基于 Gost 搭建 HTTP/HTTPS 正向代理

使用gost,快速搭建 HTTP/HTTPS 正向代理，HTTPS证书可用 certbot自动获取。

申请域名及设置 DNS 解析（略）

certbot申请证书

certbot certonly --standalone --email [email protected] -d xxx.com

运行完成后，会生成的公钥、私钥的路径：

1/etc/letsencrypt/live/xxxx.com/fullchain.pem    #证书公钥，xxxx.com是你的域名
2/etc/letsencrypt/live/xxxx.com/privkey.pem      #证书私钥

下载Gost

wget -O - https://github.com/ginuerzh/gost/releases/download/v2.11.1/gost-linux-amd64-2.11.1.gz | gzip -d > /usr/bin/gost

chmod +x /usr/bin/gost

注册system服务

vi /etc/systemd/system/gost-dl.service 填入下面内容：

1. http 正向代理

 1[Unit]
 2Description=gost
 3[Service]
 4ExecStart=/usr/bin/gost -L=uname:[email protected]:port
 5
 6
 7Restart=always
 8User=root
 9[Install]
10WantedBy=multi-user.target

2. https 正向代理

 1[Unit]
 2Description=gost
 3[Service]
 4ExecStart=/usr/bin/gost -L=https://uname:[email protected]:443?cert=/etc/letsencrypt/live/xxxx.com/fullchain.pem&key=/etc/letsencrypt/live/xxxx.com/privkey.pem
 5
 6
 7Restart=always
 8User=root
 9[Install]
10WantedBy=multi-user.target

重载system服务 systemctl daemon-reload

下面就可以启动gost了：

systemctl start gost-dl #启动gost

systemctl restart gost-dl #重启gost

systemctl enable gost-dl #开机自启

systemctl status gost-dl #查看状态