|
|
clash 和 zerotier 的冲突 用的是小米AC2100路由器，刷了padavan固件，固件版本:3.4.3.9-099_23-04-1
集成的clash版本是：2023.04.16
zerotier版本是 1.10.6
单开任何一个都没问题，只要两个都开了，就造成CPU占用彪高，86%，持续在这个数字，或之上。
然后平均负载 是在 5-6，或者更高。导致路由器20个小时左右（也就是一天甚至更少）后，就假死。无法远程管理设备（包括web管理，telnet，ssh），客户端没法上网，但是能ping通。比如能ping baidu.com。
没到假死状态前，用netstat -ant 查看网络连接，非常夸张的数量大概几百条，90%是属于zerotier的这个地址（10.147.20.170）的连接。看起来是自己不断的连自己，怀疑是clash的配置问题，fakeip ？
但是我的clash当时折腾好久，不敢乱动，
请高手帮忙。谢谢！
如下：
tcp 0 0 10.147.20.170:27638 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19300 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27321 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19445 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27852 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27154 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19274 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19136 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27629 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27413 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27332 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27777 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19781 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19671 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:20110 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27140 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27176 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19221 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27227 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19623 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19202 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:28018 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27241 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19842 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27988 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:27264 10.147.20.170:7892 TIME_WAIT
tcp 0 0 10.147.20.170:19942 10.147.20.170:7892 TIME_WAIT
附clash配置：
redir-port: 7892
allow-lan: true
bind-address: '*'
mode: rule
log-level: error
ipv6: true
external-controller: 0.0.0.0:9090
external-ui: /opt/app/clash/clash_webs/
proxies:
此处省略。。。
dns:
enable: true
ipv6: false
listen: 0.0.0.0:8053
default-nameserver:
- 8.8.8.8
enhanced-mode: fake-ip
use-hosts: true
fake-ip-filter:
- '+.*'
nameserver:
- 223.5.5.5
- 114.114.114.114
- 119.29.29.29
fallback:
- tcp://8.8.8.8:53
- tcp://8.8.4.4:53
- tcp://208.67.222.222:443
- tcp://208.67.220.220:443
- https://dns.google/dns-query
- https://1.1.1.1/dns-query
fallback-filter:
geoip: true
geoip-code: CN
ipcidr:
- 240.0.0.0/4
domain:
- '+.google.com'
- '+.googleapis.com'
- '+.youtube.com'
- '+.appspot.com'
- '+.请不要发布这类群，谢谢.com'
- '+.facebook.com'
- '+.twitter.com'
- '+.blogger.com'
- '+.gmail.com'
- '+.gvt1.com'
sniffer:
enable: true
override-destination: true
sniff:
http: {ports: [80, 8080]}
tls: {ports: [443, 8443]}
skip-domain:
- 'courier.push.apple.com'
- 'Mijia Cloud'
附zerotier启动文件，就是论坛大神分享的
#!/bin/bash
#copyright by hiboy
