科学上网

涉及到的知识点#

nginx 四层 stream tcp 代理；
nginx 七层反向代理；
certbot 自动获取免费 https 证书（必须要有自己的域名，通过 cloudflare api）；
xray 的 vision reality 方案；

部署完成后，网络请求数据流向如下

Mermaid 图表渲染失败，请检查图表语法是否正确

flowchart LR
  xray_client[xray客户端]
  subgraph nginx[nginx]
    stream{SNI分流}
    https
  end

  subgraph xray
    inbound ---> router ---> outbound
  end

  xray_client --> nginx
  stream --- 匹配http域名 ---> https
  stream --- 匹配xray域名 ---> inbound

docker-compose.yml(基于3x-ui)#

1
services:
2
  nginx:
3
    image: nginx:alpine
4
    container_name: nginx
5
    ports:
6
      - 80:8080
7
      - 443:8443
8
    volumes:
9
      - $HOME/docker-compose/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
10
      - $HOME/docker-compose/nginx/conf.d/:/etc/nginx/conf.d/:ro
11
      - $HOME/docker-compose/nginx/stream.d/:/etc/nginx/stream.d/:ro
12
      - $HOME/docker-compose/nginx/snippets/:/etc/nginx/snippets/:ro
13
      - $HOME/docker-compose/nginx/cert/:/etc/cert/:ro
14
      - $HOME/docker-compose/nginx/auth/:/etc/nginx/auth/:ro
15
      - $HOME/docker-compose/certbot/etc/letsencrypt/:/etc/letsencrypt/:ro
16
      - $HOME/data/nginx/logs/:/var/log/nginx/
17
      - $HOME/docker-compose/nginx/ssl:/etc/nginx/ssl/:ro
18
    extra_hosts:
19
      - "host.docker.internal:host-gateway"
20
    depends_on:
21
      - xray
22
    deploy:
23
      resources:
24
        limits:
25
          memory: 64M
26
    restart: unless-stopped
27

28
  xray:
29
    image: ghcr.io/mhsanaei/3x-ui:latest
30
    container_name: xray
31
    # hostname: yourhostname <- optional
32
    volumes:
33
      - $HOME/data/3xui/db/:/etc/x-ui/
34
      - $HOME/data/3xui/cert/:/root/cert/
35
    ports:
36
      - "2053:2053"
37
    environment:
38
      XRAY_VMESS_AEAD_FORCED: "false"
39
      XUI_ENABLE_FAIL2BAN: "true"
40
    tty: true
41
    restart: unless-stopped
42

43
  certbot:
44
    image: certbot/dns-cloudflare
45
    container_name: certbot
46
    environment:
47
      - TZ=Asia/Shanghai
48
    volumes:
49
      - $HOME/docker-compose/certbot/etc/letsencrypt:/etc/letsencrypt
50
      - $HOME/data/certbot/var/lib/letsencrypt:/var/lib/letsencrypt
51
      - $HOME/data/certbot/var/log/letsencrypt:/var/log/letsencrypt
52
      - $HOME/docker-compose/certbot/cloudflare.ini:/etc/cloudflare.ini:ro
53
    profiles:
54
      - manual

docker-compose.yml(基于原生xray)#

1
services:
2
  # 自动获取证书
3
  certbot:
4
    image: certbot/dns-cloudflare
5
    container_name: certbot
6
    environment:
7
      - TZ=Asia/Shanghai
8
    volumes:
9
      - $HOME/docker-compose/certbot/etc/letsencrypt:/etc/letsencrypt
10
      - $HOME/data/certbot/var/lib/letsencrypt:/var/lib/letsencrypt
11
    command: >-
12
      certonly --dns-cloudflare
13
      --dns-cloudflare-credentials /etc/letsencrypt/cloudflare.ini
14
      --dns-cloudflare-propagation-seconds 15
15
      --email <your_email>
16
      --agree-tos --no-eff-email
17
      --force-renewal
18
      -d <your_domain>
19
    restart: unless-stopped
20

21
  nginx:
22
    image: nginxinc/nginx-unprivileged
23
    container_name: nginx
24
    ports:
25
      - 80:8080
26
      - 443:8443
27
    volumes:
28
      - $HOME/docker-compose/nginx/nginx.conf:/etc/nginx/nginx.conf
29
      - $HOME/docker-compose/nginx/conf.d/:/etc/nginx/conf.d/
30
      - $HOME/docker-compose/certbot/etc/letsencrypt/:/etc/letsencrypt/
31
      - $HOME/data/nginx/logs/:/var/log/nginx/
32
    extra_hosts:
33
      - "host.docker.internal:host-gateway"
34
    deploy:
35
      resources:
36
        limits:
37
          memory: 64M
38
    restart: unless-stopped
39

40
  xray:
41
    image: teddysun/xray
42
    container_name: xray
43
    volumes:
44
      - $HOME/docker-compose/xray/:/etc/xray
45
    restart: unless-stopped

geosite.dat 数据查看#

https://geoviewer.aloxaf.com/

涉及到的知识点#

docker-compose.yml(基于3x-ui)#

docker-compose.yml(基于原生xray)#

geosite.dat 数据查看#

文章分享