Skip to content

Instantly share code, notes, and snippets.

@AlotOfBlahaj

AlotOfBlahaj/vless.sh

Last active November 29, 2025 15:14
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save AlotOfBlahaj/347c291f6b93feb1a7f2005a8d9fb0d9 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save AlotOfBlahaj/347c291f6b93feb1a7f2005a8d9fb0d9 to your computer and use it in GitHub Desktop.
Download ZIP
vless.sh
Raw
vless.sh
# 等待1秒, 避免curl下载脚本的打印与脚本本身的显示冲突, 吃掉了提示用户按回车继续的信息
sleep 1
echo -e " _ ___ \n ___ ___ __ __ ___ _| | _|___ __ __ _ ___ \n|-_ |_ | | |-_ | _ | |- _| | |_| |_ |\n|___|___| _ |___|___|_|_|___| _ |___|___|\n |_____| |_____| "
red='\e[91m'
green='\e[92m'
yellow='\e[93m'
magenta='\e[95m'
cyan='\e[96m'
none='\e[0m'
error() {
echo -e "\n$red 输入错误! $none\n"
}
warn() {
echo -e "\n$yellow $1 $none\n"
}
pause() {
read -rsp "$(echo -e "按 $green Enter 回车键 $none 继续....或按 $red Ctrl + C $none 取消.")" -d $'\n'
echo
}
# 说明
echo
echo -e "$yellow此脚本仅兼容于Debian 10+系统. 如果你的系统不符合,请Ctrl+C退出脚本$none"
echo -e "可以去 ${cyan}https://github.com/crazypeace/xray-vless-reality${none} 查看脚本整体思路和关键命令, 以便针对你自己的系统做出调整."
echo -e "有问题加群 ${cyan}https://t.me/+ISuvkzFGZPBhMzE1${none}"
echo -e "本脚本支持带参数执行, 省略交互过程, 详见GitHub."
echo "----------------------------------------------------------------"
# 本机 IP
InFaces=($(ls /sys/class/net/ | grep -E '^(eth|ens|eno|esp|enp|venet|vif)'))
for i in "${InFaces[@]}"; do # 从网口循环获取IP
# 增加超时时间, 以免在某些网络环境下请求IPv6等待太久
Public_IPv4=$(curl -4s --interface "$i" -m 2 https://www.cloudflare.com/cdn-cgi/trace | grep -oP "ip=\K.*$")
Public_IPv6=$(curl -6s --interface "$i" -m 2 https://www.cloudflare.com/cdn-cgi/trace | grep -oP "ip=\K.*$")
if [[ -n "$Public_IPv4" ]]; then # 检查是否获取到IP地址
IPv4="$Public_IPv4"
fi
if [[ -n "$Public_IPv6" ]]; then # 检查是否获取到IP地址
IPv6="$Public_IPv6"
fi
done
# 通过IP, host, 时区, 生成UUID. 重装脚本不改变, 不改变节点信息, 方便个人使用
uuidSeed=${IPv4}${IPv6}$(cat /proc/sys/kernel/hostname)$(cat /etc/timezone)
default_uuid=$(curl -sL https://www.uuidtools.com/api/generate/v3/namespace/ns:dns/name/${uuidSeed} | grep -oP '[^-]{8}-[^-]{4}-[^-]{4}-[^-]{4}-[^-]{12}')
# 如果你想使用纯随机的UUID
# default_uuid=$(cat /proc/sys/kernel/random/uuid)
# 执行脚本带参数
if [ $# -ge 1 ]; then
# 第1个参数是搭在ipv4还是ipv6上
case ${1} in
4)
netstack=4
ip=${IPv4}
;;
6)
netstack=6
ip=${IPv6}
;;
*) # initial
if [[ -n "$IPv4" ]]; then # 检查是否获取到IP地址
netstack=4
ip=${IPv4}
elif [[ -n "$IPv6" ]]; then # 检查是否获取到IP地址
netstack=6
ip=${IPv6}
else
warn "没有获取到公共IP"
fi
;;
esac
# 第2个参数是port
port=${2}
if [[ -z $port ]]; then
port=443
fi
# 第3个参数是域名
domain=${3}
if [[ -z $domain ]]; then
domain="learn.microsoft.com"
fi
# 第4个参数是UUID
uuid=${4}
if [[ -z $uuid ]]; then
uuid=${default_uuid}
fi
echo -e "$yellow netstack = ${cyan}${netstack}${none}"
echo -e "$yellow 本机IP = ${cyan}${ip}${none}"
