├── .idea ├── .gitignore └── misc.xml ├── LICENSE ├── README.md ├── config.json ├── gost.service └── gost.sh /.idea/.gitignore: -------------------------------------------------------------------------------- 1 | # Default ignored files 2 | /shelf/ 3 | /workspace.xml 4 | # Datasource local storage ignored files 5 | /dataSources/ 6 | /dataSources.local.xml 7 | # Editor-based HTTP Client requests 8 | /httpRequests/ 9 | -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 7 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | GNU GENERAL PUBLIC LICENSE 2 | Version 3, 29 June 2007 3 | 4 | Copyright (C) 2007 Free Software Foundation, Inc. 5 | Everyone is permitted to copy and distribute verbatim copies 6 | of this license document, but changing it is not allowed. 7 | 8 | Preamble 9 | 10 | The GNU General Public License is a free, copyleft license for 11 | software and other kinds of works. 12 | 13 | The licenses for most software and other practical works are designed 14 | to take away your freedom to share and change the works. By contrast, 15 | the GNU General Public License is intended to guarantee your freedom to 16 | share and change all versions of a program--to make sure it remains free 17 | software for all its users. We, the Free Software Foundation, use the 18 | GNU General Public License for most of our software; it applies also to 19 | any other work released this way by its authors. You can apply it to 20 | your programs, too. 21 | 22 | When we speak of free software, we are referring to freedom, not 23 | price. Our General Public Licenses are designed to make sure that you 24 | have the freedom to distribute copies of free software (and charge for 25 | them if you wish), that you receive source code or can get it if you 26 | want it, that you can change the software or use pieces of it in new 27 | free programs, and that you know you can do these things. 28 | 29 | To protect your rights, we need to prevent others from denying you 30 | these rights or asking you to surrender the rights. Therefore, you have 31 | certain responsibilities if you distribute copies of the software, or if 32 | you modify it: responsibilities to respect the freedom of others. 33 | 34 | For example, if you distribute copies of such a program, whether 35 | gratis or for a fee, you must pass on to the recipients the same 36 | freedoms that you received. You must make sure that they, too, receive 37 | or can get the source code. And you must show them these terms so they 38 | know their rights. 39 | 40 | Developers that use the GNU GPL protect your rights with two steps: 41 | (1) assert copyright on the software, and (2) offer you this License 42 | giving you legal permission to copy, distribute and/or modify it. 43 | 44 | For the developers' and authors' protection, the GPL clearly explains 45 | that there is no warranty for this free software. For both users' and 46 | authors' sake, the GPL requires that modified versions be marked as 47 | changed, so that their problems will not be attributed erroneously to 48 | authors of previous versions. 49 | 50 | Some devices are designed to deny users access to install or run 51 | modified versions of the software inside them, although the manufacturer 52 | can do so. This is fundamentally incompatible with the aim of 53 | protecting users' freedom to change the software. The systematic 54 | pattern of such abuse occurs in the area of products for individuals to 55 | use, which is precisely where it is most unacceptable. Therefore, we 56 | have designed this version of the GPL to prohibit the practice for those 57 | products. If such problems arise substantially in other domains, we 58 | stand ready to extend this provision to those domains in future versions 59 | of the GPL, as needed to protect the freedom of users. 60 | 61 | Finally, every program is threatened constantly by software patents. 62 | States should not allow patents to restrict development and use of 63 | software on general-purpose computers, but in those that do, we wish to 64 | avoid the special danger that patents applied to a free program could 65 | make it effectively proprietary. To prevent this, the GPL assures that 66 | patents cannot be used to render the program non-free. 67 | 68 | The precise terms and conditions for copying, distribution and 69 | modification follow. 70 | 71 | TERMS AND CONDITIONS 72 | 73 | 0. Definitions. 74 | 75 | "This License" refers to version 3 of the GNU General Public License. 76 | 77 | "Copyright" also means copyright-like laws that apply to other kinds of 78 | works, such as semiconductor masks. 79 | 80 | "The Program" refers to any copyrightable work licensed under this 81 | License. Each licensee is addressed as "you". "Licensees" and 82 | "recipients" may be individuals or organizations. 83 | 84 | To "modify" a work means to copy from or adapt all or part of the work 85 | in a fashion requiring copyright permission, other than the making of an 86 | exact copy. The resulting work is called a "modified version" of the 87 | earlier work or a work "based on" the earlier work. 88 | 89 | A "covered work" means either the unmodified Program or a work based 90 | on the Program. 91 | 92 | To "propagate" a work means to do anything with it that, without 93 | permission, would make you directly or secondarily liable for 94 | infringement under applicable copyright law, except executing it on a 95 | computer or modifying a private copy. Propagation includes copying, 96 | distribution (with or without modification), making available to the 97 | public, and in some countries other activities as well. 98 | 99 | To "convey" a work means any kind of propagation that enables other 100 | parties to make or receive copies. Mere interaction with a user through 101 | a computer network, with no transfer of a copy, is not conveying. 102 | 103 | An interactive user interface displays "Appropriate Legal Notices" 104 | to the extent that it includes a convenient and prominently visible 105 | feature that (1) displays an appropriate copyright notice, and (2) 106 | tells the user that there is no warranty for the work (except to the 107 | extent that warranties are provided), that licensees may convey the 108 | work under this License, and how to view a copy of this License. If 109 | the interface presents a list of user commands or options, such as a 110 | menu, a prominent item in the list meets this criterion. 111 | 112 | 1. Source Code. 113 | 114 | The "source code" for a work means the preferred form of the work 115 | for making modifications to it. "Object code" means any non-source 116 | form of a work. 117 | 118 | A "Standard Interface" means an interface that either is an official 119 | standard defined by a recognized standards body, or, in the case of 120 | interfaces specified for a particular programming language, one that 121 | is widely used among developers working in that language. 122 | 123 | The "System Libraries" of an executable work include anything, other 124 | than the work as a whole, that (a) is included in the normal form of 125 | packaging a Major Component, but which is not part of that Major 126 | Component, and (b) serves only to enable use of the work with that 127 | Major Component, or to implement a Standard Interface for which an 128 | implementation is available to the public in source code form. A 129 | "Major Component", in this context, means a major essential component 130 | (kernel, window system, and so on) of the specific operating system 131 | (if any) on which the executable work runs, or a compiler used to 132 | produce the work, or an object code interpreter used to run it. 133 | 134 | The "Corresponding Source" for a work in object code form means all 135 | the source code needed to generate, install, and (for an executable 136 | work) run the object code and to modify the work, including scripts to 137 | control those activities. However, it does not include the work's 138 | System Libraries, or general-purpose tools or generally available free 139 | programs which are used unmodified in performing those activities but 140 | which are not part of the work. For example, Corresponding Source 141 | includes interface definition files associated with source files for 142 | the work, and the source code for shared libraries and dynamically 143 | linked subprograms that the work is specifically designed to require, 144 | such as by intimate data communication or control flow between those 145 | subprograms and other parts of the work. 146 | 147 | The Corresponding Source need not include anything that users 148 | can regenerate automatically from other parts of the Corresponding 149 | Source. 150 | 151 | The Corresponding Source for a work in source code form is that 152 | same work. 153 | 154 | 2. Basic Permissions. 