mirror of
https://github.com/samuelhbne/proxy-xray.git
synced 2025-12-16 12:17:06 +03:00
207 lines
9.3 KiB
Bash
Executable File
207 lines
9.3 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
DIR=`dirname $0`
|
|
DIR="$(cd $DIR; pwd)"
|
|
XCONF=/tmp/proxy-xray.json
|
|
|
|
usage() {
|
|
echo "proxy-xray <connection-options>"
|
|
echo " --lgp <VLESS-GRPC-PLN option> id@host:port:svcname"
|
|
echo " --lgr <VLESS-GRPC-RLTY option> id@host:port:svcname,d=fakedest.com,pub=xxxx[,shortId=abcd]"
|
|
echo " --lgt <VLESS-GRPC-TLS option> id@host:port:svcname"
|
|
echo " --lsp <VLESS-SPLT-PLN option> id@host:port:/webpath"
|
|
echo " --lst <VLESS-SPLT-TLS option> id@host:port:/webpath[,alpn=h3]"
|
|
echo " --lst3 <VLESS-SPLT-TLS-HTTP3 option> id@host:port:/webpath"
|
|
echo " --ltr <VLESS-TCP-RLTY option> id@host:port,d=dest.com,pub=xxxx[,shortId=abcd][,xtls]"
|
|
echo " --ltrx <VLESS-TCP-RLTY-XTLS option> id@host:port,d=dest.com,pub=xxxx[,shortId=abcd]"
|
|
echo " --ltt <VLESS-TCP-TLS option> id@host:port[,xtls]"
|
|
echo " --lttx <VLESS-TCP-TLS-XTLS option> id@host:port"
|
|
echo " --lwp <VLESS-WS-PLN option> id@host:port:/wspath"
|
|
echo " --lwt <VLESS-WS-TLS option> id@host:port:/wspath"
|
|
echo " --mtt <VMESS-TCP-TLS option> id@host:port"
|
|
echo " --mwp <VMESS-WS-PLN option> id@host:port:/wspath"
|
|
echo " --mwt <VMESS-WS-TLS option> id@host:port:/wspath"
|
|
echo " --ttt <TROJAN-TCP-TLS option> password@host:port"
|
|
echo " --twp <TROJAN-WS-PLN option> password@host:port:/wspath"
|
|
echo " --twt <TROJAN-WS-TLS option> password@host:port:/wspath"
|
|
echo " -d|--debug Start in debug mode with verbose output"
|
|
echo " -i|--stdin Read config from stdin instead of auto generation"
|
|
echo " -j|--json Json snippet to merge into the config. Say '{"log":{"loglevel":"info"}}'"
|
|
echo " --dns <upstream-DNS-ip> Designated upstream DNS server IP, 1.1.1.1 will be applied by default"
|
|
# echo " --dns-local <local-conf-file> Enable designated domain conf file. Like apple.china.conf"
|
|
echo " --dns-local-cn Enable China-accessible domains to be resolved in China"
|
|
echo " --domain-direct <domain-rule> Add a domain rule for direct routing, like geosite:geosite:geolocation-cn"
|
|
echo " --domain-proxy <domain-rule> Add a domain rule for proxy routing, like twitter.com or geosite:google-cn"
|
|
echo " --domain-block <domain-rule> Add a domain rule for block routing, like geosite:category-ads-all"
|
|
echo " --ip-direct <ip-rule> Add a ip-addr rule for direct routing, like 114.114.114.114/32 or geoip:cn"
|
|
echo " --ip-proxy <ip-rule> Add a ip-addr rule for proxy routing, like 1.1.1.1/32 or geoip:netflix"
|
|
echo " --ip-block <ip-rule> Add a ip-addr rule for block routing, like geoip:private"
|
|
echo " --cn-direct Add routing rules to avoid domains and IPs located in China being proxied"
|
|
echo " --rules-path <rules-dir-path> Folder path contents geoip.dat, geosite.dat and other rule files"
