| local_address | the address your local listens |
method encryption method, "bf-cfb", "aes-256-cfb", "des-cfb", "rc4", etc. Default is table, which is not secure. "aes-256-cfb" is recommended
| local_port | local port |
fast_open use TCP_FASTOPEN, true/false
| password | password used for encryption |
| timeout | in seconds |
| method | encryption method, "aes-256-cfb" is recommended |
| fast_open | use [TCP_FASTOPEN][2], true / false |
`cd` into the directory of `config.json`. Run `ssserver` on your server. To run it in the background, run
Run `ssserver -c /etc/shadowsocks.json` on your server. To run it in the background, [use supervisor][8].
`nohup ssserver > log &`.
On your client machine, run `sslocal`.
On your client machine, run `sslocal -c /etc/shadowsocks.json`.
Change the proxy settings in your browser to
Change the proxy settings in your browser to
@ -66,57 +87,10 @@ You can use args to override settings from `config.json`.
ssserver -p server_port -k password -m bf-cfb
ssserver -p server_port -k password -m bf-cfb
ssserver -c /etc/shadowsocks/config.json
ssserver -c /etc/shadowsocks/config.json
Encryption
Wiki
------------
----
Default encryption method table, which is not secure, is not recommended. Please use "aes-256-cfb" or "bf-cfb". "rc4" is not secure, either, please don't use it.
List of all encryption methods:
- aes-128-cfb
- aes-192-cfb
- aes-256-cfb
- bf-cfb
- camellia-128-cfb
- camellia-192-cfb
- camellia-256-cfb
- cast5-cfb
- des-cfb
- idea-cfb
- rc2-cfb
- rc4
- seed-cfb
- table
**If you want to use encryption method other than "table", please install [M2Crypto](http://chandlerproject.org/Projects/MeTooCrypto).**
Ubuntu:
apt-get install python-m2crypto
Others:
apt-get install openssl-dev swig
pip install M2Crypto
Please notice that some encryption methods are not available on some environments.
Performance
------------
You may want to install gevent for better performance.
$ sudo apt-get install python-gevent
Or:
$ sudo apt-get install libevent-dev python-pip
$ sudo pip install gevent
If both of your server and client are deployed on Linux 3.7+, you can turn on