gitmyhub

haoel.github.io

Shell ★ 13k updated 3y ago

A detailed Chinese-language guide for setting up your own private proxy server on a foreign VPS to access blocked websites, covering server selection, Docker-based setup, and client apps on all devices.

ShellDockerGostShadowsocksClashCloudflaresetup: hardcomplexity 3/5

This is a technical guide written in Chinese for setting up a self-hosted proxy server to access websites blocked in mainland China. The guide covers the full process from buying a virtual private server (VPS) abroad to configuring proxy software and client apps on phones, tablets, and computers.

The author begins by recommending self-hosting over commercial shared proxy services, citing privacy concerns and the higher risk of shared services being shut down. The guide then walks through choosing a VPS provider, including options such as AWS LightSail, Microsoft Azure, Google Cloud, Oracle Cloud, and budget providers like BandwagonHost and RackNerd. It advises choosing servers in Hong Kong, Japan, Singapore, or the US, and explains the difference between CN2 GT and CN2 GIA network routes, with CN2 GIA recommended for better stability and speed from China.

The proxy setup uses Docker to run an HTTPS-based forwarding service through a tool called Gost, paired with enabling TCP BBR congestion control on the server for better performance. Shadowsocks and L2TP/IPSec are mentioned but flagged as not recommended due to detection risk. The guide also covers registering a domain name and obtaining a free SSL certificate to disguise proxy traffic as ordinary HTTPS.

Client configuration is covered for Chrome browser proxy settings, Clash (a cross-platform proxy client for Windows, Mac, and Linux), and mobile apps for Android and iOS. Later sections address handling blocked IP addresses, setting up a home router or Raspberry Pi as a transparent gateway, data center gateway setups for AWS environments, SSH tunneling, and Cloudflare WARP as an alternative.

This is a detailed reference document in Chinese aimed at technically capable users who need private internet access from a restricted network environment. The full README is longer than what was shown.

Where it fits