版本： Python 版
加密方式： Chacha20
推荐安装 Shadowsocks-libev 版本

Install

安装 shadowsocks

Debian/Ubuntu:

1
2
$ sudo apt-get install python-pip
$ sudo pip install shadowsocks

CentOS 7(于2016-2-5更新)

1
2
3
4
$ sudo yum -y update
$ sudo yum -y install python-pip
$ pip install --upgrade pip
$ sudo pip install shadowsocks

加密

使用 chacha20 加密，必须安装 M2Crypto 以及libsodium

Installing M2Crypto

Debian/Ubuntu:

1
apt-get install python-m2crypto

CentOS:

1
yum install m2crypto

Installing libsodium

安装编译工具包 build-essential

Debian/Ubuntu:

1
sudo apt-get install build-essential

CentOS 7:

1
2
sudo yum groupinstall "Development Tools"
#sudo yum install kernel-devel kernel-headers

编译安装 libsodium（版本需>= 1.0.0）

1
2
3
4
5
wget https://github.com/jedisct1/libsodium/releases/download/1.0.8/libsodium-1.0.8.tar.gz
tar xf libsodium-1.0.8.tar.gz && cd libsodium-1.0.8
./configure && make -j2
sudo make install
sudo ldconfig

配置

Create a config file /etc/shadowsocks.json .

1
2
3
4
5
6
7
8
{
	"server":"0.0.0.0",
	"server_port":39999,
	"password":"mypassword",
	"timeout":300,
	"method":"chacha20",
	"fast_open":false
}

多用户配置

1
2
3
4
5
6
7
8
9
10
11
{
	"server":"0.0.0.0",
	"port_password": {
		"38888":"password1",
		"38889":"password2",
		"38890":"password3"
	},
	"timeout":300,
	"method":"chacha20",
	"fast_open":false
}

服务端启动

常规启动

To run the config file in the foreground:

1
ssserver -c /etc/shadowsocks.json

or to run in the background:

1
2
ssserver -c /etc/shadowsocks.json -d start
ssserver -c /etc/shadowsocks.json -d stop	# 停止 shadowsocks

查看日志

To check the log:

1
sudo less /var/log/shadowsocks.log

守护程序

To run with deamon in CentOS7

create file sudo vi /etc/systemd/system/shadowsocks.service

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
[Unit]
Description=Shadowsocks
After=network.target
[Service]
Type=forking
PIDFile=/run/shadowsocks/server.pid
PermissionsStartOnly=true
ExecStartPre=/bin/mkdir -p /run/shadowsocks
ExecStartPre=/bin/chown root:root /run/shadowsocks
ExecStart=/usr/bin/ssserver --pid-file /var/run/shadowsocks/server.pid -c /etc/shadowsocks/config.json -d start
Restart=on-abort
User=root
Group=root
UMask=0027
[Install]
WantedBy=multi-user.target

give the file permission:

1
2
cd /etc/systemd/system
chmod 755 shadowsocks.service

to run

1
2
sudo systemctl start shadowsocks
sudo systemctl enable shadowsocks

Firewalld

1
2
touch /etc/firewalld/services/shadowsocks.xml
sudo vi /etc/firewalld/services/shadowsocks.xml

加入如下内容：

1
2
3
4
5
6
7
<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>shadowsocks</short>
  <description>enable shadowsocks.</description>
  <port protocol="tcp" port="39999"/>
  <port protocol="udp" port="39999"/>
</service>

添加防火墙策略

1
2
3
firewall-cmd --permanent --zone=public --add-service=shadowsocks
firewall-cmd --permanent --add-masquerade
firewall-cmd --reload

客户端启动

1
sslocal -c /etc/shadowsocks.json

Optimize

Shadowsocks 之优化篇
Optimizing-Shadowsocks
CentOS 7 Shadowsocks优化

写在后面

2017-2-19 更新： 推荐编译安装 Shadowsokcs-libev 版本，参考 Compile Shadowsocks-libev in CentOS7