Proxy Awesome

协议

Note

• 建议基于 overlay 组件内部 proxy，更安全，更好跨网。
• 对外暴露甚至选择

• juicity
  • AGPLv3, Golang
  • quic-based, inspired by tuic
• TUIC
• trojan
  • 伪装 tls/https
  • 必须 TLS
  • WS+TLS
  • 伪装非常好
• VLESS
  • 更轻量的协议，无需加密，常配合 TLS 使用
  • 推荐 VLESS+TLS
  • vs Trojan
    • 性能更好一点
    • TLS 非必须
    • 配置更简单一些
• vmess
  • V2Ray 原生加密协议，自带加密
  • 支持非常复杂的协议配置
  • 有点过于复杂和臃肿
• XTLS/REALITY
  • MPL-2.0, Go
  • 替代 TLS，消除服务端 TLS 指纹特征
• snell
• hysteria
  • v1 和 v2 不兼容
• brook wss
  • txthinking/brook
• enfein/mieru
  • Apache-2.0, Go
  • TCP or UDP protocol-based socks5 / HTTP / HTTPS proxy
  • 一些设计思考 enfein/mieru#8
• naive
• http proxy
  • nginx
  • squid
  • tinyproxy
  • Privoxy
• socks proxy
  • dante
• ss - ShadowSocks
• ssr - ShadowSocksR
• klzgrad/naiveproxy
  • BSD-3, C++
  • 复用 Chromium 网络栈
  • TLS, HTTP/2
• obfs - 混淆 - 用于 ss,ssr,hysteria
  • tls1.2_ticket_auth, tls1.2_ticket_fastauth
  • http_simple, http_post
• CCProxy, Proxycap, Proxifier
• Tunnel
  • ginuerzh/gost
  • kcp
• 3proxy/3proxy
  • BSD, C
• quic-go/masque-go
  • MIT, Go
  • MASQUE: Proxying UDP in HTTP/3, RFC 9298

Tunnel

• XX-net/XX-Net
  • LGPL-3.0, Python
  • A proxy tool to bypass GFW
• snail007/goproxy
  • GPL-3.0, Go
• frp
• rapiz1/rathole
  • Apache-2.0, Rust
  • 类似 frp，但 rust 实现
• nicocha30/ligolo-ng
  • GPL-3.0, Go
  • An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

curl https://1.1.1.1/cdn-cgi/trace
curl https://wener.me/cdn-cgi/trace

Awesome

Note Server/universal

• 入站和出站都支持多种协议

Note Client

• 支持订阅
• 强调规则
• 支持较多出站协议 - outbound
• 至少支持 socks 或 http 入站 - 最常用本地代理
• 支持更多的接入逻辑 - 透明代理、tun、ebpf、redir、tproxy
• 支持多路复用
• 支持负载均衡
• 支持 DNS

