github
/
v2ray-agent
mirror of https://github.com/mack-a/v2ray-agent
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

feat(脚本): 完善hy2和tuic的端口跳跃

master
mack-a 2025-07-01 22:05:06 +08:00
parent 62dedc6bd5
commit ea2ef822c6
1 changed files with 142 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

186
install.sh
View File

@ -37,7 +37,7 @@ checkCentosSELinux() {
if [[ -f "/etc/selinux/config" ]] && ! grep -q "SELINUX=disabled" <"/etc/selinux/config"; then if [[ -f "/etc/selinux/config" ]] && ! grep -q "SELINUX=disabled" <"/etc/selinux/config"; then
echoContent yellow "# 注意事项" echoContent yellow "# 注意事项"
echoContent yellow "检测到SELinux已开启，请手动关闭，教程如下" echoContent yellow "检测到SELinux已开启，请手动关闭，教程如下"
echoContent yellow "https://www.v2ray-agent.com/archives/1679931532764#heading-8 " echoContent yellow "https://www.v2ray-agent.com/archives/1684115970026#centos7-%E5%85%B3%E9%97%ADselinux"
exit 0 exit 0
fi fi
} }
@ -211,6 +211,14 @@ initVar() {
portHoppingEnd= portHoppingEnd=
portHopping= portHopping=
hysteria2PortHoppingStart=
hysteria2PortHoppingEnd=
hysteria2PortHopping=
# tuicPortHoppingStart=
# tuicPortHoppingEnd=
# tuicPortHopping=
# tuic配置文件路径 # tuic配置文件路径
tuicConfigPath= tuicConfigPath=
tuicAlgorithm= tuicAlgorithm=
@ -705,11 +713,9 @@ allowPort() {
if ! firewall-cmd --list-ports --permanent | grep -qw "$1/${type}"; then if ! firewall-cmd --list-ports --permanent | grep -qw "$1/${type}"; then
updateFirewalldStatus=true updateFirewalldStatus=true
local firewallPort=$1 local firewallPort=$1
if echo "${firewallPort}" | grep -q ":"; then
if echo "${firewallPort}" | grep ":"; then firewallPort=$(echo "${firewallPort}" | awk -F ":" '{print $1"-"$2}')
firewallPort=$(echo "${firewallPort}" | awk -F ":" '{print $1-$2}')
fi fi
firewall-cmd --zone=public --add-port="${firewallPort}/${type}" --permanent firewall-cmd --zone=public --add-port="${firewallPort}/${type}" --permanent
checkFirewalldAllowPort "${firewallPort}" checkFirewalldAllowPort "${firewallPort}"
fi fi
@ -1063,13 +1069,18 @@ installTools() {
${installType} epel-release >/dev/null 2>&1 ${installType} epel-release >/dev/null 2>&1
fi fi
# [[ -z `find /usr/bin /usr/sbin |grep -v grep|grep -w curl` ]]
if ! find /usr/bin /usr/sbin | grep -q -w wget; then if ! find /usr/bin /usr/sbin | grep -q -w wget; then
echoContent green " ---> 安装wget" echoContent green " ---> 安装wget"
${installType} wget >/dev/null 2>&1 ${installType} wget >/dev/null 2>&1
fi fi
if ! find /usr/bin /usr/sbin | grep -q -w netfilter-persistent; then
if [[ "${release}" != "centos" ]]; then
echoContent green " ---> 安装iptables"
${installType} iptables-persistent >/dev/null 2>&1
fi
fi
if ! find /usr/bin /usr/sbin | grep -q -w curl; then if ! find /usr/bin /usr/sbin | grep -q -w curl; then
echoContent green " ---> 安装curl" echoContent green " ---> 安装curl"
${installType} curl >/dev/null 2>&1 ${installType} curl >/dev/null 2>&1
@ -3226,95 +3237,171 @@ initHysteria2Network() {
fi fi
} }
# hy端口跳跃 # firewalld设置端口跳跃
hysteriaPortHopping() { addFirewalldPortHopping() {
