Xray-core

https://xtls.github.io/ru/
Admin
Xray-core is a proxy platform supporting advanced protocols like VLESS, XTLS, REALITY, and powerful...
Tokens:137,190
Snippets:1,233
Trust Score:9.7
Update:2 months ago
Show doc for...
Tokens:
Raw
### Install Dependencies and Run Docs Locally

Source: https://xtls.github.io/ru/document/document.html

Install project dependencies using pnpm and start the local development server for previewing documentation.

```bash
pnpm install
pnpm run docs:dev
```

--------------------------------

### Load Balancing Configuration Example

Source: https://xtls.github.io/ru/config/routing.html

A complete example showing how to integrate a balancer into the routing rules and define the corresponding outbounds.

```json
{
  "routing": {
    "rules": [
      {
        "inboundTag": ["in"],
        "balancerTag": "round"
      }
    ],
    "balancers": [
      {
        "selector": ["out"],
        "strategy": {
          "type": "roundRobin"
        },
        "tag": "round"
      }
    ]
  },

  "inbounds": [
    {
      "tag": "in"
    }
  ],

  "outbounds": [
    {
      "tag": "out1"
    },
    {
      "tag": "out2"
    }
  ]
}
```

--------------------------------

### Install and Issue Certificates with acme.sh

Source: https://xtls.github.io/ru/document/level-1/fallbacks-with-sni.html

Installs acme.sh, sets the Cloudflare API token, issues a wildcard certificate via DNS-01 challenge, and installs the certificate files.

```bash
curl https://get.acme.sh | sh # Установка acme.sh
export CF_Token="sdfsdfsdfljlbjkljlkjsdfoiwje" # Установка переменной окружения с API-токеном
acme.sh --issue -d example.com -d *.example.com --dns dns_cf # Запрос сертификата с проверкой DNS-01
mkdir /etc/ssl/xray # Создание каталога для хранения сертификата
acme.sh --install-cert -d example.com --fullchain-file /etc/ssl/xray/cert.pem --key-file /etc/ssl/xray/privkey.key --reloadcmd "chown nobody:nogroup -R /etc/ssl/xray && systemctl restart xray" # Установка сертификата в указанный каталог и настройка команды для автоматического перезапуска Xray после обновления сертификата
```

--------------------------------

### VMess Inbound Configuration Example

Source: https://xtls.github.io/ru/config/inbounds/vmess.html

Example of a VMess inbound configuration object, specifying users and default settings.

```json
{
  "inbounds": [
    {
      // ...
      "protocol": "vmess",
      "settings": {
        "users": [
          {
            "id": "5783a3e7-e373-51cd-8642-c83782b807c5",
            "level": 0,
            "email": "love@xray.com"
          }
        ],
        "default": {
          "level": 0
        }
      }
    }
  ]
}
```

--------------------------------

### Socks Inbound Configuration Example

Source: https://xtls.github.io/ru/config/inbounds/socks.html

Example of a Socks inbound configuration object. This shows settings for authentication, user credentials, UDP support, IP address, and user level.

```json
{
  "inbounds": [
    {
      // ...
      "protocol": "socks",
      "settings": {
        "auth": "noauth",
        "users": [
          {
            "user": "my-username",
            "pass": "my-password"
          }
        ],
        "udp": false,
        "ip": "127.0.0.1",
        "userLevel": 0
      }
    }
  ]
}
```

--------------------------------

### Running Xray with Browser Dialer

Source: https://xtls.github.io/ru/config/features/browser_dialer.html

To enable the Browser Dialer, Xray needs to be started with a specific environment variable pointing to the local address and port it will listen on. This example shows how to set the environment variable and run the Xray core.

```bash
set XRAY_BROWSER_DIALER=127.0.0.1:8080
./xray -c config.json
```

