{"id":60581,"date":"2020-04-07T16:36:34","date_gmt":"2020-04-07T08:36:34","guid":{"rendered":"http:\/\/4563.org\/?p=60581"},"modified":"2020-04-07T16:36:34","modified_gmt":"2020-04-07T08:36:34","slug":"virmach%e7%9a%841-25%e5%b0%8f%e9%b8%a1%ef%bc%8cwstls%e4%b8%80%e7%9b%b4502%e6%8a%a5%e9%94%99%e3%80%82%e3%80%82%e3%80%82","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=60581","title":{"rendered":"VirMach\u76841.25\u5c0f\u9e21\uff0cws+tls\u4e00\u76f4502\u62a5\u9519\u3002\u3002\u3002"},"content":{"rendered":"\n

\t\t\t\t\tmega<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-22 23:55:50\t<\/p>\n

VirMach\u76841.25\u5c0f\u9e21\uff0cws+tls\u4e00\u76f4502\u62a5\u9519\u3002\u3002\u3002<\/h3>\n

\t\t \u672c\u5e16\u6700\u540e\u7531 mega \u4e8e 2020-3-22 23:57 \u7f16\u8f91 <\/p>\n

WS+TLS+Web(\u8fd8\u6ca1\u5f00CDN)
\u5df2\u7ecf\u67e5\u8fc7\u4e86SELinux\u786e\u5b9e\u662f\u5173\u95ed\u7684\u3002\u3002\u7cfb\u7edf\u662fCentOS7\uff0c\u96be\u9053\u662fVirMach\u672c\u8eab\u7684\u95ee\u9898\uff1f<\/p>\n

failed to handler mux client connection > v2ray.com\/core\/proxy\/vmess\/outbound: failed to find an available destination > v2ray.com\/core\/common\/retry: > v2ray.com\/core\/common\/retry: all retry attempts failed<\/p>\n

\u4e24\u4e2a\u914d\u7f6e\u6587\u4ef6<\/p>\n

———————————————————————-V
{
"inbound": {
    "protocol": "vmess",
    "listen": "127.0.0.1",
"port": ****,
"settings": {"clients": [
      {"id": "******-3cec-4a35-929a-*********"}
    ]},
"network": "ws",
"streamSettings": {
"wsSettings": {"path": "\/********"}
    }
},<\/p>\n

"outbound": {"protocol": "freedom"}
}<\/p>\n

——————————————————————–N
server {
    ### 1:
    server_name www.******.***;<\/p>\n

    listen 80;
    rewrite ^(.*) https:\/\/$server_name$1 permanent;
    if ($request_method!~ ^(POST|GET)$) { return501; }
    autoindex off;
    server_tokens off;
}<\/p>\n

server {
    ### 2:
    ssl_certificate \/etc\/letsencrypt\/live\/www.******.***\/fullchain.pem;<\/p>\n

    ### 3:
    ssl_certificate_key \/etc\/letsencrypt\/live\/www.******.***\/privkey.pem;<\/p>\n

    ### 4:
    location \/************
    {
      proxy_pass http:\/\/***.0.0.1:****;
      proxy_redirect off;<\/p>\n

      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_set_header Host $host;<\/p>\n

      sendfile on;
      tcp_nopush on;
      tcp_nodelay on;
      keepalive_requests 25600;
      keepalive_timeout 300 300;
      proxy_buffering off;
      proxy_buffer_size 8k;
    }<\/p>\n

    listen 443 ssl http2;
    server_name $server_name;
    charset utf-8;<\/p>\n

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK;
    ssl_prefer_server_ciphers on;<\/p>\n

    ssl_session_cache shared:SSL:60m;
    ssl_session_timeout 1d;
    ssl_session_tickets off;<\/p>\n

    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 8.8.4.4 valid=300s;
    resolver_timeout 10s;<\/p>\n

    # Security settings
    if ($request_method!~ ^(POST|GET)$) { return 501; }
    add_header X-Frame-Options DENY;
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Content-Type-Options nosniff;
    add_header Strict-Transport-Security max-age=31536000 always;
    autoindex off;
    server_tokens off;<\/p>\n

    index index.html index.htm index.php;
    root \/usr\/share\/nginx\/html;
    location ~ .*.(js|jpg|JPG|jpeg|JPEG|css|bmp|gif|GIF|png)$ { access_log off; }
}<\/p>\n

\t\t\t\t\tlovecan<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-23 00:02:26\t<\/p>\n

<\/h3>\n

\t\t\u5173\u4e86mux \u8bd5\u8bd5\uff1f\t\t\t\t<\/p>\n

\t\t\t\t\tmega<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-23 00:04:57\t<\/p>\n

<\/h3>\n

\t\tlovecan \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-23 00:02
\u5173\u4e86mux \u8bd5\u8bd5\uff1f<\/p>\n

\u548b\uff0c\uff0c\uff0c\uff0c\u548b\u5173\uff1f<\/p>\n

\u53e6\u5916\u6211\u770b\u4e86nginx\u7684error log\uff0c\u4e00\u76f4\u662f\u8fd9\u4e2a\uff1a
failed (111: Connection refused) while connecting to upstream, client: xxxx.xxxx.xxx.\t\t\t\t<\/p>\n

\t\t\t\t\tk2775739<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-23 00:06:50\t<\/p>\n

<\/h3>\n

\t\twss \u662fpost|get?\t\t\t\t<\/p>\n

\t\t\t\t\tJOSH<\/strong> \t\t\t\t\u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020-3-23 00:10:46\t<\/p>\n

<\/h3>\n

\t\t\u65f6\u95f4\u548c\u8bc1\u4e66\u68c0\u67e5\u4e0b\u3002 \t\t\t <\/p>\n","protected":false},"excerpt":{"rendered":"

mega \u5927\u4f6c\u6709\u8bdd\u8bf4 : 2020…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/60581"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=60581"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/60581\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=60581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=60581"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=60581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}