mirror of
https://github.com/baoweise-bot/aimili-vpngate.git
synced 2026-06-29 03:11:30 +08:00
feat: initial open-source release with cleaned codebase
This commit is contained in:
baoweise
37
.gitignore
vendored
Normal file
37
.gitignore
vendored
Normal file
@@ -0,0 +1,37 @@
|
||||
# Nuitka compiler intermediate folders
|
||||
vpngate_manager.build/
|
||||
vpngate_manager.dist/
|
||||
*.build/
|
||||
*.dist/
|
||||
aimilivpn
|
||||
|
||||
# Debian building artifacts
|
||||
*.deb
|
||||
aimilivpn_*
|
||||
|
||||
# Python caches and bytecode
|
||||
__pycache__/
|
||||
*.pyc
|
||||
*.pyo
|
||||
*.pyd
|
||||
|
||||
# Local runtime data folders
|
||||
vpngate_data/
|
||||
logs/
|
||||
*.log
|
||||
*.tmp
|
||||
|
||||
# IDE settings
|
||||
.vscode/
|
||||
.idea/
|
||||
.gemini/
|
||||
.cursorrules
|
||||
|
||||
|
||||
# Scratch and test files containing credentials
|
||||
scratch/
|
||||
*连接配置*
|
||||
|
||||
# Local analysis and doc files
|
||||
AimiliVPN_Analysis_ZH.md
|
||||
|
||||
22
LICENSE
Normal file
22
LICENSE
Normal file
@@ -0,0 +1,22 @@
|
||||
GNU GENERAL PUBLIC LICENSE
|
||||
Version 3, 29 June 2007
|
||||
|
||||
Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
of this license document, but changing it is not allowed.
|
||||
|
||||
Preamble
|
||||
|
||||
The GNU General Public License is a free, copyleft license for
|
||||
software and other kinds of works.
|
||||
...
|
||||
[For brevity, you can obtain the complete license text from https://www.gnu.org/licenses/gpl-3.0.txt]
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
181
README.md
Normal file
181
README.md
Normal file
@@ -0,0 +1,181 @@
|
||||
# AimiliVPN 🌐
|
||||
|
||||
Bilingual: [中文](#中文) | [English](#english)
|
||||
|
||||
---
|
||||
|
||||
## 中文
|
||||
|
||||
[](https://t.me/arestemple)
|
||||
[](https://339936.xyz)
|
||||
[](https://www.youtube.com/watch?v=s-ATfXR8BpI)
|
||||
[](mailto:yaohunse7@gmail.com)
|
||||
|
||||
|
||||
---
|
||||
|
||||
**AimiliVPN** 是一个专为 Linux VPS（如 Ubuntu）设计的智能 VPN 代理网关管理器。它能够自动采集 VPNGate 开放节点，进行多线程可用性测试与延迟过滤，利用 OpenVPN 隧道与策略路由（Policy Routing）实现出站网络，并在本地提供高性能的 HTTP/SOCKS5 代理网关服务，适合用作 Xray 的落地出站代理。
|
||||
|
||||
---
|
||||
|
||||
### 🚀 快速开始
|
||||
|
||||
在您的 **Ubuntu** VPS 机器上，复制并运行以下一行指令即可完成自动安装部署：
|
||||
|
||||
```bash
|
||||
bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### 🛠️ 快捷命令行 (CLI)
|
||||
|
||||
安装成功后，系统会在全局注册 `ml` 快捷管理指令，直接运行 `ml` 可打开图形化交互终端，也可通过以下指令执行：
|
||||
* **`ml status`** 或 **`ml`**：查看当前运行状态（代理端口、活动 VPN 节点、直连延迟、网页后台登录地址等）。
|
||||
* **`ml start`**：启动 AimiliVPN 服务。
|
||||
* **`ml stop`**：停止 AimiliVPN 服务（并自动清理策略路由与 OpenVPN 进程）。
|
||||
* **`ml restart`**：重启服务。
|
||||
* **`ml logs`**：查看实时的 Systemd 服务运行日志。
|
||||
* **`ml web`**：切换网页绑定地址（127.0.0.1 仅本地，或 0.0.0.0 允许公网访问）与重置安全后缀。
|
||||
* **`ml port`**：修改网页管理控制台监听端口。
|
||||
* **`ml password`**：生成新的 12 位安全管理密码。
|
||||
* **`ml uninstall`**：完全卸载服务并清理相关环境。
|
||||
|
||||
#### 💡 首次安装与常见报错解决（小白必看）
|
||||
|
||||
##### 1. 极简系统缺少依赖（Ubuntu 18-26 / Debian 首次安装）
|
||||
如果系统是全新纯净版，可能会因为缺少 `curl` 或 `ca-certificates` 导致一键安装脚本下载失败。请在安装前执行以下命令补充依赖：
|
||||
```bash
|
||||
sudo apt-get update && sudo apt-get install -y curl ca-certificates
|
||||
```
|
||||
|
||||
##### 2. Debian 系统兼容运行方法
|
||||
本脚本一键包默认限制在 Ubuntu 系统运行。Debian 用户如需运行，可先下载并用 `sed` 临时将系统类型限制替换为 `"ubuntu"` 后再执行安装：
|
||||
```bash
|
||||
curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
|
||||
sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
|
||||
sudo bash install.sh
|
||||
```
|
||||
|
||||
##### 3. 包管理器被占用（Apt 锁冲突报错解决）
|
||||
若一键安装提示 `Could not get lock /var/lib/dpkg/lock-frontend` 等“无法获得锁”的报错，可运行以下命令解除占用并重新安装：
|
||||
```bash
|
||||
# 1. 停止自动更新服务并终止相关进程
|
||||
sudo systemctl stop unattended-upgrades 2>/dev/null
|
||||
sudo killall apt apt-get dpkg 2>/dev/null
|
||||
|
||||
# 2. 清理残留锁文件
|
||||
sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock
|
||||
|
||||
# 3. 修复受损包并重新更新源
|
||||
sudo dpkg --configure -a
|
||||
sudo apt-get update
|
||||
```
|
||||
执行完毕后，重新运行一键安装脚本即可。
|
||||
|
||||
---
|
||||
|
||||
### ⚙️ 系统架构
|
||||
|
||||
```
|
||||
[ 3x-ui / Xray ]
|
||||
│ (HTTP / SOCKS5)
|
||||
▼
|
||||
[ 本地代理服务器 ] (Port 7928) ──(强制绑定 SO_BINDTODEVICE)──► [ tun0 虚拟网卡 ]
|
||||
│ │
|
||||
│ (SSH, Web UI, etc. 依然走物理路由) │ (策略路由表 100)
|
||||
▼ ▼
|
||||
[ 物理网卡 eth0 ] ◄───────────────────────────────────────── [ OpenVPN 加密隧道 ]
|
||||
│ │
|
||||
▼ (真实服务器 IP 出站) ▼ (VPNGate 落地节点出站)
|
||||
(国内直连流量) (解锁流媒体、锁区网站)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## English
|
||||
|
||||
[](https://t.me/arestemple)
|
||||
[](https://339936.xyz)
|
||||
[](mailto:yaohunse7@gmail.com)
|
||||
|
||||
---
|
||||
|
||||
**AimiliVPN** is an intelligent VPN proxy gateway manager designed specifically for Linux VPS (e.g. Ubuntu). It automatically collects open VPNGate nodes, conducts multi-threaded availability testing and latency filtering, establishes secure out-of-band routing via OpenVPN and policy routing to **prevent VPS lockouts**, and hosts a high-performance local SOCKS5/HTTP proxy gateway. It is highly optimized to serve as a residential/unlocked egress node for upstream proxies like 3x-ui / Xray.
|
||||
|
||||
### ✨ Key Features
|
||||
|
||||
1. ⚡ **Auto-Collection & Multi-Threaded Probing**:
|
||||
* Periodically fetches candidate nodes from VPNGate.
|
||||
* Performs concurrent ping latency and handshake tests to maintain a pool of high-quality nodes.
|
||||
2. 🔒 **Anti-Lockout Routing (Policy Routing)**:
|
||||
* Directs traffic from the virtual adapter `tun0` to a customized routing table (Table 100) without altering the system's default gateway.
|
||||
* Keeps SSH sessions and server administration panels unaffected by the active VPN.
|
||||
3. 🚫 **Fail-Safe Leak Protection**:
|
||||
* Outbound socket connections inside the local proxy server are strictly bound to `tun0` via `SO_BINDTODEVICE`.
|
||||
* If the VPN disconnects, proxy requests are instantly blocked with a `502 Bad Gateway` instead of falling back to the VPS physical IP address.
|
||||
4. 🖥️ **Modern Web UI Panel**:
|
||||
* Sleek dark/light responsive console (default port `8787`).
|
||||
* Provides real-time geolocation, ISP, ASN, latency, and IP-type (residential/datacenter) detection.
|
||||
* Enables manual node selection, blacklist resets, proxy speed-testing, and logs query.
|
||||
* Secured by a random secret path suffix (e.g., `/EJsW2EeBo9lY/`) and password authentication.
|
||||
5. 🛠️ **CLI Utility (ml)**:
|
||||
* Command-line helper tool `ml` with a menu-driven interface.
|
||||
* Provides quick statuses, starts/stops the daemon, resets passwords, and changes bind hosts.
|
||||
|
||||
---
|
||||
|
||||
### 🚀 Quick Start
|
||||
|
||||
To install and deploy AimiliVPN on your **Ubuntu** server, copy and paste the following command:
|
||||
|
||||
```bash
|
||||
bash <(curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh)
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
### 🛠️ CLI Helper Commands
|
||||
|
||||
Once installed, use the global command `ml` to launch the interactive helper menu, or use the shortcuts below:
|
||||
* **`ml status`** or **`ml`**: Check running system status (active nodes, proxy ports, latency, URLs).
|
||||
* **`ml start`**: Start the gateway service.
|
||||
* **`ml stop`**: Stop the gateway service (and clean routing tables).
|
||||
* **`ml restart`**: Restart the service.
|
||||
* **`ml logs`**: View real-time Systemd output logs.
|
||||
* **`ml web`**: Toggle Web UI accessibility (127.0.0.1 or 0.0.0.0) and reset suffix paths.
