自定义端口NaiveProxy与Caddy V2前置的VLESS/Vmess V2Ray共存 可开CDN

* 推荐使用Xshell的撰写窗格，这样多行命令可以写到撰写窗格里面执行。

1. 极简一键脚本搭 Caddy V2 前置的VLESS或Vmess+WebSocket+TLS 

设置好域名解析, 如 vless.mydomain.com, CDN关掉

bash <(curl -L https://github.com/crazypeace/v2ray_wss/raw/main/install.sh)

搭完自己检查一下是否能正常使用

CDN可以开

2. 搭建NaiveProxy

2.1 设置域名解析, 如 np.mydomain.com, CDN关掉

-update-

所有以下这些步骤，我做成了一个一键脚本。执行这个脚本，以下步骤都不用手搓了。

bash <(curl -L https://github.com/crazypeace/naive/raw/main/install.sh)

2.2 用Caddy官方脚本安装Caddy

来源: https://caddyserver.com/docs/install#debian-ubuntu-raspbian

sudo apt install -y debian-keyring debian-archive-keyring apt-transport-https

curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg

curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list

sudo apt update

sudo apt install caddy

2.3 下载NaiveProxy作者编译的caddy

https://github.com/klzgrad/forwardproxy/releases 找最新的版本

cd /tmp
wget https://github.com/klzgrad/forwardproxy/releases/download/caddy2-naive-20221007/caddy-forwardproxy-naive.tar.xz
tar -xf caddy-forwardproxy-naive.tar.xz
cd caddy-forwardproxy-naive

2.4 替换caddy程序

service caddy stop
cp caddy /usr/bin/

2.5 修改Caddfile添加NaiveProxy的配置部分

在Caddyfile的顶部添加下面这一段

{

  order forward_proxy before file_server

}

:443, np.mydomain.com {

  tls e16d9cb045d7@gmail.com

  forward_proxy {

    basic_auth 用户名 密码

    hide_ip

    hide_via

    probe_resistance

  }

  file_server {

    root /var/www/html

  }

}

也可以在撰写窗格里执行

sed -i '1i  {\

  order forward_proxy before file_server\

}\

:443, np.mydomain.com {\

  tls e16d9cb045d7@gmail.com\

  forward_proxy {\

    basic_auth 用户名 密码\

    hide_ip\

    hide_via\

    probe_resistance\

  }\

  file_server {\

    root /var/www/html\

  }\

}' /etc/caddy/Caddyfile 

2.6 写个简单的html页面

mkdir -p /var/www/html
echo "hello world" > /var/www/html/index.html

2.7 启动NaiveProxy

service caddy start

测试一下你的VLESS/Vmess 和 NaiveProxy 应该都可以正常使用。

3. [可选项] 自定义NaiveProxy端口

编辑Caddfile, 把 “:443”改成你想要的端口号“:自定义端口”；并在域名后面加上“:自定义端口”

像下面这样

重启NaiveProxy

service caddy restart

检查一下工作正常

 4. [可选项] NaiveProxy屏蔽墙内流量

NaiveProxy没有路由模块，需要用“外部”方案处理墙内流量问题

利用V2Ray的路由模块

DNS解析屏蔽墙内域名

========

正常操作日志

root@391932510hax:~# bash <(curl -L https://github.com/crazypeace/naive/raw/main/install.sh)
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 12136  100 12136    0     0  19797      0 --:--:-- --:--:-- --:--:--  796k
                     _ ___                   
 ___ ___ __ __ ___ _| |  _|___ __ __   _ ___
|-_ |_  |  |  |-_ | _ |   |- _|  |  |_| |_  |
|___|___|  _  |___|___|_|_|___|  _  |___|___|
        |_____|               |_____|       

