ykxmz 1.5.0锛氫慨澶嶆墜琛ㄧ TLS 璇佷功鏍￠獙 + MTU 淇缃戠粶绋冲畾鎬?

琚帶绔?- 淇 MTU 闂锛氬す MSS + 璺緞 MTU 鎺㈡祴锛堝叕缃戝彲鐢ㄧ巼 48% -> 100%锛?- 澶嶇敤 HTTP 杩炴帴锛堝厤鎺夋瘡娆℃柊寤?TLS 鐨?30% 鎻℃墜澶辫触锛?- 姣忓垎閽熷洖澶存壘灞€鍩熺綉锛岃嚜鍔ㄥ垏鍥炲揩 400 鍊嶇殑璺緞
- 鐢婚潰蹇冭烦甯э細闈欐鏃剁渷娴侀噺锛屽鎴风浠嶇煡閬撴祦鏄椿鐨?- 閿佸睆鏃剁粰鍑哄彲鎿嶄綔鐨勬彁绀?
鎵嬭〃绔?- 鍐呯疆 GTS Root R4 / GlobalSign Root CA锛屼慨 SSLHandshakeException
- 杩炴帴閿欒缈昏瘧鎴愪汉璇濓紙璇佷功/鏃堕棿/瑙ｆ瀽/瓒呮椂鍒嗗埆鎻愮ず锛?- 缁忎腑杞繛涓婂悗鐢ㄦ湇鍔″櫒鎶ョ殑鍦板潃鍒锋柊宸查厤瀵硅褰?- 鏂板灞€鍩熺綉杩炴帴椤甸潰銆佹湇鍔″櫒寤惰繜妫€娴?
鏈嶅姟鍣ㄧ
- 鏀寔 chunked 璇锋眰浣擄紙淇瘡 16 绉掍竴娆＄殑杩炴帴閿欎贡涓庡ぇ闈㈢Н 502锛?- 缃戠粶璋冧紭鑴氭湰 net-tune.sh锛堝紑鏈鸿嚜鍔ㄥ簲鐢級
- 绠＄悊椤碉細鎵归噺鍒犻櫎銆佺綉缁滀綋妫€銆佷笅杞藉尯
- 闅ч亾鏀?HTTP/2 + 鍙岃繛鎺?
鏂囨。
- 璁稿彲鍗忚 / 瀹夎鍓嶅繀璇?/ 瀹夎鍚庨』鐭ワ紙浣滆€咃細灏忛害瀛愶級

_build/diag_browser_access.sh

@@ -0,0 +1,76 @@
+#!/bin/bash
+# 查为什么浏览器连不上 relay.xxmxxs.top。
+set -u
+
+HOST=relay.xxmxxs.top
+
+echo "===== 1. 隧道服务 ====="
+echo "  服务: $(systemctl is-active lanremote-tunnel)"
+echo "  进程: $(pgrep -c -f 'cloudflared tunnel' || echo 0) 个"
+echo "  已注册连接: $(grep -c 'Registered tunnel connection' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)"
+echo "  连接中断: $(grep -c 'Connection terminated' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)"
+
+echo
+echo "===== 2. 日志最近 8 行 ====="
+tail -8 /root/lanremote-relay/tunnel.log 2>/dev/null | sed 's/^/  /'
+
+echo
+echo "===== 3. 本地源站正常吗 ====="
+echo "  /v1/health: HTTP $(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/v1/health)"
+echo "  / (管理页):  HTTP $(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/)"
+
+echo
+echo "===== 4. DNS 解析 ====="
+echo "  $HOST ->"
+getent ahostsv4 "$HOST" | head -3 | sed 's/^/    /'
+echo "  CNAME 链:"
+timeout 8 python3 - <<'PY' 2>/dev/null || echo "    （查不了）"
+import socket
+try:
+    print("    " + socket.gethostbyname("relay.xxmxxs.top"))
+except Exception as exc:
+    print(f"    解析失败: {exc}")
+PY
+
+echo
+echo "===== 5. 不带 UA 访问（浏览器之外，模拟普通客户端）====="
+for i in 1 2 3; do
+    C=$(timeout 25 curl -4 -s -o /dev/null -w '%{http_code}' "https://$HOST/" 2>/dev/null)
+    printf "    第 %d 次: HTTP %s\n" "$i" "${C:-超时}"
+    sleep 2
+done
+
+echo
+echo "===== 6. 带浏览器 UA 访问（模拟你的浏览器）====="
+UA='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36'
+for i in 1 2 3; do
+    OUT=$(timeout 25 curl -4 -s -w '\n%{http_code}' -H "User-Agent: $UA" "https://$HOST/" 2>/dev/null)
+    CODE=$(echo "$OUT" | tail -1)
+    BODY=$(echo "$OUT" | head -c 80 | tr -d '\n')
+    printf "    第 %d 次: HTTP %s  %s\n" "$i" "${CODE:-超时}" "$BODY"
+    sleep 2
+done
+
+echo
+echo "===== 7. 管理页内容对不对 ====="
+UA='Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0'
+BODY=$(timeout 25 curl -4 -s -H "User-Agent: $UA" "https://$HOST/" 2>/dev/null)
+if echo "$BODY" | grep -q '管理密码\|登录'; then
+    echo "  ✓ 拿到的是登录页"
+elif echo "$BODY" | grep -q '中转服务器'; then
+    echo "  ✓ 拿到的是管理页"
+else
+    echo "  内容开头: $(echo "$BODY" | head -c 120)"
+fi
+
+echo
+echo "===== 8. 结论 ====="
+C=$(timeout 25 curl -4 -s -o /dev/null -w '%{http_code}' "https://$HOST/" 2>/dev/null)
+LOCAL=$(timeout 10 curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1:8080/)
+CONN=$(grep -c 'Registered tunnel connection' /root/lanremote-relay/tunnel.log 2>/dev/null || echo 0)
+echo "  本地源站: $LOCAL    隧道路径: ${C:-超时}    已注册连接: $CONN"
+if [ "$LOCAL" = "200" ] && [ "$C" != "200" ]; then
+    echo "  -> 源站好的，隧道这一段不通"
+    echo "     这条 4G 线路对 Cloudflare 边缘的 QUIC 丢包严重，"
+    echo "     表现就是时好时坏。看门狗会在连续失败后重启隧道。"
+fi