安全隧道 - gost
# 下载
https://github.com/go-gost/gost/releases
wget https://github.com/go-gost/gost/releases/download/v3.0.0/gost_3.0.0_linux_amd64.tar.gz
tar -xzvf gost_3.0.0_linux_amd64.tar.gz
chmod +x gost
mv gost /usr/local/bin/gost
# 系统服务
nano /etc/systemd/system/gost.service
# ---
[Unit]
Description=GO Simple Tunnel
After=network.target
Wants=network.target
[Service]
Type=simple
ExecStart=/usr/local/bin/gost -api "账号:密码@:18080"
Restart=always
[Install]
WantedBy=multi-user.target
# ---
systemctl daemon-reload
systemctl enable gost
systemctl start gost
# 管理面板
- https://github.com/go-gost/gost-ui
- 官方在线面板:https://ui.gost.run/ (opens new window)
# 登录
由于 api 服务是 http,在线面板默认为 https 服务,有两种方式解决:
- 手动选择 http 访问
http://ui.gost.run/
- 或者浏览器地址栏左侧 - 点击
https图标
- 网站设置 - 找到不安全内容
,选择允许
。(chrome 浏览器)
# 示例 - 端口转发
需求:监听 8080
TCP 端口,经过 127.0.0.1:7890
的 socks5 代理,转发数据到 192.168.1.123:8080
端口
创建转发链 由于转发需要经过一个 socks5 代理,因此需要先创建一个转发链 (Chain):
{
"name": "chain-local-mihomo",
"hops": [
{
"name": "hop-0",
"nodes": [
{
"name": "node-0",
"addr": ":7890",
"connector": {
"type": "socks5"
},
"dialer": {
"type": "tcp"
}
}
]
}
]
}
一个经过本机 7890
socks5 端口的转发链
创建服务
{
"name": "service-0",
"addr": ":8080",
"handler": {
"type": "tcp",
"chain": "chain-local-mihomo"
},
"listener": {
"type": "tcp"
},
"forwarder": {
"nodes": [
{
"name": "target-0",
"addr": "192.168.1.123:8080"
}
]
}
}
监听本机 8080
端口,经过 chain-local-mihomo
,转发到 192.168.1.123:8080
# 参考
上次更新: 2025/04/18, 19:09:23