中文 | English
- Update Information
- Project Features
- Interactive Running Script
- Non-interactive Ultra-fast Installation
- Obtaining Argo Json
- Obtaining Argo Token
- Use Cloudflare API to automatically create Argo
- Description of Xray outbound and routing templates in various scenarios
- Main directory files and descriptions
- Special Thanks to Our Sponsors
- Disclaimer
2026.06.04 v2.0.7 1. Replace Nekobox with Throne for client output; 2. Independent v2rayN configuration output; 3. Security upgrade: remove insecure=true, use TLS certificate fingerprint verification
2026.04.21 v2.0.6 1. Keep XHTTP over CDN on the Nginx reverse-proxy path and let Nginx handle path-based routing; 2. Add Clash Mihomo-compatible XHTTP client output for fixed tunnels in HTTP/1.1 CDN and HTTP/3 direct modes
2026.04.18 v2.0.5 1. Move XHTTP over CDN off the Nginx reverse-proxy path and let cloudflared ingress forward directly to the local Xray inbound; 2. Add Clash Mihomo-compatible XHTTP client output for both HTTP/2 CDN and HTTP/3 direct modes
Historical Updates（Click to expand or collapse）
2026.04.11 v2.0.4 1. support non-443 ports for CDN address (IPv4 / IPv6 / domain); 2. remove pre-install UFW blocking logic, fallback to iptables when inactive; 3. avoid unnecessary xray restart for CDN / bandwidth / port hopping changes
2026.04.10 v2.0.3 1. Automatically detect UFW and switch rule management accordingly; 2. add start port editing in [argox -d] and auto sync firewall; 3. add Hysteria2 bandwidth config entry
2026.04.04 v2.0.2 Added Trojan Direct and Shadowsocks 2022 Direct, and regenerate the self-signed certificate when changing the TLS domain
2026.04.01 v2.0.1 Added VLESS/XHTTP over CDN and XHTTP HTTP/3 direct connection support
2026.03.30 v2.0.0 Refactor ArgoX into a modular protocol system, add support for Hysteria2 and VLESS/XHTTP, and enable fully customizable protocol installation and management.
2025.12.15 v1.6.13 Argo tunnel creation via API --- Automatically completed: Create tunnel > DNS configuration > Origin settings. Thanks to [zmlu] for providing the method: https://raw.githubusercontent.com/zmlu/sba/main/tunnel.sh
2025.12.09 v1.6.12 Quick Install Mode: Added a one-click installation feature that auto-fills all parameters, simplifying the deployment process. Chinese users can use
-lor-L; English users can use-kor-K. Case-insensitive support makes operations more flexible.2025.11.08 v1.6.11 feat: Refine Shadowsocks + v2ray-plugin configurations and URIs for mainstream clients with AI assistance
2025.09.01 v1.6.10 1. Adapted to the new reality key pair generation method in xray 25.8.31; 2. Updated GitHub proxy
2025.04.26 v1.6.9 Added the ability to change CDNs online using [argox -d]
2025.04.25 v1.6.8 1. Change GitHub proxy; 2. Handle CentOS firewall port management; 3. Optimize code
2025.04.21 v1.6.7 Use OpenRC on Alpine to replace systemctl (Python3-compatible version)
2024.12.24 v1.6.6 Refactored the chatGPT detection method based on lmc999's detection and unlocking script
2024.5.20 v1.6.5 1. Add Github CDN; 2. Remove subscription template 2
2024.3.26 v1.6.4 Thanks to UUb for the official change of the compilation, dependencies jq, qrencode from apt installation to download the binary file, reduce the installation time of about 15 seconds, implementing the project's lightweight positioning
2024.3.24 v1.6.3 1. Compatible with CentOS 7,8,9; 2. Remove default Github CDN
2024.3.13 v1.6.2 1. Subscription made optional, no nginx and qrcode installed if not needed; 2. Use native IP if it supports unlocking chatGPT, otherwise use warp chained proxy unlocking
2024.3.10 v1.6.1 1. To protect node data security, use fake information to fetch subscribe api; 2. Adaptive the above clients. https://<argo tunnel url>/<uuid>/<auto | auto2>
2024.3.2 v1.6 1. Support V2rayN / Throne / Clash / sing-box / Shadowrocket subscribe. https://<argo tunnel url>/<uuid>/<base64 | clash | sing-box-pc | sing-box-phone | proxies | qr>. Index of all subscribes: https://<argo tunnel url>/<uuid>/ ; Reinstall is required; 2. Adaptive the above clients. https://<argo tunnel url>/<uuid>/<auto | auto2>
2024.2.6 V1.5 Argo run protocol uses default instead of http2. The default value is auto, which will automatically configure the quic protocol. If cloudflared is unable to establish UDP connections, it will fallback to using the http2 protocol.