source /etc/storage/script/init.sh
PROG=/opt/bin/zerotier-one
PROGCLI=/opt/bin/zerotier-cli
PROGIDT=/opt/bin/zerotier-idtool
config_path="/etc/storage/zerotier-one"
PLANET="/etc/storage/zerotier-one/planet"
zeroid="$(nvram get zerotier_id)"
zerotier_renum=`nvram get zerotier_renum`
zerotier_renum=${zerotier_renum:-"0"}
if [ ! -z "$(echo $scriptfilepath | grep -v "/tmp/script/" | grep zerotier)" ] && [ ! -s /tmp/script/_zerotier ]; then
mkdir -p /tmp/script
{ echo '#!/bin/bash' ; echo $scriptfilepath '"$@"' '&' ; } > /tmp/script/_zerotier
chmod 777 /tmp/script/_zerotier
fi
zerotier_restart () {
relock="/var/lock/zerotier_restart.lock"
if [ "$1" = "o" ] ; then
nvram set zerotier_renum="0"
[ -f $relock ] && rm -f $relock
return 0
fi
if [ "$1" = "x" ] ; then
if [ -f $relock ] ; then
logger -t "【ZeroTier】" "多次尝试启动失败，等待【"`cat $relock`"分钟】后自动尝试重新启动"
exit 0
fi
zerotier_renum=${zerotier_renum:-"0"}
zerotier_renum=`expr $zerotier_renum + 1`
nvram set zerotier_renum="$zerotier_renum"
if [ "$zerotier_renum" -gt "2" ] ; then
I=19
echo $I > $relock
logger -t "【ZeroTier】" "多次尝试启动失败，等待【"`cat $relock`"分钟】后自动尝试重新启动"
while [ $I -gt 0 ]; do
I=$(($I - 1))
echo $I > $relock
sleep 60
[ "$(nvram get zerotier_renum)" = "0" ] && exit 0
[ $I -lt 0 ] && break
done
nvram set zerotier_renum="0"
fi
[ -f $relock ] && rm -f $relock
fi
nvram set zerotier_status=0
eval "$scriptfilepath &"
exit 0
}
zerotier_get_status () {
A_restart=`nvram get zerotier_status`
B_restart="1"
cut_B_re
if [ "$A_restart" != "$B_restart" ] ; then
nvram set zerotier_status=$B_restart
needed_restart=1
else
needed_restart=0
fi
}
zerotier_check () {
zerotier_get_status
if [ "$needed_restart" = "1" ] ; then
zerotier_start
else
[ -z "`pidof zerotier-one`" ] && zerotier_restart
fi
}
zerotier_keep () {
[ ! -z "\`pidof zerotier-one\`" ] && logger -t "【ZeroTier】" "启动成功"
if [ -s /tmp/script/_opt_script_check ]; then
SVC_PATH="$(which zerotier-one)"
[ ! -s "$SVC_PATH" ] && SVC_PATH="/opt/bin/zerotier-one"
[ ! -s "$SVC_PATH" ] && SVC_PATH="/tmp/zerotier-one/zerotier-one"
logger -t "【ZeroTier】" "守护进程启动"
sed -Ei '/【ZeroTier】|^$/d' /tmp/script/_opt_script_check
cat >> "/tmp/script/_opt_script_check" <<-OSC
[ -z "\`pidof zerotier-one\`" ] || [ ! -s "$SVC_PATH" ] && nvram set zerotier_status=00 && logger -t "【ZeroTier】" "重新启动" && eval "$scriptfilepath &" && sed -Ei '/【ZeroTier】|^$/d' /tmp/script/_opt_script_check # 【ZeroTier】
OSC
#return
fi
}
zero_ping() {
while [ "$(ifconfig | grep zt | awk '{print $1}')" = "" ]; do
sleep 1
done
zt0=$(ifconfig | grep zt | awk '{print $1}')
while [ "$(ip route | grep "dev $zt0 proto static" | awk '{print $1}' | awk -F '/' '{print $1}')" = "" ]; do
sleep 1
done
ip00=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}')
[ -n "$ip00" ] && logger -t "【ZeroTier】" "zerotier虚拟局域网内设备：$ip00 "
ip11=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}'| awk 'NR==1 {print $1}'|cut -d. -f1,2,3)
ip22=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}'| awk 'NR==2 {print $1}'|cut -d. -f1,2,3)
