fast-shadowsocks – GitHub
增加加密方式(aes-128-gcm, aes-192-gcm, aes-256-gcm, chacha20-ietf-poly1305)
client_windows_amd64 -r “xxxx:2001” -l “:8388” -mode fast3 -nocomp -autoexpire 900 -sockbuf 16777217 -dscp 46
Current version: 1. 1. 4
shadowsocks-go is a lightweight tunnel proxy which can help you get through firewalls. It is a port of shadowsocks.
The protocol is compatible with the origin shadowsocks (if both have been upgraded to the latest version).
Note server_password option syntax changed in 0. 6. 2, the client now connects to servers in the order specified in the config.
Please develop on the latest develop branch if you want to send pull request.
Compiled client binaries can be download here. (All compiled with cgo disabled, except the mac version. )
You can also install from source (assume you have go installed):
# on server
# on client
It’s recommended to disable cgo when compiling shadowsocks-go. This will prevent the go runtime from creating too many threads for dns lookup.
Both the server and client program will look for in the current directory. You can use -c option to specify another configuration file.
Configuration file is in json format and has the same syntax with shadowsocks-nodejs. You can download the sample, change the following values:
server your server ip or hostname
server_port server port
local_port local socks5 proxy port
method encryption method, null by default (table), the following methods are supported:
aes-128-cfb, aes-192-cfb, aes-256-cfb, bf-cfb, cast5-cfb, des-cfb, rc4-md5, chacha20, salsa20, rc4, table
password a password used to encrypt transfer
timeout server option, in seconds
Run shadowsocks-server on your server. To run it in the background, run shadowsocks-server > log &.
On client, run shadowsocks-local. Change proxy settings of your browser to
SOCKS5 127. 0. 1:local_port
About encryption methods
AES is recommended for shadowsocks-go. Intel AES Instruction Set will be used if available and can make encryption/decryption very fast. To be more specific, aes-128-cfb is recommended as it is faster and secure enough.
rc4 and table encryption methods are deprecated because they are not secure.
Command line options
Command line options can override settings from configuration files. Use -h option to see all available options.
shadowsocks-local -s server_address -p server_port -k password
-m aes-128-cfb -c
-b local_address -l local_port
shadowsocks-server -p server_port -k password
Use -d option to enable debug message.
Use multiple servers on client
server_password specify multiple server and password, server should be in the form of host:port
Here’s a sample configuration Given server_password, client program will ignore server_port, server and password options.
Servers are chosen in the order specified in the config. If a server can’t be connected (connection failure), the client will try the next one. (Client will retry failed server with some probability to discover server recovery. )
Multiple users with different passwords on server
The server can support users with different passwords. Each user will be served by a unique port. Use the following options on the server for such setup:
port_password specify multiple ports and passwords to support multiple users
Here’s a sample configuration Given port_password, server program will ignore server_port and password options.
Update port password for a running server
Edit the config file used to start the server, then send SIGHUP to the server process.
Use OpenVZ VM that supports vswap. Otherwise, the OS will incorrectly account much more memory than actually used. shadowsocks-go on OpenVZ VM with vswap takes about 3MB memory after startup. (Refer to this issue for more details. )
If vswap is not an option and memory usage is a problem for you, try shadowsocks-libev.
Shadowsocks on Linode | Fast Tunnel Proxy Server
Linode India Overview
Linode India cloud services are available at the same low, flat, and transparent price as our other data centers.
Migrating Workloads to the Alternative Cloud – Gated
Once you decide that an alternative cloud provider is the right choice, how do you approach your cloud computing migration?
Linode Getting Started Guide
This video will guide you through the Linode Cloud Manager, which provides a user-friendly interface to manage your infrastructure, user accounts, billing and payments, and to open and track support tickets. You can easily create Linode instances, managed Kubernetes clusters, add backups to your Linodes, deploy Marketplace Apps, create Object Storage buckets, and more.
