How to Build Your Own VPN Server (Virtual Private Network) ?

Source: Internet
Author: User
Keywords vpn servers how to setup a vpn server vpn server

What I want to introduce to you this time is to build your own VPN server so that you don't waste money.


Alibaba Cloud Simple Application Server:  Anti COVID-19 SME Enablement Program
$300 coupon package for all new SMEs and a $500 coupon for paying customers.


It’s well known that VPN (Virtual Private Network) can help you over the wall to do things that you can’t do on the domestic network.
The most contacted are those used to connect to a foreign network to play foreign servers when playing games. Some people will buy them at a big price. Sadly, they don’t know that they are using a server shared with others.
Of course, some occupations sometimes need to go over the wall to check some materials to help oneself learn and improve, so as to better complete the task.
In addition to the above two kinds of people who use VPN, there must be some compatriots who want to use the VPN function FQ to watch some movies made by two or three people on the Internet, and do some incredible things.

Before doing it, let me tell you the advantages and disadvantages of building a VPN server
The advantages of self-built VPN compared with paid VPN:

Exclusive server bandwidth, as long as the network environment permits, it is fast, super invincible and very fast.
The extranet server costs about $5 per month, which is about 33 yuan. In China, Ali's 24 yuan machine can satisfy.
Will not be banned due to policy reasons (the foreign server cannot be controlled)
No one can intercept and decrypt the socket5 encryption protocol.
You can add an account on the server by yourself, and you can use it for your friends without limiting the number. (Super trash)
The router supports VPN automatic FQ, as long as it is connected to WIFI, it can automatically FQ.
It supports various terminals such as Android, IOS, router, windows, mac, etc., which is very adaptable.
Supports automatic FQ, just hang up at ordinary times, will not affect the speed of visiting domestic websites.
Can toss and toss, full of sense of accomplishment. (Hahaha, this one's own feeling, it's cool when bragging)
Disadvantages:

In some network environments, the connection may be unavailable or unstable, such as using broadband such as China Mobile and Railcom. (Bad injury because my house is mobile and a bit unstable)
There are not as many acceleration nodes as paid VPNs to choose from, and a server is only a node. For example, a leased US server is a US node.
What should be said and what should not be said are all finished
Experiment preparation: money! (Rental server), patience (in view of the difference between novice and old fritters, the article will be very long)
If you don’t know how to buy a server, please visit: https://www.alibabacloud.com/product/ecs

This experiment uses a server in Singapore (for domestic visits to foreign countries, select foreign hosts, and for foreign visits, select domestic hosts)
Show me my host below
This is a case of the host I purchased
About the introduction of the installed software, I will write a separate article to introduce
Start the experiment below
First log in to your own server

Just copy this command and press Enter directly, because ctrl+c and ctrl+v are invalid, so you need to use the right mouse button to paste into the script and it will be installed automatically. In the future, you only need to run this shortcut command to display the following interface for settings. The shortcut management command is: bash ssr.sh

If it prompts wget: command not found, then it means that the system installed by your service provider is very clean. There is no wget tool. CentOS system installs wget command: yum install -y wget If it is Debian/Ubuntu system install wget command: apt-get install -y wget

Then, according to the prompts, enter the port and password you want to set in turn and press Enter to confirm
Special note: Regarding the port settings, there are more than 60,000 network ports in total, which can be set arbitrarily in theory, but do not start with 0! And some ports are quite special, for example 80, 143, 443, 1433, 3306, 3389, 8080. For novice players, I suggest that just default.

The encryption method is as shown in the figure, this can be said to be one night, here follow me and choose 10

This is an agreement, as above, just choose 2 with me

After confirming these choices, the above picture will appear, asking you whether you choose to be compatible with the original version. The original version here refers to the SS client (the SS client has no protocol and obfuscation options), and you can choose according to your needs. Y (if novice players don’t understand, just follow me to choose)

The following is the settings of the obfuscation plugin
Note: If the protocol is origin, then the confusion must also be plain; if the protocol is not origin, then the confusion can be arbitrary. In some areas, you need to set the confusion to plain to be useful. Because confusion is not always effective, it depends on the strategy of each region. Sometimes it is better not to be confused (plain) or (used together with origin and plain) to make it look like random data. (Special attention: the beginning of tls is easy to be disturbed! Please choose other confusion except the beginning of tls!!!)

Don't look at the picture. Have you seen the passage above? !

Say it again, please choose other confusions except the beginning of tls! ! !

After setting the obfuscated plug-in, you will be prompted to set the number of devices, single-threaded speed limit, and total port speed limit in turn. The default value is no limit. For personal use, just select the default, that is, directly hit the enter key.
Note: Regarding the limitation of the number of devices, this protocol must be non-original and incompatible with the original version to be effective, that is, the SSR protocol must be used to be effective!

Go to the position of the following figure, the following code will officially start automatic deployment, enter: y

And now it’s scrolling, this place Xiaobai can operate in front of people who don’t understand anything, it’s very cross-cut.

When you get to this picture, you are officially completed. The information you set up will write your IP, port number, and password. This information needs to be filled in your SSR client.
Reminder: The QR code link address is unavailable due to the invalid domain name, so the deployed account needs to fill in the information manually in the client.

If you forget the information and check it again, log in to the cloud host and start. /ssr.sh command to check

Here we will do the server

The script is self-starting after booting. After the deployment, you can restart the server to ensure that the deployment takes effect (generally, it takes effect without restarting). Here, novice players find a way to restart.

After that, our client connects to the server. After the connection is successful, you can FQ
The first is the download of the client
Windows client SSR.rar

Mac SSR client Mac.rar

One-click installation and configuration script for Linux client (I found this script from the Internet, and the usage comment is very clear) ssr.rar

Android client apk shadowsocksr-release.rar

This is sensitive information, so you may have been banned when you opened it. If it is banned, just contact me
If you want to download the SS/SSR software on IOS Apple system, you need to have an ID in the US. Download it in the App Store in the US. The mainland has been removed. There are many ways to apply for an ID in the US. But for the convenience of everyone, buy a temporary one on Taobao. That's it, it should be one or two dollars. There are many SS/SSR software such as: Potatso Lite, Potatso, wingy, Shadowrocket, etc.

Client demo
We use Windows for demonstration on the PC side, my system is Win10
Windows I provide two tools, one is SS and the other is SSR
The configuration is basically the same
The first is the configuration of SS

This is a basic configuration. The above IP address is the public IP address of your host, then the port number and password you just selected.
Be careful not to choose the wrong encryption method
Then click confirm
You will see a small plane in the lower right corner

This is how to open
Next, I will talk about the configuration method of SSR

In the corresponding position, fill in the server ip, server port, password, encryption method, protocol and confusion.

The other client methods are the same, download the software and fill in the corresponding information.
The above is all the content of this article
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.