Yusum yushum

HaProxy 通过 Domain Socket 与 V2Ray 通讯

本文供高级玩家阅读，请先阅读 Vmess + TCP + TLS 方式的 HTTP 分流和网站伪装。相比 TCP，Domain Socket 更为高效。本文针对使用 Debian 10 的用户，其他系统请自行摸索。

预先准备

首先按照先前的教程安装好 HaProxy 和 V2Ray。
修改以下文件，示例见下方

/etc/haproxy/haproxy.cfg

代理服务器 Cake 队列规则常用参数推荐

注意，BBR 等基于延迟判断发送窗口的拥塞控制算法可能与 AQM 发生冲突！！！对于使用 BBR 的设备，fq 可能还是最好的选择。

为什么选用 Cake

Cake 使用主动队列管理(AQM)技术保持全局同步，可以控制延迟，有效利用宽带。同时它还可以保证每个主机，每个流公平的分享宽带。

使用 Cake 的条件

Cake 与 kernel 4.19 并入主线，因此使用 Cake 需要 kernel 和 iproute2 版本大于 4.19。如何确认 kernel 和 iproute2 版本，以及如何升级本文不做详细说明。

Notes

If your local network use public IP ranges instead of private ones, make sure to add respecive RETURN rules to iptables to prevent looping issue
Set clash as DHCP's only DNS server to allow domain-based filter (shunting) rules work
Use lsof -i udp:53 to check if clash's DNS module work fine, otherwise you may have to kill systemd-resolved and any other processes occupying the UDP 53 port
The given scripts will NOT hangle the traffic of gateway itself since it is not recommend to do so. If you want to redirect the egress traffic of the gateway, the following material may be useful

Reference

A way to install Alpine Linux on a Scaleway Stardust instance without the use of a rescue image, but by booting into the install image over the network using https://netboot.xyz.

Connect to the serial console, using scw instance server console {uuid} zone={zone}
Reboot the VM into UEFI settings
- either by executing systemctl reboot --firmware on the machine
- or by using scw instance server reboot {uuid} zone={zone} locally and repeatedly mashing the escape key on the serial console
Go to Device Manager -> Network Device List -> the only network device -> HTTP Boot Configuration -> Boot URI

Starting in crDroid 10.x (Android 14.0) we're switching to retrofitting dynamic partitions, to avoid the constant threat of running out of space in the GPT system partition with any sizeable Google Apps package.

Please do not panic. Resist the temptation to read, or talk to loved ones.

Have a cookie.

(Guide adapted from the Evolution-X installation guide by @jabashque and @AnierinBliss)

	# source from phuslu
	# https://phus.lu/sysctl.conf

	# bbr
	net.core.default_qdisc=fq
	net.ipv4.tcp_congestion_control=bbr

	net.ipv4.tcp_retries2 = 8

	# 系统所有进程一共可以打开的文件数量，每个套接字也占用一个文件描述字