Skip to content

SKILL.md

Latest commit

 

History

History
170 lines (127 loc) · 4.94 KB

SKILL.md

File metadata and controls

170 lines (127 loc) · 4.94 KB
name suiwarp
description Deploy S-UI + Cloudflare WARP proxy server in one command. 6 protocols (VLESS Reality, TUIC, Hysteria2, gRPC, Trojan, WebSocket), clean Cloudflare IP exit via wireproxy (~54MB RAM). Use when the user wants to set up a proxy server, VPN alternative, or network tunnel on a VPS.
license MIT

SUIWARP — S-UI + Cloudflare WARP One-Liner

Deploy a multi-protocol proxy server with clean Cloudflare IP exit on any VPS.

When to Use

Activate when the user wants to:

  • Deploy a proxy / tunnel / VPN alternative on a VPS
  • Set up S-UI or sing-box with WARP
  • Configure VLESS Reality, TUIC, Hysteria2, or other protocols
  • Get a clean exit IP via Cloudflare WARP
  • Audit or fix an existing S-UI installation

Architecture

Client → S-UI (sing-box, 6 protocols) → wireproxy (SOCKS5 ~4MB) → Cloudflare WARP → Clean Exit IP
Protocol Port Best For
VLESS Reality Vision 443/tcp Daily use (most covert)
TUIC v5 443/udp Gaming (low latency)
Hysteria2 8443/udp Streaming (max speed)
VLESS Reality gRPC 2053/tcp Multiplexing (stable)
Trojan Reality 8880/tcp Classic fallback
VLESS Reality WS 2083/tcp CDN/firewall bypass
VLESS CDN WS 2052/tcp IP hidden behind Cloudflare CDN
ShadowTLS v3 + SS2022 9443/tcp Anti-DPI stealth (looks like real TLS)
VLESS HTTPUpgrade 10443/tcp Stealth HTTP transport with Reality
Hysteria2 Port Hopping 20000-40000/udp Anti-QoS, port randomization

Deployment

One-Liner (Recommended)

SSH into the target server as root, then run:

bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)

This handles everything automatically:

  1. System dependencies + swap (for low-RAM VPS)
  2. S-UI installation with 6 protocol inbounds
  3. Reality keypair generation
  4. Free Cloudflare WARP registration via wgcf
  5. wireproxy setup (WireGuard → SOCKS5, ~4MB RAM)
  6. S-UI outbound routing through WARP
  7. UFW firewall configuration
  8. Client link generation

Remote Deployment via SSH

If the user provides server credentials, deploy remotely:

ssh root@SERVER_IP 'bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)'

For password-only servers:

sshpass -p 'PASSWORD' ssh -o StrictHostKeyChecking=no root@SERVER_IP \
  'bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)'

Requirements

  • OS: Ubuntu 20.04+ / Debian 11+ (x86_64 or ARM64)
  • RAM: 1GB minimum (512MB usable after OS)
  • Access: Root SSH

Post-Deploy

After setup completes:

  1. Client links are at /root/suiwarp-client-links.txt
  2. S-UI panel is at http://SERVER_IP:2095/app/ (default: admin/admin — remind user to change!)
  3. Subscription URL is at http://SERVER_IP:2096/sub/

Verify WARP

# Direct IP
curl ifconfig.me

# WARP exit IP (should be Cloudflare)
curl -x socks5h://127.0.0.1:40000 ifconfig.me

Troubleshooting

sing-box won't start

Check logs: journalctl -u s-ui -n 20

Common causes:

  • out_json type mismatch: If DB was manually edited, out_json column must be blob (bytes), not string. Fix with Python: 
    cur.execute("UPDATE inbounds SET out_json=? WHERE id=?", (json.dumps(data).encode("utf-8"), rid))
  • outbound type not found: wireguard: S-UI 1.4.0 sing-box doesn't include WireGuard. Use the wireproxy SOCKS5 approach instead.

WARP not connecting

systemctl status wireproxy-warp
journalctl -u wireproxy-warp -n 20

If endpoint is unreachable, try alternative WARP endpoints:

  • engage.cloudflareclient.com:2408
  • 162.159.193.1:2408
  • 162.159.195.1:2408

Firewall blocking ports

ufw status numbered
# Ensure 443/tcp, 443/udp, 8443/udp, 2053/tcp, 8880/tcp, 2083/tcp are ALLOW

OOM kills (low RAM servers)

# Check swap
free -h
# If no swap, create one
fallocate -l 2G /swapfile && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile

Uninstall

bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/uninstall.sh)

Service Management

systemctl status s-ui              # S-UI status
systemctl status wireproxy-warp    # WARP status
systemctl restart s-ui             # Restart proxy
systemctl restart wireproxy-warp   # Restart WARP tunnel
journalctl -u s-ui -f              # Live S-UI logs
journalctl -u wireproxy-warp -f    # Live WARP logs

Key Paths

Path Description
/usr/local/s-ui/db/s-ui.db S-UI SQLite database
/usr/local/s-ui/sui S-UI binary
/etc/wireproxy.conf wireproxy WireGuard config
/etc/suiwarp/wgcf-account.toml WARP account credentials
/root/suiwarp-client-links.txt Generated client links

Credits

S-UI | sing-box | wireproxy | wgcf