Updated by Linode Contributed by Andrew Lescher

Contribute on GitHub

Report an Issue View File Edit File

Shadowsocks is a lightweight SOCKS5 web proxy tool primarily utilized to bypass network censorship and blocking on certain websites and web protocols. A full setup requires a Linode server to host the Shadowsocks daemon, and a client installed on PC, Mac, Linux, or a mobile device. Unlike other proxy software, Shadowsocks traffic is designed to be both indiscernible from other traffic to third-party monitoring tools, and also able to disguise itself as a normal direct connection. Data passing through Shadowsocks is encrypted for additional security and privacy.

Since there is currently no Shadowsocks package available for Ubuntu or CentOS, this guide shows how to build Shadowsocks from source.

Before You Begin

1. The commands in this guide require root privileges. To run the steps as an elevated user with sudo privileges, prepend each command with sudo. If two commands are presented in the same instance (separated by &&), remember to use sudo after the && (ex. sudo [command] && sudo [command]). To create a standard user account with sudo privileges, complete the Add a Limited User Account section of our Securing your Server guide.

2. A working firewall is a necessary security measure. Firewall instructions will be presented for UFW, FirewallD, and Iptables. To configure a firewall on your Linode, visit one of our guides:

Install the Shadowsocks Server

Download Source Code and Dependencies

1. Update system repositories, then download and install dependencies:

   Ubuntu 16.04

   CentOS 7

2. Navigate to the /opt directory and download the Shadowsocks Git module:

3. Install Shadowsocks-libev:

Configure the Shadowsocks Server

1. Create a new system user for Shadowsocks:

   Ubuntu 16.04

   CentOS 7

2. Create a new directory for the configuration file:

3. Create the Shadowsocks config file at /etc/shadowsocks/shadowsocks.json. Paste the contents listed below into the file, noting the instructions in the shadowsocks.json Breakdown table for each property. Follow these instructions to determine the value you should set for each property.

   /etc/shadowsocks/shadowsocks.json

shadowsocks.json Breakdown

Property	Explanation	Possible Values
server	Enter your server’s public IP address.	User determined
server_port	Shadowsocks will listen on this port. Use the default value of 8388.	User determined
password	Connection password. Set a strong password.	User determined
timeout	Connection timeout in seconds. The default value should be sufficient here.	User determined
method	Encryption method. Using AEAD algorithms is recommended.	See Stream Ciphers and AEAD Ciphers
fast_open	Reduces latency when turned on. Can only be used with kernel versions 3.7.1 or higher. Check your kernel version with uname -r.	true, false
nameserver	Name servers for internal DNS resolver.	User determined

Optimize Shadowsocks

Apply the following optimizations to your system kernel to provide for a smooth running Shadowsocks installation.

1. Create the /etc/sysctl.d/local.conf system optimization file and paste the contents shown below into your file:

   Caution

   These settings provide the optimal kernel configuration for Shadowsocks. If you have previously configured your system kernel settings for any reason, make sure no conflicts exist.

   /etc/sysctl.d/local.conf

2. Apply optimizations:

Create a Shadowsocks Systemd Service

The Shadowsocks systemd service allows the daemon to automatically start on system boot and run in the background.

1. Create a systemd file with the following content:

   

   /etc/systemd/system/shadowsocks.service

2. Enable and start shadowsocks.service:

Open Firewall Port for Shadowsocks Client

Depending on your preference, you may use either the iptables, UFW, or firewalld (CentOS 7 only) commands to complete this section.

Open port 8388 for the Shadowsocks Client:

Iptables

UFW

FirewallD

Install a Shadowsocks Client

The second stage to a Shadowsocks setup is to install a client on the user’s device. This could include a computer, mobile device, tablet, and even home network router. Supported operating systems include Windows, macOS, iOS, Linux, Android, and OpenWRT.

macOS Shadowsocks Client

1. Download the ShadowsocksX-NG GUI Client for macOS:

2. Launch the application on your Mac. The app preferences will be available from a new status menu bar icon. Select the Server Preferences menu item:

3. In the Server Preferences window, click on the + (plus-sign) button in the lower left. Enter the details for your Shadowsocks Linode. Be sure to select the same port and encryption scheme that you listed in your Linode’s shadowsocks.json file. Afterwards, close the window:

