v2ray shadowsocks config json v2ray shadowsocks config json

i hv always thought we cant ask question not relate to development in here. However, because V2Ray supports many functions, the configuration is inevitably more complicated. May be a relative path . I found a detailed instruction on setting-up vray-plugins and nginx server for Chinese-speaking rookies. Organization Name (eg, company) [Internet Widgits Pty Ltd]: Organizational Unit Name (eg, section) []: openssl x509 -req -sha256 -days 365 -in ca.csr -signkey ca.key -out ca.crt, openssl ecparam -out example.com.key -name secp384r1 -genkey, openssl req -new -sha256 -key example.com.key -out example.com.csr, openssl x509 -req -in example.com.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out example.com.crt -days 365 -sha256. Learn more about bidirectional Unicode characters . it is weird. I've setup a Google Cloud instance, firewall has port 3128 open. When AEAD encryption is used, ota has no effect. Run the install script by issuing the command: Enter your choise of password, port, and encryption method. The server in this post runs Debian 11, and the client runs Windows 11. It's also worth mentioning that some Wi-Fi networks have firewalls that stop connections to other ports except for normal ports such as 443, 80, 22, etc. You client should specify the nginx port 80 instead of 8348. It seems the SQLite file is password protected, how can I find out the password so I can modify this file by hand and fix the arguments? (I searched about JSON on Google The article is rather long-winded, I guess its for programmers, so we dont need to get confused. Here's some sample commands for issuing a certificate using CloudFlare. Case: Fractal Design Define 7 XL Power Supply: Corsair RM750X 80+ Gold Motherboard: Supermicro X11SPI-TF CPU: Intel Xeon Silver 4210T (10c/20t) Cascade Lake 2.3/3.2 GHz 95 W RAM: 3x 64 GB + 1x 32 GB DDR4 2400 ECC LRDIMM Extra SAS: Passthrough HPE H220 (LSI 9205-8i) - FW P20.00.07.00 Boot Pool: 2x Intel DC S3500 480 GB SSD - Mirrored Storage pool: 4x 6TB HGST Ultrastar 7K6000 - Striped Mirrors ss-server -c config.json -p 443 --plugin v2ray-plugin --plugin-opts "server;mode=quic;host=mydomain.me" Extract the contents of the archive. Yet another SIP003 plugin for shadowsocks, based on v2ray. openssl dhparam -out /etc/nginx/dhparam 2048; ssl_certificate /etc/openssl/example.com.crt; ssl_certificate_key /etc/openssl/example.com.key; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; wget https://github.com/shadowsocks/v2ray-plugin/releases/download/v1.3.1/v2ray-plugin-linux-amd64-v1.3.1.tar.gz, tar -xf v2ray-plugin-linux-amd64-v1.3.1.tar.gz, cp v2ray-plugin_linux_amd64 /usr/bin/v2ray-plugin, wget https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks-libev-debian.sh, #############################################################, # Install Shadowsocks-libev server for Debian or Ubuntu #, # Intro: https://teddysun.com/358.html #, # Author: Teddysun #, # Github: https://github.com/shadowsocks/shadowsocks-libev #, [Info] Latest version: shadowsocks-libev-3.3.5. p/s - bcoz of the pandemic, not sure when could travel to china, so hopefully could setup eveyrthing and make sure its running when we can travel. Well occasionally send you account related emails. After trial and error for nearly 2 hours, hmm.Eventually I got 404 Nothing in Error.log Very frustrating starting shadowsocks command. Powered by Discourse, best viewed with JavaScript enabled. active v2ray-plugin plugin, and set plugin opts as host=n3ro.me;path=/ss, set port as 80, if with tls, then set plugin opts as tls;host=n3ro.me;path=/ss and port as 443. remove = from location = /ss m like location /ss, i dont belive you can pass nginx -t with your config; Stories about how and why companies use Go, How Go can help keep you secure by default, Tips for writing clear, performant, and idiomatic Go code, A complete introduction to building software with Go, Reference documentation for Go's standard library, Learn and network with Go developers from around the world. What android client do you use? Will you consider this? apt update apt install -y --no-install-recommends gettext build-essential autoconf libtool libpcre3-dev asciidoc xmlto libev-dev . In this regard its better to use 127.0.0.1 in the nginx conf file. You can find commands for issuing certificates for other DNS providers at acme.sh. Your Password : socKsecreT2021%d, Welcome to visit:https://teddysun.com/358.html, scp root@123.45.67.89:/etc/openssl/ca.crt Downloads/ca.crt, https://github.com/shadowsocks/shadowsocks-windows/releases, https://github.com/shadowsocks/v2ray-plugin/releases, https://www.mozilla.org/en-US/firefox/new, X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray). Before this section is finished, I would like to talk more about some details about the configuration. You should see the IP address and location of your server, not your client. so gfw will only see that im