Yushum yushum

HaProxy 通过 Domain Socket 与 V2Ray 通讯

本文供高级玩家阅读，请先阅读 Vmess + TCP + TLS 方式的 HTTP 分流和网站伪装。相比 TCP，Domain Socket 更为高效。本文针对使用 Debian 10 的用户，其他系统请自行摸索。

Cake 使用主动队列管理(AQM)技术保持全局同步，可以控制延迟，有效利用宽带。同时它还可以保证每个主机，每个流公平的分享宽带。

Cake 与 kernel 4.19 并入主线，因此使用 Cake 需要 kernel 和 iproute2 版本大于 4.19。如何确认 kernel 和 iproute2 版本，以及如何升级本文不做详细说明。

Notes

If your local network use public IP ranges instead of private ones, make sure to add respecive RETURN rules to iptables to prevent looping issue
Set clash as DHCP's only DNS server to allow domain-based filter (shunting) rules work
Use lsof -i udp:53 to check if clash's DNS module work fine, otherwise you may have to kill systemd-resolved and any other processes occupying the UDP 53 port
The given scripts will NOT hangle the traffic of gateway itself since it is not recommend to do so. If you want to redirect the egress traffic of the gateway, the following material may be useful

Reference

Connect to the serial console, using scw instance server console {uuid} zone={zone}
Reboot the VM into UEFI settings
- either by executing systemctl reboot --firmware on the machine
- or by using scw instance server reboot {uuid} zone={zone} locally and repeatedly mashing the escape key on the serial console
Go to Device Manager -> Network Device List -> the only network device -> HTTP Boot Configuration -> Boot URI

Starting in crDroid 10.x (Android 14.0) and onwards, we're using retrofitted dynamic partitions to avoid the constant threat of running out of space in the GPT system partition with any sizeable Google Apps package. Don't panic.

This will not permanently alter or damage your device, as it makes no changes to the underlying GPT partition table. Following any ROM's installation guide will overwite the changes, so there are no extra steps to "convert back to normal partitions".

This does mean that you cannot use TWRP or other custom recovery to install crDroid on the OnePlus 6-series, as they do not have the necessary kernel and dynamic partition layout changes compiled in to support the way we're doing things.
Phone setup:

	# source from phuslu
	# https://phus.lu/sysctl.conf

	# bbr
	net.core.default_qdisc=fq
	net.ipv4.tcp_congestion_control=bbr

	net.ipv4.tcp_retries2 = 8

	# 系统所有进程一共可以打开的文件数量，每个套接字也占用一个文件描述字