alpine搭建hysteria2+端口跳跃

apk update
apk add sudo curl wget bash tar unzip nano

wget -O hy2.sh https://raw.githubusercontent.com/zrlhk/alpine-hysteria2/main/hy2.sh  && sh hy2.sh

配置文件：/etc/hysteria/config.yaml
使用自签名证书，默认端口40443，安全tls，SNI为： bing.com
随系统自启动
看状态 service hysteria status
重启 service hysteria restart

nano /etc/hysteria/config.yaml

listen: :9443                        #端口自定义

acme:                                #域名证书 
  domains:
    - xx.us                          #已解析好的域名
  email: xx@gmail.com                #随便输入邮箱名

auth:
  type: password
  password: 88888888                 #密码自定义

masquerade:
  type: proxy
  proxy:
    url: https://bing.com            #伪装网站
    rewriteHost: true

outbounds:                           #出站端口设置
  - name: v4
    type: direct
    direct:
      mode: 4
  - name: v6
    type: direct
    direct:
      mode: 6

acl:
  inline:                            #内置出站规则，从上到下优先出站
   - v4(geosite:netflix)             #v4解锁nf
   - v6(::/0)                        #v6分流
   - v4(0.0.0.0/0)                   #v4分流
   - direct(all)                     #其它直连出站                                                                                     

apk add iptables ip6tables
iptables -t nat -A PREROUTING -p udp --dport 20000:40000 -j REDIRECT --to-port 9443
ip6tables -t nat -A PREROUTING -p udp --dport 20000:40000 -j REDIRECT --to-port 9443
iptables-save > /etc/iptables/rules.v4
ip6tables-save > /etc/iptables/rules.v6
rc-update add iptables
rc-update add ip6tables
rc-service iptables save
rc-service ip6tables save

service hysteria restart