explaingit

haoel/haoel.github.io

13,048ShellAudience · ops devopsComplexity · 3/5Setup · hard

TLDR

A detailed Chinese-language guide for setting up your own private proxy server on a foreign VPS to access blocked websites, covering server selection, Docker-based setup, and client apps on all devices.

Mindmap

mindmap
  root((haoel proxy guide))
    Server setup
      VPS selection
      CN2 GIA routes
      TCP BBR tuning
    Proxy tools
      Gost over HTTPS
      Shadowsocks
      Cloudflare WARP
    Client config
      Clash desktop
      Android iOS apps
      Chrome settings
    Advanced setups
      Raspberry Pi gateway
      SSH tunneling
      AWS data center
Click or tap to explore — scroll the page freely

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Things people build with this

USE CASE 1

Set up a self-hosted HTTPS proxy server on a foreign VPS using Docker and Gost to access blocked websites privately.

USE CASE 2

Configure a Raspberry Pi or home router as a transparent proxy gateway so all household devices route through your server.

USE CASE 3

Install Clash on Windows, Mac, or Linux and point it at your self-hosted proxy for system-wide routing.

USE CASE 4

Enable TCP BBR congestion control on the server to improve proxy connection speed and stability.

Tech stack

ShellDockerGostShadowsocksClashCloudflare

Getting it running

Difficulty · hard Time to first run · 1h+

Requires purchasing a foreign VPS and registering a domain name, SSL certificate setup adds extra steps.

In plain English

This is a technical guide written in Chinese for setting up a self-hosted proxy server to access websites blocked in mainland China. The guide covers the full process from buying a virtual private server (VPS) abroad to configuring proxy software and client apps on phones, tablets, and computers. The author begins by recommending self-hosting over commercial shared proxy services, citing privacy concerns and the higher risk of shared services being shut down. The guide then walks through choosing a VPS provider, including options such as AWS LightSail, Microsoft Azure, Google Cloud, Oracle Cloud, and budget providers like BandwagonHost and RackNerd. It advises choosing servers in Hong Kong, Japan, Singapore, or the US, and explains the difference between CN2 GT and CN2 GIA network routes, with CN2 GIA recommended for better stability and speed from China. The proxy setup uses Docker to run an HTTPS-based forwarding service through a tool called Gost, paired with enabling TCP BBR congestion control on the server for better performance. Shadowsocks and L2TP/IPSec are mentioned but flagged as not recommended due to detection risk. The guide also covers registering a domain name and obtaining a free SSL certificate to disguise proxy traffic as ordinary HTTPS. Client configuration is covered for Chrome browser proxy settings, Clash (a cross-platform proxy client for Windows, Mac, and Linux), and mobile apps for Android and iOS. Later sections address handling blocked IP addresses, setting up a home router or Raspberry Pi as a transparent gateway, data center gateway setups for AWS environments, SSH tunneling, and Cloudflare WARP as an alternative. This is a detailed reference document in Chinese aimed at technically capable users who need private internet access from a restricted network environment. The full README is longer than what was shown.

Copy-paste prompts

Prompt 1
Walk me through setting up a Gost HTTPS proxy server on an Oracle Cloud free-tier VPS following the haoel guide.
Prompt 2
How do I configure Clash on macOS to use my self-hosted Gost proxy server?
Prompt 3
Set up a Raspberry Pi as a transparent proxy gateway using the steps in haoel's guide.
Prompt 4
What is the difference between CN2 GT and CN2 GIA network routes, and which should I choose for a VPS from China?
Prompt 5
Show me how to get a free SSL certificate and configure Gost so my proxy traffic looks like ordinary HTTPS.
Open on GitHub → Explain another repo

← haoel on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.