Shadowsocks¶

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16proxies:

- name: "ss1"

type: ss

server: server

port: 443

cipher: aes-128-gcm

password: "password"

udp: true

udp-over-tcp: false

udp-over-tcp-version: 2

ip-version: ipv4

plugin: obfs

plugin-opts:

mode: tls

smux:

enabled: false

通用字段

Cipher¶

AESCHACHA2022 Blake3LEA其他

方法

aes-128-ctr

aes-192-ctr

aes-256-ctr

aes-128-cfb

aes-192-cfb

aes-256-cfb

aes-128-gcm

aes-192-gcm

aes-256-gcm

aes-128-ccm

aes-192-ccm

aes-256-ccm

aes-128-gcm-siv

aes-256-gcm-siv

方法

chacha20-ietf

chacha20

xchacha20

chacha20-ietf-poly1305

xchacha20-ietf-poly1305

chacha8-ietf-poly1305

xchacha8-ietf-poly1305

方法

2022-blake3-aes-128-gcm

2022-blake3-aes-256-gcm

2022-blake3-chacha20-poly1305

方法

lea-128-gcm

lea-192-gcm

lea-256-gcm

方法

rabbit128-poly1305

aegis-128l

aegis-256

aez-384

deoxys-ii-256-128

rc4-md5

none

password¶

Shadowsocks 密码

udp-over-tcp¶

启用 UDP over TCP，默认 false

udp-over-tcp-version¶

UDP over TCP 的协议版本，默认 1。可选值 1/2。

插件¶

plugin¶

插件，支持 obfs/v2ray-plugin/gost-plugin/shadow-tls/restls/kcptun/jls

plugin-opts¶

插件设置

obfsv2ray-plugingost-pluginshadow-tlsrestlskcptunjls

1

2

3

4plugin: obfs

plugin-opts:

mode: tls

host: bing.com

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15 plugin: v2ray-plugin

plugin-opts:

mode: websocket # no QUIC now

# tls: true # wss

# 可使用 openssl x509 -noout -fingerprint -sha256 -inform pem -in yourcert.pem 获取

# 配置指纹将实现 SSL Pining 效果

# fingerprint: xxxx

# skip-cert-verify: true

# name-cert-verify: example.com

# host: bing.com

# path: "/"

# mux: true

# headers:

# custom: value

# v2ray-http-upgrade: false

1

2

3

4

5

6

7

8

9

10

11

12

13

14 plugin: gost-plugin

plugin-opts:

mode: websocket

# tls: true # wss

# 可使用 openssl x509 -noout -fingerprint -sha256 -inform pem -in yourcert.pem 获取

# 配置指纹将实现 SSL Pining 效果

# fingerprint: xxxx

# skip-cert-verify: true

# name-cert-verify: example.com

# host: bing.com

# path: "/"

# mux: true

# headers:

# custom: value

1

2

3

4

5

6 plugin: shadow-tls

client-fingerprint: chrome

plugin-opts:

host: "cloud.tencent.com"

password: "shadow_tls_password"

version: 2 # support 1/2/3

1

2

3

4

5

6

7

8

9

10

11

12 plugin: restls

client-fingerprint: chrome # 可以是chrome, ios, firefox, safari中的一个

plugin-opts:

host: "www.microsoft.com" # 应当是一个TLS 1.3 服务器

password: [YOUR_RESTLS_PASSWORD]

version-hint: "tls13"

# Control your post-handshake traffic through restls-script

# Hide proxy behaviors like "tls in tls".

# see https://github.com/3andne/restls/blob/main/Restls-Script:%20Hide%20Your%20Proxy%20Traffic%20Behavior.md

# 用restls剧本来控制握手后的行为，隐藏"tls in tls"等特征

# 详情：https://github.com/3andne/restls/blob/main/Restls-Script:%20%E9%9A%90%E8%97%8F%E4%BD%A0%E7%9A%84%E4%BB%A3%E7%90%86%E8%A1%8C%E4%B8%BA.md

restls-script: "300?100<1,400~100,350~100,600~100,300~200,300~100"

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26 plugin: kcptun

plugin-opts:

key: it's a secrect # pre-shared secret between client and server

crypt: aes # aes, aes-128, aes-128-gcm, aes-192, salsa20, blowfish, twofish, cast5, 3des, tea, xtea, xor, none, null

mode: fast # profiles: fast3, fast2, fast, normal, manual

conn: 1 # set num of UDP connections to server

autoexpire: 0 # set auto expiration time(in seconds) for a single UDP connection, 0 to disable

scavengettl: 600 # set how long an expired connection can live (in seconds)

mtu: 1350 # set maximum transmission unit for UDP packets

ratelimit: 0 # set maximum outgoing speed (in bytes per second) for a single KCP connection, 0 to disable. Also known as packet pacing

sndwnd: 128 # set send window size(num of packets)

rcvwnd: 512 # set receive window size(num of packets)

datashard: 10 # set reed-solomon erasure coding - datashard

parityshard: 3 # set reed-solomon erasure coding - parityshard

dscp: 0 # set DSCP(6bit)

nocomp: false # disable compression

acknodelay: false # flush ack immediately when a packet is received

nodelay: 0

interval: 50

resend: 0

sockbuf: 4194304 # per-socket buffer in bytes

smuxver: 1 # specify smux version, available 1,2

smuxbuf: 4194304 # the overall de-mux buffer in bytes

framesize: 8192 # smux max frame size

streambuf: 2097152 # per stream receive buffer in bytes, smux v2+

keepalive: 10 # seconds between heartbeats

1

2

3

4

5

6

7plugin: jls

client-fingerprint: chrome

plugin-opts:

host: "www.example.com"

username: "jls-user"

password: "jls-password"

# alpn: [h2, http/1.1]

2026年7月18日