|
|
}
|
|
|
|
|
|
Jrules='{"rules":[]}'
|
|
|
|
TEMP=`getopt -o j:di --long lgp:,lgr:,lgt:,lsp:,lst:,lst3:,ltr:,ltrx:,ltt:,lttx:,lwp:,lwt:,mtt:,mwp:,mwt:,ttt:,twp:,twt:,stdin,debug,dns:,dns-local:,dns-local-cn,domain-direct:,domain-proxy:,domain-block:,ip-direct:,ip-proxy:,ip-block:,cn-direct,rules-path:json: -n "$0" -- $@`
|
|
if [ $? != 0 ] ; then usage; exit 1 ; fi
|
|
eval set -- "$TEMP"
|
|
while true ; do
|
|
case "$1" in
|
|
--lgp|--lgr|--lgt|--lsp|--lst|--ltr|--ltt|--lwp|--lwt|--mtt|--mwp|--mwt|--ttt|--twp|--twt)
|
|
subcmd=`echo "$1"|tr -d "\-\-"`
|
|
PXCMD="$DIR/proxy-${subcmd}.sh $2"
|
|
shift 2
|
|
;;
|
|
--ltrx|--lttx)
|
|
# Alias of --ltr|ltt options
|
|
subcmd=`echo $1|tr -d '\-\-'|tr -d x`
|
|
PXCMD="$DIR/proxy-${subcmd}.sh $2,xtls"
|
|
shift 2
|
|
;;
|
|
--lst3)
|
|
# Alias of --lst options
|
|
# splitHTTP is the only option for H3 support from Xray-Core so far.
|
|
subcmd=`echo $1|tr -d '\-\-'|tr -d 3`
|
|
PXCMD="$DIR/proxy-${subcmd}.sh $2,alpn=h3"
|
|
shift 2
|
|
;;
|
|
--dns)
|
|
DNS=$2
|
|
shift 2
|
|
;;
|
|
--dns-local)
|
|
DNSLOCAL+=($2)
|
|
shift 2
|
|
;;
|
|
--dns-local-cn)
|
|
DNSLOCAL+=("apple.china.conf")
|
|
DNSLOCAL+=("google.china.conf")
|
|
DNSLOCAL+=("bogus-nxdomain.china.conf")
|
|
DNSLOCAL+=("accelerated-domains.china.conf")
|
|
shift 1
|
|
;;
|
|
--cn-direct)
|
|
Jrules=`echo "${Jrules}" | jq --arg igndomain "geosite:apple-cn" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","domain":[$igndomain]}]'`
|
|
Jrules=`echo "${Jrules}" | jq --arg igndomain "geosite:google-cn" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","domain":[$igndomain]}]'`
|
|
Jrules=`echo "${Jrules}" | jq --arg igndomain "geosite:geolocation-cn" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","domain":[$igndomain]}]'`
|
|
Jrules=`echo "${Jrules}" | jq --arg igndomain "geosite:cn" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","domain":[$igndomain]}]'`
|
|
Jrules=`echo "${Jrules}" | jq --arg ignip "geoip:cn" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","ip":[$ignip]}]'`
|
|
shift 1
|
|
;;
|
|
--domain-direct)
|
|
Jrules=`echo "${Jrules}" | jq --arg igndomain "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","domain":[$igndomain]}]'`
|
|
shift 2
|
|
;;
|
|
--domain-proxy)
|
|
Jrules=`echo "${Jrules}" | jq --arg pxydomain "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"proxy","domain":[$pxydomain]}]'`
|
|
shift 2
|
|
;;
|
|
--domain-block)
|
|
Jrules=`echo "${Jrules}" | jq --arg blkdomain "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"block","domain":[$blkdomain]}]'`
|
|
shift 2
|
|
;;
|
|
--ip-direct)
|
|
Jrules=`echo "${Jrules}" | jq --arg ignip "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"direct","ip":[$ignip]}]'`
|
|
shift 2
|
|
;;
|
|
--ip-proxy)
|
|
Jrules=`echo "${Jrules}" | jq --arg pxyip "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"proxy","ip":[$pxyip]}]'`