going to the cdn, but wont know where is my real destination. Create a directory to hold your certificates: Change into the directory that will hold your certificates: Generate a private key for your CA certificate: Enter anything you like for Country Name, State or Province Name, Locality Name, Organization Name, and Organizational Unit Name. It's http://localhost:8388; NOT http://localhost:8388/; . SS works as with IPv4, so with IPv6. An object whose keys and values have fixed types. For example: Leave the extra attributes (challenge password and company name) blank. Or, perhaps Nginx couldn't handle the UDP packets. By deploying the Shadowsocks server in 443 port, your Shadowsocks data stream looks more like a data stream for web browsing via HTTPS. Here we introduce the JSON-based configuration. all is working perfectly. Required. This tutorial illustrates steps for setting up a Shadowsocks server on Ubuntu system. Required. A configuration file looks like this. Are you sure you want to create this branch? Shadowsocks. The available AEAD algorithms that Shadowsocks-libev currently supports includes the following. For Password put your chosen password, e.g. Right-click on that, and use 7-Zip again to extract from this the application v2ray-plugin_windows_amd64.exe. however, it still tells that "no internet connection: unable to resolve host www.google.com No address associated with hostname ", I guess that there must be something run with nginx-v2rayplugin forwarding chain. Password in Shadowsocks protocol. V2Ray supports many protocols, including Socks, HTTP, Shadowsocks, VMess, and more. The nginx access log above shows you're getting http 499 responses. The client-server must have an incoming and outgoing configuration. Download shadowsocks-rust for Linux 64-bit from GitHub. thanks alot. I decide to make a brief summary for rookies several days later. Right-click on the download, and use 7-Zip to extract v2ray-plugin-windows-amd64-v1.3.1.tar. From the Firefox hamburger menu, choose Settings. First, you need to make sure you have go-lang on your server. In the window Add or Remove Snap-ins, select Certificates. Using either Shadowrocket on iOS or Shadowsocks-NG on MacOS, I can't connect. You could definitely start a shadowsocks server via a single command by attaching all parameters to it, but it is also good to create a configuration file which helps you no longer need to enter the long parameter list manually. I have tested nginx tls, it works. Our example is aes-256-gcm. Sequence of characters, surrounded by quotation mark. to your account. but when I only add tls support for nginx and modify client config accordingly, it did not work. it actually can not be visited here since DNS pollution. It pretends your data stream as you are accessing a normal website now. However, using obfuscation will reduce the speed of your shadowsocks. If you have configured Shadowsocks-libev before, compare with it, and you will able to understand the example in this section. However, UDP doesn't seem to work. By clicking Sign up for GitHub, you agree to our terms of service and Our example is socKsecreT2021%d. You can then type service v2ray start to start v2ray. privacy statement. You signed in with another tab or window. Our example is 8008. nohup ss-server -c /path/to/config.json >> /path/to/log.txt &, Installing Shadowsocks and Get it Running. See command line args for advanced usages. Work fast with our official CLI. By following this post, you can create an SS + V2Ray plugin server without having to buy a domain name. Last youre able to use a very cheap vps with only ipv6 addresses. Unfortunately when I tried to run ss with v2ray plugin lets say we use the setup here correctly and add a cdn, what IP address will 'whatismyip' show? the vps or cdn? Thus, it has been suggested that AES based algorithms shall be used for desktop clients, while chacha based algorithms shall be used for mobile clients. You can confirm the service is running by netstat -ltp, and check if the port is actually in LISTEN state and served by corresponding v2ray plugin. Once you've finished editing the config file (suppose the file name is config.json), you can start the shadowsocks server by executing the following command. v2ray-plugin will look for TLS certificates signed by acme.sh by default. Whether or not to use OTA. For example, right now the most recent release is Shadowsocks-4.4.0.185.zip. V2Ray. Change the config files to suit your preferences, using the configuration section of the official wiki for guidance and read our protocol explanation below. If you would like to shut down the server, use ps -ef | grep ss-server to get the pid of your shadowsocks server, and then kill the process using kill. I think you're almost there. Just configure V2Ray and just look at it here. Before V2Ray runs, it automatically converts JSON config into protobuf. Since V2ray is taking over the http traffic, the port specified