From b78e10d7af597d1e6c0f3072af19fd642ae2aba3 Mon Sep 17 00:00:00 2001 From: txthinking Date: Thu, 4 Jan 2024 18:13:52 +0800 Subject: [PATCH] docs --- README.md | 168 ++++++++++++++++++++++----------------------- docs/example-zh.md | 42 ++++++------ docs/example.md | 42 ++++++------ docs/index.html | 168 ++++++++++++++++++++++----------------------- 4 files changed, 210 insertions(+), 210 deletions(-) diff --git a/README.md b/README.md index da6849f2..ff633b1d 100644 --- a/README.md +++ b/README.md @@ -86,49 +86,49 @@ Table of Contents * [gui](#gui) * [script](#script) * [Examples](#examples) - * [Run brook server](#run-brook-server) - * [Run brook wsserver](#run-brook-wsserver) - * [Run brook wssserver: automatically certificate](#run-brook-wssserver-automatically-certificate) - * [Run brook wssserver Use a certificate issued by an existing trust authority](#run-brook-wssserver-use-a-certificate-issued-by-an-existing-trust-authority) - * [Run brook wssserver issue untrusted certificates yourself, any domain](#run-brook-wssserver-issue-untrusted-certificates-yourself-any-domain) - * [withoutBrookProtocol](#withoutbrookprotocol-1) - * [withoutBrookProtocol automatically certificate](#withoutbrookprotocol-automatically-certificate) - * [withoutBrookProtocol Use a certificate issued by an existing trust authority](#withoutbrookprotocol-use-a-certificate-issued-by-an-existing-trust-authority) - * [withoutBrookProtocol issue untrusted certificates yourself, any domain](#withoutbrookprotocol-issue-untrusted-certificates-yourself-any-domain) - * [Run brook socks5, A stand-alone standard socks5 server](#run-brook-socks5-a-stand-alone-standard-socks5-server) - * [Run brook socks5 with username and password. A stand-alone standard socks5 server](#run-brook-socks5-with-username-and-password-a-stand-alone-standard-socks5-server) - * [brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver.](#brook-relayoverbrook-can-relay-a-local-address-to-a-remote-address-over-brook-both-tcp-and-udp-it-works-with-brook-server-wsserver-wssserver) - * [brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver.](#brook-dnsserveroverbrook-can-create-a-encrypted-dns-server-both-tcp-and-udp-it-works-with-brook-server-wsserver-wssserver) - * [brook tproxy Transparent Proxy Gateway on official OpenWrt](#brook-tproxy-transparent-proxy-gateway-on-official-openwrt) - * [brook tproxy Transparent Proxy Gateway on any Linux (wired)](#brook-tproxy-transparent-proxy-gateway-on-any-linux-wired) - * [GUI for official OpenWrt](#gui-for-official-openwrt) - * [brook relay can relay a address to a remote address. It can relay any tcp and udp server](#brook-relay-can-relay-a-address-to-a-remote-address-it-can-relay-any-tcp-and-udp-server) - * [brook socks5tohttp can convert a socks5 to a http proxy](#brook-socks5tohttp-can-convert-a-socks5-to-a-http-proxy) - * [brook pac creates pac server](#brook-pac-creates-pac-server) - * [brook pac creates pac file](#brook-pac-creates-pac-file) - * [There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube...](#there-are-countless-examples-for-more-feature-suggestions-its-best-to-look-at-the-commands-and-parameters-in-the-cli-documentation-one-by-one-and-blog-youtube) + * [Run brook server](#run-brook-server) + * [Run brook wsserver](#run-brook-wsserver) + * [Run brook wssserver: automatically certificate](#run-brook-wssserver-automatically-certificate) + * [Run brook wssserver Use a certificate issued by an existing trust authority](#run-brook-wssserver-use-a-certificate-issued-by-an-existing-trust-authority) + * [Run brook wssserver issue untrusted certificates yourself, any domain](#run-brook-wssserver-issue-untrusted-certificates-yourself-any-domain) + * [withoutBrookProtocol](#withoutbrookprotocol-1) + * [withoutBrookProtocol automatically certificate](#withoutbrookprotocol-automatically-certificate) + * [withoutBrookProtocol Use a certificate issued by an existing trust authority](#withoutbrookprotocol-use-a-certificate-issued-by-an-existing-trust-authority) + * [withoutBrookProtocol issue untrusted certificates yourself, any domain](#withoutbrookprotocol-issue-untrusted-certificates-yourself-any-domain) + * [Run brook socks5, A stand-alone standard socks5 server](#run-brook-socks5-a-stand-alone-standard-socks5-server) + * [Run brook socks5 with username and password. A stand-alone standard socks5 server](#run-brook-socks5-with-username-and-password-a-stand-alone-standard-socks5-server) + * [brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver.](#brook-relayoverbrook-can-relay-a-local-address-to-a-remote-address-over-brook-both-tcp-and-udp-it-works-with-brook-server-wsserver-wssserver) + * [brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver.](#brook-dnsserveroverbrook-can-create-a-encrypted-dns-server-both-tcp-and-udp-it-works-with-brook-server-wsserver-wssserver) + * [brook tproxy Transparent Proxy Gateway on official OpenWrt](#brook-tproxy-transparent-proxy-gateway-on-official-openwrt) + * [brook tproxy Transparent Proxy Gateway on any Linux (wired)](#brook-tproxy-transparent-proxy-gateway-on-any-linux-wired) + * [GUI for official OpenWrt](#gui-for-official-openwrt) + * [brook