ykxmz 1.5.0锛氫慨澶嶆墜琛ㄧ TLS 璇佷功鏍￠獙 + MTU 淇缃戠粶绋冲畾鎬?

琚帶绔?- 淇 MTU 闂锛氬す MSS + 璺緞 MTU 鎺㈡祴锛堝叕缃戝彲鐢ㄧ巼 48% -> 100%锛?- 澶嶇敤 HTTP 杩炴帴锛堝厤鎺夋瘡娆℃柊寤?TLS 鐨?30% 鎻℃墜澶辫触锛?- 姣忓垎閽熷洖澶存壘灞€鍩熺綉锛岃嚜鍔ㄥ垏鍥炲揩 400 鍊嶇殑璺緞 - 鐢婚潰蹇冭烦甯э細闈欐鏃剁渷娴侀噺锛屽鎴风浠嶇煡閬撴祦鏄椿鐨?- 閿佸睆鏃剁粰鍑哄彲鎿嶄綔鐨勬彁绀? 鎵嬭〃绔?- 鍐呯疆 GTS Root R4 / GlobalSign Root CA锛屼慨 SSLHandshakeException - 杩炴帴閿欒缈昏瘧鎴愪汉璇濓紙璇佷功/鏃堕棿/瑙ｆ瀽/瓒呮椂鍒嗗埆鎻愮ず锛?- 缁忎腑杞繛涓婂悗鐢ㄦ湇鍔″櫒鎶ョ殑鍦板潃鍒锋柊宸查厤瀵硅褰?- 鏂板灞€鍩熺綉杩炴帴椤甸潰銆佹湇鍔″櫒寤惰繜妫€娴? 鏈嶅姟鍣ㄧ - 鏀寔 chunked 璇锋眰浣擄紙淇瘡 16 绉掍竴娆＄殑杩炴帴閿欎贡涓庡ぇ闈㈢Н 502锛?- 缃戠粶璋冧紭鑴氭湰 net-tune.sh锛堝紑鏈鸿嚜鍔ㄥ簲鐢級 - 绠＄悊椤碉細鎵归噺鍒犻櫎銆佺綉缁滀綋妫€銆佷笅杞藉尯 - 闅ч亾鏀?HTTP/2 + 鍙岃繛鎺? 鏂囨。 - 璁稿彲鍗忚 / 瀹夎鍓嶅繀璇?/ 瀹夎鍚庨』鐭ワ紙浣滆€咃細灏忛害瀛愶級
2026-10-18 20:40:43 +00:00 · 2026-10-06 19:01:05 +08:00
commit b705216e4a
3195 changed files with 203292 additions and 0 deletions
@@ -0,0 +1,154 @@
+# -*- coding: utf-8 -*-
+"""验证管理页的"网络体检"接口 /v1/admin/netcheck。"""
+from __future__ import annotations
+
+import http.cookiejar
+import json
+import os
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+import time
+import urllib.error
+import urllib.parse
+import urllib.request
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent.parent
+UA = {"User-Agent": "LanRemote/1.4.0"}
+PORT = 8140
+BASE = f"http://127.0.0.1:{PORT}"
+
+passed = 0
+failed = 0
+
+
+def check(name, ok, detail=""):
+    global passed, failed
+    if ok:
+        passed += 1
+        print("  [PASS] " + name)
+    else:
+        failed += 1
+        print("  [FAIL] " + name + "  " + str(detail))
+
+
+def main() -> int:
+    work = Path(tempfile.mkdtemp(prefix="netcheck_"))
+    relay = None
+    try:
+        data = work / "d"
+        data.mkdir(parents=True, exist_ok=True)
+        env = dict(os.environ)
+        env.update({"RELAY_PORT": str(PORT), "RELAY_BIND": "127.0.0.1",
+                    "RELAY_DATA": str(data),
+                    "PYTHONIOENCODING": "utf-8", "PYTHONUNBUFFERED": "1"})
+        relay = subprocess.Popen(
+            [sys.executable, "-u", str(ROOT / "relay" / "relay.py")], env=env,
+            stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
+        up = False
+        for _ in range(40):
+            time.sleep(0.5)
+            try:
+                with urllib.request.urlopen(urllib.request.Request(
+                        BASE + "/v1/health", headers=UA), timeout=2) as resp:
+                    if resp.status == 200:
+                        up = True
+                        break
+            except Exception:                             # noqa: BLE001
+                continue
+        check("本地中转起来了", up)
+        if not up:
+            return 1
+
+        # 造两台设备，其中一台带 lanIps
+        for index, lan in ((1, ["192.168.10.103"]), (2, [])):
+            body = json.dumps({
+                "deviceId": f"pc-{index}", "code": f"90000{index}",
+                "name": f"电脑{index}", "version": "1.4.0",
+                "lanIps": lan, "port": 8765,
+            }).encode()
+            urllib.request.urlopen(urllib.request.Request(
+                BASE + "/v1/agent/register", data=body, method="POST",
+                headers={**UA, "Content-Type": "application/json"}),
+                timeout=10).read()
+
+        print()
+        print("一、没登录不能调")
+        try:
+            code = urllib.request.urlopen(urllib.request.Request(
+                BASE + "/v1/admin/netcheck", headers=UA), timeout=8).status
+        except urllib.error.HTTPError as exc:
+            code = exc.code
+        check("未登录被拒（401）", code == 401, code)
+
+        print()
+        print("二、登录后能拿到体检信息")
+        jar = http.cookiejar.CookieJar()
+        opener = urllib.request.build_opener(
+            urllib.request.HTTPCookieProcessor(jar))
+        form = urllib.parse.urlencode({"password": "120830"}).encode()
+        req = urllib.request.Request(BASE + "/admin/login", data=form,
+                                     method="POST", headers=UA)
+        req.add_header("Content-Type", "application/x-www-form-urlencoded")
+        try:
+            opener.open(req, timeout=15).read()
+        except urllib.error.HTTPError:
+            pass
+
+        with opener.open(urllib.request.Request(
+                BASE + "/v1/admin/netcheck", headers=UA), timeout=10) as resp:
+            info = json.loads(resp.read().decode("utf-8"))
+        print(f"       返回: {json.dumps(info, ensure_ascii=False)[:180]}")
+
+        check("ok=true", info.get("ok") is True, info)
+        check("有 deviceCount 信息（devices）", "devices" in info, info)
+        check("设备数正确（2）", info.get("devices") == 2, info.get("devices"))
+        check("有 tunnelMetrics 标记", "tunnelMetrics" in info, info)
+        check("有内存信息", "memoryKB" in info, info)
+        check("有公网地址字段", "publicUrl" in info, info)
+        check("统计了带局域网地址的设备",
+              info.get("lanDevices") == 1, info.get("lanDevices"))
+        # 本机一般没跑 cloudflared，所以这里应该是 False —— 关键是别崩
+        check("读不到隧道指标时不崩（tunnelMetrics=False）",
+              info.get("tunnelMetrics") is False, info.get("tunnelMetrics"))
+        # 关键：本地没有 cloudflared 时，读不到是正常的，
+        # 但**不能是因为代码写错**（比如少 import）。
+        # 之前就是漏了 import urllib.request，报 AttributeError，
+        # 而读不到时不崩这条断言照样通过 —— 断言得太松了。
+        err = str(info.get("tunnelError") or "")
+        check("读不到的原因不是代码错误（不能是 AttributeError/NameError）",
+              err not in ("AttributeError", "NameError", "TypeError"),
+              err)
+
+        print()
+        print("三、管理页上有这张卡片")
+        html = opener.open(urllib.request.Request(BASE + "/", headers=UA),
+                           timeout=10).read().decode("utf-8")
+        check("有网络体检面板", 'id=netPanel' in html, "")
+        check("有「测一下」按钮", 'id=netBtn' in html, "")
+        check("JS 里调 netcheck 接口", "/v1/admin/netcheck" in html, "")
+        check("会显示隧道连接数", "tunnelConnections" in html, "")
+
+        print()
+        print("=" * 58)
+        print(f"通过 {passed} 项，失败 {failed} 项")
+        return 0 if failed == 0 else 1
+    finally:
+        if relay is not None:
+            try:
+                relay.terminate()
+                relay.wait(timeout=8)
+            except Exception:                             # noqa: BLE001
+                try:
+                    relay.kill()
+                except Exception:                     # noqa: BLE001
+                    pass
+        time.sleep(0.5)
+        shutil.rmtree(work, ignore_errors=True)
+
+
+if __name__ == "__main__":
+    sys.exit(main())