--------------------------------

### Freedom Outbound Configuration Example

Source: https://xtls.github.io/ru/config/outbounds/freedom.html

Example configuration for the freedom outbound protocol, demonstrating various settings like domain strategy, redirection, fragmentation, and noise.

```json
{
  "outbounds": [
    {
      // ...
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "AsIs",
        "redirect": "127.0.0.1:3366",
        "userLevel": 0,
        "fragment": {
          "packets": "tlshello",
          "length": "100-200",
          "interval": "10-20" // единица измерения: мс
        },
        "noises": [
          {
            "type": "base64",
            "packet": "7nQBAAABAAAAAAAABnQtcmluZwZtc2VkZ2UDbmV0AAABAAE=",
            "delay": "10-16"
          }
        ],
        "proxyProtocol": 0,
        "finalRules": [
          {
            "action": "block",
            "network": "tcp",
            "port": "22,25,465,587"
          },
          {
            "action": "block",
            "ip": ["geoip:cn"]
          }
        ]
      }
    }
  ]
}
```

--------------------------------

### Install Linux Software Updates

Source: https://xtls.github.io/ru/document/level-0/ch03-ssh.html

Use `apt upgrade` to install the updates for all installed packages on your system. You will be prompted to confirm the installation by entering 'y'.

```shell
apt upgrade
```

--------------------------------

### CertificateObject Configuration

Source: https://xtls.github.io/ru/config/transports/tls.html

Example of a CertificateObject configuration including certificate and key file paths or inline data.

```json
{
  "ocspStapling": 0,
  "oneTimeLoading": false,
  "usage": "encipherment",
  "buildChain": false,
  "certificateFile": "/path/to/certificate.crt",
  "keyFile": "/path/to/key.key",
  "certificate": [
    "--BEGIN CERTIFICATE--",
    "MIICwDCCAaigAwIBAgIRAO16JMdESAuHidFYJAR/7kAwDQYJKoZIhvcNAQELBQAw",
    "ADAeFw0xODA0MTAxMzU1MTdaFw0xODA0MTAxNTU1MTdaMAAwggEiMA0GCSqGSIb3",
    "DQEBAQUAA4IBDwAwggEKAoIBAQCs2PX0fFSCjOemmdm9UbOvcLctF94Ox4BpSfJ+",
    "3lJHwZbvnOFuo56WhQJWrclKoImp/c9veL1J4Bbtam3sW3APkZVEK9UxRQ57HQuw",
    "OzhV0FD20/0YELou85TwnkTw5l9GVCXT02NG+pGlYsFrxesUHpojdl8tIcn113M5",
    "pypgDPVmPeeORRf7nseMC6GhvXYM4txJPyenohwegl8DZ6OE5FkSVR5wFQtAhbON",
    "OAkIVVmw002K2J6pitPuJGOka9PxcCVWhko/W+JCGapcC7O74palwBUuXE1iH+Jp",
    "noPjGp4qE2ognW3WH/sgQ+rvo20eXb9Um1steaYY8xlxgBsXAgMBAAGjNTAzMA4G",
    "A1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAA",
    "MA0GCSqGSIb3DQEBCwUAA4IBAQBUd9sGKYemzwPnxtw/vzkV8Q32NILEMlPVqeJU",
    "7UxVgIODBV6A1b3tOUoktuhmgSSaQxjhYbFAVTD+LUglMUCxNbj56luBRlLLQWo+",
    "9BUhC/ow393tLmqKcB59qNcwbZER6XT5POYwcaKM75QVqhCJVHJNb1zSEE7Co7iO",
    "6wIan3lFyjBfYlBEz5vyRWQNIwKfdh5cK1yAu13xGENwmtlSTHiwbjBLXfk+0A/8",
    "r/2s+sCYUkGZHhj8xY7bJ1zg0FRalP5LrqY+r6BckT1QPDIQKYy615j1LpOtwZe/",
    "d4q7MD/dkzRDsch7t2cIjM/PYeMuzh87admSyL6hdtK0Nm/Q",
    "--END CERTIFICATE--"
  ],
  "key": [
    "--BEGIN RSA PRIVATE KEY--",
    "MIIEowIBAAKCAQEArNj19HxUgoznppnZvVGzr3C3LRfeDseAaUnyft5SR8GW75zh",
    "bqOeloUCVq3JSqCJqf3Pb3i9SeAW7Wpt7FtwD5GVRCvVMUUOex0LsDs4VdBQ9tP9",
    "GBC6LvOU8J5E8OZfRlQl09NjRvqRpWLBa8XrFB6aI3ZfLSHJ9ddzOacqYAz1Zj3n",
    "jkUX+57HjAuhob12DOLcST8np6IcHoJfA2ejhORZElUecBULQIWzjTgJCFVZsNNN",
    "itieqYrT7iRjpGvT8XAlVoZKP1viQhmqXAuzu+KWpcAVLlxNYh/iaZ6D4xqeKhNq",
    "IJ1t1h/7IEPq76NtHl2/VJtbLXmmGPMZcYAbFwIDAQABAoIBAFCgG4phfGIxK9Uw",
    "qrp+o9xQLYGhQnmOYb27OpwnRCYojSlT+mvLcqwvevnHsr9WxyA+PkZ3AYS2PLue",
    "C4xW0pzQgdn8wENtPOX8lHkuBocw1rNsCwDwvIguIuliSjI8o3CAy+xVDFgNhWap",
    "/CMzfQYziB7GlnrM6hH838iiy0dlv4I/HKk+3/YlSYQEvnFokTf7HxbDDmznkJTM",
    "aPKZ5qbnV+4AcQfcLYJ8QE0ViJ8dVZ7RLwIf7+SG0b0bqloti4+oQXqGtiESUwEW",
    "/Wzi7oyCbFJoPsFWp1P5+wD7jAGpAd9lPIwPahdr1wl6VwIx9W0XYjoZn71AEaw4",
    "bK4xUXECgYEA3g2o9WqyrhYSax3pGEdvV2qN0VQhw7Xe+jyy98CELOO2DNbB9QNJ",
    "8cSSU/PjkxQlgbOJc8DEprdMldN5xI/srlsbQWCj72wXxXnVnh991bI2clwt7oYi",
    "pcGZwzCrJyFL+QaZmYzLxkxYl1tCiiuqLm+EkjxCWKTX/kKEFb6rtnMCgYEAx0WR",
    "L8Uue3lXxhXRdBS5QRTBNklkSxtU+2yyXRpvFa7Qam+GghJs5RKfJ9lTvjfM/PxG"
  ]
}
```

