Sing-box Deep Dive: Configuration, Routing, and Advanced Features for Proxies

Sing-box is emerging as a versatile network proxy tool, offering comprehensive protocol support, extensive client configuration options, and rapid updates. This tutorial provides a step-by-step guide to understanding and configuring Sing-box across various platforms, from desktop and mobile to OpenWRT routers. The guide aims to demystify Sing-box, making it accessible to both beginners and advanced users.

Getting Started with Sing-box: Client Setup

For users new to Sing-box, the initial setup involves utilizing pre-configured profiles from subscription services or manually configuring custom settings. The process is similar to that of Clash, a popular proxy client.

Installation: Sing-box offers official clients for Android, iOS, MacOS, and tvOS. Windows users can leverage third-party tools like v2rayN.
Configuration: The primary method involves importing Sing-box configuration files, often provided by subscription services. This eliminates the need for manual configuration.
Subscription Import: Users can add a new profile by selecting “Remote Download” and pasting their subscription URL. The client automatically fetches and applies the configuration.

Smartphone displaying the Sing-box app interface with a list of configured proxy profiles

Once the configuration is imported, users can enable the profile and begin using the proxy service. The intuitive interface allows for easy switching between different proxy nodes.

Advanced Configuration: OpenWRT Router Setup

Sing-box can be deployed on OpenWRT routers, enabling network-wide proxying. This section covers both basic and advanced configuration methods.

Basic Setup via Homeproxy

Homeproxy is a Luci plugin that simplifies Sing-box setup on OpenWRT.

Installation: Install the “homeproxy” package from the OpenWRT software repository, including the Chinese language pack for ease of use.
Node Import: Import proxy nodes through subscription URLs or individual link sharing.
Client Settings: Configure a primary node and select a routing mode, such as “大陆白名单” (Mainland China Whitelist) or “GFW黑名单” (GFW Blacklist).

OpenWRT web interface showing the Homeproxy configuration page with proxy settings

After saving and applying the settings, the Sing-box core should be running, providing proxy services to the entire network.

Advanced Configuration: Custom Routing and Clash API Integration

For users seeking greater control, Sing-box allows for custom routing configurations. Integrating the Clash API enables streamlined node switching via a web-based UI.

Custom Routing: Switching to “自定义路由” (Custom Routing) exposes advanced configuration options, allowing users to define granular routing rules.
Clash API Integration: Applying a modified Homeproxy version (available in the video description) enables Clash API support. This requires Sing-box core version 1.9 or higher.
Rule Configuration: Define rules for automatic and manual node selection, as well as a global routing group for simplified management.

JSON code on a computer screen, representing the Sing-box configuration file with routing rules and API settings

The tutorial provides a step-by-step guide to configuring routing rules, DNS settings, and rule sets for optimized performance. Users can access the Clash WebUI by navigating to the router’s IP address on port 9090.

Understanding Sing-box Configuration: A Deep Dive

To fully leverage Sing-box, it’s essential to understand its configuration structure. The core components include DNS, inbound, outbound, and route modules.

The tutorial simulates a website visit, detailing how Sing-box processes DNS requests, applies routing rules, and utilizes outbound proxies to access content. This process highlights the importance of DNS configuration, especially in circumventing censorship and preventing leaks.

Network router back panel with ethernet cables plugged into the ports, symbolizing network traffic and routing

Advanced Techniques: ECS and Real IP

Sing-box 1.9 introduces support for ECS (EDNS Client Subnet), enabling more accurate geolocation-based routing. This, combined with Real IP, allows for precise traffic steering and avoids the limitations of Fake IP.

The tutorial explains how ECS works in conjunction with DoH (DNS over HTTPS) to resolve domain names and direct traffic based on the client’s subnet, ensuring optimal performance and privacy.

Troubleshooting and Optimizations

The guide addresses common issues, such as Netflix unlocking failures, and provides solutions based on understanding the underlying principles. For instance, enabling “覆盖目标地址” (Override Destination Address) can resolve unlocking issues by leveraging SNI (Server Name Indication) proxying.

The tutorial emphasizes that there’s no one-size-fits-all configuration and encourages users to experiment and adapt settings to their specific needs. By understanding the fundamentals, users can troubleshoot issues and optimize Sing-box for their unique environments.