科学上网客户端订阅格式收集归纳

前言

本文整理了主流科学上网客户端的订阅内容格式，帮助用户了解不同客户端之间的订阅格式差异，以及如何进行格式转换。

客户端概览

根据平台划分，主流客户端如下：

Windows/macOS/Linux 平台

客户端内核支持格式
v2rayNxray/mihomo/sing-boxBase64、JSON
Clash Verge RevmihomoClash YAML
FlClashmihomoClash YAML
GUI.for.SingBoxsing-boxsing-box JSON
OneXrayxrayBase64、JSON

Android 平台

客户端内核支持格式
v2rayNGxray/v2rayBase64
NekoBox for Androidsing-boxsing-box JSON
Clash Meta for AndroidmihomoClash YAML

iOS 平台

客户端支持协议订阅格式
ShadowrocketSS/VMess/VLESS/Trojan/Hysteria2Base64
Quantumult XSS/VMess/VLESS/Trojan专用格式
sing-boxsing-box 全协议sing-box JSON

OpenWRT 平台

客户端内核支持格式
OpenClashmihomoClash YAML
ShellCrashmihomo/sing-boxClash YAML
passwallxrayBase64

1. Clash 系列（mihomo 内核）

1.1 支持的订阅格式类型

格式类型说明
Clash YAML原生配置格式，最完整支持
Base64 编码支持解码 ss://、vmess://、trojan:// 等 URI
Proxy Provider支持远程订阅源，自动更新

1.2 完整配置结构

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# 基础配置
mixed-port: 7890
allow-lan: true
bind-address: "*"
mode: rule
log-level: info
external-controller: "127.0.0.1:9090"

# DNS 配置
dns:
  enable: true
  listen: 0.0.0.0:53
  enhanced-mode: fake-ip
  nameserver:
    - 223.5.5.5
    - 119.29.29.29

# 代理节点
proxies:
  # Shadowsocks
  - name: "ss-node"
    type: ss
    server: server.com
    port: 443
    cipher: chacha20-ietf-poly1305
    password: "password"
    udp: true

  # VMess
  - name: "vmess-node"
    type: vmess
    server: server.com
    port: 443
    uuid: "bf000d23-0752-40b4-affe-68f7707a9661"
    alterId: 0
    cipher: auto
    tls: true
    skip-cert-verify: false
    network: ws
    ws-opts:
      path: /path
      headers:
        Host: server.com

  # VLESS + Reality
  - name: "vless-reality"
    type: vless
    server: server.com
    port: 443
    uuid: "bf000d23-0752-40b4-affe-68f7707a9661"
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: www.microsoft.com
    reality-opts:
      public-key: "xxxxxx"
      short-id: "xxxxxx"
    client-fingerprint: chrome

  # Trojan
  - name: "trojan-node"
    type: trojan
    server: server.com
    port: 443
    password: "password123"
    udp: true
    sni: server.com
    skip-cert-verify: false

  # Hysteria2
  - name: "hysteria2-node"
    type: hysteria2
    server: server.com
    port: 443
    password: "yourpassword"
    up: "30 Mbps"
    down: "200 Mbps"
    sni: server.com
    skip-cert-verify: false

  # TUIC
  - name: "tuic-node"
    type: tuic
    server: server.com
    port: 443
    uuid: "bf000d23-0752-40b4-affe-68f7707a9661"
    password: "password"
    alpn:
      - h3
    congestion-controller: bbr
    sni: server.com

# 代理组
proxy-groups:
  - name: "🚀 节点选择"
    type: select
    proxies:
      - DIRECT
      - ss-node
      - vmess-node
      - vless-reality

  - name: "⚖️ 负载均衡"
    type: load-balance
    proxies:
      - ss-node
      - vmess-node
    url: "https://www.gstatic.com/generate_204"
    interval: 300

# 规则
rules:
  - DOMAIN-SUFFIX,google.com,🚀 节点选择
  - DOMAIN-KEYWORD,github,🚀 节点选择
  - GEOIP,CN,DIRECT
  - MATCH,🚀 节点选择

1.3 Proxy Provider 订阅格式

1
2
3
4
5
6
7
8
9
10
proxy-providers:
  provider1:
    type: http
    url: "https://example.com/subscribe?token=xxx"
    interval: 3600
    path: ./proxy-providers/provider1.yaml
    health-check:
      enable: true
      interval: 600
      url: https://www.gstatic.com/generate_204

