TUIC 协议深度解析与 2026 最新搭建教程：QUIC 高性能节点的完全指南

# 安装 sing-box
curl -fsSL https://sing-box.app/deb-install.sh | bash

# 创建配置目录
mkdir -p /etc/sing-box

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "inbounds": [
    {
      "type": "tuic",
      "tag": "tuic-in",
      "listen": "::",
      "listen_port": 443,
      "users": [
        {
          "name": "user1",
          "uuid": "你的UUID",
          "password": "你的密码"
        }
      ],
      "congestion_control": "bbr",
      "tls": {
        "enabled": true,
        "server_name": "你的域名",
        "certificate_path": "/path/to/fullchain.pem",
        "key_path": "/path/to/privkey.pem"
      }
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    }
  ]
}

uuidgen
# 或
sing-box generate uuid

openssl rand -base64 16

systemctl enable sing-box
systemctl start sing-box
systemctl status sing-box

# 下载最新版
wget https://github.com/EAimTY/tuic/releases/latest/download/tuic-server-x86_64-unknown-linux-gnu

# 放到 PATH
chmod +x tuic-server-x86_64-unknown-linux-gnu
mv tuic-server-x86_64-unknown-linux-gnu /usr/local/bin/tuic-server

# 创建配置目录
mkdir -p /etc/tuic

{
  "server": "[::]:443",
  "users": {
    "你的UUID": "你的密码"
  },
  "certificate": "/path/to/fullchain.pem",
  "private_key": "/path/to/privkey.pem",
  "congestion_control": "bbr",
  "alpn": ["h3"],
  "udp_relay_ipv6": true,
  "zero_rtt_handshake": true,
  "auth_timeout": "3s",
  "task_negotiation_timeout": "3s",
  "max_idle_time": "10s",
  "max_external_packet_size": 1500,
  "send_window": 16777216,
  "receive_window": 8388608,
  "gc_interval": "3s",
  "gc_lifetime": "15s"
}

[Unit]
Description=TUIC Server
After=network.target

[Service]
Type=simple
User=root
ExecStart=/usr/local/bin/tuic-server -c /etc/tuic/config.json
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target

systemctl daemon-reload
systemctl enable tuic
systemctl start tuic
systemctl status tuic

# 安装 acme.sh
curl https://get.acme.sh | sh
source ~/.bashrc

# 申请证书（假设你的域名是 tuic.example.com）
acme.sh --issue -d tuic.example.com --standalone

# 安装证书到指定路径
acme.sh --install-cert -d tuic.example.com \
  --key-file /etc/tuic/privkey.pem \
  --fullchain-file /etc/tuic/fullchain.pem

# 设置自动续期
acme.sh --upgrade --auto-upgrade

"congestion_control": "bbr"

"send_window": 16777216,
"receive_window": 8388608

"zero_rtt_handshake": true

# 编辑 /etc/sysctl.conf
echo '
# UDP 缓冲区优化
net.core.rmem_max = 134217728
net.core.wmem_max = 134217728
net.ipv4.udp_rmem_min = 65536
net.ipv4.udp_wmem_min = 65536

# 连接跟踪优化
net.netfilter.nf_conntrack_udp_timeout = 60
net.netfilter.nf_conntrack_udp_timeout_stream = 120
' >> /etc/sysctl.conf

sysctl -p

# UFW
ufw allow 443/udp

# iptables
iptables -A INPUT -p udp --dport 443 -j ACCEPT

# firewalld
firewall-cmd --permanent --add-port=443/udp
firewall-cmd --reload

{
  "log": {
    "level": "warn"
  },
  "dns": {
    "servers": [
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      },
      {
        "tag": "remote",
        "address": "https://1.1.1.1/dns-query",
        "detour": "proxy"
      }
    ],
    "rules": [
      {
        "rule_set": "geoip-cn",
        "server": "local"
      }
    ]
  },
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 7890
    }
  ],
  "outbounds": [
    {
      "type": "tuic",
      "tag": "proxy",
      "server": "你的域名",
      "server_port": 443,
      "uuid": "你的UUID",
      "password": "你的密码",
      "congestion_control": "bbr",
      "udp_relay_mode": "native",
      "zero_rtt_handshake": true,
      "heartbeat": "10s",
      "tls": {
        "enabled": true,
        "server_name": "你的域名",
        "alpn": ["h3"]
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "rule_set": "geoip-cn",
        "outbound": "direct"
      },
      {
        "rule_set": "geosite-cn",
        "outbound": "direct"
      }
    ],
    "final": "proxy",
    "auto_detect_interface": true
  }
}

proxies:
  - name: "🇺🇸 TUIC节点"
    type: tuic
    server: 你的域名
    port: 443
    uuid: 你的UUID
    password: 你的密码
    ip: 你的域名
    heartbeat-interval: 10000
    alpn: [h3]
    disable-sni: false
    reduce-rtt: true
    udp-relay-mode: native
    congestion-controller: bbr
    max-udp-relay-packet-size: 1500
    fast-open: true
    skip-cert-verify: false
    sni: 你的域名

"users": [
  {
    "name": "user1",
    "uuid": "uuid-1",
    "password": "password-1"
  },
  {
    "name": "user2",
    "uuid": "uuid-2",
    "password": "password-2"
  }
]

"users": [
  {
    "name": "user1",
    "uuid": "uuid-1",
    "password": "password-1"
  }
],
"outbounds": [
  {
    "type": "direct",
    "tag": "direct"
  }
]