xray-v2ray-trojan-docker

Easy docker deployment for XRAY, V2ray (vmess/vless on WS) and Trojan all behind automatic TLS provided by Traefik proxy

A client's connection to the VPS (virtual private server) is visualized in the following diagram. The relations between the services are also shown.

Requirements

Follow through these steps to have a working VPN with trojan, v2ray and xray at the same time on your VPS.

1. Buy a VPS, with a late Ubuntu LTS. LTS means long-term support edition.

2. Connect to the VPS using a SSH client such as MobaXterm, Putty, or whatever you prefer.

3. Update the Ubuntu packages

   # Install the latest updates
   apt-get update

4. Install docker the easy way.

   # Install curl
   apt-get install curl -y
   # Download Docker
   curl -fsSL get.docker.com -o get-docker.sh
   # Install Docker using the stable channel (instead of the default "edge")
   CHANNEL=stable sh get-docker.sh
   # Remove install script
   rm get-docker.sh

5. Buy a domain name or use a subdomain from free services such as DuckDns or afraid.org.

6. Have 3 subdomains ready, all pointing to your VPS IP address. Replace my.domain.com with the first for trojan, my2.domain.com with the second for v2ray (VMess and VLess protocols), and my3.domain.com with the third name for XRay protocol in the docker-compose.yml file. Domain names are only configured in docker script.

Configuring Trojan

Trojan requires two things, one is the domain name that is configured previously in docker-compose.yml in two locations (one in labels and the other in volumes section). The other is the trojan password that you choose for yourself and set it in trojan.json in "PASSWORD HERE".

Configuring V2ray

V2ray configuration is similar to trojan. The domain name is configured in Requirements section. The other configuration is for client's UUID's which can be generated online using uuidgenerator, for example. If you want two VMess clients, edit the v2ray.json and replace "UUID0 here" and "UUID1 HERE" with your generated codes. To have VLess protocol, change the "UUID2 HERE" with another UUID. Note that the alterID must be uniquely set for all VMess and VLess clients. In the sample v2ray.json, you have 3 clients with alterID's 0, 1 and 2.

XRay Configuration

XRay configuration is a bit different. UUID is generated just the following command and replaced over "UUID HERE" in xray.json:

docker run -it teddysun/xray:1.8.3 /usr/bin/xray uuid -i SECRET

Where SECRET is a chosen random number. To generate short ID (for "SHORT ID HERE" in json file), use OpenSSL as follows:

openssl rand -hex 8

To create a public/private key pair run the following command:

docker run -it teddysun/xray:1.8.3 /usr/bin/xray x25519

Save both keys for reference, public key is used in the xray client, and private key is overwritten on "PRIVATE KEY HERE" in the xray.json file.

Running the Script

To run the script, set an email for Let's Encrypt in the environment variables:

export EMAIL=help@domain.com

and run the script as follows:

docker-compose up -d

-d is for detached mode where the console is detached from the docker command. You can run without it to see the output from all services and debug the whole process. If the domain names are correctly pointing to your VPS, the traefik service will produce the SSL certificates automatically and the services are ready to use it. You may need to run the script multiple times initially, because the SSL files are not generated immediately and some services such as trojan depend on them to work properly.

Final Notes

I prefer trojan to v2ray and xray and have used it personally for more than a year without a glitch. The VLess and VMess protocols maybe subject to active discovery and have witnessed disruption on them. I highly advise the above docker-compose.yml script that configures SSL automatically and protects VMESS and VLESS in insecure settings (abnormal ports or without SSL).