in ss-libev is actually served by v2ray, and then the decoded traffic is passed to ss-libev through a insignificant port number. You'd better test your setup with a PC client so that to tell if the problem is at the client side. Open the program installation manual. I have built ss with v2ray plugin through nginx without tls, it is working fine. Instead of using cert to pass the certificate file, certRaw could be used to pass in PEM format certificate, that is the content between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- without the line breaks. Download the v2ray-plugin for Linux 64-bit from GitHub. Used for user identification. Here's some sample commands for issuing a certificate using CloudFlare. ss-client -> gfw -> cdn -> vps/ss-server -> website, then it travels back(in reverse) to ss-client. If true and the incoming connection doesn't enable OTA, V2Ray will reject this connection. HTTP Outcoming If you run the server with -u and open up the UDP port it will work, but it will be just regular shadowsocks over UDP. Time to embrace a bigger world! They will be referenced in the rest of docs. v2ray (net/v2ray) Updated: 1 week, 1 day ago Add to my watchlist 4 A proxy server for bypassing network restrictions. "password":"yourshadowsocksserverpassword", "plugin_opts":"path=/yourpath;host=your.host.name;tls". Whether or not to force OTA. Client may choose to turn on or off. is there way for us to check if the setup/obfuscation working fine? Otherwise, itd be great if we could just have an option to pass plugin options as a string (for v2ray plugin) or as a JSON file (for cloak plugin). So could anyone tell me how I came to this problem? chacha20-ietf-poly1305. after reading that, it seems hving a webserver is a good idea for 'camouflage'. Do you use "official" shadowsocks and v2ray plugin client? Download the most recent release of Shadowsocks for Windows. Finally, it doesn't work for my phone with v2ray plugin. 2019-01-19 Update the information of v2ray-plugin of Shadowsocks. If nothing happens, download GitHub Desktop and try again. could anybody help me to investigating the issue ? ss-local -c config.json -p 443 --plugin v2ray-plugin --plugin-opts " mode=quic;host=mydomain.me " Issue a cert for TLS and QUIC v2ray-plugin will look for TLS certificates signed by acme.sh by default. Therefore we directly give the example configuration. i did try installing before from the reddit post, but somehow stuck at getting the certificate - authentication error, so after many tries, i decide to try another method. By the way. VMess My phone is rooted so I have no issue with pushing the file back to the phone. V2Ray Protocols Explained. Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Sometimes its faster than directly connecting to your vps (depending on the vps location). The configuration is similar to VMess. I checked the profile.db-wal with notepad and incorrect arguments are passed to the plugin, thats why it never connects. solution for Go. Shadowsocks protocol, for both inbound and outbound connections. You signed in with another tab or window. chacha20-poly1305 a.k.a. Instead of using cert to pass the certificate file, certRaw could be used to pass in PEM format certificate, that is the content between -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- without the line breaks. i do have apache installed but i change apache 443 to 8443 and use 443 for ss and client connection. The client-server must have an incoming and outgoing configuration. Also set Firefox to proxy DNS queries over the SOCKS5 server. ps: why I start it using this command, it is because if I use systemctl start shadowsocks-libev, it cannot start v2ray-plugin, but this way works. Unlike Shadowsocks, V2ray supports numerous protocols, both inbound and outbound. sign in In the end I suggest that you enable SSL. The configuration file of V2Ray is in JSON format, and the configuration of Shadowsocks is also in JSON format. shadowsocks-libev.ss-server -c config.json --plugin v2ray-plugin_linux_amd64. what is the UDP Fallback use for in SS Client on Android? It is a port of shadowsocks created by @clowwindy maintained by @madeye and @linusyang.. Based on alpine with latest version shadowsocks-libev and v2ray-plugin, xray-plugin.. Docker images are built for quick deployment in various computing cloud providers. Because of the protocol bug, OTA (one-time authentication) of Shadowsocks has been deprecated and switched to AEAD (authenticated encryption with associated data). Redistributable licenses place minimal restrictions on how software can be used, v2ray-plugin will look for TLS certificates signed by acme.sh by default. Warning: HTTP only provides a moderate (but lightweight) traffic obfuscation. There is no documentation for this package. It does work. The following commands will help you to get v2ray ready on your server. Name: shadowsocks. This is because sometimes localhost are resolved to ipv6 address. Copy the binary into the same folder as the extracted shadowsocks binaries. I use namesilo and search for domains with cheapest renewal prices. Before V2Ray runs, it automatically converts JSON config into protobuf. The nginx service seems to be working well, since when trying to visit super******.mooo.com, it will be forwarded to www.bing.com. Default to "tcp". Note that you would need extra configuration on your client shadowsocks application so that obfuscation works. By the way, until now I don't know where to register a domain name at an acceptable cost(not a subdomain name) to utilize CLOUDFLARE service. 