This is my personal experience of setting up a v2ray server
- 2 Servers running Ubuntu 20.04 - One is your local server and one is your foreign server. I personally userd a dual core with 2 gb of ram for each, how ever a single core with 1 gb of ram is still more than enough.
- First make updates and upgrades
sudo apt-get update -y
sudo apt-get upgrade -y
sudo apt install software-properties-common
sudo apt install python3 python3-venv libaugeas0
sudo python3 -m venv /opt/certbot/
sudo /opt/certbot/bin/pip install --upgrade pip
sudo /opt/certbot/bin/pip install certbot certbot-nginx
sudo ln -s /opt/certbot/bin/certbot /usr/bin/certbot
- Download Run the v2-ui installation script on each of your servers.
bash <(curl -Ls https://raw.githubusercontent.com/FranzKafkaYu/x-ui/master/install_en.sh)
-
Point your domains (or subdomains) to your servers with an A record.
-
Use certbot to get SSL Certificate. Use your email address and domain name.
sudo certbot certonly --standalone --preferred-challenges http --agree-tos --email your-email-address -d your-domain.com
If you get a note like “Congratulations!..”, it means that now you have SSL certificate for your domain/sub-domain.
- Install BBR script for better speed
wget -N --no-check-certificate https://github.com/teddysun/across/raw/master/bbr.sh && chmod +x bbr.sh && bash bbr.sh
6. Add ssl to your x-ui pannel
To enable HTTPS, choose 面板设置 (Panel settings). You will need to specify your certificate and key.
面板证书公钥文件路径
填写一个 '/' 开头的绝对路径，重启面板生效
Panel certificate public key file path
Fill in an absolute path starting with'/', restart the panel to take effect
/etc/letsencrypt/live/your-domain.com/fullchain.pem
面板证书密钥文件路径
填写一个 '/' 开头的绝对路径，重启面板生效
Panel certificate key file path
Fill in an absolute path starting with'/', restart the panel to take effect
/etc/letsencrypt/live/your-domain.com/privkey.pem
- Install Iran Hosted Domains file on your local server
sudo -i
cd /usr/local/x-ui/bin
wget https://github.com/bootmortis/iran-hosted-domains/releases/latest/download/iran.dat
wget https://github.com/v2fly/domain-list-community/releases/latest/download/dlc.dat
- Make an inbound user in your foreign server and write down your id and port
protocol: vless
port: (one of ports above)
443
2053
2083
2087
2096
8443
transmission: ws
- Edit xray related settings (xray 相关设置) in your local server to connect to your foreign and exclude local domains
{
"api": {
"services": [
"HandlerService",
"LoggerService",
"StatsService"
],
"tag": "api"
},
"servers": [
{
"address": "https://1.1.1.1/dns-query",
"domains": [
"geosite:geolocation-!ir",
"geosite:google@ir"
],
"expectIPs": [
"geoip:!ir"
]
},
"1.1.1.1",
{
"address": "localhost",
"skipFallback": true
}
],
"queryStrategy": "UseIP"
},
"inbounds": [
{
"listen": "127.0.0.1",
"port": 62789,
"protocol": "dokodemo-door",
"settings": {
"address": "127.0.0.1"
},
"tag": "api"
}
],
"outbounds": [
{
"tag": "proxy",
"protocol": "vmess",
"settings": {
"vnext": [
{
"address": "your-forgen-foreign.com",
"port": your-foreign-port,
"users": [
{
"id": "your-foreign-id",
"alterId": 0
}
]
}
]
},
"streamSettings": {
"network": "ws",
"security": "none",
"wsSettings": {
"path": "/",
"headers": {}