此脚本仅兼容于Debian 10+系统. 如果你的系统不符合,请Ctrl+C退出脚本
可以去 https://github.com/crazypeace/naive 查看脚本整体思路和关键命令, 以便针对你自己的系统做出调整.
有问题加群 https://t.me/+ISuvkzFGZPBhMzE1
本脚本支持带参数执行, 在参数中输入域名, 网络栈, 端口, 用户名, 密码. 详见GitHub.
----------------------------------------------------------------
按  Enter 回车键  继续....或按  Ctrl + C  取消.
Hit:1 http://deb.debian.org/debian bullseye InRelease
Get:2 http://deb.debian.org/debian bullseye-updates InRelease [44.1 kB]                        
Get:3 http://security.debian.org/debian-security bullseye-security InRelease [48.4 kB]         
Get:4 https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version InRelease [7505 B]                                                
Get:5 http://security.debian.org/debian-security bullseye-security/main amd64 Packages [226 kB]
Get:6 http://security.debian.org/debian-security bullseye-security/main Translation-en [147 kB]
Get:7 https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version/main amd64 Packages [2200 B]
Fetched 475 kB in 2s (230 kB/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
21 packages can be upgraded. Run 'apt list --upgradable' to see them.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
jq is already the newest version (1.6-2.1).
qrencode is already the newest version (4.1.1-1).
wget is already the newest version (1.21-1+deb11u1).
curl is already the newest version (7.74.0-1.3+deb11u5).
sudo is already the newest version (1.9.5p2-3+deb11u1).
The following additional packages will be installed:
  git-man libcurl3-gnutls liberror-perl
Suggested packages:
  git-daemon-run | git-daemon-sysvinit git-doc git-el git-email git-gui gitk gitweb git-cvs git-mediawiki git-svn
The following NEW packages will be installed:
  git git-man libcurl3-gnutls liberror-perl
0 upgraded, 4 newly installed, 0 to remove and 21 not upgraded.
Need to get 7717 kB of archives.
After this operation, 38.7 MB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bullseye/main amd64 liberror-perl all 0.17029-1 [31.0 kB]
Get:2 http://security.debian.org/debian-security bullseye-security/main amd64 libcurl3-gnutls amd64 7.74.0-1.3+deb11u5 [343 kB]
Get:3 http://security.debian.org/debian-security bullseye-security/main amd64 git-man all 1:2.30.2-1+deb11u1 [1829 kB]
Get:4 http://security.debian.org/debian-security bullseye-security/main amd64 git amd64 1:2.30.2-1+deb11u1 [5514 kB]
Fetched 7717 kB in 1s (6070 kB/s)
Selecting previously unselected package libcurl3-gnutls:amd64.
(Reading database ... 28564 files and directories currently installed.)
Preparing to unpack .../libcurl3-gnutls_7.74.0-1.3+deb11u5_amd64.deb ...
Unpacking libcurl3-gnutls:amd64 (7.74.0-1.3+deb11u5) ...
Selecting previously unselected package liberror-perl.
Preparing to unpack .../liberror-perl_0.17029-1_all.deb ...
Unpacking liberror-perl (0.17029-1) ...
Selecting previously unselected package git-man.
Preparing to unpack .../git-man_1%3a2.30.2-1+deb11u1_all.deb ...
Unpacking git-man (1:2.30.2-1+deb11u1) ...
Selecting previously unselected package git.
Preparing to unpack .../git_1%3a2.30.2-1+deb11u1_amd64.deb ...
Unpacking git (1:2.30.2-1+deb11u1) ...
Setting up libcurl3-gnutls:amd64 (7.74.0-1.3+deb11u5) ...
Setting up liberror-perl (0.17029-1) ...
Setting up git-man (1:2.30.2-1+deb11u1) ...
Setting up git (1:2.30.2-1+deb11u1) ...
Processing triggers for man-db (2.9.4-2) ...
Processing triggers for libc-bin (2.31-13+deb11u5) ...

安装Caddy最新版本
----------------------------------------------------------------
sudo: unable to resolve host 391932510hax.localdomain: Name or service not known
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
apt-transport-https is already the newest version (2.2.4).
debian-archive-keyring is already the newest version (2021.1.1).
debian-keyring is already the newest version (2021.07.26).
0 upgraded, 0 newly installed, 0 to remove and 21 not upgraded.
sudo: unable to resolve host 391932510hax.localdomain: Name or service not known
sudo: unable to resolve host 391932510hax.localdomain: Name or service not known
# Source: Caddy
# Site: https://github.com/caddyserver/caddy
# Repository: Caddy / stable
# Description: Fast, multi-platform web server with automatic HTTPS


deb [signed-by=/usr/share/keyrings/caddy-stable-archive-keyring.gpg] https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version main

