vlessenc+vision+xhttp+reality纯新手快速极简配置指南

[qwerttvv]

由于历史原因，一直在用别的协议和软件，最近事情有了一些契机，我也开始接触xray，我本人也是纯纯的新人小白，发这个目的第一个就当自己做个笔记，第二就是给后来的朋友们一个可以直接抄好了就能用的配置

这个配置适合的情境，就是专门有个机器用来科学，IP和端口都可用，直连速度满足你的需要。

先上配置

{
  "log": {
    "loglevel": "none"
  },
  "inbounds": [
    {
      "tag": "443",
      "listen": "::",
      "port": 443,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp",
        "address": "127.0.0.1",
        "port": 2222,
        "followRedirect": false
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      }
    },
    {
      "listen": "127.0.0.1",
      "port": 2222,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "手工添加1",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "手工添加2"
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "reality",
        "realitySettings": {
          "fingerprint": "chrome",
          "target": "example.com:443",
          "serverNames": [
            "example.com"
          ],
          "privateKey": "手工添加3",
          "shortIds": ["手工添加4"]
        },
        "xhttpSettings": {
          "path": "/手工添加5"
        }
      }
    },
    {
      "tag": "80",
      "listen": "::",
      "port": 80,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp",
        "address": "example.com",
        "port": 80,
        "followRedirect": false
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "routeOnly": true
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct",
      "settings": {
        "domainStrategy": "UseIPv4v6"
      }
    },
    {
      "protocol": "blackhole",
      "tag": "blackhole"
    }
  ],
  "routing": {
    "rules": [
      {
        "inboundTag": ["443"],
        "domain": ["example.com"],
        "outboundTag": "direct"
      },
      {
        "inboundTag": ["443"],
        "outboundTag": "blackhole"
      },
      {
        "inboundTag": ["80"],
        "domain": ["example.com"],
        "outboundTag": "direct"
      },
      {
        "inboundTag": ["80"],
        "outboundTag": "blackhole"
      }
    ]
  }
}

这两天抽时间看了文档，试着搭的，已经满足我个人需求了就掏出来，以下是一些注意的点

1、关于flow。一开始觉得可以关掉，实操也确实如此，关了可以正常用。但是后来搜了搜，没有多久之前r主席亲自说最好还是加上。这部分没什么新东西，我觉得这个结论在当前仍然有效，主打一个咱也不懂，听大佬的就好，最好不要自作主张删掉

2、关于偷的域名example.com，r主席说最佳实践是你ip的ASN里找一个，原域名就是具备抗量子攻击算法的最好

3、关于xhttp。这个我用不上很高级的功能，raw也就是tcp也能满足需求，但是我仍旧选择了xhttp，毕竟是配套的专属新东西，而且r佬说性能差距很小几乎可以忽略

4、关于端口80的处理方法，这个我确实耽误的时间最多，想不好怎么弄，后来直接提需求了，包括r佬在内的各位大佬指点过后确定好了方案 详情在这里 #5369

5，几个手工添加内容的说明
example.com 替换为你偷的域名
手工添加1 执行xray uuid
手工添加2 执行xray vlessenc
手工添加3 执行xray x25519，注意公钥现在写的是password，我晕了一会儿抱着试试看的心态发现确实是只是名字改了，实际上是公钥
手工添加4 长度为 8 个字节，即 16 个 0~f 的数字字母，可以小于16个，核心将会自动在后面补0, 但位数必须是偶数
手工添加5 你也可以重新生成一个新的uuid写在这里。但注意客户端不要填错

6，客户端不支持vlessenc+vision+xhttp+reality的，可以改成vless+vision+reality 见#5384

[laloe74]

感觉好冗余，443转发到2222有什么意义？

[qwerttvv]

我也一新手，我觉得啊

1、前置过滤一下子，sni不对的直接黑洞
2、避免vless端口直接暴露，降低未知漏洞影响可能性

[qwerttvv]

改了一下，加入了大佬们说是负优化的快乐眼球，并且优化了dokodemo-door负载，现在只经过一遍核心

{
  "log": {
    "loglevel": "none"
  },
  "inbounds": [
    {
      "tag": "1111",
      "listen": "127.0.0.1",
      "port": 1111,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp,udp",
        "address": "www.example.com",
        "port": 443,
        "followRedirect": false
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "routeOnly": true
      }
    },
    {
      "listen": "0.0.0.0",
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "手工添加1",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "手工添加2"
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "reality",
        "realitySettings": {
          "fingerprint": "chrome",
          "target": "127.0.0.1:1111",
          "serverNames": [
            "example.com"
          ],
          "privateKey": "手工添加3",
          "shortIds": ["手工添加4"]
        },
        "xhttpSettings": {
          "path": "/手工添加5"
        }
      }
    },
    {
      "tag": "80",
      "listen": "::",
      "port": 80,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp,udp",
        "address": "www.example.com",
        "port": 80,
        "followRedirect": false
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "routeOnly": true
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct",
      "settings": {
        "domainStrategy": "AsIs"
      },
      "streamSettings": {
        "sockopt": {
          "tcpFastOpen": true,
          "domainStrategy": "UseIP",
          "happyEyeballs": {
            "tryDelayMs": 250,
            "prioritizeIPv6": false,
            "interleave": 1,
            "maxConcurrentTry": 4
          }
        }
      }
    },
    {
      "protocol": "blackhole",
      "tag": "blackhole"
    }
  ],
  "routing": {
    "rules": [
      {
        "inboundTag": ["1111"],
        "domain": ["example.com"],
        "outboundTag": "direct"
      },
      {
        "inboundTag": ["1111"],
        "outboundTag": "blackhole"
      },
      {
        "inboundTag": ["80"],
        "domain": ["example.com"],
        "outboundTag": "direct"
      },
      {
        "inboundTag": ["80"],
        "outboundTag": "blackhole"
      }
    ]
  }
}