local start=$1
local end=$2
local targetPort=$3
for port in $(seq "$start" "$end"); do
sudo firewall-cmd --permanent --add-forward-port=port="${port}":proto=udp:toport="${targetPort}"
done
sudo firewall-cmd --reload
}
# 端口跳跃
addPortHopping() {
local type=$1
local targetPort=$2
if [[ -n "${portHoppingStart}" || -n "${portHoppingEnd}" ]]; then if [[ -n "${portHoppingStart}" || -n "${portHoppingEnd}" ]]; then
echoContent red " ---> 已添加不可重复添加，可删除后重新添加" echoContent red " ---> 已添加不可重复添加，可删除后重新添加"
exit 0 exit 0
fi fi
if [[ "${release}" == "centos" ]]; then
if ! systemctl status firewalld 2>/dev/null | grep -q "active (running)"; then
echoContent red " ---> 未启动firewalld防火墙，无法设置端口跳跃。"
exit 0
fi
fi
echoContent skyBlue "\n进度 1/1 : 端口跳跃" echoContent skyBlue "\n进度 1/1 : 端口跳跃"
echoContent red "\n==============================================================" echoContent red "\n=============================================================="
echoContent yellow "# 注意事项\n" echoContent yellow "# 注意事项\n"
echoContent yellow "仅支持Hysteria2" echoContent yellow "仅支持Hysteria2、Tuic"
echoContent yellow "端口跳跃的起始位置为30000" echoContent yellow "端口跳跃的起始位置为30000"
echoContent yellow "端口跳跃的结束位置为40000" echoContent yellow "端口跳跃的结束位置为40000"
echoContent yellow "可以在30000-40000范围中选一段" echoContent yellow "可以在30000-40000范围中选一段"
echoContent yellow "建议1000个左右" echoContent yellow "建议1000个左右"
echoContent yellow "注意不要和其他的端口跳跃设置范围一样，设置相同会覆盖。"
echoContent yellow "请输入端口跳跃的范围，例如[30000-31000]" echoContent yellow "请输入端口跳跃的范围，例如[30000-31000]"
read -r -p "范围:" hysteriaPortHoppingRange read -r -p "范围:" portHoppingRange
if [[ -z "${hysteriaPortHoppingRange}" ]]; then if [[ -z "${portHoppingRange}" ]]; then
echoContent red " ---> 范围不可为空" echoContent red " ---> 范围不可为空"
hysteriaPortHopping addPortHopping "${type}" "${targetPort}"
elif echo "${hysteriaPortHoppingRange}" | grep -q "-"; then elif echo "${portHoppingRange}" | grep -q "-"; then
local portStart= local portStart=
local portEnd= local portEnd=
portStart=$(echo "${hysteriaPortHoppingRange}" | awk -F '-' '{print $1}') portStart=$(echo "${portHoppingRange}" | awk -F '-' '{print $1}')
portEnd=$(echo "${hysteriaPortHoppingRange}" | awk -F '-' '{print $2}') portEnd=$(echo "${portHoppingRange}" | awk -F '-' '{print $2}')
if [[ -z "${portStart}" || -z "${portEnd}" ]]; then if [[ -z "${portStart}" || -z "${portEnd}" ]]; then
echoContent red " ---> 范围不合法" echoContent red " ---> 范围不合法"
hysteriaPortHopping addPortHopping "${type}" "${targetPort}"
elif ((portStart < 30000 || portStart > 40000 || portEnd < 30000 || portEnd > 40000 || portEnd < portStart)); then elif ((portStart < 30000 || portStart > 40000 || portEnd < 30000 || portEnd > 40000 || portEnd < portStart)); then
echoContent red " ---> 范围不合法" echoContent red " ---> 范围不合法"
hysteriaPortHopping addPortHopping "${type}" "${targetPort}"
else else
echoContent green "\n端口范围: ${hysteriaPortHoppingRange}\n" echoContent green "\n端口范围: ${portHoppingRange}\n"