relay can relay a address to a remote address. It can relay any tcp and udp server](#brook-relay-can-relay-a-address-to-a-remote-address-it-can-relay-any-tcp-and-udp-server) + * [brook socks5tohttp can convert a socks5 to a http proxy](#brook-socks5tohttp-can-convert-a-socks5-to-a-http-proxy) + * [brook pac creates pac server](#brook-pac-creates-pac-server) + * [brook pac creates pac file](#brook-pac-creates-pac-file) + * [There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube...](#there-are-countless-examples-for-more-feature-suggestions-its-best-to-look-at-the-commands-and-parameters-in-the-cli-documentation-one-by-one-and-blog-youtube) * [例子](#例子) - * [运行 brook server](#运行-brook-server) - * [运行 brook wsserver](#运行-brook-wsserver) - * [运行 brook wssserver: 自动签发信任证书](#运行-brook-wssserver-自动签发信任证书) - * [运行 brook wssserver 使用已有的信任机构签发的证书](#运行-brook-wssserver-使用已有的信任机构签发的证书) - * [运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以](#运行-brook-wssserver-自己签发非信任证书-甚至不是你自己的域名也可以) - * [withoutBrookProtocol](#withoutbrookprotocol-2) - * [withoutBrookProtocol 自动签发信任证书](#withoutbrookprotocol-自动签发信任证书) - * [withoutBrookProtocol 使用已有的信任机构签发的证书](#withoutbrookprotocol-使用已有的信任机构签发的证书) - * [withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以](#withoutbrookprotocol-自己签发非信任证书-甚至不是你自己的域名也可以) - * [运行 brook socks5, 一个独立的标准 socks5 server](#运行-brook-socks5-一个独立的标准-socks5-server) - * [运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码](#运行-brook-socks5-一个独立的标准-socks5-server-指定用户名和密码) - * [brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作](#brook-relayoverbrook-中继任何-tcp-和-udp-server-让其走-brook-协议-它与-brook-server-wsserver-wssserver-一起工作) - * [brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作](#brook-dnsserveroverbrook-用来创建一个加密-dns-server-tcp-and-udp-它与-brook-server-wsserver-wssserver-一起工作) - * [brook tproxy 透明代理网关在官网原版 OpenWrt](#brook-tproxy-透明代理网关在官网原版-openwrt) - * [brook tproxy 透明代理网关在任意 Linux(有线)](#brook-tproxy-透明代理网关在任意-linux有线) - * [官网原版 OpenWrt 图形客户端](#官网原版-openwrt-图形客户端) - * [brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver](#brook-relay-可以中继任何-tcp-和-udp-server-这是一个独立的功能-它不依赖-brook-server-wsserver-wssserver) - * [brook socks5tohttp 将 socks5 proxy 转换为 http proxy](#brook-socks5tohttp-将-socks5-proxy-转换为-http-proxy) - * [brook pac 创建一个 pac server](#brook-pac-创建一个-pac-server) - * [brook pac 创建一个 pac 文件](#brook-pac-创建一个-pac-文件) - * [例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等...](#例子不胜枚举更多功能建议挨个看-cli-文档的命令和参数吧还有博客youtube-等) + * [运行 brook server](#运行-brook-server) + * [运行 brook wsserver](#运行-brook-wsserver) + * [运行 brook wssserver: 自动签发信任证书](#运行-brook-wssserver-自动签发信任证书) + * [运行 brook wssserver 使用已有的信任机构签发的证书](#运行-brook-wssserver-使用已有的信任机构签发的证书) + * [运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以](#运行-brook-wssserver-自己签发非信任证书-甚至不是你自己的域名也可以) + * [withoutBrookProtocol](#withoutbrookprotocol-2) + * [withoutBrookProtocol 自动签发信任证书](#withoutbrookprotocol-自动签发信任证书) + * [withoutBrookProtocol 使用已有的信任机构签发的证书](#withoutbrookprotocol-使用已有的信任机构签发的证书) + * [withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以](#withoutbrookprotocol-自己签发非信任证书-甚至不是你自己的域名也可以) + * [运行 brook socks5, 一个独立的标准 socks5 server](#运行-brook-socks5-一个独立的标准-socks5-server) + * [运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码](#运行-brook-socks5-一个独立的标准-socks5-server-指定用户名和密码) + * [brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作](#brook-relayoverbrook-中继任何-tcp-和-udp-server-让其走-brook-协议-它与-brook-server-wsserver-wssserver-一起工作) + * [brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作](#brook-dnsserveroverbrook-用来创建一个加密-dns-server-tcp-and-udp-它与-brook-server-wsserver-wssserver-一起工作) + * [brook tproxy 透明代理网关在官网原版 OpenWrt](#brook-tproxy-透明代理网关在官网原版-openwrt) + * [brook tproxy 透明代理网关在任意 Linux(有线)](#brook-tproxy-透明代理网关在任意-linux有线) + * [官网原版 OpenWrt 图形客户端](#官网原版-openwrt-图形客户端) + * [brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver](#brook-relay-可以中继任何-tcp-和-udp-server-这是一个独立的功能-它不依赖-brook-server-wsserver-wssserver) + * [brook socks5tohttp 将 socks5 proxy 转换为 http proxy](#brook-socks5tohttp-将-socks5-proxy-转换为-http-proxy) + * [brook pac 创建一个 pac server](#brook-pac-创建一个-pac-server) + * [brook pac 创建一个 pac 文件](#brook-pac-创建一个-pac-文件) + * [例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等...](#例子不胜枚举更多功能建议挨个看-cli-文档的命令和参数吧还有博客youtube-等) # Brook @@ -1236,7 +1236,7 @@ Shows a list of commands or help for one command List some examples of common scene commands, pay attention to replace the parameters such as IP, port, password, domain name, certificate path, etc. in the example by yourself -### Run brook server +## Run brook server ``` brook server --listen :9999 --password hello @@ -1259,7 +1259,7 @@ or get brook link with `--udpovertcp` brook link --server 1.2.3.4:9999 --password hello --udpovertcp --name 'my brook server' ``` -### Run brook wsserver +## Run brook wsserver ``` brook wsserver --listen :9999 --password hello @@ -1282,7 +1282,7 @@ or get brook link with domain, even if that's not your domain brook link --server ws://hello.com:9999 --password hello --address 1.2.3.4:9999 --name 'my brook wsserver' ``` -### Run brook wssserver: automatically certificate +## Run brook