1
apt update && apt upgrade -y
2
apt install -y curl wget openssl uuid-runtime

1
bash <(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)
2

3
# 备用写法（如果上面那条在你的 shell 里不工作，用这条）：
4
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)"

1
xray version

1
# 1. 生成 UUID
2
cat /proc/sys/kernel/random/uuid
3

4
# 2. 生成 X25519 密钥对
5
xray x25519
6

7
# 3. 生成短 ID（8 位十六进制）
8
openssl rand -hex 4

1
PrivateKey: M4cZLR81ErNfxnG1fAnNUIATs_UXqe6HR78wINhH7RA
2
Password:   ioE61VC3V30U7IdRmQ3bjhOq2ij9tPhVIgAD4JZ4YRY
3
Hash32:     （本教程不需要这行，可以忽略）

1
nano /usr/local/etc/xray/config.json

1
{
2
  "log": {
3
    "loglevel": "warning"
4
  },
5
  "inbounds": [
6
    {
7
      "listen": "0.0.0.0",
8
      "port": 443,
9
      "protocol": "vless",
10
      "settings": {
11
        "clients": [
12
          {
13
            "id": "YOUR-UUID-HERE",
14
            "flow": "xtls-rprx-vision"
15
          }
16
        ],
17
        "decryption": "none"
18
      },
19
      "streamSettings": {
20
        "network": "tcp",
21
        "security": "reality",
22
        "realitySettings": {
23
          "show": false,
24
          "dest": "www.microsoft.com:443",
25
          "xver": 0,
26
          "serverNames": ["www.microsoft.com"],
27
          "privateKey": "YOUR-PRIVATE-KEY-HERE",
28
          "shortIds": ["YOUR-SHORT-ID-HERE"]
29
        }
30
      }
31
    }
32
  ],
33
  "outbounds": [
34
    {
35
      "tag": "direct",
36
      "protocol": "freedom"
37
    },
38
    {
39
      "tag": "warp-out",
40
      "protocol": "socks",
41
      "settings": {
42
        "servers": [
43
          {
44
            "address": "127.0.0.1",
45
            "port": 40000
46
          }
47
        ]
48
      }
49
    },
50
    {
51
      "tag": "block",
52
      "protocol": "blackhole"
53
    }
54
  ],
55
  "routing": {
56
    "domainStrategy": "AsIs",
57
    "rules": [
58
      {
59
        "type": "field",
60
        "domain": [
61
          "openai.com",
62
          "api.openai.com",
63
          "chatgpt.com",
64
          "oaiusercontent.com",
65
          "claude.ai",
66
          "anthropic.com",
67
          "gemini.google.com",
68
          "perplexity.ai",
69
          "mistral.ai",
70
          "cohere.com",
71
          "huggingface.co"
72
        ],
73
        "outboundTag": "warp-out"
74
      },
75
      {
76
        "type": "field",
77
        "ip": ["geoip:private"],
78
        "outboundTag": "block"
79
      }
80
    ]
81
  }
82
}

1
# 允许 443 端口（TCP）
2
ufw allow 443/tcp
3
ufw --force enable
4

5
# 启动 Xray 并设置开机自启
6
systemctl start xray
7
systemctl enable xray
8

9
# 确认运行状态
10
systemctl status xray

1
xray -test -c /usr/local/etc/xray/config.json

1
# 添加 Cloudflare GPG 密钥
2
curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg | \
3
  sudo gpg --dearmor -o /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg
4

5
# 添加 WARP 软件源
6
echo "deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] \
7
  https://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | \
8
  sudo tee /etc/apt/sources.list.d/cloudflare-client.list
9

10
# 安装
11
sudo apt update && sudo apt install cloudflare-warp -y

1
# 注册 WARP 客户端（只需执行一次）
2
warp-cli registration new
3

4
# 切换到代理模式（SOCKS5，端口 40000）
5
warp-cli mode proxy
6

7
# 连接到 Cloudflare WARP
8
warp-cli connect
9

10
# 确认连接状态
11
warp-cli status

1
# 应返回 Cloudflare IP，而非你的 VPS IP
2
curl --socks5 127.0.0.1:40000 https://ifconfig.me

1
cat > /etc/systemd/system/warp-autoconnect.service << 'EOF'
2
[Unit]
3
Description=Cloudflare WARP auto-connect
4
After=network-online.target warp-svc.service
5
Wants=network-online.target
6

7
[Service]
8
Type=oneshot
9
ExecStart=/usr/bin/warp-cli connect
10
RemainAfterExit=yes
11

12
[Install]
13
WantedBy=multi-user.target
14
EOF
15

16
systemctl daemon-reload
17
systemctl enable warp-autoconnect.service

1
systemctl restart xray
2
systemctl status xray

1
# Clash Verge Rev / Mihomo 配置文件，用于 VLESS + REALITY
2
# 将所有 YOUR-... 替换为你的实际凭证
3

4
port: 7890
5
socks-port: 7891
6
allow-lan: false
7
mode: rule
8
log-level: info
9
external-controller: 127.0.0.1:9090
10

11
proxies:
12
  - name: "My VPS"
13
    type: vless
14
    server: YOUR-VPS-IP-OR-DOMAIN
15
    port: 443
16
    uuid: YOUR-UUID-HERE
17
    network: tcp
18
    tls: true
19
    udp: true
20
    flow: xtls-rprx-vision
21
    reality-opts:
22
      public-key: YOUR-PASSWORD-HERE
23
      short-id: YOUR-SHORT-ID-HERE
24
    servername: www.microsoft.com
25
    client-fingerprint: chrome
26

27
proxy-groups:
28
  - name: "PROXY"
29
    type: select
30
    proxies:
31
      - "My VPS"
32
      - DIRECT
33

34
rules:
35
  - GEOIP,private,DIRECT,no-resolve
36
  - GEOIP,CN,DIRECT
37
  - MATCH,PROXY

1
# 通过 WARP 代理——应显示 Cloudflare IP
2
curl --socks5 127.0.0.1:40000 https://ifconfig.me
3

4
# VPS 直连 IP——应与上面的结果不同
5
curl https://ifconfig.me