V2Ray / VMess 完全配置指南 2026：服务端部署 + 客户端配置 + TLS + CDN 隐匿全攻略

1
{
2
  "log": {
3
    "loglevel": "warning",
4
    "access": "/var/log/xray/access.log",
5
    "error": "/var/log/xray/error.log"
6
  },
7

8
  "inbounds": [
9
    {
10
      "listen": "0.0.0.0",
11
      "port": 8443,
12
      "protocol": "vless",
13
      "settings": {
14
        "clients": [
15
          {
16
            "id": "f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f",  // 你的 UUID
17
            "flow": "xtls-rprx-vision"                       // Vision 流控（必须）
18
          }
19
        ],
20
        "decryption": "none"
21
      },
22
      "streamSettings": {
23
        "network": "tcp",
24
        "security": "reality",
25
        "realitySettings": {
26
          "show": false,
27
          "dest": "www.apple.com:443",          // 借用 Apple 的 TLS 指纹
28
          "xver": 0,
29
          "serverNames": [
30
            "www.apple.com"                     // 与 dest 对应
31
          ],
32
          "privateKey": "0Hk...",               // 服务端私钥（xray x25519 生成的 Private key）
33
          "shortIds": [
34
            "a1b2c3d4e5f6a7b8"                 // Short ID（客户端也需要配置）
35
          ]
36
        }
37
      },
38
      "sniffing": {
39
        "enabled": true,
40
        "destOverride": ["http", "tls"]
41
      }
42
    }
43
  ],
44

45
  "outbounds": [
46
    {
47
      "protocol": "freedom",
48
      "tag": "direct"
49
    },
50
    {
51
      "protocol": "blackhole",
52
      "tag": "blocked"
53
    }
54
  ],
55

56
  "routing": {
57
    "domainStrategy": "IPIfNonMatch",
58
    "rules": [
59
      {
60
        "type": "field",
61
        "ip": ["geoip:private", "geoip:cn"],
62
        "outboundTag": "blocked"               // 屏蔽对国内 IP 的访问请求
63
      }
64
    ]
65
  }
66
}

1
vless://f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f@your.server.ip:8443?encryption=none&flow=xtls-rprx-vision&security=reality&sni=www.apple.com&fp=chrome&pbk=3Km...&sid=a1b2c3d4e5f6a7b8&type=tcp&headerType=none#Reality-节点名
2

3
参数说明：
4
  uuid            = 你的 UUID
5
  your.server.ip  = VPS 公网 IP
6
  8443            = 监听端口
7
  sni             = www.apple.com（与 serverNames 一致）
8
  fp              = chrome（TLS 指纹，推荐 chrome/firefox/safari）
9
  pbk             = Public key（xray x25519 生成的公钥）
10
  sid             = Short ID

1
{
2
  "log": { "loglevel": "warning" },
3

4
  "inbounds": [
5
    {
6
      "listen": "127.0.0.1",       // 只监听本地（通过 Nginx 反代）
7
      "port": 10000,
8
      "protocol": "vmess",
9
      "settings": {
10
        "clients": [
11
          {
12
            "id": "f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f",  // UUID
13
            "alterId": 0            // 0 = 启用 AEAD 加密（推荐）
14
          }
15
        ]
16
      },
17
      "streamSettings": {
18
        "network": "ws",
19
        "wsSettings": {
20
          "path": "/ray"           // 与 Nginx location 路径一致
21
        }
22
      }
23
    }
24
  ],
25

26
  "outbounds": [
27
    { "protocol": "freedom", "tag": "direct" },
28
    { "protocol": "blackhole", "tag": "blocked" }
29
  ]
30
}

1
proxies:
2
  - name: "Reality-US"
3
    type: vless
4
    server: your.server.ip
5
    port: 8443
6
    uuid: f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f
7
    network: tcp
8
    tls: true
9
    udp: true
10
    flow: xtls-rprx-vision
11
    servername: www.apple.com
12
    reality-opts:
13
      public-key: "3Km..."         # Xray 生成的公钥
14
      short-id: "a1b2c3d4e5f6a7b8"
15
    client-fingerprint: chrome

1
proxies:
2
  - name: "VMess-CDN"
3
    type: vmess
4
    server: your.domain.com       # 或 Cloudflare CDN IP
5
    port: 443
6
    uuid: f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f
7
    alterId: 0
8
    cipher: auto
9
    tls: true
10
    network: ws
11
    ws-opts:
12
      path: /ray
13
      headers:
14
        Host: your.domain.com
15
    skip-cert-verify: false

1
{
2
  "outbounds": [
3
    {
4
      "type": "vless",
5
      "tag": "Reality-US",
6
      "server": "your.server.ip",
7
      "server_port": 8443,
8
      "uuid": "f6b7d3e2-1a2b-3c4d-5e6f-7a8b9c0d1e2f",
9
      "flow": "xtls-rprx-vision",
10
      "tls": {
11
        "enabled": true,
12
        "server_name": "www.apple.com",
13
        "utls": {
14
          "enabled": true,
15
          "fingerprint": "chrome"
16
        },
17
        "reality": {
18
          "enabled": true,
19
          "public_key": "3Km...",
20
          "short_id": "a1b2c3d4e5f6a7b8"
21
        }
22
      }
23
    }
24
  ]
25
}