   Game or Patch Questions? Visit MAIN N E T W O R K NBA 2K13 System Language Protection CD Cover: PC:: (Retail DVD) (Digital Download): Index Game. Nba2k13 no reg crack fixed - Google Docs. Nba 2k13 fixed crack no login problem. Nba 2k13 no reg crack fixed nba spot. How to fix fatal error in nba2k14. Jan 20, 2018 - NBA2K13 NO REG CRACK FIXEDMar 16, 2014 NBA. Only-download at 4shared NBA. Only is hosted at free file sharing service Oct 8, 2010. Gas cracker project dibrugarh recruitment total war shogun 2 crack no cd From. Skidrow games 6391 nba 2k13 crash fix crack Please remove my name from. Nba 2k13 crack only.

4. Download video naruto vs pain full sub indonesia. In the Shadowsocks menu, make sure that Shadowsocks is turned on and that the Global Mode item is selected:

5. Verify that your Shadowsocks connection is active by visiting an IP address lookup website like ifconfig.co. When your connection is working as expected, the website will list your Shadowsocks Linode’s public IP.

Windows Shadowsocks Client

1. Navigate to the Windows Shadowsocks page. Click on Shadowsocks-4.0.4.zip under Downloads.

2. Extract the contents of the .zip file into any folder and run Shadowsocks.exe. Shadowsocks will run as a background process. Locate the Shadowsocks icon in the taskbar (it may be in the Hidden Icons taskbar menu), right-click on the Shadowsocks icon, then click on Edit Servers. Enter the information that you saved in the shadowsocks.json file:

3. Right-click on the Shadowsocks icon again. Mouse over PAC and select both Local PAC and Secure Local PAC.

   To confirm that your Linode’s IP address is selected, mouse over Servers.

4. Verify that your Shadowsocks connection is active by visiting an IP address lookup website like ifconfig.co. When your connection is working as expected, the website will list your Shadowsocks Linode’s public IP.

Where to Go from Here

Once your Shadowsocks server is online, configure a client on your mobile phone, tablet, or any other devices you use. The Shadowsocks client download page supports all mainstream platforms.

More Information

You may wish to consult the following resources for additional information on this topic. While these are provided in the hope that they will be useful, please note that we cannot vouch for the accuracy or timeliness of externally hosted materials.

Join our Community

This guide is published under a CC BY-ND 4.0 license.

Hi team,
I have installed and configured the Dante socks server on Centos7 64bit server machine. configuration file as is below
#less /etc/sockd.conf
logoutput: /var/log/sockd.log
internal: 10.10.0.125 port = 1080
external: ens456
user.notprivileged: socks
clientmethod: none
socksmethod: none
client pass {
from: 10.10.0.0/24 to: 0.0.0.0/0
log: error # connect disconnect
}
socks pass {
from: 0.0.0.0/0 to: 0.0.0.0/0
command: bind connect udpassociate
log: error # connect disconnect iooperation
}
socks pass {
from: 0.0.0.0/0 to: 0.0.0.0/0
command: bindreply udpreply
log: error # connect disconnect iooperation
}
It failed to start with below lines.
]# systemctl status -l sockd
sockd.service - SYSV: Dante Socks v4/v5 servers
Loaded: loaded (/etc/rc.d/init.d/sockd)
Active: failed (Result: exit-code) since Mon 2015-12-07 16:42:04 PKT; 4s ago
Process: 3026 ExecStart=/etc/rc.d/init.d/sockd start (code=exited, status=1/FAILURE)
Dec 07 16:42:04 localhost sockd[3026]: /etc/rc.d/init.d/sockd: line 18: [: =: unary operator expected
Dec 07 16:42:04 localhost sockd[3026]: Starting Dante Socks server (sockd): [FAILED]
Dec 07 16:42:04 localhost systemd[1]: sockd.service: control process exited, code=exited status=1
Dec 07 16:42:04 localhost systemd[1]: Failed to start SYSV: Dante Socks v4/v5 servers.
Dec 07 16:42:04 localhost systemd[1]: Unit sockd.service entered failed state.
How to fix it?