search

fscarmen / warp-sh

WARP script is move to: https://gitlab.com/fscarmen/warp
942 stars 203 forks source link

udp被限制 #87

Closed wcwq98 closed 3 months ago

wcwq98 commented 4 months ago

报错：WARP 的所有的 endpoint 均不能连通 但问了服务商也没见说被限制 重装系统也不见得 1912671d3f05659f7e43341b3616dfdf

fscarmen commented 4 months ago

看看

wget --no-check-certificate -O /dev/null https://gitlab.com/fscarmen/warp/-/raw/main/wireguard-go/wireguard-go-linux-amd64-20230223
wcwq98 commented 4 months ago

还是不行

fscarmen commented 4 months ago

还是不行

是不是 IPv6 only的机器？如果是看看是不是这个问题 https://github.com/fscarmen/warp-sh/issues/85

wcwq98 commented 4 months ago

很奇怪 我刚刚重装了下系统，第一次直接运行不行 第二次运行你给的命令又能获取到ip了

wcwq98 commented 4 months ago

是仅ipv6的机器 那获取不到ip是什么原因呢

fscarmen commented 4 months ago

应该是dns64 的问题，访问的 github 站点不支持 IPv6

wcwq98 commented 4 months ago

那有办法解决吗 现在又自动掉IP了 还连接不上 请选择: 4 后台获取 WARP IP 中,最大尝试5次…… 第1次尝试 第2次尝试 第3次尝试 第4次尝试 第5次尝试 ↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓↓ 当前操作系统: Ubuntu 20.04.1 LTS

内核:5.4.0-42-generic

菜单选项: 4. 打开 WARP (warp o)

Warning: `/etc/wireguard/warp.conf' is world accessible ┌───────────────────────────────────────────────────┐ │ │ │ Running this software on Linux is unnecessary, │ │ because the Linux kernel has built-in first │ │ class support for WireGuard, which will be │ │ faster, slicker, and better integrated. For │ │ information on installing the kernel module, │ │ please visit: https://wireguard.com/install. │ │ │ └───────────────────────────────────────────────────┘ INFO: (warp) 2024/07/21 17:06:26 Starting wireguard-go version 0.0.20201118-reserved [#] wg setconf warp /dev/fd/63 [#] ip -4 address add 172.16.0.2/32 dev warp [#] ip -6 address add 2606:4700:110:8862:6085:387e:c61b:4dbd/128 dev warp [#] ip link set mtu 1400 up dev warp [#] resolvconf -a warp -m 0 -x [#] wg set warp fwmark 51820 [#] ip -4 route add 0.0.0.0/0 dev warp table 51820 [#] ip -4 rule add not fwmark 51820 table 51820 [#] ip -4 rule add table main suppress_prefixlength 0 [#] sysctl -q net.ipv4.conf.all.src_valid_mark=1 [#] iptables-restore -n [#] ip -6 rule add from 2408:871a:b000:2:be24:11ff:fee7:4e36 lookup main ↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑↑

fscarmen commented 4 months ago

看这个，是没有错误的哦，看不出问题

wcwq98 commented 4 months ago

这是udp被限制的输出吗 root@ECS1280:~/QChatGPT# head -n 10 /tmp/endpoint_result IP:PORT, LOSS, DELAY 162.159.192.55:4233,0.00%,timeout ms 162.159.192.0:4233,0.00%,timeout ms 162.159.192.0:8742,0.00%,timeout ms 162.159.192.1:4233,0.00%,timeout ms 162.159.192.1:8742,0.00%,timeout ms 162.159.192.2:4233,0.00%,timeout ms 162.159.192.2:8742,0.00%,timeout ms 162.159.192.3:4233,0.00%,timeout ms 162.159.192.3:8742,0.00%,timeout ms

fscarmen commented 4 months ago

是的，全部 timeout 了，即是全部 endpoint 都不通。

正常是这样的

root@test:~# head -10 /tmp/endpoint_result
IP:PORT, LOSS, DELAY
162.159.195.202:903,0.00%,10 ms
162.159.195.66:903,0.00%,10 ms
162.159.195.4:500,0.00%,10 ms
162.159.195.6:903,0.00%,10 ms
162.159.195.135:500,0.00%,10 ms
162.159.195.200:500,0.00%,10 ms
162.159.195.75:903,0.00%,10 ms
162.159.195.22:903,0.00%,10 ms
162.159.195.251:500,0.00%,10 ms
wcwq98 commented 4 months ago

但是我提交了工单服务商说并没有禁用udp端口 创建时间：2024-07-21 18:38

工单部门：技术部门 产品：IPV6云2H2G3M型 用户 2024-07-21 18:38:05 检测udp端口的运行日志：

2024/07/21 18:34:25 测试端点162.159.195.252:8854时出错：连接162.159.195.252:8854时出错：dial udp 162.159.195.252:8854: connect: network is unreachable

