shadowsocks 搭建

yum 安装

适用于 CentOS 7

• 安装 yum 源

wget -O /etc/yum.repos.d/librehat-shadowsocks-epel-7.repo https://copr.fedorainfracloud.org/coprs/librehat/shadowsocks/repo/epel-7/librehat-shadowsocks-epel-7.repo

• 安装 shadowsocks

yum -y install shadowsocks-libev

编译安装

理论上适用于任意 linux, 但要适配命令

# 安装依赖
dnf -y install epel-release
dnf -y install git gcc gettext autoconf libtool automake make pcre-devel asciidoc xmlto c-ares-devel libev-devel libsodium-devel mbedtls-devel

git clone https://github.com/shadowsocks/shadowsocks-libev.git
cd shadowsocks-libev
git submodule update --init --recursive

# 编译安装
./autogen.sh && ./configure --prefix=/usr --disable-documentation
make && make install

配置

mkdir /etc/shadowsocks-libev
vim /etc/shadowsocks-libev/config.json

{
  "server":"0.0.0.0",
  "server_port": 19499,
  "password": "改掉密码",
  "method":"chacha20-ietf-poly1305"
}

配置 systemctl 操作 yum 安装会自动添加。源码安装才需要这一步

# vim /etc/systemd/system/shadowsocks-libev.service
[Unit]
Description=Shadowsocks-libev SOCKS5 Proxy Server
After=network.target

[Service]
Type=simple
User=nobody
ExecStart=/usr/bin/ss-server -c /etc/shadowsocks-libev/config.json
Restart=on-failure

[Install]
WantedBy=multi-user.target

启动

• 启停命令

systemctl status shadowsocks-libev
systemctl start shadowsocks-libev
systemctl enable shadowsocks-libev
systemctl restart shadowsocks-libev
systemctl stop shadowsocks-libev
systemctl disable shadowsocks-libev

• 查看日志

journalctl -u shadowsocks-libev -f

• 防火墙开放 19499

systemctl restart firewalld
firewall-cmd --permanent --zone=public --add-port=19499/tcp
firewall-cmd --reload
firewall-cmd --list-ports

• 运营商网络开放 19499 (文档略过)

连接

GUI

• 客户端下载: https://shadowsocks.org/doc/getting-started.html
• 本地 host 给 qqqq.com 做个解析

Command

• 与服务端相同方式安装

• 配置 shadowsocks-libev, 对应的配置为 local_port

• 作为客户端启动

• 配置文件

{
  "server":"qqqq.com",
  "server_port": 19499,
  "local_port": 1080,
  "password": "改掉密码",
  "method":"chacha20-ietf-poly1305"
}

nohup ss-local -c /etc/shadowsocks-libev/config.json &

• 使用 privoxy 将 socks5 代理转换为 http 代理

• 安装

dnf install -y privoxy

• 配置代理转换

# vim /etc/privoxy/config
forward-socks5t / 127.0.0.1:1080 .
# systemctl restart privoxy
# systemctl enable privoxy

• http 代理： 127.0.0.1:8118

# 配置临时代理
export HTTP_PROXY=http://127.0.0.1:8118
export HTTPS_PROXY=http://127.0.0.1:8118

# 单次任务使用代理
curl -v --proxy 127.0.0.1:8118 https://www.baidu.com