155 | 156 | All rights granted under this License are granted for the term of 157 | copyright on the Program, and are irrevocable provided the stated 158 | conditions are met. This License explicitly affirms your unlimited 159 | permission to run the unmodified Program. The output from running a 160 | covered work is covered by this License only if the output, given its 161 | content, constitutes a covered work. This License acknowledges your 162 | rights of fair use or other equivalent, as provided by copyright law. 163 | 164 | You may make, run and propagate covered works that you do not 165 | convey, without conditions so long as your license otherwise remains 166 | in force. You may convey covered works to others for the sole purpose 167 | of having them make modifications exclusively for you, or provide you 168 | with facilities for running those works, provided that you comply with 169 | the terms of this License in conveying all material for which you do 170 | not control copyright. Those thus making or running the covered works 171 | for you must do so exclusively on your behalf, under your direction 172 | and control, on terms that prohibit them from making any copies of 173 | your copyrighted material outside their relationship with you. 174 | 175 | Conveying under any other circumstances is permitted solely under 176 | the conditions stated below. Sublicensing is not allowed; section 10 177 | makes it unnecessary. 178 | 179 | 3. Protecting Users' Legal Rights From Anti-Circumvention Law. 180 | 181 | No covered work shall be deemed part of an effective technological 182 | measure under any applicable law fulfilling obligations under article 183 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or 184 | similar laws prohibiting or restricting circumvention of such 185 | measures. 186 | 187 | When you convey a covered work, you waive any legal power to forbid 188 | circumvention of technological measures to the extent such circumvention 189 | is effected by exercising rights under this License with respect to 190 | the covered work, and you disclaim any intention to limit operation or 191 | modification of the work as a means of enforcing, against the work's 192 | users, your or third parties' legal rights to forbid circumvention of 193 | technological measures. 194 | 195 | 4. Conveying Verbatim Copies. 196 | 197 | You may convey verbatim copies of the Program's source code as you 198 | receive it, in any medium, provided that you conspicuously and 199 | appropriately publish on each copy an appropriate copyright notice; 200 | keep intact all notices stating that this License and any 201 | non-permissive terms added in accord with section 7 apply to the code; 202 | keep intact all notices of the absence of any warranty; and give all 203 | recipients a copy of this License along with the Program. 204 | 205 | You may charge any price or no price for each copy that you convey, 206 | and you may offer support or warranty protection for a fee. 207 | 208 | 5. Conveying Modified Source Versions. 209 | 210 | You may convey a work based on the Program, or the modifications to 211 | produce it from the Program, in the form of source code under the 212 | terms of section 4, provided that you also meet all of these conditions: 213 | 214 | a) The work must carry prominent notices stating that you modified 215 | it, and giving a relevant date. 216 | 217 | b) The work must carry prominent notices stating that it is 218 | released under this License and any conditions added under section 219 | 7. This requirement modifies the requirement in section 4 to 220 | "keep intact all notices". 221 | 222 | c) You must license the entire work, as a whole, under this 223 | License to anyone who comes into possession of a copy. This 224 | License will therefore apply, along with any applicable section 7 225 | additional terms, to the whole of the work, and all its parts, 226 | regardless of how they are packaged. This License gives no 227 | permission to license the work in any other way, but it does not 228 | invalidate such permission if you have separately received it. 229 | 230 | d) If the work has interactive user interfaces, each must display 231 | Appropriate Legal Notices; however, if the Program has interactive 232 | interfaces that do not display Appropriate Legal Notices, your 233 | work need not make them do so. 234 | 235 | A compilation of a covered work with other separate and independent 236 | works, which are not by their nature extensions of the covered work, 237 | and which are not combined with it such as to form a larger program, 238 | in or on a volume of a storage or distribution medium, is called an 239 | "aggregate" if the compilation and its resulting copyright are not 240 | used to limit the access or legal rights of the compilation's users 241 | beyond what the individual works permit. Inclusion of a covered work 242 | in an aggregate does not cause this License to apply to the other 243 | parts of the aggregate. 244 | 245 | 6. Conveying Non-Source Forms. 246 | 247 | You may convey a covered work in object code form under the terms 248 | of sections 4 and 5, provided that you also convey the 249 | machine-readable Corresponding Source under the terms of this License, 250 | in one of these ways: 251 | 252 | a) Convey the object code in, or embodied in, a physical product 253 | (including a physical distribution medium), accompanied by the 254 | Corresponding Source fixed on a durable physical medium 255 | customarily used for software interchange. 256 | 257 | b) Convey the object code in, or embodied in, a physical product 258 | (including a physical distribution medium), accompanied by a 259 | written offer, valid for at least three years and valid for as 260 | long as you offer spare parts or customer support for that product 261 | model, to give anyone who possesses the object code either (1) a 262 | copy of the Corresponding Source for all the software in the 263 | product that is covered by this License, on a durable physical 264 | medium customarily used for software interchange, for a price no 265 | more than your reasonable cost of physically performing this 266 | conveying of source, or (2) access to copy the 267 | Corresponding Source from a network server at no charge. 268 | 269 | c) Convey individual copies of the object code with a copy of the 270 | written offer to provide the Corresponding Source. This 271 | alternative is allowed only occasionally and noncommercially, and 272 | only if you received the object code with such an offer, in accord 273 | with subsection 6b. 274 | 275 | d) Convey the object code by offering access from a designated 276 | place (gratis or for a charge), and offer equivalent access to the 277 | Corresponding Source in the same way through the same place at no 278 | further charge. You need not require recipients to copy the 279 | Corresponding Source along with the object code. If the place to 280 | copy the object code is a network server, the Corresponding Source 281 | may be on a different server (operated by you or a third party) 282 | that supports equivalent copying facilities, provided you maintain 283 | clear directions next to the object code saying where to find the 284 | Corresponding Source. Regardless of what server hosts the 285 | Corresponding Source, you remain obligated to ensure that it is 286 | available for as long as needed to satisfy these requirements. 287 | 288 | e) Convey the object code using peer-to-peer transmission, provided 289 | you inform other peers where the object code and Corresponding 290 | Source of the work are being offered to the general public at no 291 | charge under subsection 6d. 292 | 293 | A separable portion of the object code, whose source code is excluded 294 | from the Corresponding Source as a System Library, need not be 295 | included in conveying the object code work. 296 | 297 | A "User Product" is either (1) a "consumer product", which means any 298 | tangible personal property which is normally used for personal, family, 299 | or household purposes, or (2) anything designed or sold for incorporation 300 | into a dwelling. In determining whether a product is a consumer product, 301 | doubtful cases shall be resolved in favor of coverage. For a particular 302 | product received by a particular user, "normally used" refers to a 303 | typical or common use of that class of product, regardless of the status 304 | of the particular user or of the way in which the particular user 305 | actually uses, or expects or is expected to use, the product. A product 306 | is a consumer product regardless of whether the product has substantial 307 | commercial, industrial or non-consumer uses, unless such uses represent 308 | the only significant mode of use of the product. 309 | 310 | "Installation Information" for a User Product means any methods, 311 | procedures, authorization keys, or other information required to install 312 | and execute modified versions of a covered work in that User Product from 313 | a modified version of its Corresponding Source. The information must 314 | suffice to ensure that the continued functioning of the modified object 315 | code is in no case prevented or interfered with solely because 316 | modification has been made. 317 | 318 | If you convey an object code work under this section in, or with, or 319 | specifically for use in, a User Product, and the conveying occurs as 320 | part of a transaction in which the right of possession and use of the 321 | User Product is transferred to the recipient in perpetuity or for a 322 | fixed term (regardless of how the transaction is characterized), the 323 | Corresponding Source conveyed under this section must be accompanied 324 | by the Installation Information. But this requirement does not apply 325 | if neither you nor any third party retains the ability to install 326 | modified object code on the User Product (for example, the work has 327 | been installed in ROM). 