--------------------------------

### RealityObject Configuration Example

Source: https://xtls.github.io/ru/config/transports/reality.html

Example JSON configuration for RealityObject, applicable to both outbound (client) and inbound (server) stream settings. It demonstrates various parameters for security and connection targeting.

```json
{
  // пример для outbound, аналогично применимо к inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "security": "reality",
        "realitySettings": {
          // Входящие настройки (сервер)
          "show": false,
          "target": "example.com:443",
          "xver": 0,
          "serverNames": ["example.com", "www.example.com"],
          "privateKey": "",
          "minClientVer": "",
          "maxClientVer": "",
          "maxTimeDiff": 0,
          "shortIds": ["", "0123456789abcdef"],
          "mldsa65Seed": "",
          "limitFallbackUpload": {
            "afterBytes": 0,
            "bytesPerSec": 0,
            "burstBytesPerSec": 0
          },
          "limitFallbackDownload": {
            "afterBytes": 0,
            "bytesPerSec": 0,
            "burstBytesPerSec": 0
          },
          // Исходящие настройки (клиент)
          "serverName": "",
          "fingerprint": "chrome",
          "password": "",
          "shortId": "",
          "mldsa65Verify": "",
          "spiderX": ""
        }
      }
    }
  ]
}
```

--------------------------------

### Run Xray with Multiple Configuration Files

Source: https://xtls.github.io/ru/document/command.html

Example of merging multiple configuration files by providing the -config flag multiple times.

```bash
xray run -config base.json -config routing.json -config outbounds.yaml
```