Valheim Dedicated Server
Valheim is an open-world Viking-themed survival and sandbox game developed by Iron Gate Studio. In this video, we’ll show you how to run your own dedicated Valheim server to build your own world and share with your friends.
How to setup a FAST Shadowsocks server | Tips for China
This tutorial will show you step-by-step instructions to set up your own speed optimized Shadowsocks (SS) or ShadowsocksR (SSR) server on a Ubuntu VPS. This guide includes installation of the bbr add-on for increased speed on high latency networks and how to use the clients for Windows, Mac, iOS, and Android. DisclaimerShadowsocks is not a eating your own Shadowsocks proxy server can offer good speeds in China, but it lacks some important features compared to using a VPN in ivacy and anonymity. When you create your own proxy or VPN server, you will be using a static IP address that is tied to your identity. This means that anything you do online while connected to your server can be traced back to you. Make sure you don’t do anything illegal using your server. For example, if you use your own server to download torrents, the hosting provider will likely ban your account if they get a DCMA complaint. The advantage of using a good commercial VPN service is that your anonymity is protected by using shared IP addresses that are not tied to the identify of any individual mited support. A VPN works on the network level, which means that all of your traffic is tunneled over the VPN. However, proxies like Shadowsocks work on the browser/application level. That means it will only work for web browsers and applications that specifically support proxy settings. Even in web browsers, proxies don’t work for all types of traffic (Adobe Flash, for example, will bypass all proxies and use your ISP connection directly) you want to combine the fast speed of a Shadowsocks proxy and the full privacy of a VPN, the best solution to tunnel a VPN connection over your shadowsocks NavigationLatest UpdatesChoose a VPS ProviderChoose the Best Server LocationInstall ShadowsocksRDownload Client and Test Your ServerInstall Google BBR and Optimize Your ServerBonus Section – How to Share Your Server and Limit Data UsageLatest updates for using Shadowsocks in ChinaNovember 29, 2019 Update – Black Friday DealsThe 2 Shadowsocks providers that I strongly recommend as an alternative to making your own server are both having very good Black Friday sales right now. WannaFlix (Shadowsocks and V2Ray)Black Friday Deal – 1 year for $47Expires – December 2, 2019Money Back Guarantee – 30 DaysHere are some speed tests for WannaFlix done today from my China Telecom 100/20M WiFi. WannaFlix Hong Kong PCCW (Shadowsocks)This is a great server with low ping, and it also works for the Hong Kong version of Netflix. WannaFlix Singapore 4 (V2Ray)This is also a great server, even though the speed is capped at 30Mbps. It’s hosted on Aliyun Singapore, one of the best CN2 server locations for connections from China. Very high stability and low packet loss. Great for gaming or important video/VoIP the WannaFlix Black Friday DealIf you miss out on this deal, you can still get 30% off any time with the Tips for China coupon rfshark (Shadowsocks and VPN)Black Friday Deal – 2 years + 3 months (27 months total) for $47Expires – Unknown, but likely around December 15, 2019Money Back Guarantee – 30 DaysHere are some speed tests for Surfshark done today from my China Telecom 100/20M rfshark Taiwan (Shadowsocks)This is my personal favorite Shadowsocks server to use. This server is very fast, and you can watch USA Netflix with it. Surfshark supports Netflix in at least 10 different regions, and the regions that are not supported (such as Taiwan) get USA rfshark Japan (Shadowsocks)Surfshark can be a little difficult to set up as you need to manually find the good IP addresses for Shadowsocks connections. But I wrote an easy guide here to help you do the Surfshark Black Friday dealIf you miss out on this deal, you can still get 2 years for $60 using the links on Tips for China. You just won’t get the additional 3 months free. October 28, 2019 UpdateThe Surfshark manual Shadowsocks connections for the Taiwan and Japan servers are still working great. Check my latest guide on how to set up Surfshark manual Shadowsocks connections if you are looking for a good alternative to setting up and managing your own Shadowsocks server. A Tips for China visitor recently did some speed tests from his Beijing China Unicom 500/100M internet connection for me. The results are very impressive! Surfshark Taiwan ShadowsocksSurfshark Japan ShadowsocksYou can see many more recent Shadowsocks test results on the 2020 VPN in China