README.md

README.md

@@ -41,15 +41,16 @@ stream {
     }
 
     upstream shadow{
-        server 127.0.0.1:2443;
+        server 127.0.2.1:2443;
     }
     upstream local_server{
-        server 127.0.0.1:8443;
+        server 127.0.2.1:8443;
     }
 
     server {
         listen 443;
         ssl_preread on;
+        proxy_bind $remote_addr transparent; # 加了这个才能传递客户端IP
         proxy_pass $backend_pool;
         proxy_connect_timeout 15s;
         proxy_timeout 15s;
@@ -63,12 +64,14 @@ http {
 ...
 
     server {
-        listen       127.0.0.1:8443 ssl http2;
+        listen       127.0.2.1:8443 ssl http2;
         server_name  file.evan.run;
         charset utf-8;
 
         ssl_certificate      cert.crt;
         ssl_certificate_key  private.key;
+        
+        port_in_redirect off; #重要：阻止nginx重定向到此Server listen的端口
 
         location / {
             root /root/file;
@@ -81,6 +84,12 @@ http {
 
 ```
 
+- 添加策略路由:
+```shell
+ip rule add from 127.0.2.1 lookup 61
+ip route add local 0.0.0.0/0 dev lo table 61
+```
+
 ## 特别说明
 - 感谢v2ex网友ihciah的思路灵感.
 - 仅供技术研究,请勿用于非法用途.