wssserver: automatically certificate > Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80 @@ -1301,7 +1301,7 @@ or get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### Run brook wssserver Use a certificate issued by an existing trust authority +## Run brook wssserver Use a certificate issued by an existing trust authority > Make sure your domain has been resolved to your server IP successfully @@ -1320,7 +1320,7 @@ or get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### Run brook wssserver issue untrusted certificates yourself, any domain +## Run brook wssserver issue untrusted certificates yourself, any domain Install [mad](https://github.com/txthinking/mad) @@ -1358,11 +1358,11 @@ or get brook link with `--ca` brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --address 1.2.3.4:443 --ca /root/ca.pem ``` -### withoutBrookProtocol +## withoutBrookProtocol Better performance, but data is not strongly encrypted using Brook protocol. So please use certificate encryption, and it is not recommended to use --withoutBrookProtocol and --insecure together -### withoutBrookProtocol automatically certificate +## withoutBrookProtocol automatically certificate > Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80 @@ -1376,7 +1376,7 @@ get brook link brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol ``` -### withoutBrookProtocol Use a certificate issued by an existing trust authority +## withoutBrookProtocol Use a certificate issued by an existing trust authority > Make sure your domain has been resolved to your server IP successfully @@ -1390,7 +1390,7 @@ get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --withoutBrookProtocol ``` -### withoutBrookProtocol issue untrusted certificates yourself, any domain +## withoutBrookProtocol issue untrusted certificates yourself, any domain Install [mad](https://github.com/txthinking/mad) @@ -1422,7 +1422,7 @@ Get brook link brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol --address 1.2.3.4:443 --ca /root/ca.pem ``` -### Run brook socks5, A stand-alone standard socks5 server +## Run brook socks5, A stand-alone standard socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 @@ -1438,7 +1438,7 @@ or get brook link brook link --server socks5://1.2.3.4:1080 ``` -### Run brook socks5 with username and password. A stand-alone standard socks5 server +## Run brook socks5 with username and password. A stand-alone standard socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world @@ -1456,19 +1456,19 @@ or get brook link brook link --server socks5://1.2.3.4:1080 --username hello --password world ``` -### brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver. +## brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver. ``` brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53 ``` -### brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver. +## brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver. ``` brook dnsserveroverbrook ... --listen 127.0.0.1:53 ``` -### brook tproxy Transparent Proxy Gateway on official OpenWrt +## brook tproxy Transparent Proxy Gateway on official OpenWrt **No need to manipulate iptables!** @@ -1485,7 +1485,7 @@ brook tproxy --link 'brook://...' --dnsListen :5353 2. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 3. By default, OpenWrt will automatically issue the IP of the router as gateway and DNS for your computers and mobiles -### brook tproxy Transparent Proxy Gateway on any Linux (wired) +## brook tproxy Transparent Proxy Gateway on any Linux (wired) **No need to manipulate iptables!** @@ -1501,7 +1501,7 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA Replace 192.168.1.2 with your Linux IP. You may need to manually configure the computer or mobile gateway and DNS. -### GUI for official OpenWrt +## GUI for official OpenWrt **No need to manipulate iptables!** @@ -1515,36 +1515,36 @@ port 9999, 8888, 5353 will be used. It work with brook server, brook wsserver, b 6. And OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 7. By default, OpenWrt will automatically issue the IP of the router as gateway and DNS for your computers and mobiles -### brook relay can relay a address to a remote address. It can relay any tcp and udp server +## brook relay can relay a address to a remote address. It can relay any tcp and udp server ``` brook relay --from :9999 --to 1.2.3.4:9999 ``` -### brook socks5tohttp can convert a socks5 to a http proxy +## brook socks5tohttp can convert a socks5 to a http proxy ``` brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010 ``` -### brook pac creates pac server +## brook pac creates pac server ``` brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### brook pac creates pac file +## brook pac creates pac file ``` brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube... +## There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube... # 例子 下面列举一些常用场景命令的例子, 注意自己替换示例中的 IP，端口，密码，域名，证书路径等参数 -### 运行 brook server +## 运行 brook server ``` brook server --listen :9999 --password hello @@ -1567,7 +1567,7 @@ brook link --server 1.2.3.4:9999 --password hello --name 'my brook server' brook link --server 1.2.3.4:9999 --password hello --udpovertcp --name 'my brook server' ``` -### 运行 brook wsserver +## 运行 brook wsserver ``` brook wsserver --listen :9999 --password hello @@ -1590,7 +1590,7 @@ brook link --server ws://1.2.3.4:9999 --password hello --name 'my brook wsserver brook link --server ws://hello.com:9999 --password hello --address 1.2.3.4:9999 --name 'my brook wsserver' ``` -### 运行 brook wssserver: 自动签发信任证书 +## 运行 brook wssserver: 自动签发信任证书 > 注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口 @@ -1609,7 +1609,7 @@ brook wssserver --domainaddress domain.com:443 --password hello brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### 运行 brook wssserver 使用已有的信任机构签发的证书 +## 运行 brook wssserver 使用已有的信任机构签发的证书 > 注意：确保你的域名已成功解析到你服务器的 IP @@ -1628,7 +1628,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### 运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以 +## 运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以 安装 [mad](https://github.com/txthinking/mad) @@ -1666,11 +1666,11 @@ brook link --server wss://domain.com:443 --password hello --name 'my brook wssse brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --address 1.2.3.4:443 --ca /root/ca.pem ``` -### withoutBrookProtocol +## withoutBrookProtocol 性能更好，但数据不使用 Brook 协议进行强加密。所以请使用证书加密，并且不建议--withoutBrookProtocol 和--insecure 一起使用 -### withoutBrookProtocol 自动签发信任证书 +## withoutBrookProtocol 自动签发信任证书 > 注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口 @@ -1684,7 +1684,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --withoutBrookPr brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol ``` -### withoutBrookProtocol 使用已有的信任机构签发的证书 +## withoutBrookProtocol 使用已有的信任机构签发的证书 > 注意：确保你的域名已成功解析到你服务器的 IP @@ -1698,7 +1698,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --withoutBrookProtocol ``` -### withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以 +## withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以 安装 [mad](https://github.com/txthinking/mad) @@ -1730,7 +1730,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol --address 1.2.3.4:443 --ca /root/ca.pem ``` -### 运行 brook socks5, 一个独立的标准 socks5 server +## 运行 brook socks5, 一个独立的标准 socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 @@ -1746,7 +1746,7 @@ brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 brook link --server socks5://1.2.3.4:1080 ``` -### 运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码 +## 运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码 ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world @@ -1764,19 +1764,19 @@ brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password brook link --server socks5://1.2.3.4:1080 --username hello --password world ``` -### brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作 +## brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作 ``` brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53 ``` -### brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作 +## brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作 ``` brook dnsserveroverbrook ... --listen 127.0.0.1:53 ``` -### brook tproxy 透明代理网关在官网原版 OpenWrt +## brook tproxy 透明代理网关在官网原版 OpenWrt **无需操作 iptables！** @@ -1793,7 +1793,7 @@ brook tproxy --link 'brook://...' --dnsListen :5353 2. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 3. 默認, OpenWrt 將會下發 router 的 IP 的為電腦或手機的網關和 DNS -### brook tproxy 透明代理网关在任意 Linux(有线) +## brook tproxy 透明代理网关在任意 Linux(有线) **无需操作 iptables！** @@ -1809,7 +1809,7 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA 替换 192.168.1.2 为你的 Linux 的IP. 配置其他机器的网关和 DNS 为这台机器的 IP 即可 -### 官网原版 OpenWrt 图形客户端 +## 官网原版 OpenWrt 图形客户端 **无需操作 iptables！** @@ -1823,28 +1823,28 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA 6. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 7. 默認, OpenWrt 將會下發 router 的 IP 為電腦或手機的網關和 DNS -### brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver +## brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver ``` brook relay --from :9999 --to 1.2.3.4:9999 ``` -### brook socks5tohttp 将 socks5 proxy 转换为 http proxy +## brook socks5tohttp 将 socks5 proxy 转换为 http proxy ``` brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010 ``` -### brook pac 创建一个 pac server +## brook pac 创建一个 pac server ``` brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### brook pac 创建一个 pac 文件 +## brook pac 创建一个 pac 文件 ``` brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### 例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等... +## 例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等... diff --git a/docs/example-zh.md b/docs/example-zh.md index cf932131..044ae37c 100644 --- a/docs/example-zh.md +++ b/docs/example-zh.md @@ -2,7 +2,7 @@ 下面列举一些常用场景命令的例子, 注意自己替换示例中的 IP，端口，密码，域名，证书路径等参数 -### 运行 brook server +## 运行 brook server ``` brook server --listen :9999 --password hello @@ -25,7 +25,7 @@ brook link --server 1.2.3.4:9999 --password hello --name 'my brook server' brook link --server 1.2.3.4:9999 --password hello --udpovertcp --name 'my brook server' ``` -### 运行 brook wsserver +## 运行 brook wsserver ``` brook wsserver --listen :9999 --password hello @@ -48,7 +48,7 @@ brook link --server ws://1.2.3.4:9999 --password hello --name 'my brook wsserver brook link --server ws://hello.com:9999 --password hello --address 1.2.3.4:9999 --name 'my brook wsserver' ``` -### 运行 brook wssserver: 自动签发信任证书 +## 运行 brook wssserver: 自动签发信任证书 > 注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口 @@ -67,7 +67,7 @@ brook wssserver --domainaddress domain.com:443 --password hello brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### 运行 brook wssserver 使用已有的信任机构签发的证书 +## 运行 brook wssserver 使用已有的信任机构签发的证书 > 注意：确保你的域名已成功解析到你服务器的 IP @@ -86,7 +86,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### 运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以 +## 运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以 安装 [mad](https://github.com/txthinking/mad) @@ -124,11 +124,11 @@ brook link --server wss://domain.com:443 --password hello --name 'my brook wssse brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --address 1.2.3.4:443 --ca /root/ca.pem ``` -### withoutBrookProtocol +## withoutBrookProtocol 性能更好，但数据不使用 Brook 协议进行强加密。所以请使用证书加密，并且不建议--withoutBrookProtocol 和--insecure 一起使用 -### withoutBrookProtocol 自动签发信任证书 +## withoutBrookProtocol 自动签发信任证书 > 注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口 @@ -142,7 +142,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --withoutBrookPr brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol ``` -### withoutBrookProtocol 使用已有的信任机构签发的证书 +## withoutBrookProtocol 使用已有的信任机构签发的证书 > 注意：确保你的域名已成功解析到你服务器的 IP @@ -156,7 +156,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --withoutBrookProtocol ``` -### withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以 +## withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以 安装 [mad](https://github.com/txthinking/mad) @@ -188,7 +188,7 @@ brook wssserver --domainaddress domain.com:443 --password hello --cert /root/cer brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol --address 1.2.3.4:443 --ca /root/ca.pem ``` -### 运行 brook socks5, 一个独立的标准 socks5 server +## 运行 brook socks5, 一个独立的标准 socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 @@ -204,7 +204,7 @@ brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 brook link --server socks5://1.2.3.4:1080 ``` -### 运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码 +## 运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码 ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world @@ -222,19 +222,19 @@ brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password brook link --server socks5://1.2.3.4:1080 --username hello --password world ``` -### brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作 +## brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作 ``` brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53 ``` -### brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作 +## brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作 ``` brook dnsserveroverbrook ... --listen 127.0.0.1:53 ``` -### brook tproxy 透明代理网关在官网原版 OpenWrt +## brook tproxy 透明代理网关在官网原版 OpenWrt **无需操作 iptables！** @@ -251,7 +251,7 @@ brook tproxy --link 'brook://...' --dnsListen :5353 2. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 3. 默認, OpenWrt 將會下發 router 的 IP 的為電腦或手機的網關和 DNS -### brook tproxy 透明代理网关在任意 Linux(有线) +## brook tproxy 透明代理网关在任意 Linux(有线) **无需操作 iptables！** @@ -267,7 +267,7 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA 替换 192.168.1.2 为你的 Linux 的IP. 配置其他机器的网关和 DNS 为这台机器的 IP 即可 -### 官网原版 OpenWrt 图形客户端 +## 官网原版 OpenWrt 图形客户端 **无需操作 iptables！** @@ -281,28 +281,28 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA 6. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 7. 默認, OpenWrt 將會下發 router 的 IP 為電腦或手機的網關和 DNS -### brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver +## brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver ``` brook relay --from :9999 --to 1.2.3.4:9999 ``` -### brook socks5tohttp 将 socks5 proxy 转换为 http proxy +## brook socks5tohttp 将 socks5 proxy 转换为 http proxy ``` brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010 ``` -### brook pac 创建一个 pac server +## brook pac 创建一个 pac server ``` brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### brook pac 创建一个 pac 文件 +## brook pac 创建一个 pac 文件 ``` brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### 例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等... +## 例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等... diff --git a/docs/example.md b/docs/example.md index cc61ba68..445d9cf6 100644 --- a/docs/example.md +++ b/docs/example.md @@ -2,7 +2,7 @@ List some examples of common scene commands, pay attention to replace the parameters such as IP, port, password, domain name, certificate path, etc. in the example by yourself -### Run brook server +## Run brook server ``` brook server --listen :9999 --password hello @@ -25,7 +25,7 @@ or get brook link with `--udpovertcp` brook link --server 1.2.3.4:9999 --password hello --udpovertcp --name 'my brook server' ``` -### Run brook wsserver +## Run brook wsserver ``` brook wsserver --listen :9999 --password hello @@ -48,7 +48,7 @@ or get brook link with domain, even if that's not your domain brook link --server ws://hello.com:9999 --password hello --address 1.2.3.4:9999 --name 'my brook wsserver' ``` -### Run brook wssserver: automatically certificate +## Run brook wssserver: automatically