blog page. My internet connection is only 100/20M, so the speeds aren’t as exciting. But I can still come very close to saturating my 100Mbps the 2 year special and a 30 day money back guarantee, there is really no reason not to try it. October 12, 2019 UpdateShadowsocks servers were getting blocked more easily recently during the Cyber Security Conference in late September and the National Week holiday during the beginning of this time, WannaFlix developed a new protocol called Eclipse when all of their Shadowsocks servers were blocked. The Eclipse protocol cannot be blocked by the Great Firewall, so it can always be used as a seem to be back to normal now. WannaFlix Shadowsocks servers are back online and working quite well. Another new recommendation for a paid Shadowsocks service is Surfshark VPN. They recently added support for manual Shadowsocks rfshark is currently offering a 2 year plan for only $60 which is an incredible value (only $2 per month). The Shadowsocks setup is a little bit difficult because you need to find the specific server IPs to enter. Check my latest updates on the 2019 China VPN blog page for some suggested IPs and recent speed tests. The Taiwan and Japan servers are working very well right you are making your own server on Vultr and find that you can’t get an un-blocked IP address in the US, try some European locations. Those ones don’t get blocked as 2019 UpdateThe ShadowsocksR Windows app was recently updated. There appears to be issues when loading Facebook and Instagram using the latest version 4. 9. 2. I recommend using version 4. 0, which doesn’t have this ternatively, you can try setting the DNS server to 8. 8. 8 in the Global Settings of version 4. This seems to have solved the problem for me, although I have not tested it long enough to be certain that the problem won’t may need to flush your DNS cache after doing this. To flush your DNS cache, open a command prompt and run the command “ipconfig /flushdns” other news, the WannaFlix Shadowsocks service is still working extremely well for me. Especially the Hong Kong and Taiwan servers. I highly recommend trying WannaFlix if you have not 2019 UpdateHere are some more speed tests results for the WannaFlix ShadowsocksR service. The tests I did in February were done using an older computer that can only get around 75Mbps on tests were done on March 17, 2019 using my China Telecom 100/20M connection from a computer that can get closer to the full 100Mbps speed of my Kong Server (PCCW network)Taiwan Server (Hi-Net network, new)US Netflix 4 Server (Netflix, Hulu, Amazon Prime, etc)There are many more servers, including Netflix servers for several regions and a few torrenting servers. Give it a try yourself, totally risk-free with the 30 day money back guarantee. Don’t forget to use the Tips for China coupon code for 30% off. February 2019 UpdateWannaFlix ShadowsocksR serviceI recently discovered a good alternative to making your own Shadowsocks server. There is a paid service called WannaFlix, which offers very fast and affordable ShadowsocksR though WannaFlix advertises itself as a VPN, it is actually a pure Shadowsocks service. Despite this false advertising, I have to give it a high recommendation due to the high performance servers and low are some speed test results using a few of the WannaFlix ShadowsocksR servers, tested on February 11, 2019 from my China Telecom 100/20 Mbps internet Kong Server (PCCW network)Philippines ServerSingapore Server (Aliyun network)South Korea ServerWannaFlix is currently offering a 30% off coupon code for Tips for China visitors (valid for the first billing cycle only) the coupon code, the price for 1 year comes down to only $58. 72 (works out to less than $5/month) is an incredible value considering that these servers are hosted on top quality hosting providers. In fact, you would need to literally spend hundreds of dollars per month if you wanted to set up your own servers on these only does WannaFlix have fast servers for China, some of their servers can also unblock Netflix as well. Actually, quite a few of them including USA, UK, Canada, South Korea, Japan, and a few of their servers allow torrenting too! Still not sure if WannaFlix is worth trying? Don’t worry, they are offering a very generous 30 day money back guarantee so you can try it completely risk-free! Give it a try and compare the performance to your own Shadowsocks server. You will definitely see the to WannaFlix now and save 30% with the Tips for China coupon code! October 2018 UpdateThe following changes were made to this tutorial on October 13, 2018. 1. Now recommending Ubuntu 18. 04 instead of Unbuntu 14. 04. It appears that Google BBR now comes pre-installed with the Ubuntu 18. 