iptables -t nat -A PREROUTING -p udp --dport "${portStart}:${portEnd}" -m comment --comment "mack-a_hysteria2_portHopping" -j DNAT --to-destination :${hysteriaPort} if [[ "${release}" == "centos" ]]; then
sudo firewall-cmd --permanent --add-masquerade
if iptables-save | grep -q "mack-a_hysteria2_portHopping"; then sudo firewall-cmd --reload
addFirewalldPortHopping "${portStart}" "${portEnd}" "${targetPort}"
if ! sudo firewall-cmd --list-forward-ports | grep -q "toport=${targetPort}"; then
echoContent red " ---> 端口跳跃添加失败"
exit 0
fi
else
iptables -t nat -A PREROUTING -p udp --dport "${portStart}:${portEnd}" -m comment --comment "mack-a_${type}_portHopping" -j DNAT --to-destination ":${targetPort}"
sudo netfilter-persistent save
if ! iptables-save | grep -q "mack-a_${type}_portHopping"; then
echoContent red " ---> 端口跳跃添加失败"
exit 0
fi
fi
allowPort "${portStart}:${portEnd}" udp allowPort "${portStart}:${portEnd}" udp
echoContent green " ---> 端口跳跃添加成功" echoContent green " ---> 端口跳跃添加成功"
else
echoContent red " ---> 端口跳跃添加失败"
fi
fi fi
fi fi
} }
# 读取端口跳跃的配置 # 读取端口跳跃的配置
readHysteriaPortHopping() { readPortHopping() {
if [[ -n "${hysteriaPort}" ]]; then local type=$1
if iptables-save | grep -q "mack-a_hysteria2_portHopping"; then local targetPort=$2
portHopping= local portHoppingStart=
portHopping=$(iptables-save | grep "mack-a_hysteria2_portHopping" | cut -d " " -f 8) local portHoppingEnd=
if [[ "${release}" == "centos" ]]; then
portHoppingStart=$(sudo firewall-cmd --list-forward-ports | grep "toport=${targetPort}" | head -1 | cut -d ":" -f 1 | cut -d "=" -f 2)
portHoppingEnd=$(sudo firewall-cmd --list-forward-ports | grep "toport=${targetPort}" | tail -n 1 | cut -d ":" -f 1 | cut -d "=" -f 2)
else
if iptables-save | grep -q "mack-a_${type}_portHopping"; then
local portHopping=
portHopping=$(iptables-save | grep "mack-a_${type}_portHopping" | cut -d " " -f 8)
portHoppingStart=$(echo "${portHopping}" | cut -d ":" -f 1) portHoppingStart=$(echo "${portHopping}" | cut -d ":" -f 1)
portHoppingEnd=$(echo "${portHopping}" | cut -d ":" -f 2) portHoppingEnd=$(echo "${portHopping}" | cut -d ":" -f 2)
fi fi
fi fi
if [[ "${type}" == "hysteria2" ]]; then
hysteria2PortHoppingStart="${portHoppingStart}"
hysteria2PortHoppingEnd=${portHoppingEnd}
hysteria2PortHopping="${portHoppingStart}-${portHoppingEnd}"
elif [[ "${type}" == "tuic" ]]; then
tuicPortHoppingStart="${portHoppingStart}"
tuicPortHoppingEnd="${portHoppingEnd}"
tuicPortHopping="${portHoppingStart}-${portHoppingEnd}"
fi
} }
# 删除端口跳跃iptables规则
deletePortHoppingRules() {
local type=$1
local start=$2
local end=$3
local targetPort=$4
# 删除hysteria2 端口跳跃iptables规则 if [[ "${release}" == "centos" ]]; then
deleteHysteriaPortHoppingRules() { for port in $(seq "${start}" "${end}"); do
iptables -t nat -L PREROUTING --line-numbers | grep "mack-a_hysteria2_portHopping" | awk '{print $1}' | while read -r line; do sudo firewall-cmd --permanent --remove-forward-port=port="${port}":proto=udp:toport="${targetPort}"
iptables -t nat -D PREROUTING 1
done done