4. tls;host=example.com;path=/wss;loglevel=none. Your can still access your vps even if it is blocked by gfw. Check the box to proxy DNS requests when using SOCKS v5. The difference is that we use Shadowsocks protocol and its parameters. Build. Yet another SIP003 plugin for shadowsocks, based on v2ray, https://circleci.com/gh/shadowsocks/v2ray-plugin/20#artifacts, Alternatively, you can grab the latest nightly from Circle CI by logging into Circle CI or adding. Finally, the shadowsocks server can be started as the previous section mentioned. Caution "server":["[::1]", "127.0.0.1"], What'more, I found a detailed instruction on setting-up vray-plugins and nginx server for Chinese-speaking rookies. Well, what does "protect" mean here? Copy v2ray-plugin_windows_amd64.exe into the Shadowsocks folder Downloads\Shadowsocks-4.4.0.185. Expand the tree in the left pane. Shadowsocks server address. Check access.log and error.log in /var/log/nginx to see if your request is received and processed. Cautious users should refrain from using this mode. By following its README file, Shadowsocks-libev could be installed with the following two commands. UDP bypasses the plugin (by shadowsocks design) and will try to connect to plain shadowsocks. Step 1 Logging In as Root. https://blog.icpz.dev/articles/bypass-gfw/shadowsocks-with-v2ray-plugin/. Here we introduce the JSON-based configuration. To review, open the file in an editor that reveals hidden Unicode characters. A tag already exists with the provided branch name. The introduction inside is simple and clear. Hello I'm using the V2Ray plugin, I need to pass the plugin arguments like this: tls; host=example.com ;path=/wss;loglevel=none But unfortunately the plugin asks for a cert file which is incorrect, it shouldn't ask for that when in client mode, it should ask for that only in server mode. config.json-shadowsocks client from toutyrater This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. "plugin-opts" should be "plugin_opts". Install required Ubuntu packages. Install 7-Zip from https://www.7-zip.org if you do not have it on your PC already. sudo apt install shadowsocks-libev. Print the version of V2Ray only, and then exit.-test. At the moment, in the config.json I have specified the listening port "8348", but eveytime I run the line above, it displays "tcp server listening at 127.0.0.1:41415", 45321,52344, etc. A JSON object contains a list of key value pairs. Installation are you part of the cool team that develop this? One JSON file contains one and only one JSON object, beginning with "{" and ending with "}". Download shadowsocks-rust for Linux 64-bit from GitHub. But it can be visited using ss. client. Therefore, it is recommended to understand the format of JSON before the actual configuration. so here's the full text of the/etc/nginx/nginx.conf. Use Git or checkout with SVN using the web URL. v2ray-plugin through nginx with tls is not working properly. As a proxy protocol toolbox, V2Ray supports the Shadowsocks protocol. Nope https, I'm now working through https. Click the Add button. is that correct? Both ss & vray_plugin android clients are downloaded from the GooglePlay Store. Please input password for shadowsocks-libev: (Default password: teddysun.com):socKsecreT2021%d, Please enter a port for shadowsocks-libev [1-65535]. to use Codespaces. It is recommended to use AEAD ciphers (cipher could be aes-256-gcm, aes-128-gcm, chacha20-poly1305 for enabling AEAD), OTA will be invalid when enabling AEAD; The simple-obfs plugin of Shadowsocks has been deprecated and you can use the new V2Ray-based obfuscation plugin (but V2Ray's Websocket/http2 + TLS also works); You can use V2Ray's transport layer configuration (see. vray_plugin should listen both ipv4 and ipv6. Now use the following command to start v2ray serving in a background process. That being said, other configuration formats may be introduced in the furture. By entering ss-server -h in the console, all the parameters of the command ss-server are given. At the end of the install script, the parameters are redisplayed: Add lines for the plugin and plugin options, like this: Remember the comma after what used to be the last option. then, i modified the ss-android config as following. Or, perhaps Nginx couldn't handle the UDP packets. As protobuf format is less readable, V2Ray