|
||||
* **`ml port`**: Update the Web Console port.
|
||||
* **`ml password`**: Regenerate a secure 12-character administration password.
|
||||
* **`ml uninstall`**: Completely remove the service and repository files from your VPS.
|
||||
|
||||
#### 💡 Troubleshooting & First-Time Installation Tips
|
||||
|
||||
##### 1. Missing Dependencies on Minimal OS (Ubuntu / Debian)
|
||||
If you are using a brand new minimal OS, the installation might fail due to missing `curl` or `ca-certificates`. Run the following command to pre-install dependencies:
|
||||
```bash
|
||||
sudo apt-get update && sudo apt-get install -y curl ca-certificates
|
||||
```
|
||||
|
||||
##### 2. Bypass OS Restrictions for Debian
|
||||
The script is restricted to Ubuntu by default. For Debian systems, run the following commands to download, patch, and install:
|
||||
```bash
|
||||
curl -Ls https://raw.githubusercontent.com/baoweise-bot/aimili-vpngate/main/install.sh -o install.sh
|
||||
sed -i 's/"${ID:-}"/"ubuntu"/g' install.sh
|
||||
sudo bash install.sh
|
||||
```
|
||||
|
||||
##### 3. Package Manager Locked (`apt`/`dpkg` Lock Errors)
|
||||
If you see `Could not get lock /var/lib/dpkg/lock-frontend` or similar busy errors, run these commands to unlock and retry:
|
||||
```bash
|
||||
# 1. Stop automatic upgrades & kill active processes
|
||||
sudo systemctl stop unattended-upgrades 2>/dev/null
|
||||
sudo killall apt apt-get dpkg 2>/dev/null
|
||||
|
||||
# 2. Remove lock files
|
||||
sudo rm -f /var/lib/dpkg/lock* /var/lib/apt/lists/lock /var/cache/apt/archives/lock
|
||||
|
||||
# 3. Repair package states & update
|
||||
sudo dpkg --configure -a
|
||||
sudo apt-get update
|
||||
```
|
||||
Once done, re-run the installation script.
|
||||
926
install.sh
Normal file
926
install.sh
Normal file
@@ -0,0 +1,926 @@
|
||||
#!/usr/bin/env bash
|
||||
set -e
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[0;33m'
|
||||
BLUE='\033[0;36m'
|
||||
PLAIN='\033[0m'
|
||||
|
||||
# 1. Check root permissions
|
||||
if [[ "$(id -u)" != "0" ]]; then
|
||||
echo -e "${RED}错误: 必须以 root 权限运行此脚本。请使用: sudo bash $0${PLAIN}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# 2. Check OS distribution (Ubuntu only)
|
||||
if [ -f /etc/os-release ]; then
|
||||
. /etc/os-release
|
||||
if [[ "${ID:-}" != "ubuntu" ]]; then
|
||||
echo -e "${RED}错误: 本系统不是 Ubuntu！目前 AimiliVPN 仅支持 Ubuntu 系统。${PLAIN}"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo -e "${RED}错误: 无法确定操作系统版本，缺少 /etc/os-release 文件。${PLAIN}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo -e "${BLUE}==========================================================${PLAIN}"
|
||||
echo -e "${BLUE} 欢迎使用 AimiliVPN 一键源码部署与管理脚本${PLAIN}"
|
||||
echo -e "${BLUE}==========================================================${PLAIN}"
|
||||
|
||||
# 3. Configure GitHub Repository URL
|
||||
# Default to the official repository (baoweise-bot/aimili-vpngate)
|
||||
DEFAULT_USER="baoweise-bot"
|
||||
DEFAULT_REPO="aimili-vpngate"
|
||||
|
||||
# Allow custom repository override via command line arguments
|
||||
GITHUB_USER="${1:-${DEFAULT_USER}}"
|
||||
GITHUB_REPO="${2:-${DEFAULT_REPO}}"
|
||||
|
||||
GITHUB_URL="https://github.com/${GITHUB_USER}/${GITHUB_REPO}.git"
|
||||
|
||||
echo -e "\n${YELLOW}[1/4] 正在安装系统基础依赖...${PLAIN}"
|
||||
echo -e " -> 正在运行 apt-get update 更新软件源清单..."
|
||||
apt-get update -q || true
|
||||
echo -e " -> 正在运行 apt-get install 安装基础依赖包 (openvpn, curl, git, iptables, iproute2, psmisc, python3)..."
|
||||
apt-get install -y openvpn curl git ca-certificates iptables iproute2 psmisc python3
|
||||
|
||||
# 4. Clone or pull the repository
|
||||
INSTALL_DIR="/opt/aimilivpn"
|
||||
echo -e "\n${YELLOW}[2/4] 正在从 GitHub 部署源代码到 ${INSTALL_DIR}...${PLAIN}"
|
||||
if [ -f "${INSTALL_DIR}/.local_dev" ]; then
|
||||
echo -e "${GREEN}检测到本地开发模式 (.local_dev)，跳过 git pull/reset 保持本地修改。${PLAIN}"
|
||||
else
|
||||
if [ -d "${INSTALL_DIR}" ]; then
|
||||
echo -e " -> 目录 ${INSTALL_DIR} 已存在，正在更新并强制覆盖本地源码..."
|
||||
cd "${INSTALL_DIR}"
|
||||
git fetch --all || true
|
||||
BRANCH="main"
|
||||
if git rev-parse --verify origin/main >/dev/null 2>&1; then
|
||||
BRANCH="main"
|
||||
elif git rev-parse --verify origin/master >/dev/null 2>&1; then
|
||||
BRANCH="master"
|
||||
fi
|
||||
echo -e " -> 正在强制重置本地源码至 origin/${BRANCH} ..."
|
||||
if git reset --hard "origin/${BRANCH}"; then
|
||||
echo -e "${GREEN} -> 源码更新成功！${PLAIN}"
|
||||
else
|
||||
if git pull; then
|
||||
echo -e "${GREEN} -> 源码更新成功！${PLAIN}"
|
||||
else
|
||||
echo -e "${YELLOW} -> 警告: git pull/reset 失败，将保留当前本地源码并继续安装。${PLAIN}"
|
||||
fi
|
||||
fi
|
||||
else
|
||||
echo -e " -> 正在克隆 GitHub 仓库 ${GITHUB_URL} ..."
|
||||
if git clone "${GITHUB_URL}" "${INSTALL_DIR}"; then
|
||||
echo -e "${GREEN} -> 克隆成功！${PLAIN}"
|
||||
else
|
||||
echo -e "${RED} -> 错误: 无法克隆仓库 ${GITHUB_URL}，请检查网络！${PLAIN}"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
fi
|
||||
|
||||
# 5. Configure Systemd Service (direct python3 run)
|
||||
echo -e "\n${YELLOW}[3/4] 正在配置 systemd 系统服务...${PLAIN}"
|
||||
echo -e " -> 正在创建服务配置 /lib/systemd/system/aimilivpn.service ..."
|
||||
cat > /lib/systemd/system/aimilivpn.service <<EOF
|
||||
[Unit]
|
||||
Description=AimiliVPN OpenVPN Manager with HTTP/SOCKS5 Proxy
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
WorkingDirectory=${INSTALL_DIR}
|
||||
ExecStart=/usr/bin/python3 vpngate_manager.py
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
EnvironmentFile=-/etc/default/aimilivpn
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
echo -e " -> 正在重新加载 systemd 系统服务列表并启用开机自启..."
|
||||
systemctl daemon-reload
|
||||
systemctl enable aimilivpn.service
|
||||
|
||||
# 6. Configure global command shortcut "ml"
|
||||
echo -e "\n${YELLOW}[4/4] 正在创建全局命令快捷接口 'ml'...${PLAIN}"
|
||||
echo -e " -> 正在写入管理脚本 /usr/bin/ml ..."