certificate > Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80 @@ -67,7 +67,7 @@ or get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### Run brook wssserver Use a certificate issued by an existing trust authority +## Run brook wssserver Use a certificate issued by an existing trust authority > Make sure your domain has been resolved to your server IP successfully @@ -86,7 +86,7 @@ or get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' ``` -### Run brook wssserver issue untrusted certificates yourself, any domain +## Run brook wssserver issue untrusted certificates yourself, any domain Install [mad](https://github.com/txthinking/mad) @@ -124,11 +124,11 @@ or get brook link with `--ca` brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --address 1.2.3.4:443 --ca /root/ca.pem ``` -### withoutBrookProtocol +## withoutBrookProtocol Better performance, but data is not strongly encrypted using Brook protocol. So please use certificate encryption, and it is not recommended to use --withoutBrookProtocol and --insecure together -### withoutBrookProtocol automatically certificate +## withoutBrookProtocol automatically certificate > Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80 @@ -142,7 +142,7 @@ get brook link brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol ``` -### withoutBrookProtocol Use a certificate issued by an existing trust authority +## withoutBrookProtocol Use a certificate issued by an existing trust authority > Make sure your domain has been resolved to your server IP successfully @@ -156,7 +156,7 @@ get brook link brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --withoutBrookProtocol ``` -### withoutBrookProtocol issue untrusted certificates yourself, any domain +## withoutBrookProtocol issue untrusted certificates yourself, any domain Install [mad](https://github.com/txthinking/mad) @@ -188,7 +188,7 @@ Get brook link brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol --address 1.2.3.4:443 --ca /root/ca.pem ``` -### Run brook socks5, A stand-alone standard socks5 server +## Run brook socks5, A stand-alone standard socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 @@ -204,7 +204,7 @@ or get brook link brook link --server socks5://1.2.3.4:1080 ``` -### Run brook socks5 with username and password. A stand-alone standard socks5 server +## Run brook socks5 with username and password. A stand-alone standard socks5 server ``` brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world @@ -222,19 +222,19 @@ or get brook link brook link --server socks5://1.2.3.4:1080 --username hello --password world ``` -### brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver. +## brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver. ``` brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53 ``` -### brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver. +## brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver. ``` brook dnsserveroverbrook ... --listen 127.0.0.1:53 ``` -### brook tproxy Transparent Proxy Gateway on official OpenWrt +## brook tproxy Transparent Proxy Gateway on official OpenWrt **No need to manipulate iptables!** @@ -251,7 +251,7 @@ brook tproxy --link 'brook://...' --dnsListen :5353 2. OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 3. By default, OpenWrt will automatically issue the IP of the router as gateway and DNS for your computers and mobiles -### brook tproxy Transparent Proxy Gateway on any Linux (wired) +## brook tproxy Transparent Proxy Gateway on any Linux (wired) **No need to manipulate iptables!** @@ -267,7 +267,7 @@ brook tproxy --link 'brook://...' --dnsListen 192.168.1.2:53 --disableAAAA Replace 192.168.1.2 with your Linux IP. You may need to manually configure the computer or mobile gateway and DNS. -### GUI for official OpenWrt +## GUI for official OpenWrt **No need to manipulate iptables!** @@ -281,28 +281,28 @@ port 9999, 8888, 5353 will be used. It work with brook server, brook wsserver, b 6. And OpenWrt Ignore resolve file: OpenWrt Web -> Network -> DHCP and DNS -> Resolv and Hosts Files -> Ignore resolve file 7. By default, OpenWrt will automatically issue the IP of the router as gateway and DNS for your computers and mobiles -### brook relay can relay a address to a remote address. It can relay any tcp and udp server +## brook relay can relay a address to a remote address. It can relay any tcp and udp server ``` brook relay --from :9999 --to 1.2.3.4:9999 ``` -### brook socks5tohttp can convert a socks5 to a http proxy +## brook socks5tohttp can convert a socks5 to a http proxy ``` brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010 ``` -### brook pac creates pac server +## brook pac creates pac server ``` brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### brook pac creates pac file +## brook pac creates pac file ``` brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ... ``` -### There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube... +## There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube... diff --git a/docs/index.html b/docs/index.html index e06a28cc..6672e8b5 100644 --- a/docs/index.html +++ b/docs/index.html @@ -3539,8 +3539,8 @@