also supports configuration in JSON. For Server IP, put the IP address of your server, e.g. In this section, the obfuscation configuration using v2ray-plugin will be introduced. Boolean value, has to be either true or false, without quotation mark. but the website with tls works fine. Cautious users should refrain from using this mode. . There was a problem preparing your codespace, please try again. V2Ray has the following commandline parameters: v2ray [-version] [-test] [-config = config.json] [-format = json]-version. Alternatively, you can specify path to your certificates using option cert and key. (124** Android 4G; 222** Windows PC) is that ok? so is it ok to ask question here in future, or where else would you suggest we get help? if yes, then could we do it with Apache? v2ray/xray [-h | help] [options]-h, help -v, version start V2Ray stop V2Ray restart V2Ray status V2Ray new v2ray json update V2Ray Release update [version] V2Ray update.sh multi-v2ray . Regarding the format of JSON, you can see V2Ray Document (opens new window). As protobuf format is less readable, V2Ray also supports configuration in JSON. Have a question about this project? For values, if it's a string it needs quotes, while numbers do not need to be double quoted. But of course, you can select your favorite port from 0 to 65535, as long as they are not occupied by other services. V2Ray uses protobuf-based configuration. A domain name costs much less than your VPS. Use let's encrypt to obtain valid certificates (I use acme.sh for managing certificates). In Settings, on the General page, under Network Settings, click Settings. The easiest way to check is if the traffic is running, then everything is fine. Only TCP goes through the plugin. Avilable formats are: Path to the local config file. The implementation of Shadowsocks in V2Ray is compatible with Shadowsocks-libev, Go-shadowsocks2 and other clients based on the Shadowsocks protocol. In addition, I think I need to add a few points to the introduction of the document: All punctuation marks in JSON file must use half-width symbols (English symbols). the problem here is v2ray-plugin behind nginx with tls does not work. If you care about the speed a lot while feeling it's okay to change your server's IP some times when they are unluckily blocked, you don't need obfuscation. Sign the certificate signing request, creating your certificate: Generate a private key for your server certificate: Make the server private key readable by Nginx: Delete the default contents, and enter contents as below: Change /abcdefgh to a secret path of your choice. No. The resolution of the name localhost to one or more IP addresses is normally configured by the following lines in the operating system's hosts file: config.json could be as following: Yet another SIP003 plugin for shadowsocks, based on v2ray, https://circleci.com/gh/shadowsocks/v2ray-plugin/20#artifacts, Alternatively, you can grab the latest nightly from Circle CI by logging into Circle CI or adding. VMess V2Ray can be configured as either a Shadowsocks server or a client. thought i did something wrong when it shows my vps ip instead of the cdn's ip. Specify the SOCKS Host at IP address 127.0.0.1, Port 1080. The server received the packets but it seems shadowsocks with v2-ray plugin on the server side cannot handle the UDP packet. And this is my detailed instruction for Russian-speaking rookies: https://overclockers.ru/blog/Indigo81/show/31739/shadowsocks-cherez-cloudflare-cdn-povyshaem-bezopasnost-v-seti, hi all, just finish reading this thread and got a couple questions as im interest too to try out ss+v2ray setup-. Server may choose to enable, disable or auto. Restart Nginx with your revised configuration file: Put software v2ray-plugin into directory /usr/bin/ like this: Download the Shadowsocks-libev install script for Debian from GitHub by issuing this command in your terminal emulator: Make the script executable by issuing the command to set the execution bit: Think up a password. Copy to clipboard . Unzip Shadowsocks-4.4.0.185.zip. Alternatively, you can specify path to your certificates using option cert and key. Open Windows PowerShell (right-click on Windows Start button, then select Windows Terminal). The configuration file of V2Ray is in JSON format, and the configuration of Shadowsocks is also in JSON format. Please select stream cipher for shadowsocks-libev: Which cipher you'd select(Default: aes-256-gcm):1, Press any key to startor press Ctrl+C to cancel. A key value pair usually ends with a comma ",", but must not ends with a comma if it is the last element of the object. The configuration is similar to VMess. Shadowsocks-libev Docker Image by Teddysun. , // Whether enable OTA, default is false, we don't recommand enable this as decrepted by Shadowsocks. netstat show ss server is listening both on tcp and udp. Required. as the other forums(linux, ubuntu, etc) dont hv this topic. In Firefox, visit