Create Your Own Proxy Nodes Site & BPB Panel To Bypass Internet Censorship (Cloudflare + VLESS)

主机优惠 • • 好物分享
There are a few Github projects to show you how to use Cloudflare workers / pages to generate your own proxy nodes or subscription group. (https://github.com/yonggekkk/Cloudflare_vless_trojan， https://github.com/vfarid/v2ray-worker)

Github Project BPB-Worker-Panel is a GUI Panel providing Worker subscriptions for VLESS, Trojan and Warp configs alongside chain proxies, offering full DNS, clean IP, Fragment, Warp, Warp pro and routing settings for cross-platform clients using Sing-box, Clash/Mihomo and Xray cores.

 Note: Starting from Nov 23 2024 (Based on my testing, most likely earlier, but not earlier than Nov 16), Cloudflare is checking the code in the new deployment for this kind of workers or pages. The existing ones have not got issue, but new deployment will get an error 1101 "Worker threw exception". 

Tested with my deployments and it was working one minutes ago before I re-deployed it. 

 

Use Cloudflare to Generate vless nodes

 Github project: 

  • https://github.com/51sec/ss_generator/blob/main/worker2vless.js
  • Original one: https://github.com/zizifn/edgetunnel/tree/main/src
Create a new worker using js code in the Github project. You can use Cloudflare own workers sub-domain. 
You can use the code from Github: 
  • https://github.com/51sec/ss_generator/blob/main/worker2vless.js
You also can use a group of random ProxyIP instead of single one by modifying code as show below. 

  1. const proxyIPs = ['cdn.xn--b6gac.eu.org', 'cdn-all.xn--b6gac.eu.org', 'workers.cloudflare.cyou'];
  2.  
  3. // if you want to use ipv6 or single proxyIP, please add comment at this line and remove comment at the next line
  4. let proxyIP = proxyIPs[Math.floor(Math.random() * proxyIPs.length)];
  5. // use single proxyIP instead of random
  6. // let proxyIP = 'cdn.xn--b6gac.eu.org';
  7. // ipv6 proxyIP example remove comment to use
  8. // let proxyIP = "[2a01:4f8:c2c:123f:64:5:6810:c55a]"

Two things you might want to change:
1. UUID
2. Proxyip

For proxy ip, in the original github code, it is empty, but we can choose one from following proxyIP list maintained by someone else on Internet.

  1. CM 维护
  2. proxyip.us.fxxk.dedyn.io 
  3. IP落地区域: 美国 维护频率: 12小时/次
  4. proxyip.sg.fxxk.dedyn.io 
  5. IP落地区域: 新加坡 维护频率: 12小时/次
  6. proxyip.jp.fxxk.dedyn.io 
  7. IP落地区域: 日本 维护频率: 12小时/次
  8. proxyip.hk.fxxk.dedyn.io
  9. IP落地区域: 香港 维护频率: 12小时/次
  10. proxyip.aliyun.fxxk.dedyn.io 
  11. IP落地区域: 阿里云 维护频率: 4小时/次
  12. proxyip.oracle.fxxk.dedyn.io 
  13. IP落地区域: 甲骨文 维护频率: 4小时/次
  14. proxyip.digitalocean.fxxk.dedyn.io 
  15. IP落地区域: 数码海 维护频率: 4小时/次
  16.  
  17. 白嫖哥维护
  18. workers.cloudflare.cyou
  19.  
  20. Mingyu维护
  21. my-telegram-is-herocore.onecf.eu.org
  22. sg.ipdb.rr.nu
  23. nl.ipdb.rr.nu
  24. hk.ipdb.rr.nu
  25. jp.ipdb.rr.nu
  26. us.ipdb.rr.nu
  27.  
  28. 小一维护
  29. hk.cf.zhetengsha.eu.org
  30. sg.cf.zhetengsha.eu.org
  31. us.cf.zhetengsha.eu.org
  32. jp.cf.zhetengsha.eu.org
More: 
大佬们搭建好的订阅器(生成器)

  • aliyun.classelivre.eu.org 天城大佬
  • cm.godns.onflashdrive.app 天城大佬
  • 3k.fxxk.dedyn.io 3K大佬 
  • vmess.fxxk.dedyn.io CM大佬
  • vless.fxxk.dedyn.io CM大佬

订阅器使用格式：https://生成器地址(订阅器)/sub?host=伪装域名&uuid=你的UUID&path=路径

For example:
https://v.51sec.workers.dev/sub?host=v.51sec.workers.dev&decade00-0000-4000-a000-000000000000&path=/?ed=2048
伪装域名 (host)
  • in my example, it is same as 优选IP (Address)
  • It can be different and some other hosts on internet
    • such as th.amazinglinyy.workers.dev
Peformance Priority IP (Address)
  • in my example, it is same as 伪装域名 (host)
  • But it can be different.
    • such as www.visa.com:8880 to replace my v.51sec.workers.dev:443
After you deployed successfully, you can access your worker with uuid (https://<subdomain name>/UUID)
You also can assign your own subdomain to this worker then use your subdomain to access it with uuid. 

CTRL+A to select all, then CTRL+C. CTRL+V paste into v2rayN. 