echo -e "$yellow 端口 (Port) = ${cyan}${port}${none}"
echo -e "$yellow 用户ID (User ID / UUID) = $cyan${uuid}${none}"
echo -e "$yellow SNI = ${cyan}$domain${none}"
echo "----------------------------------------------------------------"
fi
pause
# 准备工作
apt update
apt install -y curl sudo jq qrencode net-tools lsof
# Xray官方脚本 安装最新版本
echo
echo -e "${yellow}Xray官方脚本安装最新版本$none"
echo "----------------------------------------------------------------"
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install
# 更新 geodata
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install-geodata
# 如果脚本带参数执行的, 要在安装了xray之后再生成默认私钥公钥shortID
if [[ -n $uuid ]]; then
#私钥种子
private_key=$(echo -n ${uuid} | md5sum | head -c 32 | base64 -w 0 | tr '+/' '-_' | tr -d '=')
#生成私钥公钥
tmp_key=$(echo -n ${private_key} | xargs xray x25519 -i)
private_key=$(echo ${tmp_key} | awk '{print $3}')
public_key=$(echo ${tmp_key} | awk '{print $6}')
#ShortID
shortid=$(echo -n ${uuid} | sha1sum | head -c 16)
echo
echo "私钥公钥要在安装xray之后才可以生成"
echo -e "$yellow 私钥 (PrivateKey) = ${cyan}${private_key}${none}"
echo -e "$yellow 公钥 (PublicKey) = ${cyan}${public_key}${none}"
echo -e "$yellow ShortId = ${cyan}${shortid}${none}"
echo "----------------------------------------------------------------"
fi
# 打开BBR
echo
echo -e "$yellow打开BBR$none"
echo "----------------------------------------------------------------"
sed -i '/net.ipv4.tcp_congestion_control/d' /etc/sysctl.conf
sed -i '/net.core.default_qdisc/d' /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control = bbr" >>/etc/sysctl.conf
echo "net.core.default_qdisc = fq" >>/etc/sysctl.conf
sysctl -p >/dev/null 2>&1
# 配置 VLESS_Reality 模式, 需要:端口, UUID, x25519公私钥, 目标网站
echo
echo -e "$yellow配置 VLESS_Reality 模式$none"
echo "----------------------------------------------------------------"
# 网络栈
if [[ -z $netstack ]]; then
echo
echo -e "如果你的小鸡是${magenta}双栈(同时有IPv4和IPv6的IP)${none}，请选择你把Xray搭在哪个'网口'上"
echo "如果你不懂这段话是什么意思, 请直接回车"
read -p "$(echo -e "Input ${cyan}4${none} for IPv4, ${cyan}6${none} for IPv6:") " netstack
if [[ $netstack == "4" ]]; then
ip=${IPv4}
elif [[ $netstack == "6" ]]; then
ip=${IPv6}
else
if [[ -n "$IPv4" ]]; then
ip=${IPv4}
netstack=4
elif [[ -n "$IPv6" ]]; then
ip=${IPv6}
netstack=6
else
warn "没有获取到公共IP"
fi
fi
fi
# 端口
if [[ -z $port ]]; then
default_port=443
while :; do
read -p "$(echo -e "请输入端口 [${magenta}1-65535${none}] Input port (默认Default ${cyan}${default_port}$none):")" port
[ -z "$port" ] && port=$default_port
case $port in
[1-9] | [1-9][0-9] | [1-9][0-9][0-9] | [1-9][0-9][0-9][0-9] | [1-5][0-9][0-9][0-9][0-9] | 6[0-4][0-9][0-9][0-9] | 65[0-4][0-9][0-9] | 655[0-3][0-5])
echo
echo
echo -e "$yellow 端口 (Port) = ${cyan}${port}${none}"
