How to Install V2ray on Linux
V2Ray is an advanced tool designed to bolster your online privacy and security. When it comes to installation, Ubuntu stands out as the ideal Linux distribution for deploying V2Ray.
V2Ray can be installed on multiple platforms, including Linux, Windows, Mac, Android, and iOS. However, a manual installation is recommended for the best results.
Contents
Essential Requirements for Setting Up a V2Ray Server on Ubuntu
To successfully install and configure a V2Ray server on Ubuntu, ensure your setup meets the following criteria:
– A server running on Ubuntu VPS.
– A non-root user with sudo privileges.
By meeting these prerequisites, you can proceed with the installation and configuration of your V2Ray server with confidence, paving the way for enhanced online security and privacy.
Comprehensive Guide: Setting Up V2Ray on Ubuntu
Ensure your system is up-to-date by executing the following commands before diving into the V2Ray installation process:
sudo apt-get update
sudo apt-get upgrade
Step 1: Download and Install V2Ray on Ubuntu
First, you’ll need to install the necessary dependency packages by running:
sudo apt install curl unzip
Next, download and execute the official V2Ray installation script with these commands:
curl -O https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh
sudo bash install-release.sh
To verify that V2Ray has been installed correctly, check its status using:
sudo systemctl status v2ray
If you encounter any issues, restart the service with:
sudo systemctl restart v2ray
For automatic startup at system boot, enable the service with:
sudo systemctl enable v2ray
Following these steps will ensure a smooth setup of V2Ray on your Ubuntu server, providing you with enhanced online privacy and security.
Step 2: Ensuring Precise Server Time Synchronization
For V2Ray to function optimally, precise time synchronization is crucial. Any significant deviation in server time can cause V2Ray to malfunction, which could compromise user security.
The time difference between your client and server must remain within a two-minute window. To verify and synchronize your server time, follow these steps:
First, check your server’s current time by running:
timedatectl
Your system clock must be accurately synchronized. If it is not, you will need to set up Network Time Protocol (NTP) synchronization to ensure the server maintains precise time. Follow these steps to enable NTP synchronization:
sudo timedatectl set-ntp true
After enabling NTP, confirm that your system clock is synchronized by running the `timedatectl` command again:
timedatectl
With NTP synchronization in place, your server will now maintain the correct time, ensuring that V2Ray operates smoothly and securely. Accurate timekeeping is a fundamental aspect of maintaining the integrity and reliability of your V2Ray server.
Step 3: Configuring V2Ray on Ubuntu
To configure V2Ray, you’ll need to edit the configuration file using your preferred text editor. In this guide, we’ll use Nano.
Begin by opening the V2Ray configuration file with the following command:
sudo nano /usr/local/etc/v2ray/config.json
V2Ray (VMess) requires a UUID for client identification. Replace the existing content of the file with the configuration below, ensuring you substitute `<your-uuid-here>` with a randomly generated UUID string:
{
“log”: {
“loglevel”: “warning”,
“access”: “/var/log/v2ray/access.log”,
“error”: “/var/log/v2ray/error.log”
},
“inbounds”: [
{
“port”: 10000,
“listen”: “127.0.0.1”,
“protocol”: “vmess”,
“settings”: {
“clients”: [
{
“id”: “b831381d-6324-4d53-ad4f-8cda48b30811”,
“alterId”: 64
}
]
},
“streamSettings”: {
“network”: “ws”,
“wsSettings”: {
“path”: “/ray”
}
}
}
],
“outbounds”: [
{
“protocol”: “freedom”,
“settings”: {}
}
]
}
After making these changes, save and close the file. This configuration sets up the V2Ray server to listen on port 10000 and use the WebSocket protocol for inbound connections.
To apply your changes, restart the V2Ray service:
sudo systemctl restart v2ray
To verify that V2Ray is listening on the correct port, use the following command:
sudo ss -lnpt | grep v2ray
This step ensures that your V2Ray server is properly configured and ready to handle secure connections.
Step 4: Setting Up a Reverse Proxy
To enhance security and performance, you can configure a reverse proxy for your web server. In this step, we’ll set up Nginx as a reverse proxy on Ubuntu for your V2Ray server.
First, install the Nginx web server and create a virtual host configuration file for V2Ray:
sudo apt install nginx
sudo nano /etc/nginx/conf.d/v2ray.conf
Add the following lines to the configuration file, replacing `yourdomain.com` with your actual domain name or subdomain:
server {
listen 80;
server_name yourdomain.com;
index index.html;
root /usr/share/nginx/html/;
access_log /var/log/nginx/v2ray.access.log;
error_log /var/log/nginx/v2ray.error.log;
location /ray {
if ($http_upgrade != “websocket”) {
return 404;
}
proxy_redirect off;
proxy_pass http://127.0.0.1:10000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
This configuration tells Nginx to listen on port 80 and forward requests to the V2Ray server running on `http://127.0.0.1:10000`. The `/ray` path must match the path specified in your V2Ray configuration file to ensure proper handling of WebSocket connections.
After saving and closing the file, test your Nginx configuration for any syntax errors:
sudo nginx -t
If there are no errors, reload Nginx to apply the new configuration:
sudo systemctl reload nginx
By setting up Nginx as a reverse proxy, you ensure that your V2Ray server is not directly exposed to the internet, adding an extra layer of security and improving performance.
Step 5: Enabling HTTPS for Secure Connections
To maintain anonymity and security, it’s crucial to enable HTTPS on your server, preventing detection by national firewalls and ensuring encrypted communications.