• GUI/客户端
  • 2dust/v2rayN
    • clashN 合并到 v2rayN
    • 2dust/clashN
      • Windows
  • clash-verge-rev/clash-verge-rev
    • GPLv3, TS, Rust
    • GUI client based on Tauri, designed to run in Windows, macOS and Linux
    • mihomo 内核
  • MatsuriDayo/nekoray
    • GPLv3, C++, QT
    • sing-box
    • Windows/Linux
• App/移动端
  • MatsuriDayo/NekoBoxForAndroid
    • NekoBox for Android / sing-box / universal proxy toolchain for Android
• 内核/通用/平台/Universal
  • MetaCubeX/mihomo
    • GPLv3, Go
    • Clash.Meta -> mihomo
    • 💡 适合做客户端，支持的入站协议不多
    • 支持出站传输协议 VLESS Reality, Vision, Trojan XTLS, Hysteria, TUIC, ShadowTLS
    • 规则支持 GEOSITE
    • 支持 TUN
    • zzzgydi/clash-verge
      • GPLv3, Rust+Typescript
      • 基于 tauri 的桌面应用
  • v2ray
  • XTLS/Xray-core
    • MPLv2, Go
    • 不支持 TUN XTLS/Xray-core#3576
  • SagerNet/sing-box
    • GPLv3, Golang
    • universal proxy platform
  • clash
    • rule based
• Dashboard/GUI
  • MetaCubeX/metacubexd
  • MetaCubeX/Yacd-meta
• Config
  • clash.skk.moe/general
  • SukkaW/Surge
• 服务/Servic/Socks/HTTP Proxy
  • ginuerzh/gost
    • MIT, Golang
    • GO Simple Tunnel
    • 多端口
    • 支持代理 HTTP/HTTPS/HTTP2/SOCKS4(A)/SOCKS5
    • UDP over TCP
    • TCP/UDP 透明代理/转发
    • 支持 Shadowsocks(TCP/UDP)
    • 支持 SNI 代理
    • TUN/TAP
    • 权限控制
    • 负载均衡
    • 路由控制
    • DNS 解析和代理
  • nadoo/glider
    • 类似 gost，但支持更多协议
      • 只有 Listener 和 Forwarder
    • mix - http+socks5
    • http
    • socks5
    • ss
    • trojan
    • trojanc - cleartext
    • vless
    • vmess
    • Forward/TCP - ssr, ssh. socks4, socks4a
    • tcp, udp - tunnel
    • tls, kcp, unic, vsock, smux, ws, wss, PROXY Protocol, simple obfs
    • redir, redir6, TProxy
    • reject
  • hiddify/Hiddify-Manager
    • GPLv3, Python
  • MHSanaei/3x-ui
    • Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Tunnel, Mixed, HTTP)
• Transparent/Protocol
  • mezantrop/ts-warp
    • BSD-2, C
  • HyNetwork/hysteria
    • MIT, Go
  • daeuniverse/dae
    • AGPLv3, Go
    • Linux >= 5.8
    • eBPF
    • /sys/fs/bpf
    • eBPF-based Linux high-performance transparent proxy solution
    • daeuniverse/dae/docs/en/proxy-protocols.md
• 命令行/CLI
  • proxychain-ng
• anderspitman/awesome-tunneling
  • MIT
  • List of ngrok alternatives and other tunneling solutions
• hunshcn/gh-proxy
• heiher/hev-socks5-tproxy
  • MIT, C
  • A transparent proxy for Socks5 that supports Linux TProxy
• sower-proxy/sower
  • MIT, Go
  • High-performance proxy server
  • 透明代理
  • sower-proxy/sower/wiki
• 规则
  • deezertidal/stash-override
    • whatshub.top
  • raw.githubusercontent.com/qsoyq/shell/main/config/stash/override/ad/youtube-remove-ads.stoverride
  • Script-Hub-Org/Script-Hub
  • raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Gemini/Gemini.yaml
• GEO/GEOIP/GEOSITE
  • v2fly/domain-list-community
    • v2fly/v2ray-core/app/router/config.proto
    • 生成 PB 格式
  • mmdb - MaxMind DB
    • maxmind.github.io/MaxMind-DB
    • runk/node-maxmind
      • NodeJS
    • runk/mmdb-lib
      • MIT, Browser
  • MetaCubeX/meta-rules-dat
    • MetaCubeX/meta-rules-dat/.github/workflows/run.yml
    • metacubex/geo
      • 工具
  • Loyalsoldier/v2ray-rules-dat
  • Loyalsoldier/domain-list-custom
  • geoip2
    • dev.maxmind.com/geoip/geoip2/geolite2
• Subscription Management
  • sub-store-org/Sub-Store
    • GPL-3.0, TypeScript, JavaScript
    • Advanced Subscription Manager for QX, Loon, Surge, Stash, Egern and Shadowrocket

script:
  shortcuts:
    quic-googlevideo: network == 'udp' and (host.endswith('+.googlevideo.com') or host.endswith('+.googleapi.com'))

rules:
  - SCRIPT,quic-googlevideo,REJECT

iOS Client

• Stash - Rule Based Proxy
  • $4
  • 支持 iPhone, iPad, AppleTV
  • Clash 内核
  • Test Flight testflight.apple.com/join/elwvzipQ
  • t.me/RnNc2RaV8x0wMzQ0
  • t.me/stashnetworks
• Shadowrocket
  • $3
  • 支持 iPhone, iPad, AppleTV
• Loon
  • $8
  • 支持 iPhone, iPad, AppleTV
• Quantumult X
  • $8
  • 支持 macOS, iPhone, iPad, AppleTV
  • crossutility/Quantumult-X
• SingBox
  • 免费
• Pharos Pro
  • $3
  • iPad, iPhone
• Potatso
  • Free
  • iPad, iPhone
• Surge 5 nssurge.com/buy_now
  • $50
• Clash for iOS
  • App Store apps.apple.com/us/app/choc/id1582542227
  • Test Flight testflight.apple.com/join/J5QPqXKO
  • t.me/choc_channel
  • t.me/choc_chat
• Proxyman
  • ProxymanApp/atlantis

配置

• xmdhs/clash2singbox
  • Clash.Mate -> SingBox
  • Web 版 xmdhs/clash2sfa
• Toperlock/sing-box-subscribe
  • sing-box-subscribe.vercel.app
• izumiChan16/clash_ini2sing-box
• clash2sfa-xmdhs.koyeb.app
• chika0801/sing-box-examples
• subconverters.com