echo "----------------------------------------------------------------"
echo
break
;;
*)
error
;;
esac
done
fi
# Xray UUID
if [[ -z $uuid ]]; then
while :; do
echo -e "请输入 "$yellow"UUID"$none" "
read -p "$(echo -e "(默认ID: ${cyan}${default_uuid}$none):")" uuid
[ -z "$uuid" ] && uuid=$default_uuid
case $(echo -n $uuid | sed -E 's/[a-z0-9]{8}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{4}-[a-z0-9]{12}//g') in
"")
echo
echo
echo -e "$yellow UUID = $cyan$uuid$none"
echo "----------------------------------------------------------------"
echo
break
;;
*)
error
;;
esac
done
fi
# x25519公私钥
if [[ -z $private_key ]]; then
# 私钥种子
# x25519对私钥有一定要求, 不是任意随机的都满足要求, 所以下面这个字符串只能当作种子看待
reality_key_seed=$(echo -n ${uuid} | md5sum | head -c 32 | base64 -w 0 | tr '+/' '-_' | tr -d '=')
# 生成私钥公钥
# xray x25519 如果接收一个合法的私钥, 会生成对应的公钥. 如果接收一个非法的私钥, 会先"修正"为合法的私钥. 这个"修正"的过程, 会修改其中的一些字节
# https://github.dev/XTLS/Xray-core/blob/6830089d3c42483512842369c908f9de75da2eaa/main/commands/all/curve25519.go#L36
tmp_key=$(echo -n ${reality_key_seed} | xargs xray x25519 -i)
default_private_key=$(echo ${tmp_key} | awk '{print $2}')
default_public_key=$(echo ${tmp_key} | awk '{print $4}')
echo -e "请输入 "$yellow"x25519 Private Key"$none" x25519私钥 :"
read -p "$(echo -e "(默认私钥 Private Key: ${cyan}${default_private_key}$none):")" private_key
if [[ -z "$private_key" ]]; then
private_key=$default_private_key
public_key=$default_public_key
else
tmp_key=$(echo -n ${private_key} | xargs xray x25519 -i)
private_key=$(echo ${tmp_key} | awk '{print $2}')
public_key=$(echo ${tmp_key} | awk '{print $4}')
fi
echo
echo
echo -e "$yellow 私钥 (PrivateKey) = ${cyan}${private_key}$none"
echo -e "$yellow 公钥 (PublicKey) = ${cyan}${public_key}$none"
echo "----------------------------------------------------------------"
echo
fi
# ShortID
if [[ -z $shortid ]]; then
default_shortid=$(echo -n ${uuid} | sha1sum | head -c 16)
while :; do
echo -e "请输入 "$yellow"ShortID"$none" :"
read -p "$(echo -e "(默认ShortID: ${cyan}${default_shortid}$none):")" shortid
[ -z "$shortid" ] && shortid=$default_shortid
if [[ ${#shortid} -gt 16 ]]; then
error
continue
elif [[ $(( ${#shortid} % 2 )) -ne 0 ]]; then
# 字符串包含奇数个字符
error
continue
else
# 字符串包含偶数个字符
echo
echo
echo -e "$yellow ShortID = ${cyan}${shortid}$none"
echo "----------------------------------------------------------------"
echo
break
fi
done
fi
# 目标网站
if [[ -z $domain ]]; then
echo -e "请输入一个 ${magenta}合适的域名${none} Input the domain"
read -p "(例如: learn.microsoft.com): " domain
[ -z "$domain" ] && domain="learn.microsoft.com"
echo
echo
echo -e "$yellow SNI = ${cyan}$domain$none"
echo "----------------------------------------------------------------"
echo
fi
# 配置config.json
echo
echo -e "$yellow 配置 /usr/local/etc/xray/config.json $none"