ip33=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}'| awk 'NR==3 {print $1}'|cut -d. -f1,2,3)
ip44=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}'| awk 'NR==4 {print $1}'|cut -d. -f1,2,3)
ip55=$(ip route | grep "dev "$zt0" proto static" | awk '{print $1}' | awk -F '/' '{print $1}'| awk 'NR==5 {print $1}'|cut -d. -f1,2,3)
sleep 20
[ -n "$ip11" ] && ping_zero1=$(ping -4 $ip11.1 -c 2 -w 4 -q)
[ -n "$ip22" ] && ping_zero2=$(ping -4 $ip22.1 -c 2 -w 4 -q)
[ -n "$ip33" ] && ping_zero3=$(ping -4 $ip33.1 -c 2 -w 4 -q)
[ -n "$ip44" ] && ping_zero4=$(ping -4 $ip44.1 -c 2 -w 4 -q)
[ -n "$ip55" ] && ping_zero5=$(ping -4 $ip55.1 -c 2 -w 4 -q)
[ -n "$ip11" ] && ping_time1=`echo $ping_zero1 | awk -F '/' '{print $4}'`
[ -n "$ip22" ] && ping_time2=`echo $ping_zero2 | awk -F '/' '{print $4}'`
[ -n "$ip33" ] && ping_time3=`echo $ping_zero3 | awk -F '/' '{print $4}'`
[ -n "$ip44" ] && ping_time4=`echo $ping_zero4 | awk -F '/' '{print $4}'`
[ -n "$ip55" ] && ping_time5=`echo $ping_zero5 | awk -F '/' '{print $4}'`
[ -n "$ip11" ] && ping_loss1=`echo $ping_zero1 | awk -F ', ' '{print $3}' | awk '{print $1}'`
[ -n "$ip22" ] && ping_loss2=`echo $ping_zero2 | awk -F ', ' '{print $3}' | awk '{print $1}'`
[ -n "$ip33" ] && ping_loss3=`echo $ping_zero3 | awk -F ', ' '{print $3}' | awk '{print $1}'`
[ -n "$ip44" ] && ping_loss4=`echo $ping_zero4 | awk -F ', ' '{print $3}' | awk '{print $1}'`
[ -n "$ip55" ] && ping_loss5=`echo $ping_zero5 | awk -F ', ' '{print $3}' | awk '{print $1}'`
[ ! -z "$ping_time1" ] && logger -t "【ZeroTier】" "节点 "$ip11".1，延迟 ping_time1 ms 丢包率：$ping_loss1 "
[ ! -z "$ping_time2" ] && logger -t "【ZeroTier】" "节点 "$ip22".1，延迟ping_time2 ms 丢包率：$ping_loss2 "
[ ! -z "$ping_time3" ] && logger -t "【ZeroTier】" "节点 "$ip33".1，延迟ping_time3 ms 丢包率：$ping_loss3 "
[ ! -z "$ping_time4" ] && logger -t "【ZeroTier】" "节点 "$ip44".1，延迟ping_time4 ms 丢包率：$ping_loss4 "
[ ! -z "$ping_time5" ] && logger -t "【ZeroTier】" "节点 "$ip55".1，延迟ping_time5 ms 丢包率：$ping_loss5 "
}
zerotier_close () {
del_rules
kill_ps "$scriptname keep"
sed -Ei '/【ZeroTier】|^$/d' /tmp/script/_opt_script_check
killall zerotier-one
killall -9 zerotier-one
kill_ps "/tmp/script/_zerotier"
kill_ps "_zerotier.sh"
kill_ps "$scriptname"
[ -z "`pidof zerotier-one`" ] && logger -t "【ZeroTier】" "进程已关闭"
}
zerotier_start() {
check_webui_yes
killall -9 zerotier-one
SVC_PATH="/opt/bin/zerotier-one"
SVC_PATH2="/opt/app/zerotier/zerotier.tar.gz"
[ ! -d "/opt/app/zerotier" ] && mkdir -p /opt/app/zerotier
[ ! -s "$SVC_PATH2" ] && [ -s "/etc/storage/zerotier-one/zerotier.tar.gz" ] && cp -rf /etc/storage/zerotier-one/zerotier.tar.gz /opt/app/zerotier/zerotier.tar.gz
zerosize=`check_disk_size /etc/storage`
curltest=`which curl`
if [ -z "$curltest" ] || [ ! -s "`which curl`" ] ; then
tag="$( wget -T 5 -t 3 --user-agent "$user_agent" --max-redirect=0 --output-document=- https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest 2>&1 | grep 'tag_name' | cut -d\" -f4 )"
[ -z "$tag" ] && tag="$( wget -T 5 -t 3 --user-agent "$user_agent" --quiet --output-document=- https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest 2>&1 | grep 'tag_name' | cut -d\" -f4 )"
