Preface#
Since I started using VPNs in 2012, I have used the following types of software:
- VPN series: PPTP, L2TP software (similar to GreenVPN, etc.)
- Software developed by Falun Gong members: Lantern, Freegate, Unblock... (there may be others, but these are the ones I've used)
- First-generation proxy software: Psiphon, XX-NET (software based on GAEAgent with some obfuscation, still being updated today)
- Legendary proxy software: Shadowsocks(R) (one could say that without this software, we wouldn't have the current diverse landscape of proxy software. R.I.P. Clowwindy & Breakwa11)
- Modern proxy software: v2ray, xray, Clash, QuantumultX, Shadowrocket, Surge...
- Niche proxy software: Tuic, Hysteria, Naiveproxy, mieru...
Sharing this here (recording) for future reference.
Software Classification#
Various Core Types#
Please note: This section only contains the cores that I might use regularly, and does not cover anything else.
Windows GUI#
Clash Series#
- Clash for Windows (repository deleted, this link is the final Chinese version backup)
- Clash for Windows Chinese version
- Clash Verge (requires EdgeRuntime2, lightweight and easy to use)
- ClashWarden (a small client written in C++, hasn't been updated for a long time)
- ClashN (client with the same interface made by the author of V2rayN, hasn't been updated for a long time)
- Fclash (cross-platform GUI written in Flutter)
- clash-for-flutter (written using Google's Flutter framework)
- Clash.Mini (a simplified UI written in Go, integrates the Meta core, hasn't been updated for a long time)
- ClashR Auto (based on CFW modified version)
- Clashy (desktop for all platforms)
V2ray Series#
Sing-Box#
iOS/MacOS GUI#
- Shadowrocket (iOS only, does not support Intel Mac, general price: 2.99USD)
- QuantumultX (universal authorization for iOS/MacOS, supports Intel-Mac/M1-Mac, general price: 4.99USD)
- Surge (separate authorization for iOS/MacOS, very high price, for the wealthy)
- Loon (universal authorization for iOS/MacOS)
- Stash (available on iOS, shares configuration files with Clash premium core, 2.99USD)
- ClashX (Mac only)
- ClashX Meta (Mac only)
- V2rayX (Mac only)
- Sing-box Tray GUI (Mac only)
Android GUI#
V2ray Series#
Clash Series#
Surfboard (compatible with Surge4 configuration files)#
Routers#
Script Classification for Setup#
I have used all the scripts, there is no good or bad, only what suits you is the best.
v2ray/xray Scripts#
sing-box Scripts#
Trojan Scripts#
Please note: The original Trojan core has not been updated for more than two years, and the Trojan-go core has not been updated for more than a year, so there is a possibility of detection. For stability, it is recommended to use v2ray/xray scripts or the niche protocols below.
- The simplest one-click deployment script for Trojan in the world, no domain application required (currently I am using it)
- BBR + Trojan-go + other script collection
- Overplus, IP bare connection (based on trojan, domain sniffer is Bing search, but the client skips certificate verification, currently stable)
- Jrohy's Trojan one-click script, but the uninstall part cannot completely delete the files generated during installation, not highly recommended
Niche Protocol Scripts/Tutorials#
In this part, one-click scripts are rarely found, most are step-by-step tutorials, requiring a certain level of knowledge about Linux. Also, most niche protocols do not have a graphical UI, so please use v2rayN or Nekoray to add custom cores before use. For specific usage methods, please refer to here
- Naiveproxy installation script by MisakaBlog
- Hi-Hysteria one-click installation script (not adapted for Hysteria 2.0)
- Hysteria 2.0 installation script by MisakaBlog
- Hysteria 2.0 installation script by Qin2DIM (this script requires python 3.8+)
- Tuic installation script by MisakaBlog
- mieru official tutorial (step-by-step and in English, not a script)
- socks5 proxy setup
Niche Protocol Supplement:#
- Currently, for hopeless machines like Racknerd and virmach, you can use the Hysteria protocol. For machines with excellent lines like CN2GIA, CU4837, CU9929, it is recommended to prioritize protocols with flow control like Tuic and Naiveproxy (Hysteria cannot be set up on Racknerd machines).
- Clash.meta currently has relatively complete support for Tuic and Hysteria. If you do not want to add custom configurations and cores, you can use this software (for replacing cores, you can refer to my tutorial).
Panel Setup#
VPS Testing Scripts#
- Moe's DD script (if the VPS is Oracle ARM, you need to add
-firmware)
bash <(wget --no-check-certificate -qO- 'https://raw.githubusercontent.com/MoeClub/Note/master/InstallNET.sh') -d 11 -v 64 -p p@ssw0rd -a
- Baota Panel Happy Version 7.7.0 (no backend monitoring)
curl -sSO https://raw.githubusercontent.com/8838/btpanel-v7.7.0/main/install/install_panel.sh && bash install_panel.sh
# 1, Block phone number
sed -i "s|bind_user == 'True'|bind_user == 'XXXX'|" /www/server/panel/BTPanel/static/js/index.js
# 2, Delete the forced binding phone js file
rm -f /www/server/panel/data/bind.pl
# 3, Manually unlock all paid plugins of Baota for permanent expiration
File path: /www/server/panel/data/plugin.json
Search string: "endtime": -1 replace all with "endtime": 999999999999
# 4, Lock the plugin.json file to prevent automatic repair to the free version
chattr +i /www/server/panel/data/plugin.json
- Enable BBR+FQ
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p
sysctl net.ipv4.tcp_available_congestion_control
lsmod | grep bbr
- Another script to enable BBR (by Qiusui Yibing)
wget --no-check-certificate -O /opt/bbr.sh https://github.com/teddysun/across/raw/master/bbr.sh
chmod 755 /opt/bbr.sh
/opt/bbr.sh
- Three-network speed test
bash <(curl -Lso- https://git.io/superspeed_uxh)
- Unlock test
bash <(curl -L -s https://raw.githubusercontent.com/lmc999/RegionRestrictionCheck/main/check.sh)
VPN Providers#
For beginners with low requirements for VPN IPs, VPN providers are the best choice. However, due to the recent v2board group data breach incident, many people are hesitant to buy VPN services. The following recommended VPN providers do not use v2board, so you can purchase with confidence: