Loading... ## 双栈替换 前面的内容见 <div class="preview"> <div class="post-inser post box-shadow-wrap-normal"> <a href="https://xsy.fun/archives/194/" target="_blank" class="post_inser_a no-external-link no-underline-link"> <div class="inner-image bg" style="background-image: url(https://xsy.fun/usr/themes/handsome/assets/img/sj/6.jpg);background-size: cover;"></div> <div class="inner-content" > <p class="inser-title">使用Cloudflare的WARP服务给机器添加IPV6地址</p> <div class="inster-summary text-muted"> 前言有些地方的解锁机器十分难找到,要不只能用DNS解锁,但是最近我在网上看到有种方法可以使用cloudflare的... </div> </div> </a> <!-- .inner-content #####--> </div> <!-- .post-inser ####--> </div> 由于这里的wireguard是作为客户端,并且如果要双栈替换需要接管全局流量,所以我们要设置ip route来允许我们的IP进行访问 ### 方法一(默认配置,仅添加路由) 我们只需要在配置中增加两行代码即可 ``` [Interface] PrivateKey = xxx Address = 172.16.0.2/32 Address = fd01:5ca1:ab1e:85d1:47b1:6264:bf20:9c34/128 PreUp = ip route add 你自己的访问IP/32 via 默认路由网关; ip route add 你自己的访问IP/32 via 默认路由网关 PreDown = ip route del 你自己的访问IP/32 via 默认路由网关; ip route del 你自己的访问IP/32 via 默认路由网关 DNS = 1.1.1.1 MTU = 1420 [Peer] PublicKey = xxx AllowedIPs = 0.0.0.0/0 AllowedIPs = ::/0 Endpoint = engage.cloudflareclient.com:2408 ``` ### 方法二(手动配置策略路由) 首先我们先要新建一张路由表,名为cloudflare,输入命令`vi /etc/iproute2/rt_tables` ``` # # reserved values # 255 local 254 main 253 default 0 unspec # # local # #1 inr.ruhep 154 cloudflare ``` 再把配置改成 ``` [Interface] PrivateKey = xxx Address = 172.16.0.2/32 MTU = 1420 Table = off PostUp = ip route add default dev 你的wireguard网卡名 table cloudflare scope link src 配置中的v4地址; ip route add default dev 你的wireguard网卡名 table cloudflare src wg配置里的ipv6地址 metric 1024 pref medium; ip rule add lookup cloudflare && ip rule add from 机器的公网ip/32 lookup main; ip -6 rule add lookup cloudflare; ip -6 rule add to 机器的公网ipv6 lookup main PostDown = ip -6 rule delete lookup cloudflare; ip rule delete lookup cloudflare && ip rule delete from 机器公网ipv4地址/32 lookup main; ip -6 rule delete to 机器的公网ipv6地址 lookup main [Peer] PublicKey = xxx AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = [2606:4700:d0::a29f:c001]:2408 ``` ### 方法三(Docker) 容器内默认warp配置启动wireguard,安装xray起socks5代理,再在宿主机上编写outbound通过docker出网 Last modification:June 11, 2021 © Allow specification reprint Support Appreciate the author AliPayWeChat Like 0 If you think my article is useful to you, please feel free to appreciate
Comment here is closed