openwrt编译trojan

 参考https://github.com/trojan-gfw/openwrt-trojan

这个版本也支持trojan-go

git clone https://github.com/trojan-gfw/openwrt-trojan.git ./package/openwrt-trojan

git clone https://github.com/trojan-gfw/openwrt-trojan.git ./package/openwrt-trojan

然后 ./scripts/feeds update -a && ./scripts/feeds install -a

 make menuconfig

在network的目录下选中trojan

编译：

make

openwrt中trojan的配置：

将/etc/config/trojan 文件中的0改为1

编辑etc/trojan.json 文件，如果仅仅作socks5 将下面 "run_type": "nat",改为 "run_type": "client",

{

"run_type": "nat", "local_addr": "0.0.0.0", "local_port": 1080, "remote_addr": "xxxxx", "remote_port": 443, "password": [ "xxxxx" ], "log_level": 1, "ssl": { "verify": true, "verify_hostname": true, "cert": "", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:AES128-SHA:AES256-SHA:DES-CBC3-SHA", "cipher_tls13": "TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384", "sni": "xxxxx", "alpn": [ "h2", "http/1.1" ], "reuse_session": true, "session_ticket": false, "curves": "" }, "tcp": { "no_delay": true, "keep_alive": true, "reuse_port": false, "fast_open": false, "fast_open_qlen": 20 } }

在防火墙自定义规则中，输入：

ipset -N gfwlist iphash iptables -t nat -A PREROUTING -p tcp -m set --match-set gfwlist dst -j REDIRECT --to-port 1080 iptables -t nat -A OUTPUT -p tcp -m set --match-set gfwlist dst -j REDIRECT --to-port 1080

创建 /etc/dnsmasq.d/gfwlist.conf 文件

添加需要翻墙的网站，格式如下

server=/google.com/127.0.0.1#5054 （你本机DNS服务器端口是5054.否则请指向合适的dns服务器）

ipset=/google.com/gfwlist

编辑/etc/dnsmasq.conf 文件如下，（注意dnsmasq的版本是dnsmasq-full）

no-resolv

no-poll

conf-dir=/etc/dnsmasq.d

cache-size=1000

server=114.114.114.114

启动： /etc/init.d/trojan start

在ubuntu上源码安装shadowsocks-libev

通过源码安装，可以安装到最新版的shadowsocks-libev。但是稍微复杂。

1. 安装依赖：

apt update

apt-get install --no-install-recommends gettext build-essential autoconf libtool libpcre3-dev asciidoc xmlto libev-dev libc-ares-dev automake libmbedtls-dev libsodium-dev pkg-config

2. 下载shadowsocks-libev源码到本地

git clone https://github.com/shadowsocks/shadowsocks-libev.git

cd shadowsocks-libev

git submodule update --init --recursive

3. 安装libsodium

export LIBSODIUM_VER=1.0.16   //更加最新版本号更新

wget https://download.libsodium.org/libsodium/releases/libsodium-$LIBSODIUM_VER.tar.gz

tar xvf libsodium-$LIBSODIUM_VER.tar.gz

pushd libsodium-$LIBSODIUM_VER

./configure --prefix=/usr && make

sudo make install

popd

sudo ldconfig

4. 安装mbedtls

export MBEDTLS_VER=2.25.0 //更新最新版本号更新

wget https://github.com/ARMmbed/mbedtls/archive/v$MBEDTLS_VER.tar.gz

tar xvf v$MBEDTLS_VER.tar.gz

pushd mbedtls-$MBEDTLS_VER

make SHARED=1 CFLAGS="-O2 -fPIC"

sudo make DESTDIR=/usr install

popd

sudo ldconfig

5. 编译安装shadowsocks-libev

./autogen.sh 

./configure --with-sodium-include=/usr/include --with-sodium-lib=/usr/lib --with-mbedtls-include=/usr/include --with-mbedtls-lib=/usr/lib

make

make install

6. 完成，在/etc/shadowsocks-libev/config.json 进行配置

vim /etc/shadowsocks-libev/config.json

启动命令

/usr/bin/ss-server -c /etc/shadowsocks-libev/config.json >/dev/null 2>&1 &

7. 如果是ubunt18或者Ubuntu20，另一种简易的安装方法非常简单, 敲完下面命令，就完事。

apt update

apt install shadowsocks-libev

vim /etc/shadowsocks-libev/config.json     #修改端口密码

systemctl enable shadowsocks-libev

systemctl start shadowsocks-libev    #启动shadowsocks-libev

systemctl status shadowsocks-libev  #这条命令是检查启动状态

如果发现启动不了，通过systemctl status shadowsocks-libev这条命令，能看到shadowsocks-libev.service 文件的路劲。编辑文件，使得业务以root启动，如：

vim /lib/systemd/system/shadowsocks-libev.service

如下面配置，增加

User=root

Group=root

这两行：

[Unit]
Description=Shadowsocks-libev Default Server Service
Documentation=man:shadowsocks-libev(8)
After=network-online.target

[Service]
Type=simple
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
EnvironmentFile=/etc/default/shadowsocks-libev
LimitNOFILE=32768
User=root
Group=root
ExecStart=/usr/bin/ss-server -c $CONFFILE $DAEMON_ARGS
[Install]
WantedBy=multi-user.target