XSY的FUN天地

WARP双栈替换教程

February 26, 2021

3330 views

1629 words

## 双栈替换

前面的内容见
<div class="preview">
<div class="post-inser post box-shadow-wrap-normal">
<a href="https://xsy.fun/archives/194/" target="_blank" class="post_inser_a no-external-link no-underline-link">
<div class="inner-image bg" style="background-image: url(https://xsy.fun/usr/themes/handsome/assets/img/sj/6.jpg);background-size: cover;"></div>

<div class="inner-content" >
<p class="inser-title">使用Cloudflare的WARP服务给机器添加IPV6地址</p>
<div class="inster-summary text-muted">
前言有些地方的解锁机器十分难找到，要不只能用DNS解锁，但是最近我在网上看到有种方法可以使用cloudflare的...
</div>
</div>
</a>

</div>

</div>

由于这里的wireguard是作为客户端，并且如果要双栈替换需要接管全局流量，所以我们要设置ip route来允许我们的IP进行访问

### 方法一（默认配置，仅添加路由）

我们只需要在配置中增加两行代码即可

```
[Interface]
PrivateKey = xxx
Address = 172.16.0.2/32
Address = fd01:5ca1:ab1e:85d1:47b1:6264:bf20:9c34/128
PreUp = ip route add 你自己的访问IP/32 via 默认路由网关; ip route add 你自己的访问IP/32 via 默认路由网关
PreDown = ip route del 你自己的访问IP/32 via 默认路由网关; ip route del 你自己的访问IP/32 via 默认路由网关
DNS = 1.1.1.1
MTU = 1420
[Peer]
PublicKey = xxx
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/0
Endpoint = engage.cloudflareclient.com:2408
```

### 方法二（手动配置策略路由）

首先我们先要新建一张路由表，名为cloudflare，输入命令`vi /etc/iproute2/rt_tables`

```
#
# reserved values
#
255     local
254     main
253     default
0       unspec
#
# local
#
#1      inr.ruhep
154    cloudflare
```

再把配置改成

```
[Interface]
PrivateKey = xxx
Address = 172.16.0.2/32
MTU = 1420
Table = off
PostUp = ip route add default dev 你的wireguard网卡名 table cloudflare scope link src 配置中的v4地址; ip route add default dev 你的wireguard网卡名 table cloudflare src wg配置里的ipv6地址 metric 1024 pref medium; ip rule add lookup cloudflare && ip rule add from 机器的公网ip/32 lookup main; ip -6 rule add lookup cloudflare; ip -6 rule add to 机器的公网ipv6 lookup main
PostDown = ip -6 rule delete lookup cloudflare; ip rule delete lookup cloudflare && ip rule delete from 机器公网ipv4地址/32 lookup main; ip -6 rule delete to 机器的公网ipv6地址 lookup main
[Peer]
PublicKey = xxx
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = [2606:4700:d0::a29f:c001]:2408
```

### 方法三（Docker）

容器内默认warp配置启动wireguard，安装xray起socks5代理，再在宿主机上编写outbound通过docker出网

Last modification：June 11, 2021