分享一个v2ray旁路网关配置

实现的效果

  • 在路由器中配置dhcp地址为该设备的ip
  • 所有由该路由器分配ip的设备流量全部有该设备接管
  • 该设备为一个普通的Linux设备，安装v2ray即可

config.json

  1. {
  2.     "inbounds": [
  3.         {
  4.             "tag": "transparent",
  5.             "port": 12345,
  6.             "protocol": "dokodemo-door",
  7.             "settings": {
  8.                 "network": "tcp,udp",
  9.                 "followRedirect": true
  10.             },
  11.             "sniffing": {
  12.                 "enabled": true,
  13.                 "destOverride": [
  14.                     "http",
  15.                     "tls"
  16.                 ]
  17.             },
  18.             "streamSettings": {
  19.                 "sockopt": {
  20.                     "tproxy": "tproxy",
  21.                     "mark": 255
  22.                 }
  23.             }
  24.         },
  25.         {
  26.             "port": 1080,
  27.             "protocol": "socks",
  28.             "sniffing": {
  29.                 "enabled": true,
  30.                 "destOverride": [
  31.                     "http",
  32.                     "tls"
  33.                 ]
  34.             },
  35.             "settings": {
  36.                 "auth": "noauth"
  37.             }
  38.         }
  39.     ],
  40.     "outbounds": [
  41.         {
  42.             "tag": "proxy",
  43.             "protocol": "vmess",
  44.             "settings": {
  45.                 "vnext": [
  46.                     {
  47.                         "address": "remote ip",
  48.                         "port": 10086,
  49.                         "users": [
  50.                             {
  51.                                 "id": "***-***-***-***-***",
  52.                                 "alterId": 0,
  53.                                 "security": "auto"
  54.                             }
  55.                         ]
  56.                     }
  57.                 ]
  58.             },
  59.             "streamSettings": {
  60.                 "sockopt": {
  61.                     "mark": 255
  62.                 },
  63.                 "network": "ws",
  64.                 "wsSettings": {
  65.                     "path": "/",
  66.                     "headers": {
  67.                         "Host": ""
  68.                     }
  69.                 }
  70.             },
  71.             "mux": {
  72.                 "enabled": true
  73.             }
  74.         },
  75.         {
  76.             "tag": "direct",
  77.             "protocol": "freedom",
  78.             "settings": {
  79.                 "domainStrategy": "UseIP"
  80.             },
  81.             "streamSettings": {
  82.                 "sockopt": {
  83.                     "mark": 255
  84.                 }
  85.             }
  86.         },
  87.         {
  88.             "tag": "block",
  89.             "protocol": "blackhole",
  90.             "settings": {
  91.                 "response": {
  92.                     "type": "http"
  93.                 }
  94.             }
  95.         },
  96.         {
  97.             "tag": "dns-out",
  98.             "protocol": "dns",
  99.             "streamSettings": {
  100.                 "sockopt": {
  101.                     "mark": 255
  102.                 }
  103.             }
  104.         }
  105.     ],
  106.     "dns": {
  107.         "servers": [
  108.             {
  109.                 "address": "223.5.5.5",
  110.                 "port": 53,
  111.                 "domains": [
  112.                     "geosite:cn",
  113.                     "ntp.org",
  114.                     "149.28.60.76"
  115.                 ]
  116.             },
  117.             {
  118.                 "address": "114.114.114.114",
  119.                 "port": 53,
  120.                 "domains": [
  121.                     "geosite:cn",
  122.                     "ntp.org",
  123.                     "149.28.60.76"
  124.                 ]
  125.             },
  126.             {
  127.                 "address": "8.8.8.8",
  128.                 "port": 53,
  129.                 "domains": [
  130.                     "geosite:geolocation-!cn"
  131.                 ]
  132.             },
  133.             {
  134.                 "address": "1.1.1.1",
  135.                 "port": 53,
  136.                 "domains": [
  137.                     "geosite:geolocation-!cn"
  138.                 ]
  139.             }
  140.         ]
  141.     },
  142.     "routing": {
  143.         "domainStrategy": "IPOnDemand",
  144.         "rules": [
  145.             {
  146.                 "type": "field",
  147.                 "inboundTag": [
  148.                     "transparent"
  149.                 ],
  150.                 "port": 53,
  151.                 "network": "udp",
  152.                 "outboundTag": "dns-out"
  153.             },
  154.             {
  155.                 "type": "field",
  156.                 "inboundTag": [
  157.                     "transparent"
  158.                 ],
  159.                 "port": 123,
  160.                 "network": "udp",
  161.                 "outboundTag": "direct"
  162.             },
  163.             {
  164.                 "type": "field",
  165.                 "ip": [
  166.                     "223.5.5.5",
  167.                     "114.114.114.114"
  168.                 ],
  169.                 "outboundTag": "direct"
  170.             },
  171.             {
  172.                 "type": "field",
  173.                 "ip": [
  174.                     "8.8.8.8",
  175.                     "1.1.1.1"
  176.                 ],
  177.                 "outboundTag": "proxy"
  178.             },
  179.             {
  180.                 "type": "field",
  181.                 "domain": [
  182.                     "geosite:category-ads-all"
  183.                 ],
  184.                 "outboundTag": "block"
  185.             },
  186.             {
  187.                 "type": "field",
  188.                 "protocol": [
  189.                     "bittorrent"
  190.                 ],
  191.                 "outboundTag": "direct"
  192.             },
  193.             {
  194.                 "type": "field",
  195.                 "ip": [
  196.                     "geoip:private",
  197.                     "geoip:cn"
  198.                 ],
  199.                 "outboundTag": "direct"
  200.             },
  201.             {
  202.                 "type": "field",
  203.                 "domain": [
  204.                     "geosite:cn"
  205.                 ],
  206.                 "outboundTag": "direct"
  207.             }
  208.         ]
  209.     }
  210. }

原理解释

  • 安装了v2ray的设备A接收外部的流量，并通过v2ray访问互联网
  • 其他设备的gateway设置成A
  • 在路由器中设置DHCP，里面的gateway直接配置成A