Shadowsocks iwe
lilọ
Shadowsocks iṣeto ni kika
Ṣe atunto Faili
Shadowsocks gba awọn atunto kika JSON:
{
"olupin":"my_server_ip",
"ibudo olupin":8388,
"ibudo_agbegbe":1080,
"ọrọ igbaniwọle":"barfoo!",
"Ọna":"chacha20-ietf-poly1305"
}
JSON kika
- olupin: Orukọ ogun rẹ tabi IP olupin (IPv4/IPv6).
- server_port: olupin ibudo nọmba.
- local_port: nọmba ibudo agbegbe.
- ọrọigbaniwọle: ọrọigbaniwọle ti a lo lati encrypt gbigbe.
- ọna: ìsekóòdù ọna.
Ìsekóòdù Ọna
A tunto awọn olupin wa ati ṣeduro pe ki o lo chacha20-ietf-poly1305 AEAD cipher nitori pe o jẹ ọna fifi ẹnọ kọ nkan ti o lagbara julọ.
Ti o ba tunto olupin shadowsocks tirẹ, o le yan lati boya “chacha20-ietf-poly1305” tabi “aes-256-gcm”.
URI & koodu QR
Shadowsocks fun Android / IOS tun gba awọn atunto ọna kika URI koodu BASE64:
ss://BASE64-ENCODED-STRING-LAISI-PADDING#TAG
URI pẹtẹlẹ yẹ ki o jẹ: ss: // ọna: ọrọ igbaniwọle@hostname: ibudo
URI ti o wa loke ko tẹle RFC3986. Ọrọigbaniwọle ninu ọran yii yẹ ki o jẹ ọrọ itele, kii ṣe koodu-idẹ ogorun.
Apeere: A nlo olupin ni 192.168.100.1:8888 lilo bf-cfb ìsekóòdù ọna ati ọrọigbaniwọle idanwo/!@#:.
Lẹhinna, pẹlu URI itele ss://bf-cfb:idanwo/!@#:@192.168.100.1:8888, a le ṣe ipilẹṣẹ BASE64 koodu URI:
> console.log ("ss: //" + btoa ("bf-cfb: idanwo/! @#:@192.168.100.1:8888"))
ss://YmYtY2ZiOnRlc3QvIUAjOkAxOTIuMTY4LjEwMC4xOjg4ODg
Lati ṣe iranlọwọ lati ṣeto ati ṣe idanimọ awọn URI wọnyi, o le fi aami kan kun lẹhin okun ti a fi koodu BASE64:
ss://YmYtY2ZiOnRlc3QvIUAjOkAxOTIuMTY4LjEwMC4xOjg4ODg#example-server
Fifiranṣẹ
Shadowsocks nlo awọn adirẹsi ti a rii ni ọna kika adirẹsi SOCKS5:
[Iru-baiti 1] [ogun-ipari-ayipada] [2-baiti ibudo]
Eyi ni awọn iru adirẹsi ti ṣalaye:
- 0x01: agbalejo jẹ 4-baiti IPv4 adirẹsi.
- 0x03: ogun jẹ okun gigun oniyipada, ti o bẹrẹ pẹlu ipari 1-baiti, atẹle nipasẹ orukọ-ašẹ 255-baiti ti o pọju.
- 0x04: agbalejo jẹ 16-baiti IPv6 adirẹsi.
Nọmba ibudo jẹ nomba 2-baiti nla-endian ti a ko fowo si.
TCP
Onibara agbegbe ss bẹrẹ asopọ kan si ss-latọna jijin nipasẹ fifiranṣẹ data fifi ẹnọ kọ nkan ti o bẹrẹ pẹlu adirẹsi ibi-afẹde ti o tẹle data fifuye isanwo naa. Ìsekóòdù naa yoo yatọ si da lori sipher ti a lo.
[adirẹsi ibi-afẹde] [ẹrù isanwo]
Latọna jijin ss n gba data fifi ẹnọ kọ nkan, lẹhinna yọkuro ati sọ adiresi ibi-afẹde naa. Lẹhinna o ṣẹda asopọ TCP tuntun si ibi-afẹde ati siwaju data isanwo si rẹ. ss-remote gba esi lati ibi-afẹde lẹhinna encrypts data naa ki o firanṣẹ siwaju si ss-agbegbe titi ti o fi ge asopọ.
Fun awọn idi obfuscation, agbegbe ati latọna jijin yẹ ki o fi data ifọwọwọ ranṣẹ pẹlu fifuye isanwo diẹ ninu apo akọkọ.
UDP
ss-agbegbe nfiranṣẹ apo-iwe data fifi ẹnọ kọ nkan ti o ni adirẹsi ibi-afẹde ati fifuye isanwo si ss-latọna jijin.
[adirẹsi ibi-afẹde] [ẹrù isanwo]
Ni kete ti o ba ti gba apo-iṣiro ti paroko, ss-remote decrypts ati ṣe atuntu adirẹsi ibi-afẹde naa. Lẹhinna o firanṣẹ apo-iwe data tuntun kan pẹlu fifuye isanwo si ibi-afẹde. ss-remote gba awọn apo-iwe data lati ibi-afẹde ati pe o ṣaju adirẹsi ibi-afẹde si fifuye isanwo ninu apo kọọkan. Awọn idaako ti paroko ni a firanṣẹ pada si ss-agbegbe.
[adirẹsi ibi-afẹde] [ẹrù isanwo]
Ilana yii le jẹ sisun si isalẹ lati ss-latọna jijin ti n ṣiṣẹ itumọ adirẹsi nẹtiwọki kan fun ss-agbegbe.