328 | 329 | The requirement to provide Installation Information does not include a 330 | requirement to continue to provide support service, warranty, or updates 331 | for a work that has been modified or installed by the recipient, or for 332 | the User Product in which it has been modified or installed. Access to a 333 | network may be denied when the modification itself materially and 334 | adversely affects the operation of the network or violates the rules and 335 | protocols for communication across the network. 336 | 337 | Corresponding Source conveyed, and Installation Information provided, 338 | in accord with this section must be in a format that is publicly 339 | documented (and with an implementation available to the public in 340 | source code form), and must require no special password or key for 341 | unpacking, reading or copying. 342 | 343 | 7. Additional Terms. 344 | 345 | "Additional permissions" are terms that supplement the terms of this 346 | License by making exceptions from one or more of its conditions. 347 | Additional permissions that are applicable to the entire Program shall 348 | be treated as though they were included in this License, to the extent 349 | that they are valid under applicable law. If additional permissions 350 | apply only to part of the Program, that part may be used separately 351 | under those permissions, but the entire Program remains governed by 352 | this License without regard to the additional permissions. 353 | 354 | When you convey a copy of a covered work, you may at your option 355 | remove any additional permissions from that copy, or from any part of 356 | it. (Additional permissions may be written to require their own 357 | removal in certain cases when you modify the work.) You may place 358 | additional permissions on material, added by you to a covered work, 359 | for which you have or can give appropriate copyright permission. 360 | 361 | Notwithstanding any other provision of this License, for material you 362 | add to a covered work, you may (if authorized by the copyright holders of 363 | that material) supplement the terms of this License with terms: 364 | 365 | a) Disclaiming warranty or limiting liability differently from the 366 | terms of sections 15 and 16 of this License; or 367 | 368 | b) Requiring preservation of specified reasonable legal notices or 369 | author attributions in that material or in the Appropriate Legal 370 | Notices displayed by works containing it; or 371 | 372 | c) Prohibiting misrepresentation of the origin of that material, or 373 | requiring that modified versions of such material be marked in 374 | reasonable ways as different from the original version; or 375 | 376 | d) Limiting the use for publicity purposes of names of licensors or 377 | authors of the material; or 378 | 379 | e) Declining to grant rights under trademark law for use of some 380 | trade names, trademarks, or service marks; or 381 | 382 | f) Requiring indemnification of licensors and authors of that 383 | material by anyone who conveys the material (or modified versions of 384 | it) with contractual assumptions of liability to the recipient, for 385 | any liability that these contractual assumptions directly impose on 386 | those licensors and authors. 387 | 388 | All other non-permissive additional terms are considered "further 389 | restrictions" within the meaning of section 10. If the Program as you 390 | received it, or any part of it, contains a notice stating that it is 391 | governed by this License along with a term that is a further 392 | restriction, you may remove that term. If a license document contains 393 | a further restriction but permits relicensing or conveying under this 394 | License, you may add to a covered work material governed by the terms 395 | of that license document, provided that the further restriction does 396 | not survive such relicensing or conveying. 397 | 398 | If you add terms to a covered work in accord with this section, you 399 | must place, in the relevant source files, a statement of the 400 | additional terms that apply to those files, or a notice indicating 401 | where to find the applicable terms. 402 | 403 | Additional terms, permissive or non-permissive, may be stated in the 404 | form of a separately written license, or stated as exceptions; 405 | the above requirements apply either way. 406 | 407 | 8. Termination. 408 | 409 | You may not propagate or modify a covered work except as expressly 410 | provided under this License. Any attempt otherwise to propagate or 411 | modify it is void, and will automatically terminate your rights under 412 | this License (including any patent licenses granted under the third 413 | paragraph of section 11). 414 | 415 | However, if you cease all violation of this License, then your 416 | license from a particular copyright holder is reinstated (a) 417 | provisionally, unless and until the copyright holder explicitly and 418 | finally terminates your license, and (b) permanently, if the copyright 419 | holder fails to notify you of the violation by some reasonable means 420 | prior to 60 days after the cessation. 421 | 422 | Moreover, your license from a particular copyright holder is 423 | reinstated permanently if the copyright holder notifies you of the 424 | violation by some reasonable means, this is the first time you have 425 | received notice of violation of this License (for any work) from that 426 | copyright holder, and you cure the violation prior to 30 days after 427 | your receipt of the notice. 428 | 429 | Termination of your rights under this section does not terminate the 430 | licenses of parties who have received copies or rights from you under 431 | this License. If your rights have been terminated and not permanently 432 | reinstated, you do not qualify to receive new licenses for the same 433 | material under section 10. 434 | 435 | 9. Acceptance Not Required for Having Copies. 436 | 437 | You are not required to accept this License in order to receive or 438 | run a copy of the Program. Ancillary propagation of a covered work 439 | occurring solely as a consequence of using peer-to-peer transmission 440 | to receive a copy likewise does not require acceptance. However, 441 | nothing other than this License grants you permission to propagate or 442 | modify any covered work. These actions infringe copyright if you do 443 | not accept this License. Therefore, by modifying or propagating a 444 | covered work, you indicate your acceptance of this License to do so. 445 | 446 | 10. Automatic Licensing of Downstream Recipients. 447 | 448 | Each time you convey a covered work, the recipient automatically 449 | receives a license from the original licensors, to run, modify and 450 | propagate that work, subject to this License. You are not responsible 451 | for enforcing compliance by third parties with this License. 452 | 453 | An "entity transaction" is a transaction transferring control of an 454 | organization, or substantially all assets of one, or subdividing an 455 | organization, or merging organizations. If propagation of a covered 456 | work results from an entity transaction, each party to that 457 | transaction who receives a copy of the work also receives whatever 458 | licenses to the work the party's predecessor in interest had or could 459 | give under the previous paragraph, plus a right to possession of the 460 | Corresponding Source of the work from the predecessor in interest, if 461 | the predecessor has it or can get it with reasonable efforts. 462 | 463 | You may not impose any further restrictions on the exercise of the 464 | rights granted or affirmed under this License. For example, you may 465 | not impose a license fee, royalty, or other charge for exercise of 466 | rights granted under this License, and you may not initiate litigation 467 | (including a cross-claim or counterclaim in a lawsuit) alleging that 468 | any patent claim is infringed by making, using, selling, offering for 469 | sale, or importing the Program or any portion of it. 470 | 471 | 11. Patents. 472 | 473 | A "contributor" is a copyright holder who authorizes use under this 474 | License of the Program or a work on which the Program is based. The 475 | work thus licensed is called the contributor's "contributor version". 476 | 477 | A contributor's "essential patent claims" are all patent claims 478 | owned or controlled by the contributor, whether already acquired or 479 | hereafter acquired, that would be infringed by some manner, permitted 480 | by this License, of making, using, or selling its contributor version, 481 | but do not include claims that would be infringed only as a 482 | consequence of further modification of the contributor version. For 483 | purposes of this definition, "control" includes the right to grant 484 | patent sublicenses in a manner consistent with the requirements of 485 | this License. 486 | 487 | Each contributor grants you a non-exclusive, worldwide, royalty-free 488 | patent license under the contributor's essential patent claims, to 489 | make, use, sell, offer for sale, import and otherwise run, modify and 490 | propagate the contents of its contributor version. 