1.4 协议支持情况

协议Clash Verge RevFlClashClash MiOpenClashShellCrash
SS✅✅✅✅✅
SSR✅✅✅✅✅
VMess✅✅✅✅✅
VLESS✅✅✅✅✅
Trojan✅✅✅✅✅
Hysteria2✅✅✅✅✅
TUIC✅✅⚠️✅✅
Reality✅✅✅✅✅

2. v2ray/xray 系列

2.1 支持的订阅格式类型

格式类型说明
Base64 编码最常用，多行 URI 编码
SIP002/SIP008Shadowsocks 标准格式
JSON 配置完整客户端配置

2.2 Base64 订阅格式

订阅内容为多行代理 URI 的 Base64 编码：

1
2
3
4
# 解码后的原始内容
ss://YWVzLTI1Ni1nY206bWV0YUAxMjcuMC4wLjE6NDQz#节点1
vmess://eyJhZGQiOiIxMjcuMC4wLjEiLCJhaWQiOiIwIiwi...
trojan://password@server.com:443?sni=server.com#节点3

2.3 各协议 URI 格式详解

Shadowsocks (SIP002)

1
2
3
4
5
ss://BASE64(method:password)@server:port#name
ss://BASE64(method:password)@server:port/?plugin=plugin_str#name

# 示例
ss://YWVzLTI1Ni1nY206cGFzc3dvcmQ=@server.com:443/?plugin=v2ray-plugin%3Bserver#节点名称

VMess

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
vmess://BASE64(JSON配置)

# JSON 结构
{
  "v": "2",
  "ps": "节点名称",
  "add": "server.com",
  "port": "443",
  "id": "uuid-xxxx-xxxx",
  "aid": "0",
  "net": "tcp",
  "type": "none",
  "host": "",
  "path": "",
  "tls": "tls",
  "sni": "server.com"
}

VLESS

1
2
3
4
vless://uuid@server:port?参数#name

# 示例
vless://bf000d23-0752-40b4-affe-68f7707a9661@server.com:443?encryption=none&security=reality&sni=www.microsoft.com&pbk=publickey&sid=shortid&type=tcp&flow=xtls-rprx-vision#节点名称

Trojan

1
2
3
4
trojan://password@server:port?参数#name

# 示例
trojan://password123@server.com:443?sni=server.com&allowInsecure=0#节点名称

Hysteria2

1
2
3
4
hysteria2://password@server:port?参数#name

# 示例
hysteria2://password123@server.com:443?sni=server.com&insecure=0#节点名称

TUIC

1
2
3
4
tuic://uuid:password@server:port?参数#name

# 示例
tuic://bf000d23-0752-40b4-affe-68f7707a9661:password@server.com:443?congestion_control=bbr&alpn=h3&sni=server.com#节点名称

2.4 客户端协议支持

协议v2rayNv2rayNGOneXraypasswall
SS✅✅✅✅
SSR❌❌❌✅
VMess✅✅✅✅
VLESS✅✅✅✅
Trojan✅✅✅✅
Hysteria2✅✅⚠️✅
TUIC✅✅⚠️✅
Reality✅✅✅✅