Re-generate uuid in v2rayN:

Note: generate a sub link from above screenshot: 
For example:
https://v.51sec.workers.dev/sub?host=v.51sec.workers.dev&decade00-0000-4000-a000-000000000000&path=/?ed=2048
You can add this link to v2rayN's sub group to get a bunch of links. Then you will find a best optimized link with an ip inside to use. 
Note: Chagne Address (v.51sec.workers.dev) to a optimized IP:

将复制的 V2ray 配置链接粘贴到 V2rayN 客户端，地址填入优选 IP ，即可成功科学上网。优选 IP 可通过 https://stock.hostmonit.com/CloudFlareYes.

Note:  A simple and easy to remember uuid:
  • decade00-0000-4000-a000-000000000000
Output for https://v.51sec.workers.dev/decade00-0000-4000-a000-000000000000
################################################################
v2ray --------------------------------------------------------------- vless://[email protected]:443?encryption=none&security=tls&sni=v.51sec.workers.dev&fp=randomized&type=ws&host=v.51sec.workers.dev&path=%2F%3Fed%3D2048#v.51sec.workers.dev --------------------------------------------------------------- ################################################################ clash-meta --------------------------------------------------------------- - type: vless name: v.51sec.workers.dev server: v.51sec.workers.dev port: 443 uuid: decade00-0000-4000-a000-000000000000 network: ws tls: true udp: false sni: v.51sec.workers.dev client-fingerprint: chrome ws-opts: path: "/?ed=2048" headers: host: v.51sec.workers.dev --------------------------------------------------------------- ################################################################


Note:https://v2rayssr.com/worker-vless.html

BPB Project 

  • https://github.com/bia-pain-bache/BPB-Worker-Panel

Steps to Create BPB in Cloudflare

1 Fork https://github.com/bia-pain-bache/BPB-Worker-Panel project into your own Github repository

2 Log into Cloudflare

Creaet KV

It has to be bpb this name for your Namespace. 

3 Create Page and Connect to Git (Your Github account)

Make sure select the BPB-Worker-Panel this repository:

4 After follow the wizard to complete the setup, go back to the project.

5 Go to Setttings page to create two variables:

UUID will need to generate a new one. Default is  [89b3cbba-e6ac-485a-9481-976a0415eab9], which will cause a security concern. It is easy to regenerate one from  在线生成 UUID 1 | 在线生成 UUID 2

PROXYIP：Go here to randomly select one: 随机选择一个代理 IP，or directly set your proxy ip to  cdn-b100.xn--b6gac.eu.org

6 Bind KV namespace

You only can use bpb this name.

After all done, redeploy the project:

Access the Pages

  • https://<name.pages.dev>/panel

Proxy IP 

Proxy IPs source: https://rentry.co/CF-proxyIP

CF反代IP=Proxy IP = 优选ip
ProxyIP explaination: https://upsangel.com/security/vpn/cloudflare-worker-vless%E7%BF%BB%E7%89%86%E4%BB%A3%E7%90%86%E5%8E%9F%E7%90%86-proxyip%E7%B4%B0%E7%AF%80%E7%A0%94%E7%A9%B6/

一些神奇的ip，可以无条件的转发所有cf流量
如果上面的proxyip用不了了，可以替换成下面这些域名
cdn-all.xn–b6gac.eu.org
cdn.xn–b6gac.eu.org
cdn-b100.xn–b6gac.eu.org
edgetunnel.anycast.eu.org
cdn.anycast.eu.org
另外可以参考这个issues进行proxyip查找
issues：https://github.com/zizifn/edgetunnel/issues/162

這個#162issue幫我指引我到了正確的答案，z大在自己的repo issue中解釋到：

由于cf bug，现在cf worker 不能直接访问cf 托管的网站。。所以需要配置一个中转ip。。。而有一些神奇的 ip，可以无条件转发所有 cf 的流量。

z大口中的“神奇的ip”，就是proxyIP。而這個“cf bug”其實是Cloudflare的“有意爲之”，Cloudflare已在網誌上說：

Outbound TCP sockets to Cloudflare IP ranges are temporarily blocked, but will be re-enabled shortly.

也就是說CF Worker是不能訪問CF自家的IP，是不是很不可思議？而z大的代碼就考慮到這一點，如果出現遠端TCP不返回數據（例如遠端的IP是CF自家的IP），就會觸發 retry() 函數，把TCP包再發給proxyIP retry，讓proxyIP丟回給CF的目的IP。

Verify:

browser to https://51sec.org/cdn-cgi/trace
Without VLESS = Without Poxy IP
fl=785f46 h=51sec.org ip=16.32.19.10 ts=1732462022.517 visit_scheme=https uag=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 colo=YYZ sliver=none http=http/2 loc=CA tls=TLSv1.3 sni=encrypted warp=off gateway=off rbi=off kex=X25519MLKEM768




IP=16.32.19.10 which is my home ISP ip.
After enabled VLESS , ip changed to 62.72.163.109. 
https://ipcheck.ing/

Clean IP

 优选ip

Clean IPs via IRCF Space Repo
Recommended way to find best Clean IP: use Scanners.
Clean IP Scanner: https://drunkleen.github.io/ip-scanner/

Security Concerns

 

Search from https://fofa.info/

  • Seach RelatedTLS site with icon hash value and asn value = cloudflare：icon_hash="-1354027319" && asn="13335" && port="443"
  • SerachnoTLS sute with keywords：icon_hash="-1354027319" && asn="13335" && port="80"

References

https://blog.51sec.org

版权声明：
作者：主机优惠
链接：https://www.techfm.club/p/171271.html
来源：TechFM
文章版权归作者所有，未经允许请勿转载。

THE END
分享
二维码
< <上一篇
下一篇>>