mirror of
https://gitee.com/xmz7891/ykxmz.git
synced 2026-10-19 11:50:45 +00:00
ykxmz 1.5.0锛氫慨澶嶆墜琛ㄧ TLS 璇佷功鏍￠獙 + MTU 淇缃戠粶绋冲畾鎬?
琚帶绔?- 淇 MTU 闂锛氬す MSS + 璺緞 MTU 鎺㈡祴锛堝叕缃戝彲鐢ㄧ巼 48% -> 100%锛?- 澶嶇敤 HTTP 杩炴帴锛堝厤鎺夋瘡娆℃柊寤?TLS 鐨?30% 鎻℃墜澶辫触锛?- 姣忓垎閽熷洖澶存壘灞€鍩熺綉锛岃嚜鍔ㄥ垏鍥炲揩 400 鍊嶇殑璺緞 - 鐢婚潰蹇冭烦甯э細闈欐鏃剁渷娴侀噺锛屽鎴风浠嶇煡閬撴祦鏄椿鐨?- 閿佸睆鏃剁粰鍑哄彲鎿嶄綔鐨勬彁绀? 鎵嬭〃绔?- 鍐呯疆 GTS Root R4 / GlobalSign Root CA锛屼慨 SSLHandshakeException - 杩炴帴閿欒缈昏瘧鎴愪汉璇濓紙璇佷功/鏃堕棿/瑙ｆ瀽/瓒呮椂鍒嗗埆鎻愮ず锛?- 缁忎腑杞繛涓婂悗鐢ㄦ湇鍔″櫒鎶ョ殑鍦板潃鍒锋柊宸查厤瀵硅褰?- 鏂板灞€鍩熺綉杩炴帴椤甸潰銆佹湇鍔″櫒寤惰繜妫€娴? 鏈嶅姟鍣ㄧ - 鏀寔 chunked 璇锋眰浣擄紙淇瘡 16 绉掍竴娆＄殑杩炴帴閿欎贡涓庡ぇ闈㈢Н 502锛?- 缃戠粶璋冧紭鑴氭湰 net-tune.sh锛堝紑鏈鸿嚜鍔ㄥ簲鐢級 - 绠＄悊椤碉細鎵归噺鍒犻櫎銆佺綉缁滀綋妫€銆佷笅杞藉尯 - 闅ч亾鏀?HTTP/2 + 鍙岃繛鎺? 鏂囨。 - 璁稿彲鍗忚 / 瀹夎鍓嶅繀璇?/ 瀹夎鍚庨』鐭ワ紙浣滆€咃細灏忛害瀛愶級
This commit is contained in:
xmz7891
@@ -0,0 +1,142 @@
|
||||
#!/bin/bash
|
||||
# 用 Zero Trust 的 Tunnel Token 建具名隧道。
|
||||
#
|
||||
# 为什么用这个而不是 cloudflared tunnel login：
|
||||
# 实测这条网络下 login 流程取证书失败（Failed to fetch resource），
|
||||
# 而 Token 方案**不需要证书文件**，纯复制粘贴，
|
||||
# 公网入口在 Cloudflare 面板上配一次就行。
|
||||
#
|
||||
# 用法：
|
||||
# bash setup_tunnel_token.sh <token>
|
||||
set -u
|
||||
|
||||
TOKEN="${1:-}"
|
||||
DOMAIN="${2:-xxmxxs.top}"
|
||||
HOSTNAME_FULL="${3:-relay.${DOMAIN}}"
|
||||
RELAY_DIR=/root/lanremote-relay
|
||||
CF_DIR=/root/.cloudflared
|
||||
|
||||
echo "============================================================"
|
||||
echo " 用 Token 建具名隧道"
|
||||
echo "============================================================"
|
||||
echo
|
||||
|
||||
if [ -z "$TOKEN" ]; then
|
||||
echo " ✗ 没给 token"
|
||||
echo " 用法: bash $0 <token>"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case "$TOKEN" in
|
||||
eyJ*) ;;
|
||||
*) echo " ⚠ token 一般以 eyJ 开头，你给的是 ${TOKEN:0:12}…，继续试试" ;;
|
||||
esac
|
||||
|
||||
echo " token 长度: ${#TOKEN}"
|
||||
echo " 域名: $HOSTNAME_FULL"
|
||||
echo
|
||||
|
||||
# ---------- 0. 先验证 token 能不能连上 ----------
|
||||
echo "[0/4] 验证 token"
|
||||
mkdir -p "$CF_DIR"
|
||||
TMP_LOG=/tmp/tunnel_token_probe.log
|
||||
: > "$TMP_LOG"
|
||||
timeout 45 cloudflared tunnel --no-autoupdate --edge-ip-version 4 \
|
||||
run --token "$TOKEN" > "$TMP_LOG" 2>&1 &
|
||||
PROBE=$!