3. sing-box 系列

3.1 支持的订阅格式类型

格式类型说明
sing-box JSON原生配置格式
Base64 编码支持 URI 解析

3.2 完整配置结构

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "google",
        "address": "tls://8.8.8.8"
      },
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "local"
      }
    ]
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "inet4_address": "172.19.0.1/30",
      "inet6_address": "fdfe:dcba:9876::1/126",
      "auto_route": true,
      "strict_route": true,
      "stack": "system"
    }
  ],
  "outbounds": [
    {
      "type": "shadowsocks",
      "tag": "ss-out",
      "server": "server.com",
      "server_port": 443,
      "method": "2022-blake3-aes-128-gcm",
      "password": "password"
    },
    {
      "type": "vmess",
      "tag": "vmess-out",
      "server": "server.com",
      "server_port": 443,
      "uuid": "bf000d23-0752-40b4-affe-68f7707a9661",
      "security": "auto",
      "alterId": 0,
      "tls": {
        "enabled": true,
        "server_name": "server.com"
      },
      "transport": {
        "type": "ws",
        "path": "/path",
        "headers": {
          "Host": "server.com"
        }
      }
    },
    {
      "type": "vless",
      "tag": "vless-out",
      "server": "server.com",
      "server_port": 443,
      "uuid": "bf000d23-0752-40b4-affe-68f7707a9661",
      "flow": "xtls-rprx-vision",
      "tls": {
        "enabled": true,
        "server_name": "www.microsoft.com",
        "reality": {
          "enabled": true,
          "public_key": "xxxxxx",
          "short_id": "xxxxxx"
        }
      }
    },
    {
      "type": "trojan",
      "tag": "trojan-out",
      "server": "server.com",
      "server_port": 443,
      "password": "password123",
      "tls": {
        "enabled": true,
        "server_name": "server.com"
      }
    },
    {
      "type": "hysteria2",
      "tag": "hysteria2-out",
      "server": "server.com",
      "server_port": 443,
      "password": "password123",
      "obfs": {
        "type": "salamander",
        "password": "obfspassword"
      },
      "tls": {
        "enabled": true,
        "server_name": "server.com"
      }
    },
    {
      "type": "tuic",
      "tag": "tuic-out",
      "server": "server.com",
      "server_port": 443,
      "uuid": "bf000d23-0752-40b4-affe-68f7707a9661",
      "password": "password",
      "congestion_control": "bbr",
      "tls": {
        "enabled": true,
        "server_name": "server.com",
        "alpn": ["h3"]
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    },
    {
      "type": "dns",
      "tag": "dns-out"
    }
  ],
  "route": {
    "rules": [
      {
        "protocol": "dns",
        "outbound": "dns-out"
      },
      {
        "geoip": ["private"],
        "outbound": "direct"
      },
      {
        "geosite": ["cn"],
        "geoip": ["cn"],
        "outbound": "direct"
      }
    ],
    "final": "ss-out"
  }
}

3.3 协议支持情况

协议GUI.for.SingBoxNekoBox
SS✅✅
SSR✅✅
VMess✅✅
VLESS✅✅
Trojan✅✅
Hysteria2✅✅
TUIC✅✅
Reality✅✅
NaïveProxy✅✅

4. iOS 专用客户端

4.1 Shadowrocket

支持的订阅格式

格式类型说明
Base64 编码通用订阅格式
SIP002Shadowsocks 标准
Surge 配置部分兼容

特有 URI 格式

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# Shadowsocks
ss://method:password@server:port#name

# VMess
vmess://BASE64(JSON)

# VLESS with Reality
vless://uuid@server:port?security=reality&sni=xxx&pbk=xxx&sid=xxx&flow=xtls-rprx-vision#name

# Trojan
trojan://password@server:port?sni=xxx#name

# Hysteria2
hysteria2://password@server:port?sni=xxx#name

协议支持

协议支持情况
SS✅
SSR✅
VMess✅
VLESS✅
Trojan✅
Hysteria2✅
TUIC⚠️ (部分)
Reality✅

4.2 Quantumult X

支持的订阅格式

1
2
3
4
5
6
7
8
9
10
11
# Shadowsocks
shadowsocks=server:port,method=password,plugin=xxx

# VMess
vmess=server:port,method=none,id=uuid,alterId=0,transport=ws,path=/path,host=xxx

# Trojan
trojan=server:port,password,over-tls=true,tls-host=xxx

# VLESS
vless=server:port,method=none,id=uuid,transport=tcp,over-tls=true

订阅配置示例

1
2
3
4
5
# Quantumult X 订阅格式
# 节点列表（每行一个）
vmess=server.com:443, method=none, id=bf000d23-0752-40b4-affe-68f7707a9661, alterId=0, transport=ws, path=/path, host=server.com, over-tls=true, tls-host=server.com, label=节点1
trojan=server.com:443, password123, over-tls=true, tls-host=server.com, label=节点2
ss=server.com:443, method=chacha20-ietf-poly1305, password=password, label=节点3

协议支持

协议支持情况
SS✅
SSR✅
VMess✅
VLESS✅
Trojan✅
Hysteria2⚠️ (需配置)
TUIC❌
Reality⚠️ (有限支持)