04 Vultr image, so it makes the process much easier. I will leave the BBR installation instructions here in case other providers don’t offer BBR pre-installed on their images. No longer recommending Vultr Tokyo location for China Telecom. The latency has become too high. The best locations for China Telecom these days are the US west coast ones (Los Angeles, Silicon Valley, etc). 3. Now recommending Vultr’s new $3. 50/month plan after IPv4 IP addresses were removed from the $2. 50 of the images in this tutorial are from before the above changes were oosing a VPS provider to host your serverWhy I am using Vultr for this tutorialWith servers starting from $0. 005 per hour ($3. 50/month) and good routing to China Telecom, Vultr offers a good combination of price and speed. It’s not the fastest server you can buy, but it does offer the best value for money in my servers are always billed hourly. This is a very useful feature for 2 reasons. If you mess something up and want to start over again, just destroy the VPS and make a new one. It will only cost you $0. 01 if you destroy the VPS within the first 2 hours. This is a great way for beginners to learn to use Linux. If your server gets blocked, you can just destroy it and make a new one. You won’t lose money because you only pay for the amount of hours you use the server you have used the server for 625 hours (~26 days), then you will pay the monthly price. If you destroy your server before 625 hours, then you will pay for the number of hours that you used. You will see both the monthly and hourly price when you choose your instance. This is not an option to choose, it is just showing you both offers a very generous bandwidth allowance that you will likely never go over. The smallest package for $3. 50/month includes 500GB of data. The next package for $5/month includes 1TB of data. Note that the data allowance is pro-rated for the amount of hours if you use the server for less than 1 – If you go over this allowance, it’s cheaper to shut down your instance and start a new one rather than paying the excess data fee (or upgrade to a higher price instance) AlternativesIf this is your first time setting up a Shadowsocks server, then just stick with Vultr for now and follow this tutorial exactly to the you learn the process of making a server using Vultr or if you are already familiar with Linux, you may want to consider some other providers for higher performance (if you are willing to spend more and take the risk of paying monthly/annually instead of hourly) you want to try other providers, make sure you choose Ubuntu 18. 04 64 bit as the OS and KVM as the virtualization (if available). Previously this tutorial did not work for OpenVZ virtualization because it is not possible to change the kernel to install BBR. However, now that BBR comes pre-installed on Ubuntu 18. 04, this tutorial might work with Ubuntu 18. 04 on OpenVZ virtualization (not sure, someone please confirm in the comments if you have tried it). #1 Alternative – Rackspace Hong KongRackspace Hong Kong has the best network for connections to mainland China. Direct peering to China Telecom (CN2), China Unicom, and China only problem with Rackspace is that it’s very expensive (over USD $50/month plus USD $0. 20/GB) the cost is not a concern for you, I would be very interested to know how a shadowsocks server performs on Rackspace. If anyone has tried a cloud server on Rackspace Hong Kong, please let me know about it in the comments below. #2 Alternative – ExpressVPN Hong Kong 3The #2 alternative not actually a VPS provider, but rather a VPN company that hosting one of their servers on Rackspace Hong Kong. This is a much cheaper way to get access to a high performance Rackspace Hong Kong ExpressVPN Hong Kong 3 server is hosted on Rackspace! Just sign up for ExpressVPN and connect to the Hong Kong 3 the ExpressVPN links on this page will give you access to a special offer for an additional 3 months free when you purchase a 12 month subscription. You will get 15 months for the price of 12 you consider the cost of setting up your own premium China Telecom CN2 server in Hong Kong, paying $99 for 15 months of ExpressVPN is actually very cheap! The Hong Kong 3 server is hidden away under the “All” section of the app. You won’t find it in the “Recommended” Kong 3 was blocked in November/December last year, but it seems to be back and working better than ever! I have tested the speed of this server at various times over a 24 hour period on Feb 25-26, 2018. You can see the results server has ultra low latency (direct connection to China Telecom on premium CN2 network). Note the very low ping times of only 17-19 