配置

生成uuid
cat /proc/sys/kernel/random/uuid

生成密钥
docker run --rm teddysun/xray xray x25519

参考

案例

服务端


{
    "log": {
        "loglevel": "debug"
    },
    "inbounds": [
        {
            "tag": "dokodemo-in",
            "port": 443,
            "protocol": "dokodemo-door",
            "settings": {
                "address": "::1",
                "port": 4431,  // 指向内网中的 reality 端口，示例是这个端口，如果要自己修改了记得这里和下面的 reality 入站都要修改
                "network": "tcp"
            },
            "sniffing": { // 这里的 sniffing 不是多余的，别乱动
                "enabled": true,
                "destOverride": [
                    "tls"
                ],
                "routeOnly": true
            }
        },
        {
            "listen": "::1",
            "port": 4431, // 见上 如果和其他服务冲突了可以换
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "cd9919f7-462f-410b-afc5c2c4deeccbcf" // uuid
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    // 下方要求和普通 reality 一致，这里演示 dest 设置为 cloudflare 不被偷跑流量所以设置为 speed.cloudflare.com 了
                    // 你可以设置为其他 CF 网站，如果你的 dest 不是这种网站你也不用点了进来不是吗
                    "dest": "speed.cloudflare.com:443",
                    "serverNames": [
                        "speed.cloudflare.com"
                    ],
                    "privateKey": "GEXr6ku-Qgef-nhINfQTmUn008b1JvltYW4uyvCGdXU", // 运行 `xray x25519` 生成
                    "shortIds": [
                        "",
                        "0123456789abcdef"
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls",
                    "quic"
                ],
                "routeOnly": true
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ],
    "routing": {
        "rules": [
            {
                "inboundTag": [
                    "dokodemo-in"
                ],
                // 重要，这个域名列表需要和 realitySettings 的 serverNames 保持一致
                "domain": [
                    "speed.cloudflare.com"
                ],
                "outboundTag": "direct"
            },
            {
                "inboundTag": [
                    "dokodemo-in"
                ],
                "outboundTag": "block"
            }
        ]
    }
}

客户端

port: 7890
socks-port: 7891
allow-lan: true
mode: Rule
log-level: debug
proxies:
  - name: reality-hk
    type: vless
    server: www.vpsdl.top        # 你的域名或IP
    port: 443
    uuid: 416a7a21-8578-4812-a058-5e4c97a04f8a
    flow: ""
    udp: true
    tls: true
    servername: speed.cloudflare.com
    reality-opts:
      public-key: mHNld0mHD3qIetET1Ya9pRodwh8XvHR2u0qnz7TmSgw
      short-id: 0123456789abcdef
    network: tcp
    client-fingerprint: chrome