491 | 492 | In the following three paragraphs, a "patent license" is any express 493 | agreement or commitment, however denominated, not to enforce a patent 494 | (such as an express permission to practice a patent or covenant not to 495 | sue for patent infringement). To "grant" such a patent license to a 496 | party means to make such an agreement or commitment not to enforce a 497 | patent against the party. 498 | 499 | If you convey a covered work, knowingly relying on a patent license, 500 | and the Corresponding Source of the work is not available for anyone 501 | to copy, free of charge and under the terms of this License, through a 502 | publicly available network server or other readily accessible means, 503 | then you must either (1) cause the Corresponding Source to be so 504 | available, or (2) arrange to deprive yourself of the benefit of the 505 | patent license for this particular work, or (3) arrange, in a manner 506 | consistent with the requirements of this License, to extend the patent 507 | license to downstream recipients. "Knowingly relying" means you have 508 | actual knowledge that, but for the patent license, your conveying the 509 | covered work in a country, or your recipient's use of the covered work 510 | in a country, would infringe one or more identifiable patents in that 511 | country that you have reason to believe are valid. 512 | 513 | If, pursuant to or in connection with a single transaction or 514 | arrangement, you convey, or propagate by procuring conveyance of, a 515 | covered work, and grant a patent license to some of the parties 516 | receiving the covered work authorizing them to use, propagate, modify 517 | or convey a specific copy of the covered work, then the patent license 518 | you grant is automatically extended to all recipients of the covered 519 | work and works based on it. 520 | 521 | A patent license is "discriminatory" if it does not include within 522 | the scope of its coverage, prohibits the exercise of, or is 523 | conditioned on the non-exercise of one or more of the rights that are 524 | specifically granted under this License. You may not convey a covered 525 | work if you are a party to an arrangement with a third party that is 526 | in the business of distributing software, under which you make payment 527 | to the third party based on the extent of your activity of conveying 528 | the work, and under which the third party grants, to any of the 529 | parties who would receive the covered work from you, a discriminatory 530 | patent license (a) in connection with copies of the covered work 531 | conveyed by you (or copies made from those copies), or (b) primarily 532 | for and in connection with specific products or compilations that 533 | contain the covered work, unless you entered into that arrangement, 534 | or that patent license was granted, prior to 28 March 2007. 535 | 536 | Nothing in this License shall be construed as excluding or limiting 537 | any implied license or other defenses to infringement that may 538 | otherwise be available to you under applicable patent law. 539 | 540 | 12. No Surrender of Others' Freedom. 541 | 542 | If conditions are imposed on you (whether by court order, agreement or 543 | otherwise) that contradict the conditions of this License, they do not 544 | excuse you from the conditions of this License. If you cannot convey a 545 | covered work so as to satisfy simultaneously your obligations under this 546 | License and any other pertinent obligations, then as a consequence you may 547 | not convey it at all. For example, if you agree to terms that obligate you 548 | to collect a royalty for further conveying from those to whom you convey 549 | the Program, the only way you could satisfy both those terms and this 550 | License would be to refrain entirely from conveying the Program. 551 | 552 | 13. Use with the GNU Affero General Public License. 553 | 554 | Notwithstanding any other provision of this License, you have 555 | permission to link or combine any covered work with a work licensed 556 | under version 3 of the GNU Affero General Public License into a single 557 | combined work, and to convey the resulting work. The terms of this 558 | License will continue to apply to the part which is the covered work, 559 | but the special requirements of the GNU Affero General Public License, 560 | section 13, concerning interaction through a network will apply to the 561 | combination as such. 562 | 563 | 14. Revised Versions of this License. 564 | 565 | The Free Software Foundation may publish revised and/or new versions of 566 | the GNU General Public License from time to time. Such new versions will 567 | be similar in spirit to the present version, but may differ in detail to 568 | address new problems or concerns. 569 | 570 | Each version is given a distinguishing version number. If the 571 | Program specifies that a certain numbered version of the GNU General 572 | Public License "or any later version" applies to it, you have the 573 | option of following the terms and conditions either of that numbered 574 | version or of any later version published by the Free Software 575 | Foundation. If the Program does not specify a version number of the 576 | GNU General Public License, you may choose any version ever published 577 | by the Free Software Foundation. 578 | 579 | If the Program specifies that a proxy can decide which future 580 | versions of the GNU General Public License can be used, that proxy's 581 | public statement of acceptance of a version permanently authorizes you 582 | to choose that version for the Program. 583 | 584 | Later license versions may give you additional or different 585 | permissions. However, no additional obligations are imposed on any 586 | author or copyright holder as a result of your choosing to follow a 587 | later version. 588 | 589 | 15. Disclaimer of Warranty. 590 | 591 | THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY 592 | APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 593 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY 594 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, 595 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 596 | PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM 597 | IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF 598 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 599 | 600 | 16. Limitation of Liability. 601 | 602 | IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING 603 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS 604 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 605 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE 606 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF 607 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD 608 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), 609 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF 610 | SUCH DAMAGES. 611 | 612 | 17. Interpretation of Sections 15 and 16. 613 | 614 | If the disclaimer of warranty and limitation of liability provided 615 | above cannot be given local legal effect according to their terms, 616 | reviewing courts shall apply local law that most closely approximates 617 | an absolute waiver of all civil liability in connection with the 618 | Program, unless a warranty or assumption of liability accompanies a 619 | copy of the Program in return for a fee. 620 | 621 | END OF TERMS AND CONDITIONS 622 | 623 | How to Apply These Terms to Your New Programs 624 | 625 | If you develop a new program, and you want it to be of the greatest 626 | possible use to the public, the best way to achieve this is to make it 627 | free software which everyone can redistribute and change under these terms. 628 | 629 | To do so, attach the following notices to the program. It is safest 630 | to attach them to the start of each source file to most effectively 631 | state the exclusion of warranty; and each file should have at least 632 | the "copyright" line and a pointer to where the full notice is found. 633 | 634 | 635 | Copyright (C) 636 | 637 | This program is free software: you can redistribute it and/or modify 638 | it under the terms of the GNU General Public License as published by 639 | the Free Software Foundation, either version 3 of the License, or 640 | (at your option) any later version. 641 | 642 | This program is distributed in the hope that it will be useful, 643 | but WITHOUT ANY WARRANTY; without even the implied warranty of 644 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 645 | GNU General Public License for more details. 646 | 647 | You should have received a copy of the GNU General Public License 648 | along with this program. If not, see . 649 | 650 | Also add information on how to contact you by electronic and paper mail. 651 | 652 | If the program does terminal interaction, make it output a short 653 | notice like this when it starts in an interactive mode: 654 | 655 | Copyright (C) 656 | This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. 657 | This is free software, and you are welcome to redistribute it 658 | under certain conditions; type `show c' for details. 659 | 660 | The hypothetical commands `show w' and `show c' should show the appropriate 661 | parts of the General Public License. Of course, your program's commands 662 | might be different; for a GUI interface, you would use an "about box". 663 | 664 | You should also get your employer (if you work as a programmer) or school, 665 | if any, to sign a "copyright disclaimer" for the program, if necessary. 