https://whatismyipaddress.com. This article discusses the details of why AEAD based encryption algorithms are safer than stream encryption + OTA algorithms. Think up a port number. SS+any plugin will work only with any TCP traffic. Objects are unordered, so the order of the contents enclosed by braces { } doesn't matter, for example: The above two JSONs are actually equivalent. Theme NexT works best with JavaScript enabled. Object. However, because V2Ray supports many functions, the configuration is inevitably more complicated. The type of its elements is usually the same, e.g., [string] is an array of strings. An address with port, such as "8.8.8.8:53" or "www.v2ray.com:80". That being said, other configuration formats may be introduced in the furture. Select the option Add/Remove Snap-in. Supports OTA . Can be any string. Create a config.json file like this: If you do not already have Firefox installed, install Firefox now from https://www.mozilla.org/en-US/firefox/new. JSON, or JavaScript Object Notation, in short is objects in Javascript. In an editor that doesn't support comments, they may get displayed as errors, but comments actually work fine in V2Ray. v2ray. I have nginx on port 3128 forwarding to port 10001 internally, and v2ray-plugin configured to 127.0.0.1:10001. Open a Run box ( Win + r ), type mmc, and click OK. It will be named something like v2ray-plugin-windows-amd64-v1.3.1.tar.gz. Warning: HTTP only provides a moderate (but lightweight) traffic obfuscation. It does work. Default value is false. Vice versa. Boolean types do not need to be double quoted. Modules with tagged versions give importers more predictable builds. V2Ray's Shadowsocks protocol has been followed by AEAD, but it is still compatible with OTA. V2Ray can be configured as either a Shadowsocks server or a client. For the purpose of installing plugins for obfuscation (in the following section), the Shadowsocks-libev is chosen here. u can try n3ro.me to test tls. Give it a try. Congratulations, Shadowsocks-libev server install completed! SSH into your server. I think listening on 80 at the same time won't impact anything of tls. hopefully this time it will work :). Today I'd like to try the v2ray plugin but I came to similar problems. If not, you can install it by following this instruction. If this field is not specified, V2Ray auto detects OTA settings from incoming connections. Create a VPN server with ShadowSocks+v2ray connection protocol. For Encryption, select your chosen method, e.g. Actually, it only spent me 10$ to have this vps for 2 years. Nginx access.log. Type of supported networks. Issue the command below, replacing 123.45.67.89 by your actual server IP address: Open a Run box (Win+r), type mmc, and click OK. You can find commands for issuing certificates for other DNS providers at acme.sh. Type: Inbound / Outbound. will read more and try installing another version with nginx. Pure SS will work with any TCP/UDP traffic. All strings must be enclosed in double quotes " ", as all keys strings, so keys should also be enclosed in double quotes. here is the config content. Then continue like this: Open a browser and go to https://github.com/shadowsocks/shadowsocks-windows/releases. Extract the contents of the archive. This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository. On Linux and macOS, you can use the terminal command ssh to reach your server. In your browser, download the most recent V2Ray plugin for Windows from https://github.com/shadowsocks/v2ray-plugin/releases. do we need a webserver for the ss+v2ray+tls to work? @vanyaindigo thats the best news for today as i hv read, learn and setup a ss+v2ray+tls+cdn without proxy reverse. On Windows, you can either use PowerShell or a graphical user interface (GUI) such as PuTTY or XSHELL. go build; Alternatively, you can grab the latest nightly from Circle CI by logging into Circle CI or adding #artifacts at the end of URL like such: . If you are among its target users, you would know. What about resolver? Better yet, V2Ray has built in obfuscation to hide traffic in TLS, and can run in parallel with web servers. and one last question - would using a webserver(nginx proxy_pass) more secure? gistv2ray config.json . In this way all your traffic is encrypted. Compatibility with official version: Supports both TCP and UDP connections, where UDP can be optional turned off. Configure Firefox to use a Manual proxy configuration. See Encryption methods for available values. URI of the configuration. . ss will only work with IPv4 only, IPv6 will be route(go directly) to the destination? Finally, i get where the bug is! Import CA Certificate on Client. When AEAD encryption is used, this field has no effect. Therefore, it is recommended to understand the format of JSON before the actual configuration. The implementation of Shadowsocks in V2Ray is compatible with Shadowsocks-libev, Go-shadowsocks2 and other clients based on the Shadowsocks protocol.