title	tags
Router service on single-NIC linux box with Dreamacro/clash	docker clash

Clash support VMess, Shadowsocks, Trojan, Snell protocol for remote connections, can run on linux, windows, mac on various hardware architectures, is popular and under active developing recently.

Quick Reference

• 中文版
• Clash

Supported tags and respective Dockerfile links

• v0.19.0, latest, v0.19.0-alpine, latest-alpine

Other Reference

• docker 中运行 openwrt
• anotherdocker 运行 openwrt
• Use macvlan networks
• 斐讯N1 – 完美刷机Armbian教程
• N1刷Armbian系统并在Docker中安装OpenWrt旁路由的详细教程
• N1盒子做旁路由刷OpenWRT系统（小白专用）
• Docker上运行Lean大源码编译的OpenWRT（初稿）
• engineerlzk 的CSDN博客
• 我在用的armbian版本

How to use this image

Config docker log

It's recommended to limit docker daemon's log size, or you will soon runout of disk space. Modify your /etc/docker/daemon.json like the following:

{
    "registry-mirrors": ["https://docker.mirrors.ustc.edu.cn/"],
        "log-driver": "json-file",
          "log-opts": {"max-size":"100m", "max-file":"3"}
}

Create macvlan network for docker:

This image needs macvlan to function properly, modify the below sample to fit your needs.

docker network create -d macvlan --subnet=192.168.12.0/24 --gateway=192.168.12.1 --ip-range=192.168.12.64/30 -o parent=eth0 macnet

Setup windows 10 client to use the gateway(optional)

1. Create new external switch with hyper-v manager if there is no existing one.
2. Create new vEthernet adapater with powershell(admin):

Add-VMNetworkAdapter -VMName vEthernetStatic2 -SwitchName External

3. Set the new adapater's ip=192.168.12.12, gateway=192.168.12.64(ip of clash container).
4. In browser(firefox), set proxy to socks5://192.168.12.64:7891(as macvlan config)

Now you can break through the great f*** wall.