[ -z "$tag" ] && tag="$( wget -T 5 -t 3 --output-document=- https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest 2>&1 | grep 'tag_name' | cut -d\" -f4 )"
else
tag="$( curl --connect-timeout 3 --user-agent "$user_agent" https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest 2>&1 | grep 'tag_name' | cut -d\" -f4 )"
[ -z "$tag" ] && tag="$( curl -L --connect-timeout 3 --user-agent "$user_agent" -s https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest 2>&1 | grep 'tag_name' | cut -d\" -f4 )"
[ -z "$tag" ] && tag="$( curl -k -L --connect-timeout 20 -s https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest | grep 'tag_name' | cut -d\" -f4 )"
fi
[ -z "$tag" ] && tag="$( curl -k -L --connect-timeout 20 --silent https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest | grep 'tag_name' | cut -d\" -f4 )"
[ -z "$tag" ] && tag="$(curl -k --silent "https://api.github.com/repos/lmq8267/ZeroTierOne/releases/latest" | grep '"tag_name":' | sed -E 's/.*"([^"]+)".*/\1/')"
if [ ! -s "$SVC_PATH" ] ; then
logger -t "【ZeroTier】" "找不到$SVC_PATH,开始安装"
rm -rf "$PROG" "$PROGCLI" "$PROGIDT"
if [ ! -s "$SVC_PATH2" ] || [ ! -s "$SVC_PATH2" ] ; then
rm -rf /etc/storage/zerotier-one/MD5.txt
if [ ! -z "$tag" ] ; then
logger -t "【ZeroTier】" "获取到最新版本zerotier_v$tag,开始下载"
wgetcurl.sh "/etc/storage/zerotier-one/MD5.txt" "https://github.com/lmq8267/ZeroTierOne/releases/download/$tag/MD5.txt" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/$tag/tarMD5.txt"
if [ "$zerosize" -lt 2 ];then
logger -t "【ZeroTier】" "您的设备/etc/storage空间剩余"$zerosize"M，不足2M，将下载安装包到内存安装"
[ "$zerosize" -gt 1 ] && logger -t "【ZeroTier】" "可尝试手动上传zerotier.tar.gz和MD5.txt到内部存储/etc/storage/zerotier-one/目录里"
wgetcurl.sh "SVC_PATH2" "https://github.com/lmq8267/ZeroTierOne/releases/download/$tag/zerotier.tar.gz" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/$tag/zerotier.tar.gz"
else
logger -t "【ZeroTier】" "您的设备/etc/storage空间充足:"$zerosize"M，将下载安装包到内部存储"
wgetcurl.sh "/etc/storage/zerotier-one/zerotier.tar.gz" "https://github.com/lmq8267/ZeroTierOne/releases/download/$tag/zerotier.tar.gz" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/$tag/zerotier.tar.gz"
fi
else
logger -t "【ZeroTier】" "最新版本获取失败，开始下载备用程序zerotier_v1.10.6"
logger -t "【ZeroTier】" "若出现反复更新又下载，请关闭自动更新"
rm -rf /etc/storage/zerotier-one/MD5.txt
wgetcurl.sh "/etc/storage/zerotier-one/MD5.txt" "https://github.com/lmq8267/ZeroTierOne/releases/download/1.10.6/MD5.txt" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/1.10.6/tarMD5.txt"
if [ "$zerosize" -lt 2 ];then
logger -t "【ZeroTier】" "您的设备/etc/storage空间剩余"$zerosize"M，不足2M，将下载安装包到内存安装"
[ "$zerosize" -gt 1 ] && logger -t "【ZeroTier】" "可尝试手动上传zerotier.tar.gz和MD5.txt到内部存储/etc/storage/zerotier-one/目录里"
wgetcurl.sh "SVC_PATH2" "https://github.com/lmq8267/ZeroTierOne/releases/download/1.10.6/zerotier.tar.gz" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/1.10.6/zerotier.tar.gz"
else
logger -t "【ZeroTier】" "您的设备/etc/storage空间充足:"$zerosize"M，将下载安装包到内部存储"