Sniff/Introspection

• Charles - 商业
  • macOS
• Proxyman - 商业
  • macOS
• mitmproxy
  • lqqyt2423/go-mitmproxy
    • MIT, Golang
  • AdguardTeam/gomitmproxy
    • GPL-3.0, Golang
• Wireshark
• tshark
• tcpdump
• ngrep
• requestly/requestly
  • requestly.io/proxyman

HTTP 代理

• CONNECT 会用于建立 TCP 通道
  • 通常是用于 https
  • 非 https 的时候会直接发起 GET 这样的请求
• Path 不会参与代理协议

# 会发起 GET 请求
curl -x http://127.0.0.1:8080 icanhazip.com -v
# 相同
curl -x http://127.0.0.1:8080 https://icanhazip.com -v
curl -x http://127.0.0.1:8080/proxy https://icanhazip.com -v

# http2
# ==========
# HTTP Upgrade
curl -v --http2 http://localhost:8000
# GET / HTTP/2
curl -v --http2-prior-knowledge http://localhost:8000

库

• eycorsican/leaf
  • Apachev2, Rust
• Koolson/Qure
  • Quantumult X Policy Icon Set
• crossutility/Quantumult-X
  • Quantumult X scripts and rules

Golang

• p4gefau1t/trojan-go
  • GPL-3.0, Go
  • A Trojan proxy written in Go
• mingcheng/socks5lb
  • MIT, Go
  • A simple socks5 load balancer
• httputil.ReverseProxy
• google/huproxy
  • Server/Client 结构
  • 与 HTTP 并存
  • 支持 Path
  • 利用 Connection-Upgrade 升级为其他协议
• google/inverting-proxy
  • Apache-2.0, Go
  • Reverse proxy that inverts the direction of traffic
• google/martian
  • Apache-2.0, Go
  • Library for building custom HTTP/S proxies
• antoniomika/sish
  • MIT, Go
  • HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH
• jamescun/switcher
  • MIT, Go
  • SSH and HTTP server on the same port
• inetaf/tcpproxy
  • MIT, Go
  • TCP proxy with support for static rules (Host header, SNI)
• akutz/memconn
  • Apache-2.0, Go
  • In-memory network stack for Go
  • MemConn: an in-memory network stack for Go
  • 可用于测试或虚拟内部代理网络
• dshulyak/uring
• pojntfx/weron
  • AGPLv3, Golang
  • Overlay networks based on WebRTC
• mux
  • SagerNet/sing-mux
  • xtaci/smux
    • TCP, KCP
    • Simple MUltipleXing
    • 高丢包、高延迟的网络环境下提升性能
  • hashicorp/yamux
    • MPLv2, Go
    • connection multiplexing
  • golang.org/x/net/http2
• transport
  • ws
  • http
  • grpc - 支持 mux, 不再需要 smux
  • h2
  • quic
  • HTTPUpgrade
  • 参考
    • sing-box.sagernet.org/configuration/shared/v2ray-transport

其他语言

• yrutschle/sslh
  • GPL-2.0, C
  • Applicative Protocol Multiplexer (SSH, SSL, HTTP, etc.)
• joeferner/node-http-mitm-proxy
  • MIT, JavaScript
  • HTTP Man-in-the-Middle Proxy

GFW

• ValdikSS/GoodbyeDPI
  • Apache-2.0, C
  • Deep Packet Inspection circumvention utility
  • HN #32199468
• SadeghHayeri/GreenTunnel
  • MIT, JavaScript
  • GreenTunnel is an anti-censorship utility designed to bypass the DPI systems implemented by various ISPs
• comwrg/FUCK-GFW
  • WTFPL, Shell
  • A shell script to fuck GFW
• haoel/haoel.github.io
  • Personal blog about GFW bypass techniques

线路

• CN1 - 163 骨干网 - 带宽容量大，价格便宜
  • as4134
  • 202.97.*
• CN2 - 带宽容量较小，费用高
  • as4809
  • 59.43.*
  • CN2 GT - Global Transit
    • 出口单独线路，入口使用 163
  • CN2 GIA
    • 独立的回国线路
• HK > CN2 GIA > CN2 GT