2023.10.25 V1.4 1. Support Reality-Vison and Reality-gRPC, both are direct connect solutions; 2. Quick-tunnel through the API to check dynamic domain names; 3. After installing, add [argox] shortcut; 4. Output the configuration for Sing-box Client
2023.10.16 V1.3 1. Support Alpine; 2. Add Sing-box PID, runtime, and memory usage to the menu; 3. Remove the option of using warp on returning to China
2023.10.11 V1.2 1. Add the option of blocking on returning to China; 2. Add a number of quality CDNs collected online; 3. Use Warp IPv6 to visit chatGPT
2023.6.23 V1.1 For better network traffic diversion in various scenarios, split
config.jsonintoinbound.jsonandoutbound.json2023.4.13 1.0
2023.3.11 beta6 1. Users can easily obtain the JSON of a fixed domain name tunnel through the accompanying function website at https://fscarmen.cloudflare.now.cc; 2. Change the sensitive path names; 3. Add CDN for download
2023.3.4 beta5 1. Change listening to all network addresses to only Argo tunnel directed listening for added security; 2. Argo Tunnel supports dualstack
2023.3.2 beta4 Change listening to all network addresses to only Argo tunnel directed listening for added security
2023.2.24 beta3 1. Simplify the operation of changing argo tunnel; 2. Use wget globally instead of cURL
2023.2.17 beta2 1. Extremely fast installation mode, [-f] followed by a parameter file path; 2. Support for switching between the three argo tunnels; 3. Synchronise Argo and Xray to the newest version at any time; 4. Optimize the code to achieve speedup.
2023.2.16 beta1 Argo + Xray for vps
- Deploy Xray in VPS, using the scheme Argo + Xray + Reality / Hysteria2 / Argo + Xray + WebSocket + TLS / XHTTP / direct TLS;
- Normally CF backhauls from data centers, Argo creates two reverse links to two nearby data centers, and backhauls from the source server through the nearby data centers. The line between the user's data center and the source server's nearby data center is CF's proprietary black box line;
- Using CloudFlare's Argo Tunnel with TLS encrypted communication, application traffic can be securely transmitted to the Cloudflare network, improving application security and reliability. In addition, Argo Tunnel can also prevent network threats such as IP leaks and DDoS attacks;
- Argo is an intranet tunnel, meaning Xray's inbound does not expose ports externally, increasing security, and does not require camouflage websites that waste resources. It also supports all Cloudflare ports. At the same time, the server outputs Argo Ws data streams, greatly simplifying data processing and improving response. TLS is provided by CF, avoiding multiple TLS;
- Argo Tunnel supports both temporary tunnels and fixed domain names through Token or cloudflared Cli methods. Direct optimization + tunnel does not require domain certificates and can be converted at any time after installation;
- Select protocols on demand during installation, supporting 11 protocols: VLESS + Reality Vision, Hysteria2, VLESS + Reality gRPC, VLESS + WS, VMess + WS, Trojan + WS, Shadowsocks + WS, VLESS + XHTTP, VLESS + XHTTP Direct, Trojan Direct, Shadowsocks 2022 Direct; add or remove protocols at any time after installation (
argox -r); - Hysteria2, VLESS + XHTTP Direct, and Trojan Direct use self-signed certificates for direct connections; the self-signed certificate is regenerated automatically when the TLS domain changes;
- Nginx serves as the unified external dispatcher for WS/XHTTP protocols; Reality, Hysteria2, Trojan Direct, Shadowsocks 2022 Direct, and XHTTP Direct can use their respective direct modes — clean and simple architecture;
- Built-in warp chained proxy to unlock chatGPT;
- Node information output to V2rayN / Clash Meta / Shadowrocket / Throne / Sing-box (SFI, SFA, SFM), subscription automatically adapts to clients, one subscription URL for everything;
- Ultra-fast installation, either interactive or non-interactive like docker compose. Put all parameters in a configuration file in advance, taking less than 5 seconds.
