How to add a SNI on server , please . about xray_bash_onekey HOT 7 CLOSED

You can configure Nginx like this:

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name           a.com;


        location /abca
        {
              proxy_pass http://127.0.0.1:1001;
        }
}

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name           b.com;


        location /abcb
        {
              proxy_pass http://127.0.0.1:1002;
        }
}

and configure Xray like this:

"inbounds": [{
         "port": 1001,
         "listen": "127.0.0.1",
         "tag": "VLESS-ws-in",
         "protocol": "VLESS",
         "settings": {
             "clients": [{
                 "id": "UUID",
                 "level": 0,
                 "email": "[email protected]"
             }],
             "decryption": "none"
         },
         "streamSettings": {
             "network": "ws",
             "security": "none",
             "wsSettings": {
                 "path": "/abca"
             }
         }
     },
{
         "port": 1002,
         "listen": "127.0.0.1",
         "tag": "VLESS-ws-in",
         "protocol": "VLESS",
         "settings": {
             "clients": [{
                 "id": "UUID",
                 "level": 0,
                 "email": "[email protected]"
             }],
             "decryption": "none"
         },
         "streamSettings": {
             "network": "ws",
             "security": "none",
             "wsSettings": {
                 "path": "/abcb"
             }
         }
     }]

Note that different domain names correspond to different ports.

from xray_bash_onekey.

@paniy can you tell me how to create the server using SNI ? Using vless + ws + grpc . ?

I use a website to create a account like I tell you , but I want to install it on my VPS .

WEBSITE :
https://www.fastssh.com/page/create-vless-account/server/704/vless-canada-1/

Like this account :

vless://[email protected]:443/?type=ws&encryption=none&host=my.mintmobile.com&path=%2Ffastssh%3Fu%3Dtestmio%26p%3D614b60e899429%26&security=tls&sni=my.mintmobile.com#ca1.vless.co

Do you need access to my VPS to configurate it ?
Or you can give me a example .
Please .

from xray_bash_onekey.

@paniy could you add this feature on the script ?
Because in America , Singapore , India , Africa and many other countries we use SNI ( usually the ISP website ) in the request to get to internet . This way the ISP think we are visiting their website , but we are visiting other website.

This is the only way we can bypass the ISP to get internet . Using a http request or websocket request we use in HOST header the ISP website allowed or using tls or ssl we use the SNI ( ISP website allowed ) to get internet .

By the way the SNI website or SNI domain do not need to have the VPS IP . The SNI should be any website .

from xray_bash_onekey.

The script itself supports SNI and may not be well compatible on some servers. Recently, I will add the function of manually entering the server IP to solve the problem you raised.

from xray_bash_onekey.

@paniy yes. And the script ask for the SNI when it is installing . Remember the SNI can be any website the user want . The SNI and the hostname do Not need to have the same IP from the VPS .

Example :
www.google.com
www.chinamobileltd.com
www.chinatelecomglobal.com

I hope you add the feature soon . Many people will use around the world .

from xray_bash_onekey.

d31cf9e Please note that CNAME your domain name to the domain name provided by the server provider

from xray_bash_onekey.

@paniy i modified the DNS record on cloudflare , it sort of works .
I just created a subdomain with a dns redoes like this :
ISP domain + VPS domain .
Example : www.chinamobileltd.com.vpsdomain
.tk

But the script does not allow to use just a FAKE SNI ( any website ) that does not have the VPS IP .

I found a script that can do it .

https://github.com/wulabing/V2Ray_ws-tls_bash_onekey

VLESS+websocket+TLS+Nginx+Website

If you check what the special about the "website "

This way you can create a :
VLESS+Nginx+WebSocket/gRPC+TLS+website
VLESS+XTLS+Nginx+ws+gRPC+website

ws/gRPC + website ONLY

from xray_bash_onekey.