ms. The download speed is not too bad either! I’m also running this server on a cheap 180 yuan router from Taobao that I use for video streaming. Check out my tutorial on this router here. This router can get around 20Mbps download speed on Hong Kong is the best ExpressVPN subscription comes with a no-hassle 30 day money back guarantee. Get a full refund any time within 30 days. No sneaky terms and conditions. Just ask for a refund if you are not satisfied and you will get one! In case the Hong Kong 3 server gets blocked again or is unavailable, the Hong Kong 5, Hong Kong 4, Taiwan 1, and Taiwan 2 servers also have premium routing to mainland China ISPs. #3 Alternative – Bandwagon HostI have not tried this one yet, but several people have suggested it. They offer China Telecom CN2 servers hosted in Los CN2 servers are not as fast as Asian CN2, but it should be faster than Vultr and other special China Telecom CN2 servers are only offered though this page. The servers offered from the regular homepage are not the CN2 using the above link, find the special called SPECIAL 10G KVM PROMO V3 – LOS ANGELES – you check out, make sure the location is US – Los Angeles DC3 CN2 (USCA_3). There is another promo package for $19. 99 per year, but this is not the CN2 location. I heard rumors that Bandwagon Host does support a limited number of IP address changes if your server gets blocked. I have sent a request asking for details about this and I will update here when I get the official answer about Here is the answer from Bandwagon Host regarding the IP address changing What is your policy for changing IP addresses if the IP gets blocked by China GFW? Your TOS mentions something about a fee for changing IP but doesn’t say how much the fee ndwagon Host: We change this policy and fees from time to time. We guide customers through the process of changing IP when the need arises (be it free replacement or not). Usually the fee to replace IP is between $2 and $ What is the current policy right now? Between $2 to $20 is a very big range. Can you provide more information about this? Bandwagon Host: I am very sorry, but we are not able to provide any more assistance on these seems they don’t want to answer my questions about anyone has first-hand experience on this issue, please leave a Vultr and Rackspace, I believe Bandwagon Host counts the data allowance as INPUT + OUTPUT. With a proxy server, the data input and output is approximately be the same. This means that 500GB from Bandwagon Host is is actually only 250GB of, Rackspace, and Aliyun only count OUTPUT data so you get the full amount of data that they advertise. #4 Alternative – Aliyun Hong KongAlibaba Cloud (aka Aliyun) does offer Hong Kong CN2 servers at a better price than Rackspace, but there are some drawbacks. I’m going to move the Aliyun information to a new page because Aliyun is very complicated and this page is already long this page for more info about Aliyun. #5 Alternative – Other ProvidersI don’t know much about these ones except that they are popular choices for Shadowsocks users in China. I will just leave the links here and you can do your own research. Be sure to leave a comment if you have tried any of these. Kdatacenter – Premium South Korea VPS (recommended if you are near Shanghai)Gigsgigscloud – Variety of different Hong Kong and USA serversChoose the best server locations for your ISPBefore we get started, it’s a good idea to do some network analysis to find the best Vultr server location for your Shadowsocks the hostnames below, send a ping command to each server to check the latency to your location. Remember to turn off any existing VPN connections, because we want to check the latency between your ISP and the Vultr locations shown in bold have the best routing to China Telecom. Tokyo, Japan Singapore Silicon Valley, California Los Angeles, California Seattle, Washington Frankfurt, DE Amsterdam, NL Paris, France London, UK New York (NJ) Chicago, Illinois Atlanta, Georgia Miami, Florida Dallas, Texas Sydney, Australia you are using Windows, you can download my Vultr ping script to automatically ping all of Vultr servers. I have identified 4 servers that have a decent ping time to my China Telecom kyoSingaporeSilicon ValleyLos AngelesI am going try a Tokyo server and a Los Angeles avoid confusion, I will just show the instructions for setting up 1 of the servers, although I am actually doing both at the same time. 2019 Update – Tokyo is no longer a recommended location due to degraded performance since this tutorial was first made. I now recommend US west coast locations. Or you can try Europe locations if you can’t find an unblocked IP in the your instanceThe first step