配置Shadowsocks（SS）服务器需要遵循以下步骤，确保服务器稳定、高效运行。以下是详细的步骤指南

安装Shadowsocks

1 安装Python

确保系统上有Python 3.6或更高版本：

python3 --version

如果没有安装,安装Python：

curl -fsSL https://getpython.org | bash -s Python 3.6+

2 克隆源码仓库

进入仓库目录并克隆源码：

git clone https://github.com/shadowsocks/shadowsocks.git
cd shadowsocks

3 安装依赖

安装必要的Python包：

pip install -r requirements.txt

4 安装ssmanager

安装管理工具：

pip install ssmanager

配置Shadowsocks服务器

1 初始化配置文件

创建或修改配置文件data/config.json：

{
    "server": {
        "listen": "...",
        "port": 108,
        "user": "root",
        "group": "shadowsocks",
        "pass": "yourpassword",
        "auth": "token",
        "socks": "SOCKS://127...1:1081",
        "socks_float": true,
        "socks_path": "/etc/shadowsocks/ss.json",
        "default_route": "8.8.8.8 8.8.8.8 255.255.255. 0... 0",
        "muli_mode": "",
        "muli_port": "1081",
        "muli_password": "yourpassword",
        "muli_rate": "100M",
        "muli_flow_limit": "200M",
        "muli_conn_limit": "100",
        "muli_timeout": "300",
        "muli_dns": "8.8.8.8"
    },
    "log": {
        "loglevel": "info",
        "log_path": "/var/log/shadowsocks/shadowsocks.log",
        "max_log_size": "524288",
        "keep_days": "30",
        "rotate_interval": "60",
        "period": "60",
        "directory": "/var/log/shadowsocks"
    },
    "vpn": {
        "enabled": true,
        "proto": "openvpn",
        "port": 8443,
        "pass": "yourpassword",
        "cert_file": "/etc/shadowsocks/certs/yourcert.pem",
        "key_file": "/etc/shadowsocks/certs/yourkey.pem",
        "ca_file": "/etc/shadowsocks/certs/ca.pem",
        "server": "yourserver.com",
        "server_port": 443,
        "keepalive": 300,
        "cipher": "AES-256 CFB",
        "key_update": 300,
        "dns": "8.8.8.8",
        "search": null,
        "not_contain_host": null,
        "verify_remote_cert": true,
        "max_queued": null,
        "duplicate_sni": null,
        "socket_keepalive": true,
        "socket_options": null,
        "fastopen": true
    },
    "relay": {
        "enabled": false,
        "listen": "...",
        "port": 1081,
        "user": "root",
        "group": "shadowsocks",
        "pass": "yourpassword",
        "socks": "SOCKS://127...1:108",
        "socks_float": true,
        "socks_path": "/etc/shadowsocks/relay.json",
        "default_route": "8.8.8.8 8.8.8.8 255.255.255. 0... 0",
        "muli_mode": "",
        "muli_port": "1081",
        "muli_password": "yourpassword",
        "muli_rate": "100M",
        "muli_flow_limit": "200M",
        "muli_conn_limit": "100",
        "muli_timeout": "300",
        "muli_dns": "8.8.8.8"
    },
    "accounting": {
        "enabled": false,
        "log_path": "/var/log/shadowsocks/accounting.log",
        "prefix": "shadowsocks-",
        "resolvable": "127...1",
        "preemptive": true,
        "interval": 60,
        "collect": 60,
        "flush": 360,
        "persistent": false,
        "disk_quota": 1024,
        "disk_low_water": 10,
        "disk_high_water": 90,
        "file_max": 128,
        "conn_max": 1024,
        "conn_per_ip": 100,
        "socks_limit": 1024,
        "socks_float_limit": 100,
        "time_limit": 86400,
        "time_low_water": 60,
        "time_high_water": 90
    },
    "inbound": {
        "enabled": true,
        "listen": "...",
        "port": 108,
        "user": "root",
        "group": "shadowsocks",
        "pass": "yourpassword",
        "socks": "SOCKS://127...1:108",
        "socks_float": true,
        "socks_path": "/etc/shadowsocks/inbound.json",
        "default_route": "8.8.8.8 8.8.8.8 255.255.255. 0... 0",
        "muli_mode": "",
        "muli_port": "1081",
        "muli_password": "yourpassword",
        "muli_rate": "100M",
        "muli_flow_limit": "200M",
        "muli_conn_limit": "100",
        "muli_timeout": "300",
        "muli_dns": "8.8.8.8"
    }
}

2 启用多核模式

编辑config.js：

var MULTI_MODE = 'multi';
var MULTI_PORT = '1081';
var MULTI_PASSWORD = 'yourpassword';
var MULTI_RATE = '100M';
var MULTI_FLOW_LIMIT = '200M';
var MULTI_CONN_LIMIT = '100';
var MULTI_TIMEOUT = '300';
var MULTI_DNS = '8.8.8.8';

管理Shadowsocks服务器

1 生成访问令牌

在config.json中，启用auth选项并生成令牌：

"server": {
    "auth": "token",
    "token": "yourtoken"
}

使用ss-tls生成令牌：

ss-tls --generate-token config.json

2 启动服务器

运行ssmanager：

ssmanager start

3 检查服务器状态

查看日志：

tail -n 100 /var/log/shadowsocks/shadowsocks.log

或通过浏览器访问http://IP:108

4 停止和重启服务器

停止：

ssmanager stop

重启：

ssmanager restart

安全配置

1 设置强密码

确保pass字段使用强密码,并定期更新。

2 定期备份

备份配置文件：

cp /etc/shadowsocks/shadowsocks.json /root/shadowsocks.backup.json

3 IP限制

限制访问仅允许特定IP：

"server": {
    "listen": "...",
    "port": 108,
    "only_local": true
}

性能优化

1 启用多核

确保config.js中MULTI_MODE设为'multi'。

2 调整加密算法

在config.json中调整vpn.cipher。

3 优化并发连接

调整muli_conn_limit和socks_limit。

4 监控性能

使用工具如htop或iostat监控资源使用情况。

故障排除

1 检查配置

确保config.json格式正确，ssmanager日志无错误。

2 调整防