Amozesh STunnel

apt update && apt upgrade -y

1-BBR ra Jahat TCP Server OK mikonim (Dastorat ra faghat Copy Past kon)

cat >> /etc/sysctl.d/50-bbr.conf <<EOF
net.core.default_qdisc=fq
net.ipv4.tcp_congestion_control=bbr
EOF
sysctl -p /etc/sysctl.d/50-bbr.conf

2-bad az anjam in marhaleh openvpn ro ahamon script ke behet dadam nas kon faghat bayad ba protocol TCP Nasb Shavad %

3-Bad az nas openvpn dastor zir copy past kon 
ss -tulpn | grep 1194  (bejaey 1194 Hamon port ke nast kardi ro bezan)
reboot

4- hala file STunnel ro nasb mikonim Dastorat zir ro be tartib anjam bede
apt install stunnel4 -y
cd /etc/stunnel
openssl genrsa -out key.pem 2048
openssl req -new -x509 -key key.pem -out cert.pem -days 3650

(bad az dastor balaie ye seri soal miad ke mohem nist hamaro inter bezan bere)
5- hala file Stunnel ro ba dastor zir config mikonim 
nano /etc/stunnel/stunnel.conf
(matn zir ro dakhel file copy mikonim va maghadir port ro ke az ghabl taeen kardin vared mikonin (bejaey 1194 port openvpn va 443 port ke az server iran mikhay accept beshe harchizi mitoni bezari khodet taeen mikoni))


pid = /var/run/stunnel4/stunnel.pid
output = /var/log/stunnel4/stunnel.log
setuid = stunnel4
setgid = stunnel4
[openvpn]
cert=/etc/stunnel/cert.pem
key=/etc/stunnel/key.pem
accept = 0.0.0.0:443
connect = 127.0.0.1:1194


6- hala file zir ro ham virayesh mikonim va khat zir ra azafe mikonim v zakhire mikonim 

nano /etc/default/stunnel4

  (khate zir ezafe shavad)

ENABLED=1

7- bad az an dastorat ra be tartib bezan 
stunnel
tail /var/log/stunnel4/stunnel.log
ps -aux | grep stunnel
ss -tulpn | grep 443   (bejaey 443 porti ke az server iran mikhay beferti ro bezan )
exit

    ( inja kar ma to server kharej tamom shod )
    ( hala baghie config to server iran mibashad)

sudo apt update && sudo apt upgrade -y
sudo apt install stunnel4 -y
    (Bad az nasb bala file zir ro edit mikonim )

sudo nano /etc/stunnel/stunnel.conf

   (bejay yy.yy.yy.yy adress server kharej mizanim bejaey 1194 port openvpn  bejaey 443 hamon porti ro bezan ke to server kharej zadi)

output = /var/log/stunnel4/stunnel.log
pid = /var/run/stunnel4/stunnel.pid
client = yes
[openvpn]
sni = www.google.com
accept = 127.0.0.1:1194
connect = yy.yy.yy.yy:443

  (bad dastorat zir ro be tartib mizanim )

sudo stunnel
sudo tail /var/log/stunnel4/stunnel.log
sudo ps -aux | grep stunnel
sudo ss -tulpn | grep 1194      (Bejaey 1194 Port Openvpn Maznim)

Tamam ---------  ip dakhel file openvpn ro be ip iran taghiir midim ---------