Blitz-Proxy/README.md

Hysteria2

Make dir and wget the latest version of Hysteria 2 compatible with your server.

mkdir hysteria

cd hysteria

wget https://github.com/apernet/hysteria/releases/download/app%2Fv2.4.4/hysteria-linux-amd64

Command to change kernel permissions:

chmod 755 hysteria-linux-amd64

SSL

Commands to generate and sign a certificate:

openssl ecparam -genkey -name prime256v1 -out ca.key

openssl req -new -x509 -days 36500 -key ca.key -out ca.crt -subj "/CN=bing.com"

Extract the SHA-256 fingerprint:

openssl x509 -noout -fingerprint -sha256 -inform pem -in ca.crt

example result:

sha256 Fingerprint=6F:CX:9A:FE:32:2B:J9:8V:.............

sha256-key

import re
import base64
import binascii

hex_string = "sha256 Fingerprint=6F:CX:9A:FE:32:2B:J9:8V:............."
hex_string = re.sub(r"sha256 Fingerprint=", "", hex_string)
hex_string = re.sub(r":", "", hex_string)
binary_data = binascii.unhexlify(hex_string)
base64_encoded = base64.b64encode(binary_data).decode('utf-8')

print("sha256/" +base64_encoded)

Create the generate.py file with the nano editor

nano generate.py

Copy the code above and replace the placeholder with your own SHA-256 fingerprint

And run the file with the command:

python3 generate.py

example result : sha256/CMn3/tZqjIRUnclf0mFi/bOq7radMYjrOqLxlxqfXFN0=

Now use the sha256-key in the config file (pinSHA256).

Config

Downloading the config.yaml file using wget on the server

wget https://raw.githubusercontent.com/H-Return/Hysteria2/main/config.yaml

Open the config.yaml file with an editor like nano or vim.

Fill in the following values carefully in the config.yaml file:

• port: 74821 or any port you want to use

• sha256-key : Use the sha256-key from the sha256-key section obtained with the Python script

• obfspassword : Use this website to generate a password

• authpassword : Use this website to generate a password

• UUID To generate a UUID for the trafficStats section, use this website

System file

Building a Systemd Service File:

nano /etc/systemd/system/Hysteria.service

Code:

[Unit]
After=network.target nss-lookup.target

[Service]
User=root
WorkingDirectory=/root
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW
ExecStart=/path/hysteria/hysteria-linux-amd64 server -c /path/hysteria/config.yaml
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=5
LimitNOFILE=infinity

[Install]
WantedBy=multi-user.target

Install and enable the service:

sudo systemctl daemon-reload

sudo systemctl enable hysteria.service

sudo systemctl start hysteria.service

URI Scheme

hy2://authpassword@IP:Port?obfs=salamander&obfs-password=obfspassword&pinSHA256=sha256-key&insecure=1&sni=bing.com#Hysteria2

Import values from the config.yaml file:

• authpassword
• IP enter your server IP
• port
• obfspassword
• sha256-key