GFW最怕的翻墙工具sing-box,搭建多用户共用的小机场-sing-box进阶教程

科学上网技术 > Sing-box Shadowrocket ShadowTLS sing-box
发布时间 :
字数:1.6k 阅读 : 评论:
  1. 前言
  2. sing-box配置原理及多用户共有配置示例
    1. sing-box配置通信流程
    2. 多用户共有配置示例
      1. 用户sekai,hebe共用服务端配置示例
      2. sekai用户的http-sock客户端配置
      3. sekai用户的http-sock客户端全局配置示例
      4. sekai用户的Tun客户端配置示例
      5. hebe用户的http-sock客户端配置示例
      6. hebe用户的Tun客户端配置
      7. hebe用户的Tun客户端全局配置示例
  3. Sing-box图形客户端使用：
  4. 常见错误解决办法：

[embed]https://youtu.be/Fxx\_s32KnVA\[/embed\]

前言

随着SagerNet作者持续“发烧”升级Sing-box，它的功能变得更强大，性能更加稳定。官方教程配置更新存在滞后，导致低版本程序无法套用现有的官方json配置。从v1.1.6版本为断点，1.1.6版本的，version最大只支持到2，而小于1.1.6的版本，默认version只支持1。即使自行修改配置version=3,程序也会报错无法运行。所以，如果你正在学习Sing-box官方配置，请一定要使用它最新版本程序。本期分享新版核心配置通信流程，展示多用户配置设置和sing-box全局配置代码示例，及各项疑难解答,算是sing-box进阶教程，如果你是新手，请先看“Sing-box新手教程”

sing-box配置原理及多用户共有配置示例

sing-box配置通信流程

通信按照以下两步骤执行： 1.先获取TLS握手： {浏览器} <–(socks/tun)–> {Sing-box 客户端 inbound <-> Sing-box 客户端 outbound} <–(shadowtls)–> {Sing-box 服务器 inbound <–（验证用户密码）–> Sing-box 服务器} <–(handshake)–> {www.bing.com} 2.获取握手后，识别流量走代理： {浏览器} <–(socks/tun)–> {Sing-box 客户端 inbound <-> Sing-box 客户端 outbound} <–(shadowsocks)–> {Sing-box 服务器 inbound <–（验证ss密码）–> Sing-box 服务器} <–(Freedom)–> {目标网站}

多用户共有配置示例

本文默认你有vps，并且已搭建升级好sing-box服务端，如果首次搭建sing-box服务端，请复制以下一键脚本安装。

wget -N –no-check-certificate https://raw.githubusercontent.com/lanhebe/singbox-shadowtls/main/mps\_Sing-box.sh && chmod +x mps_Sing-box.sh && bash mps_Sing-box.sh

以下用的是sing-box-1.2-beta10做的两人共用配置测试，如需增设用户数量，详见users突亮代码行依次增加。

如复制以下代码实验，请使用sing-box-1.2-beta10以上的高版本，否则启动会报错，无法运行。

用户sekai,hebe共用服务端配置示例

{
“inbounds”: [
{
“type”: “shadowtls”,
“listen”: “::”,
“listen_port”: 443,
“version”: 3,
“users”: [
{
“name”: “sekai”,
“password”: “ypGGDagcyFKCf5TYJyH0fw==”
},
{
“name”: “hebe”,
“password”: “1pGGDagcyFKCa8TYYyH0fw==”
}
],
“handshake”: {
“server”: “www.ebay.com“,
“server_port”: 443
},
“detour”: “shadowsocks-in”
},
{
“type”: “shadowsocks”,
“tag”: “shadowsocks-in”,
“listen”: “127.0.0.1”,
“network”: “tcp”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”
}
]
}

sekai用户的http-sock客户端配置

{
“inbounds”: [
{
“type”: “mixed”,
“listen_port”: 1080,
“sniff”: true,
“set_system_proxy”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“version”: 3,
“password”: “ypGGDagcyFKCf5TYJyH0fw==”,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
}
],
“route”: {
“rules”: [
{
“geosite”: “cn”,
“geoip”: “cn”,
“outbound”: “direct”
},
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}

\]

}
}

sekai用户的http-sock客户端全局配置示例

{
“inbounds”: [
{
“type”: “mixed”,
“listen_port”: 1080,
“sniff”: true,
“set_system_proxy”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“version”: 3,
“password”: “ypGGDagcyFKCf5TYJyH0fw==”,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
}
],
“route”: {
“rules”: [
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}
]
}
}

sekai用户的Tun客户端配置示例

{
“dns”: {
“servers”: [
{
“tag”: “google”,
“address”: “tls://8.8.8.8”
},
{
“tag”: “local”,
“address”: “223.5.5.5”,
“detour”: “direct”
}
],
“rules”: [
{
“geosite”: “cn”,
“server”: “local”
}
],
“strategy”: “ipv4_only”
},
“inbounds”: [
{
“type”: “tun”,
“inet4_address”: “172.19.0.1/30”,
“auto_route”: true,
“sniff”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“password”: “ypGGDagcyFKCf5TYJyH0fw==”,
“version”: 3,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
},
{
“type”: “dns”,
“tag”: “dns-out”
}
],
“route”: {
“rules”: [
{
“protocol”: “dns”,
“outbound”: “dns-out”
},
{
“geosite”: “cn”,
“geoip”: “cn”,
“outbound”: “direct”
},
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}
],
“auto_detect_interface”: true
}
}

hebe用户的http-sock客户端配置示例

{
“inbounds”: [
{
“type”: “mixed”,
“listen_port”: 1080,
“sniff”: true,
“set_system_proxy”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“version”: 3,
“password”: “1pGGDagcyFKCa8TYYyH0fw==”,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
}
],
“route”: {
“rules”: [
{
“geosite”: “cn”,
“geoip”: “cn”,
“outbound”: “direct”
},
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}