deb-src [signed-by=/usr/share/keyrings/caddy-stable-archive-keyring.gpg] https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version main
sudo: unable to resolve host 391932510hax.localdomain: Name or service not known
Hit:1 http://deb.debian.org/debian bullseye InRelease
Hit:2 http://security.debian.org/debian-security bullseye-security InRelease                   
Hit:3 http://deb.debian.org/debian bullseye-updates InRelease                                  
Get:4 https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version InRelease [7505 B]   
Fetched 7505 B in 2s (4931 B/s)                                          
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
21 packages can be upgraded. Run 'apt list --upgradable' to see them.
sudo: unable to resolve host 391932510hax.localdomain: Name or service not known
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following packages will be upgraded:
  caddy
1 upgraded, 0 newly installed, 0 to remove and 20 not upgraded.
Need to get 14.8 MB of archives.
After this operation, 13.3 kB of additional disk space will be used.
Get:1 https://dl.cloudsmith.io/public/caddy/stable/deb/debian any-version/main amd64 caddy amd64 2.6.4 [14.8 MB]
Fetched 14.8 MB in 2s (7787 kB/s)
(Reading database ... 29568 files and directories currently installed.)
Preparing to unpack .../archives/caddy_2.6.4_amd64.deb ...
Unpacking caddy (2.6.4) over (2.6.3) ...
Setting up caddy (2.6.4) ...
Processing triggers for man-db (2.9.4-2) ...

本系统架构是amd64, 你同意直接下载Na?veProxy作者编译好的Caddy吗?
Y, 使用编译好的Caddy; n, 重新编译. (直接回车默认Y)
(Y/n): 

下载Na?veProxy作者编译的Caddy
----------------------------------------------------------------
rm: cannot remove 'caddy-forwardproxy-naive.tar.xz': No such file or directory
rm: cannot remove 'caddy-forwardproxy-naive': No such file or directory
--2023-02-15 22:14:57--  https://github.com/klzgrad/forwardproxy/releases/download/caddy2-naive-20221007/caddy-forwardproxy-naive.tar.xz
Resolving github.com (github.com)... 140.82.113.4
Connecting to github.com (github.com)|140.82.113.4|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/266250280/efa18c3e-4192-4207-a14f-1de0a8446975?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230215%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230215T151448Z&X-Amz-Expires=300&X-Amz-Signature=7747661ab99f9064919d1b7ef410e660d9ce560008f4de6bde2adaae0dfea246&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=266250280&response-content-disposition=attachment%3B%20filename%3Dcaddy-forwardproxy-naive.tar.xz&response-content-type=application%2Foctet-stream [following]
--2023-02-15 22:14:58--  https://objects.githubusercontent.com/github-production-release-asset-2e65be/266250280/efa18c3e-4192-4207-a14f-1de0a8446975?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20230215%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230215T151448Z&X-Amz-Expires=300&X-Amz-Signature=7747661ab99f9064919d1b7ef410e660d9ce560008f4de6bde2adaae0dfea246&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=266250280&response-content-disposition=attachment%3B%20filename%3Dcaddy-forwardproxy-naive.tar.xz&response-content-type=application%2Foctet-stream
Resolving objects.githubusercontent.com (objects.githubusercontent.com)... 185.199.108.133, 185.199.109.133, 185.199.110.133, ...
Connecting to objects.githubusercontent.com (objects.githubusercontent.com)|185.199.108.133|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10192968 (9.7M) [application/octet-stream]
Saving to: 'caddy-forwardproxy-naive.tar.xz'

caddy-forwardproxy-naive.tar.xz                 100%[====================================================================================================>]   9.72M  3.74MB/s    in 2.6s   

2023-02-15 22:15:01 (3.74 MB/s) - 'caddy-forwardproxy-naive.tar.xz' saved [10192968/10192968]

v2.6.1 h1:EDqo59TyYWhXQnfde93Mmv4FJfYe00dO60zMiEt+pzo=

替换Caddy可执行文件
----------------------------------------------------------------

 xkcd密码生成器页面
----------------------------------------------------------------
rm: cannot remove '/var/www/xkcdpw-html': No such file or directory
Cloning into '/var/www/xkcdpw-html'...
remote: Enumerating objects: 13, done.
remote: Counting objects: 100% (13/13), done.
remote: Compressing objects: 100% (11/11), done.
remote: Total 13 (delta 0), reused 7 (delta 0), pack-reused 0
Receiving objects: 100% (13/13), 143.65 KiB | 1.46 MiB/s, done.