|
||||
cat > /usr/bin/ml <<'EOF'
|
||||
#!/usr/bin/env python3
|
||||
import sys
|
||||
import os
|
||||
import socket
|
||||
import subprocess
|
||||
import time
|
||||
import tty
|
||||
import termios
|
||||
|
||||
INSTALL_DIR = "/opt/aimilivpn"
|
||||
LOG_FILE = "/opt/aimilivpn/vpngate_data/vpngate.log"
|
||||
|
||||
def generate_random_password():
|
||||
import random
|
||||
import string
|
||||
chars = string.ascii_letters + string.digits
|
||||
while True:
|
||||
pwd = "".join(random.choices(chars, k=12))
|
||||
if any(c.islower() for c in pwd) and any(c.isupper() for c in pwd) and any(c.isdigit() for c in pwd):
|
||||
return pwd
|
||||
|
||||
def generate_random_suffix():
|
||||
import random
|
||||
import string
|
||||
return "".join(random.choices(string.ascii_letters + string.digits, k=12))
|
||||
|
||||
def load_ui_cfg():
|
||||
import json
|
||||
path = "/opt/aimilivpn/vpngate_data/ui_auth.json"
|
||||
cfg = {"host": "0.0.0.0", "port": 8787, "secret_path": "EJsW2EeBo9lY", "password": ""}
|
||||
if os.path.exists(path):
|
||||
try:
|
||||
with open(path, "r", encoding="utf-8") as f:
|
||||
data = json.load(f)
|
||||
for k, v in data.items():
|
||||
cfg[k] = v
|
||||
except Exception:
|
||||
pass
|
||||
return cfg
|
||||
|
||||
def save_ui_cfg(cfg):
|
||||
import json
|
||||
path = "/opt/aimilivpn/vpngate_data/ui_auth.json"
|
||||
os.makedirs(os.path.dirname(path), exist_ok=True)
|
||||
try:
|
||||
with open(path, "w", encoding="utf-8") as f:
|
||||
json.dump(cfg, f, ensure_ascii=False, indent=2)
|
||||
return True
|
||||
except Exception:
|
||||
return False
|
||||
|
||||
def load_state():
|
||||
import json
|
||||
path = "/opt/aimilivpn/vpngate_data/state.json"
|
||||
state = {"active_openvpn_node_id": "", "last_check_message": "", "is_connecting": False}
|
||||
if os.path.exists(path):
|
||||
try:
|
||||
with open(path, "r", encoding="utf-8") as f:
|
||||
data = json.load(f)
|
||||
for k, v in data.items():
|
||||
state[k] = v
|
||||
except Exception:
|
||||
pass
|
||||
return state
|
||||
|
||||
def get_active_node_info():
|
||||
import json
|
||||
path = "/opt/aimilivpn/vpngate_data/nodes.json"
|
||||
state = load_state()
|
||||
active_id = state.get("active_openvpn_node_id")
|
||||
if not active_id:
|
||||
return None, None
|
||||
if os.path.exists(path):
|
||||
try:
|
||||
with open(path, "r", encoding="utf-8") as f:
|
||||
nodes = json.load(f)
|
||||
for n in nodes:
|
||||
if n.get("id") == active_id:
|
||||
ip = n.get("ip") or n.get("remote_host")
|
||||
loc = n.get("location") or n.get("country") or "未知"
|
||||
return ip, loc
|
||||
except Exception:
|
||||
pass
|
||||
return None, None
|
||||
|
||||
def ping_ip(ip):
|
||||
if not ip:
|
||||
return None
|
||||
try:
|
||||
# Run standard linux ping command with 1 packet and 2 seconds timeout
|
||||
res = subprocess.run(["ping", "-c", "1", "-W", "2", ip], capture_output=True, text=True, timeout=3)
|
||||
if res.returncode == 0:
|
||||
out = res.stdout
|
||||
lines = out.splitlines()
|
||||
for line in lines:
|
||||
if "rtt" in line or "min/avg" in line:
|
||||
parts = line.split("=")[1].strip().split("/")
|
||||
if len(parts) >= 2:
|
||||
avg_rtt = float(parts[1])
|
||||
return f"{int(avg_rtt)} ms"
|
||||
return "已响应"
|
||||
else:
|
||||
return "检测超时"
|
||||
except Exception:
|
||||
return "无法连接"
|
||||
|
||||
def get_public_ip():
|
||||
path = "/opt/aimilivpn/vpngate_data/public_ip.txt"
|
||||
if os.path.exists(path):
|
||||
try:
|
||||
with open(path, "r", encoding="utf-8") as f:
|
||||
ip = f.read().strip()
|
||||
if ip:
|
||||
return ip
|
||||
except Exception:
|
||||
pass
|
||||
import urllib.request
|
||||
try:
|
||||
req = urllib.request.Request("https://api.ipify.org", headers={"User-Agent": "curl/7.68.0"})
|
||||
with urllib.request.urlopen(req, timeout=1.5) as r:
|
||||
ip = r.read().decode().strip()
|
||||
if ip:
|
||||
try:
|
||||
os.makedirs(os.path.dirname(path), exist_ok=True)
|
||||
with open(path, "w", encoding="utf-8") as f:
|
||||
f.write(ip)
|
||||
except Exception:
|
||||
pass
|
||||
return ip
|
||||
except Exception:
|
||||
pass
|
||||
return "您的服务器公网IP"
|
||||
|
||||
def check_port_listening(port):
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||
s.settimeout(0.2)
|
||||
try:
|
||||
s.connect(("127.0.0.1", port))
|
||||
s.close()
|
||||
return True
|
||||
except Exception:
|
||||
return False
|
||||
|
||||
def get_service_pid(service_name="aimilivpn.service"):
|
||||
try:
|
||||
for pid_dir in os.listdir('/proc'):
|
||||
if pid_dir.isdigit():
|
||||
try:
|
||||
with open(os.path.join('/proc', pid_dir, 'cmdline'), 'r') as f:
|
||||
cmd = f.read()
|
||||
if 'vpngate_manager.py' in cmd:
|
||||
return pid_dir
|
||||
except Exception:
|
||||
continue
|
||||
except Exception:
|
||||
pass
|
||||
return None
|
||||
|
||||
def check_service_active(service_name="aimilivpn.service"):
|
||||
return get_service_pid(service_name) is not None
|
||||
|
||||
def check_openvpn_process():
|
||||
try:
|
||||
for pid_dir in os.listdir('/proc'):
|
||||
if pid_dir.isdigit():
|
||||
try:
|
||||
with open(os.path.join('/proc', pid_dir, 'cmdline'), 'r') as f:
|
||||
cmd = f.read().split('\x00')[0]
|
||||
if 'openvpn' in cmd:
|
||||
return True
|
||||
except Exception:
|
||||
continue
|
||||
except Exception:
|
||||
pass
|
||||
return False
|
||||
|
||||
def get_display_width(s):
|
||||
import re
|
||||
ansi_escape = re.compile(r'\x1b\[[0-9;]*[mGKH]')
|
||||
s_clean = ansi_escape.sub('', s)
|
||||
width = 0
|
||||
for char in s_clean:
|
||||
if ord(char) > 127:
|
||||
width += 2
|
||||
else:
|
||||
width += 1
|
||||
return width
|
||||
|
||||
def format_line(label, value, target_width=26):
|
||||
prefix = " ● "
|
||||
w = get_display_width(label)
|
||||
padding = " " * max(0, target_width - w)
|
||||
return f"{prefix}{label}{padding}: {value}"
|
||||
|
||||
def print_status():
|
||||
cfg = load_ui_cfg()
|
||||
ui_port = cfg.get("port", 8787)
|
||||
secret_path = cfg.get("secret_path", "EJsW2EeBo9lY")
|
||||
state = load_state()
|
||||
is_connecting = state.get("is_connecting", False)
|
||||
|
||||
gateway_ok = check_port_listening(7928)
|
||||
service_ok = check_service_active("aimilivpn.service")
|
||||
openvpn_ok = check_openvpn_process()
|
||||
pid = get_service_pid("aimilivpn.service")
|
||||
|
||||
active_ip, active_loc = get_active_node_info()
|
||||
latency = state.get("active_node_latency", "测试中...") if active_ip else "无活动连接"
|
||||
|
||||
green = "\033[1;32m"
|
||||
red = "\033[1;31m"
|
||||
reset = "\033[0m"
|
||||
bold = "\033[1m"
|
||||
yellow = "\033[1;33m"
|
||||
|
||||
backend_status = f"{green}[已激活] (PID: {pid}){reset}" if (service_ok and pid) else f"{red}[未启动]{reset}"
|
||||
|
||||
if is_connecting:
|
||||
gateway_status = f"{yellow}[切换中...]{reset}"
|
||||
openvpn_status = f"{yellow}[{state.get('active_node_latency') or '连接中'}...]{reset}"
|
||||
else:
|
||||
gateway_status = f"{green}[已激活]{reset}" if gateway_ok else f"{red}[未启动]{reset}"
|
||||
openvpn_status = f"{green}[已连接]{reset}" if openvpn_ok else f"{red}[未连接]{reset}"
|
||||
|
||||
print("=======================================================")
|
||||
print(f" {bold}AimiliVPN 管理终端 v2.0{reset} ")
|
||||
print("=======================================================")
|
||||
print("【核心服务状态】")
|
||||
print(format_line("代理网关 (Port 7928)", gateway_status))
|
||||
print(format_line(f"管理后台 (Port {ui_port})", backend_status))
|
||||
print(format_line("连接核心 (OpenVPN)", openvpn_status))
|
||||
|
||||
login_ip = "127.0.0.1" if cfg.get("host") == "127.0.0.1" else get_public_ip()
|
||||
print(format_line("网页登录地址", f"{yellow}http://{login_ip}:{ui_port}/{secret_path}/{reset}"))
|
||||
print(format_line("网页管理账号", cfg.get("username", "admin")))
|
||||
curr_pwd = cfg.get("password", "")
|
||||
masked_pwd = curr_pwd if len(curr_pwd) <= 4 else curr_pwd[:3] + "********" + curr_pwd[-2:]
|
||||
print(format_line("网页管理密码", masked_pwd))
|
||||
print()
|
||||
print("【活动节点状态】")
|
||||
if is_connecting:
|
||||
connecting_msg = state.get('last_check_message') or '正在建立加密隧道并验证路由规则...'
