5165\u5373\u53ef\u3002<\/p>\n<h3>3. \u5ba2\u6237\u7aef\u8bbe\u7f6e\u4f18\u5316<\/h3>\n<p>* <strong>DNS \u8bbe\u7f6e<\/strong>\uff1a\u5728\u5ba2\u6237\u7aef\u4e2d\u914d\u7f6e DNS \u53ef\u4ee5\u52a0\u901f\u57df\u540d\u89e3\u6790\u5e76\u907f\u514d DNS \u6c61\u67d3\u3002\u5efa\u8bae\u5c06 DNS \u8bbe\u7f6e\u4e3a `1.1.1.1`\u3001`8.8.8.8` \u6216\u672c\u5730\u8fd0\u8425\u5546 DNS\uff0c\u5e76\u5728\u5ba2\u6237\u7aef\u4e2d\u542f\u7528\u201cFake DNS\u201d\u6216\u201cDNS \u5206\u6d41\u201d\u529f\u80fd\u3002<br \/>* <strong>\u8def\u7531\u89c4\u5219<\/strong>\uff1a\u5408\u7406\u7684\u8def\u7531\u89c4\u5219\u53ef\u4ee5\u51cf\u5c11\u4e0d\u5fc5\u8981\u7684\u6d41\u91cf\u8f6c\u53d1\u3002\u4f8b\u5982\uff0c\u5c06\u56fd\u5185 IP \u548c\u57df\u540d\u8bbe\u7f6e\u4e3a\u76f4\u8fde\uff08Direct\uff09\uff0c\u5c06\u6d77\u5916 IP \u548c\u57df\u540d\u8bbe\u7f6e\u4e3a\u4ee3\u7406\uff08Proxy\uff09\u3002<br \/>* <strong>MTU \u8bbe\u7f6e<\/strong>\uff1a\u82e5\u4f7f\u7528 WebSocket \u4f20\u8f93\uff0c\u9002\u5f53\u8c03\u6574 MTU \u503c\u53ef\u4ee5\u51cf\u5c11\u5206\u7247\uff0c\u63d0\u5347\u6027\u80fd\u3002\u901a\u5e38\u5efa\u8bae\u8bbe\u7f6e\u4e3a 1400 \u6216 1460\u3002<\/p>\n<h2>\u5e38\u89c1\u8fde\u63a5\u6545\u969c\u6392\u67e5<\/h2>\n<p>\u914d\u7f6e\u5b8c\u6210\u540e\uff0c\u82e5\u65e0\u6cd5\u8fde\u63a5\u6216\u901f\u5ea6\u7f13\u6162\uff0c\u901a\u5e38\u7531\u4ee5\u4e0b\u51e0\u4e2a\u539f\u56e0\u5bfc\u81f4\u3002\u6392\u67e5\u65f6\u5e94\u9075\u5faa\u201c\u7531\u7b80\u5230\u7e41\u201d\u7684\u539f\u5219\u3002<\/p>\n<h3>1. \u8fde\u63a5\u5931\u8d25\uff1a\u63e1\u624b\u9519\u8bef\u6216\u8d85\u65f6<\/h3>\n<p>* <strong>UUID \u4e0d\u5339\u914d<\/strong>\uff1a\u68c0\u67e5\u5ba2\u6237\u7aef\u914d\u7f6e\u7684 UUID \u662f\u5426\u4e0e\u670d\u52a1\u7aef\u5b8c\u5168\u4e00\u81f4\uff0c\u5305\u62ec\u5927\u5c0f\u5199\u548c\u7279\u6b8a\u5b57\u7b26\u3002<br \/>* <strong>\u7aef\u53e3\u6216\u5730\u5740\u9519\u8bef<\/strong>\uff1a\u786e\u8ba4\u5ba2\u6237\u7aef\u586b\u5199\u7684 IP\/\u57df\u540d\u548c\u7aef\u53e3\u4e0e\u670d\u52a1\u7aef\u76d1\u542c\u7684\u4e00\u81f4\u3002<br \/>* <strong>\u9632\u706b\u5899\u62e6\u622a<\/strong>\uff1a\u68c0\u67e5\u670d\u52a1\u5668\u9632\u706b\u5899\u548c\u5b89\u5168\u7ec4\u662f\u5426\u653e\u884c\u4e86\u5bf9\u5e94\u7aef\u53e3\u3002\u82e5\u4f7f\u7528 CDN\uff0c\u9700\u786e\u4fdd CDN \u56de\u6e90 IP \u5728\u767d\u540d\u5355\u4e2d\u3002<br \/>* <strong>TLS \u8bc1\u4e66\u95ee\u9898<\/strong>\uff1a\u82e5\u4f7f\u7528 TLS\uff0c\u786e\u4fdd\u8bc1\u4e66\u6709\u6548\u4e14\u57df\u540d\u89e3\u6790\u6b63\u786e\u3002\u82e5\u4f7f\u7528 Reality\uff0c\u786e\u4fdd SNI \u548c\u516c\u94a5\u914d\u7f6e\u6b63\u786e\u3002<\/p>\n<h3>2. \u901f\u5ea6\u7f13\u6162\uff1a\u9ad8\u5ef6\u8fdf\u6216\u4f4e\u541e\u5410<\/h3>\n<p>* <strong>\u4f20\u8f93\u65b9\u5f0f\u9009\u62e9\u4e0d\u5f53<\/strong>\uff1aWebSocket \u5728\u79fb\u52a8\u7f51\u7edc\u4e0b\u8868\u73b0\u8f83\u597d\uff0c\u4f46\u5728\u9ad8\u5e26\u5bbd\u573a\u666f\u4e0b\u53ef\u80fd\u4e0d\u5982 gRPC \u6216 TCP\u3002\u5c1d\u8bd5\u66f4\u6362\u4f20\u8f93\u65b9\u5f0f\u6d4b\u8bd5\u3002<br \/>* <strong>CDN \u914d\u7f6e\u9519\u8bef<\/strong>\uff1a\u82e5\u4f7f\u7528 CDN \u8fdb\u884c\u4f2a\u88c5\uff0c\u786e\u4fdd CDN \u8282\u70b9\u652f\u6301 WebSocket \u4e14\u914d\u7f6e\u4e86\u6b63\u786e\u7684\u56de\u6e90\u89c4\u5219\u3002\u9519\u8bef\u7684 CDN \u914d\u7f6e\u4f1a\u5bfc\u81f4\u5927\u91cf\u4e22\u5305\u3002<br \/>* <strong>\u670d\u52a1\u7aef\u8d44\u6e90\u74f6\u9888<\/strong>\uff1a\u68c0\u67e5\u670d\u52a1\u5668\u7684 CPU\u3001\u5185\u5b58\u548c\u7f51\u7edc\u5e26\u5bbd\u662f\u5426\u6ee1\u8f7d\u3002\u82e5\u4f7f\u7528\u52a0\u5bc6\u7b97\u6cd5\u5982 `aes-128-gcm`\uff0c\u53ef\u5c1d\u8bd5\u66f4\u6362\u4e3a `none`\uff08\u82e5\u534f\u8bae\u652f\u6301\uff09\u4ee5\u964d\u4f4e CPU \u5f00\u9500\u3002<br \/>* <strong>\u672c\u5730\u7f51\u7edc\u73af\u5883<\/strong>\uff1a\u67d0\u4e9b\u7f51\u7edc\u73af\u5883\u4e0b\uff0c\u7279\u5b9a\u534f\u8bae\u53ef\u80fd\u88ab\u5e72\u6270\u3002\u5c1d\u8bd5\u5207\u6362\u7f51\u7edc\uff08\u5982\u4ece WiFi \u5207\u6362\u5230\u79fb\u52a8\u6570\u636e\uff09\u6216\u4f7f\u7528\u4e0d\u540c\u7684\u4f20\u8f93\u534f\u8bae\u3002<\/p>\n<h3>3. \u65ad\u6d41\u6216\u9891\u7e41\u91cd\u8fde<\/h3>\n<p>* <strong>Keep-Alive \u8bbe\u7f6e<\/strong>\uff1a\u68c0\u67e5\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u7684 Keep-Alive \u8bbe\u7f6e\u662f\u5426\u4e00\u81f4\u3002\u67d0\u4e9b CDN \u4f1a\u65ad\u5f00\u957f\u8fde\u63a5\uff0c\u9700\u8c03\u6574 CDN \u7684\u8d85\u65f6\u65f6\u95f4\u3002<br \/>* <strong>MTU \u4e0d\u5339\u914d<\/strong>\uff1a\u82e5 MTU \u8bbe\u7f6e\u8fc7\u5927\uff0c\u4f1a\u5bfc\u81f4\u6570\u636e\u5305\u5206\u7247\uff0c\u5f15\u53d1\u65ad\u6d41\u3002\u5c1d\u8bd5\u964d\u4f4e MTU \u503c\u3002<br \/>* <strong>\u534f\u8bae\u7248\u672c\u4e0d\u517c\u5bb9<\/strong>\uff1a\u786e\u4fdd\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u7aef\u4f7f\u7528\u7684 