1.install ss
yum install python-setuptools
easy_install pip
pip install (sh-adow-s-ocks;please remove;-)
2.config ss (single user)
vim /etc/(sh-adow-s-ocks;please remove;-).json
{ "server":"my-server", "server_port":8338, "local_port":8888, "password":"password0", "timeout":600, "method":"aes-256-cfb", "auth": true, "fast_open":true }
server:hostname or ip
fast_open:true for Linux core 3.7+
3.optimize ss
vim /etc/security/limits.conf
add 2 line
* soft nofile 51200 * hard nofile 51200
bash
ulimit -n 51200
4.start ss
vim /usr/lib/systemd/system/ss.service
[Unit] Description=(sh-adow-s-ocks;please remove;-) Server After=network.target [Service] PermissionsStartOnly=true ExecStartPre=/bin/mkdir -p /run/(sh-adow-s-ocks;please remove;-) ExecStartPre=/bin/chown nobody:nobody /run/(sh-adow-s-ocks;please remove;-) ExecStart=/usr/bin/ssserver -c /etc/(sh-adow-s-ocks;please remove;-).json Restart=on-abort User=nobody Group=nobody UMask=0027 [Install] WantedBy=multi-user.target
systemctl start ss
systemctl enable ss
5.firewall
firewall-cmd --zone=public --add-port=8388/tcp --permanent firewall-cmd --zone=public --add-port=8388/udp --permanent firewall-cmd --reload
6. use ssr or ss client
also (v2-ray;please remove;-) or brook etc.
Android:ssr&ss&(v2-ray;please remove;-)&brook&bifrostv&surfboard&wireguard&
ios:surge&shadowrocket&quantumult&kitsunebi&potatso&loon&yunsafe&
windows:clash&shuttle
mac:clashx&shuttle&surge
reference:https://blog.csdn.net/finishx/article/details/79039362