List some examples of common scene commands, pay attention to replace the parameters such as IP, port, password, domain name, certificate path, etc. in the example by yourself

-

-Run brook server

+

+Run brook server

brook server --listen :9999 --password hello
@@ -3561,8 +3561,8 @@

-Run brook wsserver

+

+Run brook wsserver

brook wsserver --listen :9999 --password hello
@@ -3583,8 +3583,8 @@

-Run brook wssserver: automatically certificate

+

+Run brook wssserver: automatically certificate

Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80

@@ -3604,8 +3604,8 @@

brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' -

-Run brook wssserver Use a certificate issued by an existing trust authority

+

+Run brook wssserver Use a certificate issued by an existing trust authority

Make sure your domain has been resolved to your server IP successfully

@@ -3625,8 +3625,8 @@

-Run brook wssserver issue untrusted certificates yourself, any domain

+

+Run brook wssserver issue untrusted certificates yourself, any domain

Install mad

@@ -3657,12 +3657,12 @@

-withoutBrookProtocol

+

+withoutBrookProtocol

Better performance, but data is not strongly encrypted using Brook protocol. So please use certificate encryption, and it is not recommended to use --withoutBrookProtocol and --insecure together

-

-withoutBrookProtocol automatically certificate

+

+withoutBrookProtocol automatically certificate

Make sure your domain has been resolved to your server IP successfully. Automatic certificate issuance requires the use of port 80

@@ -3675,8 +3675,8 @@

brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol -

-withoutBrookProtocol Use a certificate issued by an existing trust authority

+

+withoutBrookProtocol Use a certificate issued by an existing trust authority

Make sure your domain has been resolved to your server IP successfully

@@ -3689,8 +3689,8 @@

-withoutBrookProtocol issue untrusted certificates yourself, any domain

+

+withoutBrookProtocol issue untrusted certificates yourself, any domain

Install mad

@@ -3716,8 +3716,8 @@

-Run brook socks5, A stand-alone standard socks5 server

+

+Run brook socks5, A stand-alone standard socks5 server

brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4
@@ -3732,8 +3732,8 @@

-Run brook socks5 with username and password. A stand-alone standard socks5 server

+

+Run brook socks5 with username and password. A stand-alone standard socks5 server

brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world
@@ -3750,18 +3750,18 @@

-brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver.

+

+brook relayoverbrook can relay a local address to a remote address over brook, both TCP and UDP, it works with brook server wsserver wssserver.

brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53
-

-brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver.

+

+brook dnsserveroverbrook can create a encrypted DNS server, both TCP and UDP, it works with brook server wsserver wssserver.

brook dnsserveroverbrook ... --listen 127.0.0.1:53
-

-brook tproxy Transparent Proxy Gateway on official OpenWrt

+

+brook tproxy Transparent Proxy Gateway on official OpenWrt

No need to manipulate iptables!

@@ -3777,8 +3777,8 @@

-brook tproxy Transparent Proxy Gateway on any Linux (wired)

+

+brook tproxy Transparent Proxy Gateway on any Linux (wired)

No need to manipulate iptables!

@@ -3791,8 +3791,8 @@

-GUI for official OpenWrt

+

+GUI for official OpenWrt

No need to manipulate iptables!

@@ -3807,34 +3807,34 @@

-brook relay can relay a address to a remote address. It can relay any tcp and udp server

+

+brook relay can relay a address to a remote address. It can relay any tcp and udp server

brook relay --from :9999 --to 1.2.3.4:9999
-

-brook socks5tohttp can convert a socks5 to a http proxy

+

+brook socks5tohttp can convert a socks5 to a http proxy

brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010
-

-brook pac creates pac server

+

+brook pac creates pac server

brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ...
-

-brook pac creates pac file

+

+brook pac creates pac file

brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ...
-

-There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube...