Start by installing the latest version of the Let’s Encrypt client, `certbot`, from the Snap store:
sudo apt install snapd
sudo snap install certbot --classic
Next, obtain a free SSL certificate from Let’s Encrypt by running the following command, replacing `yourdomain.com` with your actual domain and `[email protected]` with your email address:
sudo /snap/bin/certbot --webroot -i nginx --agree-tos --hsts --staple-ocsp -d yourdomain.com -m [email protected] -w /usr/share/nginx/html/
After running the command, Certbot will handle the process of obtaining and installing the SSL certificate for your Nginx server. Your server will then be configured to serve HTTPS traffic, ensuring that all communications are encrypted and secure.
By enabling HTTPS, you not only enhance the security of your V2Ray server but also help obscure its presence from monitoring entities, providing a more robust and private browsing experience.
Step 6: Configure Your Firewall
To ensure your V2Ray server operates smoothly, you need to allow traffic through the necessary ports.
For iptables firewall:
To permit traffic on TCP port 443, use the following command:
sudo iptables -I INPUT -p tcp --dport 443 -j ACCEPT
For UFW firewall:
Configure the firewall by allowing traffic on TCP port 443 with this command:
sudo ufw allow 443/tcp
Step 7: Set Up the V2Ray Client on Linux
Now, it’s time to configure the V2Ray client on your Ubuntu system. Follow these steps to download and set up the V2Ray client:
First, download the latest V2Ray package for 64-bit Linux and unzip it:
wget https://github.com/v2ray/v2ray-core/releases/latest/download/v2ray-linux-64.zip -O ~/Downloads/v2ray-linux-64.zip
unzip ~/Downloads/v2ray-linux-64.zip -d ~/Downloads/v2ray-linux-64
Next, open the V2Ray configuration file in your preferred text editor:
nano ~/Downloads/v2ray-linux-64/config.json
Replace the contents of the configuration file with the following template, ensuring you update placeholders with your actual values:
{
“log”: {
“loglevel”: “warning”
},
“inbounds”: [{
“port”: 1080,
“listen”: “127.0.0.1”,
“tag”: “socks-inbound”,
“protocol”: “socks”,
“settings”: {
“auth”: “noauth”,
“udp”: false,
“ip”: “127.0.0.1”
},
“sniffing”: {
“enabled”: true,
“destOverride”: [“http”, “tls”]
}
}],
“outbounds”: [{
“protocol”: “vmess”,
“settings”: {
“vnext”: [{
“address”: “YY.YY.YY.YY”,
“port”: 443,
“users”: [{
“id”: “b831381d-6324-4d53-ad4f-8cda48b30811”,
“alterId”: 233
}]
}]
},
“streamSettings”: {
“network”: “ws”,
“security”: “tls”,
“tlsSettings”: {
“allowInsecure”: false,
“serverName”: “www.example.com”
},
“wsSettings”: {
“path”: “/8snasdr9”,
“headers”: {
“Host”: “www.example.com”
}
}
}
}, {
“protocol”: “freedom”,
“settings”: {},
“tag”: “direct”
}, {
“protocol”: “blackhole”,
“settings”: {},
“tag”: “blocked”
}],
“routing”: {
“domainStrategy”: “IPOnDemand”,
“rules”: [{
“type”: “field”,
“ip”: [“geoip:private”],
“outboundTag”: “blocked”
}, {
“type”: “field”,
“domain”: [“geosite:category-ads”],
“outboundTag”: “blocked”
}]
},
“dns”: {
“hosts”: {
“domain:v2ray.com”: “www.vicemc.net”,
“domain:github.io”: “pages.github.com”,
“domain:wikipedia.org”: “www.wikimedia.org”,
“domain:shadowsocks.org”: “electronicsrealm.com”
},
“servers”: [
“1.1.1.1”,
{
“address”: “114.114.114.114”,
“port”: 53,
“domains”: [
“geosite:cn”
]
},
“8.8.8.8”,
“localhost”
]
},
“policy”: {
“levels”: {
“0”: {
“uplinkOnly”: 0,
“downlinkOnly”: 0
}
},
“system”: {
“statsInboundUplink”: false,
“statsInboundDownlink”: false,
“statsOutboundUplink”: false,
“statsOutboundDownlink”: false
}
},
“other”: {}
}
Once you’ve made the necessary changes, save and close the file.
This configuration sets up the V2Ray client to route traffic through a SOCKS proxy on port 1080, and securely connect to your V2Ray server over WebSocket and TLS on port 443. Make sure the UUID, server address and other settings match those of your V2Ray server to ensure seamless connectivity.
Starting and Configuring the V2Ray Client
To get your V2Ray client up and running, follow these steps:
- Navigate to the V2Ray directory:
cd ~/Downloads/v2ray-linux-64
- Start the V2Ray client with the specified configuration file:
./v2ray -config=config.json
Keep the terminal window open and let V2Ray run continuously in the background.
Next, configure Firefox to route its traffic through the V2Ray client:
- Open Firefox and go to the settings menu.
- Scroll down to the “Network Settings” section and click on “Settings.”
- Select “Manual proxy configuration.”
- Enter `127.0.0.1` in the “SOCKS Host” field.
- Enter `1080` in the “Port” field.
- Choose “SOCKS v5.”
- Check the option “Proxy DNS when using SOCKS v5.”
- Click “OK” to save your settings.
With these steps completed, Firefox will route all web requests through the V2Ray client, which will then securely forward them to the V2Ray server.
Your V2Ray setup is now operational, providing you with a secure and private browsing experience. Enjoy enhanced security and privacy while surfing the web!
