- Download The SSEncrypt Module form URL below
https://raw.githubusercontent.com/Unbinilium/Surge/master/SSEncrypt.module
- Only the Proxy part and you are suppose to fill SeverIP、ServerPort、EncryptMethod and Paddword manually
[Proxy]
Shadowsocks = custom,ServerIP,ServerPort,EncryptMethod,Password,https://raw.githubusercontent.com/Unbinilium/Surge/master/SSEncrypt.module
- If you are using simple-obfs, Please try this example after fill ObfsMethod and ObfsHost manually
custom,ServerIP,ServerPort,EncryptMethod,Password,https://raw.githubusercontent.com/Unbinilium/Surge/master/SSEncrypt.module,obfs=ObfsMethod,obfs-host=ObfsHost
- Now only supported these Stream Ciphers for encrypt methods
rc4
rc4-md5
rc2-cfb
bf-cfb
des-cfb
idea-cfb
seed-cfb
cast5-cfb
camellia-128-cfb
camellia-192-cfb
camellia-256-cfb
aes-128-cfb
aes-192-cfb
aes-256-cfb
aes-128-ctr
aes-192-ctr
aes-256-ctr
salsa20
chacha20
chacha20-ietf
- These AEAD Ciphers are recommend to you instead of the Stream Ciphers
aes-128-gcm
aes-192-gcm
aes-256-gcm
chacha20-ietf-poly1305
- Now supported these obfs method
http
tls
- Also the default obfs-host is here if you leave there free. Recommend to use CDN domains which are not blocked. It related with your server side configurations
cloudfront.com
- For better security, use these cipher as possible as you can AEAD (Authenticated Encryption with Associated Data)
aes-128-gcm
aes-192-gcm
aes-256-gcm
chacha20-ietf-poly1305
xchacha20-ietf-poly1305
- Add a TLS obfs and change the default obfs-host
- Try to use TCP Fast Open by add the perfix
,tfo=true
in the end of the line in the Proxy configurations
- View official Surge Manual Guides