自建跳板机 · 科学上网
从零部署全教程

# 下载并执行官方安装脚本
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install

info: Xray v26.x.x is installed.
info: Enable and start the Xray service

# 查看版本
xray --version

# 查看服务状态（应显示 active (running)）
systemctl status xray

xray x25519

PrivateKey: wI8PaoQfFMzFMqQangwiykCNfwv-UpM7ZfBn1KSnN1o   ← 服务端用，私钥，不要泄露
Password (PublicKey): WpLWSo__hEm_zfo6U0OMC3wewmL40v_6FBM8Tz3hTRc  ← 客户端用，公钥，可以公开

xray uuid

b67b4f5d-8e5c-4c6f-997b-b2377909dac1   ← 用户 ID，服务端和客户端都要填

openssl rand -hex 8

7594d8ff205b2bdb   ← shortId，16位十六进制，服务端和客户端都要填

# 用 nano 编辑器打开（方向键移动，Ctrl+O 保存，Ctrl+X 退出）
nano /usr/local/etc/xray/config.json

# 或者用 vim
vim /usr/local/etc/xray/config.json

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "listen": "0.0.0.0",
      "port": 8443,                    // ← 监听端口，可改为其他端口（1024-65535）
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "YOUR-UUID-HERE",          // ← 替换为你的 UUID
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "你的伪装域名:443",       // ← 替换为你的伪装域名，如 blog.example.com:443
          "xver": 0,
          "serverNames": [
            "你的伪装域名"              // ← 替换为你的伪装域名，如 blog.example.com
          ],
          "privateKey": "YOUR-PRIVATE-KEY",  // ← 替换为 xray x25519 生成的 PrivateKey
          "shortIds": [
            "YOUR-SHORT-ID",           // ← 替换为 openssl rand -hex 8 生成的值
            ""
          ]
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls", "quic"]
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "tag": "block"
    }
  ]
}

# 测试配置文件语法是否正确
xray run -test -config /usr/local/etc/xray/config.json

# 看到 "Configuration OK." 表示格式正确

systemctl restart xray

# 确认运行状态（应显示 active (running)）
systemctl status xray

# 确认端口已在监听
ss -tlnp | grep 8443

LISTEN  0  4096  *:8443  *:*  users:(("xray",...))  ← 看到这行就对了

# 放行 8443 端口（如果你改了端口，替换 8443 为你的端口）
ufw allow 8443/tcp

# 确认放行
ufw status | grep 8443

iptables -A INPUT -p tcp --dport 8443 -j ACCEPT
iptables-save > /etc/iptables/rules.v4

# 替换 your.vps.ip 为你 VPS 的实际 IP
Test-NetConnection -ComputerName your.vps.ip -Port 8443

mixed-port: 7890
allow-lan: false
mode: rule
log-level: warning
ipv6: false

dns:
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - https://dns.alidns.com/dns-query    # 国内 DNS，解析国内域名
    - https://doh.pub/dns-query
  fallback:
    - https://1.1.1.1/dns-query           # 境外 DNS，解析国外域名
    - https://8.8.8.8/dns-query
  fallback-filter:
    geoip: true
    geoip-code: CN

proxies:
  - name: Japan-VPS                        # 节点名称，可以改
    type: vless
    server: YOUR.VPS.IP.ADDRESS           # ← 替换为你 VPS 的 IP 地址
    port: 8443                             # ← 和服务端 port 一致
    uuid: YOUR-UUID-HERE                  # ← 替换为你生成的 UUID
    flow: xtls-rprx-vision
    tls: true
    udp: true
    network: tcp
    reality-opts:
      public-key: YOUR-PUBLIC-KEY         # ← 替换为 xray x25519 生成的 PublicKey
      short-id: YOUR-SHORT-ID            # ← 替换为 openssl rand -hex 8 生成的值
    servername: 你的伪装域名               # ← 替换为伪装域名，如 blog.example.com
    client-fingerprint: chrome           # 指纹伪装为 Chrome，也可填 firefox / safari

proxy-groups:
  - name: Proxy
    type: select
    proxies:
      - Japan-VPS
      - DIRECT

rules:
  - GEOSITE,private,DIRECT              # 局域网直连
  - GEOIP,private,DIRECT,no-resolve
  - GEOSITE,cn,DIRECT                  # 国内域名直连
  - GEOIP,cn,DIRECT,no-resolve         # 国内 IP 直连
  - MATCH,Proxy                         # 其余全部走代理

# 查看 Xray 实时日志（有连接时会有输出）
journalctl -u xray -f

# 查看当前连接数
ss -tnp | grep xray | wc -l

# 查看详细错误信息
journalctl -u xray -n 50 --no-pager

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install
systemctl restart xray

"clients": [
  {
    "id": "第一个用户的UUID",
    "flow": "xtls-rprx-vision"
  },
  {
    "id": "第二个用户的UUID",  // xray uuid 再生成一个
    "flow": "xtls-rprx-vision"
  }
]