--------------------------------

### Configure SockoptObject in StreamSettings

Source: https://xtls.github.io/ru/config/transports/sockopt.html

Example structure for defining sockopt parameters within the streamSettings of an outbound configuration.

```json
{
  // пример для outbound, аналогично применимо к inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "sockopt": {
          "mark": 0,
          "tcpMaxSeg": 1440,
          "tcpFastOpen": false,
          "tproxy": "off",
          "domainStrategy": "AsIs",
          "happyEyeballs": {},
          "dialerProxy": "",
          "acceptProxyProtocol": false,
          "trustedXForwardedFor": [],
          "tcpKeepAliveInterval": 0,
          "tcpKeepAliveIdle": 300,
          "tcpUserTimeout": 10000,
          "tcpcongestion": "bbr",
          "interface": "wg0",
          "V6Only": false,
          "tcpWindowClamp": 600,
          "tcpMptcp": false,
          "addressPortStrategy": "",
          "customSockopt": []
        }
      }
    }
  ]
}
```

--------------------------------

### Configure mKCP in StreamSettings

Source: https://xtls.github.io/ru/config/transports/mkcp.html

Example configuration for the kcpSettings object within the streamSettings of an outbound or inbound connection.

```json
{
  // outbound example; also applies to inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "method": "mkcp",
        "kcpSettings": {
          "mtu": 1350,
          "tti": 20,
          "uplinkCapacity": 5,
          "downlinkCapacity": 20,
          "congestion": false,
          "readBufferSize": 1,
          "writeBufferSize": 1
        }
      }
    }
  ]
}
```

--------------------------------

### TLSObject Configuration Example

Source: https://xtls.github.io/ru/config/transports/tls.html

This JSON structure demonstrates the configuration of tlsSettings within an outbound streamSettings block.

```json
{
  // пример для outbound, аналогично применимо к inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "security": "tls",
        "tlsSettings": {
          "serverName": "xray.com",
          "verifyPeerCertByName": "",
          "rejectUnknownSni": false,
          "allowInsecure": false,
          "alpn": ["h2", "http/1.1"],
          "minVersion": "1.2",
          "maxVersion": "1.3",
          "cipherSuites": "Укажите нужные наборы шифров, разделяя их двоеточием",
          "certificates": [],
          "disableSystemRoot": false,
          "enableSessionResumption": false,
          "fingerprint": "",
          "pinnedPeerCertSha256": "",
          "curvePreferences": [""],
          "masterKeyLog": "",
          "echServerKeys": "",
          "echConfigList": "",
          "echSockopt": {}
        }
      }
    }
  ]
}
```

--------------------------------

### VLESS Inbound Configuration Example

Source: https://xtls.github.io/ru/config/inbounds/vless.html

A standard configuration block for a VLESS inbound, including user definitions and fallback settings.

```json
{
  "inbounds": [
    {
      // ...
      "protocol": "vless",
      "settings": {
        "users": [
          {
            "id": "5783a3e7-e373-51cd-8642-c83782b807c5",
            "level": 0,
            "email": "love@xray.com",
            "flow": "xtls-rprx-vision",
            "reverse": {}
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 80
          }
        ]
      }
    }
  ]
}
```

--------------------------------

### PingConfigObject JSON Configuration

Source: https://xtls.github.io/ru/config/observatory.html

Example configuration for the PingConfigObject, defining the destination URL, check interval, and sampling settings.

```json
{
  // Для каждого исходящего прокси выполняется 10 проверок в течение 10 минут, конкретное время проверок случайно
  // Если все они завершатся неудачей, узел будет помечен как неисправный в течение 10 ~ 20 минут
  // После сбоя достаточно одной успешной проверки, чтобы узел был помечен как исправный, на это потребуется не более 10 минут
  "destination": "https://connectivitycheck.gstatic.com/generate_204",
  "connectivity": "",
  "interval": "1m",
  "sampling": 10,
  "timeout": "5s",
  "httpMethod": "HEAD"
}
```