|
||||
print(format_line("节点状态", f"{yellow}{connecting_msg}{reset}"))
|
||||
elif active_ip:
|
||||
print(format_line("节点 IP", active_ip))
|
||||
print(format_line("节点地区", active_loc))
|
||||
print(format_line("节点延迟 (直连测试)", latency))
|
||||
else:
|
||||
print(format_line("节点状态", "无活动连接"))
|
||||
print()
|
||||
print("【使用方法】")
|
||||
print(f" export http_proxy=socks5://127.0.0.1:7928")
|
||||
print(f" export https_proxy=socks5://127.0.0.1:7928")
|
||||
print("=======================================================")
|
||||
|
||||
def start_service():
|
||||
print("正在启动 AimiliVPN 服务...", flush=True)
|
||||
subprocess.run(["systemctl", "start", "aimilivpn.service"])
|
||||
print("已发送启动指令。")
|
||||
time.sleep(1)
|
||||
|
||||
def stop_service():
|
||||
print("正在停止 AimiliVPN 服务...", flush=True)
|
||||
subprocess.run(["systemctl", "stop", "aimilivpn.service"])
|
||||
print("已发送停止指令。")
|
||||
time.sleep(1)
|
||||
|
||||
def restart_service():
|
||||
print("正在重启 AimiliVPN 服务...", flush=True)
|
||||
subprocess.run(["systemctl", "restart", "aimilivpn.service"])
|
||||
print("已发送重启指令。")
|
||||
time.sleep(1)
|
||||
|
||||
def show_logs():
|
||||
print("正在查看 AimiliVPN 日志 (按 Ctrl+C 退出)...", flush=True)
|
||||
if os.path.exists(LOG_FILE):
|
||||
try:
|
||||
subprocess.run(["tail", "-f", "-n", "50", LOG_FILE])
|
||||
except KeyboardInterrupt:
|
||||
pass
|
||||
else:
|
||||
print(f"日志文件不存在: {LOG_FILE}")
|
||||
time.sleep(2)
|
||||
|
||||
def update_service():
|
||||
print("正在获取远程更新并检测版本...", flush=True)
|
||||
if os.path.exists(INSTALL_DIR):
|
||||
try:
|
||||
os.chdir(INSTALL_DIR)
|
||||
if not os.path.exists(".git"):
|
||||
print("错误: 当前安装目录不是 Git 仓库，无法通过 Git 更新。")
|
||||
time.sleep(3)
|
||||
return
|
||||
|
||||
# Fetch remote origin updates
|
||||
subprocess.run(["git", "fetch", "--all"], check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
|
||||
|
||||
# Detect remote branch (check origin/main, then origin/master)
|
||||
branch = "main"
|
||||
for b in ["main", "master"]:
|
||||
chk = subprocess.run(["git", "rev-parse", "--verify", f"origin/{b}"], capture_output=True, text=True)
|
||||
if chk.returncode == 0:
|
||||
branch = b
|
||||
break
|
||||
|
||||
local_commit = subprocess.run(["git", "rev-parse", "HEAD"], capture_output=True, text=True).stdout.strip()
|
||||
remote_commit = subprocess.run(["git", "rev-parse", f"origin/{branch}"], capture_output=True, text=True).stdout.strip()
|
||||
|
||||
if local_commit == remote_commit:
|
||||
print("\n【版本状态】当前已是最新版本，无需更新！")
|
||||
override = input("是否强制重新拉取代码并覆盖安装？(y/N): ").strip().lower()
|
||||
if override != 'y':
|
||||
print("已取消更新。")
|
||||
time.sleep(1.5)
|
||||
return
|
||||
else:
|
||||
print(f"\n【检测到更新】本地版本: {local_commit[:8]}，远程最新版本: {remote_commit[:8]}")
|
||||
confirm = input("是否确认开始更新并重启服务？(Y/n): ").strip().lower()
|
||||
if confirm not in ('', 'y', 'yes'):
|
||||
print("已取消更新。")
|
||||
time.sleep(1.5)
|
||||
return
|
||||
|
||||
print(f"\n正在强制重置本地代码至 origin/{branch} ...", flush=True)
|
||||
subprocess.run(["git", "reset", "--hard", f"origin/{branch}"], check=True)
|
||||
|
||||
# Clean up python cache files
|
||||
print("正在清理 Python 缓存 (pycache)...", flush=True)
|
||||
subprocess.run(["find", ".", "-type", "d", "-name", "__pycache__", "-exec", "rm", "-rf", "{}", "+"], check=False)
|
||||
|
||||
print("代码拉取成功，正在重新运行安装脚本...", flush=True)
|
||||
subprocess.run(["bash", "install.sh"])
|
||||
print("更新已完成！")
|
||||
time.sleep(2)
|
||||
except Exception as e:
|
||||
print(f"更新失败: {e}")
|
||||
time.sleep(4)
|
||||
else:
|
||||
print(f"未找到安装目录: {INSTALL_DIR}")
|
||||
time.sleep(2)
|
||||
|
||||
def uninstall_service():
|
||||
confirm = input("确定要完全卸载 AimiliVPN 吗？(y/N): ")
|
||||
if confirm.lower() == 'y':
|
||||
print("正在完全卸载 AimiliVPN...", flush=True)
|
||||
subprocess.run(["systemctl", "stop", "aimilivpn.service"])
|
||||
subprocess.run(["systemctl", "disable", "aimilivpn.service"])
|
||||
try:
|
||||
os.unlink("/lib/systemd/system/aimilivpn.service")
|
||||
except Exception:
|
||||
pass
|
||||
try:
|
||||
os.unlink("/usr/bin/ml")
|
||||
except Exception:
|
||||
pass
|
||||
subprocess.run(["rm", "-rf", INSTALL_DIR])
|
||||
print("AimiliVPN 已卸载！")
|
||||
sys.exit(0)
|
||||
else:
|
||||
print("已取消卸载。")
|
||||
time.sleep(1)
|
||||
|
||||
def ask_restart():
|
||||
ans = input("配置已保存。是否立即重启服务生效？(Y/n): ").strip().lower()
|
||||
if ans in ('', 'y', 'yes'):
|
||||
print("正在重启 AimiliVPN 服务...", flush=True)
|
||||
subprocess.run(["systemctl", "restart", "aimilivpn.service"])
|
||||
print("服务已重启。")
|
||||
time.sleep(1.5)
|
||||
|
||||
def configure_web():
|
||||
cfg = load_ui_cfg()
|
||||
while True:
|
||||
print("\033[H\033[J", end="")
|
||||
print("=======================================================")
|
||||
print(" 网页绑定与地址后缀配置 ")
|
||||
print("=======================================================")
|
||||
print(f" [1] 切换绑定地址 (当前: {cfg.get('host', '0.0.0.0')})")
|
||||
print(f" [2] 随机重置安全后缀 (当前: {cfg.get('secret_path', '')})")
|
||||
print(" [3] 返回主菜单")
|
||||
print("=======================================================")
|
||||
print("请直接输入数字键 [1-3] 快速执行：", end="", flush=True)
|
||||
|
||||
key = getch()
|
||||
if key == '1':
|
||||
print("\033[H\033[J", end="")
|
||||
print("选择网页登录绑定地址：")
|
||||
print(" 1. 仅允许本地登录 (127.0.0.1 - 更安全)")
|
||||
print(" 2. 允许公网IP登录 (0.0.0.0 - 方便远程)")
|
||||
sel = input("请选择 (1 或 2, 默认2): ").strip()
|
||||
if sel == '1':
|
||||
cfg['host'] = "127.0.0.1"
|
||||
else:
|
||||
cfg['host'] = "0.0.0.0"
|
||||
save_ui_cfg(cfg)
|
||||
print(f"绑定地址已更新为: {cfg['host']}")
|
||||
ask_restart()
|
||||
break
|
||||
elif key == '2':
|
||||
print("\033[H\033[J", end="")
|
||||
new_path = generate_random_suffix()
|
||||
cfg['secret_path'] = new_path
|
||||
save_ui_cfg(cfg)
|
||||
print("安全登录后缀已随机重置成功！")
|
||||
print(f"您的全新安全登录后缀为: {new_path}")
|
||||
print(f"新的访问路径为: http://{cfg['host']}:{cfg['port']}/{new_path}/")
|
||||
ask_restart()
|
||||
break
|
||||
elif key == '3' or key == 'q' or key == '\x03':
|
||||
break
|
||||
|
||||
def configure_port():
|
||||
cfg = load_ui_cfg()
|
||||
print("\033[H\033[J", end="")
|
||||
print("=======================================================")
|
||||
print(" 管理端口配置 ")
|
||||
print("=======================================================")
|
||||
print(f"当前网页管理端口为: {cfg.get('port', 8787)}")
|
||||
try:
|
||||
val = input("请输入新的管理端口 (1-65535, 按回车取消): ").strip()
|
||||
if val:
|
||||
port = int(val)
|
||||
if 1 <= port <= 65535:
|
||||
cfg['port'] = port
|
||||
save_ui_cfg(cfg)
|
||||
print(f"管理端口已更新为: {port}")
|
||||
ask_restart()
|
||||
else:
|
||||
print("错误: 端口范围必须在 1 至 65535 之间。")
|
||||
time.sleep(2)
|
||||
except ValueError:
|
||||
print("错误: 输入必须是数字。")
|
||||
time.sleep(2)
|
||||
|
||||
def configure_credentials():
|
||||
cfg = load_ui_cfg()
|
||||
while True:
|
||||
print("\033[H\033[J", end="")
|
||||
print("=======================================================")
|
||||
print(" 管理账号密码管理 ")
|
||||
print("=======================================================")
|
||||
curr_uname = cfg.get('username', 'admin')
|
||||
curr_pwd = cfg.get('password', '')
|
||||
masked_pwd = curr_pwd if len(curr_pwd) <= 4 else curr_pwd[:3] + "********" + curr_pwd[-2:]
|
||||
print(f"当前管理账号: {curr_uname}")
|
||||
print(f"当前管理密码: {masked_pwd}")
|
||||
print(" [1] 自定义修改账号密码")
|
||||
print(" [2] 随机重置安全密码")
|
||||
print(" [3] 返回主菜单")
|
||||
print("=======================================================")
|
||||
print("请直接输入数字键 [1-3] 快速执行：", end="", flush=True)
|
||||
|
||||
key = getch()
|
||||
if key == '1':
|
||||
print("\033[H\033[J", end="")
|
||||
new_uname = input("请输入新管理账号 (回车默认 admin): ").strip()
|
||||
if not new_uname:
|
||||
new_uname = "admin"
|
||||
new_pwd = input("请输入新管理密码 (不能为空): ").strip()
|
||||
if not new_pwd:
|
||||
print("错误: 密码不能为空！")
|
||||
time.sleep(2)
|
||||
continue
|
||||
cfg['username'] = new_uname
|
||||
cfg['password'] = new_pwd
|
||||
save_ui_cfg(cfg)
|
||||
print("账号密码修改成功！")
|
||||
print(f"您的新管理账号: {new_uname}")
|
||||
print(f"您的新管理密码: {new_pwd}")
|
||||
input("\n按任意键返回菜单...")
|
||||
elif key == '2':
|
||||
print("\033[H\033[J", end="")
|
||||
new_pwd = generate_random_password()
|
||||
cfg['password'] = new_pwd
|
||||
save_ui_cfg(cfg)
|
||||
print("密码随机重置成功！")
|
||||
print(f"您的全新12位安全密码为: {new_pwd}")
|
||||
print("密码已保存在本地，不需要重启服务，刷新浏览器即可登录。")
|
||||
input("\n按任意键返回菜单...")