is to go to Vultr and create an account if you don’t already have one. You will need to fund your account with a minimum $5 deposit using PayPal or verify a valid credit I first signed up, I used my Chinese credit card and I was asked to verify my identity by sending them a copy of my passport and the credit card I used. I suspect that they asked for this because I was connected to a VPN when I added my credit card and the IP address did not match the country of my credit card. I recommend turning off your VPN if you are using a Chinese credit card or Chinese PayPal account to avoid this fraud detection. If you are are using an overseas credit card, you may want to connect to a VPN in the same country as your credit card, or turn your VPN off. I’m not sure which option is better in this though Vultr offers WeChat payments, this won’t work for you unless you have a Chinese ID card (only Chinese citizens can use WeChat and Alipay for merchants outside of China) your account is funded/verified then you can deploy a new instance (VPS) your the server type (OS). For this tutorial, I am using Ubuntu 18. 04 the server size, the $3. 50/month ($0. 005/hr) with 20GB, 512MB memory, and 500GB data, is all you need for a personal shadowsocks oosing a more expensive instance will not increase the performance of your server. The only reason to choose more expensive instance is if you need more than 500GB of data per As of October 2019, the only location with $3. 50 instances available is New Jersey. If you don’t want a server in New Jersey, you will have to pay $ everything else as default until section 7, do not enable IPv6 (untick it if it’s selected) enter a hostname, you can put anything. I entered for my hostname. As we are not using our VPS to host a website, it doesn’t matter what you put here. You can also leave it blank with Vultr but some other VPS providers will require you to enter something Deploy Now to deploy the until your VPS is finished installing and the status changes to “Running”. Then, click on the server to open the server will need the IP address and password to log into our server by first thing I do after deploying a new VPS is look up the IP address in a geo-location database to see if it shows the correct location. Many Vultr Asian servers are incorrectly geo-located in the USA. If the IP address is not showing the correct location, then I will just destroy the instance and deploy a new one (remember, it only costs $0. 01 if you destroy an instance within the first few hours) a shadowsocks server with an IP address with the wrong geo-location can be annoying. You will need to manually choose the correct server when doing a speed test, Google will think you are in the wrong country, looking up the IP address, I can see that it is correctly listed as, time to connect to our server using you are using Mac, you can use the Terminal program to start an SSH session with your Terminal and enter the following command (Mac users only):ssh server_ip -p 22 -l rootreplace server_ip with the IP address of your example, using my server in this tutorial, you would enter the 45. 32. 50. 230 -p 22 -l rootUnlike Mac, Windows does not come with an SSH client. I am using Windows, so I have downloaded you are using Putty for Windows, enter the IP address of your Vultr server and press open to connect to it. Leave all of the settings as default. You can save the session so you don’t need to enter the IP address next time, I saved the settings as “Vultr Tokyo” the security warning and then login as root and enter the password from the Vultr server management – To paste text from the clipboard using Putty, simply press the right mouse button once and whatever is in the clipboard will get pasted. When typing or pasting your password, you won’t see anything on the screen. Just press enter after you have typed it or pasted it by single clicking the right mouse your SSH connection is not successful, wait a few more minutes and try again. When you first create a server, it can take up to 5 minutes until it’s ready to you still can’t connect after your server is ready, that means your IP address is blocked by the Great Firewall of China (probably due to the person who used that IP address before you) can be confirmed by connecting to a VPN to see if you can your IP is blocked, then destroy your instance and make a new you have a good IP address that is not blocked and you are logged in successfully, your screen should look like stall ShadowsocksRUpdate and upgrade the machine by entering the command apt-get update && sudo apt-get upgrade -yAny time that you see highlighted text like the text in the above line, enter it as a command. I will only show the