666 | For more information on this, and how to apply and follow the GNU GPL, see 667 | . 668 | 669 | The GNU General Public License does not permit incorporating your program 670 | into proprietary programs. If your program is a subroutine library, you 671 | may consider it more useful to permit linking proprietary applications with 672 | the library. If this is what you want to do, use the GNU Lesser General 673 | Public License instead of this License. But first, please read 674 | . 675 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Multi-EasyGost一键脚本使用指南 2 | *** 3 | ## 感谢: 4 | 1. 感谢 @ginuerzh 大佬开发的 [gost](https://github.com/ginuerzh/gost) 隧道程序 ，功能强大使用简单，想要详细了解的朋友可以查看[官方文档](https://docs.ginuerzh.xyz/gost/) 5 | 2. 感谢 @风萧萧兮易水寒 大佬的[原始脚本](https://www.fiisi.com/?p=125) 6 | 3. 感谢 @ STSDUST 提供的EasyGost脚本（已删库），此脚本是基于其进行修改增强 7 | *** 8 | ## 简介 9 | 10 | > 项目地址及帮助文档: 11 | > https://github.com/KANIKIG/Multi-EasyGost 12 | *** 13 | ## 脚本 14 | 15 | * 启动脚本 16 | `wget --no-check-certificate -O gost.sh https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/gost.sh && chmod +x gost.sh && ./gost.sh` 17 | * 再次运行本脚本只需要输入`./gost.sh`回车即可 18 | 19 | > 注：由于 gost v2.11.2 功能稳定，此脚本将一直采用该版本，后续不再跟随官方更新 20 | 21 | ## 功能 22 | 23 | ### 原脚本功能 24 | 25 | - 实现了systemd及gost配置文件对gost进行管理 26 | - 在不借助其他工具(如screen)的情况下实现多条转发规则同时生效 27 | - 机器reboot后转发不失效 28 | - 支持传输类型： 29 | - tcp+udp不加密转发 30 | - relay+tls加密 31 | 32 | ### 此脚本新增功能 33 | 34 | - 增加了传输类型选择功能 35 | - 新支持传输类型 36 | - relay+ws 37 | - relay+wss 38 | - 落地机一键创建ss/socks5/http代理 (gost内置) 39 | - 支持多传输类型的多落地简单型均衡负载 40 | - ~~增加gost国内加速下载镜像~~（被恶意刷流量导致我损失，不再提供） 41 | - 简单创建或删除gost定时重启任务 42 | - 脚本自动检查更新 43 | - 转发CDN自选节点ip 44 | - 支持自定义tls证书，落地可一键申请证书，中转可开启证书校验 45 | 46 | ## 功能展示 47 | 48 | ![iShot2020-12-14下午05.42.23.png](https://i.loli.net/2020/12/14/q75PO6s2DMIcUKB.png) 49 | 50 | ![iShot2020-12-14下午05.42.39.png](https://i.loli.net/2020/12/14/vzpGlWmPtCrneOY.png) 51 | 52 | ![2](https://i.loli.net/2020/10/16/fBHgwStVQxc821z.png) 53 | 54 | ![3](https://i.loli.net/2020/10/16/xgZ6eVAwSzDUFjO.png) 55 | 56 | ![4](https://i.loli.net/2020/10/16/lt6uAzI5X7yYWhr.png) 57 | 58 | ![iShot2020-12-14下午05.43.46.png](https://i.loli.net/2020/12/14/YjiFTMCKs8lANbI.png) 59 | 60 | ![iShot2020-12-14下午05.43.11.png](https://i.loli.net/2020/12/14/VIcQSsoUaqpzx5T.png) 61 | -------------------------------------------------------------------------------- /config.json: -------------------------------------------------------------------------------- 1 | { 2 | "Debug": true, 3 | "Retries": 0, 4 | "ServeNodes": [ 5 | "udp://127.0.0.1:65532" 6 | ] 7 | } -------------------------------------------------------------------------------- /gost.service: -------------------------------------------------------------------------------- 1 | [Unit] 2 | Description=gost 3 | After=network-online.target 4 | Wants=network-online.target systemd-networkd-wait-online.service 5 | 6 | [Service] 7 | Type=simple 8 | User=root 9 | Restart=always 10 | RestartSec=5 11 | DynamicUser=true 12 | ExecStart=/usr/bin/gost -C /etc/gost/config.json 13 | 14 | [Install] 15 | WantedBy=multi-user.target 16 | -------------------------------------------------------------------------------- /gost.sh: -------------------------------------------------------------------------------- 1 | #! /bin/bash 2 | Green_font_prefix="\033[32m" && Red_font_prefix="\033[31m" && Green_background_prefix="\033[42;37m" && Font_color_suffix="\033[0m" 3 | Info="${Green_font_prefix}[信息]${Font_color_suffix}" 4 | Error="${Red_font_prefix}[错误]${Font_color_suffix}" 5 | shell_version="1.1.1" 6 | ct_new_ver="2.11.2" # 2.x 不再跟随官方更新 7 | gost_conf_path="/etc/gost/config.json" 8 | raw_conf_path="/etc/gost/rawconf" 9 | function checknew() { 10 | checknew=$(gost -V 2>&1 | awk '{print $2}') 11 | # check_new_ver 12 | echo "你的gost版本为:""$checknew""" 13 | echo -n 是否更新\(y/n\)\: 14 | read checknewnum 15 | if test $checknewnum = "y"; then 16 | cp -r /etc/gost /tmp/ 17 | Install_ct 18 | rm -rf /etc/gost 19 | mv /tmp/gost /etc/ 20 | systemctl restart gost 21 | else 22 | exit 0 23 | fi 24 | } 25 | function check_sys() { 26 | if [[ -f /etc/redhat-release ]]; then 27 | release="centos" 28 | elif cat /etc/issue | grep -q -E -i "debian"; then 29 | release="debian" 30 | elif cat /etc/issue | grep -q -E -i "ubuntu"; then 31 | release="ubuntu" 32 | elif cat /etc/issue | grep -q -E -i "centos|red hat|redhat"; then 33 | release="centos" 34 | elif cat /proc/version | grep -q -E -i "debian"; then 35 | release="debian" 36 | elif cat /proc/version | grep -q -E -i "ubuntu"; then 37 | release="ubuntu" 38 | elif cat /proc/version | grep -q -E -i "centos|red hat|redhat"; then 39 | release="centos" 40 | fi 41 | bit=$(uname -m) 42 | if test "$bit" != "x86_64"; then 43 | echo "请输入你的芯片架构，/386/armv5/armv6/armv7/armv8" 44 | read bit 45 | else 46 | bit="amd64" 47 | fi 48 | } 49 | function Installation_dependency() { 50 | gzip_ver=$(gzip -V) 51 | if [[ -z ${gzip_ver} ]]; then 52 | if [[ ${release} == "centos" ]]; then 53 | yum update 54 | yum install -y gzip wget 55 | else 56 | apt-get update 57 | apt-get install -y gzip wget 58 | fi 59 | fi 60 | } 61 | function check_root() { 62 | [[ $EUID != 0 ]] && echo -e "${Error} 当前非ROOT账号(或没有ROOT权限)，无法继续操作，请更换ROOT账号或使用 ${Green_background_prefix}sudo su${Font_color_suffix} 命令获取临时ROOT权限（执行后可能会提示输入当前账号的密码）。" && exit 1 63 | } 64 | function check_new_ver() { 65 | # deprecated 66 | ct_new_ver=$(wget --no-check-certificate -qO- -t2 -T3 https://api.github.com/repos/ginuerzh/gost/releases/latest | grep "tag_name" | head -n 1 | awk -F ":" '{print $2}' | sed 's/\"//g;s/,//g;s/ //g;s/v//g') 67 | if [[ -z ${ct_new_ver} ]]; then 68 | ct_new_ver="2.11.2" 69 | echo -e "${Error} gost 最新版本获取失败，正在下载v${ct_new_ver}版" 70 | else 71 | echo -e "${Info} gost 目前最新版本为 ${ct_new_ver}" 72 | fi 73 | } 74 | function check_file() { 75 | if test ! -d "/usr/lib/systemd/system/"; then 76 | mkdir /usr/lib/systemd/system 77 | chmod -R 777 /usr/lib/systemd/system 78 | fi 79 | } 80 | function check_nor_file() { 81 | rm -rf "$(pwd)"/gost 82 | rm -rf "$(pwd)"/gost.service 83 | rm -rf "$(pwd)"/config.json 84 | rm -rf /etc/gost 85 | rm -rf /usr/lib/systemd/system/gost.service 86 | rm -rf /usr/bin/gost 87 | } 88 | function Install_ct() { 89 | check_root 90 | check_nor_file 91 | Installation_dependency 92 | check_file 93 | check_sys 94 | # check_new_ver 95 | echo -e "若为国内机器建议使用大陆镜像加速下载" 96 | read -e -p "是否使用？[y/n]:" addyn 97 | [[ -z ${addyn} ]] && addyn="n" 98 | if [[ ${addyn} == [Yy] ]]; then 99 | rm -rf gost-linux-"$bit"-"$ct_new_ver".gz 100 | wget --no-check-certificate https://gotunnel.oss-cn-shenzhen.aliyuncs.com/gost-linux-"$bit"-"$ct_new_ver".gz 101 | gunzip gost-linux-"$bit"-"$ct_new_ver".gz 102 | mv gost-linux-"$bit"-"$ct_new_ver" gost 103 | mv gost /usr/bin/gost 104 | chmod -R 777 /usr/bin/gost 105 | wget --no-check-certificate https://gotunnel.oss-cn-shenzhen.aliyuncs.com/gost.service && chmod -R 777 gost.service && mv gost.service /usr/lib/systemd/system 106 | mkdir /etc/gost && wget --no-check-certificate https://gotunnel.oss-cn-shenzhen.aliyuncs.com/config.json && mv config.json /etc/gost && chmod -R 777 /etc/gost 107 | else 108 | rm -rf gost-linux-"$bit"-"$ct_new_ver".gz 109 | wget --no-check-certificate https://github.com/ginuerzh/gost/releases/download/v"$ct_new_ver"/gost-linux-"$bit"-"$ct_new_ver".gz 110 | gunzip gost-linux-"$bit"-"$ct_new_ver".gz 111 | mv gost-linux-"$bit"-"$ct_new_ver" gost 112 | mv gost /usr/bin/gost 113 | chmod -R 777 /usr/bin/gost 114 | wget --no-check-certificate https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/gost.service && chmod -R 777 gost.service && mv gost.service /usr/lib/systemd/system 115 | mkdir /etc/gost && wget --no-check-certificate https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/config.json && mv config.json /etc/gost && chmod -R 777 /etc/gost 116 | fi 117 | 118 | systemctl enable gost && systemctl restart gost 119 | echo "------------------------------" 120 | if test -a /usr/bin/gost -a /usr/lib/systemctl/gost.service -a /etc/gost/config.json; then 121 | echo "gost安装成功" 122 | rm -rf "$(pwd)"/gost 123 | rm -rf "$(pwd)"/gost.service 124 | rm -rf "$(pwd)"/config.json 125 | else 126 | echo "gost没有安装成功" 127 | rm -rf "$(pwd)"/gost 128 | rm -rf "$(pwd)"/gost.service 129 | rm -rf "$(pwd)"/config.json 130 | rm -rf "$(pwd)"/gost.sh 131 | fi 132 | } 133 | function Uninstall_ct() { 134 | rm -rf /usr/bin/gost 135 | rm -rf /usr/lib/systemd/system/gost.service 136 | rm -rf /etc/gost 137 | rm -rf "$(pwd)"/gost.sh 138 | echo "gost已经成功删除" 139 | } 140 | function Start_ct() { 141 | systemctl start gost 142 | echo "已启动" 143 | } 144 | function Stop_ct() { 145 | systemctl stop gost 146 | echo "已停止" 147 | } 148 | function Restart_ct() { 149 | rm -rf /etc/gost/config.json 150 | confstart 151 | writeconf 152 | conflast 153 | systemctl restart gost 154 | echo "已重读配置并重启" 155 | } 156 | function read_protocol() { 157 | echo -e "请问您要设置哪种功能: " 158 | echo -e "-----------------------------------" 159 | echo -e "[1] tcp+udp流量转发, 不加密" 160 | echo -e "说明: 一般设置在国内中转机上" 161 | echo -e "-----------------------------------" 162 | echo -e "[2] 加密隧道流量转发" 163 | echo -e "说明: 用于转发原本加密等级较低的流量, 一般设置在国内中转机上" 164 | echo -e " 选择此协议意味着你还有一台机器用于接收此加密流量, 之后须在那台机器上配置协议[3]进行对接" 165 | echo -e "-----------------------------------" 166 | echo -e "[3] 解密由gost传输而来的流量并转发" 167 | echo -e "说明: 对于经由gost加密中转的流量, 