October 06, 2016

Setup Shadowsocks / VPN on Ubuntu Server

(Environment: Ubuntu 16.04 LTS installed on VPS such as Linode)

Install and run Shadowsocks on server

I put the following process into a shell script. Check this “one-click” method: giraffe

Install Shadowsocks

Update packages:

sudo apt-get update && apt-get upgrade

Install pip and m2crypto:

sudo apt-get install python-pip
sudo apt-get install python-m2crypto

Install shadowsocks:

pip install setuptools
pip install shadowsocks

If locale error happens:

export LC_ALL=C

Configue Shadowsocks

Create a config file /etc/shadowsocks.json as:

For single user:

{
    "server": "my_server_ip",
    "server_port": 8388,
    "local_address": "127.0.0.1",
    "local_port": 1080,
    "password": "mypassword",
    "timeout": 300,
    "method": "aes-256-cfb",
    "fast_open": false
}

For multiple users:

{
    "server": "0.0.0.0",
    "port_password": {
        "8381": "ps1",
        "8382": "ps2",
        "8383": "ps3",
        "8384": "ps4"
    },
    "timeout": 300,
    "method": "aes-256-cfb"
}

Start Shadowsocks server

Run shadowsocks server as daemon:

ssserver -c /etc/shadowsocks.json -d start

Stop SS server:

ssserver -c /etc/shadowsocks.json -d stop

Restart:

ssserver -c /etc/shadowsocks.json -d restart

Auto start after system reboot

You can start SS server manually with the above command every time the system powers on, or find a way to let it auto started.

There is a method: add the above start command in /etc/rc.local before exit 0 line. However it does not work for me and I don’t know why.

Supervisor can do this job.

Install supervisor:

sudo apt-get install supervisor

Create a supervisor config file /etc/supervisor/conf.d/shadowsocks.conf with contents:

[program:shadowsocks]
command=ssserver -c /etc/shadowsocks.json -d start
autostart=true
autorestart=true
user=root
log_stderr=true
logfile=/var/log/shadowsocks.log

Then start (or restart) supervisor:

sudo service supervisor start

And the server part is done.

Update kernel and install BBR acceleration (for kernel version < 4.9)

ref: 一键安装最新内核并开启 BBR 脚本

Check kernal version

uname -r

wget --no-check-certificate https://github.com/teddysun/across/raw/master/bbr.sh
chmod +x bbr.sh
./bbr.sh

Mac client

Download: ShadowsocksX

Automatically update pac file

(Problem: ShadowsocksX client update pac file from GFWList failed.)

Download a shell script from here and name it update_gfwlist.sh.

chmod +x update_gfwlist.sh
mv update_gfwlist.sh /usr/local/bin

Then you can manually run update_gfwlist.sh, or schedule a daily job:

export EDITOR=nano
crontab -e

and add a line:

# Update GFWList PAC file for ShadowsocksX at 10:30 everyday
30 10 * * * sh /usr/local/bin/update_gfwlist.sh

This will automatically update the file ~/.ShadowsocksX/gfwlist.js everyday at 10:30 am.

iTerm

Using Shadowsocks with Command Line Tools

iOS client

Wingy

Thanks to NEKit, there’s perfect way for iOS user.

Wingy - Http(s),Socks5 Proxy Utility 作者是 SMART LIMITED

App Store: Wingy

(This approach is not recommended now)

For iOS, the following method is OK for home use if you have an idle or long-time working Mac.

Step 1: make Mac a http proxy with privoxy

brew install privoxy

Edit config file: /usr/local/etc/privoxy/config:

line “forward-socks5t / …” -> “forward-socks5t / 127.0.0.1:1080”
line “listen-address 127.0.0.1:8118” -> “listen-address 0.0.0.0:6666” (6666 is a custom unused port)

Start privoxy:

/usr/local/sbin/privoxy --no-daemon /usr/local/etc/privoxy/config &

Step 2: make Mac a pac server

brew install nginx

Make a folder to be served by nginx and copy the pac file into it:

mkdir /usr/local/share/pac
cp ~/.ShadowsocksX/gfwlist.js /usr/local/share/pac/proxy.pac

Edit proxy.pac, change the line “var proxy = …” to:

var proxy = "PROXY [IP_of_Mac]:6666; DIRECT;";

Note that 6666 is the port you configured for privoxy.

Then add a nginx configuration file in /usr/local/etc/nginx/servers:

server {
    listen       8000;
    location / {
        root   /usr/local/share/pac;
        index  index.html index.htm;
    }
}

Start nginx:

brew services start nginx

On iPhone, in WiFi’s http proxy auto mode, add:

http://[IP_of_Mac]:8000/proxy.pac

We can also fix the IP of Mac by configuring the router.

Install and running IPsec VPN server

IPsec VPN 服务器一键安装脚本

Last modified: 2017-12-04