请输入一个 正确的域名 Input your domain
(例如: mydomain.com): nphax.tzzhu.gq


 你的域名Domain = nphax.tzzhu.gq
----------------------------------------------------------------
如果你的小鸡是双栈(同时有IPv4和IPv6的IP)，请选择你把v2ray搭在哪个'网口'上
如果你不懂这段话是什么意思, 请直接回车
Input 4 for IPv4, 6 for IPv6: 6


 域名解析 = 我确定已经有解析了
----------------------------------------------------------------

请输入 端口 [1-65535], 不能选择 80端口
(默认端口port: 443):


 端口Port = 443
----------------------------------------------------------------


请输入 用户名 Input your username
(默认: 10dfbe08d85c5aa5):


 你的用户名Username = 10dfbe08d85c5aa5
----------------------------------------------------------------

请输入 密码 Input your password
(默认: a8d68ff63b647aff):


 你的密码Password = a8d68ff63b647aff
----------------------------------------------------------------

修改Caddyfile
----------------------------------------------------------------

启动Na?veProxy服务端(Caddy)
----------------------------------------------------------------

Na?veProxy配置参数
----------------------------------------------------------------
域名Domain: nphax.tzzhu.gq
端口Port: 443
用户名Username: 10dfbe08d85c5aa5
密码Password: a8d68ff63b647aff
https://MTBkZmJlMDhkODVjNWFhNTphOGQ2OGZmNjNiNjQ3YWZmQG5waGF4LnR6emh1LmdxOjQ0Mw==
以下两个二维码完全一样的内容
█████████████████████████████████████████████
█████████████████████████████████████████████
████ ▄▄▄▄▄ █▀▄█▀  ▀▀▄  █▀▄▀▀▀  ▀▀█ ▄▄▄▄▄ ████
████ █   █ █▄   ▄ ▀▀▄▄ ▀▀█ ▀▀▀ █▄█ █   █ ████
████ █▄▄▄█ █ ▀█▀█  █▄▄ ▀  ▀█▀▄▄ ▄█ █▄▄▄█ ████
████▄▄▄▄▄▄▄█ ▀▄█ █ █▄▀ █▄▀▄▀▄█ ▀ █▄▄▄▄▄▄▄████
████▄▄█▄▀▀▄ ▀▀ ▀██▀ █▀█▄▀▀▀▀▀▀ █▀▀ ▄▄▀ ▄▀████
████▄  █ ▄▄▄█▀▀███▀▀▄██ █▀▀▀█ ▄▀▀██▄ ▀▄▀ ████
████▄▄▀▄█ ▄▄  ▀▀ ██▀▄▄▀  ▀▀██▄ ▀█  ▀▄███ ████
████▄▀██▄█▄█ ▀▄█ ▀▀▄  ▄▀  ▀ █ ██ ▄▀▄▀ █▀▄████
█████▀▄█▄▄▄▄ ██▄█▄▄ ▄▀█▄▄ ▀█▀▄▀ ▀▄▄▄ █ ▀ ████
██████▀▄▀▄▄▄▄▀▄▀█ █▀▀ ▀▀ ▀██▄▄▀▀ ▄▀▀ ▄▀ ▄████
████ █▄█  ▄▄▄█▄  ▀▄▀ ███▄ ▀█ ▀▄▄ ▀▄█▄█ █ ████
█████▀▄█▄▀▄███▄   ▄▄▀▄▄▄   ▀ ▀██▀▄▄ █▄█▄▄████
████▄  █ ▀▄█▄██ █▀   ▀▀█▀ ▀  ▀▀▀▄▄▄▀▄▄ ▄ ████
████▄▀ ▀▀▄▄▄▀▄▀ █▄▄▀▀  █▀▀  █ ██▀▀ ▄▀█▄▀▄████
████▄▄████▄▄▀▀▀█  ▀▄▄▄ █▄▀▄  █▀█ ▄▄▄ ▀██▀████
████ ▄▄▄▄▄ █▄▀▀▄ █ ▀█▀▄█  ██ █▀█ █▄█ █▀ ▄████
████ █   █ █▀██▀██▀▄█▄█ ▀▀█▀ █▄▀ ▄▄  ▀▀▄▄████
████ █▄▄▄█ █▀ ████▀█ █▀ ▄ ▄▀▄▀▀ ▄█▀▀▄▄▄▄▄████
████▄▄▄▄▄▄▄█▄▄██▄████▄███▄▄▄▄▄█▄▄████▄▄▄▄████
█████████████████████████████████████████████
█████████████████████████████████████████████

---------- END -------------
以上节点信息保存在 ~/_naive_url_ 中

----------------------------------------------------------------
END
root@391932510hax:~#