|
||||
sleep 30
|
||||
if grep -q 'Registered tunnel connection' "$TMP_LOG"; then
|
||||
echo " ✓ token 有效，隧道已连上 Cloudflare"
|
||||
OK=1
|
||||
else
|
||||
echo " ⚠ 30 秒内没看到连接成功，日志："
|
||||
tail -6 "$TMP_LOG" | sed 's/^/ /'
|
||||
OK=0
|
||||
fi
|
||||
kill "$PROBE" 2>/dev/null || true
|
||||
wait "$PROBE" 2>/dev/null || true
|
||||
|
||||
if [ "$OK" != "1" ]; then
|
||||
echo
|
||||
echo " token 可能不对，或者这条线路到 Cloudflare 的连接有问题。"
|
||||
echo " 还是继续装一遍服务 —— 有时候第一次慢，之后就好了。"
|
||||
fi
|
||||
|
||||
# ---------- 1. 写 systemd 服务 ----------
|
||||
echo
|
||||
echo "[1/4] 写 systemd 服务"
|
||||
cat > /etc/systemd/system/lanremote-tunnel.service <<EOF
|
||||
[Unit]
|
||||
Description=LanRemote Cloudflare 具名隧道（Token 方式）
|
||||
After=network-online.target lanremote-relay.service
|
||||
Wants=network-online.target
|
||||
Requires=lanremote-relay.service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
# 具名隧道：地址固定为 $HOSTNAME_FULL，不会再变
|
||||
# 仍然强制 IPv4 —— 这条线路有 IPv6 地址但实际不通
|
||||
ExecStart=/usr/local/bin/cloudflared tunnel --no-autoupdate --edge-ip-version 4 run --token $TOKEN
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
MemoryMax=128M
|
||||
StandardOutput=append:$RELAY_DIR/tunnel.log
|
||||
StandardError=append:$RELAY_DIR/tunnel.log
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
chmod 600 /etc/systemd/system/lanremote-tunnel.service
|
||||
echo " 已写（权限 600，token 在里面）"
|
||||
|
||||
# ---------- 2. 地址文件写成固定的域名 ----------
|
||||
echo
|
||||
echo "[2/4] 把公网地址记成固定域名"
|
||||
echo "https://$HOSTNAME_FULL" > "$RELAY_DIR/public_url.txt"
|
||||
cat "$RELAY_DIR/public_url.txt" | sed 's/^/ /'
|
||||
|
||||
# ---------- 3. 重启 ----------
|
||||
echo
|
||||
echo "[3/4] 重启服务"
|
||||
systemctl stop lanremote-tunnel 2>/dev/null || true
|
||||
pkill -f 'cloudflared tunnel' 2>/dev/null || true
|
||||
sleep 2
|
||||
rm -f "$RELAY_DIR/tunnel.log"
|
||||
systemctl daemon-reload
|
||||
systemctl enable lanremote-tunnel >/dev/null 2>&1
|
||||
systemctl start lanremote-tunnel
|
||||
sleep 15
|
||||
echo " 服务状态: $(systemctl is-active lanremote-tunnel)"
|
||||
echo " 日志尾部:"
|
||||
tail -5 "$RELAY_DIR/tunnel.log" 2>/dev/null | sed 's/^/ /'
|
||||
|
||||
# ---------- 4. 验证 ----------
|
||||
echo
|
||||
echo "[4/4] 验证 https://$HOSTNAME_FULL"
|
||||
for i in 1 2 3 4 5 6 7 8; do
|
||||
C=$(timeout 15 curl -4 -s -o /dev/null -w '%{http_code}' \
|
||||
"https://$HOSTNAME_FULL/v1/health" 2>/dev/null)
|
||||
printf " 第 %d 次: HTTP %s\n" "$i" "${C:-超时}"
|
||||
if [ "$C" = "200" ]; then
|
||||
echo
|
||||
echo "============================================================"
|
||||
echo " ✓ 成功了！固定地址："
|
||||
echo " https://$HOSTNAME_FULL"
|
||||
echo
|
||||
echo " 接下来在被控端执行一次："
|
||||
echo " LanRemote-Agent.exe --relay https://$HOSTNAME_FULL"
|
||||
echo " 手表首页「中转设置」填同一个地址。"
|
||||
echo "============================================================"
|
||||
exit 0
|
||||
fi
|
||||
sleep 10
|
||||
done
|
||||
|
||||
echo
|
||||
echo " ✗ 还没通。可能原因："
|
||||
echo " 1. Cloudflare 面板上还没加 Public Hostname"
|
||||
echo " （Subdomain=relay Domain=$DOMAIN Service=HTTP://localhost:8080）"
|
||||
echo " 2. DNS 还没生效，等几分钟"
|
||||
echo " 3. 隧道没连上，看日志："
|
||||
echo " journalctl -u lanremote-tunnel -n 20"
|
||||
exit 1
|
||||
Reference in New Issue
Block a user