2024/07/21 18:34:25 测试端点162.159.195.253:943时出错：连接162.159.195.253:943时出错：dial udp 162.159.195.253:943: connect: network is unreachable

2024/07/21 18:34:25 测试端点162.159.195.252:943时出错：连接162.159.195.252:943时出错：dial udp 162.159.195.252:943: connect: network is unreachable

2024/07/21 18:34:25 测试端点162.159.195.253:8854时出错：连接162.159.195.253:8854时出错：dial udp 162.159.195.253:8854: connect: network is unreachable

2024/07/21 18:34:25 测试端点162.159.195.254:8854时出错：连接162.159.195.254:8854时出错：dial udp 162.159.195.254:8854: connect: network is unreachable

2024/07/21 18:34:25 测试端点162.159.195.254:943时出错：连接162.159.195.254:943时出错：dial udp 162.159.195.254:943: connect: network is unreachable

测试结果已经写入/tmp/endpoint_result

root@ECS1280:~/QChatGPT# head -n 10 /tmp/endpoint_result

IP:PORT, LOSS, DELAY

162.159.192.0:3138,0.00%,timeout ms

162.159.192.13:3138,0.00%,timeout ms

162.159.192.0:500,0.00%,timeout ms

162.159.192.1:3138,0.00%,timeout ms

162.159.192.13:500,0.00%,timeout ms

162.159.192.14:3138,0.00%,timeout ms

162.159.192.14:500,0.00%,timeout ms

162.159.192.15:3138,0.00%,timeout ms

162.159.192.15:500,0.00%,timeout ms

管理员 管理员 2024-07-21 18:38:17 您的问题已收到，我们将会尽快处理您的问题，请耐心等待，感谢您的支持理解。 为了更快的解决您的问题，请先阅读一下帮助文档https://www.8465.cn/helpcontent/45.html 管理员 管理员 2024-07-21 18:39:07 您好UDP我们并没有限制，请检查目标是否支持IPV6

wcwq98 commented 4 months ago

想问问有办法检测仅ipv6机器的udp端口吗

fscarmen commented 4 months ago

哦，如果你是IPv6的机器，应该用 IPv6 的 IP来测啊

wget -O /tmp/endpoint https://gitlab.com/fscarmen/warp/-/raw/main/endpoint/warp-linux-amd64 && chmod +x /tmp/endpoint

wget -O /tmp/ip https://gitlab.com/fscarmen/warp/-/raw/main/endpoint/ipv6

/tmp/endpoint -file /tmp/ip -output /tmp/endpoint_result

head -10 /tmp/endpoint_result
fscarmen commented 4 months ago 
echo -ne '\x00\x01\x00\x00\x21\x12\xA4\x42\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' | nc -u -w1 stun.cloudflare.com 3478 | xxd -p
wcwq98 commented 4 months ago

用了第一段命令返回了这个想 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fb]:3581 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fc]:7281 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1ff]:7281 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1ff]:3581 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fe]:3581 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fd]:3581 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fd]:7281 数据包丢失 2024/07/21 19:49:25 [2606:4700:d0::a29f:c1fe]:7281 数据包丢失 测试结果已经写入/tmp/endpoint_result root@ECS1280:~# root@ECS1280:~# head -10 /tmp/endpoint_result IP:PORT, LOSS, DELAY [2606:4700:100::a29f:c112]:880,100.00%,1000 ms [2606:4700:100::a29f:c193]:4198,100.00%,1000 ms [2606:4700:100::a29f:c102]:4198,100.00%,1000 ms [2606:4700:100::a29f:c118]:4198,100.00%,1000 ms [2606:4700:100::a29f:c170]:4198,100.00%,1000 ms [2606:4700:100::a29f:c1e3]:4198,100.00%,1000 ms [2606:4700:100::a29f:c168]:4198,100.00%,1000 ms [2606:4700:100::a29f:c1fa]:880,100.00%,1000 ms [2606:4700:100::a29f:c1ef]:880,100.00%,1000 ms root@ECS1280:~#

wcwq98 commented 4 months ago

第二个命令没有返回信息

fscarmen commented 4 months ago

第2个命令正常是有回显的，基础能判断你的机器限制了 UDP 了

image
fscarmen commented 4 months ago

你可以安装一些 udp 的协议 , Hysteria 1 / Hysteria 2 / Tuic V5，看看节点通不通就知道了。

wcwq98 commented 4 months ago

好我试试

wcwq98 commented 4 months ago

大佬我搞不定要不还是你来吧（目前应该是搭好hysteria但ping不通）

fscarmen commented 4 months ago

大佬我搞不定要不还是你来吧（目前应该是搭好hysteria但ping不通）

其实不用多试的，就是你的 vps 限制了 udp ，所以基于 udp 的协议都不通。重置系统，再不行仍然发 ticket

wcwq98 commented 4 months ago

重置系统没多久又会掉IP 现在已经提交工单给服务商了 但服务商一直说他们没限制udp服务