--------------------------------

### DNS Outbound Configuration Object

Source: https://xtls.github.io/ru/config/outbounds/dns.html

Example configuration for the DNS outbound protocol, demonstrating rewrite settings and rule definitions.

```json
{
  "outbounds": [
    {
      // ...
      "protocol": "dns",
      "settings": {
        "rewriteNetwork": "udp",
        "rewriteAddress": "1.1.1.1",
        "rewritePort": 53,
        "userLevel": 0,
        "rules": [
          {
            "action": "return",
            "rCode": 5,
            "domain": ["domain:example.com"]
          },
          {
            "action": "direct",
            "qType": 65,
            "domain": ["geosite:geolocation-!cn"]
          }
        ]
      }
    }
  ]
}
```

--------------------------------

### Configure DNS Servers and Query Strategies

Source: https://xtls.github.io/ru/config/dns.html

Example configuration showing how to define multiple DNS servers with specific domain routing and per-server query strategies.

```json
{
  "dns": {
    "servers": [
      "https://1.1.1.1/dns-query",
      {
        "address": "https://8.8.8.8/dns-query",
        "domains": ["geosite:netflix"],
        "skipFallback": true,
        "queryStrategy": "UseIPv4" // Для доменов netflix запрашивать A запись
      },
      {
        "address": "https://1.1.1.1/dns-query",
        "domains": ["geosite:openai"],
        "skipFallback": true,
        "queryStrategy": "UseIPv6" // Для доменов openai запрашивать AAAA запись
      }
    ],
    "queryStrategy": "UseIP" // Глобально запрашивать одновременно A и AAAA записи
  }
}
```

--------------------------------

### Example Configuration File 1

Source: https://xtls.github.io/ru/config/features/multiple.html

This is the first configuration file, defining log level, an inbound SOCKS server, and a direct outbound.

```json
{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "tag": "socks",
      "protocol": "socks",
      "listen": "0.0.0.0",
      "port": 8888
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom"
    }
  ]
}
```

--------------------------------

### Example Configuration File 3 (with tail)

Source: https://xtls.github.io/ru/config/features/multiple.html

This configuration file adds a new outbound. Because its filename contains 'tail', it will be appended to the outbounds list.

```json
{
  "outbounds": [
    {
      "tag": "direct2",
      "protocol": "freedom"
    }
  ]
}
```

--------------------------------

### Run Xray with different configuration sources

Source: https://xtls.github.io/ru/document/command.html

Demonstrates how to load Xray configurations from local files, standard input, remote URLs, or Unix Domain Sockets.

```bash
xray run -config ./config.json
```

```bash
cat config.json | xray run -config stdin:
```

```bash
xray run -config https://example.com/xray/config.json
```

```bash
xray run -config http+unix:///run/xray-config.sock/config.json
```

--------------------------------

### Hysteria Outbound Configuration Example

Source: https://xtls.github.io/ru/config/outbounds/hysteria.html

Example of an `OutboundConfigurationObject` for Hysteria. It specifies the protocol and connection details like address and port.

```json
{
  "outbounds": [
    {
      // ...
      "protocol": "hysteria",
      "settings": {
        "version": 2,
        "address": "192.168.108.1",
        "port": 3128
      }
    }
  ]
}
```

--------------------------------

### Example Configuration File 2

Source: https://xtls.github.io/ru/config/features/multiple.html

This second configuration file overrides the log level and modifies the inbound SOCKS port and adds a blackhole outbound.

```json
{
  "log": {
    "loglevel": "debug"
  },
  "inbounds": [
    {
      "tag": "socks",
      "protocol": "socks",
      "listen": "127.0.0.1",
      "port": 1080
    }
  ],
  "outbounds": [
    {
      "tag": "block",
      "protocol": "blackhole"
    }
  ]
}
```

