Replies: 2 comments 4 replies
-
|
这样做是不是从外面回来的流量也被REDIRECT到xray里面了,我看一些工具都是过滤局域网ip段,你可以试试用一些现成的客户端,他们有集成透明代理功能 |
Beta Was this translation helpful? Give feedback.
-
|
关于netfilter的iptables和nftables的知识,我也有点混乱.
关于你说的外面回来的流量会不会被REDIRECT到xray里面, 不清楚. 有可能. 我的需求,建立连接后, 数据包传输是双向的, 如下面所示: # 电脑B
进站port10666 <=>xray<=>系统选的出站端口 |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
如果我没理解错的话，你这样的写法外面回来的流量应该都是被REDIRECT到xray里面里面了，因为外面回来的流量也会经过PREROUTING |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
感谢回复. 我暂时使用这个 https://github.com/dnomd343/XProxy 实现了我的需求. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
具体需求：,就是2台电脑A和B. 我想让B代理A所有流量,然后B能实现智能代理,国内走够内,国外走国外. 现在遇到的问题是：
1 流量到B就卡住了,貌似遇到了回环问题.
2 B 分流不够丝滑和智能（这一点，我觉得，做得比较合我心意的是clash的按照域名或者域名中的关键词就实现了分流）
为了实现上面的的需求，我做了以下尝试：
环境：
电脑A：windows， ip： 192.168.0.66；
电脑B：linux， ip： 192.168.0.67;
电脑C(服务器):vps ip: yourvpsip
操作:
客户端电脑Bjson
{ "log": { "error": "/var/log/xray/error.log", "access": "/var/log/xray/access.log", "loglevel": "debug" }, "inbounds": [ { "tag": "socks", "port": 10777, "listen": "127.0.0.1", "protocol": "socks", "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": false }, "settings": { "auth": "noauth", "udp": true, "allowTransparent": false } }, { "tag": "http", "port": 10666, "listen": "192.168.0.66", "protocol": "http", "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": false }, "settings": { "auth": "noauth", "udp": true, "allowTransparent": false } } ], "outbounds": [ { "tag": "proxy", "protocol": "vless", "settings": { "vnext": [ { "address": "yourdomian", "port": 443, "users": [ { "id": "yourid", "alterId": 0, "email": "[email protected]", "security": "auto", "encryption": "none", "flow": "xtls-rprx-vision" } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "serverName": "music.google.com", "fingerprint": "chrome", "show": false, "publicKey": "yourpublicKey", "shortId": "", "spiderX": "/" } }, "mux": { "enabled": false, "concurrency": -1 } }, { "tag": "direct", "protocol": "freedom", "settings": {} }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ], "dns": { "servers": [ "1.1.1.1", "8.8.8.8" ] }, "routing": { "domainStrategy": "AsIs", "rules": [ { "type": "field", "inboundTag": [ "api" ], "outboundTag": "api" }, { "type": "field", "port": "0-65535", "outboundTag": "proxy" } ] } }服务端电脑Cjson
{ "log": { "loglevel": "warning", "error": "/var/log/xray/error.log", "access": "/var/log/xray/access.log" }, "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "stats": {}, "policy": { "levels": { "0": { "handshake": 2, "connIdle": 128, "statsUserUplink": true, "statsUserDownlink": true } }, "system": { "statsInboundUplink": true, "statsInboundDownlink": true, "statsOutboundUplink": true, "statsOutboundDownlink": true } }, "dns": { "servers": [ "https+local://cloudflare-dns.com/dns-query", "1.1.1.1", "1.0.0.1", "8.8.8.8", "8.8.4.4", "localhost" ] }, "routing": { "domainStrategy": "IPIfNonMatch", "rules": [ { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "type": "field", "protocol": [ "bittorrent" ], "outboundTag": "block" }, { "type": "field", "ip": [ "geoip:private" ], "outboundTag": "block" }, { "type": "field", "ip": [ "geoip:cn" ], "outboundTag": "block" }, { "type": "field", "domain": [ "geosite:category-ads-all" ], "outboundTag": "block" } ] }, "inbounds": [ { "listen": "127.0.0.1", "port": 65521, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "tag": "api", "sniffing": null }, { "tag": "xray-script-xtls-reality", "listen": "0.0.0.0", "port": 443, "protocol": "vless", "settings": { "clients": [ { "email": "[email protected]", "id": "youid", "flow": "xtls-rprx-vision", "level": 0 } ], "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "dest": "music.google.com:443", "xver": 0, "serverNames": [ "music.google.com" ], "privateKey": "yourprivateKey", "shortIds": [ "", ... ] } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic" ] } } ], "outbounds": [ { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole" } ] }最终实验结果,:
Destination和Source物理idnc -l 192.168.0.77 10666有一些乱码输出. 此外ssh, 80端口应用都可以正常使用.恳请网络大神能指点一下如何解决上面的问题
Beta Was this translation helpful? Give feedback.
All reactions