首页
站点状态
留言板
友链
推荐
VPS推荐
Search
1
搭建X-UI面板基础教程,支持多协议多用户的Xray 可视化面板
2,329 阅读
2
通过AMH搭建V2Board机场管理面板,并实现前后端分离教程
1,239 阅读
3
X-UI面板进阶教程,自定义DNS分流/多IP出口
1,046 阅读
4
一键部署Hysteria 2(歇斯底里)协议节点,基于UDP协议的暴力加速利器
809 阅读
5
CloudFlare WARP一键部署脚本,给服务器配置额外IP解锁NetFlix/ChatGPT等应用
766 阅读
恰饭类
管理面板
脚本工具
软件资源
Search
标签搜索
XUI面板
xui脚本
xui一键脚本
xui面板搭建教程
搭建ss节点
X-UI面板
xui
xui面板分流
xui面板多IP出口
xray多IP出口
xray自定义分流
xui多IP配置教程
xui解锁流媒体
Tinyproxy
Tinyproxy代理
Tinyproxy搭建教程
HTTP代理
HTTP代理搭建
HTTP多IP代理
ZeroPanel
SockAT
点此联系博主TG电报
累计撰写
9
篇文章
累计收到
10
条评论
首页
栏目
恰饭类
管理面板
脚本工具
软件资源
页面
站点状态
留言板
友链
推荐
VPS推荐
搜索到
1
篇与
的结果
2023-10-17
X-UI面板进阶教程,自定义DNS分流/多IP出口
在前文中我们介绍了XUI面板搭建基础教程,但实际使用过程中会用到更多样化的配置,比如给节点配置DNS流媒体解锁、根据不同情况分流至相应的服务出口、多IP出口地址,XUI面板采用的Xray核心框架,也就对应支持xray的自定义功能,本文对其详细配置进行说明。认识Xray三兄弟 1、进入到xui面板设置中,找到“xray 相关设置”,在这里是xray配置模板,修改其中的部分参数就能达到所需要的各种效果; 2、Xray配置主要有入站(inbounds)、出站(outbounds)、路由(routing)三大项,其中入站通过xui面板API获取,出站则表示流量怎么流出,路由则是把入口跟出口串联起来;DNS分流 1、常用情况下会用到DNS来分流解锁一些流媒体网站,进行域名分流在 inbounds 段新增代码开启流量识别功能,如下; "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "sniffing": { "enabled": true, "destOverride": ["http", "tls"] }, "tag": "api" } ] 2、在 outbounds 段内的首项配置中添加 "domainStrategy": "UseIP" 以使用内置的DNS功能,如下; "outbounds": [ { "protocol": "freedom", "settings": {"domainStrategy": "UseIP"} }, { "protocol": "blackhole", "settings": {}, "tag": "blocked" } ] 3、在配置文件末尾最后的括号内添加要走DNS解锁的分流网站域名规则等; "dns": { "servers": [ "8.8.8.8", { "address": "x.x.x.x", //DNS提供的解锁IP "port": 53, "domains": ["geosite:netflix"] //要解锁的网站或geo文件名 } ] } 4、完全版配置如下,可直接复制粘贴替换掉配置模板内容,注意修改DNS信息;{ "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "sniffing": { "enabled": true, "destOverride": ["http", "tls"] }, "tag": "api" } ], "outbounds": [ { "protocol": "freedom", "settings": {"domainStrategy": "UseIP"} }, { "protocol": "blackhole", "settings": {}, "tag": "blocked" } ], "policy": { "system": { "statsInboundDownlink": true, "statsInboundUplink": true } }, "routing": { "rules": [ { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" } ] }, "stats": {}, "dns": { "servers": [ "8.8.8.8", { "address": "x.x.x.x", "port": 53, "domains": ["geosite:netflix","geosite:disney"] } ] } }出口分流配置 设置不同的出站方式,然后通过路由串联tag或匹配规则的形式可以达到不同入站节点走不同出口、又或是分流不同域名流量,其中XUI面板生成的默认入站TAG格式为: inbound-端口号 ,对应入站列表内的每条节点; 示例1 :多个节点对应不同出口IP地址{ "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "tag": "api" } ], "outbounds": [ { "tag": "ip1", "sendThrough": "1.1.1.1", "protocol": "freedom", "settings": {} }, { "tag": "ip2", "sendThrough": "1.1.1.2", "protocol": "freedom", "settings": {} }, { "tag": "ip3", "sendThrough": "1.1.1.3", "protocol": "freedom", "settings": {} }, { "protocol": "freedom", "settings": {} }, { "protocol": "blackhole", "settings": {}, "tag": "blocked" } ], "policy": { "system": { "statsInboundDownlink": true, "statsInboundUplink": true } }, "routing": { "rules": [ { "inboundTag": [ "inbound-12881" ], "outboundTag": "ip1", "type": "field" }, { "inboundTag": [ "inbound-12882" ], "outboundTag": "ip2", "type": "field" }, { "inboundTag": [ "inbound-12883" ], "outboundTag": "ip3", "type": "field" }, { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" } ] }, "stats": {} }说明:在XUI入站列表中添加3个节点,端口分别是12881、12882、12883,配置模板中的出站项添加3段对应服务器上已绑定的多个IP地址(1.1.1.1、1.1.1.2、1.1.1.3)、自定义TAG是ip1/ip2/ip3,路由项通过入站TAG串联至自定义的出站TAG即可; 示例2 :socks5代理做出口{ "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "tag": "api" } ], "outbounds": [ { "tag": "sk-hk", "protocol": "socks", "settings": { "servers": [ { "address": "12.35.26.88", "ota": false, "port": 1568, "users": [ { "user": "usertest", "pass": "passwdtest" } ] } ] } }, { "protocol": "freedom", "settings": {} }, { "protocol": "blackhole", "settings": {}, "tag": "blocked" } ], "policy": { "system": { "statsInboundDownlink": true, "statsInboundUplink": true } }, "routing": { "rules": [ { "inboundTag": [ "inbound-12668" ], "outboundTag": "sk-hk", "type": "field" }, { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" } ] }, "stats": {} } 说明:出站项新增一段socks代理配置,address处填socks的IP地址、port填端口、user内分别填用户和密码、无用户密码则把“[”括号内留空,再通过路由指定12668入站节点走这个socks代理出站; 示例3 :自定义出口域名分流{ "api": { "services": [ "HandlerService", "LoggerService", "StatsService" ], "tag": "api" }, "inbounds": [ { "listen": "127.0.0.1", "port": 62789, "protocol": "dokodemo-door", "settings": { "address": "127.0.0.1" }, "sniffing": { "enabled": true, "destOverride": ["http", "tls"] }, "tag": "api" } ], "outbounds": [ { "tag": "sk-hk", "protocol": "socks", "settings": { "servers": [ { "address": "12.35.26.88", "ota": false, "port": 1568, "users": [ { "user": "usertest", "pass": "passwdtest" } ] } ] } }, { "protocol": "freedom", "settings": {} }, { "protocol": "blackhole", "settings": {}, "tag": "blocked" } ], "policy": { "system": { "statsInboundDownlink": true, "statsInboundUplink": true } }, "routing": { "rules": [ { "type": "field", "outboundTag": "sk-hk", "domain": ["geosite:netflix","openai.com"] }, { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" } ] }, "stats": {} } 说明:跟示例2一样的配置,但是在路由处则不是单独针对某个节点应用,而是匹配路由规则进行分流至socks代理出口,比如其中的Netflix GEO文件名和openai域名,当通过域名匹配时需在入站项开启流量嗅探功能,同时匹配规则需写全、以上仅为示例;比如openai网站使用的域名和接口有openai.com、cdn.auth0.com、azureedge.net等十几条域名规则。
2023年10月17日
1,046 阅读
8 评论
0 点赞