Xray \u6838\u5fc3\u7248\u672c\u517c\u5bb9\u3002\u5efa\u8bae\u4f7f\u7528\u8f83\u65b0\u7684\u7a33\u5b9a\u7248\u672c\u3002<\/p>\n<h2>\u6027\u80fd\u4f18\u5316\u4e0e\u5b89\u5168\u6ce8\u610f\u4e8b\u9879<\/h2>\n<p>\u4e3a\u4e86\u83b7\u5f97\u66f4\u4f73\u7684\u4f7f\u7528\u4f53\u9a8c\uff0c\u7528\u6237\u53ef\u4ee5\u5728\u914d\u7f6e\u5c42\u9762\u8fdb\u884c\u4e00\u4e9b\u4f18\u5316\uff0c\u540c\u65f6\u9700\u6ce8\u610f\u5b89\u5168\u98ce\u9669\u3002<\/p>\n<h3>1. \u6027\u80fd\u4f18\u5316\u7b56\u7565<\/h3>\n<p>* <strong>\u4f7f\u7528 Reality \u534f\u8bae<\/strong>\uff1a\u76f8\u6bd4\u4f20\u7edf TLS\uff0cReality \u534f\u8bae\u66f4\u96be\u88ab\u68c0\u6d4b\uff0c\u4e14\u63e1\u624b\u901f\u5ea6\u66f4\u5feb\u3002\u9002\u5408\u5bf9\u6297\u5f3a\u5c01\u9501\u7684\u7f51\u7edc\u73af\u5883\u3002<br \/>* <strong>\u542f\u7528 gRPC \u4f20\u8f93<\/strong>\uff1agRPC \u57fa\u4e8e HTTP\/2\uff0c\u652f\u6301\u591a\u8def\u590d\u7528\uff0c\u5728\u9ad8\u5ef6\u8fdf\u7f51\u7edc\u4e0b\u8868\u73b0\u4f18\u4e8e WebSocket\u3002<br \/>* <strong>\u4f18\u5316 DNS<\/strong>\uff1a\u4f7f\u7528\u9ad8\u6027\u80fd\u7684 DNS \u670d\u52a1\u5668\uff0c\u5e76\u542f\u7528\u5ba2\u6237\u7aef\u7684 DNS \u7f13\u5b58\u529f\u80fd\uff0c\u51cf\u5c11\u89e3\u6790\u5ef6\u8fdf\u3002<br \/>* <strong>\u8def\u7531\u5206\u6d41<\/strong>\uff1a\u5408\u7406\u914d\u7f6e\u8def\u7531\u89c4\u5219\uff0c\u907f\u514d\u56fd\u5185\u6d41\u91cf\u7ed5\u9053\uff0c\u51cf\u5c11\u5ef6\u8fdf\u3002<\/p>\n<h3>2. \u5b89\u5168\u4e0e\u9690\u79c1<\/h3>\n<p>* <strong>\u8bc1\u4e66\u7ba1\u7406<\/strong>\uff1a\u82e5\u4f7f\u7528 TLS\uff0c\u786e\u4fdd\u8bc1\u4e66\u6765\u81ea\u53ef\u4fe1\u7684 CA \u673a\u6784\uff0c\u5e76\u5b9a\u671f\u66f4\u65b0\u3002\u907f\u514d\u4f7f\u7528\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u9664\u975e\u5728\u53d7\u63a7\u73af\u5883\u4e2d\u3002<br \/>* <strong>\u5bc6\u94a5\u4fdd\u62a4<\/strong>\uff1aUUID \u548c\u79c1\u94a5\u662f\u8fde\u63a5\u7684\u5173\u952e\u51ed\u8bc1\uff0c\u5207\u52ff\u6cc4\u9732\u3002\u82e5\u6000\u7591\u51ed\u8bc1\u6cc4\u9732\uff0c\u5e94\u7acb\u5373\u66f4\u6362 UUID \u5e76\u91cd\u65b0\u751f\u6210\u5bc6\u94a5\u3002<br \/>* <strong>\u8f6f\u4ef6\u6765\u6e90<\/strong>\uff1a\u4ec5\u4ece\u5b98\u65b9\u6216\u53ef\u4fe1\u6e20\u9053\u4e0b\u8f7d Xray \u6838\u5fc3\u548c\u5ba2\u6237\u7aef\u8f6f\u4ef6\uff0c\u907f\u514d\u4f7f\u7528\u4fee\u6539\u7248\u6216\u7834\u89e3\u7248\uff0c\u4ee5\u9632\u690d\u5165\u540e\u95e8\u3002<br \/>* <strong>\u65e5\u5fd7\u8bb0\u5f55<\/strong>\uff1a\u867d\u7136 Xray \u672c\u8eab\u4e0d\u8bb0\u5f55\u7528\u6237\u884c\u4e3a\u65e5\u5fd7\uff0c\u4f46\u670d\u52a1\u7aef\u8fd0\u8425\u5546\u53ef\u80fd\u8bb0\u5f55\u8fde\u63a5\u65e5\u5fd7\u3002\u9009\u62e9\u4fe1\u8a89\u826f\u597d\u7684\u670d\u52a1\u63d0\u4f9b\u5546\uff0c\u5e76\u4e86\u89e3\u5176\u9690\u79c1\u653f\u7b56\u3002<\/p>\n<h2>\u603b\u7ed3<\/h2>\n<p>Xray \u4f5c\u4e3a\u4e00\u4e2a\u5f3a\u5927\u4e14\u7075\u6d3b\u7684\u4ee3\u7406\u5de5\u5177\uff0c\u5176\u914d\u7f6e\u8fc7\u7a0b\u6d89\u53ca\u670d\u52a1\u7aef\u90e8\u7f72\u3001\u534f\u8bae\u9009\u62e9\u3001\u5ba2\u6237\u7aef\u5bf9\u63a5\u53ca\u6027\u80fd\u4f18\u5316\u7b49\u591a\u4e2a\u73af\u8282\u3002\u7528\u6237\u9700\u6839\u636e\u81ea\u8eab\u7f51\u7edc\u73af\u5883\u548c\u6280\u672f\u80fd\u529b\uff0c\u9009\u62e9\u5408\u9002\u7684\u534f\u8bae\u548c\u4f20\u8f93\u65b9\u5f0f\u3002\u5728\u914d\u7f6e\u8fc7\u7a0b\u4e2d\uff0c\u52a1\u5fc5\u4ed4\u7ec6\u6838\u5bf9\u6bcf\u4e00\u9879\u53c2\u6570\uff0c\u786e\u4fdd\u670d\u52a1\u7aef\u4e0e\u5ba2\u6237\u7aef\u7684\u4e00\u81f4\u6027\u3002\u901a\u8fc7\u5408\u7406\u7684\u4f18\u5316\u548c\u6392\u67e5\uff0c\u53ef\u4ee5\u663e\u8457\u63d0\u5347\u8fde\u63a5\u7684\u7a33\u5b9a\u6027\u548c\u901f\u5ea6\u3002\u540c\u65f6\uff0c\u59cb\u7ec8\u5173\u6ce8\u7f51\u7edc\u5b89\u5168\uff0c\u4fdd\u62a4\u4e2a\u4eba\u51ed\u8bc1\uff0c\u5408\u7406\u4f7f\u7528\u6b64\u7c7b\u5de5\u5177\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Xray \u662f V2Ray \u7684\u4e00\u4e2a\u9ad8\u6027\u80fd\u5206\u652f\u7248\u672c\uff0c\u5176\u6838\u5fc3\u4f18\u52bf\u5728\u4e8e\u5bf9\u591a\u79cd\u534f\u8bae\u7684\u5b8c\u6574\u652f\u6301\u4ee5\u53ca\u66f4\u9ad8\u6548\u7684\u4f20\u8f93\u63a7\u5236\u3002\u5bf9\u4e8e\u5e0c [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1407","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/posts\/1407","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/comments?post=1407"}],"version-history":[{"count":0,"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/posts\/1407\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/media?parent=1407"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/categories?post=1407"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.suannai.link\/blog\/wp-json\/wp\/v2\/tags?post=1407"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}