\]

}
}

hebe用户的Tun客户端配置

{
“dns”: {
“servers”: [
{
“tag”: “google”,
“address”: “tls://8.8.8.8”
},
{
“tag”: “local”,
“address”: “223.5.5.5”,
“detour”: “direct”
}
],
“rules”: [
{
“geosite”: “cn”,
“server”: “local”
}
],
“strategy”: “ipv4_only”
},
“inbounds”: [
{
“type”: “tun”,
“inet4_address”: “172.19.0.1/30”,
“auto_route”: true,
“sniff”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“password”: “1pGGDagcyFKCa8TYYyH0fw==”,
“version”: 3,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
},
{
“type”: “dns”,
“tag”: “dns-out”
}
],
“route”: {
“rules”: [
{
“protocol”: “dns”,
“outbound”: “dns-out”
},
{
“geosite”: “cn”,
“geoip”: “cn”,
“outbound”: “direct”
},
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}
],
“auto_detect_interface”: true
}
}

hebe用户的Tun客户端全局配置示例

{
“dns”: {
“servers”: [
{
“tag”: “google”,
“address”: “tls://8.8.8.8”
},
{
“tag”: “local”,
“address”: “223.5.5.5”,
“detour”: “direct”
}
],
“rules”: [
{
“geosite”: “cn”,
“server”: “local”
}
],
“strategy”: “ipv4_only”
},
“inbounds”: [
{
“type”: “tun”,
“inet4_address”: “172.19.0.1/30”,
“auto_route”: true,
“sniff”: true
}
],
“outbounds”: [
{
“type”: “shadowsocks”,
“method”: “2022-blake3-aes-128-gcm”,
“password”: “PAJdSIxI6tZdR0UqMtBaLQ==”,
“detour”: “shadowtls-out”,
“multiplex”: {
“enabled”: true,
“max_connections”: 4,
“min_streams”: 4
}
},
{
“type”: “shadowtls”,
“tag”: “shadowtls-out”,
“server”: “更改成自己IP”,
“server_port”: 443,
“password”: “1pGGDagcyFKCa8TYYyH0fw==”,
“version”: 3,
“tls”: {
“enabled”: true,
“server_name”: “www.ebay.com“
}
},
{
“type”: “direct”,
“tag”: “direct”
},
{
“type”: “block”,
“tag”: “block”
},
{
“type”: “dns”,
“tag”: “dns-out”
}
],
“route”: {
“rules”: [
{
“protocol”: “dns”,
“outbound”: “dns-out”
},
{
“geosite”: “category-ads-all”,
“outbound”: “block”
}
],
“auto_detect_interface”: true
}
}

以下图示是全局代理检测IP的结果页面：

Sing-box图形客户端使用：

Sing-box图形客户端使用教程详见此处，此处略。

常见错误解决办法：

  1. bad timestamp: received

    **原因：**客户端系统时间不正确；**解决办法：**纠正客户端系统时间为正确北京时间即可。

  2. client hello verify failed: hmac mismatch

    **原因：**password错误或没有设置；**解决办法：**检查两端密码是否设置一致，或一方增加密码设置。

  3. 客户端启动sing-box，自动退出。 **原因：**json配置与程序版本冲突;/json配置有误；**解决办法：**两端更新到最新版本再执行。

  4. **原因：**设置的TLS握手服务器拒绝请求或设置域名不存在。**解决办法：**更改两端tls 有效server_name

  5. CS两端增加version:3配置参数，无法成功启动。 **原因：**程序版本与配置不兼容。解决办法： v2.v3必须使用大于等于1.2-beta10版本以上Sing-box程序

如果你对sing-box搭建视频感兴趣，欢迎点击链接跳转观看!

如果本文对你非常有用！不妨点赞并转发，感谢支持！

转载请注明来源，欢迎指出任何有错误或不够清晰的表达。可以在下面评论区评论，也可以邮件至 lanhebe@gmail.com

赏

文章标题:GFW最怕的翻墙工具sing-box,搭建多用户共用的小机场-sing-box进阶教程

字数:1.6k

本文作者:Little yu技术分享

发布时间:2023-09-06, 11:05:40

最后更新:2026-05-06, 20:05:04

原始链接:https://lanhebe.github.io/2023/gfw%E6%9C%80%E6%80%95%E7%9A%84%E7%BF%BB%E5%A2%99%E5%B7%A5%E5%85%B7sing-box%E6%90%AD%E5%BB%BA%E5%A4%9A%E7%94%A8%E6%88%B7%E5%85%B1%E7%94%A8%E7%9A%84%E5%B0%8F%E6%9C%BA%E5%9C%BA-sing-box%E8%BF%9B/

版权声明: "署名-非商用-相同方式共享 4.0" 转载请保留原文链接及作者。

©2020-2026

Built with Hexo and 3-hexo theme

×

喜欢就点赞,疼爱就打赏