Press Ctrl + X to exit. When asked to save the modified buffer, press the y key once and then press enter to keep the same file name.





Every time you make changes to this file, you need to restart shadowsocks so the changes will take effect. Restart shadowsocks using the command below (if you have changed the config file).





/etc/init.d/shadowsocks restart







The server is already running, you can download a shadowsocks client and try it now.









Download a client and test your server





The standard Shadowsocks (SS) client is no longer stable in China. I recommend using the ShadowsocksR (SSR) client if you are in China.





SSR Clients (recommended for China)





ShadowsocksR for Windows (Download version 4.9.0, the newer ones have DNS leaks)

ShadowsocksR for Android

ShadowsocksR for Mac





Original SS Clients (NOT recommended for China)







Shadowsocks for Windows

Shadowsocks for Android

Shadowsocks for Mac





Note for iOS Users





For iOS, I highly recommend paying $2.99 for Shadowrocket because WhatsApp calls and other VoIP applications don't work with Potatso Lite or any other iOS app. Shadowrocket is the only stable Shadowsocks client for iOS that will tunnel VoIP through the proxy, so it's definitely worth the price for it.







Apple has removed all VPN and Shadowsocks apps from the China version of the app store. If your iTunes account is registered with a Chinese address, you need to create a new iTunes account with a foreign address to download these apps.





If you are using a USA iTunes account but don't have a US credit card to buy apps, you can always buy a $5 USA iTunes gift card on Taobao.





Shadowsocks vs ShadowsocksR (SSR)





The original version is called Shadowsocks (SS). ShadowsocksR (SSR) is a newer version that supports obfuscation, which can make your shadowsocks traffic look more like regular https web traffic. This can prevent your speed from getting throttled by your network or ISP.





The server that we just made is compatible with both SS and SSR clients (if you chose the same parameters as me when creating your server).





All of the clients are a little bit different, but basically you need to enter the following settings (assuming you chose the same options as me).





Server - The IP address of your server

Port - 443

Password - testing (or whatever password you chose)

Encryption - chacha20

Protocol - origin or auth_sha1_v4 (if you choose auth_sha1_v4_compatible for your server, this option is only available for SSR clients)

Obfs - http_simple for obfuscation or plain for no obfuscation (this option is only available in SSR clients)





If there are any other options, leave them as default. Do not enable onetime authentication.





You need to be careful with these settings. If you don't get it exactly right, then it will seem like the proxy is connected, but you won't have any connection to the internet. Unlike a VPN, you cannot easily tell if the proxy is actually connected successfully or not.





Here are my settings using the SSR Windows client.