通过此选项进行解密并转发给本机的代理服务端口或转发给其他远程机器" 168 | echo -e " 一般设置在用于接收中转流量的国外机器上" 169 | echo -e "-----------------------------------" 170 | echo -e "[4] 一键安装ss/socks5/http代理" 171 | echo -e "说明: 使用gost内置的代理协议，轻量且易于管理" 172 | echo -e "-----------------------------------" 173 | echo -e "[5] 进阶：多落地均衡负载" 174 | echo -e "说明: 支持各种加密方式的简单均衡负载" 175 | echo -e "-----------------------------------" 176 | echo -e "[6] 进阶：转发CDN自选节点" 177 | echo -e "说明: 只需在中转机设置" 178 | echo -e "-----------------------------------" 179 | read -p "请选择: " numprotocol 180 | 181 | if [ "$numprotocol" == "1" ]; then 182 | flag_a="nonencrypt" 183 | elif [ "$numprotocol" == "2" ]; then 184 | encrypt 185 | elif [ "$numprotocol" == "3" ]; then 186 | decrypt 187 | elif [ "$numprotocol" == "4" ]; then 188 | proxy 189 | elif [ "$numprotocol" == "5" ]; then 190 | enpeer 191 | elif [ "$numprotocol" == "6" ]; then 192 | cdn 193 | else 194 | echo "type error, please try again" 195 | exit 196 | fi 197 | } 198 | function read_s_port() { 199 | if [ "$flag_a" == "ss" ]; then 200 | echo -e "-----------------------------------" 201 | read -p "请输入ss密码: " flag_b 202 | elif [ "$flag_a" == "socks" ]; then 203 | echo -e "-----------------------------------" 204 | read -p "请输入socks密码: " flag_b 205 | elif [ "$flag_a" == "http" ]; then 206 | echo -e "-----------------------------------" 207 | read -p "请输入http密码: " flag_b 208 | else 209 | echo -e "------------------------------------------------------------------" 210 | echo -e "请问你要将本机哪个端口接收到的流量进行转发?" 211 | read -p "请输入: " flag_b 212 | fi 213 | } 214 | function read_d_ip() { 215 | if [ "$flag_a" == "ss" ]; then 216 | echo -e "------------------------------------------------------------------" 217 | echo -e "请问您要设置的ss加密(仅提供常用的几种): " 218 | echo -e "-----------------------------------" 219 | echo -e "[1] aes-256-gcm" 220 | echo -e "[2] aes-256-cfb" 221 | echo -e "[3] chacha20-ietf-poly1305" 222 | echo -e "[4] chacha20" 223 | echo -e "[5] rc4-md5" 224 | echo -e "[6] AEAD_CHACHA20_POLY1305" 225 | echo -e "-----------------------------------" 226 | read -p "请选择ss加密方式: " ssencrypt 227 | 228 | if [ "$ssencrypt" == "1" ]; then 229 | flag_c="aes-256-gcm" 230 | elif [ "$ssencrypt" == "2" ]; then 231 | flag_c="aes-256-cfb" 232 | elif [ "$ssencrypt" == "3" ]; then 233 | flag_c="chacha20-ietf-poly1305" 234 | elif [ "$ssencrypt" == "4" ]; then 235 | flag_c="chacha20" 236 | elif [ "$ssencrypt" == "5" ]; then 237 | flag_c="rc4-md5" 238 | elif [ "$ssencrypt" == "6" ]; then 239 | flag_c="AEAD_CHACHA20_POLY1305" 240 | else 241 | echo "type error, please try again" 242 | exit 243 | fi 244 | elif [ "$flag_a" == "socks" ]; then 245 | echo -e "-----------------------------------" 246 | read -p "请输入socks用户名: " flag_c 247 | elif [ "$flag_a" == "http" ]; then 248 | echo -e "-----------------------------------" 249 | read -p "请输入http用户名: " flag_c 250 | elif [[ "$flag_a" == "peer"* ]]; then 251 | echo -e "------------------------------------------------------------------" 252 | echo -e "请输入落地列表文件名" 253 | read -e -p "自定义但不同配置应不重复，不用输入后缀，例如ips1、iplist2: " flag_c 254 | touch $flag_c.txt 255 | echo -e "------------------------------------------------------------------" 256 | echo -e "请依次输入你要均衡负载的落地ip与端口" 257 | while true; do 258 | echo -e "请问你要将本机从${flag_b}接收到的流量转发向的IP或域名?" 259 | read -p "请输入: " peer_ip 260 | echo -e "请问你要将本机从${flag_b}接收到的流量转发向${peer_ip}的哪个端口?" 261 | read -p "请输入: " peer_port 262 | echo -e "$peer_ip:$peer_port" >>$flag_c.txt 263 | read -e -p "是否继续添加落地？[Y/n]:" addyn 264 | [[ -z ${addyn} ]] && addyn="y" 265 | if [[ ${addyn} == [Nn] ]]; then 266 | echo -e "------------------------------------------------------------------" 267 | echo -e "已在root目录创建$flag_c.txt，您可以随时编辑该文件修改落地信息，重启gost即可生效" 268 | echo -e "------------------------------------------------------------------" 269 | break 270 | else 271 | echo -e "------------------------------------------------------------------" 272 | echo -e "继续添加均衡负载落地配置" 273 | fi 274 | done 275 | elif [[ "$flag_a" == "cdn"* ]]; then 276 | echo -e "------------------------------------------------------------------" 277 | echo -e "将本机从${flag_b}接收到的流量转发向的自选ip:" 278 | read -p "请输入: " flag_c 279 | echo -e "请问你要将本机从${flag_b}接收到的流量转发向${flag_c}的哪个端口?" 280 | echo -e "[1] 80" 281 | echo -e "[2] 443" 282 | echo -e "[3] 自定义端口（如8080等）" 283 | read -p "请选择端口: " cdnport 284 | if [ "$cdnport" == "1" ]; then 285 | flag_c="$flag_c:80" 286 | elif [ "$cdnport" == "2" ]; then 287 | flag_c="$flag_c:443" 288 | elif [ "$cdnport" == "3" ]; then 289 | read -p "请输入自定义端口: " customport 290 | flag_c="$flag_c:$customport" 291 | else 292 | echo "type error, please try again" 293 | exit 294 | fi 295 | else 296 | echo -e "------------------------------------------------------------------" 297 | echo -e "请问你要将本机从${flag_b}接收到的流量转发向哪个IP或域名?" 298 | echo -e "注: IP既可以是[远程机器/当前机器]的公网IP, 也可是以本机本地回环IP(即127.0.0.1)" 299 | echo -e "具体IP地址的填写, 取决于接收该流量的服务正在监听的IP(详见: https://github.com/KANIKIG/Multi-EasyGost)" 300 | if [[ ${is_cert} == [Yy] ]]; then 301 | echo -e "注意: 落地机开启自定义tls证书，务必填写${Red_font_prefix}域名${Font_color_suffix}" 302 | fi 303 | read -p "请输入: " flag_c 304 | fi 305 | } 306 | function read_d_port() { 307 | if [ "$flag_a" == "ss" ]; then 308 | echo -e "------------------------------------------------------------------" 309 | echo -e "请问你要设置ss代理服务的端口?" 310 | read -p "请输入: " flag_d 311 | elif [ "$flag_a" == "socks" ]; then 312 | echo -e "------------------------------------------------------------------" 313 | echo -e "请问你要设置socks代理服务的端口?" 314 | read -p "请输入: " flag_d 315 | elif [ "$flag_a" == "http" ]; then 316 | echo -e "------------------------------------------------------------------" 317 | echo -e "请问你要设置http代理服务的端口?" 318 | read -p "请输入: " flag_d 319 | elif [[ "$flag_a" == "peer"* ]]; then 320 | echo -e "------------------------------------------------------------------" 321 | echo -e "您要设置的均衡负载策略: " 322 | echo -e "-----------------------------------" 323 | echo -e "[1] round - 轮询" 324 | echo -e "[2] random - 随机" 325 | echo -e "[3] fifo - 自上而下" 326 | echo -e "-----------------------------------" 327 | read -p "请选择均衡负载类型: " numstra 328 | 329 | if [ "$numstra" == "1" ]; then 330 | flag_d="round" 331 | elif [ "$numstra" == "2" ]; then 332 | flag_d="random" 333 | elif [ "$numstra" == "3" ]; then 334 | flag_d="fifo" 335 | else 336 | echo "type error, please try again" 337 | exit 338 | fi 339 | elif [[ "$flag_a" == "cdn"* ]]; then 340 | echo -e "------------------------------------------------------------------" 341 | read -p "请输入host:" flag_d 342 | else 343 | echo -e "------------------------------------------------------------------" 344 | echo -e "请问你要将本机从${flag_b}接收到的流量转发向${flag_c}的哪个端口?" 345 | read -p "请输入: " flag_d 346 | if [[ ${is_cert} == [Yy] ]]; then 347 | flag_d="$flag_d?secure=true" 348 | fi 349 | fi 350 | } 351 | function writerawconf() { 352 | echo $flag_a"/""$flag_b""#""$flag_c""#""$flag_d" >>$raw_conf_path 353 | } 354 | function rawconf() { 355 | read_protocol 356 | read_s_port 357 | read_d_ip 358 | read_d_port 359 | writerawconf 360 | } 361 | function eachconf_retrieve() { 362 | d_server=${trans_conf#*#} 363 | d_port=${d_server#*#} 364 | d_ip=${d_server%#*} 365 | flag_s_port=${trans_conf%%#*} 366 | s_port=${flag_s_port#*/} 367 | is_encrypt=${flag_s_port%/*} 368 | } 369 | function confstart() { 370 | echo "{ 371 | \"Debug\": true, 372 | \"Retries\": 0, 373 | \"ServeNodes\": [" >>$gost_conf_path 374 | } 375 | function multiconfstart() { 376 | echo " { 377 | \"Retries\": 0, 378 | \"ServeNodes\": [" >>$gost_conf_path 379 | } 380 | function conflast() { 381 | echo " ] 382 | }" >>$gost_conf_path 383 | } 384 | function multiconflast() { 385 | if [ $i -eq $count_line ]; then 386 | echo " ] 387 | }" >>$gost_conf_path 388 | else 389 | echo " ] 390 | }," >>$gost_conf_path 391 | fi 392 | } 393 | function encrypt() { 394 | echo -e "请问您要设置的转发传输类型: " 395 | echo -e "-----------------------------------" 396 | echo -e "[1] tls隧道" 397 | echo -e "[2] ws隧道" 398 | echo -e "[3] wss隧道" 399 | echo -e "注意: 同一则转发，中转与落地传输类型必须对应！本脚本默认开启tcp+udp" 400 | echo -e "-----------------------------------" 401 | read -p "请选择转发传输类型: " numencrypt 402 | 403 | if [ "$numencrypt" == "1" ]; then 404 | flag_a="encrypttls" 405 | echo -e "注意: 选择 是 将针对落地的自定义证书开启证书校验保证安全性，稍后落地机务必填写${Red_font_prefix}域名${Font_color_suffix}" 406 | read -e -p "落地机是否开启了自定义tls证书？[y/n]:" is_cert 407 | elif [ "$numencrypt" == "2" ]; then 408 | flag_a="encryptws" 409 | elif [ "$numencrypt" == "3" ]; then 410 | flag_a="encryptwss" 411 | echo -e "注意: 选择 是 将针对落地的自定义证书开启证书校验保证安全性，稍后落地机务必填写${Red_font_prefix}域名${Font_color_suffix}" 412 | read -e -p "落地机是否开启了自定义tls证书？[y/n]:" is_cert 413 | else 414 | echo "type error, please try again" 415 | exit 416 | fi 417 | } 418 | function enpeer() { 419 | echo -e "请问您要设置的均衡负载传输类型: " 420 | echo -e "-----------------------------------" 421 | echo -e "[1] 不加密转发" 422 | echo -e "[2] tls隧道" 423 | echo -e "[3] ws隧道" 424 | echo -e "[4] wss隧道" 425 | echo -e "注意: 同一则转发，中转与落地传输类型必须对应！本脚本默认同一配置的传输类型相同" 426 | echo -e "此脚本仅支持简单型均衡负载，具体可参考官方文档" 427 | echo -e "gost均衡负载官方文档：https://docs.ginuerzh.xyz/gost/load-balancing" 428 | echo -e "-----------------------------------" 429 | read -p "请选择转发传输类型: " numpeer 430 | 431 | if [ "$numpeer" == "1" ]; then 432 | flag_a="peerno" 433 | elif [ "$numpeer" == "2" ]; then 434 | flag_a="peertls" 435 | elif [ "$numpeer" == "3" ]; then 436 | flag_a="peerws" 437 | elif [ "$numpeer" == "4" ]; then 438 | flag_a="peerwss" 439 | 440 | else 441 | echo "type error, please try again" 442 | exit 443 | fi 444 | } 445 | function cdn() { 446 | echo -e "请问您要设置的CDN传输类型: " 447 | echo -e "-----------------------------------" 448 | echo -e "[1] 不加密转发" 449 | echo -e "[2] ws隧道" 450 | echo -e "[3] wss隧道" 451 | echo -e "注意: 同一则转发，中转与落地传输类型必须对应！" 