mirror of
https://gitee.com/xmz7891/ykxmz.git
synced 2026-10-19 04:50:43 +00:00
ykxmz 1.5.0：修复手表端 TLS 证书校验 + MTU 修复网络稳定性
被控端 - 修复 MTU 问题：夹 MSS + 路径 MTU 探测（公网可用率 48% -> 100%） - 复用 HTTP 连接（免掉每次新建 TLS 的 30% 握手失败） - 每分钟回头找局域网，自动切回快 400 倍的路径 - 画面心跳帧：静止时省流量，客户端仍知道流是活的 - 锁屏时给出可操作的提示 手表端 - 内置 GTS Root R4 / GlobalSign Root CA，修 SSLHandshakeException - 连接错误翻译成人话（证书/时间/解析/超时分别提示） - 经中转连上后用服务器报的地址刷新已配对记录 - 新增局域网连接页面、服务器延迟检测 服务器端 - 支持 chunked 请求体（修每 16 秒一次的连接错乱与大面积 502） - 网络调优脚本 net-tune.sh（开机自动应用） - 管理页：批量删除、网络体检、下载区 - 隧道改 HTTP/2 + 双连接 文档 - 许可协议 / 安装前必读 / 安装后须知（作者：小麦子）
This commit is contained in:
xmz7891
@@ -0,0 +1,142 @@
|
||||
#!/bin/bash
|
||||
# 用 Zero Trust 的 Tunnel Token 建具名隧道。
|
||||
#
|
||||
# 为什么用这个而不是 cloudflared tunnel login：
|
||||
# 实测这条网络下 login 流程取证书失败（Failed to fetch resource），
|
||||
# 而 Token 方案**不需要证书文件**，纯复制粘贴，
|
||||
# 公网入口在 Cloudflare 面板上配一次就行。
|
||||
#
|
||||
# 用法：
|
||||
# bash setup_tunnel_token.sh <token>
|
||||
set -u
|
||||
|
||||
TOKEN="${1:-}"
|
||||
DOMAIN="${2:-xxmxxs.top}"
|
||||
HOSTNAME_FULL="${3:-relay.${DOMAIN}}"
|
||||
RELAY_DIR=/root/lanremote-relay
|
||||
CF_DIR=/root/.cloudflared
|
||||
|
||||
echo "============================================================"
|
||||
echo " 用 Token 建具名隧道"
|
||||
echo "============================================================"
|
||||
echo
|
||||
|
||||
if [ -z "$TOKEN" ]; then
|
||||
echo " ✗ 没给 token"
|
||||
echo " 用法: bash $0 <token>"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case "$TOKEN" in
|
||||
eyJ*) ;;
|
||||
*) echo " ⚠ token 一般以 eyJ 开头，你给的是 ${TOKEN:0:12}…，继续试试" ;;
|
||||
esac
|
||||
|
||||
echo " token 长度: ${#TOKEN}"
|
||||
echo " 域名: $HOSTNAME_FULL"
|
||||
echo
|
||||
|
||||
# ---------- 0. 先验证 token 能不能连上 ----------
|
||||
echo "[0/4] 验证 token"
|
||||
mkdir -p "$CF_DIR"
|
||||
TMP_LOG=/tmp/tunnel_token_probe.log
|
||||
: > "$TMP_LOG"
|
||||
timeout 45 cloudflared tunnel --no-autoupdate --edge-ip-version 4 \
|
||||
run --token "$TOKEN" > "$TMP_LOG" 2>&1 &
|
||||
PROBE=$!