--------------------------------

### Hysteria Inbound Configuration Example

Source: https://xtls.github.io/ru/config/inbounds/hysteria.html

Example of how to configure the Hysteria protocol within the inbounds section. This includes user authentication details.

```json
{
  "inbounds": [
    {
      // ...
      "protocol": "hysteria",
      "settings": {
        "version": 2,
        "users": [
          {
            "auth": "5783a3e7-e373-51cd-8642-c83782b807c5",
            "level": 0,
            "email": "love@xray.com"
          }
        ]
      }
    }
  ]
}
```

--------------------------------

### QUIC Parameters Configuration Example

Source: https://xtls.github.io/ru/config/transports/finalmask.html

A sample JSON configuration structure for the finalmask transport settings, defining congestion control, bandwidth limits, and UDP port hopping parameters.

```json
{
  "finalmask": {
    "quicParams": {
      "congestion": "force-brutal",
      "bbrProfile": "standard",
      "debug": false,
      "brutalUp": "60 mbps",
      "brutalDown": 0,
      "udpHop": {
        "ports": "20000-50000",
        "interval": "5-10"
      },
      "initStreamReceiveWindow": 8388608,
      "maxStreamReceiveWindow": 8388608,
      "initConnectionReceiveWindow": 20971520,
      "maxConnectionReceiveWindow": 20971520,
      "maxIdleTimeout": 30,
      "keepAlivePeriod": 0,
      "disablePathMTUDiscovery": false,
      "maxIncomingStreams": 1024
    }
  }
}
```

--------------------------------

### HTTP Attribute Matching Examples

Source: https://xtls.github.io/ru/config/routing.html

Examples of JSON objects used to match HTTP traffic attributes such as methods, paths, and content types.

```json
{ ":method": "GET" }
```

```json
{ ":path": "/test" }
```

```json
{ "accept": "text/html" }
```

--------------------------------

### Добавление правила исключения в цепочку PREROUTING

Source: https://xtls.github.io/ru/document/level-2/transparent_proxy/transparent_proxy.html

Используется для предотвращения несанкционированного доступа к прокси-шлюзу со стороны внешних пользователей в той же подсети.

```bash
iptables -t mangle -A XRAY ! -s Диапазон LAN-адресов шлюза -j RETURN
```

--------------------------------

### Clone Xray Repository and Download Dependencies

Source: https://xtls.github.io/ru/development/intro/compile.html

Clone the Xray-core repository and download its Go module dependencies. This is the initial step before building the binary.

```bash
git clone https://github.com/XTLS/Xray-core.git
cd Xray-core && go mod download
```

--------------------------------

### Convert configuration files to Protobuf

Source: https://xtls.github.io/ru/document/command.html

Converts JSON configuration files into a binary Protobuf format for Xray-core.

```bash
xray convert pb -outpbfile mix.pb c1.json c2.json c3.json
```

```bash
xray convert pb -debug mix.pb
```

```bash
xray -c mix.pb
```

```bash
xray help convert pb
```

--------------------------------

### HappyEyeballsObject JSON Configuration

Source: https://xtls.github.io/ru/config/transports/sockopt.html

Example configuration object for the HappyEyeballs settings.

```json
{
  "happyEyeballs": {
    "tryDelayMs": 250,
    "prioritizeIPv6": false,
    "interleave": 1,
    "maxConcurrentTry": 4
  }
}
```

--------------------------------

### Configure GRPCObject in StreamSettings

Source: https://xtls.github.io/ru/config/transports/grpc.html

Example configuration for the grpcSettings object within an outbound streamSettings block.

```json
{
  // outbound example; also applies to inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "method": "grpc",
        "grpcSettings": {
          "authority": "grpc.example.com",
          "serviceName": "name",
          "multiMode": false,
          "user_agent": "custom user agent",
          "idle_timeout": 60,
          "health_check_timeout": 20,
          "permit_without_stream": false,
          "initial_windows_size": 0
        }
      }
    }
  ]
}
```

