{"id":545,"date":"2026-02-19T15:15:41","date_gmt":"2026-02-19T12:15:41","guid":{"rendered":"https:\/\/kb.astrocroc.com\/?p=545"},"modified":"2026-02-19T23:12:04","modified_gmt":"2026-02-19T20:12:04","slug":"%d1%83%d1%81%d1%82%d0%b0%d0%bd%d0%be%d0%b2%d0%ba%d0%b0-%d0%b8-%d0%bd%d0%b0%d1%81%d1%82%d1%80%d0%be%d0%b9%d0%ba%d0%b0-xray-vless","status":"publish","type":"post","link":"https:\/\/kb.astrocroc.com\/?p=545","title":{"rendered":"\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 Xray VLESS"},"content":{"rendered":"\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c third-party<\/p>\n\n\n\n

apt install iptables-persistent mc wget net-tools tcpdump openssh-server fail2ban -y\n\napt update\napt upgrade -y\nreboot<\/code><\/pre>\n\n\n\n
\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 iptables<\/p>\n\n\n\n
iptables -F\niptables -P INPUT DROP\niptables -P FORWARD DROP\niptables -P OUTPUT ACCEPT\niptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT\niptables -A INPUT -i lo -j ACCEPT\niptables -A INPUT -p tcp --dport 22 -j ACCEPT\niptables -A INPUT -p tcp --dport 80 -j ACCEPT\niptables -A INPUT -p tcp --dport 443 -j ACCEPT\niptables -L -v\nip6tables -F\nip6tables -P INPUT DROP\nip6tables -P FORWARD DROP\nip6tables -P OUTPUT ACCEPT\nip6tables -A INPUT -i lo -j ACCEPT\nip6tables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\nip6tables -A INPUT -s fe80::\/10 -p udp -m udp --sport 547 --dport 546 -j ACCEPT\nip6tables -A INPUT -i wg0 -j ACCEPT\nip6tables -A INPUT -p ipv6-icmp -j ACCEPT\nip6tables -A FORWARD -p ipv6-icmp -j ACCEPT\nip6tables -A OUTPUT -p ipv6-icmp -j ACCEPT\n\nnetfilter-persistent save<\/code><\/pre>\n\n\n\n
\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u0447\u0442\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438\u0441\u044c<\/p>\n\n\n\n
nano \/etc\/iptables\/rules.v4<\/code><\/pre>\n\n\n\n
\u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0442\u0430\u043a<\/p>\n\n\n\n
\n\n\n\n
---------------\n*filter\n:INPUT DROP [0:0]\n:FORWARD DROP [0:0]\n:OUTPUT ACCEPT [0:0]\n:f2b-sshd - [0:0]\n-A INPUT -p tcp -m multiport --dports 22 -j f2b-sshd\n-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -i lo -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT\n-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT\n-A f2b-sshd -j RETURN\nCOMMIT\n---------------<\/code><\/pre>\n\n\n\n
\u0434\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c v6 nano \/etc\/iptables\/rules.v6<\/p>\n\n\n\n
---------------\n*filter\n:INPUT DROP [0:0]\n:FORWARD DROP [0:0]\n:OUTPUT ACCEPT [0:0]\n-A INPUT -i lo -j ACCEPT\n-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT\n-A INPUT -s fe80::\/10 -p udp -m udp --sport 547 --dport 546 -j ACCEPT\n-A INPUT -p ipv6-icmp -j ACCEPT\n-A FORWARD -p ipv6-icmp -j ACCEPT\n-A OUTPUT -p ipv6-icmp -j ACCEPT\nCOMMIT\n---------------<\/code><\/pre>\n\n\n\n\n\n
\u0421\u0442\u0430\u0432\u0438\u043c Xray<\/strong><\/p>\n\n\n\n
bash -c "$(curl -L https:\/\/github.com\/XTLS\/Xray-install\/raw\/main\/install-release.sh)" @ install --without-geodata<\/code><\/pre>\n\n\n\n
\u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c Short ID<\/strong><\/p>\n\n\n\n
openssl rand -hex 8<\/p>\n\n\n\n
\u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f XRay Reality<\/strong><\/p>\n\n\n\n
xray x25519<\/p>\n\n\n\n
PrivateKey: WK…
Password: V5…<\/p>\n\n\n\n
\u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c UUID \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430<\/strong><\/p>\n\n\n\n
xray uuid<\/p>\n\n\n\n
b16e23a6-…<\/p>\n\n\n\n
systemctl restart xray<\/code><\/pre>\n\n\n\n
\u041a\u043e\u043d\u0444\u0438\u0433 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Xray \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e \u043f\u0443\u0442\u0438 \/usr\/local\/etc\/xray\/config.json<\/p>\n\n\n\n
{\n  "log": {\n    "loglevel": "debug"\n  },\n  "inbounds": [\n    {\n      "listen": "x.x.x.x",  \/\/ \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n      "port": 443,\n      "protocol": "vless",\n      "settings": {\n        "clients": [\n          {\n            "email": "my-mobile",\n            "id": "...", \/\/ ID \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n            "flow": "xtls-rprx-vision"\n          },\n          {\n            "email": "kseniia",\n            "id": "...", \/\/ ID \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n            "flow": "xtls-rprx-vision"\n          }\n        ],\n        "decryption": "none"\n      },\n      "streamSettings": {\n        "network": "tcp",\n        "security": "reality",\n        "realitySettings": {\n          "dest": "x.x.x.x:443",  \/\/ IP \u0430\u0434\u0440\u0435\u0441 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u0432\u043e\u0435\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 192.168.1.1:443)\n          "xver": 0,\n          "minClientVer": "",\n          "maxClientVer": "",\n          "serverNames": [\n            "xxx.com" \/\/\u0421\u044e\u0434\u0430 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u0430\u0434\u0440\u0435\u0441 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0441\u0430\u0439\u0442\u0430\n           ],\n          "privateKey": "...", \/\/\u0421\u044e\u0434\u0430 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447\n          "shortIds": [\n            "..."   \/\/\u0421\u044e\u0434\u0430 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0440\u043e\u0442\u043a\u0438\u0439 ID\n          ]\n        }\n      },\n      "sniffing": {\n        "enabled": true,\n        "destOverride": [\n          "http",\n          "tls",\n          "quic"\n        ]\n      }\n    }\n  ],\n  "outbounds": [\n    {\n      "protocol": "freedom",\n      "tag": "direct"\n    },\n    {\n      "protocol": "blackhole",\n      "tag": "block"\n    }\n  ],\n  "routing": {\n    "domainStrategy": "AsIs",\n    "rules": [\n      {\n        "domain": [\n            "full:lh3.googleusercontent.com",\n            "domain:clients6.google.com-x"\n        ],\n        "outboundTag": "direct"\n      },\n      {\n        "user": [\n            "my-home"\n        ],\n        "outboundTag": "direct"\n      },\n      \n    ]\n  }\n}\n<\/code><\/pre>\n\n\n\n
\u041a\u043e\u043d\u0444\u0438\u0433 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f v2RayNG<\/p>\n\n\n\n
{\n    "remarks": "ProCloud",\n    "log": {\n        "loglevel": "warning"\n    },\n    "dns": {\n        "servers": [\n            {\n                "tag": "local-dns",\n                "address": "localhost",\n                "domains": [\n                    "domain:ru"\n                ],\n                "skipFallback": true\n            },\n            {\n                "tag": "cloudflare-dns",\n                "address": "223.5.5.5",\n                "domains": [\n                    "full:cloudflare-dns.com"\n                ],\n                "skipFallback": true\n            },\n            "https:\/\/cloudflare-dns.com\/dns-query"\n        ],\n        "tag": "dns-module"\n    },\n    "inbounds": [\n        {\n            "tag": "socks",\n            "port": 10808,\n            "listen": "127.0.0.1",\n            "protocol": "socks",\n            "sniffing": {\n                "enabled": true,\n                "destOverride": [\n                    "http",\n                    "tls"\n                ],\n                "routeOnly": false\n            },\n            "settings": {\n                "auth": "noauth",\n                "udp": true,\n                "userLevel": 8\n            }\n        }\n    ],\n    "outbounds": [\n        {\n            "tag": "proxy",\n            "protocol": "vless",\n            "settings": {\n                "vnext": [\n                    {\n                        "address": "x.x.x.x",  \/\/ \u0432\u043d\u0435\u0448\u043d\u0438\u0439 ip \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Xray\n                        "port": 443,\n                        "users": [\n                            {\n                                "id": "...", \/\/ id \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n                                "encryption": "none",\n                                "flow": "xtls-rprx-vision",\n                                "level": 8\n                            }\n                        ]\n                    }\n                ]\n            },\n            "streamSettings": {\n                "network": "tcp",\n                "security": "reality",\n                "realitySettings": {\n                    "allowInsecure": false,\n                    "serverName": "xxx.com",  \/\/ \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0435 \u0438\u043c\u044f \u0437\u0430\u0433\u043b\u0443\u0448\u043a\u0438\n                    "fingerprint": "chrome",\n                    "show": false,\n                    "publicKey": "...",  \/\/ \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n                    "shortId": "..."    \/\/ shortId    \n                },\n                "tcpSettings": {\n                    "header": {\n                        "type": "none"\n                    }\n                }\n            },\n            "mux": {\n                "enabled": false,\n                "concurrency": -1\n            }\n        },\n        {\n            "tag": "direct",\n            "protocol": "freedom",\n            "settings": {\n                "domainStrategy": "UseIP"\n            }\n        },\n        {\n            "tag": "block",\n            "protocol": "blackhole",\n            "settings": {\n                "response": {\n                    "type": "http"\n                }\n            }\n        }\n    ],\n    "routing": {\n        "domainStrategy": "IPIfNonMatch",\n        "rules": [\n            {\n                "inboundTag": [\n                    "cloudflare-dns"\n                ],\n                "outboundTag": "proxy",\n                "type": "field"\n            },\n            {\n                "inboundTag": [\n                    "local-dns"\n                ],\n                "outboundTag": "direct",\n                "type": "field"\n            },\n            {\n                "inboundTag": [\n                    "dns-module"\n                ],\n                "outboundTag": "proxy",\n                "type": "field"\n            },\n            {\n                "ip": [\n                    "geoip:private"\n                ],\n                "outboundTag": "direct",\n                "type": "field"\n            },\n            {\n                "domain": [\n                    "domain:ru"\n                ],\n                "outboundTag": "direct",\n                "type": "field"\n            }\n        ]\n    }\n}<\/code><\/pre>\n\n\n\n
\u0427\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 <\/p>\n\n\n\n
xray uuid<\/code><\/pre>\n\n\n\n
\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0432 \u0431\u043b\u043e\u043a<\/p>\n\n\n\n
"clients": [\n          {\n            "email": "my-mobile",\n            "id": "...",     \/\/ID \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n            "flow": "xtls-rprx-vision"\n          },\n          {\n            "email": "kseniia",\n            "id": "...",     \/\/ID \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n            "flow": "xtls-rprx-vision"\n          }\n        ],<\/code><\/pre>\n\n\n\n
\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0441\u0442\u0430\u0440\u0442\u0443\u0435\u043c \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0441\u0442\u0430\u0442\u0443\u0441<\/p>\n\n\n\n
systemctl restart xray.service\nsystemctl status xray.service\n\nroot@blackbird:~# systemctl status xray.service \n\u25cf xray.service - Xray Service\n     Loaded: loaded (\/etc\/systemd\/system\/xray.service; enabled; preset: enabled)\n    Drop-In: \/etc\/systemd\/system\/xray.service.d\n             \u2514\u250010-donot_touch_single_conf.conf\n     Active: active (running) since Thu 2026-02-19 07:53:33 UTC; 4h 24min ago\n       Docs: https:\/\/github.com\/xtls\n   Main PID: 32820 (xray)\n      Tasks: 9 (limit: 1068)\n     Memory: 11.8M (peak: 20.6M)\n        CPU: 3min 10.121s\n     CGroup: \/system.slice\/xray.service\n             \u2514\u250032820 \/usr\/local\/bin\/xray run -config \/usr\/local\/etc\/xray\/config.json\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c third-party \u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 iptables \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u0447\u0442\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438\u0441\u044c \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c v6 nano \/etc\/iptables\/rules.v6 \u0421\u0442\u0430\u0432\u0438\u043c Xray \u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c Short ID openssl rand -hex 8 \u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043b\u044f XRay Reality xray x25519 PrivateKey: WK…Password: V5… \u0421\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c UUID \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430 xray uuid b16e23a6-… \u041a\u043e\u043d\u0444\u0438\u0433 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Xray \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043e \u043f\u0443\u0442\u0438 \/usr\/local\/etc\/xray\/config.json \u041a\u043e\u043d\u0444\u0438\u0433 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f v2RayNG \u0427\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85],"tags":[86,87],"class_list":["post-545","post","type-post","status-publish","format-standard","hentry","category-vpn","tag-vpn","tag-xray"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/545","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=545"}],"version-history":[{"count":5,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/545\/revisions"}],"predecessor-version":[{"id":552,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=\/wp\/v2\/posts\/545\/revisions\/552"}],"wp:attachment":[{"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=545"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=545"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.astrocroc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=545"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}