|
||||
elif key == '3' or key == 'q' or key == '\x03':
|
||||
break
|
||||
|
||||
def getch():
|
||||
fd = sys.stdin.fileno()
|
||||
try:
|
||||
old_settings = termios.tcgetattr(fd)
|
||||
except termios.error:
|
||||
return sys.stdin.read(1)
|
||||
try:
|
||||
tty.setraw(sys.stdin.fileno())
|
||||
ch = sys.stdin.read(1)
|
||||
finally:
|
||||
termios.tcsetattr(fd, termios.TCSADRAIN, old_settings)
|
||||
return ch
|
||||
|
||||
def getch_timeout(timeout=1.0):
|
||||
import select
|
||||
fd = sys.stdin.fileno()
|
||||
try:
|
||||
old_settings = termios.tcgetattr(fd)
|
||||
except termios.error:
|
||||
try:
|
||||
r, _, _ = select.select([sys.stdin], [], [], timeout)
|
||||
if r:
|
||||
ch = sys.stdin.read(1)
|
||||
if not ch:
|
||||
time.sleep(timeout)
|
||||
return None
|
||||
return ch
|
||||
except Exception:
|
||||
time.sleep(timeout)
|
||||
return None
|
||||
try:
|
||||
tty.setraw(fd)
|
||||
r, _, _ = select.select([sys.stdin], [], [], timeout)
|
||||
if r:
|
||||
ch = sys.stdin.read(1)
|
||||
if not ch:
|
||||
return None
|
||||
return ch
|
||||
return None
|
||||
finally:
|
||||
termios.tcsetattr(fd, termios.TCSADRAIN, old_settings)
|
||||
|
||||
def get_status_state():
|
||||
cfg = load_ui_cfg()
|
||||
state = load_state()
|
||||
return (
|
||||
cfg.get("port", 8787),
|
||||
cfg.get("secret_path", "EJsW2EeBo9lY"),
|
||||
cfg.get("username", "admin"),
|
||||
cfg.get("password", ""),
|
||||
cfg.get("host", "0.0.0.0"),
|
||||
state.get("is_connecting", False),
|
||||
state.get("active_openvpn_node_id", ""),
|
||||
state.get("last_check_message", ""),
|
||||
state.get("active_node_latency", ""),
|
||||
check_port_listening(7928),
|
||||
check_service_active("aimilivpn.service"),
|
||||
check_openvpn_process(),
|
||||
get_service_pid("aimilivpn.service")
|
||||
)
|
||||
|
||||
def main():
|
||||
if os.geteuid() != 0:
|
||||
print("错误: 必须以 root 权限运行此命令。")
|
||||
sys.exit(1)
|
||||
|
||||
if len(sys.argv) > 1:
|
||||
cmd = sys.argv[1].lower()
|
||||
if cmd == "start":
|
||||
start_service()
|
||||
elif cmd == "stop":
|
||||
stop_service()
|
||||
elif cmd == "restart":
|
||||
restart_service()
|
||||
elif cmd == "status":
|
||||
try:
|
||||
last_state = None
|
||||
while True:
|
||||
current_state = get_status_state()
|
||||
if current_state != last_state:
|
||||
print("\033[H\033[J", end="")
|
||||
print_status()
|
||||
print("\n提示: 正在实时监控状态，自动更新。按 Ctrl+C 退出...")
|
||||
last_state = current_state
|
||||
time.sleep(0.5)
|
||||
except KeyboardInterrupt:
|
||||
pass
|
||||
elif cmd == "logs":
|
||||
show_logs()
|
||||
elif cmd == "update":
|
||||
update_service()
|
||||
elif cmd == "uninstall":
|
||||
uninstall_service()
|
||||
elif cmd == "web":
|
||||
configure_web()
|
||||
elif cmd == "port":
|
||||
configure_port()
|
||||
elif cmd == "password":
|
||||
configure_credentials()
|
||||
else:
|
||||
print("未知命令。可用命令: start, stop, restart, status, logs, update, uninstall, web, port, password")
|
||||
sys.exit(0)
|
||||
|
||||
options = {
|
||||
'1': ("启动服务 (ml start)", start_service),
|
||||
'2': ("停止服务 (ml stop)", stop_service),
|
||||
'3': ("重启服务 (ml restart)", restart_service),
|
||||
'4': ("日志监控 (ml logs)", show_logs),
|
||||
'5': ("网页配置 (ml web)", configure_web),
|
||||
'6': ("端口配置 (ml port)", configure_port),
|
||||
'7': ("账号密码 (ml password)", configure_credentials),
|
||||
'8': ("一键更新 (ml update)", update_service),
|
||||
'9': ("完全卸载 (ml uninstall)", uninstall_service),
|
||||
'0': ("退出终端", None)
|
||||
}
|
||||
|
||||
last_state = None
|
||||
while True:
|
||||
current_state = get_status_state()
|
||||
if current_state != last_state:
|
||||
print("\033[H\033[J", end="")
|
||||
print_status()
|
||||
|
||||
bold = "\033[1m"
|
||||
reset = "\033[0m"
|
||||
green = "\033[1;32m"
|
||||
|
||||
print(f"【{bold}终端指令菜单栏{reset}】")
|
||||
for key in sorted(options.keys()):
|
||||
if key == '0':
|
||||
continue
|
||||
name, _ = options[key]
|
||||
print(f" {green}[{key}]{reset} {name}")
|
||||
print(f" {green}[0]{reset} {options['0'][0]}")
|
||||
print("=======================================================")
|
||||
print("请直接输入数字键 [0-9] 快速选择执行：", end="", flush=True)
|
||||
last_state = current_state
|
||||
|
||||
try:
|
||||
key = getch_timeout(0.5)
|
||||
except KeyboardInterrupt:
|
||||
break
|
||||
|
||||
if key is None:
|
||||
continue
|
||||
|
||||
if key == '\x03':
|
||||
break
|
||||
|
||||
# Reset last_state to force redraw after any key input
|
||||
last_state = None
|
||||
|
||||
if key in options:
|
||||
name, func = options[key]
|
||||
if func is None:
|
||||
break
|
||||
print("\033[H\033[J", end="")
|
||||
print(f"正在执行: {name}...\n")
|
||||
func()
|
||||
if func in (start_service, stop_service, restart_service):
|
||||
continue
|
||||
if func in (configure_web, configure_port, configure_credentials, show_logs, update_service):
|
||||
continue
|
||||
input("\n操作已完成，按回车键返回主菜单...")
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
EOF
|
||||
chmod +x /usr/bin/ml
|
||||
|
||||
# 7. Configure Custom parameters (First-time installation check)
|
||||
AUTH_FILE="${INSTALL_DIR}/vpngate_data/ui_auth.json"
|
||||
mkdir -p "${INSTALL_DIR}/vpngate_data"
|
||||
|
||||
if [ ! -f "$AUTH_FILE" ]; then
|
||||
echo -e "\n${YELLOW}检测到是首次安装，是否需要自定义配置网页端参数（端口/安全后缀/登录账号密码）？${PLAIN}"
|
||||
read -p "是否自定义配置？[y/N]: " is_custom
|
||||
|
||||
# Initialize defaults
|
||||
UI_PORT=8787
|
||||
# generate random secret suffix (12 chars alphanumeric)
|
||||
SECRET_PATH=$(python3 -c "import random, string; print(''.join(random.choices(string.ascii_letters + string.digits, k=12)))")
|
||||
# generate random password
|
||||
UI_PASSWORD=$(python3 -c "
|
||||
import random, string
|
||||
chars = string.ascii_letters + string.digits
|
||||
while True:
|
||||
pwd = ''.join(random.choices(chars, k=12))
|
||||
if any(c.islower() for c in pwd) and any(c.isupper() for c in pwd) and any(c.isdigit() for c in pwd):
|
||||
print(pwd)
|
||||
break
|
||||
")
|
||||
UI_USERNAME="admin"
|
||||
|
||||
if [[ "$is_custom" =~ ^[Yy]$ ]]; then
|
||||
# Step-by-step custom inputs
|
||||
# 1. Custom port
|
||||
while true; do
|
||||
read -p "请输入自定义管理端口 [1-65535, 默认 8787]: " input_port
|
||||
if [ -z "$input_port" ]; then
|
||||
UI_PORT=8787
|
||||
break
|
||||
fi
|
||||
if [[ "$input_port" =~ ^[0-9]+$ ]] && [ "$input_port" -ge 1 ] && [ "$input_port" -le 65535 ]; then
|
||||
UI_PORT=$input_port
|
||||
break
|
||||
else
|
||||
echo -e "${RED}输入错误: 端口必须是 1 到 65535 之间的数字！${PLAIN}"
|
||||
fi
|
||||
done
|
||||
|
||||
# 2. Custom suffix
|
||||
while true; do
|
||||
read -p "请输入网页登录自定义安全后缀 [字母与数字组合, 默认随机]: " input_suffix
|
||||
if [ -z "$input_suffix" ]; then
|
||||
break
|
||||
fi
|
||||
if [[ "$input_suffix" =~ ^[A-Za-z0-9]+$ ]]; then
|
||||
SECRET_PATH=$input_suffix
|
||||
break
|
||||
else
|
||||
echo -e "${RED}输入错误: 后缀仅能由英文字母和数字组成！${PLAIN}"
|
||||
fi
|
||||
done
|
||||
|
||||
# 3. Custom login username and password
|
||||
read -p "请输入登录账号 [默认 admin]: " input_user
|
||||
if [ -n "$input_user" ]; then
|
||||
UI_USERNAME=$input_user
|
||||
fi
|
||||
|
||||
while true; do
|
||||
read -p "请输入登录密码 [默认随机生成, 建议包含字母、数字与符号]: " input_pass
|
||||
if [ -z "$input_pass" ]; then
|
||||
break
|
||||
fi
|
||||
if [ ${#input_pass} -ge 4 ]; then
|
||||
UI_PASSWORD=$input_pass
|
||||
break
|
||||
else
|
||||
echo -e "${RED}输入错误: 密码长度不能少于 4 位！${PLAIN}"
|
||||
fi
|
||||
done
|
||||
fi
|
||||
|
||||
# Write config JSON
|
||||
python3 -c "
|
||||
import json
|
||||
cfg = {
|
||||
'host': '0.0.0.0',
|
||||
'port': int('$UI_PORT'),
|
||||
'secret_path': '$SECRET_PATH',
|
||||
'username': '$UI_USERNAME',
|
||||
'password': '$UI_PASSWORD'
|
||||
}
|
||||
with open('$AUTH_FILE', 'w', encoding='utf-8') as f:
|
||||
json.dump(cfg, f, ensure_ascii=False, indent=2)
|
||||
"
|
||||
fi
|
||||
|
||||
# 8. Start service
|
||||
echo -e "\n正在启动 AimiliVPN 服务并初始化网络..."
|
||||
systemctl restart aimilivpn.service || true
|
||||
|
||||
# Wait and poll for node loading and active connection
|
||||
echo -e "\n正在等待 AimiliVPN 首次获取节点并建立加密通道 (此过程可能需要 5-30 秒)..."