+

+There are countless examples; for more feature suggestions, it's best to look at the commands and parameters in the CLI documentation one by one, and blog, YouTube...

例子

下面列举一些常用场景命令的例子, 注意自己替换示例中的 IP，端口，密码，域名，证书路径等参数

-

-运行 brook server

+

+运行 brook server

brook server --listen :9999 --password hello
@@ -3855,8 +3855,8 @@

-运行 brook wsserver

+

+运行 brook wsserver

brook wsserver --listen :9999 --password hello
@@ -3877,8 +3877,8 @@

-运行 brook wssserver: 自动签发信任证书

+

+运行 brook wssserver: 自动签发信任证书

注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口

@@ -3898,8 +3898,8 @@

brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' -

-运行 brook wssserver 使用已有的信任机构签发的证书

+

+运行 brook wssserver 使用已有的信任机构签发的证书

注意：确保你的域名已成功解析到你服务器的 IP

@@ -3919,8 +3919,8 @@

brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' -

-运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以

+

+运行 brook wssserver 自己签发非信任证书, 甚至不是你自己的域名也可以

安装 mad

@@ -3951,12 +3951,12 @@

-withoutBrookProtocol

+

+withoutBrookProtocol

性能更好，但数据不使用 Brook 协议进行强加密。所以请使用证书加密，并且不建议--withoutBrookProtocol 和--insecure 一起使用

-

-withoutBrookProtocol 自动签发信任证书

+

+withoutBrookProtocol 自动签发信任证书

注意：确保你的域名已成功解析到你服务器的 IP, 自动签发证书需要额外监听 80 端口

@@ -3969,8 +3969,8 @@

brook link --server wss://domain.com:443 --password hello --withoutBrookProtocol -

-withoutBrookProtocol 使用已有的信任机构签发的证书

+

+withoutBrookProtocol 使用已有的信任机构签发的证书

注意：确保你的域名已成功解析到你服务器的 IP

@@ -3983,8 +3983,8 @@

brook link --server wss://domain.com:443 --password hello --name 'my brook wssserver' --withoutBrookProtocol -

-withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以

+

+withoutBrookProtocol 自己签发非信任证书, 甚至不是你自己的域名也可以

安装 mad

@@ -4010,8 +4010,8 @@

-运行 brook socks5, 一个独立的标准 socks5 server

+

+运行 brook socks5, 一个独立的标准 socks5 server

brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4
@@ -4026,8 +4026,8 @@

-运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码

+

+运行 brook socks5, 一个独立的标准 socks5 server, 指定用户名和密码

brook socks5 --listen :1080 --socks5ServerIP 1.2.3.4 --username hello --password world
@@ -4044,18 +4044,18 @@

-brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作

+

+brook relayoverbrook 中继任何 TCP 和 UDP server, 让其走 brook 协议. 它与 brook server wsserver wssserver 一起工作

brook relayoverbrook ... --from 127.0.0.1:5353 --to 8.8.8.8:53
-

-brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作

+

+brook dnsserveroverbrook 用来创建一个加密 DNS Server, TCP and UDP, 它与 brook server wsserver wssserver 一起工作

brook dnsserveroverbrook ... --listen 127.0.0.1:53
-

-brook tproxy 透明代理网关在官网原版 OpenWrt

+

+brook tproxy 透明代理网关在官网原版 OpenWrt

无需操作 iptables！

@@ -4071,8 +4071,8 @@

-brook tproxy 透明代理网关在任意 Linux(有线)

+

+brook tproxy 透明代理网关在任意 Linux(有线)

无需操作 iptables！

@@ -4085,8 +4085,8 @@

-官网原版 OpenWrt 图形客户端

+

+官网原版 OpenWrt 图形客户端

无需操作 iptables！

@@ -4101,28 +4101,28 @@

-brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver

+

+brook relay 可以中继任何 TCP 和 UDP server, 这是一个独立的功能, 它不依赖 brook server wsserver wssserver

brook relay --from :9999 --to 1.2.3.4:9999
-

-brook socks5tohttp 将 socks5 proxy 转换为 http proxy

+

+brook socks5tohttp 将 socks5 proxy 转换为 http proxy

brook socks5tohttp --socks5 127.0.0.1:1080 --listen 127.0.0.1:8010
-

-brook pac 创建一个 pac server

+

+brook pac 创建一个 pac server

brook pac --listen 127.0.0.1:8080 --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ...
-

-brook pac 创建一个 pac 文件

+

+brook pac 创建一个 pac 文件

brook pac --file proxy.pac --proxy 'SOCKS5 127.0.0.1:1080; SOCKS 127.0.0.1:1080; DIRECT' --bypassDomainList ...
-

-例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等...

+

+例子不胜枚举，更多功能建议挨个看 CLI 文档的命令和参数吧，还有博客，YouTube 等...