掌握科学上网的方法

最近因为apple music的关系,国内一直听得断断续续,没办法,最后只有尝试用传说中的“SS”来翻出去才能流畅的听了。吐槽一下水果的服务器,真是够了!

闲话少说,如果不想动手呢,那就到网上去买账号吧,但是安全性,真的不好说,如果要自己动手来,那么往下看喽:

 

centos和debian都可以,但是如果想做多用户限制一下流量那就需要一个小工具:ss-bash,通过这个工具就可以做流量限制!作者建议使用debian系统,详细使用方法往后看。

 

首先我们要安装ss的服务端,网上已经有大神写好了现成的脚本,方便大家了具体步骤:

 

1.wget –no-check-certificate https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks.sh   //下载脚本文件
2.chmod +x shadowsocks.sh    //设置可执行权限
3../shadowsocks.sh 2>&1 | tee shadowsocks.log      //保存安装日志

安装开始后会提示你输入你的端口和密码,这个根据自己需求来改。默认也可以,安装后可以自己修改。

Congratulations, shadowsocks install completed!
Your Server IP: x.x.x.x
Your Server Port: xxxx
Your Password: xxxx
Your Local IP: 127.0.0.1
Your Local Port: 1080
Your Encryption Method: aes-256-cfb

到这步基本就已经安装成功了,ss的配置文件在/etc/shadowsocks.json

默认的文件为单用户,如果你需要设置多端口用户需要修改一下:

{
“server”:”0.0.0.0″,
“local_address”:”127.0.0.1″,
“local_port”:1080,
“port_password”:{
“8989”:”password0″,
“9001”:”password1″,
“9002”:”password2″,
“9003”:”password3″,
“9004”:”password4″
},
“timeout”:300,
“method”:”aes-256-cfb”,
“fast_open”: false
}

常用命令:

启动:/etc/init.d/shadowsocks start
停止:/etc/init.d/shadowsocks stop
重启:/etc/init.d/shadowsocks restart
状态:/etc/init.d/shadowsocks status

至此ss部分搞定!然后我们去下载ss-bash,需要注意的事项:

  • 目前只支持python版Shadowsocks
  • 目前只支持统计ipv4流量

顺便把工作原理也粘一下吧:

不同的用户分配不同端口,使用iptables规则获取各端口的流量,脚本循环运行,在固定时间间隔根据iptables结果统计流量使用情况,并在流量超过限制时,添加对应端口的iptables reject规则以禁用端口。

 

好,现在来下载:

wget https://github.com/hellofwy/ss-bash/archive/v1.0-beta.3.tar.gz

然后解压到你指定的目录下

         tar zxvf v1.0-beta.3.tar.gz

首次运行时需要创建可管理的用户,例如:

sudo ./ssadmin.sh add 8388(端口号) passwd(密码) 10G(限制流量数)


然后启动sssserver:

sudo ./ssadmin.sh start


当启动成功后,你做得操作就生效了,当此端口用户使用流量达到阈值时就会断掉ss。

小贴士:需要bc计算器的支持,如果没安装的话debian安装命令为:sudo apt-get install bc    CENTOS安装命令:yum install bc      注意要在联网情况下

基本上上述操作做完之后就可以使用了,当然如果你想更详细的去自定义,我也摘抄了一份原作者的说明:

 

自定义ssserver的配置

打开文件ssmlt.template,添加相关选项。

请注意每个选项后必需有逗号(’,’)

默认选项为:

"server": "0.0.0.0",
"timeout": 60,
"method": "aes-256-cfb",

比如添加fastopen和worker选项后:

"server": "0.0.0.0",
"timeout": 60,
"method": "aes-256-cfb",
"fast_open": true,
"workers": 5,

修改之后,如果ssserver正在运行,请执行下面命令,重新加载文件并启动:

sudo ss-bash/ssadmin.sh soft_restart

修改流量统计间隔

默认的流量采样间隔为5分钟

流量间隔可根据实际需求调整,但最好不要太小,比如小于10秒

打开文件sslib.sh,修改INTERVEL的值,单位为秒。比如设置流量间隔为10分钟:

INTERVEL=600

修改ssserver文件位置

如果shadowsocks不是使用apt-get或者pip安装,无法自动找到ssserver文件时,请手动指定程序的具体位置。

打开文件sslib.sh,修改SSSERVER的值,比如ssserver的路径为/usr/local/bin/ssserver时,修改为

SSSERVER=/usr/local/bin/ssserver

文件夹中的相关文件

  • ssadmin.sh – 管理程序,所有命令通过该程序执行
  • sscounter.sh – 流量统计程序。由ssadmin.sh自动调用执行,注意:不要手动运行该程序
  • sslib.sh – 包含一些参数配置和流量统计函数。由ssadmin.sh自动调用执行,注意:不要手动运行该程序
  • ssmlt.template – ssserver的配置文件

程序运行后,会产生以下文件:

  • ssmlt.json – 根据用户列表和ssmlt.template生成的ssserver实际使用的配置文件
  • ssusers – 用户列表,包括端口、密码、流量限制参数。ssadmin.sh showpw 命令,显示该文件内容。
  • sstraffic – 用户流量使用情况,包括流量限制,已用流量,剩余流量等。ssadmin.sh show 命令,显示该文件内容。
  • traffic.log – 用户流量记录,供程序内部使用。
  • 其它文件 – .tmp、.lock、.pid等文件、文件夹tmp及其中文件为程序内部使用文件,请不要手动删除。

 

下面为帮助文件:

 

用法:
显示版本:
ssadmin.sh -v|v|version
显示帮助:
ssadmin.sh [-h|h|help]
启动ss:
ssadmin.sh start
停止ss:
ssadmin.sh stop
查看ss状态:
ssadmin.sh status
重启ss:
ssadmin.sh restart
软重启ss:
ssadmin.sh soft_restart
在不影响现有连接的情况下重启ss服务。用于ss服务参数修改,
和手动直接修改配置文件后,重启ss服务。
添加用户:
ssadmin.sh add port passwd limit
port:端口号, 0<port<=65535
passwd:密码, 不能有空格,引号等字符
limit:流量限制,可以用K/M/G/T、KB/MB/GB/TB等(不区
分大小写)。支持小数。比如10.5G、10.5GB等。
1KB=1024 bytes,以此类推。
示例: ssadmin.sh add 3333 abcde 10.5G
显示用户流量信息:
ssadmin.sh show port
显示所有用户流量信息:
ssadmin.sh show
显示用户密码信息:
ssadmin.sh showpw port
显示所有用户密码信息:
ssadmin.sh showpw
删除用户:
ssadmin.sh del port
修改用户:
ssadmin.sh change port passwd limit
修改用户密码:
ssadmin.sh cpw port passwd
修改用户流量限制:
ssadmin.sh clim port limit
修改所有用户流量限制:
ssadmin.sh change_all_limit limit
用户流量使用量置零:
ssadmin.sh rused limit
所有用户流量使用量置零:
ssadmin.sh reset_all_used
用户流量限制置零:
ssadmin.sh rlim port
全部用户流量限制置零:
ssadmin.sh reset_all_limit
显示已添加的iptables规则:
ssadmin.sh lrules
分享到:

104 条评论

昵称
  1. erection rings

    Sites of interest we have a link to

  2. here are some links to web-sites that we link to simply because we believe they’re really worth visiting

  3. we like to honor quite a few other internet web sites around the net, even though they arent linked to us, by linking to them. Underneath are some webpages really worth checking out

  4. one of our visitors just lately recommended the following website

  5. Google

    Every after inside a when we select blogs that we read. Listed below would be the latest websites that we decide on.

  6. please take a look at the internet sites we follow, which includes this one particular, as it represents our picks in the web

  7. The details mentioned within the article are a few of the most effective accessible

  8. Here is an excellent Weblog You may Uncover Exciting that we Encourage You

  9. vaginal balls

    although web sites we backlink to below are considerably not connected to ours, we feel they may be basically worth a go through, so possess a look

  10. dp cock ring

    here are some hyperlinks to web pages that we link to simply because we think they may be really worth visiting

  11. please take a look at the sites we follow, which includes this a single, as it represents our picks from the web

  12. just beneath, are quite a few entirely not connected web-sites to ours, even so, they are surely really worth going over

  13. one of our visitors not too long ago recommended the following website

  14. Here is a good Blog You may Uncover Exciting that we Encourage You

  15. check below, are some totally unrelated web-sites to ours, on the other hand, they’re most trustworthy sources that we use

  16. please check out the web sites we stick to, like this a single, because it represents our picks through the web

  17. dong

    Sites of interest we’ve a link to

  18. The info talked about inside the post are several of the very best accessible

  19. Cenforce-50

    Sites of interest we have a link to

  20. always a massive fan of linking to bloggers that I love but really don’t get quite a bit of link appreciate from

  21. Porn Land

    one of our guests lately encouraged the following website

  22. The info mentioned in the report are a number of the very best offered

  23. Here are some of the internet sites we advocate for our visitors

  24. Wonderful story, reckoned we could combine several unrelated information, nevertheless definitely really worth taking a look, whoa did one discover about Mid East has got far more problerms at the same time

  25. please pay a visit to the web-sites we adhere to, like this a single, because it represents our picks from the web

  26. longer erection

    Every once inside a although we opt for blogs that we read. Listed beneath are the most recent websites that we select

  27. we came across a cool site that you may well enjoy. Take a search in the event you want

  28. gay anal toys

    that may be the finish of this write-up. Right here youll come across some web pages that we assume you will appreciate, just click the links over

  29. gay men toys

    just beneath, are various completely not connected web-sites to ours, nonetheless, they are surely worth going over

  30. adult toys

    Every once inside a when we pick blogs that we read. Listed below would be the most current web-sites that we pick out