网址:sing-box

https://sing-box.sagernet.org/zh/manual/proxy/client/#introduction

1- Server

To use sing-box as a proxy protocol server, you pretty much only need to configure the inbound for that protocol.

要使用 sing-box 作为代理协议服务器，您几乎只需要配置该协议的入站即可。

The Proxy Protocol menu below contains descriptions and configuration examples of recommended protocols for bypassing GFW.
下面的代理协议菜单包含用于绕过 GFW 的推荐协议的描述和配置示例。

Introduction 介绍

For a long time, the modern usage and principles of proxy clients for graphical operating systems have not been clearly described. However, we can categorize them into three types: system proxy, firewall redirection, and virtual interface.
长期以来，图形操作系统代理客户端的现代用法和原理一直没有被清楚地描述。但是，我们可以将它们分为三种类型：系统代理，防火墙重定向和虚拟接口。

Client 客户端

System Proxy 系统代理

Almost all graphical environments support system-level proxies, which are essentially ordinary HTTP proxies that only support TCP.
几乎所有的图形环境都支持系统级代理，这些代理本质上是只支持TCP的普通HTTP代理。

As one of the most well-known proxy methods, it has many shortcomings: many TCP clients that are not based on HTTP do not check and use the system proxy. Moreover, UDP and ICMP traffics bypass the proxy.
作为最著名的代理方法之一，它有很多缺点：许多不基于HTTP的TCP客户端不检查和使用系统代理。此外，UDP和UDP流量绕过代理。

Firewall Redirection 防火墙重定向

This type of usage typically relies on the firewall or hook interface provided by the operating system, such as Windows’ WFP, Linux’s redirect, TProxy and eBPF, and macOS’s pf. Although it is intrusive and cumbersome to configure, it remains popular within the community of amateur proxy open source projects like V2Ray, due to the low technical requirements it imposes on the software.
这种类型的使用通常依赖于操作系统提供的防火墙或钩子接口，例如Windows的WFP，Linux的重定向，TProxy和eBPF以及macOS的pf。尽管它是侵入性的，配置起来很麻烦，但由于它对软件的技术要求很低，它仍然在业余代理开源项目社区中很受欢迎，如V2 Ray。

Virtual Interface 虚拟接口

All L2/L3 proxies (seriously defined VPNs, such as OpenVPN, WireGuard) are based on virtual network interfaces, which is also the only way for all L4 proxies to work as VPNs on mobile platforms like Android, iOS.
所有L2/L3代理（严格定义的VPN，如OpenVPN，WireGuard）都基于虚拟网络接口，这也是所有L4代理在Android，iOS等移动的平台上作为VPN工作的唯一方法。

The sing-box inherits and develops clash-premium’s TUN inbound (L3 to L4 conversion) as the most reasonable method for performing transparent proxying.
sing-box继承并发展了clash-premium的TUN入站（L3到L4转换），作为执行透明加密的最合理方法。

Examples 示例

Basic TUN usage for Chinese users

中国用户的基本TUN用法