|
||||
ACTIVE_ID=""
|
||||
LAST_MSG=""
|
||||
for i in {1..90}; do
|
||||
if [ -f "${INSTALL_DIR}/vpngate_data/state.json" ]; then
|
||||
ACTIVE_ID=$(python3 -c "import json; print(json.load(open('${INSTALL_DIR}/vpngate_data/state.json')).get('active_openvpn_node_id', ''))" 2>/dev/null || echo "")
|
||||
IS_CONN=$(python3 -c "import json; print(json.load(open('${INSTALL_DIR}/vpngate_data/state.json')).get('is_connecting', False))" 2>/dev/null || echo "False")
|
||||
CUR_MSG=$(python3 -c "import json; print(json.load(open('${INSTALL_DIR}/vpngate_data/state.json')).get('last_check_message', ''))" 2>/dev/null || echo "")
|
||||
|
||||
if [ "$IS_CONN" = "False" ] || [ "$IS_CONN" = "false" ]; then
|
||||
if [ -n "$ACTIVE_ID" ]; then
|
||||
echo -e " -> ${GREEN}[已就绪]${PLAIN} 首次节点连接成功，活动节点: ${GREEN}$ACTIVE_ID${PLAIN}"
|
||||
break
|
||||
else
|
||||
if [ -n "$CUR_MSG" ] && [ "$CUR_MSG" != "$LAST_MSG" ]; then
|
||||
echo -e " -> 提示: ${YELLOW}${CUR_MSG}${PLAIN}"
|
||||
LAST_MSG="$CUR_MSG"
|
||||
fi
|
||||
fi
|
||||
else
|
||||
if [ -n "$CUR_MSG" ] && [ "$CUR_MSG" != "$LAST_MSG" ]; then
|
||||
echo -e " -> 状态: ${YELLOW}${CUR_MSG}${PLAIN}"
|
||||
LAST_MSG="$CUR_MSG"
|
||||
fi
|
||||
fi
|
||||
else
|
||||
echo -n "."
|
||||
fi
|
||||
sleep 1
|
||||
done
|
||||
if [ -z "$ACTIVE_ID" ]; then
|
||||
echo -e " -> ${YELLOW}[加载超时]${PLAIN} 首次节点获取或连接超时，将在后台继续尝试..."
|
||||
fi
|
||||
|
||||
SECRET_PATH="EJsW2EeBo9lY"
|
||||
USERNAME="admin"
|
||||
PASSWORD="未配置"
|
||||
UI_PORT=8787
|
||||
AUTH_FILE="${INSTALL_DIR}/vpngate_data/ui_auth.json"
|
||||
if [ -f "$AUTH_FILE" ]; then
|
||||
SECRET_PATH=$(python3 -c "import json; print(json.load(open('$AUTH_FILE')).get('secret_path', 'EJsW2EeBo9lY'))" 2>/dev/null || echo "EJsW2EeBo9lY")
|
||||
USERNAME=$(python3 -c "import json; print(json.load(open('$AUTH_FILE')).get('username', 'admin'))" 2>/dev/null || echo "admin")
|
||||
PASSWORD=$(python3 -c "import json; print(json.load(open('$AUTH_FILE')).get('password', '未配置'))" 2>/dev/null || echo "未配置")
|
||||
UI_PORT=$(python3 -c "import json; print(json.load(open('$AUTH_FILE')).get('port', 8787))" 2>/dev/null || echo "8787")
|
||||
fi
|
||||
|
||||
# Get VPS public IP
|
||||
echo -e "正在获取 VPS 公网 IP..."
|
||||
PUBLIC_IP=$(curl -s --max-time 3 https://api.ipify.org || curl -s --max-time 3 https://ifconfig.me || curl -s --max-time 3 icanhazip.com || echo "您的服务器公网IP")
|
||||
echo -n "$PUBLIC_IP" > "${INSTALL_DIR}/vpngate_data/public_ip.txt"
|
||||
|
||||
echo -e "\n${GREEN}==========================================================${PLAIN}"
|
||||
echo -e "${GREEN} AimiliVPN 源码一键部署已完成！${PLAIN}"
|
||||
echo -e "${GREEN}==========================================================${PLAIN}"
|
||||
echo -e " * 网页控制面板: ${BLUE}http://${PUBLIC_IP}:${UI_PORT}/${SECRET_PATH}/${PLAIN}"
|
||||
echo -e " * 网页管理账号: ${YELLOW}${USERNAME}${PLAIN}"
|
||||
echo -e " * 网页管理密码: ${YELLOW}${PASSWORD}${PLAIN}"
|
||||
echo -e " * HTTP/SOCKS5 代理端口: ${BLUE}http://127.0.0.1:7928/${PLAIN}"
|
||||
echo -e " --------------------------------------------------------"
|
||||
echo -e " * 快速状态指令: ${YELLOW}ml status${PLAIN} 或 ${YELLOW}ml${PLAIN}"
|
||||
echo -e " * 查看实时日志: ${YELLOW}ml logs${PLAIN}"
|
||||
echo -e " * 停止服务: ${YELLOW}ml stop${PLAIN}"
|
||||
echo -e " * 重启服务: ${YELLOW}ml restart${PLAIN}"
|
||||
echo -e "=========================================================="
|
||||
echo
|
||||
165
proxy_server.py
Normal file
165
proxy_server.py
Normal file
@@ -0,0 +1,165 @@
|
||||
#!/usr/bin/env python3
|
||||
from __future__ import annotations
|
||||
import select
|
||||
import socket
|
||||
import threading
|
||||
import urllib.parse
|
||||
import time
|
||||
from typing import Any
|
||||
|
||||
def parse_int(value: Any) -> int:
|
||||
try:
|
||||
return int(value)
|
||||
except (TypeError, ValueError):
|
||||
return 0
|
||||
|
||||
def recv_exact(sock: socket.socket, size: int) -> bytes:
|
||||
data = b""
|
||||
while len(data) < size:
|
||||
chunk = sock.recv(size - len(data))
|
||||
if not chunk:
|
||||
raise ConnectionError("Unexpected disconnect.")
|
||||
data += chunk
|
||||
return data
|
||||
|
||||
def create_connection(address: tuple[str, int], timeout: float = 20) -> socket.socket:
|
||||
host, port = address
|
||||
err = None
|
||||
for res in socket.getaddrinfo(host, port, 0, socket.SOCK_STREAM):
|
||||
af, socktype, proto, canonname, sa = res
|
||||
sock = None
|
||||
try:
|
||||
sock = socket.socket(af, socktype, proto)
|
||||
sock.settimeout(timeout)
|
||||
sock.setsockopt(socket.SOL_SOCKET, socket.SO_BINDTODEVICE, b"tun0")
|
||||
sock.connect(sa)
|
||||
return sock
|
||||
except OSError as e:
|
||||
err = e
|
||||
if sock is not None:
|
||||
sock.close()
|
||||
if err is not None:
|
||||
raise err
|
||||
else:
|
||||
raise OSError("getaddrinfo returns empty list")
|
||||
|
||||
def relay(left: socket.socket, right: socket.socket) -> None:
|
||||
sockets = [left, right]
|
||||
while True:
|
||||
readable, _, errored = select.select(sockets, [], sockets, 120)
|
||||
if errored:
|
||||
return
|
||||
for source in readable:
|
||||
target = right if source is left else left
|
||||
data = source.recv(65536)
|
||||
if not data:
|
||||
return
|
||||
target.sendall(data)
|
||||
|
||||
def socks5_client(client: socket.socket, first_byte: bytes) -> None:
|
||||
upstream = None
|
||||
try:
|
||||
methods_count = recv_exact(client, 1)[0]
|
||||
recv_exact(client, methods_count)
|
||||
client.sendall(b"\x05\x00")
|
||||
version, command, _, address_type = recv_exact(client, 4)
|
||||
if version != 5 or command != 1:
|
||||
client.sendall(b"\x05\x07\x00\x01\x00\x00\x00\x00\x00\x00")
|
||||
return
|
||||
if address_type == 1:
|
||||
host = socket.inet_ntoa(recv_exact(client, 4))
|
||||
elif address_type == 3:
|
||||
host = recv_exact(client, recv_exact(client, 1)[0]).decode("idna")
|
||||
elif address_type == 4:
|
||||
host = socket.inet_ntop(socket.AF_INET6, recv_exact(client, 16))
|
||||
else:
|
||||
client.sendall(b"\x05\x08\x00\x01\x00\x00\x00\x00\x00\x00")
|
||||
return
|
||||
port = int.from_bytes(recv_exact(client, 2), "big")
|
||||
upstream = create_connection((host, port), timeout=20)
|
||||
client.sendall(b"\x05\x00\x00\x01\x00\x00\x00\x00\x00\x00")
|
||||
relay(client, upstream)
|
||||
finally:
|
||||
client.close()
|
||||
if upstream:
|
||||
upstream.close()
|
||||
|
||||
def read_http_header(client: socket.socket, first_byte: bytes) -> bytes:
|
||||
data = first_byte
|
||||
while b"\r\n\r\n" not in data and len(data) < 65536:
|
||||
chunk = client.recv(4096)
|
||||
if not chunk:
|
||||
break
|
||||
data += chunk
|
||||
return data
|
||||
|
||||
def http_client(client: socket.socket, first_byte: bytes) -> None:
|
||||
upstream = None
|
||||
try:
|
||||
header = read_http_header(client, first_byte)
|
||||
head, rest = header.split(b"\r\n\r\n", 1)
|
||||
lines = head.decode("iso-8859-1", errors="replace").split("\r\n")
|
||||
method, target, version = lines[0].split(" ", 2)
|
||||
if method.upper() == "CONNECT":
|
||||
host, _, port_text = target.partition(":")
|
||||
port = parse_int(port_text) or 443
|
||||
upstream = create_connection((host, port), timeout=20)
|
||||
client.sendall(b"HTTP/1.1 200 Connection Established\r\n\r\n")
|
||||
if rest:
|
||||
upstream.sendall(rest)
|
||||
relay(client, upstream)
|
||||
return
|
||||
|
||||
parsed = urllib.parse.urlsplit(target)
|
||||
if not parsed.hostname:
|
||||
client.sendall(b"HTTP/1.1 400 Bad Request\r\nContent-Length: 0\r\n\r\n")
|
||||
return
|
||||
port = parsed.port or (443 if parsed.scheme == "https" else 80)
|
||||
path = urllib.parse.urlunsplit(("", "", parsed.path or "/", parsed.query, ""))
