SKeen

Installation script for sing-box on Keenetic/Netcraze routers

Warning

Tested on the aarch64 (arm64) CPU architecture. Please report any issues.

📘 DeepWiki

🚀 Features

• TProxy/Redirect/Hybrid modes ✓
• IPv4 and IPv6 supports ✓
• Sing-box DNS module working ✓
• Sing-box fakeip working ✓
• Zashboard via Clash API configured ✓

📋 Requirements

• Entware installed and configured
• Netfilter Subsystem Kernel Module installed
• curl installed via opkg install curl

💾 Installation

Run from Entware via SSH:

curl -Ls https://github.com/jinndi/SKeen/releases/latest/download/skeen | sh

Configure the sing-box JSON configuration files located in the /opt/etc/skeen/config/ directory, where example configuration files are provided.

The SKeen settings are located in the file at /opt/etc/skeen/skeen.conf.

/opt/etc/skeen directory is not removed during program uninstallation and must be deleted manually if required. It is also not overwritten during reinstallation if it already exists.

Access the web interface at the router's IP (usually 192.168.1.1) on http://192.168.1.1:9090

Manage the package further using the skeen command.

After successful installation:

/opt/
├── bin/
│   ├── skeen              # SKeen management script
│   └── skeen-box          # sing-box binary
├── etc/
│   ├── init.d/
│   │   └── S99SKeen       # Autostart script
│   ├── ndm/
│   │   └── netfilter.d/
│   │       └── skeen_firewall.sh  # Created on start
│   └── skeen/
│       ├── skeen.conf     # SKeen configuration
│       └── config/
│           ├── log.json
│           ├── dns.json
│           ├── inbounds.json
│           ├── outbounds.json
│           ├── route.json
│           └── experimental.json
└── tmp/
    └── (temporary download files)

⚡ Commands

Example Usage: start the daemon skeen start (skeen without parameters launches the management menu, use help for help)

Command	Description
start	Starts Sing-box. Checks configuration and will not start again if the process is already running
stop	Stops Sing-box. If the process is not found, reports that the daemon is already stopped
restart	Stops and then starts Sing-box again
reload	Reload sing-box (full restart, not a hot reload) without touching firewall rules
kill	Forcefully terminates the Sing-box process (kill -9)
status	Shows the current status of the process Sing-box
version	Displays the current application version
update	Checks for available updates of the sing-box core and the SKeen script, and allows updating
test	Check whether iptables rules are correctly applied for the current operating mode (requires Sing-box to be running and the mode to be anything except none)
deps	Check if all dependencies are installed (installs missing ones)
check	Checks Sing-box configuration in /opt/etc/skeen/config/ for syntax and logical errors
format	Formats Sing-box configuration in /opt/etc/skeen/config/ without changing its behavior
backup	Creates a backup (archive) of the /opt/etc/skeen directory and places it in the /opt root
restore	Restores a backup of the /opt/etc/skeen directory by archive name from the /opt directory
reset	Resets /opt/etc/skeen/config/ and /opt/etc/skeen/skeen.conf to defaults, performing a backup beforehand

⚙️ Settigs

The file /opt/etc/skeen/skeen.conf has the following settings:

Variable	Description
AUTO_START	Sing-box autostart on router reboot (0 - disabled, 1 - enabled)
AUTO_START_DELAY	Auto-start delay in seconds (Default 0)
INET_TEST_IPV4_HOSTS, INET_TEST_IPV6_HOSTS	Domains or IPs for testing the internet connection (no more than 3). List: ya.ru,77.88.8.8,... or ya.ru 77.88.8.8
HIJACK_DNS_IPV4_SUBNET, HIJACK_DNS_IPV6_SUBNET	Subnet for intercepting DNS queries (maximum one per IP version, default: 192.168.0.0/16, fe80::/10)
POLICY_NAME	Router policy name for SKeen traffic (Default SKeen)
INTERCEPT_PORTS	Ports to intercept and redirect via TProxy/Redirect (all ports if not specified). List: port and port ranges use colon e.g. 80,443,1000:2000 or 80 443 1000:2000
EXCLUDE_PORTS	Ports to excluded redirect via TProxy/Redirect (Not working if ports are set in INTERCEPT_PORTS). List: port and port ranges use colon e.g. 8080,1443,1300:2300 or 8080 1443 1300:2300
EXCLUDE_IPV4_ADDRESES, EXCLUDE_IPV6_ADDRESES	Excluded ip addreses for traffic redirection. List: 192.155.1.1,192.200.1.1,... or 192.155.1.1 192.200.1.1 ...
EXCLUDE_IPV4_SUBNETS, EXCLUDE_IPV6_SUBNETS	Excluded subnets for traffic redirection. List: 192.155.1.1/24,192.200.1.1/24,... or 192.155.1.1/24 192.200.1.1/24 ...