bash <(wget -qO- https://raw.githubusercontent.com/fscarmen/argox/main/argox.sh)
| Option | Remark |
|---|---|
| No argument | Interactive menu |
| -c / -C | Force Chinese |
| -e / -E | Force English |
| -k / -K | Quick install (English) |
| -l / -L | Quick install (Chinese) |
| -n / -N | View node information |
| -t / -T | Change Argo tunnel |
| -d / -D | Change preferred CDN / SNI / node info |
| -r / -R | Add / Remove protocols |
| -u / -U | Uninstall |
| -v / -V | Sync to latest version |
| -b / -B | Upgrade kernel / BBR / DD |
| -a / -A | Enable / Disable Argo |
| -x / -X | Enable / Disable Xray |
| -f / -F | Non-interactive install, followed by parameter file path |
bash <(wget -qO- https://raw.githubusercontent.com/fscarmen/argox/main/argox.sh) -l
bash <(wget -qO- https://raw.githubusercontent.com/fscarmen/argox/main/argox.sh) -k
Users can easily obtain it through the Cloudflare Json generation website: https://fscarmen.cloudflare.now.cc
If you want to do it manually, you can refer to the commands needed for Debian as an example, Deron Cheng - CloudFlare Argo Tunnel Trial
Detailed tutorial: Synology Suite: Chinese Tutorial for Cloudflare Tunnel Penetration Support DSM6, 7
- Visit https://dash.cloudflare.com/profile/api-tokens
- API Tokens > Create Token > Create Custom Token
- Add the following permissions:
- Account > Cloudflare One Connectors: cloudflared > Edit
- Zone > DNS > Edit
- Account Resources: Include > Required Account
- Zone Resources: Include > Specific zone > Argo Root Domain
- Domain classifications containing specific domains: https://github.com/v2fly/domain-list-community/blob/master/data
- Routing instructions: https://www.v2fly.org/config/routing.html
- Modify
/etc/argox/outbound.json. Note: Please backup the originaloutbound.jsonfile first. Check the format of the modified json at https://www.json.cn/ - After modification, run
systemctl restart xray; sleep 1; systemctl is-active xray. If it shows active, it's effective. If it shows failed, check the configuration file format.
| Description | Template Example |
|---|---|
| chatGPT uses chained warp proxy, no need to install warp locally, other traffic goes through vps default network exit | warp |
| Specified traffic goes through the specified network interface on the local machine, for dual-stack IPv4 or IPv6 differentiation, other traffic goes through vps default network exit | interface |
| Specified traffic goes through the specified socks5 proxy on the local machine, for dual-stack IPv4 or IPv6 differentiation, other traffic goes through vps default network exit | socks5 |
/etc/argox # Project main directory
├── subscribe # Subscription files directory
│ ├── v2rayn # V2rayN subscription files
│ ├── throne # Throne subscription files
│ ├── clash # Clash subscription files
│ ├── proxies # Clash proxy provider subscription files
│ ├── shadowrocket # Shadowrocket subscription files
│ └── sing-box # SFI / SFA / SFM subscription files
├── cert # Self-signed certificate directory
│ ├── cert.pem # Certificate file
│ └── private.key # Private key file
├── cloudflared # argo tunnel program
├── custom # User-defined persistent config (serverIp / cdn / language etc.)
├── geoip.dat # Used for geographical location policies or access control based on IP addresses
├── geosite.dat # Used for access control, content filtering or security policies based on domain names
├── inbound.json # Dynamically generated inbound config based on selected protocols
├── list # Node information list
├── nginx.conf # Nginx configuration file (generated when WS/XHTTP protocols are installed or subscription is enabled)
├── outbound.json # Outbound and routing config, chatGPT uses warp ipv6 chained proxy outbound
├── xray # xray main program
├── ax.sh # Shortcut script file
├── jq # Command-line JSON processor
└── qrencode # QR code encoding binary file
Experience the speed, stability, and security of VPS.Town's all-in-one cloud solutions - designed to fuel your business innovation.
-
Memories Secured. Your Trusted Companion.
-
Rock-Solid Data Centers. Peace of Mind.
- This program is for learning and understanding only, non-profit. Please delete within 24 hours after downloading. It must not be used for any commercial purposes. Text, data and images are copyrighted. Reproduction must indicate the source.
- Use of this program must comply with the deployment disclaimer. Users must abide by the laws and regulations of the deployment server's location, country and the user's country. The program author is not responsible for any improper actions by users.