科学上网: Setup Trojan on AWS 翻墙

首先推荐商业订阅版:https://egjplmujirj2tbj9wuzy.wgetcloud.org/, 价格还可以接受

一定要自己setup就继续往下看:

https://github.com/trojan-gfw/trojan

安装方式搜索：科学上网 Trojan

首先安装：sudo apt install trojan

需要有一个domain name，通过https://certbot.eff.org/申请一个免费的cert

https://github.com/trojan-gfw/trojan/wiki/Binary-&-Package-Distributions

server端配置：

{

    "run_type": "server",

    "local_addr": "0.0.0.0",

    "local_port": 1443,

    "remote_addr": "qq.com",

    "remote_port": 443,

    "password": [

        "password1",

        "password2"

    ],

    "log_level": 1,

    "ssl": {

        "cert": "/etc/letsencrypt/live/yougood.ai/fullchain.pem",

        "key": "/etc/letsencrypt/live/yougood.ai/privkey.pem",

        "key_password": "",

        "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",

        "cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",

        "prefer_server_cipher": true,

        "alpn": [

            "http/1.1"

        ],

        "alpn_port_override": {

            "h2": 81

        },

        "reuse_session": true,

        "session_ticket": false,

        "session_timeout": 600,

        "plain_http_response": "",

        "curves": "",

        "dhparam": ""

    },

    "tcp": {

        "prefer_ipv4": false,

        "no_delay": true,

        "keep_alive": true,

        "reuse_port": false,

        "fast_open": false,

        "fast_open_qlen": 20

    },

    "mysql": {

        "enabled": false,

        "server_addr": "127.0.0.1",

        "server_port": 3306,

        "database": "trojan",

        "username": "trojan",

        "password": "",

        "key": "",

        "cert": "",

        "ca": ""

    }

}

https://github.com/Loyalsoldier/clash-rules

规则编辑 | Clash for Windows (lbyczf.com)

我的常用配置：One Drive/应用/clash/1671973573180.yml

使用TUN模式：

dns:

  enable: true

  enhanced-mode: fake-ip

  nameserver:

    - 8.8.8.8

    - 8.8.4.4

  fallback: []

  fake-ip-filter:

    - +.stun.*.*

    - +.stun.*.*.*

    - +.stun.*.*.*.*

    - +.stun.*.*.*.*.*

    - "*.n.n.srv.nintendo.net"

    - +.stun.playstation.net

    - xbox.*.*.microsoft.com

    - "*.*.xboxlive.com"

    - "*.msftncsi.com"

    - "*.msftconnecttest.com"

    - WORKGROUP

tun:

  enable: true

  stack: system

  auto-route: true

  auto-detect-interface: true

  dns-hijack:

    - any:53

用TUN模式要把文件C:\Program Files\Clash.for.Windows-0.20.11-win\resources\static\files\win\x64\clash-win64.exe加到防火墙 允许的应用(搜索允许。。。）

(不推荐使用System Proxy模式，如果用了的话：) bypass setting (在Clash app settings里面设置，不是配置文件！！)