实验性地适配了 sing-box 的 Hysteria 2 端口跳跃 (#220)

* feat(protocol): add ss2022 support for iOS clients

* 配合 sing-box 1.12 Hysteria 2 端口跳跃机制，移除单端口配置改为下发端口数组

* 实验性支持 Loon TF 的 REALITY 配置，为 Stash 添加独立的模板文件

* 删除了 Loon 不必要的注释、修复了 sing-box Hysteria 2 端口逻辑

Author: FacMata

app/Protocols/Loon.php

@@ -29,7 +29,7 @@ public function handle()
                 $uri .= self::buildShadowsocks($user['uuid'], $item);
             }elseif ($item['type'] === 'vmess') {
                 $uri .= self::buildVmess($user['uuid'], $item);
-            }elseif ($item['type'] === 'vless' && !$item['flow'] ) { // loon 不支持流控,需要过滤掉
+            }elseif ($item['type'] === 'vless') {
                 $uri .= self::buildVless($user['uuid'], $item);
             }elseif ($item['type'] === 'trojan') {
                 $uri .= self::buildTrojan($user['uuid'], $item);
@@ -153,8 +153,19 @@ public static function buildVless($uuid, $server)
                 if (isset($tlsSettings['server_name']) && !empty($tlsSettings['server_name']))
                     array_push($config, "tls-name={$tlsSettings['server_name']}");
             }
-        }elseif($server['tls'] === 2){ // reality 暂不被 loon 支持 
-            return '';
+        }elseif($server['tls'] === 2){
+            array_push($config, "flow={$server['flow']}");
+            if ($server['tls_settings']) {
+                $tlsSettings = $server['tls_settings'];
+                if (isset($tlsSettings['public_key']) && !empty($tlsSettings['public_key']))
+                    array_push($config, "public-key={$tlsSettings['public_key']}");
+                if (isset($tlsSettings['short_id']) && !empty($tlsSettings['short_id']))
+                    array_push($config, "short-id={$tlsSettings['short_id']}");
+                if (isset($tlsSettings['server_name']) && !empty($tlsSettings['server_name']))
+                    array_push($config, "sni={$tlsSettings['server_name']}");
+                if (isset($tlsSettings['allow_insecure']) && !empty($tlsSettings['allow_insecure']))
+                    array_push($config, 'skip-cert-verify=' . ($tlsSettings['allow_insecure']? 'true' : 'false'));
+            }
         }
         if ($server['network'] === 'ws') {
             array_push($config, 'transport=ws');

app/Protocols/Singbox.php

@@ -265,19 +265,24 @@ protected function buildTrojan($password, $server)
 
     protected function buildHysteria($password, $server, $user)
     {
-        $parts = explode(",",$server['port']);
-        $firstPart = $parts[0];
-        if (strpos($firstPart, '-') !== false) {
-            $range = explode('-', $firstPart);
-            $firstPort = $range[0];
+        $parts = array_map('trim', explode(',', $server['port']));
+        $portConfig = [];
+        
+        // 检查是否为单端口
+        if (count($parts) === 1 && !str_contains($parts[0], '-')) {
+            $port = (int)$parts[0];
         } else {
-            $firstPort = $firstPart;
+            // 处理多端口情况 舍弃单独的端口 只保留范围端口
+            foreach ($parts as $part) {
+                if (str_contains($part, '-')) {
+                    $portConfig[] = str_replace('-', ':', $part);
+                }
+            }
         }
 
         $array = [
             'tag' => $server['name'],
             'server' => $server['host'],
-            'server_port' => (int)$firstPort,
             'domain_resolver' => 'local',
             'tls' => [
                 'enabled' => true,
@@ -286,6 +291,13 @@ protected function buildHysteria($password, $server, $user)
             ]
         ];
 
+        // 设置端口配置
+        if (isset($port)) {
+            $array['server_port'] = $port;
+        } else {
+            $array['server_ports'] = $portConfig;
+        }
+
         if (is_null($server['version']) || $server['version'] == 1) {
             $array['auth_str'] = $password;
             $array['type'] = 'hysteria';

app/Protocols/Stash.php

@@ -25,8 +25,8 @@ public function handle()
         header('profile-update-interval: 24');
         header("content-disposition: filename*=UTF-8''".rawurlencode($appName));
         // 暂时使用clash配置文件，后续根据Stash更新情况更新
-        $defaultConfig = base_path() . '/resources/rules/default.clash.yaml';
-        $customConfig = base_path() . '/resources/rules/custom.clash.yaml';
+        $defaultConfig = base_path() . '/resources/rules/default.stash.yaml';
+        $customConfig = base_path() . '/resources/rules/custom.stash.yaml';
         if (\File::exists($customConfig)) {
             $config = Yaml::parseFile($customConfig);
         } else {
@@ -181,10 +181,7 @@ public static function buildVless($uuid, $server)
         $array['server'] = $server['host'];
         $array['port'] = $server['port'];
         $array['uuid'] = $uuid;
-        $array['flow'] = (function($value){
-            return in_array($value, [null, 'none', 'xtls-rprx-origin','xtls-rprx-direct','xtls-rprx-splice'], true) ? $value : null;
-        })($server['flow'] ?? null);
-        $array['client-fingerprint'] = 'chrome';
+        $array['flow'] = $server['flow'] ?? null;
         $array['udp'] = true;
 
         if ($server['tls']) {
@@ -198,6 +195,8 @@ public static function buildVless($uuid, $server)
                    $array['reality-opts']['public-key'] = $tlsSettings['public_key'];
                    $array['reality-opts']['short-id'] = $tlsSettings['short_id'];
                 }
+                $array['skip-cert-verify'] = $tlsSettings['allow_insecure'] ? true : false;
+                $array['client-fingerprint'] = $tlsSettings['fingerprint'] ?? null;
             }
         }