在Debian系统中安装 Gost

2022-06-09T00:31:11+08:00
去 Gost Release</a>找到最新版本的压缩包，比如我的服务器系统是 Debian，amd64 架构，所以对应的是https://github.com/ginuerzh/gost/releases/download/v2.11.2/gost-linux-amd64-2.11.2.gz</code></p>
# create gost directory
</span>mkdir</span> gost
</span># download to current directory
</span>wget</span> https://github.com/ginuerzh/gost/releases/download/v2.11.2/gost-linux-amd64-2.11.2.gz
</span># unzip
</span>gzip -d</span> gost-linux-amd64-2.11.2.gz
</span>mv</span> gost-linux-amd64-2.11.2.gz gost
</span># Add execute permission
</span>chmod</span> +x gost
</span></code></pre>
2. 申请 https 证书并自动续期🔗</a></h2>
我使用acme.sh</a>来管理证书，并且使用 Cloudflare 作为 DNS 管理，因为 Cloudflare 提供了 API 来验证域名所属权限，这样签发证书更方便。</p>

下载 acme 工具:</li>
</ol>
wget -O</span> - https://get.acme.sh | </span>sh -s</span> email=my@example.com
</span></code></pre>


把域名在 Cloudflare</a> 添加解析，解析到你的服务器 IP</p>
</li>

在某个域名的 dashboard 面板右侧找到 Account ID</code>, 记录下备用。</p>
</li>

进入https://dash.cloudflare.com/profile/api-tokens</a>，生成一个 API Token,选择Edit Zone</code> 模版，Zone Resources 选择 All Zones</code>,生成，</p>
</li>
</ol>
把以下的信息保存到 ~/.bashrc</code></p>

</span>export </span>CF_Token</span>="</span>sdfsdfsdfljlbjkljlkjsdfoiwje</span>"
</span>
</span>export </span>CF_Account_ID</span>="</span>xxxxxxxxxxxxx</span>"
</span>
</span></code></pre>
使之生效：</p>

</span>source </span>~</span>/.bashrc
</span>
</span></code></pre>

如果还有什么不清楚的，可以参考文档： https://github.com/acmesh-official/acme.sh/wiki/dnsapi</a></p>
</blockquote>
签发证书🔗</a></h3>

修改 example.com</code> 为你的域名</p>
</blockquote>
运行 acme.sh --issue --dns dns_cf -d example.com</code></p>

Note: 默认的签发机构是Zerossl</a>, 也可以使用 letsencrypt , acme.sh --issue --dns dns_cf -d example.com --server letsencrypt</code></p>
</blockquote>

运行之后他就会自动续期该域名，你可以检查 crontab 任务是否添加成功: crontab -e</code></p>
</blockquote>
3. 使用 Systemctl 启动🔗</a></h2>
sudo</span> vim /etc/systemd/system/gost.service
</span></code></pre>
写入以下文件：</p>

修改 /home/green/gost/</code> 为你的 gost 文件夹</p>
</blockquote>
[Unit]
</span>Description</span>=</span>Gost
</span>After</span>=</span>syslog.target </span>network.target
</span>[Service]
</span>WorkingDirectory</span>=</span>/home/green/gost/
</span>User</span>=</span>green
</span>Group</span>=</span>admin
</span>UMask</span>=</span>0002
</span>Restart</span>=</span>on-failure
</span>RestartSec</span>=</span>5
</span>Type</span>=</span>simple
</span>ExecStart</span>=</span>/home/green/gost/start.sh
</span>KillSignal</span>=</span>SIGINT
</span>TimeoutStopSec</span>=</span>20
</span>SyslogIdentifier</span>=</span>gost
</span>[Install]
</span>WantedBy</span>=</span>multi-user.target
</span></code></pre>
使之生效：</p>
sudo</span> systemctl daemon-reload
</span>sudo</span> systemctl enable gost
</span>
</span></code></pre>
4. 安装证书🔗</a></h2>
安装证书到 gost 目录🔗</a></h3>

