{"id":2835,"date":"2022-03-13T05:20:31","date_gmt":"2022-03-13T05:20:31","guid":{"rendered":"https:\/\/dft.wiki\/?p=2835"},"modified":"2022-05-18T23:14:04","modified_gmt":"2022-05-18T23:14:04","slug":"high-performance-encrypted-proxy-with-shadowsocks","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=2835","title":{"rendered":"High Performance Encrypted Proxy with ShadowSocks"},"content":{"rendered":"

ShadowSocks is an opensource server-client based solution created to circumvent state censorship by mimicking a normal HTTPS connection.<\/p>\n

It is not a fully-fledged VPN style but provide the necessary encryption to bypass nation censorship such as those from China, Kazakhstan, Iran, Russia…<\/p>\n

It has many different flavors written in different languages and available also as containers or in the official repository of the major distributions.<\/p>\n

This tutorial recommends and shows how to install the lightweight flavor written in C that provides the best performance possible.<\/p>\n

With a simple VPC, single core and singe GB of RAM you can easily achieve 1 gbps for download and upload<\/strong> if your internet speed can get that fast.<\/p>\n

Ubuntu \/ Raspbian \/ Kali \/ Debian<\/strong><\/p>\n

sudo apt update && sudo apt install shadowsocks-libev -y<\/pre>\n
Find more information on the official website [Link<\/a>] or repository [Link<\/a>].<\/p>\n
\n
The same application can be configured to work as Server or Client.<\/p>\n
Server configuration:<\/strong><\/p>\n
After installing shadowsocks-libev<\/code> make changes to its configuration.<\/p>\n
sudo nano \/etc\/shadowsocks-libev\/config.json<\/pre>\n
{\r\n\"server\":\"0.0.0.0<\/strong>\",\r\n\"mode\":\"tcp_and_udp\",\r\n\"server_port\":8080<\/strong>,\r\n\"local_port\":1080,\r\n\"password\":\"ENTER-PASSWORD-HERE<\/strong>\",\r\n\"timeout\":60,\r\n\"method\":\"chacha20-ietf-poly1305\"\r\n}<\/pre>\n
Note:<\/strong> by entering 0.0.0.0<\/strong> the server will listen on all interfaces of the server. The port 8080<\/strong> is where it will accept connections from the client. And the ENTER-PASSWORD-HERE<\/strong> can be any thing you want.<\/p>\n
sudo ufw allow 8080<\/strong>\r\nsudo systemctl enable shadowsocks-libev.service\r\nsudo systemctl restart shadowsocks-libev.service\r\nsudo systemctl status shadowsocks-libev.service<\/pre>\n
\n
Client configuration (Linux):<\/strong><\/p>\n
After installing shadowsocks-libev<\/code> stop the server and prevent it from start on boot and create a client configuration.<\/p>\n
sudo systemctl stop shadowsocks-libev\r\nsudo systemctl disable shadowsocks-libev\r\nsudo cp \/etc\/shadowsocks-libev\/config.json \/etc\/shadowsocks-libev\/client<\/strong>.json\r\nsudo nano \/etc\/shadowsocks-libev\/client<\/strong>.json<\/pre>\n
{\r\n\"server\":\"SERVER-IP-ADDRESS<\/strong>\",\r\n\"mode\":\"tcp_and_udp\",\r\n\"server_port\":8080<\/strong>,\r\n\"local_address\":\"127.0.0.1<\/strong>\",\r\n\"local_port\":1080<\/strong>,\r\n\"password\":\"ENTER-PASSWORD-HERE<\/strong>\",\r\n\"timeout\":60,\r\n\"method\":\"chacha20-ietf-poly1305\"\r\n}<\/pre>\n
Note:<\/strong> add the SERVER-IP-ADDRESS<\/strong> or a name that resolves to the server’s IP. Inform the port 8080<\/strong> where the ShadowSocks is listening on and the same ENTER-PASSWORD-HERE<\/strong> configured on the server. In the example above the client-side will be a SOCKS5 that will listen on port 1080 locally (127.0.0.1<\/strong>). Feel free to make changes accordingly to your needs.<\/p>\n
sudo systemctl enable shadowsocks-libev-local@client<\/strong>.service\r\nsudo systemctl start shadowsocks-libev-local@client<\/strong>.service\r\nsudo systemctl status shadowsocks-libev-local@client<\/strong>.service<\/pre>\n
\n
Browser configuration:<\/strong><\/p>\n
On Firefox it is recommended to use an extension called FoxyProxy [Link<\/a>].<\/p>\n
\"\"<\/p>\n
\"\"<\/p>\n
It also supports other operating systems such as MacOS, iOS, Android, and more [Link<\/a>].<\/p>\n