|
||||
headers = [line for line in lines[1:] if not line.lower().startswith(("proxy-connection:", "connection:"))]
|
||||
request = f"{method} {path} {version}\r\n" + "\r\n".join(headers) + "\r\nConnection: close\r\n\r\n"
|
||||
upstream = create_connection((parsed.hostname, port), timeout=20)
|
||||
upstream.sendall(request.encode("iso-8859-1") + rest)
|
||||
relay(client, upstream)
|
||||
except Exception:
|
||||
try:
|
||||
client.sendall(b"HTTP/1.1 502 Bad Gateway\r\nContent-Length: 0\r\n\r\n")
|
||||
except OSError:
|
||||
pass
|
||||
finally:
|
||||
client.close()
|
||||
if upstream:
|
||||
upstream.close()
|
||||
|
||||
def proxy_client(client: socket.socket, address: tuple[str, int]) -> None:
|
||||
try:
|
||||
client.settimeout(30)
|
||||
first = recv_exact(client, 1)
|
||||
if first == b"\x05":
|
||||
socks5_client(client, first)
|
||||
else:
|
||||
http_client(client, first)
|
||||
except Exception:
|
||||
try:
|
||||
client.close()
|
||||
except OSError:
|
||||
pass
|
||||
|
||||
def start_proxy_server(host: str, port: int) -> None:
|
||||
try:
|
||||
server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||
server.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
|
||||
server.bind((host, port))
|
||||
server.listen(256)
|
||||
print(f"HTTP/SOCKS5 proxy listening on {host}:{port}", flush=True)
|
||||
except Exception as e:
|
||||
print(f"[ERROR] Failed to start HTTP/SOCKS5 proxy on {host}:{port}: {e}", flush=True)
|
||||
return
|
||||
|
||||
while True:
|
||||
try:
|
||||
client, address = server.accept()
|
||||
threading.Thread(target=proxy_client, args=(client, address), daemon=True).start()
|
||||
except Exception as e:
|
||||
print(f"[ERROR] Proxy accept failed: {e}", flush=True)
|
||||
time.sleep(0.5)
|
||||
422
vpn_utils.py
Normal file
422
vpn_utils.py
Normal file
@@ -0,0 +1,422 @@
|
||||
#!/usr/bin/env python3
|
||||
from __future__ import annotations
|
||||
import json
|
||||
import os
|
||||
import re
|
||||
import socket
|
||||
import subprocess
|
||||
import time
|
||||
import urllib.parse
|
||||
import urllib.request
|
||||
import threading
|
||||
from pathlib import Path
|
||||
from typing import Any
|
||||
|
||||
ROOT_DIR = Path(__file__).resolve().parent
|
||||
DATA_DIR = ROOT_DIR / "vpngate_data"
|
||||
IP_CACHE_FILE = DATA_DIR / "ip_cache.json"
|
||||
|
||||
ip_cache_lock = threading.RLock()
|
||||
|
||||
COUNTRY_TRANSLATIONS = {
|
||||
"Japan": "日本",
|
||||
"Korea Republic of": "韩国",
|
||||
"Korea": "韩国",
|
||||
"Republic of Korea": "韩国",
|
||||
"Thailand": "泰国",
|
||||
"United States": "美国",
|
||||
"United Kingdom": "英国",
|
||||
"Russian Federation": "俄罗斯",
|
||||
"Russian": "俄罗斯",
|
||||
"Viet Nam": "越南",
|
||||
"Vietnam": "越南",
|
||||
"China": "中国",
|
||||
"Taiwan": "台湾",
|
||||
"Taiwan Province of China": "台湾",
|
||||
"Hong Kong": "香港",
|
||||
"Singapore": "新加坡",
|
||||
"Malaysia": "马来西亚",
|
||||
"Indonesia": "印度尼西亚",
|
||||
"India": "印度",
|
||||
"Philippines": "菲律宾",
|
||||
"Australia": "澳大利亚",
|
||||
"New Zealand": "新西兰",
|
||||
"Canada": "加拿大",
|
||||
"Ukraine": "乌克兰",
|
||||
"France": "法国",
|
||||
"Germany": "德国",
|
||||
"Netherlands": "荷兰",
|
||||
"Sweden": "瑞典",
|
||||
"Norway": "挪威",
|
||||
"Spain": "西班牙",
|
||||
"Turkey": "土耳其",
|
||||
"South Africa": "南非",
|
||||
"Brazil": "巴西",
|
||||
"Argentina": "阿根廷",
|
||||
"Chile": "智利",
|
||||
"Mexico": "墨西哥",
|
||||
"Egypt": "埃及",
|
||||
"Romania": "罗马尼亚",
|
||||
"Poland": "波兰",
|
||||
"Kazakhstan": "哈萨克斯坦",
|
||||
"Georgia": "格鲁吉亚",
|
||||
"Mongolia": "蒙古",
|
||||
"Saudi Arabia": "沙特阿拉伯",
|
||||
"Iran": "伊朗",
|
||||
"Iraq": "伊拉克",
|
||||
"Colombia": "哥伦比亚",
|
||||
"Cambodia": "柬埔寨",
|
||||
"Ireland": "爱尔兰",
|
||||
"Italy": "意大利",
|
||||
"Switzerland": "瑞士",
|
||||
"Belgium": "比利时",
|
||||
"Austria": "奥地利",
|
||||
"Denmark": "丹麦",
|
||||
"Finland": "芬兰",
|
||||
"Portugal": "葡萄牙",
|
||||
"Greece": "希腊",
|
||||
"Czech Republic": "捷克",
|
||||
"Hungary": "匈牙利",
|
||||
"Israel": "以色列",
|
||||
"United Arab Emirates": "阿联酋",
|
||||
"UAE": "阿联酋",
|
||||
"Macao": "澳门",
|
||||
"Macau": "澳门",
|
||||
"Iceland": "冰岛",
|
||||
"Luxembourg": "卢森堡",
|
||||
}
|
||||
|
||||
def get_upstream_proxy() -> tuple[str | None, str | None, int | None]:
|
||||
"""
|
||||
Returns (proxy_type, host, port) from environment variables.
|
||||
proxy_type is 'socks' or 'http'.
|
||||
"""
|
||||
socks_env = os.environ.get("OPENVPN_UPSTREAM_SOCKS")
|
||||
if socks_env:
|
||||
if "://" in socks_env:
|
||||
parsed = urllib.parse.urlsplit(socks_env)
|
||||
if parsed.hostname and parsed.port:
|
||||
return "socks", parsed.hostname, parsed.port
|
||||
else:
|
||||
parts = socks_env.split(":")
|
||||
if len(parts) == 2:
|
||||
return "socks", parts[0], int(parts[1])
|
||||
elif len(parts) == 1:
|
||||
return "socks", parts[0], 10808
|
||||
|
||||
http_env = os.environ.get("OPENVPN_UPSTREAM_HTTP")
|
||||
if http_env:
|
||||
if "://" in http_env:
|
||||
parsed = urllib.parse.urlsplit(http_env)
|
||||
if parsed.hostname and parsed.port:
|
||||
return "http", parsed.hostname, parsed.port
|
||||
else:
|
||||
parts = http_env.split(":")
|
||||
if len(parts) == 2:
|
||||
return "http", parts[0], int(parts[1])
|
||||
elif len(parts) == 1:
|
||||
return "http", parts[0], 10808
|
||||
|
||||
for env_name in ["http_proxy", "HTTP_PROXY", "https_proxy", "HTTPS_PROXY"]:
|
||||
val = os.environ.get(env_name)
|
||||
if not val:
|
||||
continue
|
||||
if "://" in val:
|
||||
parsed = urllib.parse.urlsplit(val)
|
||||
ptype = "socks" if parsed.scheme.startswith("socks") else "http"
|
||||
if parsed.hostname and parsed.port:
|
||||
return ptype, parsed.hostname, parsed.port
|
||||
else:
|
||||
parts = val.split(":")
|
||||
if len(parts) == 2:
|
||||
return "http", parts[0], int(parts[1])
|
||||
return None, None, None
|
||||
|
||||
def is_config_tcp(config_text: str) -> bool:
|
||||
try:
|
||||
for line in config_text.splitlines():
|
||||
line = line.strip()
|
||||
if not line or line.startswith(("#", ";")):
|
||||
continue
|
||||
parts = line.split()
|
||||
if parts[0].lower() == "proto" and len(parts) >= 2:
|
||||
if "tcp" in parts[1].lower():
|
||||
return True
|
||||
elif parts[0].lower() == "remote" and len(parts) >= 4:
|
||||
if "tcp" in parts[3].lower():
|
||||
return True
|
||||
except Exception:
|
||||
pass
|
||||
return False
|
||||
|
||||
def parse_remote(config_text: str, fallback_ip: str = "") -> tuple[str, int, str]:
|
||||
remote_host = fallback_ip
|
||||
remote_port = 0
|
||||
proto = "unknown"
|
||||
for raw_line in config_text.splitlines():
|
||||
line = raw_line.strip()
|
||||
if not line or line.startswith(("#", ";")):
|
||||
continue
|
||||
parts = line.split()
|
||||
if parts[0].lower() == "proto" and len(parts) >= 2:
|
||||
proto = parts[1].lower()
|
||||
elif parts[0].lower() == "remote" and len(parts) >= 3:
|
||||
remote_host = parts[1]
|
||||
remote_port = int(parts[2]) if parts[2].isdigit() else 0
|
||||
return remote_host, remote_port, proto
|
||||
|
||||
def get_physical_interface() -> str | None:
|
||||
try:
|
||||
res = subprocess.run(["ip", "route"], capture_output=True, text=True, timeout=2)
|
||||
if res.returncode == 0:
|
||||
routes = []
|
||||
for line in res.stdout.splitlines():
|
||||
if line.startswith("default via"):
|
||||
parts = line.split()
|
||||
try:
|
||||
gw = parts[2]
|
||||
dev = parts[parts.index("dev") + 1]
|
||||
metric = 0
|
||||
if "metric" in parts:
|
||||
metric = int(parts[parts.index("metric") + 1])
|
||||
routes.append((gw, dev, metric))
|
||||
except (ValueError, IndexError):
|
||||
continue
|
||||
if routes:
|
||||
routes.sort(key=lambda x: x[2], reverse=True)
|
