部署 Shadow*ocket

1. 安装 shadow*ocks-libev

   sudo apt install shadow*ocks-libev
   

2. 编辑配置

   sudoedit /etc/shadow*ocks-libev/config.json
   

   {
       "server": "0.0.0.0",
       "mode": "tcp_and_udp",
       "server_port": 8388,
       "password": "6vX2Kmd6b8Kj",
       "timeout": 86400,
       "method": "chacha20-ietf-poly1305"
   }
   

3. 增加最大打开文件描述符的数量：

   sudoedit /etc/security/limits.conf
   

   * soft nofile 51200
   * hard nofile 51200
   
   # for server running in root:
   root soft nofile 51200
   root hard nofile 51200
   

   在启动 shadow*ocks 服务器之前先设置 ulimit：

   ulimit -n 51200
   

4. 调整内核参数：

   调整原则：

   • 尽快重用端口和连接。
   • 尽可能增大队列和缓冲区的大小。
   • 为大延迟和高吞吐量选择 TCP 拥塞算法。

   sudoedit /etc/sysctl.conf
   

   fs.file-max = 51200
   
   net.core.rmem_max = 67108864
   net.core.wmem_max = 67108864
   net.core.netdev_max_backlog = 250000
   net.core.somaxconn = 4096
   
   net.ipv4.tcp_syncookies = 1
   net.ipv4.tcp_tw_reuse = 1
   net.ipv4.tcp_tw_recycle = 0
   net.ipv4.tcp_fin_timeout = 30
   net.ipv4.tcp_keepalive_time = 1200
   net.ipv4.ip_local_port_range = 10000 65000
   net.ipv4.tcp_max_syn_backlog = 8192
   net.ipv4.tcp_max_tw_buckets = 5000
   net.ipv4.tcp_fastopen = 3
   net.ipv4.tcp_mem = 25600 51200 102400
   net.ipv4.tcp_rmem = 4096 87380 67108864
   net.ipv4.tcp_wmem = 4096 65536 67108864
   net.ipv4.tcp_mtu_probing = 1
   net.ipv4.tcp_congestion_control = hybla
   

   sudo sysctl -p
   

5. 启动服务：

   sudo systemctl start shadow*ocks-libev
   sudo systemctl enable shadow*ocks-libev
   

参见：Getting Started | Shadow*ocks