screenshot for the first command, shown you enter the command, press enter to execute executing this first commend, you may get a message that says something like this:“A new version of configuration file /etc/default/grub is available, but the version installed currently has been locally modified. What do you want to do about modified configuration file grub? ”You can just press enter to keep the default option of using the current, let’s install shadowsocks on the server. There are many different versions of shadowsocks and many different ways to install them. I am going to install ShadowsocksR (SSR) using an installation script from GitHub user teddysun. Teddysun has made some great scripts that make it very easy to install different versions of shadowsocks and other linux used to be a donation page () where you could send a donation to Teddy Sun by WeChat or Alipay to support his good work. However, that link is now dead and I can’t find any similar page on his website now. If anyone knows how to support the work of Teddy Sun, please let me know what link I can include the following 3 commands to download the run the SSR installation – no-check-certificate – The above command is shown on 2 lines because it’s too long. Make sure you copy the full command starting with wget and ending with chmod +x 2>&1 | tee shadowsocksR. logEnter the parameters that you want to use for your server. Here is what I am using for this tutorial. You can always change these settings later if you want so don’t think about it too ssword: testingPort: 443cipher: chacha20protocol: originobfs: _simple_compatibleAfter you enter all of the settings, press any key to start the installation. It will take about 5 minutes. February 2019 Update – Try protocol auth_sha1_v4_compatible instead of you want to make any changes to the configuration, enter the command below to edit the server config /etc/shadowsocks. jsonPress Ctrl + X to exit. When asked to save the modified buffer, press the y key once and then press enter to keep the same file time you make changes to this file, you need to restart shadowsocks so the changes will take effect. Restart shadowsocks using the command below (if you have changed the config file). /etc/init. d/shadowsocks restartThe server is already running, you can download a shadowsocks client and try it wnload a client and test your serverThe standard Shadowsocks (SS) client is no longer stable in China. I recommend using the ShadowsocksR (SSR) client if you are in Clients (recommended for China)ShadowsocksR for Windows (Download version 4. 0, the newer ones have DNS leaks)ShadowsocksR for AndroidShadowsocksR for MaciOS Potatso Lite (FREE)iOS Shadowrocket ($2. 99)Original SS Clients (NOT recommended for China)Shadowsocks for WindowsShadowsocks for AndroidShadowsocks for MacNote for iOS UsersFor iOS, I highly recommend paying $2. 99 for Shadowrocket because WhatsApp calls and other VoIP applications don’t work with Potatso Lite or any other iOS app. Shadowrocket is the only stable Shadowsocks client for iOS that will tunnel VoIP through the proxy, so it’s definitely worth the price for has removed all VPN and Shadowsocks apps from the China version of the app store. If your iTunes account is registered with a Chinese address, you need to create a new iTunes account with a foreign address to download these you are using a USA iTunes account but don’t have a US credit card to buy apps, you can always buy a $5 USA iTunes gift card on adowsocks vs ShadowsocksR (SSR)The original version is called Shadowsocks (SS). ShadowsocksR (SSR) is a newer version that supports obfuscation, which can make your shadowsocks traffic look more like regular web traffic. This can prevent your speed from getting throttled by your network or server that we just made is compatible with both SS and SSR clients (if you chose the same parameters as me when creating your server) of the clients are a little bit different, but basically you need to enter the following settings (assuming you chose the same options as me) – The IP address of your serverPort – 443Password – testing (or whatever password you chose)Encryption – chacha20Protocol – origin or auth_sha1_v4 (if you choose auth_sha1_v4_compatible for your server, this option is only available for SSR clients)Obfs – _simple for obfuscation or plain for no obfuscation (this option is only available in SSR clients)If there are any other options, leave them as default. Do not enable onetime need to be careful with these settings. If you don’t get it exactly right, then it will seem like the proxy is connected, but you won’t have any connection to the internet. Unlike a VPN, you cannot easily tell if the proxy is actually