452 | echo -e "此功能只需在中转机设置" 453 | echo -e "-----------------------------------" 454 | read -p "请选择CDN转发传输类型: " numcdn 455 | 456 | if [ "$numcdn" == "1" ]; then 457 | flag_a="cdnno" 458 | elif [ "$numcdn" == "2" ]; then 459 | flag_a="cdnws" 460 | elif [ "$numcdn" == "3" ]; then 461 | flag_a="cdnwss" 462 | else 463 | echo "type error, please try again" 464 | exit 465 | fi 466 | } 467 | function cert() { 468 | echo -e "-----------------------------------" 469 | echo -e "[1] ACME一键申请证书" 470 | echo -e "[2] 手动上传证书" 471 | echo -e "-----------------------------------" 472 | echo -e "说明: 仅用于落地机配置，默认使用的gost内置的证书可能带来安全问题，使用自定义证书提高安全性" 473 | echo -e " 配置后对本机所有tls/wss解密生效，无需再次设置" 474 | read -p "请选择证书生成方式: " numcert 475 | 476 | if [ "$numcert" == "1" ]; then 477 | check_sys 478 | if [[ ${release} == "centos" ]]; then 479 | yum install -y socat 480 | else 481 | apt-get install -y socat 482 | fi 483 | read -p "请输入ZeroSSL的账户邮箱(至 zerossl.com 注册即可)：" zeromail 484 | read -p "请输入解析到本机的域名：" domain 485 | curl https://get.acme.sh | sh 486 | "$HOME"/.acme.sh/acme.sh --set-default-ca --server zerossl 487 | "$HOME"/.acme.sh/acme.sh --register-account -m "${zeromail}" --server zerossl 488 | echo -e "ACME证书申请程序安装成功" 489 | echo -e "-----------------------------------" 490 | echo -e "[1] HTTP申请（需要80端口未占用）" 491 | echo -e "[2] Cloudflare DNS API 申请（需要输入APIKEY）" 492 | echo -e "-----------------------------------" 493 | read -p "请选择证书申请方式: " certmethod 494 | if [ "$certmethod" == "1" ]; then 495 | echo -e "请确认本机${Red_font_prefix}80${Font_color_suffix}端口未被占用, 否则会申请失败" 496 | if "$HOME"/.acme.sh/acme.sh --issue -d "${domain}" --standalone -k ec-256 --force; then 497 | echo -e "SSL 证书生成成功，默认申请高安全性的ECC证书" 498 | if [ ! -d "$HOME/gost_cert" ]; then 499 | mkdir $HOME/gost_cert 500 | fi 501 | if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath $HOME/gost_cert/cert.pem --keypath $HOME/gost_cert/key.pem --ecc --force; then 502 | echo -e "SSL 证书配置成功，且会自动续签，证书及秘钥位于用户目录下的 ${Red_font_prefix}gost_cert${Font_color_suffix} 目录" 503 | echo -e "证书目录名与证书文件名请勿更改; 删除 gost_cert 目录后用脚本重启,即自动启用gost内置证书" 504 | echo -e "-----------------------------------" 505 | fi 506 | else 507 | echo -e "SSL 证书生成失败" 508 | exit 1 509 | fi 510 | else 511 | read -p "请输入Cloudflare账户邮箱：" cfmail 512 | read -p "请输入Cloudflare Global API Key：" cfkey 513 | export CF_Key="${cfkey}" 514 | export CF_Email="${cfmail}" 515 | if "$HOME"/.acme.sh/acme.sh --issue --dns dns_cf -d "${domain}" --standalone -k ec-256 --force; then 516 | echo -e "SSL 证书生成成功，默认申请高安全性的ECC证书" 517 | if [ ! -d "$HOME/gost_cert" ]; then 518 | mkdir $HOME/gost_cert 519 | fi 520 | if "$HOME"/.acme.sh/acme.sh --installcert -d "${domain}" --fullchainpath $HOME/gost_cert/cert.pem --keypath $HOME/gost_cert/key.pem --ecc --force; then 521 | echo -e "SSL 证书配置成功，且会自动续签，证书及秘钥位于用户目录下的 ${Red_font_prefix}gost_cert${Font_color_suffix} 目录" 522 | echo -e "证书目录名与证书文件名请勿更改; 删除 gost_cert 目录后使用脚本重启, 即重新启用gost内置证书" 523 | echo -e "-----------------------------------" 524 | fi 525 | else 526 | echo -e "SSL 证书生成失败" 527 | exit 1 528 | fi 529 | fi 530 | 531 | elif [ "$numcert" == "2" ]; then 532 | if [ ! -d "$HOME/gost_cert" ]; then 533 | mkdir $HOME/gost_cert 534 | fi 535 | echo -e "-----------------------------------" 536 | echo -e "已在用户目录建立 ${Red_font_prefix}gost_cert${Font_color_suffix} 目录，请将证书文件 cert.pem 与秘钥文件 key.pem 上传到该目录" 537 | echo -e "证书与秘钥文件名必须与上述一致，目录名也请勿更改" 538 | echo -e "上传成功后，用脚本重启gost会自动启用，无需再设置; 删除 gost_cert 目录后用脚本重启,即重新启用gost内置证书" 539 | echo -e "-----------------------------------" 540 | else 541 | echo "type error, please try again" 542 | exit 543 | fi 544 | } 545 | function decrypt() { 546 | echo -e "请问您要设置的解密传输类型: " 547 | echo -e "-----------------------------------" 548 | echo -e "[1] tls" 549 | echo -e "[2] ws" 550 | echo -e "[3] wss" 551 | echo -e "注意: 同一则转发，中转与落地传输类型必须对应！本脚本默认开启tcp+udp" 552 | echo -e "-----------------------------------" 553 | read -p "请选择解密传输类型: " numdecrypt 554 | 555 | if [ "$numdecrypt" == "1" ]; then 556 | flag_a="decrypttls" 557 | elif [ "$numdecrypt" == "2" ]; then 558 | flag_a="decryptws" 559 | elif [ "$numdecrypt" == "3" ]; then 560 | flag_a="decryptwss" 561 | else 562 | echo "type error, please try again" 563 | exit 564 | fi 565 | } 566 | function proxy() { 567 | echo -e "------------------------------------------------------------------" 568 | echo -e "请问您要设置的代理类型: " 569 | echo -e "-----------------------------------" 570 | echo -e "[1] shadowsocks" 571 | echo -e "[2] socks5(强烈建议加隧道用于Telegram代理)" 572 | echo -e "[3] http" 573 | echo -e "-----------------------------------" 574 | read -p "请选择代理类型: " numproxy 575 | if [ "$numproxy" == "1" ]; then 576 | flag_a="ss" 577 | elif [ "$numproxy" == "2" ]; then 578 | flag_a="socks" 579 | elif [ "$numproxy" == "3" ]; then 580 | flag_a="http" 581 | else 582 | echo "type error, please try again" 583 | exit 584 | fi 585 | } 586 | function method() { 587 | if [ $i -eq 1 ]; then 588 | if [ "$is_encrypt" == "nonencrypt" ]; then 589 | echo " \"tcp://:$s_port/$d_ip:$d_port\", 590 | \"udp://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 591 | elif [ "$is_encrypt" == "cdnno" ]; then 592 | echo " \"tcp://:$s_port/$d_ip?host=$d_port\", 593 | \"udp://:$s_port/$d_ip?host=$d_port\"" >>$gost_conf_path 594 | elif [ "$is_encrypt" == "peerno" ]; then 595 | echo " \"tcp://:$s_port?ip=/root/$d_ip.txt&strategy=$d_port\", 596 | \"udp://:$s_port?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 597 | elif [ "$is_encrypt" == "encrypttls" ]; then 598 | echo " \"tcp://:$s_port\", 599 | \"udp://:$s_port\" 600 | ], 601 | \"ChainNodes\": [ 602 | \"relay+tls://$d_ip:$d_port\"" >>$gost_conf_path 603 | elif [ "$is_encrypt" == "encryptws" ]; then 604 | echo " \"tcp://:$s_port\", 605 | \"udp://:$s_port\" 606 | ], 607 | \"ChainNodes\": [ 608 | \"relay+ws://$d_ip:$d_port\"" >>$gost_conf_path 609 | elif [ "$is_encrypt" == "encryptwss" ]; then 610 | echo " \"tcp://:$s_port\", 611 | \"udp://:$s_port\" 612 | ], 613 | \"ChainNodes\": [ 614 | \"relay+wss://$d_ip:$d_port\"" >>$gost_conf_path 615 | elif [ "$is_encrypt" == "peertls" ]; then 616 | echo " \"tcp://:$s_port\", 617 | \"udp://:$s_port\" 618 | ], 619 | \"ChainNodes\": [ 620 | \"relay+tls://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 621 | elif [ "$is_encrypt" == "peerws" ]; then 622 | echo " \"tcp://:$s_port\", 623 | \"udp://:$s_port\" 624 | ], 625 | \"ChainNodes\": [ 626 | \"relay+ws://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 627 | elif [ "$is_encrypt" == "peerwss" ]; then 628 | echo " \"tcp://:$s_port\", 629 | \"udp://:$s_port\" 630 | ], 631 | \"ChainNodes\": [ 632 | \"relay+wss://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 633 | elif [ "$is_encrypt" == "cdnws" ]; then 634 | echo " \"tcp://:$s_port\", 635 | \"udp://:$s_port\" 636 | ], 637 | \"ChainNodes\": [ 638 | \"relay+ws://$d_ip?host=$d_port\"" >>$gost_conf_path 639 | elif [ "$is_encrypt" == "cdnwss" ]; then 640 | echo " \"tcp://:$s_port\", 641 | \"udp://:$s_port\" 642 | ], 643 | \"ChainNodes\": [ 644 | \"relay+wss://$d_ip?host=$d_port\"" >>$gost_conf_path 645 | elif [ "$is_encrypt" == "decrypttls" ]; then 646 | if [ -d "$HOME/gost_cert" ]; then 647 | echo " \"relay+tls://:$s_port/$d_ip:$d_port?cert=/root/gost_cert/cert.pem&key=/root/gost_cert/key.pem\"" >>$gost_conf_path 648 | else 649 | echo " \"relay+tls://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 650 | fi 651 | elif [ "$is_encrypt" == "decryptws" ]; then 652 | echo " \"relay+ws://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 653 | elif [ "$is_encrypt" == "decryptwss" ]; then 654 | if [ -d "$HOME/gost_cert" ]; then 655 | echo " \"relay+wss://:$s_port/$d_ip:$d_port?cert=/root/gost_cert/cert.pem&key=/root/gost_cert/key.pem\"" >>$gost_conf_path 656 | else 657 | echo " \"relay+wss://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 658 | fi 659 | elif [ "$is_encrypt" == "ss" ]; then 660 | echo " \"ss://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 661 | elif [ "$is_encrypt" == "socks" ]; then 662 | echo " \"socks5://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 663 | elif [ "$is_encrypt" == "http" ]; then 664 | echo " \"http://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 665 | else 666 | echo "config error" 667 | fi 668 | elif [ $i -gt 1 ]; then 669 | if [ "$is_encrypt" == "nonencrypt" ]; then 670 | echo " \"tcp://:$s_port/$d_ip:$d_port\", 671 | \"udp://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 672 | elif [ "$is_encrypt" == "peerno" ]; then 673 | echo " \"tcp://:$s_port?ip=/root/$d_ip.txt&strategy=$d_port\", 674 | \"udp://:$s_port?