# Shadowsocks部署
# 服务器选择
科学上网需要选择一个靠谱的境外（非中国大陆）服务器，目前我用过最稳定的是阿里云 (opens new window)香港CN2直连的VPS,另外腾讯云 (opens new window)也一直有秒杀活动 (opens new window)适合新人够买尝试。
# 在Ubuntu 18.04中安装Shadowsocks
# 安装依赖
apt update && apt upgrade -yuf
apt install -y --no-install-recommends gettext build-essential autoconf libtool libpcre3-dev \
asciidoc xmlto libev-dev libudns-dev automake libmbedtls-dev \
libsodium-dev git python-m2crypto libc-ares-dev
1
2
3
4
2
3
4
# 下载Shadowsocks-libev 源码
cd /opt
git clone https://github.com/shadowsocks/shadowsocks-libev.git
cd shadowsocks-libev
git submodule update --init --recursive
1
2
3
4
2
3
4
# 编译安装
./autogen.sh
./configure
make && make install
1
2
3
2
3
# 配置 Shadowsocks Server
# 创建 Shadowsocks 系统用户
adduser --system --no-create-home --group shadowsocks
# 创建配置目录
mkdir -m 755 /etc/shadowsocks
# 创建Shadowsocks配置文件 /etc/shadowsocks/shadowsocks.json.将以下内容贴进去。
{
"server":"你的公网IP",
"server_port":8388,
"password":"你的密码",
"timeout":300,
"method":"aes-256-gcm",
"fast_open": true
}
1
2
3
4
5
6
7
8
2
3
4
5
6
7
8
# 为SS优化网络配置
# 编辑 /etc/sysctl.d/local.conf 文件
# max open files
fs.file-max = 51200
# max read buffer
net.core.rmem_max = 67108864
# max write buffer
net.core.wmem_max = 67108864
# default read buffer
net.core.rmem_default = 65536
# default write buffer
net.core.wmem_default = 65536
# max processor input queue
net.core.netdev_max_backlog = 4096
# max backlog
net.core.somaxconn = 4096
# resist SYN flood attacks
net.ipv4.tcp_syncookies = 1
# reuse timewait sockets when safe
net.ipv4.tcp_tw_reuse = 1
# turn off fast timewait sockets recycling
net.ipv4.tcp_tw_recycle = 0
# short FIN timeout
net.ipv4.tcp_fin_timeout = 30
# short keepalive time
net.ipv4.tcp_keepalive_time = 1200
# outbound port range
net.ipv4.ip_local_port_range = 10000 65000
# max SYN backlog
net.ipv4.tcp_max_syn_backlog = 4096
# max timewait sockets held by system simultaneously
net.ipv4.tcp_max_tw_buckets = 5000
# turn on TCP Fast Open on both client and server side
net.ipv4.tcp_fastopen = 3
# TCP receive buffer
net.ipv4.tcp_rmem = 4096 87380 67108864
# TCP write buffer
net.ipv4.tcp_wmem = 4096 65536 67108864
# turn on path MTU discovery
net.ipv4.tcp_mtu_probing = 1
# for high-latency network
net.ipv4.tcp_congestion_control = hybla
# for low-latency network, use cubic instead
net.ipv4.tcp_congestion_control = cubic
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# 创建 Shadowsocks Systemd 服务
# 编辑 /etc/systemd/system/shadowsocks.service
[Unit]
Description=Shadowsocks proxy server
[Service]
User=root
Group=root
Type=simple
ExecStart=/usr/local/bin/ss-server -c /etc/shadowsocks/shadowsocks.json -a shadowsocks -v start
ExecStop=/usr/local/bin/ss-server -c /etc/shadowsocks/shadowsocks.json -a shadowsocks -v stop
[Install]
WantedBy=multi-user.target
1
2
3
4
5
6
7
8
9
10
11
12
2
3
4
5
6
7
8
9
10
11
12
# 启用并启动shadowsocks.service服务
systemctl daemon-reload
systemctl enable shadowsocks
systemctl start shadowsocks
1
2
3
2
3
# 在Archlinux中安装Shadowsocks多用户管理平台
# 安装Python环境
pip install cymysql shadowsocks m2crypto
1
# 安装shadowsocks服务后台
# 下载源码
git clone -b manyuser https://github.com/mengskysama/shadowsocks.git
cd /root/shadowsocks/shadowsocks
1
2
2
# 创建shadowsocks数据库
create database shadowsocks; --创建数据库
CREATE USER ss@localhost IDENTIFIED BY 'ss'; --创建WP用户和密码
GRANT ALL PRIVILEGES ON shadowsocks.* TO ss@localhost; --授予权限
FLUSH PRIVILEGES; --刷新配置
GRANT ALL ON shadowsocks.* TO aa@'%' IDENTIFIED BY 'sa';
1
2
3
4
5
2
3
4
5
# 导入后台配置
use shadowsocks;
source /root/shadowsocks/shadowsocks/shadowsocks.sql
flush privileges;
exit;
1
2
3
4
2
3
4
# 修改Config.py
#Config
MYSQL_HOST = 'mdss.mengsky.net'
MYSQL_PORT = 3306
MYSQL_USER = 'ss'
MYSQL_PASS = 'ss'
MYSQL_DB = 'shadowsocks'
MANAGE_PASS = 'ss233333333'
#if you want manage in other server you should set this value to global ip
MANAGE_BIND_IP = '127.0.0.1'
#make sure this port is idle
MANAGE_PORT = 23333
1
2
3
4
5
6
7
8
9
10
11
2
3
4
5
6
7
8
9
10
11
# 安装shadowsocks前台
git clone https://github.com/orvice/ss-panel.git
curl -sS https://getcomposer.org/installer | php
php composer.phar install
1
2
3
2
3
# 修改配置
cd ss-panel/lib/
cp config-simple.php config.php
vim config.php
1
2
3
2
3
# 修改数据库等信息
-- 登陆Mysql ,执行前台的SQL
use shadowsocks;
source /root/ss-panel/sql/invite_code.sql
source /root/ss-panel/sql/ss_user_admin.sql
source /root/ss-panel/sql/ss_node.sql
source /root/ss-panel/sql/ss_reset_pwd.sql
source /root/ss-panel/sql/user.sql
flush privileges;
exit
1
2
3
4
5
6
7
8
9
2
3
4
5
6
7
8
9
# 执行服务
nohup python2.7 /root/shadowsocks/shadowsocks/server.py > /var/log/shadowsocks.log 2>&1
#查看日志
cat /var/log/shadowsocks.log
#如果出现以下文字,则表明执行成功。
db start server at port [%s] pass [%s]
#将前端文件移至web目录， 通过浏览器访问即可。
cp -rd /root/ss-panel/* /var/www/html
1
2
3
4
5
6
7
8
9
10
2
3
4
5
6
7
8
9
10