域名

• 常见需要代理域名
  • quora.com
  • medium.com
• 可直接访问
  • gstatic.com
• 需要速度快 - 体验好
  • google.com
  • github.com
• 大流量 - 带宽为主
  • www.googleapis.com
    • Google 的云盘、对象存储
  • googlevideo.com
    • Youtube
  • svc.ms
    • OneDrive 下载
  • anonfiles.com
  • codeload.github.com
    • https://codeload.github.com/<org>/<repo>/tar.gz/refs/tags/<tag>
  • objects.githubusercontent.com
    • Github Release
  • googleusercontent.com
• google
  • goog
  • google
  • google.com
  • googleusercontent.com
  • gstatic.com
  • ggpht.com
    • google maps
    • profile
  • developers.google.com/maps/gmp-domains
• TG - AS62041 - core.telegram.org/resources/cidr.txt - ipinfo.io/AS62041
  • 91.108.56.0/22
    • 91.108.56.150
• nintendo
  • app.lp1.five.nintendo.net
  • atum.hac.lp1.d4c.nintendo.net - 主要下载 CDN
    • www.ping.cn/dns/atum.hac.lp1.d4c.nintendo.net
    • 23.56.180.81
    • 23.2.16.27
  • app-a03.lp1.npns.srv.nintendo.net
  • ctest.cdn.nintendo.net.akamaized.net
    • 网络检测
  • broker.lp1.npns.srv.nintendo.net
  • bcat-list-lp1.cdn.nintendo.net
  • buggerman/SwitchBlockerForPiHole
  • receive-lp1.er.srv.nintendo.net
    • 可以 blcok
    • Error Reporting
  • 香港 DNS:
    • 208.67.222.222
    • 208.67.220.220

Domains

• min-api.cryptocompare.com
• webpkgcache.com
• gas-api.metaswap.codefi.network
• amdc.alipay.com
  • HTTP DNS
  • curl -X POST amdc.alipay.com/squery
  • cxw620/AdGuard-Rules#3

ADGuard

114.114.114.114
114.114.115.115
223.5.5.5
223.6.6.6
[/facebook.com/github.com/github.io/goog/google/google.com/hbo.com/imdb.com/instagram.com/jp/medium.com/mega.nz/netflix.com/nordvpn.com/pornhub.com/quora.com/rarbg.to/rarbgprx.org/reddit.com/slack.com/spotify.com/t.co/telegram.org/thepiratebay.org/twitter.com/uk/whatsapp.com/wikileaks.org/wikipedia.org/wikiquote.org/wsj.com/xvideos.com/youtube.com/okx.com/okpool.top/]https://dns.cloudflare.com/dns-query
[/nintendo.net/nintendo.com/]208.67.222.222

• dns.pub/dns-query

Rules

• Loyalsoldier/v2ray-rules-dat
  • Enhanced edition of V2Ray rules dat files
• Loyalsoldier/clash-rules
  • Clash rules
• Loyalsoldier/surge-rules
  • Surge rules
• Loyalsoldier/geoip
  • Enhanced edition of geoip dat files
• DustinWin/clash-geosite
• MetaCubeX/meta-rules-dat
• felixonmars/dnsmasq-china-list
• blackmatrix7/ios_rule_script
  • iOS rule script
• SagerNet/sing-box
  • The universal proxy platform
• sing-box.sagernet.org/configuration/rule-set/adguard
• AdguardTeam/AdGuardSDNSFilter
  • AdGuard DNS filter
• peiyingyao/Rule-for-OCD
  • Rules for OCD
• Yu9191/wloc

Game

游戏主要以 IP 为判断标准，且大多需要 UDP 协议，传统代理试用 域名 作为判断标准

• 参考
  • FQrabbit/SSTap-Rule

Roblox

roblox.com
rbxcdn.com
rbxtrk.com
AS22697
AS11281

腾讯代理

roblox.cn
roblox.qq.com
robloxdev.cn

• Roblox AS22697
  • AS136766 Luobu IPv4
    • 中国, 深圳
  • bgp.he.net/AS22697
  • en.help.roblox.com/hc/en-us/articles/203312880-General-Connection-Problems
    • UDP 49152 - 65535
    • TCP: 3074
    • UDP: 88, 500, 3074, 3544, 4500

Nintendo

• t-00000000-lp1.lp1.t.npln.srv.nintendo.net
• baas.nintendo.net

Misc

• net4people/bbs
  • AGPL-3.0
  • Forum for discussing Internet censorship

Limits

• platform.openai.com/docs/supported-countries
• Netflix HK 只能看自有，不能看授权内容
• tv.apple.com
  • support.apple.com/zh-cn/HT204411

Testing

• HTTP 204 无内容（No Content）
• www.apple.com/library/test/success.html
• i.ytimg.com/generate_204
• www.gstatic.com/generate_204
• cp.cloudflare.com
• edge.microsoft.com/captiveportal/generate_204
• cp.cloudflare.com/generate_204
• www.qualcomm.cn/generate_204
• connectivity.samsung.com.cn/generate_204
• captiveportal.kuketz.de
• 中国国内
  • wifi.vivo.com.cn/generate_204
• 参考
  • imldy.cn/posts/99d42f85