wgetcurl.sh "/etc/storage/zerotier-one/zerotier.tar.gz" "https://github.com/lmq8267/ZeroTierOne/releases/download/1.10.6/zerotier.tar.gz" "https://fastly.jsdelivr.net/gh/lmq8267/zerotier@master/install/1.10.6/zerotier.tar.gz"
fi
fi
[ ! -s "$SVC_PATH2" ] && [ -s "/etc/storage/zerotier-one/zerotier.tar.gz" ] && cp -rf /etc/storage/zerotier-one/zerotier.tar.gz "$SVC_PATH2"
fi
zeroMD5="$(cat /etc/storage/zerotier-one/MD5.txt)"
[ ! -s "$SVC_PATH2" ] && [ -s "/etc/storage/zerotier-one/zerotier.tar.gz" ] && cp -rf /etc/storage/zerotier-one/zerotier.tar.gz "$SVC_PATH2"
[ -s "$SVC_PATH2" ] && eval $(md5sum "$SVC_PATH2" | awk '{print "MD5_down="$1;}') && echo "$MD5_down"
if [ ! -s "$SVC_PATH" ] ; then
if [ "$zeroMD5"x = "$MD5_down"x ] ; then
logger -t "【ZeroTier】" "安装包MD5匹配，开始解压..."
rm -rf /tmp/var/zerotier-one
tar -xzvf "$SVC_PATH2" -C /tmp/var
[ -s /tmp/var/zerotier-one/zerotier-one ] && cp -rf /tmp/var/zerotier-one/* /opt/bin/
sleep 5
rm -rf "/tmp/var/zerotier-one" "$SVC_PATH2"
else
logger -t "【ZeroTier】" "安装包MD5不匹配，删除..."
rm -rf "$SVC_PATH2"
rm -rf /etc/storage/zerotier-one/zerotier.tar.gz
rm -rf /tmp/zerotier.tar.gz
zero_dl
fi
fi
fi
[ ! -s "$PROGCLI" ] && ln -sf "$PROG" "$PROGCLI"
[ ! -s "$PROGIDT" ] && ln -sf "$PROG" "$PROGIDT"
chmod 777 "$PROG" "$PROGCLI" "$PROGIDT"
if [ -s "$SVC_PATH" ] ; then
zerotier_v=$($SVC_PATH -version | sed -n '1p')
echo "$tag"
echo "$zerotier_v"
[ -z "$zerotier_v" ] && logger -t "【ZeroTier】" " 程序不完整，删除，重新下载" && rm -rf "$SVC_PATH2" "/etc/storage/zerotier-one/zerotier.tar.gz" "/tmp/zerotier.tar.gz" "/tmp/var/zerotier-one" "$PROG" "$PROGCLI" "$PROGIDT" && zero_dl
[ ! -z "$zerotier_v" ] && logger -t "【ZeroTier】" " $SVC_PATH 安装成功，版本号:v$zerotier_v "
if [ ! -z "$tag" ] && [ ! -z "$zerotier_v" ] ; then
if [ "$tag"x != "$zerotier_v"x ] ; then
cat /etc/storage/started_script.sh|grep zerotier_upgrade=y >/dev/null
if [ $? -eq 0 ] ; then
logger -t "【ZeroTier】" "检测到最新版本zerotier_v$tag,当前安装版本zerotier_v$zerotier_v,已开启自动更新，开始更新"
rm -rf /etc/storage/zerotier-one/MD5.txt
rm -rf /etc/storage/zerotier-one/zerotier.tar.gz
rm -rf "$SVC_PATH2"
rm -rf "$PROG" "$PROGCLI" "$PROGIDT"
zero_dl
else
logger -t "【ZeroTier】" "检测到最新版本zerotier_v$tag,当前安装版本zerotier_v$zerotier_v,未开启自动更新,跳过更新"
fi
fi
fi
fi
start_instance 'zerotier'
}
start_instance() {
cfg="$(nvram get zerotier_id)"
echo $cfg
port=""
args=""
secret="$(cat /etc/storage/zerotier-one/identity.secret)"
moonid="$(nvram get zerotier_moonid)"
[ ! -e "/etc/storage/zerotier-one/identity.secret" ] && secret="$(nvram get zerotier_secret)"
if [ ! -d "$config_path" ]; then
mkdir -p $config_path
fi
mkdir -p $config_path/networks.d
if [ -n "$port" ]; then
args="$args -p$port"
fi
if [ -z "$secret" ]; then
[ ! -n "$cfg" ] && logger -t "【ZeroTier】" "无法启动，即将退出..." && logger -t "【ZeroTier】" "未获取到zerotier id，请确认在自定义设置-脚本-在路由器启动后执行里已填写好zerotier id" && logger -t "【ZeroTier】" "填好后，在系统管理-控制台输入一次nvram set zerotier_id=你的zerotier id" && logger -t "【ZeroTier】" "然后手动启动，打开ttyd或ssh输入一次 zerotier start" && exit 1
logger -t "【ZeroTier】" "设备密钥为空，正在生成密钥，请稍候..."