修改 ~/gost/</code>为你的文件夹， example.com</code> 为你的域名</p>
</blockquote>
acme.sh --install-cert -d</span> example.com \
</span>--cert-file ~</span>/gost/cert.pem  \
</span>--key-file ~</span>/gost/key.pem  \
</span>--ca-file ~</span>/gost/ca.pem \
</span>--reloadcmd </span>"</span>sudo systemctl restart gost</span>"
</span></code></pre>
5. 启动服务🔗</a></h2>
Gost 的命令还挺长的，所以可以写的简单的脚本，以后启动方便点：</p>
vim</span> start.sh
</span></code></pre>
#!/bin/bash
</span># 下面的3个参数需要改成你的
</span>USER</span>="</span>xxxx</span>"
</span>PASS</span>="</span>xxxxxxxx</span>"
</span>PORT</span>=</span>8443
</span>BIND_IP</span>=</span>0.0.0.0
</span>sudo</span> ./gost \
</span>    -L </span>"</span>http2://</span>$</span>{</span>USER</span>}:</span>$</span>{</span>PASS</span>}@</span>$</span>{</span>BIND_IP</span>}:</span>$</span>{</span>PORT</span>}?probe_resist=web:www.baidu.com:443&knock=example.com</span>"
</span></code></pre>
添加执行权限</p>
chmod</span> +x ./start.sh
</span></code></pre>
6. 查看日志🔗</a></h2>
# 查看状态
</span>sudo</span> systemctl status gost
</span># 查看日志
</span>sudo</span> journalctl</span> -u</span> gost</span> -f
</span></code></pre>
7. 客户端配置🔗</a></h2>
参见这里</a></p>
7.1 clash 配置参考🔗</a></h3>
- </span>name</span>: </span>h8443
</span>  </span>password</span>: </span>xxxxxxxx
</span>  </span>port</span>: </span>8443
</span>  </span>server</span>: </span>example.com
</span>  </span>tls</span>: </span>true
</span>  </span>skip-cert-verify</span>: </span>true
</span>  </span>type</span>: </span>http
</span>  </span>username</span>: </span>xxxx
</span></code></pre>
7.2 Gost 中转节点🔗</a></h3>

在中转节点安装 gost，步骤同上</p>
</blockquote>
cd </span>~</span>/gost
</span>vim</span> config.json
</span></code></pre>
{
</span>  "</span>ServeNodes</span>": ["</span>socks5://username:pass@0.0.0.0:1080</span>"],
</span>  "</span>ChainNodes</span>": ["</span>https://username:pass@example:443</span>"]
</span>}
</span></code></pre>
vim</span> start.sh
</span></code></pre>
#!/bin/bash
</span># 下面的3个参数需要改成你的
</span>USER</span>="</span>xxxx</span>"
</span>PASS</span>="</span>xxxxxxxx</span>"
</span>DOMAIN</span>="</span>xxxx.com</span>"
</span>PORT</span>=</span>1080
</span>TARGET_PORT</span>=</span>8443
</span>BIND_IP</span>=</span>0.0.0.0
</span>sudo</span> ./gost \
</span>    -L </span>"</span>socks5://</span>$</span>{</span>USER</span>}:</span>$</span>{</span>PASS</span>}@</span>$</span>{</span>BIND_IP</span>}:</span>$</span>{</span>PORT</span>}</span>"</span> -F </span>"</span>https://</span>$</span>{</span>USER</span>}:</span>$</span>{</span>PASS</span>}@</span>$</span>{</span>DOMAIN</span>}:</span>$</span>{</span>TARGET_PORT</span>}</span>"
</span></code></pre>
添加执行权限</p>
chmod</span> +x ./start.sh
</span></code></pre>
按照如上步骤 3，添加 systemctl 服务</p>
参考🔗</a></h2>

https://github.com/haoel/haoel.github.io</a></li>
</ul>
7. 客户端配置 🔗</a></h2>
参见 这里</a></p>

参考 🔗</a></h2>

https://github.com/haoel/haoel.github.io</a></li> </ul>

Owen的博客 - Proxy

在Debian系统中安装 Gost