connected successfully or are my settings using the SSR Windows way that you enable the system proxy will depend on the version of the client you are the SSR Windows client:Enable the proxy by choosing Mode –> Global or Mode –> PAC. Disable the proxy by choosing Mode –> disable system – Make sure you remember to disable the system proxy before you exit the client or shut down your computer. Otherwise, you will find that you have no internet at all. To solve this problem, just open the shadowsocks client and disable the system vs PAC ModeGlobal will route all domains through the proxy, while PAC will only use the proxy for a specific list of blocked websites such as Google, Facebook, etc and use your ISP connection for everything else. Not every blocked website is part of this PAC list. And even foreign websites that are not blocked are very slow if not using a proxy or this reason, I recommend using the Global mode. It’s easy enough to enable/disable that you can conveniently switch it off if you need to access some Chinese can also can choose the “Bypass LAN & China” proxy rule to automatically bypass the proxy when connecting to websites or servers in China. This will only bypass the proxy for known China IP addresses and use the proxy for everything else (assuming you are in Global Mode) you have enabled the system proxy using the client, most browsers and applications should work by default. Chrome and IE, for example, will use the system proxy settings (unless you have an extension installed that is controlling the proxy settings) browsers or programs, such as Firefox, may need to be set manually to use the system proxy or use a SOCKS5 proxy on server 127. 0. 1 port 1080 (port 1086 for Mac). The proxy settings can usually be found in the advanced settings for most oxies will not work for all programs and all types of web traffic. Sometimes you need to use a VPN for certain things. It is also possible to tunnel a VPN connection over shadowsocks for better VPN ’s check the performance of my Tokyo and Los Angeles servers are working but the speed is not testing the speed of shadowsocks, you must remember use an html5 speed test such as because all proxies will bypass Adobe Flash and you will only test your connection without the proxy if you use or other Flash based speed stall Google BBR and Optimize the ServerGoogle BBR is a TCP congestion control algorithm that can give a huge speed boost on networks with high packet loss (basically all of the networks in/out of China). October 2018 Update – As Google BBR is now included by default with Ubuntu 18. 04 on Vultr, you can skip this step. You will still need to do this if you are using a different version of Ubuntu or if using another VPS that doesn’t include BBR with their Ubuntu 18. 04 confirm whether Google BBR is already installed, enter the following | grep bbrIf you see a text output from this command with the words “tcp_bbr” and a number beside it, then you already have BBR. You can skip the next you are using an older version of Ubuntu or don’t have BBR installed, then install it using the command below (another great script from Teddy Sun) – no-check-certificate && chmod +x &&. / you have an incompatible kernel, you will be asked to reboot your server after the kernel is changed. You will need to re-connect using Putty after can confirm that the installation was successful by using the “lsmod | grep bbr” command that bbr is installed, we just have a few more settings to, change the kernel configuration /etc/nfAdd the following lines at the bottom of the file after the p_congestion_control = bbr = = = = = p_syncookies = p_tw_reuse = p_tw_recycle = p_fin_timeout = p_keepalive_time = 1200net. ipv4. ip_local_port_range = 10000 p_max_syn_backlog = p_max_tw_buckets = p_fastopen = p_mem = 25600 51200 p_rmem = 4096 87380 p_wmem = 4096 65536 p_mtu_probing = 1Press Ctrl + X to exit and then press Y to save the file, and press enter to keep the same file the new settings by entering the command -pLet’s make a few more /etc/security/nfAdd these lines to the bottom of the file, include the * symbol. * soft nofile 51200* hard nofile 51200Press Ctrl + X to exit and then press Y to save the file, and press enter to keep the same file, enter this /etc/pam. d/common-sessionAdd the following line at the end of the ssion required Press Ctrl + X to exit and then press Y to save the file, and press enter to keep the same file /etc/profileAdd the following line at the end of the -n 51200Finally, type the command -n 51200Restart the shadowsocks server again. d/shadowsocks restartThe optimizations are finished! I can see a big improvement in the speeds after the speed is between 10 times and 25 ti