首先推荐商业订阅版:https://egjplmujirj2tbj9wuzy.wgetcloud.org/, 价格还可以接受
一定要自己setup就继续往下看:
https://github.com/trojan-gfw/trojan
安装方式搜索：科学上网 Trojan
首先安装：sudo apt install trojan
需要有一个domain name，通过https://certbot.eff.org/申请一个免费的cert
https://github.com/trojan-gfw/trojan/wiki/Binary-&-Package-Distributions
server端配置：
{
"run_type": "server",
"local_addr": "0.0.0.0",
"local_port": 1443,
"remote_addr": "qq.com",
"remote_port": 443,
"password": [
"password1",
"password2"
],
"log_level": 1,
"ssl": {
"cert": "/etc/letsencrypt/live/yougood.ai/fullchain.pem",
"key": "/etc/letsencrypt/live/yougood.ai/privkey.pem",
"key_password": "",
"cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
"cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384",
"prefer_server_cipher": true,
"alpn": [
"http/1.1"
],
"alpn_port_override": {
"h2": 81
},
"reuse_session": true,
"session_ticket": false,
"session_timeout": 600,
"plain_http_response": "",
"curves": "",
"dhparam": ""
},
"tcp": {
"prefer_ipv4": false,
"no_delay": true,
"keep_alive": true,
"reuse_port": false,
"fast_open": false,
"fast_open_qlen": 20
},
"mysql": {
"enabled": false,
"server_addr": "127.0.0.1",
"server_port": 3306,
"database": "trojan",
"username": "trojan",
"password": "",
"key": "",
"cert": "",
"ca": ""
}
}
https://github.com/Loyalsoldier/clash-rules
规则编辑 | Clash for Windows (lbyczf.com)
我的常用配置：One Drive/应用/clash/1671973573180.yml
使用TUN模式：
dns:
enable: true
enhanced-mode: fake-ip
nameserver:
- 8.8.8.8
- 8.8.4.4
fallback: []
fake-ip-filter:
- +.stun.*.*
- +.stun.*.*.*
- +.stun.*.*.*.*
- +.stun.*.*.*.*.*
- "*.n.n.srv.nintendo.net"
- +.stun.playstation.net
- xbox.*.*.microsoft.com
- "*.*.xboxlive.com"
- "*.msftncsi.com"
- "*.msftconnecttest.com"
- WORKGROUP
tun:
enable: true
stack: system
auto-route: true
auto-detect-interface: true
dns-hijack:
- any:53
用TUN模式要把文件C:\Program Files\Clash.for.Windows-0.20.11-win\resources\static\files\win\x64\clash-win64.exe加到防火墙 允许的应用(搜索允许。。。）
(不推荐使用System Proxy模式，如果用了的话：) bypass setting (在Clash app settings里面设置，不是配置文件！！)
If the webpage shows weird characters for some icons with Firefox, it means some fonts couldn't be downloaded successfully. Use the following steps to fix: