首先推荐商业订阅版:https://egjplmujirj2tbj9wuzy.wgetcloud.org/, 价格还可以接受
一定要自己setup就继续往下看:
https://github.com/trojan-gfw/trojan
安装方式搜索：科学上网 Trojan
首先安装：sudo apt install trojan
需要有一个domain name，通过https://certbot.eff.org/申请一个免费的cert
https://github.com/trojan-gfw/trojan/wiki/Binary-&-Package-Distributions
server端配置：
{
"run_type": "server",
"local_addr": "0.0.0.0",
"local_port": 1443,
"remote_addr": "qq.com",
"remote_port": 443,
"password": [
"password1",
"password2"
],
"log_level": 1,
"ssl": {
"cert": "/etc/letsencrypt/live/yougood.ai/fullchain.pem",
"key": "/etc/letsencrypt/live/yougood.ai/privkey.pem",
"key_password": "",
"cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
"cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
"prefer_server_cipher": true,
"alpn": [
"http/1.1"
],
"alpn_port_override": {
"h2": 81
},
"reuse_session": true,
"session_ticket": false,
"session_timeout": 600,
"plain_http_response": "",
"curves": "",
"dhparam": ""
},
"tcp": {
"prefer_ipv4": false,
"no_delay": true,
"keep_alive": true,
"reuse_port": false,
"fast_open": false,
"fast_open_qlen": 20
},
"mysql": {
"enabled": false,
"server_addr": "127.0.0.1",
"server_port": 3306,
"database": "trojan",
"username": "trojan",
"password": "",
"key": "",
"cert": "",
"ca": ""
}
}
https://github.com/Loyalsoldier/clash-rules
规则编辑 | Clash for Windows (lbyczf.com)
我的常用配置：One Drive/应用/clash/1671973573180.yml
使用TUN模式：
dns:
enable: true
enhanced-mode: fake-ip
nameserver:
- 8.8.8.8
- 8.8.4.4
fallback: []
fake-ip-filter:
- +.stun.*.*
- +.stun.*.*.*
- +.stun.*.*.*.*
- +.stun.*.*.*.*.*
- "*.n.n.srv.nintendo.net"
- +.stun.playstation.net
- xbox.*.*.microsoft.com
- "*.*.xboxlive.com"
- "*.msftncsi.com"
- "*.msftconnecttest.com"
- WORKGROUP
tun:
enable: true
stack: system
auto-route: true
auto-detect-interface: true
dns-hijack:
- any:53
用TUN模式要把文件C:\Program Files\Clash.for.Windows-0.20.11-win\resources\static\files\win\x64\clash-win64.exe加到防火墙 允许的应用(搜索允许。。。）
(不推荐使用System Proxy模式，如果用了的话：) bypass setting (在Clash app settings里面设置，不是配置文件！！)