--------------------------------

### DNS Configuration with Query Strategy Conflict

Source: https://xtls.github.io/ru/config/dns.html

Example demonstrating how conflicting query strategies between global and server-specific settings result in empty responses.

```json
{
  "dns": {
    "servers": [
      "https://1.1.1.1/dns-query",
      {
        "address": "https://8.8.8.8/dns-query",
        "domains": ["geosite:netflix"],
        "skipFallback": true,
        "queryStrategy": "UseIPv6" // Конфликт: глобальный "UseIPv4" и "UseIPv6" вложенного элемента
      }
    ],
    "queryStrategy": "UseIPv4"
  }
}
```

--------------------------------

### Merged Configuration Example

Source: https://xtls.github.io/ru/config/features/multiple.html

This shows the final merged configuration after applying the rules for overwriting objects and merging arrays based on tags and filenames.

```json
{
  "log": {
    "loglevel": "debug" // object top level overwrites previous
  },
  "inbounds": [
    {
      "tag": "socks", // overwrite element with the same tag
      "protocol": "socks",
      "listen": "127.0.0.1",
      "port": 1080
    }
  ],
  "outbounds": [
    {
      "tag": "block", // added to the beginning of outbounds
      "protocol": "blackhole"
    },
    {
      "tag": "direct",
      "protocol": "freedom"
    },
    {
      "tag": "direct2", // added to the end because filename 03_tail.json contains tail
      "protocol": "freedom"
    }
  ]
}
```

--------------------------------

### HTTP Inbound Configuration Example

Source: https://xtls.github.io/ru/config/inbounds/http.html

This JSON snippet shows a basic configuration for an HTTP inbound connection, including user credentials and transparency settings.

```json
{
  "inbounds": [
    {
      // ...
      "protocol": "http",
      "settings": {
        "users": [
          {
            "user": "my-username",
            "pass": "my-password"
          }
        ],
        "allowTransparent": false,
        "userLevel": 0
      }
    }
  ]
}
```

--------------------------------

### FinalMaskObject Configuration

Source: https://xtls.github.io/ru/config/transports/finalmask.html

Example configuration for the finalmask field within StreamSettingsObject, applicable to both inbound and outbound traffic.

```json
{
  // пример для outbound, аналогично применимо к inbound
  "outbounds": [
    {
      // ...
      "streamSettings": {
        "finalmask": {
          "tcp": [
            {
              "type": "",
              "settings": {}
            }
          ],
          "udp": [
            {
              "type": "",
              "settings": {}
            }
          ],
          "quicParams": {
            "congestion": "force-brutal",
            "bbrProfile": "standard",
            "debug": false,
            "brutalUp": "60 mbps",
            "brutalDown": 0,
            "udpHop": {
              "ports": "20000-50000",
              "interval": "5-10"
            },
            "initStreamReceiveWindow": 8388608,
            "maxStreamReceiveWindow": 8388608,
            "initConnectionReceiveWindow": 20971520,
            "maxConnectionReceiveWindow": 20971520,
            "maxIdleTimeout": 30,
            "keepAlivePeriod": 0,
            "disablePathMTUDiscovery": false,
            "maxIncomingStreams": 1024
          }
        }
      }
    }
  ]
}
```

--------------------------------

### Display Xray Help

Source: https://xtls.github.io/ru/document/command.html

View the list of available commands and their descriptions.

```bash
Xray is a platform for building proxies.

Usage:

        xray <command> [arguments]

The commands are:

        run          Запустить Xray с конфигурацией
        version      Показать текущую версию Xray
        api          Вызвать API в процессе Xray
        convert      Конвертировать конфигурации
        tls          Инструменты TLS
        uuid         Сгенерировать UUIDv4 или UUIDv5 (VLESS)
        x25519       Сгенерировать ключевую пару для обмена ключами X25519 (REALITY, VLESS Encryption)
        wg           Сгенерировать ключевую пару для обмена ключами X25519 (WireGuard)
        mldsa65      Сгенерировать ключевую пару для постквантовой подписи ML-DSA-65 (REALITY)
        mlkem768     Сгенерировать ключевую пару для постквантового обмена ключами ML-KEM-768 (VLESS Encryption)
        vlessenc     Сгенерировать пару json для дешифрования/шифрования (VLESS Encryption)

Use "xray help <command>" for more information about a command.
```