sf="$config_path/identity.secret"
pf="$config_path/identity.public"
$PROGIDT generate "$sf" "$pf" >/dev/null
[ $? -ne 0 ] && return 1
secret="$(cat $sf)"
nvram set zerotier_secret="$secret"
nvram commit
fi
if [ -n "$secret" ]; then
logger -t "【ZeroTier】" "找到密钥文件，正在启动，请稍候..."
echo "$secret" >$config_path/identity.secret
$PROGIDT getpublic $config_path/identity.secret >$config_path/identity.public
fi
add_join $(nvram get zerotier_id)
$PROG $args $config_path >/dev/null 2>&1 &
rules
if [ -n "$moonid" ]; then
$PROGCLI -D$config_path orbit $moonid $moonid
logger -t "【ZeroTier】" "orbit moonid $moonid ok!"
fi
zeromoonip="$(nvram get zeromoonwan)"
moonip="$(nvram get zerotiermoon_ip)"
if [ "$zeromoonip" = "1" ] || [ -n "$moonip" ]; then
logger -t "【ZeroTier】" "creat moon start!"
creat_moon
else
remove_moon
fi
zerotier_get_status
eval "$scriptfilepath keep &"
zero_ping &
exit 0
}
add_join() {
touch $config_path/networks.d/$(nvram get zerotier_id).conf
}
rules() {
while [ "$(ifconfig | grep zt | awk '{print $1}')" = "" ]; do
sleep 1
done
zt0=$(ifconfig | grep zt | awk '{print $1}')
logger -t "【ZeroTier】" "已创建虚拟网卡 $zt0 "
ip44=$(ifconfig $zt0 | grep "inet addr:" | awk '{print $2}' | awk -F '/' '{print $1}'| tr -d 'addr:' | tr -d ' ')
ip66=$(ifconfig $zt0 | grep "inet6 addr:" | awk '{print $3}' | awk '{print $1,$2}'| tr -d 'addr' | tr -d ' ')
[ -n "$ip66" ] && logger -t "【ZeroTier】" ""$zt0"_ipv6ip66"
[ -n "$ip44" ] && logger -t "【ZeroTier】" ""$zt0"_ipv4ip44"
[ -z "$ip44" ] && [ -z "$ip66" ] && logger -t "【ZeroTier】" "未获取到zerotier ip请前往官网检查是否勾选此路由加入网络并分配IP"
del_rules
iptables -A INPUT -i $zt0 -j ACCEPT
iptables -A FORWARD -i $zt0 -o $zt0 -j ACCEPT
iptables -A FORWARD -i $zt0 -j ACCEPT
iptables -t nat -A POSTROUTING -o $zt0 -j MASQUERADE
while [ "$(ip route | grep "dev $zt0 proto" | awk '{print $1}')" = "" ]; do
sleep 1
done
ip_segment=`ip route | grep "dev $zt0 proto" | awk '{print $1}'`
iptables -t nat -A POSTROUTING -s $ip_segment -j MASQUERADE
logger -t "【ZeroTier】" "启用ZeroTier NAT"
logger -t "【ZeroTier】" "ZeroTier官网：https://my.zerotier.com/network"
}
del_rules() {
zt0=$(ifconfig | grep zt | awk '{print $1}')
ip_segment=`ip route | grep "dev $zt0 proto" | awk '{print $1}'`
iptables -D FORWARD -i $zt0 -j ACCEPT 2>/dev/null
iptables -D FORWARD -o $zt0 -j ACCEPT 2>/dev/null
iptables -D FORWARD -i $zt0 -o $zt0 -j ACCEPT
iptables -D INPUT -i $zt0 -j ACCEPT 2>/dev/null
iptables -t nat -D POSTROUTING -o $zt0 -j MASQUERADE 2>/dev/null
iptables -t nat -D POSTROUTING -s $ip_segment -j MASQUERADE 2>/dev/null
}
#创建moon节点,下面的192.168.2.1改为你的Moon服务器 IP （请注意为公网IP），不支持动态域名
creat_moon(){
moonip="$(nvram get zerotiermoon_ip)"
#检查是否合法ip
regex="\b(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[1-9])\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[1-9])\b"
ckStep2=`echo $moonip | egrep $regex | wc -l`
logger -t "【ZeroTier】" "搭建ZeroTier的Moon中转服务器，生成moon配置文件"
zeromoonip="$(nvram get zeromoonwan)"
if [ "$zeromoonip" = "1" ]; then
#自动获取wanip
ip_addr=`ifconfig -a ppp0 | grep 'inet addr:' | cut -d: -f2 | awk '{ print $1}'`
else
ip_addr=$moonip
fi
logger -t "【ZeroTier】" "ZeroTier Moon服务器 IP $ip_addr"
if [ -e $config_path/identity.public ]; then
$PROGIDT initmoon $config_path/identity.public > $config_path/moon.json
if `sed -i "s/\[\]/\[ \"$ip_addr\/9993\" \]/" $config_path/moon.json >/dev/null 2>/dev/null`; then
logger -t "【ZeroTier】" "生成moon配置文件成功"
else
logger -t "【ZeroTier】" "生成moon配置文件失败"
fi
logger -t "【ZeroTier】" "生成签名文件"
cd $config_path
pwd
$PROGIDT genmoon $config_path/moon.json
[ $? -ne 0 ] && return 1
logger -t "【ZeroTier】" "创建moons.d文件夹，并把签名文件移动到文件夹内"
if [ ! -d "$config_path/moons.d" ]; then
mkdir -p $config_path/moons.d
fi
#服务器加入moon server
mv $config_path/*.moon $config_path/moons.d/ >/dev/null 2>&1
logger -t "【ZeroTier】" "moon节点创建完成"
zmoonid=`cat moon.json | awk -F "[id]" '/"id"/{print$0}'` >/dev/null 2>&1
zmoonid=`echo $zmoonid | awk -F "[:]" '/"id"/{print$2}'` >/dev/null 2>&1
zmoonid=`echo $zmoonid | tr -d '"|,'`
nvram set zerotiermoon_id="$zmoonid"
logger -t "【ZeroTier】" "已生成Moon服务器的ID: $zmoonid"
else
logger -t "【ZeroTier】" "identity.public不存在"
fi
}
remove_moon(){
zmoonid="$(nvram get zerotiermoon_id)"
if [ ! -n "$zmoonid"]; then
rm -f $config_path/moons.d/000000$zmoonid.moon
rm -f $config_path/moon.json
nvram set zerotiermoon_id=""
fi
}
zero_dl(){
sleep 2
zerotier_start
}
case $ACTION in
start)
zerotier_start
;;
check)
zerotier_check
;;
stop)
zerotier_close
;;
keep)
#zerotier_keep
zerotier_keep
;;
restart)
zerotier_close
zerotier_start
;;
*)
zerotier_check
;;
esac
|
|
简体中文
繁體中文
English
日本語
Deutsch
한국 사람
بالعربية
TÜRKÇE
português
คนไทย
IP卡
狗仔卡
发表于 2023-5-12 10:02
置顶卡
沉默卡
喧嚣卡
顶贴卡
显身卡