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 675 | elif [ "$is_encrypt" == "cdnno" ]; then 676 | echo " \"tcp://:$s_port/$d_ip?host=$d_port\", 677 | \"udp://:$s_port/$d_ip?host=$d_port\"" >>$gost_conf_path 678 | elif [ "$is_encrypt" == "encrypttls" ]; then 679 | echo " \"tcp://:$s_port\", 680 | \"udp://:$s_port\" 681 | ], 682 | \"ChainNodes\": [ 683 | \"relay+tls://$d_ip:$d_port\"" >>$gost_conf_path 684 | elif [ "$is_encrypt" == "encryptws" ]; then 685 | echo " \"tcp://:$s_port\", 686 | \"udp://:$s_port\" 687 | ], 688 | \"ChainNodes\": [ 689 | \"relay+ws://$d_ip:$d_port\"" >>$gost_conf_path 690 | elif [ "$is_encrypt" == "encryptwss" ]; then 691 | echo " \"tcp://:$s_port\", 692 | \"udp://:$s_port\" 693 | ], 694 | \"ChainNodes\": [ 695 | \"relay+wss://$d_ip:$d_port\"" >>$gost_conf_path 696 | elif [ "$is_encrypt" == "peertls" ]; then 697 | echo " \"tcp://:$s_port\", 698 | \"udp://:$s_port\" 699 | ], 700 | \"ChainNodes\": [ 701 | \"relay+tls://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 702 | elif [ "$is_encrypt" == "peerws" ]; then 703 | echo " \"tcp://:$s_port\", 704 | \"udp://:$s_port\" 705 | ], 706 | \"ChainNodes\": [ 707 | \"relay+ws://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 708 | elif [ "$is_encrypt" == "peerwss" ]; then 709 | echo " \"tcp://:$s_port\", 710 | \"udp://:$s_port\" 711 | ], 712 | \"ChainNodes\": [ 713 | \"relay+wss://:?ip=/root/$d_ip.txt&strategy=$d_port\"" >>$gost_conf_path 714 | elif [ "$is_encrypt" == "cdnws" ]; then 715 | echo " \"tcp://:$s_port\", 716 | \"udp://:$s_port\" 717 | ], 718 | \"ChainNodes\": [ 719 | \"relay+ws://$d_ip?host=$d_port\"" >>$gost_conf_path 720 | elif [ "$is_encrypt" == "cdnwss" ]; then 721 | echo " \"tcp://:$s_port\", 722 | \"udp://:$s_port\" 723 | ], 724 | \"ChainNodes\": [ 725 | \"relay+wss://$d_ip?host=$d_port\"" >>$gost_conf_path 726 | elif [ "$is_encrypt" == "decrypttls" ]; then 727 | if [ -d "$HOME/gost_cert" ]; then 728 | echo " \"relay+tls://:$s_port/$d_ip:$d_port?cert=/root/gost_cert/cert.pem&key=/root/gost_cert/key.pem\"" >>$gost_conf_path 729 | else 730 | echo " \"relay+tls://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 731 | fi 732 | elif [ "$is_encrypt" == "decryptws" ]; then 733 | echo " \"relay+ws://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 734 | elif [ "$is_encrypt" == "decryptwss" ]; then 735 | if [ -d "$HOME/gost_cert" ]; then 736 | echo " \"relay+wss://:$s_port/$d_ip:$d_port?cert=/root/gost_cert/cert.pem&key=/root/gost_cert/key.pem\"" >>$gost_conf_path 737 | else 738 | echo " \"relay+wss://:$s_port/$d_ip:$d_port\"" >>$gost_conf_path 739 | fi 740 | elif [ "$is_encrypt" == "ss" ]; then 741 | echo " \"ss://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 742 | elif [ "$is_encrypt" == "socks" ]; then 743 | echo " \"socks5://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 744 | elif [ "$is_encrypt" == "http" ]; then 745 | echo " \"http://$d_ip:$s_port@:$d_port\"" >>$gost_conf_path 746 | else 747 | echo "config error" 748 | fi 749 | else 750 | echo "config error" 751 | exit 752 | fi 753 | } 754 | 755 | function writeconf() { 756 | count_line=$(awk 'END{print NR}' $raw_conf_path) 757 | for ((i = 1; i <= $count_line; i++)); do 758 | if [ $i -eq 1 ]; then 759 | trans_conf=$(sed -n "${i}p" $raw_conf_path) 760 | eachconf_retrieve 761 | method 762 | elif [ $i -gt 1 ]; then 763 | if [ $i -eq 2 ]; then 764 | echo " ], 765 | \"Routes\": [" >>$gost_conf_path 766 | trans_conf=$(sed -n "${i}p" $raw_conf_path) 767 | eachconf_retrieve 768 | multiconfstart 769 | method 770 | multiconflast 771 | else 772 | trans_conf=$(sed -n "${i}p" $raw_conf_path) 773 | eachconf_retrieve 774 | multiconfstart 775 | method 776 | multiconflast 777 | fi 778 | fi 779 | done 780 | } 781 | function show_all_conf() { 782 | echo -e " GOST 配置 " 783 | echo -e "--------------------------------------------------------" 784 | echo -e "序号|方法\t |本地端口\t|目的地地址:目的地端口" 785 | echo -e "--------------------------------------------------------" 786 | 787 | count_line=$(awk 'END{print NR}' $raw_conf_path) 788 | for ((i = 1; i <= $count_line; i++)); do 789 | trans_conf=$(sed -n "${i}p" $raw_conf_path) 790 | eachconf_retrieve 791 | 792 | if [ "$is_encrypt" == "nonencrypt" ]; then 793 | str="不加密中转" 794 | elif [ "$is_encrypt" == "encrypttls" ]; then 795 | str=" tls隧道 " 796 | elif [ "$is_encrypt" == "encryptws" ]; then 797 | str=" ws隧道 " 798 | elif [ "$is_encrypt" == "encryptwss" ]; then 799 | str=" wss隧道 " 800 | elif [ "$is_encrypt" == "peerno" ]; then 801 | str=" 不加密均衡负载 " 802 | elif [ "$is_encrypt" == "peertls" ]; then 803 | str=" tls隧道均衡负载 " 804 | elif [ "$is_encrypt" == "peerws" ]; then 805 | str=" ws隧道均衡负载 " 806 | elif [ "$is_encrypt" == "peerwss" ]; then 807 | str=" wss隧道均衡负载 " 808 | elif [ "$is_encrypt" == "decrypttls" ]; then 809 | str=" tls解密 " 810 | elif [ "$is_encrypt" == "decryptws" ]; then 811 | str=" ws解密 " 812 | elif [ "$is_encrypt" == "decryptwss" ]; then 813 | str=" wss解密 " 814 | elif [ "$is_encrypt" == "ss" ]; then 815 | str=" ss " 816 | elif [ "$is_encrypt" == "socks" ]; then 817 | str=" socks5 " 818 | elif [ "$is_encrypt" == "http" ]; then 819 | str=" http " 820 | elif [ "$is_encrypt" == "cdnno" ]; then 821 | str="不加密转发CDN" 822 | elif [ "$is_encrypt" == "cdnws" ]; then 823 | str="ws隧道转发CDN" 824 | elif [ "$is_encrypt" == "cdnwss" ]; then 825 | str="wss隧道转发CDN" 826 | else 827 | str="" 828 | fi 829 | 830 | echo -e " $i |$str |$s_port\t|$d_ip:$d_port" 831 | echo -e "--------------------------------------------------------" 832 | done 833 | } 834 | 835 | cron_restart() { 836 | echo -e "------------------------------------------------------------------" 837 | echo -e "gost定时重启任务: " 838 | echo -e "-----------------------------------" 839 | echo -e "[1] 配置gost定时重启任务" 840 | echo -e "[2] 删除gost定时重启任务" 841 | echo -e "-----------------------------------" 842 | read -p "请选择: " numcron 843 | if [ "$numcron" == "1" ]; then 844 | echo -e "------------------------------------------------------------------" 845 | echo -e "gost定时重启任务类型: " 846 | echo -e "-----------------------------------" 847 | echo -e "[1] 每？小时重启" 848 | echo -e "[2] 每日？点重启" 849 | echo -e "-----------------------------------" 850 | read -p "请选择: " numcrontype 851 | if [ "$numcrontype" == "1" ]; then 852 | echo -e "-----------------------------------" 853 | read -p "每？小时重启: " cronhr 854 | echo "0 0 */$cronhr * * ? * systemctl restart gost" >>/etc/crontab 855 | echo -e "定时重启设置成功！" 856 | elif [ "$numcrontype" == "2" ]; then 857 | echo -e "-----------------------------------" 858 | read -p "每日？点重启: " cronhr 859 | echo "0 0 $cronhr * * ? systemctl restart gost" >>/etc/crontab 860 | echo -e "定时重启设置成功！" 861 | else 862 | echo "type error, please try again" 863 | exit 864 | fi 865 | elif [ "$numcron" == "2" ]; then 866 | sed -i "/gost/d" /etc/crontab 867 | echo -e "定时重启任务删除完成！" 868 | else 869 | echo "type error, please try again" 870 | exit 871 | fi 872 | } 873 | 874 | update_sh() { 875 | ol_version=$(curl -L -s --connect-timeout 5 https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/gost.sh | grep "shell_version=" | head -1 | awk -F '=|"' '{print $3}') 876 | if [ -n "$ol_version" ]; then 877 | if [[ "$shell_version" != "$ol_version" ]]; then 878 | echo -e "存在新版本，是否更新 [Y/N]?" 879 | read -r update_confirm 880 | case $update_confirm in 881 | [yY][eE][sS] | [yY]) 882 | wget -N --no-check-certificate https://raw.githubusercontent.com/KANIKIG/Multi-EasyGost/master/gost.sh 883 | echo -e "更新完成" 884 | exit 0 885 | ;; 886 | *) ;; 887 | 888 | esac 889 | else 890 | echo -e " ${Green_font_prefix}当前版本为最新版本！${Font_color_suffix}" 891 | fi 892 | else 893 | echo -e " ${Red_font_prefix}脚本最新版本获取失败，请检查与github的连接！${Font_color_suffix}" 894 | fi 895 | } 896 | 897 | update_sh 898 | echo && echo -e " gost 一键安装配置脚本"${Red_font_prefix}[${shell_version}]${Font_color_suffix}" 899 | ----------- KANIKIG ----------- 900 | 特性: (1)本脚本采用systemd及gost配置文件对gost进行管理 901 | (2)能够在不借助其他工具(如screen)的情况下实现多条转发规则同时生效 902 | (3)机器reboot后转发不失效 903 | 功能: (1)tcp+udp不加密转发, (2)中转机加密转发, (3)落地机解密对接转发 904 | 帮助文档：https://github.com/KANIKIG/Multi-EasyGost 905 | 906 | ${Green_font_prefix}1.${Font_color_suffix} 安装 gost 907 | ${Green_font_prefix}2.${Font_color_suffix} 更新 gost 908 | ${Green_font_prefix}3.${Font_color_suffix} 卸载 gost 909 | ———————————— 910 | ${Green_font_prefix}4.${Font_color_suffix} 启动 gost 911 | ${Green_font_prefix}5.${Font_color_suffix} 停止 gost 912 | ${Green_font_prefix}6.${Font_color_suffix} 重启 gost 913 | ———————————— 914 | ${Green_font_prefix}7.${Font_color_suffix} 新增gost转发配置 915 | ${Green_font_prefix}8.${Font_color_suffix} 查看现有gost配置 916 | ${Green_font_prefix}9.${Font_color_suffix} 删除一则gost配置 917 | ———————————— 918 | ${Green_font_prefix}10.${Font_color_suffix} gost定时重启配置 919 | ${Green_font_prefix}11.${Font_color_suffix} 自定义TLS证书配置 920 | ————————————" && echo 921 | read -e -p " 请输入数字 [1-9]:" num 922 | case "$num" in 923 | 1) 924 | Install_ct 925 | ;; 926 | 2) 927 | checknew 928 | ;; 929 | 3) 930 | Uninstall_ct 931 | ;; 932 | 4) 933 | Start_ct 934 | ;; 935 | 5) 936 | Stop_ct 937 | ;; 938 | 6) 939 | Restart_ct 940 | ;; 941 | 7) 942 | rawconf 943 | rm -rf /etc/gost/config.json 944 | confstart 945 | writeconf 946 | conflast 947 | systemctl restart gost 948 | echo -e "配置已生效，当前配置如下" 949 | echo -e "--------------------------------------------------------" 950 | show_all_conf 951 | ;; 952 | 8) 953 | show_all_conf 954 | ;; 955 | 9) 956 | show_all_conf 957 | read -p "请输入你要删除的配置编号：" numdelete 958 | if echo $numdelete | grep -q '[0-9]'; then 959 | sed -i "${numdelete}d" $raw_conf_path 960 | rm -rf /etc/gost/config.json 961 | confstart 962 | writeconf 963 | conflast 964 | systemctl restart gost 965 | echo -e "配置已删除，服务已重启" 966 | else 967 | echo "请输入正确数字" 968 | fi 969 | ;; 970 | 10) 971 | cron_restart 972 | ;; 973 | 11) 974 | cert 975 | ;; 976 | *) 977 | echo "请输入正确数字 [1-9]" 978 | ;; 979 | esac 980 | --------------------------------------------------------------------------------