SS-end encryption and obfs confusion

SS is currently the most recommended end encryption and obfs confusion as follows:
Recommended encryption: aes-256-gcm, chacha20-ietf-poly1305, aes-128-gcm, aes-192-gcm
(Ranking points have) recommended confusion obfs: preferred http, second best tls

Note: The encryption method is recommended because AEAD itself has new features, in addition to the main recommendation aes-256-gcm because this encryption devices can be found most mainstream hardware encryption and decryption, reducing dependence system performance resources.

Theoretically tls confused way is the best, but to record Unicom Internet the most intuitive results, use the tls domain name to confuse cause confusion "Invalid" is displayed directly proxy server IP, http and confusing domain name can be displayed properly, reach at least look the camouflage effect, so, for now, it is recommended to use http confusion.

 

In summary:
SS Top encryption: aes-256-gcm, best obfs: http

 

SSR end most recommended encryption protocol and obfs confusion as follows:

Recommended encryption: chacha20-ietf, aes-128-ctr and other

Recommended best agreement: auth_sha1_v4_compatible and other

Recommended Best confusion: tls1.2_ticket_auth_compatible and

For now integrated network environment, the above recommendation is already Top, the best combination. Why not auth_chain_a or b? The answer is simple, these two protocols on the server is not recommended above protocol stable, and more consumption of system resources, in the face of the client under different network environments as there will be an unstable situation this is why some people feel confused than ever by the agreement are good, and some people use it will be slower.

SS compatible with _compatible represents the original agreement, which is the server without modification agreement with confusion, as long as the client protocol instead origin; confuse changed plain, then it became the SS. This is extremely important when using the SSR service game to play outside because of the increased agreement will increase the confusion and delay some strange questions, suggestions according to the above modifications when all service game to play outside: protocol instead origin, confused changed plain.

 

note! SS, obfs confusion when playing outside the service game is also recommended to none! ! !

Guess you like

Origin www.cnblogs.com/Lyingji/p/11414156.html