sudo firewall-cmd --reload
else
iptables -t nat -L PREROUTING --line-numbers | grep "mack-a_${type}_portHopping" | awk '{print $1}' | while read -r line; do
iptables -t nat -D PREROUTING 1
sudo netfilter-persistent save
done
fi
} }
# hysteria2端口跳跃菜单 # 端口跳跃菜单
hysteriaPortHoppingMenu() { portHoppingMenu() {
local type=$1
# 判断iptables是否存在 # 判断iptables是否存在
if ! find /usr/bin /usr/sbin | grep -q -w iptables; then if ! find /usr/bin /usr/sbin | grep -q -w iptables; then
echoContent red " ---> 无法识别iptables工具，无法使用端口跳跃，退出安装" echoContent red " ---> 无法识别iptables工具，无法使用端口跳跃，退出安装"
exit 0 exit 0
fi fi
readHysteriaPortHopping
local targetPort=
local portHoppingStart=
local portHoppingEnd=
if [[ "${type}" == "hysteria2" ]]; then
readPortHopping "${type}" "${singBoxHysteria2Port}"
targetPort=${singBoxHysteria2Port}
portHoppingStart=${hysteria2PortHoppingStart}
portHoppingEnd=${hysteria2PortHoppingEnd}
elif [[ "${type}" == "tuic" ]]; then
readPortHopping "${type}" "${singBoxTuicPort}"
targetPort=${singBoxTuicPort}
portHoppingStart=${tuicPortHoppingStart}
portHoppingEnd=${tuicPortHoppingEnd}
fi
echoContent skyBlue "\n进度 1/1 : 端口跳跃" echoContent skyBlue "\n进度 1/1 : 端口跳跃"
echoContent red "\n==============================================================" echoContent red "\n=============================================================="
echoContent yellow "1.添加端口跳跃" echoContent yellow "1.添加端口跳跃"
echoContent yellow "2.删除端口跳跃" echoContent yellow "2.删除端口跳跃"
echoContent yellow "3.查看端口跳跃" echoContent yellow "3.查看端口跳跃"
read -r -p "范围:" selectPortHoppingStatus read -r -p "请选择:" selectPortHoppingStatus
if [[ "${selectPortHoppingStatus}" == "1" ]]; then if [[ "${selectPortHoppingStatus}" == "1" ]]; then
hysteriaPortHopping addPortHopping "${type}" "${targetPort}"
elif [[ "${selectPortHoppingStatus}" == "2" ]]; then elif [[ "${selectPortHoppingStatus}" == "2" ]]; then
if [[ -n "${portHopping}" ]]; then deletePortHoppingRules "${type}" "${portHoppingStart}" "${portHoppingEnd}" "${targetPort}"
deleteHysteriaPortHoppingRules
echoContent green " ---> 删除成功" echoContent green " ---> 删除成功"
fi
elif [[ "${selectPortHoppingStatus}" == "3" ]]; then elif [[ "${selectPortHoppingStatus}" == "3" ]]; then
if [[ -n "${portHoppingStart}" && -n "${portHoppingEnd}" ]]; then if [[ -n "${portHoppingStart}" && -n "${portHoppingEnd}" ]]; then
echoContent green " ---> 当前端口跳跃范围为: ${portHoppingStart}-${portHoppingEnd}" echoContent green " ---> 当前端口跳跃范围为: ${portHoppingStart}-${portHoppingEnd}"
@ -3322,7 +3409,7 @@ hysteriaPortHoppingMenu() {
echoContent yellow " ---> 未设置端口跳跃" echoContent yellow " ---> 未设置端口跳跃"
fi fi
else else
hysteriaPortHoppingMenu portHoppingMenu
fi fi
} }
# 初始化Hysteria配置 # 初始化Hysteria配置
@ -5390,7 +5477,6 @@ showAccounts() {
readInstallProtocolType readInstallProtocolType
readConfigHostPathUUID readConfigHostPathUUID
readSingBoxConfig readSingBoxConfig
readHysteriaPortHopping
echo echo
echoContent skyBlue "\n进度 $1/${totalProgress} : 账号" echoContent skyBlue "\n进度 $1/${totalProgress} : 账号"