}
},
"mux": {
"enabled": true
}
},
{
"tag": "direct",
"protocol": "freedom",
"settings": {}
}
],
"inboundDetour": null,
"outboundDetour": [
{
"protocol": "freedom",
"tag": "freedom"
},
{
"protocol": "blackhole",
"tag": "blackhole"
}
],
"policy": {
"system": {
"statsInboundDownlink": true,
"statsInboundUplink": true
}
},
"routing": {
"domainStrategy": "IPIfNonMatch",
"rules": [
{
"inboundTag": [
"api"
],
"outboundTag": "api",
"type": "field"
},
{
"ip": [
"geoip:private"
],
"outboundTag": "blocked",
"type": "field"
},
{
"outboundTag": "blocked",
"protocol": [
"bittorrent"
],
"type": "field"
},
{
"outboundTag": "blocked",
"domain": [
"geosite:category-porn"
],
"type": "field"
},
{
"type": "field",
"outboundTag": "direct",
"domain": [
"regexp:.*\\.ir$",
"ext:iran.dat:ir",
"ext:iran.dat:other",
"geosite:category-ir-gov",
"geosite:category-ir-news",
"geosite:category-ir-bank",
"geosite:category-ir-tech",
"geosite:category-ir-travel",
"geosite:category-ir-shopping",
"geosite:category-ir-insurance",
"geosite:category-ir-scholar",
"snapp", "digikala","tapsi", "blogfa", "bank", "sb24.com", "sheypoor.com", "tebyan.net", "beytoote.com", "telewebion.com", "Film2movie.ws", "Setare.com", "Filimo.com", "Torob.com", "Tgju.org", "Sarzamindownload.com", "downloadha.com", "P30download.com", "Sanjesh.org"
]
},
{
"type": "field",
"outboundTag": "direct",
"ip": [
"geoip:ir"
]
}
]
},
"stats": {}
}
-
Enjoy!
-
BTW Don't forget to setup an iptables firewall!
- allow port 22 for ssh
- allow port 80 and 433 just incase
- allow your admin panel port (default is 54321 unless you changed it during the installation)
- allow port 62789
- allow your inbound user ports
vmess-ws-tls is supported by clash, use https://v2rayse.com/en/v2ray-clash/ to convert it to a clash config. Enjoy!
Windows / Mac / Linux : https://github.com/Fndroid/clash_for_windows_pkg/releases
Android: https://github.com/Kr328/ClashForAndroid/releases
Windows:
Qv2ray : https://github.com/Qv2ray/Qv2ray/releases/download/v2.7.0/Qv2ray-v2.7.0-Windows-Installer.exe
V2rayN : https://github.com/2dust/v2rayN/releases
Mac:
Qv2ray : https://github.com/Qv2ray/Qv2ray/releases/download/v2.7.0/Qv2ray-v2.7.0-macOS-x64.dmg
V2RayX : https://github.com/Cenmrev/V2RayX/releases/
Linux:
Qv2ray : https://github.com/Qv2ray/Qv2ray/releases/download/v2.7.0/Qv2ray-v2.7.0-linux-x64.AppImage
V2ray Core: https://github.com/v2fly/v2ray-core/releases
Android:
V2rayNG : https://github.com/2dust/v2rayNG/releases
IOS:
91VPN : https://apps.apple.com/us/app/91vpn/id1483753706
OneClick - Safe, Easy & Fast : https://apps.apple.com/us/app/id1545555197
- https://privacymelon.com/how-to-setup-v2ray-ws-tls-cdn/
- https://privacymelon.com/how-to-install-vless-xtls-xray-core/
- https://seakfind.github.io/2021/10/10/X-UI/
- https://gist.github.com/mahmoud-eskandari/960899f3494a1bffa1a29631dbaf0aee
- https://github.com/SamadiPour/iran-hosted-domains
- https://github.com/proxykingdev/x-ui
- https://github.com/vaxilu/x-ui
- https://github.com/XIU2/CloudflareSpeedTest/releases
- https://github.com/iranxray/hope/blob/main/routing.md
- https://youtu.be/xzuMnxEw97U
- https://github.com/MortezaBashsiz/CFScanner
- http:https://bot.sudoer.net/best.cf.iran