5. 格式转换关系

5.1 转换工具推荐

工具说明链接
subconverter在线订阅转换自建/公共服务
sub-web订阅转换前端配合 subconverter
moeyy在线转换服务moeyy.cn
ACL4SSRClash 规则转换GitHub

5.2 格式转换对照表

源格式 → 目标格式Clash YAMLsing-box JSONBase64Shadowrocket
Clash YAML-需转换需转换需转换
sing-box JSON需转换-需转换需转换
Base64直接解析直接解析-直接使用
URI 列表直接解析直接解析Base64编码直接使用

5.3 关键字段映射

Clash → sing-box 字段映射

Clash 字段sing-box 字段
serverserver
portserver_port
uuiduuid
alterIdalterId
ciphersecurity (VMess)
passwordpassword
networktransport.type
ws-pathtransport.path
ws-headers.Hosttransport.headers.Host
snitls.server_name
skip-cert-verifytls.insecure
reality-opts.public-keytls.reality.public_key
reality-opts.short-idtls.reality.short_id

URI → Clash 字段映射

URI 参数Clash 字段
@server:portserver, port
#namename
sni=sni
security=tlstls: true
security=realityreality-opts
type=tcp/ws/grpcnetwork
path=ws-opts.path
host=ws-opts.headers.Host
flow=flow
pbk=reality-opts.public-key
sid=reality-opts.short-id

5.4 实际转换示例

Base64 → Clash YAML

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# 原始 vmess:// URI
# vmess://eyJhZGQiOiJzZXJ2ZXIuY29tIiwicG9ydCI6IjQ0MyIsImlkIjoiYmYwMDBkMjMtMDc1Mi00MGI0LWFmZmUtNjhmNzcwN2E5NjYxIiwiYWlkIjoiMCIsIm5ldCI6IndzIiwicGF0aCI6Ii9wYXRoIiwiaG9zdCI6InNlcnZlci5jb20iLCJ0bHMiOiJ0bHMiLCJzY3kiOiJhdXRvIn0=

# 转换后的 Clash 配置
proxies:
  - name: "vmess-node"
    type: vmess
    server: server.com
    port: 443
    uuid: bf000d23-0752-40b4-affe-68f7707a9661
    alterId: 0
    cipher: auto
    network: ws
    ws-opts:
      path: /path
      headers:
        Host: server.com
    tls: true

VLESS Reality URI → sing-box JSON

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
// 原始 URI
// vless://uuid@server:443?security=reality&sni=www.microsoft.com&pbk=xxx&sid=xxx&flow=xtls-rprx-vision#node

// 转换后的 sing-box 配置
{
  "type": "vless",
  "tag": "vless-out",
  "server": "server",
  "server_port": 443,
  "uuid": "uuid",
  "flow": "xtls-rprx-vision",
  "tls": {
    "enabled": true,
    "server_name": "www.microsoft.com",
    "reality": {
      "enabled": true,
      "public_key": "xxx",
      "short_id": "xxx"
    }
  }
}

附录：常用订阅链接格式总结

A. 识别订阅类型

1
2
3
4
5
6
7
8
9
10
11
# Base64 订阅检测
# 通常是多行 Base64 编码内容
# 解码后每行是一个代理 URI

# Clash YAML 检测
# 以 mixed-port: 或 proxies: 开头
# YAML 格式

# sing-box JSON 检测
# 以 { 开头，包含 "outbounds" 或 "inbounds"
# JSON 格式

B. 订阅 URL 常见参数

1
2
3
4
5
6
7
8
9
# Clash 订阅常用参数
?flag=clash    # 指定 Clash 格式
?flag=meta     # 指定 mihomo 格式

# 通用参数
?sub=3         # 订阅类型
&udp=1         # 开启 UDP
&rename=xxx    # 重命名规则
&append_type=true  # 添加类型标识

C. 协议端口参考

协议默认端口传输层
SS8388TCP/UDP
VMess443TCP
VLESS443TCP
Trojan443TCP
Hysteria2443UDP
TUIC443UDP

📝 文档版本: 2026-02-17 📚 参考来源: mihomo wiki, sing-box 官方文档, 各客户端官方文档