|
||||
sleep 30
|
||||
if grep -q 'Registered tunnel connection' "$TMP_LOG"; then
|
||||
echo " ✓ token 有效，隧道已连上 Cloudflare"
|
||||
OK=1
|
||||
else
|
||||
echo " ⚠ 30 秒内没看到连接成功，日志："
|
||||
tail -6 "$TMP_LOG" | sed 's/^/ /'
|
||||
OK=0
|
||||
fi
|
||||
kill "$PROBE" 2>/dev/null || true
|
||||
wait "$PROBE" 2>/dev/null || true
|
||||
|
||||
if [ "$OK" != "1" ]; then
|
||||
echo
|
||||
echo " token 可能不对，或者这条线路到 Cloudflare 的连接有问题。"
|
||||
echo " 还是继续装一遍服务 —— 有时候第一次慢，之后就好了。"
|
||||
fi
|
||||
|
||||
# ---------- 1. 写 systemd 服务 ----------
|
||||
echo
|
||||
echo "[1/4] 写 systemd 服务"
|
||||
cat > /etc/systemd/system/lanremote-tunnel.service <<EOF
|
||||
[Unit]
|
||||
Description=LanRemote Cloudflare 具名隧道（Token 方式）
|
||||
After=network-online.target lanremote-relay.service
|
||||
Wants=network-online.target
|
||||
Requires=lanremote-relay.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
# 具名隧道：地址固定为 $HOSTNAME_FULL，不会再变
|
||||
# 仍然强制 IPv4 —— 这条线路有 IPv6 地址但实际不通
|
||||
ExecStart=/usr/local/bin/cloudflared tunnel --no-autoupdate --edge-ip-version 4 run --token $TOKEN
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
MemoryMax=128M
|
||||
StandardOutput=append:$RELAY_DIR/tunnel.log
|
||||
StandardError=append:$RELAY_DIR/tunnel.log
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
chmod 600 /etc/systemd/system/lanremote-tunnel.service
|
||||
echo " 已写（权限 600，token 在里面）"
|
||||
|
||||
# ---------- 2. 地址文件写成固定的域名 ----------
|
||||
echo
|
||||
echo "[2/4] 把公网地址记成固定域名"
|
||||
echo "https://$HOSTNAME_FULL" > "$RELAY_DIR/public_url.txt"
|
||||
cat "$RELAY_DIR/public_url.txt" | sed 's/^/ /'
|
||||
|
||||
# ---------- 3. 重启 ----------
|
||||
echo
|
||||
echo "[3/4] 重启服务"
|
||||
systemctl stop lanremote-tunnel 2>/dev/null || true
|
||||
pkill -f 'cloudflared tunnel' 2>/dev/null || true
|
||||
sleep 2
|
||||
rm -f "$RELAY_DIR/tunnel.log"
|
||||
systemctl daemon-reload
|
||||
systemctl enable lanremote-tunnel >/dev/null 2>&1
|
||||
systemctl start lanremote-tunnel
|
||||
sleep 15
|
||||
echo " 服务状态: $(systemctl is-active lanremote-tunnel)"
|
||||
echo " 日志尾部:"
|
||||
tail -5 "$RELAY_DIR/tunnel.log" 2>/dev/null | sed 's/^/ /'
|
||||
|
||||
# ---------- 4. 验证 ----------
|
||||
echo
|
||||
echo "[4/4] 验证 https://$HOSTNAME_FULL"
|
||||
for i in 1 2 3 4 5 6 7 8; do
|
||||
C=$(timeout 15 curl -4 -s -o /dev/null -w '%{http_code}' \
|
||||
"https://$HOSTNAME_FULL/v1/health" 2>/dev/null)
|
||||
printf " 第 %d 次: HTTP %s\n" "$i" "${C:-超时}"
|
||||
if [ "$C" = "200" ]; then
|
||||
echo
|
||||
echo "============================================================"
|
||||
echo " ✓ 成功了！固定地址："
|
||||
echo " https://$HOSTNAME_FULL"
|
||||
echo
|
||||
echo " 接下来在被控端执行一次："
|
||||
echo " LanRemote-Agent.exe --relay https://$HOSTNAME_FULL"
|
||||
echo " 手表首页「中转设置」填同一个地址。"
|
||||
echo "============================================================"
|
||||
exit 0
|
||||
fi
|
||||
sleep 10
|
||||
done
|
||||
|
||||
echo
|
||||
echo " ✗ 还没通。可能原因："
|
||||
echo " 1. Cloudflare 面板上还没加 Public Hostname"
|
||||
echo " （Subdomain=relay Domain=$DOMAIN Service=HTTP://localhost:8080）"
|
||||
echo " 2. DNS 还没生效，等几分钟"
|
||||
echo " 3. 隧道没连上，看日志："
|
||||
echo " journalctl -u lanremote-tunnel -n 20"
|
||||
exit 1
|
||||
Reference in New Issue
Block a user