alpine搭建hysteria2+端口跳跃

apk update
apk add sudo curl wget bash tar unzip nano

wget -O hy2.sh https://raw.githubusercontent.com/zrlhk/alpine-hysteria2/main/hy2.sh  && sh hy2.sh

配置文件：/etc/hysteria/config.yaml
使用自签名证书，默认端口40443，安全tls，SNI为： bing.com
随系统自启动
看状态 service hysteria status
重启 service hysteria restart

nano /etc/hysteria/config.yaml

listen: :9443                        #端口自定义

acme:                                #域名证书 
  domains:
    - xx.us                          #已解析好的域名
  email: xx@gmail.com                #随便输入邮箱名

auth:
  type: password
  password: 88888888                 #密码自定义

masquerade:
  type: proxy
  proxy:
    url: https://bing.com            #伪装网站
    rewriteHost: true

resolver:
  type: udp
  udp:
    addr: 8.8.8.8:53

outbounds:
  - name: v4_prefer
    type: direct
    direct:
      mode: 46
  - name: v4
    type: direct
    direct:
      mode: 4
  - name: v6
    type: direct
    direct:
      mode: 6
  - name: sk5
    type: socks5
    socks5:
      addr: 123.123.123.123:56789
      username: admin
      password: xxxx

acl:
  inline:
   - v6(geosite:youtube)
   - v4_prefer(all)                                                                                  

listen: :9443                        #端口自定义

acme:                                #域名证书 
  domains:
    - xx.us                          #已解析好的域名
  email: xx@gmail.com                #随便输入邮箱名

auth:
  type: password
  password: 88888888                 #密码自定义

masquerade:
  type: proxy
  proxy:
    url: https://bing.com            #伪装网站
    rewriteHost: true

resolver:
  type: udp
  udp:
    addr: 8.8.8.8:53

outbounds:
  - name: v4_prefer
    type: direct
    direct:
      mode: 46
  - name: v4
    type: direct
    direct:
      mode: 4
  - name: v6
    type: direct
    direct:
      mode: 6
  - name: sk5
    type: socks5
    socks5:
      addr: 123.123.123.123:56789
      username: admin
      password: xxxx

acl:
  inline:
   - v6(geosite:youtube)
   - v4_prefer(all)                                                                                  

apk add iptables ip6tables
iptables -t nat -A PREROUTING -p udp --dport 20000:40000 -j REDIRECT --to-port 9443
ip6tables -t nat -A PREROUTING -p udp --dport 20000:40000 -j REDIRECT --to-port 9443
iptables-save > /etc/iptables/rules.v4
ip6tables-save > /etc/iptables/rules.v6
rc-update add iptables
rc-update add ip6tables
rc-service iptables save
rc-service ip6tables save

service hysteria restart