Categories: Sing-box

GFW最怕的翻墙工具sing-box,搭建多用户共用的小机场-sing-box进阶教程

前言

随着SagerNet作者持续“发烧”升级Sing-box，它的功能变得更强大，性能更加稳定。官方教程配置更新存在滞后，导致低版本程序无法套用现有的官方json配置。从v1.1.6版本为断点，1.1.6版本的，version最大只支持到2，而小于1.1.6的版本，默认version只支持1。即使自行修改配置version=3,程序也会报错无法运行。所以，如果你正在学习Sing-box官方配置，请一定要使用它最新版本程序。本期分享新版核心配置通信流程，展示多用户配置设置和sing-box全局配置代码示例，及各项疑难解答,算是sing-box进阶教程，如果你是新手，请先看“Sing-box新手教程”

sing-box配置原理及多用户共有配置示例

sing-box配置通信流程

通信按照以下两步骤执行：
1.先获取TLS握手：
{浏览器} <–(socks/tun)–> {Sing-box 客户端 inbound <-> Sing-box 客户端 outbound} <–(shadowtls)–> {Sing-box 服务器 inbound <–（验证用户密码）–> Sing-box 服务器} <–(handshake)–> {www.bing.com}
2.获取握手后，识别流量走代理：
{浏览器} <–(socks/tun)–> {Sing-box 客户端 inbound <-> Sing-box 客户端 outbound} <–(shadowsocks)–> {Sing-box 服务器 inbound <–（验证ss密码）–> Sing-box 服务器} <–(Freedom)–> {目标网站}

多用户共有配置示例

本文默认你有vps，并且已搭建升级好sing-box服务端，如果首次搭建sing-box服务端，请复制以下一键脚本安装。 

wget -N --no-check-certificate https://raw.githubusercontent.com/lanhebe/singbox-shadowtls/main/mps_Sing-box.sh && chmod +x mps_Sing-box.sh && bash mps_Sing-box.sh

以下用的是sing-box-1.2-beta10做的两人共用配置测试，如需增设用户数量，详见users突亮代码行依次增加。

如复制以下代码实验，请使用sing-box-1.2-beta10以上的高版本，否则启动会报错，无法运行。

用户sekai,hebe共用服务端配置示例

{
  "inbounds": [
    {
      "type": "shadowtls",
      "listen": "::",
      "listen_port": 443,
      "version": 3,
      "users": [
        {
          "name": "sekai",
          "password": "ypGGDagcyFKCf5TYJyH0fw=="
        },
        {
          "name": "hebe",
          "password": "1pGGDagcyFKCa8TYYyH0fw=="
        }
      ],
      "handshake": {
        "server": "www.ebay.com",
        "server_port": 443
      },
      "detour": "shadowsocks-in"
    },
    {
      "type": "shadowsocks",
      "tag": "shadowsocks-in",
      "listen": "127.0.0.1",
      "network": "tcp",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ=="
    }
  ]
}

sekai用户的http-sock客户端配置

{
  "inbounds": [
    {
      "type": "mixed",
      "listen_port": 1080,
      "sniff": true,
      "set_system_proxy": true
    }
  ],
  "outbounds": [
   {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "version": 3,
      "password": "ypGGDagcyFKCf5TYJyH0fw==",
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "geosite": "cn",
        "geoip": "cn",
        "outbound": "direct"
      },
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }

    ]
  }
}

sekai用户的http-sock客户端全局配置示例

{
  "inbounds": [
    {
      "type": "mixed",
      "listen_port": 1080,
      "sniff": true,
      "set_system_proxy": true
    }
  ],
  "outbounds": [
   {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "version": 3,
      "password": "ypGGDagcyFKCf5TYJyH0fw==",
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }
    ]
  }
}

sekai用户的Tun客户端配置示例

{
  "dns": {
    "servers": [
      {
        "tag": "google",
        "address": "tls://8.8.8.8"
      },
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "geosite": "cn",
        "server": "local"
      }
    ],
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "inet4_address": "172.19.0.1/30",
      "auto_route": true,
      "sniff": true
    }
  ],
  "outbounds": [
    {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "password": "ypGGDagcyFKCf5TYJyH0fw==",
       "version": 3,
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": "dns",
        "outbound": "dns-out"
      },
      {
        "geosite": "cn",
        "geoip": "cn",
        "outbound": "direct"
      },
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }
    ],
    "auto_detect_interface": true
  }
}

hebe用户的http-sock客户端配置示例

{
  "inbounds": [
    {
      "type": "mixed",
      "listen_port": 1080,
      "sniff": true,
      "set_system_proxy": true
    }
  ],
  "outbounds": [
   {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "version": 3,
      "password": "1pGGDagcyFKCa8TYYyH0fw==",
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "geosite": "cn",
        "geoip": "cn",
        "outbound": "direct"
      },
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }

    ]
  }
}

hebe用户的Tun客户端配置

{
  "dns": {
    "servers": [
      {
        "tag": "google",
        "address": "tls://8.8.8.8"
      },
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "geosite": "cn",
        "server": "local"
      }
    ],
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "inet4_address": "172.19.0.1/30",
      "auto_route": true,
      "sniff": true
    }
  ],
  "outbounds": [
    {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "password": "1pGGDagcyFKCa8TYYyH0fw==",
       "version": 3,
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": "dns",
        "outbound": "dns-out"
      },
      {
        "geosite": "cn",
        "geoip": "cn",
        "outbound": "direct"
      },
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }
    ],
    "auto_detect_interface": true
  }
}

hebe用户的Tun客户端全局配置示例

{
  "dns": {
    "servers": [
      {
        "tag": "google",
        "address": "tls://8.8.8.8"
      },
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "geosite": "cn",
        "server": "local"
      }
    ],
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "inet4_address": "172.19.0.1/30",
      "auto_route": true,
      "sniff": true
    }
  ],
  "outbounds": [
    {
      "type": "shadowsocks",
      "method": "2022-blake3-aes-128-gcm",
      "password": "PAJdSIxI6tZdR0UqMtBaLQ==",
      "detour": "shadowtls-out",
      "multiplex": {
        "enabled": true,
        "max_connections": 4,
        "min_streams": 4
      }
    },
    {
      "type": "shadowtls",
      "tag": "shadowtls-out",
      "server": "更改成自己IP",
      "server_port": 443,
      "password": "1pGGDagcyFKCa8TYYyH0fw==",
       "version": 3,
      "tls": {
        "enabled": true,
        "server_name": "www.ebay.com"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": "dns",
        "outbound": "dns-out"
      },
      {
        "geosite": "category-ads-all",
        "outbound": "block"
      }
    ],
    "auto_detect_interface": true
  }
}

以下图示是全局代理检测IP的结果页面：

Sing-box图形客户端使用：

Sing-box图形客户端使用教程详见此处，此处略。

常见错误解决办法：

  1. bad timestamp: received

    原因：客户端系统时间不正确；解决办法：纠正客户端系统时间为正确北京时间即可。

  2. client hello verify failed: hmac mismatch

    原因：password错误或没有设置；解决办法：检查两端密码是否设置一致，或一方增加密码设置。

  3. 客户端启动sing-box，自动退出。
    原因：json配置与程序版本冲突;/json配置有误；解决办法：两端更新到最新版本再执行。

  4. 原因：设置的TLS握手服务器拒绝请求或设置域名不存在。解决办法：更改两端tls 有效server_name
  5. CS两端增加version:3配置参数，无法成功启动。
    原因：程序版本与配置不兼容。解决办法： v2.v3必须使用大于等于1.2-beta10版本以上Sing-box程序
如果你对sing-box搭建视频感兴趣，欢迎点击链接跳转观看!

如果本文对你非常有用！不妨点赞并转发，感谢支持！

Little yu

Leave a Comment
Share
Published by
Little yu
Tags: ShadowrocketShadowTLSsing-box
2年 ago

Recent Posts

一键脚本激活win11专业版和office365全家桶软件，永久有效！

前言 很多网友安装win11新…

10月 ago

搬瓦工等VPS，你必学的专项技能——SSH Key密钥设置与使用

前言 SSH默认使用密码验证登…

11月 ago

世界级CN2 GIA最优质线路搬瓦工VPS服务器购买方案推荐，附目前最大折扣优惠码

前言 搬瓦工已是老牌VPS供应…

1年 ago

不花一分钱，一键轻松部署，Replit科学翻墙不是梦

前言 在YouTube频道我曾…

1年 ago

一键脚本轻松搭建hysteria2，榨干宽带，2024主流翻墙技术，全平台客户端支持

前言 我曾在2022年分享过早…

2年 ago

分享sing-box的ShadowTLS协议应用超详细保姆教程，打破Shadowsocks被墙僵局

前言 sing-box可能是2…

3年 ago