baoweise-bot/aimili-vpngate

AimiliVPN 🌐

Bilingual: 中文 | English

---

中文

---

AimiliVPN 是一个专为 Linux VPS（如 Ubuntu）设计的智能 VPN 代理网关管理器。它能够自动采集 VPNGate 开放节点，进行多线程可用性测试与延迟过滤，利用 OpenVPN 隧道与策略路由（Policy Routing）实现出站网络，并在本地提供高性能的 HTTP/SOCKS5 代理网关服务，适合用作 Xray 的落地出站代理。

---

🚀 快速开始

在您的 Ubuntu VPS 机器上，复制并运行以下一行指令即可完成自动安装部署：

bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)

---

🛠️ 快捷命令行 (CLI)

安装成功后，系统会在全局注册 ml 快捷管理指令，直接运行 ml 可打开图形化交互终端，也可通过以下指令执行：

• ml status 或 ml：查看当前运行状态（代理端口、活动 VPN 节点、直连延迟、网页后台登录地址等）。
• ml start：启动 AimiliVPN 服务。
• ml stop：停止 AimiliVPN 服务（并自动清理策略路由与 OpenVPN 进程）。
• ml restart：重启服务。
• ml logs：查看实时的 Systemd 服务运行日志。
• ml web：切换网页绑定地址（127.0.0.1 仅本地，或 0.0.0.0 允许公网访问）与重置安全后缀。
• ml port：修改网页管理控制台监听端口。
• ml password：生成新的 12 位安全管理密码。
• ml uninstall：完全卸载服务并清理相关环境。

💡 首次安装与常见报错解决（小白必看）

1. 极简系统缺少依赖（Ubuntu 18-26 / Debian 首次安装）

如果系统是全新纯净版，可能会因为缺少 curl 或 ca-certificates 导致一键安装脚本下载失败。请在安装前执行以下命令补充依赖：

sudo apt-get update && sudo apt-get install -y curl ca-certificates

2. Debian 系统兼容运行方法

本脚本一键包默认限制在 Ubuntu 系统运行。Debian 用户如需运行，可先下载并用 sed 临时将系统类型限制替换为 "ubuntu" 后再执行安装：

curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
sudo bash install.sh

3. 包管理器被占用（Apt 锁冲突报错解决）

若一键安装提示 Could not get lock /var/lib/dpkg/lock-frontend 等'无法获得锁'的报错，可运行以下命令解除占用并重新安装：

# 1. 停止自动更新服务并终止相关进程
sudo systemctl stop unattended-upgrades 2>/dev/null
sudo killall apt apt-get dpkg 2>/dev/null

# 2. 清理残留锁文件
sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock

# 3. 修复受损包并重新更新源
sudo dpkg --configure -a
sudo apt-get update

执行完毕后，重新运行一键安装脚本即可。

---

⚙️ 系统架构

   [ 3x-ui / Xray ] 
         │ (HTTP / SOCKS5)
         ▼
   [ 本地代理服务器 ] (Port 7928) ──(强制绑定 SO_BINDTODEVICE)──► [ tun0 虚拟网卡 ]
         │                                                            │
         │ (SSH, Web UI, etc. 依然走物理路由)                           │ (策略路由表 100)
         ▼                                                            ▼
   [ 物理网卡 eth0 ] ◄───────────────────────────────────────── [ OpenVPN 加密隧道 ]
         │                                                            │
         ▼ (真实服务器 IP 出站)                                         ▼ (VPNGate 落地节点出站)
    (国内直连流量)                                               (解锁流媒体、锁区网站)

---

English

---

AimiliVPN is an intelligent VPN proxy gateway manager designed specifically for Linux VPS (e.g. Ubuntu). It automatically collects open VPNGate nodes, conducts multi-threaded availability testing and latency filtering, establishes secure out-of-band routing via OpenVPN and policy routing to prevent VPS lockouts, and hosts a high-performance local SOCKS5/HTTP proxy gateway. It is highly optimized to serve as a residential/unlocked egress node for upstream proxies like 3x-ui / Xray.

✨ Key Features

1. ⚡ Auto-Collection & Multi-Threaded Probing:
   • Periodically fetches candidate nodes from VPNGate.
   • Performs concurrent ping latency and handshake tests to maintain a pool of high-quality nodes.
2. 🔒 Anti-Lockout Routing (Policy Routing):
   • Directs traffic from the virtual adapter tun0 to a customized routing table (Table 100) without altering the system's default gateway.
   • Keeps SSH sessions and server administration panels unaffected by the active VPN.
3. 🚫 Fail-Safe Leak Protection:
   • Outbound socket connections inside the local proxy server are strictly bound to tun0 via SO_BINDTODEVICE.
   • If the VPN disconnects, proxy requests are instantly blocked with a 502 Bad Gateway instead of falling back to the VPS physical IP address.
4. 🖥️ Modern Web UI Panel:
   • Sleek dark/light responsive console (default port 8787).
   • Provides real-time geolocation, ISP, ASN, latency, and IP-type (residential/datacenter) detection.
   • Enables manual node selection, blacklist resets, proxy speed-testing, and logs query.
   • Secured by a random secret path suffix (e.g., /EJsW2EeBo9lY/) and password authentication.
5. 🛠️ CLI Utility (ml):
   • Command-line helper tool ml with a menu-driven interface.
   • Provides quick statuses, starts/stops the daemon, resets passwords, and changes bind hosts.

---

🚀 Quick Start

To install and deploy AimiliVPN on your Ubuntu server, copy and paste the following command:

bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)

---

🛠️ CLI Helper Commands

Once installed, use the global command ml to launch the interactive helper menu, or use the shortcuts below:

• ml status or ml: Check running system status (active nodes, proxy ports, latency, URLs).
• ml start: Start the gateway service.
• ml stop: Stop the gateway service (and clean routing tables).
• ml restart: Restart the service.
• ml logs: View real-time Systemd output logs.
• ml web: Toggle Web UI accessibility (127.0.0.1 or 0.0.0.0) and reset suffix paths.
• ml port: Update the Web Console port.
• ml password: Regenerate a secure 12-character administration password.
• ml uninstall: Completely remove the service and repository files from your VPS.

💡 Troubleshooting & First-Time Installation Tips

1. Missing Dependencies on Minimal OS (Ubuntu / Debian)

If you are using a brand new minimal OS, the installation might fail due to missing curl or ca-certificates. Run the following command to pre-install dependencies:

sudo apt-get update && sudo apt-get install -y curl ca-certificates

2. Bypass OS Restrictions for Debian

The script is restricted to Ubuntu by default. For Debian systems, run the following commands to download, patch, and install:

curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
sudo bash install.sh

3. Package Manager Locked (apt/dpkg Lock Errors)

If you see Could not get lock /var/lib/dpkg/lock-frontend or similar busy errors, run these commands to unlock and retry:

# 1. Stop automatic upgrades & kill active processes
sudo systemctl stop unattended-upgrades 2>/dev/null
sudo killall apt apt-get dpkg 2>/dev/null

# 2. Remove lock files
sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock

# 3. Repair package states & update
sudo dpkg --configure -a
sudo apt-get update

Once done, re-run the installation script.