echo "----------------------------------------------------------------"
cat > /usr/local/etc/xray/config.json <<-EOF
{ // VLESS + Reality
"log": {
"access": "/var/log/xray/access.log",
"error": "/var/log/xray/error.log",
"loglevel": "warning"
},
"inbounds": [
// [inbound] 如果你想使用其它翻墙服务端如(HY2或者NaiveProxy)对接v2ray的分流规则, 那么取消下面一段的注释, 并让其它翻墙服务端接到下面这个socks 1080端口
// {
// "listen":"127.0.0.1",
// "port":1080,
// "protocol":"socks",
// "sniffing":{
// "enabled":true,
// "destOverride":[
// "http",
// "tls"
// ]
// },
// "settings":{
// "auth":"noauth",
// "udp":false
// }
// },
{
"listen": "0.0.0.0",
"port": ${port}, // ***
"protocol": "vless",
"settings": {
"clients": [
{
"id": "${uuid}", // ***
"flow": "xtls-rprx-vision"
}
],
"decryption": "none"
},
"streamSettings": {
"network": "tcp",
"security": "reality",
"realitySettings": {
"show": false,
"dest": "${domain}:443", // ***
"xver": 0,
"serverNames": ["${domain}"], // ***
"privateKey": "${private_key}", // ***私钥
"shortIds": ["${shortid}"] // ***
}
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls", "quic"]
}
}
],
"outbounds": [
{
"protocol": "freedom",
"tag": "direct"
},
// [outbound]
{
"protocol": "freedom",
"settings": {
"domainStrategy": "UseIPv4"
},
"tag": "force-ipv4"
},
{
"protocol": "freedom",
"settings": {
"domainStrategy": "UseIPv6"
},
"tag": "force-ipv6"
},
{
"protocol": "socks",
"settings": {
"servers": [{
"address": "127.0.0.1",
"port": 40000 //warp socks5 port
}]
},
"tag": "socks5-warp"
},
{
"protocol": "blackhole",
"tag": "block"
}
],
"dns": {
"servers": [
"8.8.8.8",
"1.1.1.1",
"2001:4860:4860::8888",
"2606:4700:4700::1111",
"localhost"
]
},
"routing": {
"domainStrategy": "IPIfNonMatch",
"rules": [
// [routing-rule]
//{
// "type": "field",
// "domain": ["geosite:google", "geosite:openai"], // ***
// "outboundTag": "force-ipv6" // force-ipv6 // force-ipv4 // socks5-warp
//},
//{
// "type": "field",
// "domain": ["geosite:cn"], // ***
// "outboundTag": "force-ipv6" // force-ipv6 // force-ipv4 // socks5-warp // blocked
//},
//{
// "type": "field",
// "ip": ["geoip:cn"], // ***
// "outboundTag": "force-ipv6" // force-ipv6 // force-ipv4 // socks5-warp // blocked
//},
{
"type": "field",
"ip": ["geoip:private"],
"outboundTag": "block"
}
]
}
}
EOF
# 重启 Xray
echo
echo -e "$yellow重启 Xray$none"
echo "----------------------------------------------------------------"
service xray restart
# 指纹FingerPrint
fingerprint="random"
# SpiderX
spiderx=""
echo
echo "---------- Xray 配置信息 -------------"
echo -e "$green ---提示..这是 VLESS Reality 服务器配置--- $none"
echo -e "$yellow 地址 (Address) = $cyan${ip}$none"
echo -e "$yellow 端口 (Port) = ${cyan}${port}${none}"
echo -e "$yellow 用户ID (User ID / UUID) = $cyan${uuid}$none"
echo -e "$yellow 流控 (Flow) = ${cyan}xtls-rprx-vision${none}"