||||
for gw, dev, metric in routes:
|
||||
if not dev.startswith(("tun", "tap", "wg", "ppp")):
|
||||
return dev
|
||||
return routes[0][1]
|
||||
except Exception:
|
||||
pass
|
||||
return None
|
||||
|
||||
def tcp_latency_ms(host: str, port: int, dev: str | None = None) -> int:
|
||||
started = time.time()
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||
try:
|
||||
s.settimeout(5)
|
||||
if dev:
|
||||
try:
|
||||
s.setsockopt(socket.SOL_SOCKET, socket.SO_BINDTODEVICE, dev.encode("utf-8"))
|
||||
except OSError:
|
||||
pass
|
||||
s.connect((host, port))
|
||||
return max(1, int((time.time() - started) * 1000))
|
||||
except OSError:
|
||||
return 0
|
||||
finally:
|
||||
try:
|
||||
s.close()
|
||||
except Exception:
|
||||
pass
|
||||
|
||||
def ping_latency_ms(host: str, port: int, fallback_ping: int = 0) -> int:
|
||||
dev = get_physical_interface()
|
||||
# 1. Try ping with interface binding
|
||||
if dev:
|
||||
try:
|
||||
cmd = ["ping", "-c", "1", "-W", "2", "-I", dev, host]
|
||||
res = subprocess.run(
|
||||
cmd,
|
||||
stdout=subprocess.PIPE,
|
||||
stderr=subprocess.PIPE,
|
||||
text=True,
|
||||
timeout=2
|
||||
)
|
||||
if res.returncode == 0:
|
||||
match = re.search(r"time=([\d.]+)\s*ms", res.stdout)
|
||||
if match:
|
||||
val = int(float(match.group(1)))
|
||||
if val > 0:
|
||||
return val
|
||||
except Exception:
|
||||
pass
|
||||
|
||||
# 2. Try ping without interface binding
|
||||
try:
|
||||
cmd = ["ping", "-c", "1", "-W", "2", host]
|
||||
res = subprocess.run(
|
||||
cmd,
|
||||
stdout=subprocess.PIPE,
|
||||
stderr=subprocess.PIPE,
|
||||
text=True,
|
||||
timeout=2
|
||||
)
|
||||
if res.returncode == 0:
|
||||
match = re.search(r"time=([\d.]+)\s*ms", res.stdout)
|
||||
if match:
|
||||
val = int(float(match.group(1)))
|
||||
if val > 0:
|
||||
return val
|
||||
except Exception:
|
||||
pass
|
||||
|
||||
# 3. Try TCP latency check
|
||||
tcp_val = tcp_latency_ms(host, port, dev)
|
||||
if tcp_val > 0:
|
||||
return tcp_val
|
||||
|
||||
# 4. Fallback
|
||||
if fallback_ping > 0:
|
||||
return fallback_ping
|
||||
return 0
|
||||
|
||||
def check_and_fix_dns() -> None:
|
||||
"""
|
||||
Checks if DNS resolution is broken in WSL.
|
||||
If names fail but direct IP connections work, appends public DNS nameservers to /etc/resolv.conf.
|
||||
"""
|
||||
try:
|
||||
socket.gethostbyname("www.vpngate.net")
|
||||
return
|
||||
except socket.gaierror:
|
||||
pass
|
||||
|
||||
network_ok = False
|
||||
for ip in ["8.8.8.8", "1.1.1.1"]:
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
||||
try:
|
||||
s.settimeout(2)
|
||||
s.connect((ip, 53))
|
||||
network_ok = True
|
||||
break
|
||||
except Exception:
|
||||
pass
|
||||
finally:
|
||||
try:
|
||||
s.close()
|
||||
except Exception:
|
||||
pass
|
||||
|
||||
if not network_ok:
|
||||
return
|
||||
|
||||
resolv_file = Path("/etc/resolv.conf")
|
||||
if resolv_file.exists():
|
||||
try:
|
||||
content = resolv_file.read_text(encoding="utf-8", errors="replace")
|
||||
if "nameserver 1.1.1.1" not in content and "nameserver 8.8.8.8" not in content:
|
||||
print("[dns_heal] Resolving names failed, but IP network is OK. Appending public DNS to /etc/resolv.conf...", flush=True)
|
||||
with open("/etc/resolv.conf", "a", encoding="utf-8") as f:
|
||||
f.write("\nnameserver 1.1.1.1\nnameserver 8.8.8.8\n")
|
||||
except Exception as e:
|
||||
print(f"[dns_heal] Failed to write DNS fallback: {e}", flush=True)
|
||||
|
||||
def load_ip_cache() -> dict[str, dict[str, Any]]:
|
||||
with ip_cache_lock:
|
||||
try:
|
||||
if IP_CACHE_FILE.exists():
|
||||
return json.loads(IP_CACHE_FILE.read_text(encoding="utf-8"))
|
||||
except Exception:
|
||||
pass
|
||||
return {}
|
||||
|
||||
def save_ip_cache(cache: dict[str, dict[str, Any]]) -> None:
|
||||
with ip_cache_lock:
|
||||
try:
|
||||
DATA_DIR.mkdir(exist_ok=True)
|
||||
IP_CACHE_FILE.write_text(json.dumps(cache, ensure_ascii=False, indent=2), encoding="utf-8")
|
||||
except Exception:
|
||||
pass
|
||||
|
||||
def enrich_ip_info(nodes: list[dict[str, Any]]) -> None:
|
||||
# 1. Read cache thread-safely
|
||||
with ip_cache_lock:
|
||||
cache = load_ip_cache()
|
||||
|
||||
ips_to_query = []
|
||||
now = time.time()
|
||||
|
||||
for node in nodes:
|
||||
ip = node.get("ip") or node.get("remote_host")
|
||||
if not ip:
|
||||
continue
|
||||
if ip in cache and now - cache[ip].get("cached_at", 0) < 7 * 24 * 3600:
|
||||
cached = cache[ip]
|
||||
node["owner"] = cached.get("owner", "")
|
||||
node["asn"] = cached.get("asn", "")
|
||||
node["as_name"] = cached.get("as_name", "")
|
||||
node["location"] = cached.get("location", "")
|
||||
node["ip_type"] = cached.get("ip_type", "")
|
||||
node["quality"] = cached.get("quality", "")
|
||||
else:
|
||||
if ip not in ips_to_query:
|
||||
ips_to_query.append(ip)
|
||||
|
||||
if not ips_to_query:
|
||||
return
|
||||
|
||||
# 2. Perform HTTP query outside lock
|
||||
new_entries = {}
|
||||
chunk_size = 100
|
||||
for i in range(0, len(ips_to_query), chunk_size):
|
||||
chunk = ips_to_query[i : i + chunk_size]
|
||||
payload = json.dumps(chunk).encode("utf-8")
|
||||
request = urllib.request.Request(
|
||||
"http://ip-api.com/batch?lang=zh-CN&fields=status,message,query,country,regionName,city,isp,org,as,asname,proxy,hosting,mobile",
|
||||
data=payload,
|
||||
headers={"Content-Type": "application/json", "User-Agent": "vpngate-manager/2.2"},
|
||||
method="POST",
|
||||
)
|
||||
try:
|
||||
with urllib.request.urlopen(request, timeout=15) as response:
|
||||
data = json.loads(response.read().decode("utf-8", errors="replace"))
|
||||
for item in data:
|
||||
if item.get("status") != "success":
|
||||
continue
|
||||
query_ip = item.get("query")
|
||||
if not query_ip:
|
||||
continue
|
||||
|
||||
ip_type = "residential"
|
||||
if item.get("mobile"):
|
||||
ip_type = "mobile"
|
||||
elif item.get("proxy"):
|
||||
ip_type = "proxy"
|
||||
elif item.get("hosting"):
|
||||
ip_type = "hosting"
|
||||
|
||||
quality = "normal"
|
||||
if item.get("proxy"):
|
||||
quality = "proxy"
|
||||
elif item.get("hosting"):
|
||||
quality = "datacenter"
|
||||
elif item.get("mobile"):
|
||||
quality = "mobile"
|
||||
|
||||
loc = " ".join(part for part in [item.get("country"), item.get("regionName"), item.get("city")] if part)
|
||||
|
||||
new_entries[query_ip] = {
|
||||
"owner": item.get("org") or item.get("isp") or "",
|
||||
"asn": item.get("as") or "",
|
||||
"as_name": item.get("asname") or "",
|
||||
"location": loc,
|
||||
"ip_type": ip_type,
|
||||
"quality": quality,
|
||||
"cached_at": now,
|
||||
}
|
||||
except Exception as e:
|
||||
print(f"[enrich_ip_info] Query failed: {e}", flush=True)
|
||||
|
||||
if not new_entries:
|
||||
return
|
||||
|
||||
# 3. Save cache thread-safely (reload & update to avoid overwrite of concurrent queries)
|
||||
with ip_cache_lock:
|
||||
cache = load_ip_cache()
|
||||
cache.update(new_entries)
|
||||
save_ip_cache(cache)
|
||||
|
||||
# 4. Enrich nodes with newly queried info
|
||||
for node in nodes:
|
||||
ip = node.get("ip") or node.get("remote_host")
|
||||
if ip in new_entries:
|
||||
cached = new_entries[ip]
|
||||
node["owner"] = cached.get("owner", "")
|
||||
node["asn"] = cached.get("asn", "")
|
||||
node["as_name"] = cached.get("as_name", "")
|
||||
node["location"] = cached.get("location", "")
|
||||
node["ip_type"] = cached.get("ip_type", "")
|
||||
node["quality"] = cached.get("quality", "")
|
||||
3519
vpngate_manager.py
Normal file
3519
vpngate_manager.py
Normal file
File diff suppressed because it is too large
Load Diff
Reference in New Issue
Block a user