New Bypass GFW

[Otisist]

Hello friends. I have a blocked domain and IP :) but it is behind cloudflare. After all the tests I did, I was able to connect with the V2rayN client windows with the same domain and IP as a double fragment and with some changes. When opening websites or software, there is a delay because of the double fragment, but after connecting, it is at a high speed. It has (I did not test to find out whether it has the maximum speed or not)
I will put the config, thank you for helping to optimize and improve. (For iPhone, I don't know what software to enter this configuration)

in Client side :

{
  "policy": {
    "system": {
      "statsOutboundUplink": true,
      "statsOutboundDownlink": true
    }
  },
  "log": {
    "access": "",
    "error": "",
    "loglevel": "debug",
    "dnsLog": true
  },
  "inbounds": [
    {
      "tag": "socks",
      "port": 10808,
      "listen": "0.0.0.0",
      "protocol": "socks",
      "sniffing": {
        "enabled": false,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": false
      },
      "settings": {
        "auth": "noauth",
        "udp": true,
        "allowTransparent": false
      }
    },
    {
      "tag": "http",
      "port": 10809,
      "listen": "0.0.0.0",
      "protocol": "http",
      "sniffing": {
        "enabled": false,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": false
      },
      "settings": {
        "auth": "noauth",
        "udp": true,
        "allowTransparent": false
      }
    },
    {
      "tag": "api",
      "port": 9090,
      "listen": "127.0.0.1",
      "protocol": "dokodemo-door",
      "settings": {
        "udp": false,
        "address": "127.0.0.1",
        "allowTransparent": false
      }
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "my blocked domain behind cloudflare",
            "port": 2053,
            "users": [
              {
                "id": "//UUID",
                "alterId": 0,
                "email": "[email protected]",
                "security": "auto"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "security": "tls",
        "tlsSettings": {
          "allowInsecure": false,
          "serverName": "my blocked domain behind cloudflare",
          "alpn": [
            "http/1.1",
            "h2",
            "h3"
          ],
          "fingerprint": "chrome",
          "show": false
        },
        "wsSettings": {
          "path": "/wss?ed=2048",
          "headers": {
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.131 Safari/537.36"
          }
        },
        "sockopt": {
          "dialerProxy": "ff",
          "tcpKeepAliveIdle": 100
        }
      },
      "mux": {
        "enabled": false,
        "concurrency": -1,
        "xudpConcurrency": 8,
        "xudpProxyUDP443": ""
      }
    },
    {
      "tag": "ff",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP",
        "fragment": {
          "packets": "tlshello",
          "length": "10-20",
          "interval": "100-200"
        }
      },
      "streamSettings": {
        "sockopt": {
          "dialerProxy": "tt",
          "tcpKeepAliveIdle": 100
        }
      }
    },
    {
      "tag": "tt",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP",
        "fragment": {
          "packets": "1-3",
          "length": "5-8",
          "interval": "110-220"
        }
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {}
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      }
    }
  ],
  "stats": {},
  "api": {
    "tag": "api",
    "services": [
      "StatsService"
    ]
  },
  "dns": {
    "hosts": {
      "my blocked domain behind cloudflare": [
        "cloudflare CDN ip",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "cloudflare CDN ip another",
        "my server blocked IP"
      ]
    },
    "servers": [
      "1.1.1.1",
      "8.8.8.8"
    ],
    "queryStrategy": "UseIP",
    "disableFallback": true,
    "disableFallbackIfMatch": true
  },
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api"
      }
    ]
  }
}

in Server side : VLESS-TCP-TLS with same above vmess-ws in fallback

I must also say that without a hosts in the DNS block, the double fragment did not work alone and the internal IP (10.10.34.35) is returned.
Actually, before I moved the hosts into the DNS block, I did it inside the /system32/etc/hosts file.

@RPRX @rrouzbeh @chika0801 @chise0713 @yuhan6665

[yuhan6665]

感谢分享