---
version: "3"
services:
3x-ui:
image: ghcr.io/mhsanaei/3x-ui:latest
container_name: 3x-ui
hostname: yourhostname
volumes:
- $PWD/db/:/etc/x-ui/
- $PWD/cert/:/root/cert/
environment:
XRAY_VMESS_AEAD_FORCED: "false"
tty: true
network_mode: host
restart: unless-stopped
На основе SNI - используйте другой протокол, например вебсокет
iptables -t nat -A PREROUTING -p tcp -d 10.0.0.1 --dport 22 -j ACCEPT
ipset -N list nethash
ipset -A list 2.2.2.2/32
iptables -t nat -A PREROUTING -p tcp -d 10.0.0.1 -m set --match-set list src,dst -j ACCEPT
iptables -t nat -A PREROUTING -p tcp -d 10.0.0.1 -j DNAT --to-destination 10.0.0.2
iptables -t nat -A POSTROUTING -p tcp --dst 10.0.0.2 -j SNAT --to-source 10.0.0.1
ipset -N list nethash
iptables -t list -L -v -n -x
ipset -N list nethash
iptables -t nat -A PREROUTING -p tcp -d xxx.xxx.xxx.xxx -m set --match-set list src -j ACCEPT