|
|
shift 2
|
|
;;
|
|
--ip-block)
|
|
Jrules=`echo "${Jrules}" | jq --arg blkip "$2" \
|
|
'.rules += [{"type":"field","outboundTag":"block","ip":[$blkip]}]'`
|
|
shift 2
|
|
;;
|
|
--rules-path)
|
|
export XRAY_LOCATION_ASSET=$2
|
|
shift 2
|
|
;;
|
|
-j|--json)
|
|
INJECT+=("$2")
|
|
shift 2
|
|
;;
|
|
-i|--stdin)
|
|
exec /usr/local/bin/xray
|
|
shift 1
|
|
;;
|
|
-d|--debug)
|
|
DEBUG=1
|
|
shift 1
|
|
;;
|
|
--)
|
|
shift
|
|
break
|
|
;;
|
|
*)
|
|
usage;
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [ -z "${PXCMD}" ]; then >&2 echo -e "Missing Xray connection option.\n"; usage; exit 1; fi
|
|
|
|
# Add outbounds config
|
|
Joutbound=`$PXCMD`
|
|
if [ $? != 0 ]; then >&2 echo -e "${subcmd} Config failed: $PXCMD\n"; exit 2; fi
|
|
# First outbound will be the DEFAULT
|
|
Jroot=`jq -nc --argjson Joutbound "${Joutbound}" '.outbounds += [$Joutbound]'`
|
|
Jroot=`echo $Jroot|jq '.outbounds += [{"tag":"direct","protocol":"freedom"},{"tag":"blocked","protocol":"blackhole"}]'`
|
|
|
|
# Add inbounds config
|
|
if [ -z "${DNS}" ]; then DNS="1.1.1.1"; fi
|
|
JibDNS=`jq -nc --arg dns "${DNS}" \
|
|
'. +={"tag":"dns-in","port":5353,"listen":"0.0.0.0","protocol":"dokodemo-door","settings":{"address":$dns,"port":53,"network":"tcp,udp"}}'`
|
|
JibSOCKS=`jq -nc '. +={"tag":"socks","port":1080,"listen":"0.0.0.0","protocol":"socks","settings":{"udp":true}}'`
|
|
JibHTTP=`jq -nc '. +={"tag":"http","port":8123,"listen":"0.0.0.0","protocol":"http"}'`
|
|
Jroot=`echo $Jroot|jq --argjson JibDNS "${JibDNS}" --argjson JibSOCKS "${JibSOCKS}" --argjson JibHTTP "${JibHTTP}" \
|
|
'.inbounds += [$JibDNS,$JibSOCKS,$JibHTTP]'`
|
|
|
|
# Add routing config
|
|
Jrouting='{"routing":{"domainStrategy":"AsIs"}}'
|
|
Jrouting=`echo "${Jrouting}" |jq --argjson Jrules "${Jrules}" '.routing += $Jrules'`
|
|
Jroot=`echo $Jroot|jq --argjson Jrouting "${Jrouting}" '. += $Jrouting'`
|
|
|
|
# Add debug config
|
|
if [ -n "${DEBUG}" ]; then loglevel="debug"; else loglevel="warning"; fi
|
|
Jroot=`echo $Jroot| jq --arg loglevel "${loglevel}" '.log.loglevel |= $loglevel'`
|
|
|
|
# Merge injected json config
|
|
if [ -n "${INJECT}" ]; then
|
|
for JSON_IN in "${INJECT[@]}"
|
|
do
|
|
Jmerge=`jq -nc "${JSON_IN}"`
|
|
if [[ $? -ne 0 ]]; then echo "Invalid json ${JSON_IN}"; exit 1; fi
|
|
Jroot=`jq -n --argjson Jroot "${Jroot}" --argjson Jmerge "${Jmerge}" '$Jroot + $Jmerge'`
|
|
done
|
|
fi
|
|
|
|
# Add Dnsmasq config
|
|
if [ -n "${DNSLOCAL}" ]; then
|
|
for dnslocal in "${DNSLOCAL[@]}"
|
|
do
|
|
cp -a /etc/dnsmasq.disable/${dnslocal} /etc/dnsmasq.d/
|
|
done
|
|
fi
|
|
echo -e "no-resolv\nserver=127.0.0.1#5353" >/etc/dnsmasq.d/upstream.conf
|
|
# Enable external DNS service instead of sereve localy
|
|
sed -i 's/^[[:space:]]*local-service/# &/' /etc/dnsmasq.conf
|
|
/usr/sbin/dnsmasq
|
|
|
|
jq -n "$Jroot"
|
|
jq -n "$Jroot">$XCONF
|
|
/qrcode
|
|
exec /usr/local/bin/xray -c $XCONF
|