diff --git a/shadowsocks-rust-client.service b/shadowsocks-rust-client.service
index a01045a..010d4fa 100644
--- a/shadowsocks-rust-client.service
+++ b/shadowsocks-rust-client.service
@@ -4,9 +4,22 @@ Wants=network-online.target
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
 Type=forking
 PIDFile=/var/run/shadowsocks-rust-client.pid
-ExecStart=/usr/bin/sslocal -c /etc/shadowsocks/shadowsocks-rust.json -f /var/run/shadowsocks-rust-client.pid
+ExecStart=/usr/bin/sslocal --log-without-time -c /etc/shadowsocks/shadowsocks-rust.json --tcp-fast-open
 Restart=on-failure
 
 [Install]
diff --git a/shadowsocks-rust-manager.service b/shadowsocks-rust-manager.service
index f4fa4ac..78f985e 100644
--- a/shadowsocks-rust-manager.service
+++ b/shadowsocks-rust-manager.service
@@ -4,9 +4,22 @@ Wants=network-online.target
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
 Type=forking
 PIDFile=/var/run/shadowsocks-rust-manager.pid
-ExecStart=/usr/bin/ssmanager -c /etc/shadowsocks/shadowsocks-rust.json -f /var/run/shadowsocks-rust-manager.pid
+ExecStart=/usr/bin/ssmanager --log-without-time -c /etc/shadowsocks/shadowsocks-rust.json --tcp-fast-open
 Restart=on-failure
 
 [Install]
diff --git a/shadowsocks-rust-server.service b/shadowsocks-rust-server.service
index e5e8e3a..046d91e 100644
--- a/shadowsocks-rust-server.service
+++ b/shadowsocks-rust-server.service
@@ -4,9 +4,22 @@ Wants=network-online.target
 After=network.target
 
 [Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
 Type=forking
 PIDFile=/var/run/shadowsocks-rust-server.pid
-ExecStart=/usr/bin/ssserver -c /etc/shadowsocks/shadowsocks-rust.json -f /var/run/shadowsocks-rust-server.pid
+ExecStart=/usr/bin/ssserver --log-without-time -c /etc/shadowsocks/shadowsocks-rust.json --tcp-fast-open
 Restart=on-failure
 
 [Install]
diff --git a/shadowsocks-rust.changes b/shadowsocks-rust.changes
index ccd2444..70d39fc 100644
--- a/shadowsocks-rust.changes
+++ b/shadowsocks-rust.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Jun 20 06:46:10 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
+
+- Add Recommends for shadowsocks-v2ray-plugin
+- Update systemd services
+
 -------------------------------------------------------------------
 Mon Jun 19 06:19:16 UTC 2023 - opensuse-packaging <opensuse-packaging@opensuse.org>
 
diff --git a/shadowsocks-rust.spec b/shadowsocks-rust.spec
index 72f0c16..12a9ba5 100644
--- a/shadowsocks-rust.spec
+++ b/shadowsocks-rust.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package shadowsocks-rust
 #
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -32,6 +32,7 @@ BuildRequires:  cargo-packaging
 BuildRequires:  cargo
 BuildRequires:  pkgconfig(openssl)
 BuildRequires:  systemd-rpm-macros
+Recommends:     shadowsocks-v2ray-plugin
 # ExcludeArch:    ppc ppc64 ppc64le s390 s390x
 %{?systemd_ordering}