Rework into using nftables, along with proper Xray DNS configuration

2025-04-13 13:41:16 +05:00
parent a5c8961d78
commit f9645b0ef6
17 changed files with 249 additions and 195 deletions
--- a/etc/xray/config/outbounds.jsonc
+++ b/etc/xray/config/outbounds.jsonc
@@ -0,0 +1,70 @@
+{
+    "outbounds": [
+        {
+            "tag": "vless-reality",
+            "protocol": "vless",
+            "settings": {
+                "vnext": [
+                    {
+                        "address": "1.1.1.1",
+                        "port": 443,
+                        "users": [
+                            {
+                                "encryption": "none",
+                                "flow": "xtls-rprx-vision",
+                                "id": "00000000-0000-0000-0000-000000000000",
+                                "level": 0
+                            }
+                        ]
+                    }
+                ]
+            },
+            "streamSettings": {
+                "network": "tcp",
+                "realitySettings": {
+                    "fingerprint": "chrome",
+                    "publicKey": "",
+                    "serverName": "",
+                    "shortId": "",
+                    "spiderX": "/"
+                },
+                "security": "reality",
+                // Important: This is required for rules to work correctly!
+                "sockopt": {
+                    "domainStrategy": "UseIP",
+                    "mark": 2
+                }
+            }
+        },
+        {
+            "tag": "direct",
+            "protocol": "freedom",
+            "streamSettings": {
+                "sockopt": {
+                    "mark": 2
+                }
+            },
+            "settings": {
+                "domainStrategy": "UseIP"
+            }
+        },
+        {
+            "tag": "block",
+            "protocol": "blackhole",
+            "settings": {
+                "response": {
+                    "type": "http"
+                }
+            }
+        },
+        {
+            "tag": "dns-out",
+            "protocol": "dns",
+            "streamSettings": {
+                "sockopt": {
+                    "mark": 2
+                }
+            }
+        }
+    ]
+}