--------------------------------

### VMess Outbound Configuration Object

Source: https://xtls.github.io/ru/config/outbounds/vmess.html

Example structure for defining a VMess outbound in the Xray configuration file.

```json
{
  "outbounds": [
    {
      // ...
      "protocol": "vmess",
      "settings": {
        "address": "127.0.0.1",
        "port": 37192,
        "id": "5783a3e7-e373-51cd-8642-c83782b807c5",
        "security": "auto",
        "level": 0,
        "experiments": ""
      }
    }
  ]
}
```

--------------------------------

### Установка Nginx из официального репозитория

Source: https://xtls.github.io/ru/document/level-1/fallbacks-with-sni.html

Команды для добавления репозитория Nginx и установки пакета в Ubuntu.

```bash
sudo apt install curl gnupg2 ca-certificates lsb-release
echo "deb [arch=amd64] http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" \
    | sudo tee /etc/apt/sources.list.d/nginx.list
curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo apt-key add -
sudo apt update
sudo apt install nginx
```

--------------------------------

### Configure Routing Rules

Source: https://xtls.github.io/ru/document/level-1/routing-lv1-part2.html

Example of separating different matching criteria into distinct rules for better routing control.

```json
{
  "routing": {
    "domainStrategy": "AsIs",
    "rules": [
      {
        "ip": ["223.5.5.5"],
        "outboundTag": "direct-out"
      },
      {
        "domain": ["full:direct.yourdomain.com"],
        "outboundTag": "direct-out"
      }
    ]
  }
}
```

--------------------------------

### Define Certificate Content

Source: https://xtls.github.io/ru/config/transports/tls.html

Example format for providing certificate or key content as an array of strings within the configuration.

```json
    "3vhuBliWQOKQbm1ZGLbgGBM505EOP7DikUmH/kzKxIeRo4l64mioKdDwK/4CZtS7",
    "az0Lq3eS6bq11qL4mEdE6Gn/Y+sqB83GHZYju80CgYABFm4KbbBcW+1RKv9WSBtK",
    "gVIagV/89moWLa/uuLmtApyEqZSfn5mAHqdc0+f8c2/Pl9KHh50u99zfKv8AsHfH",
    "TtjuVAvZg10GcZdTQ/I41ruficYL0gpfZ3haVWWxNl+J47di4iapXPxeGWtVA+u8",
    "eH1cvgDRMFWCgE7nUFzE8wKBgGndUomfZtdgGrp4ouLZk6W4ogD2MpsYNSixkXyW",
    "64cIbV7uSvZVVZbJMtaXxb6bpIKOgBQ6xTEH5SMpenPAEgJoPVts816rhHdfwK5Q",
    "8zetklegckYAZtFbqmM0xjOI6bu5rqwFLWr1xo33jF0wDYPQ8RHMJkruB1FIB8V2",
    "GxvNAoGBAM4g2z8NTPMqX+8IBGkGgqmcYuRQxd3cs7LOSEjF9hPy1it2ZFe/yUKq",
    "ePa2E8osffK5LBkFzhyQb0WrGC9ijM9E6rv10gyuNjlwXdFJcdqVamxwPUBtxRJR",
    "cYTY2HRkJXDdtT0Bkc3josE6UUDvwMpO0CfAETQPto1tjNEDhQhT",
    "--END RSA PRIVATE KEY--"
```

--------------------------------

### Running Xray with a Configuration Directory

Source: https://xtls.github.io/ru/config/features/multiple.html

Use the `-confdir` flag to specify a directory containing multiple configuration files. The order of files is determined by numerical prefixes.

```shell
$ xray run -confdir /etc/xray/confs
```
Tokens:
Raw