@ -5523,14 +5609,15 @@ showAccounts() {
fi fi
# hysteria2 # hysteria2
if echo ${currentInstallProtocolType} | grep -q ",6," || [[ -n "${hysteriaPort}" ]]; then if echo ${currentInstallProtocolType} | grep -q ",6," || [[ -n "${hysteriaPort}" ]]; then
readPortHopping "hysteria2" "${singBoxHysteria2Port}"
echoContent skyBlue "\n================================ Hysteria2 TLS [推荐] ================================\n" echoContent skyBlue "\n================================ Hysteria2 TLS [推荐] ================================\n"
local path="${configPath}" local path="${configPath}"
if [[ "${coreInstallType}" == "1" ]]; then if [[ "${coreInstallType}" == "1" ]]; then
path="${singBoxConfigPath}" path="${singBoxConfigPath}"
fi fi
local hysteria2DefaultPort= local hysteria2DefaultPort=
if [[ -n "${portHoppingStart}" && -n "${portHoppingEnd}" ]]; then if [[ -n "${hysteria2PortHoppingStart}" && -n "${hysteria2PortHoppingEnd}" ]]; then
hysteria2DefaultPort="${portHoppingStart}-${portHoppingEnd}" hysteria2DefaultPort="${hysteria2PortHopping}"
else else
hysteria2DefaultPort=${singBoxHysteria2Port} hysteria2DefaultPort=${singBoxHysteria2Port}
fi fi
@ -9576,7 +9663,7 @@ manageHysteria() {
elif [[ "${installHysteria2Status}" == "2" && "${hysteria2Status}" == "true" ]]; then elif [[ "${installHysteria2Status}" == "2" && "${hysteria2Status}" == "true" ]]; then
unInstallSingBox hysteria2 unInstallSingBox hysteria2
elif [[ "${installHysteria2Status}" == "3" && "${hysteria2Status}" == "true" ]]; then elif [[ "${installHysteria2Status}" == "3" && "${hysteria2Status}" == "true" ]]; then
hysteriaPortHoppingMenu portHoppingMenu hysteria2
fi fi
} }
@ -9589,6 +9676,7 @@ manageTuic() {
echoContent yellow "依赖sing-box内核\n" echoContent yellow "依赖sing-box内核\n"
echoContent yellow "1.重新安装" echoContent yellow "1.重新安装"
echoContent yellow "2.卸载" echoContent yellow "2.卸载"
echoContent yellow "3.端口跳跃管理"
tuicStatus=true tuicStatus=true
else else
echoContent yellow "依赖sing-box内核\n" echoContent yellow "依赖sing-box内核\n"
@ -9601,6 +9689,8 @@ manageTuic() {
singBoxTuicInstall singBoxTuicInstall
elif [[ "${installTuicStatus}" == "2" && "${tuicStatus}" == "true" ]]; then elif [[ "${installTuicStatus}" == "2" && "${tuicStatus}" == "true" ]]; then
unInstallSingBox tuic unInstallSingBox tuic
elif [[ "${installTuicStatus}" == "3" && "${tuicStatus}" == "true" ]]; then
portHoppingMenu tuic
fi fi
} }
# sing-box log日志 # sing-box log日志
@ -9704,7 +9794,7 @@ menu() {
cd "$HOME" || exit cd "$HOME" || exit
echoContent red "\n==============================================================" echoContent red "\n=============================================================="
echoContent green "作者：mack-a" echoContent green "作者：mack-a"
echoContent green "当前版本：v3.4.14" echoContent green "当前版本：v3.4.15"
echoContent green "Github：https://github.com/mack-a/v2ray-agent" echoContent green "Github：https://github.com/mack-a/v2ray-agent"
echoContent green "描述：八合一共存脚本\c" echoContent green "描述：八合一共存脚本\c"
showInstallStatus showInstallStatus