echo -e "$yellow 加密 (Encryption) = ${cyan}none${none}"
echo -e "$yellow 传输协议 (Network) = ${cyan}tcp$none"
echo -e "$yellow 伪装类型 (header type) = ${cyan}none$none"
echo -e "$yellow 底层传输安全 (TLS) = ${cyan}reality$none"
echo -e "$yellow SNI = ${cyan}${domain}$none"
echo -e "$yellow 指纹 (Fingerprint) = ${cyan}${fingerprint}$none"
echo -e "$yellow 公钥 (PublicKey) = ${cyan}${public_key}$none"
echo -e "$yellow ShortId = ${cyan}${shortid}$none"
echo -e "$yellow SpiderX = ${cyan}${spiderx}$none"
echo
echo "---------- VLESS Reality URL ----------"
if [[ $netstack == "6" ]]; then
ip=[$ip]
fi
vless_reality_url="vless://${uuid}@${ip}:${port}?flow=xtls-rprx-vision&encryption=none&type=tcp&security=reality&sni=${domain}&fp=${fingerprint}&pbk=${public_key}&sid=${shortid}&spx=${spiderx}&#VLESS_R_${ip}"
echo -e "${cyan}${vless_reality_url}${none}"
echo
sleep 3
echo "以下两个二维码完全一样的内容"
qrencode -t UTF8 $vless_reality_url
qrencode -t ANSI $vless_reality_url
echo
echo "---------- END -------------"
echo "以上节点信息保存在 ~/_vless_reality_url_ 中"
# 节点信息保存到文件中
echo $vless_reality_url > ~/_vless_reality_url_
echo "以下两个二维码完全一样的内容" >> ~/_vless_reality_url_
qrencode -t UTF8 $vless_reality_url >> ~/_vless_reality_url_
qrencode -t ANSI $vless_reality_url >> ~/_vless_reality_url_
# 如果是 IPv6 小鸡，用 WARP 创建 IPv4 出站
if [[ $netstack == "6" ]]; then
echo
echo -e "$yellow这是一个 IPv6 小鸡，用 WARP 创建 IPv4 出站$none"
echo "Telegram电报是直接访问IPv4地址的, 需要IPv4出站的能力"
echo -e "如果WARP安装不顺利, 请在命令行执行${cyan} bash <(curl -L https://ghproxy.crazypeace.workers.dev/https://github.com/crazypeace/warp.sh/raw/main/warp.sh) 4 ${none}"
echo "----------------------------------------------------------------"
pause
# 重启 Xray
echo
echo -e "$yellow重启 Xray$none"
echo "----------------------------------------------------------------"
service xray restart
# 如果是 IPv4 小鸡，用 WARP 创建 IPv6 出站
elif [[ $netstack == "4" ]]; then
echo
echo -e "$yellow这是一个 IPv4 小鸡，用 WARP 创建 IPv6 出站$none"
echo -e "有些热门小鸡用原生的IPv4出站访问Google需要通过人机验证, 可以通过修改config.json指定google流量走WARP的IPv6出站解决"
echo -e "群组: ${cyan} https://t.me/+ISuvkzFGZPBhMzE1 ${none}"
echo -e "教程: ${cyan} https://zelikk.blogspot.com/2022/03/racknerd-v2ray-cloudflare-warp--ipv6-google-domainstrategy-outboundtag-routing.html ${none}"
echo -e "视频: ${cyan} https://youtu.be/Yvvm4IlouEk ${none}"
echo -e "如果WARP安装不顺利, 请在命令行执行${cyan} bash <(curl -L https://ghproxy.crazypeace.workers.dev/https://github.com/crazypeace/warp.sh/raw/main/warp.sh) 6 ${none}"
echo "----------------------------------------------------------------"
pause
# 重启 Xray
echo
echo -e "$yellow重启 Xray$none"
echo "----------------------------------------------------------------"
service xray restart
fi
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment