mirror of
https://github.com/kiddin9/op-packages.git
synced 2026-10-27 08:23:12 +08:00
235 lines
8.8 KiB
Python
235 lines
8.8 KiB
Python
# Copyright (C) 2026 huchd0 <https://github.com/huchd0/luci-app-netwiz>
|
||
# Licensed under the GNU General Public License v3.0
|
||
|
||
# ==================================================
|
||
# English | IPv6 Watchdog - (VPS Edition)
|
||
# ==================================================
|
||
# [Environment Requirements]
|
||
# 1. Ultra-lightweight: Uses built-in Python 3 on Linux (heavyweight environments like Node.js, Docker, or Nginx can also be used).
|
||
# 2. The VPS must have IPv6 network outbound capability.
|
||
#
|
||
# [Native Daemon]
|
||
# Uses systemd for process management, enabling auto-start on boot and sub-second self-healing on crashes.
|
||
#
|
||
# [Ultra-lightweight Deployment Steps]
|
||
# 1. Save the file:
|
||
# Copy all the code inside the `probe.py` file in this project and save it to your VPS at /root/probe.py
|
||
#
|
||
# 2. Create the daemon service:
|
||
# Execute the command in the terminal: nano /etc/systemd/system/netwiz-probe.service
|
||
# Paste the content inside the dashed lines below and save (Ctrl+O, Enter, Ctrl+X):
|
||
# ----------------------------------
|
||
# [Unit]
|
||
# Description=Netwiz IPv6 Probe Service
|
||
# After=network.target
|
||
#
|
||
# [Service]
|
||
# Type=simple
|
||
# User=root
|
||
# ExecStart=/usr/bin/python3 /root/probe.py
|
||
# Restart=always
|
||
# RestartSec=3
|
||
#
|
||
# [Install]
|
||
# WantedBy=multi-user.target
|
||
# ----------------------------------
|
||
#
|
||
# 3. Activate and start the probe (execute sequentially):
|
||
# systemctl daemon-reload
|
||
# systemctl enable netwiz-probe
|
||
# systemctl start netwiz-probe
|
||
#
|
||
# 4. Plugin Configuration:
|
||
# In the <📡 IPv6 Watchdog> section of the Netwiz Advanced Utility Settings, enter: http://YOUR_VPS_IP:18080
|
||
# (Note: Port 18080 can be freely modified in the basic configuration below: LISTEN_PORT = 18080.
|
||
# Please ensure the VPS firewall and cloud provider security group have allowed port 18080)
|
||
#
|
||
# [Common Management Commands]
|
||
# Check status: systemctl status netwiz-probe
|
||
# Stop probe: systemctl stop netwiz-probe
|
||
# Restart probe: systemctl restart netwiz-probe
|
||
# Real-time log: journalctl -u netwiz-probe -f
|
||
#
|
||
#
|
||
# ==================================================
|
||
# 简体中文 | IPv6 深度保活 - (VPS 版)
|
||
# ==================================================
|
||
# 【环境要求】
|
||
# 1. 极致轻量：使用 Linux 自带的 Python 3（当然也可以使用 Node.js、Docker 或 Nginx 等庞大环境）。
|
||
# 2. VPS 必须具备 IPv6 网络出口能力。
|
||
#
|
||
# 【原生守护】
|
||
# 采用 systemd 进程守护，开机自启、崩溃秒级自愈。
|
||
#
|
||
# 【极致轻量部署步骤】
|
||
# 1. 保存文件：
|
||
# 复制本项目中的 `probe.py` 里的全部代码，保存到 VPS 的 /root/probe.py
|
||
#
|
||
# 2. 创建守护服务：
|
||
# 在终端执行命令: nano /etc/systemd/system/netwiz-probe.service
|
||
# 将下方虚线内的内容贴入并保存 (Ctrl+O, Enter, Ctrl+X)：
|
||
# ----------------------------------
|
||
# [Unit]
|
||
# Description=Netwiz IPv6 Probe Service
|
||
# After=network.target
|
||
#
|
||
# [Service]
|
||
# Type=simple
|
||
# User=root
|
||
# ExecStart=/usr/bin/python3 /root/probe.py
|
||
# Restart=always
|
||
# RestartSec=3
|
||
#
|
||
# [Install]
|
||
# WantedBy=multi-user.target
|
||
# ----------------------------------
|
||
#
|
||
# 3. 激活并启动探针（依次执行）：
|
||
# systemctl daemon-reload
|
||
# systemctl enable netwiz-probe
|
||
# systemctl start netwiz-probe
|
||
#
|
||
# 4. 插件填写：
|
||
# 在 Netwiz 高级实用设置的 <📡 IPv6 深度保活> 设置中，填写：http://您的VPS_IP:18080
|
||
# (注：18080 端口可以在下方的基础配置：LISTEN_PORT = 18080 随意修改，请确保 VPS 防火墙与云服务商安全组已放行 18080 端口)
|
||
#
|
||
# 【常用管理命令】
|
||
# 查看状态: systemctl status netwiz-probe
|
||
# 停止探针: systemctl stop netwiz-probe
|
||
# 重启探针: systemctl restart netwiz-probe
|
||
# 实时日志: journalctl -u netwiz-probe -f
|
||
#
|
||
#
|
||
# ==================================================
|
||
# 繁體中文 | IPv6 深度保活 - (VPS 版)
|
||
# ==================================================
|
||
# 【環境要求】
|
||
# 1. 極致輕量：使用 Linux 內建的 Python 3（當然也可以使用 Node.js、Docker 或 Nginx 等龐大環境）。
|
||
# 2. VPS 必須具備 IPv6 網路出口能力。
|
||
#
|
||
# 【原生守護】
|
||
# 採用 systemd 進程守護，開機自啟、崩潰秒級自癒。
|
||
#
|
||
# 【極致輕量部署步驟】
|
||
# 1. 保存文件：
|
||
# 複製本項目中的 `probe.py` 裡的全部代碼，保存到 VPS 的 /root/probe.py
|
||
#
|
||
# 2. 創建守護服務：
|
||
# 在終端執行命令: nano /etc/systemd/system/netwiz-probe.service
|
||
# 將下方虛線內的內容貼入並保存 (Ctrl+O, Enter, Ctrl+X)：
|
||
# ----------------------------------
|
||
# [Unit]
|
||
# Description=Netwiz IPv6 Probe Service
|
||
# After=network.target
|
||
#
|
||
# [Service]
|
||
# Type=simple
|
||
# User=root
|
||
# ExecStart=/usr/bin/python3 /root/probe.py
|
||
# Restart=always
|
||
# RestartSec=3
|
||
#
|
||
# [Install]
|
||
# WantedBy=multi-user.target
|
||
# ----------------------------------
|
||
#
|
||
# 3. 激活並啟動探針（依次執行）：
|
||
# systemctl daemon-reload
|
||
# systemctl enable netwiz-probe
|
||
# systemctl start netwiz-probe
|
||
#
|
||
# 4. 外掛填寫：
|
||
# 在 Netwiz 高級實用設置的 <📡 IPv6 深度保活> 設置中，填寫：http://您的VPS_IP:18080
|
||
# (註：18080 端口可以在下方的基礎配置：LISTEN_PORT = 18080 隨意修改，請確保 VPS 防火牆與雲端服務商安全組已放行 18080 端口)
|
||
#
|
||
# 【常用管理命令】
|
||
# 查看狀態: systemctl status netwiz-probe
|
||
# 停止探針: systemctl stop netwiz-probe
|
||
# 重啟探針: systemctl restart netwiz-probe
|
||
# 即時日誌: journalctl -u netwiz-probe -f
|
||
#
|
||
# ============================ END ============================
|
||
|
||
# 基础配置 (可随意修改)
|
||
LISTEN_PORT = 18080 # 绑定您要求的端口，可随时更改
|
||
|
||
import urllib.request
|
||
import urllib.error
|
||
import urllib.parse
|
||
import socket
|
||
import re
|
||
from http.server import HTTPServer, BaseHTTPRequestHandler
|
||
|
||
# 强制绑定双栈 (支持 IPv6 和 IPv4)
|
||
class HTTPServerV6(HTTPServer):
|
||
address_family = socket.AF_INET6
|
||
allow_reuse_address = True # 允许端口复用，防止重启时报 Address already in use 错误
|
||
|
||
class ProbeHandler(BaseHTTPRequestHandler):
|
||
# 屏蔽默认的终端日志输出，保持清爽
|
||
def log_message(self, format, *args):
|
||
pass
|
||
|
||
def do_GET(self):
|
||
# 统一返回 200 状态码和纯文本
|
||
self.send_response(200)
|
||
self.send_header('Content-type', 'text/plain')
|
||
self.end_headers()
|
||
|
||
# 检测到当前系统没有 IPv6 网络出口，返回提示
|
||
try:
|
||
# 创建 UDP 套接字，探测本地是否有 IPv6 路由
|
||
s = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM)
|
||
s.connect(('2404:6800:4005:805::200e', 80))
|
||
s.close()
|
||
except Exception:
|
||
self.wfile.write(b"FAIL_VPS_NO_IPV6_SUPPORT")
|
||
return
|
||
|
||
# 1. 解码 URL (防止 IPv6 的方括号被浏览器转义为 %5B 和 %5D)
|
||
decoded_path = urllib.parse.unquote(self.path)
|
||
|
||
# 2. 解析探针目标: 直接剥离掉最前面的 '/' 即可，不再需要任何前缀
|
||
target = decoded_path.lstrip('/')
|
||
|
||
# 没带目标时，返回提示
|
||
if not target:
|
||
self.wfile.write(b"MISSING_TARGET")
|
||
return
|
||
|
||
# 3. 协议补全 (默认补上 http://)
|
||
if not target.startswith('http://') and not target.startswith('https://'):
|
||
target = 'http://' + target
|
||
|
||
# 4. 提取 Hostname
|
||
parsed_url = urllib.parse.urlparse(target)
|
||
hostname = parsed_url.hostname or ''
|
||
|
||
# 5. 终极防呆：拦截私有局域网 IP
|
||
private_ip_regex = r'^(192\.168\.|10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.|127\.|0\.|\[?fd[0-9a-f]{2}:)'
|
||
if re.match(private_ip_regex, hostname, re.I):
|
||
self.wfile.write(b"FAIL_PRIVATE_IP_BLOCKED")
|
||
return
|
||
|
||
# 6. 发起真实探测
|
||
try:
|
||
req = urllib.request.Request(target)
|
||
# 设定 6 秒超时 (与 CF Worker 代码保持一致)
|
||
with urllib.request.urlopen(req, timeout=6) as res:
|
||
self.wfile.write(b"OK")
|
||
except urllib.error.HTTPError as e:
|
||
# 收到密码拦截 (401/403) 也视为网络畅通
|
||
if e.code in [401, 403]:
|
||
self.wfile.write(b"OK")
|
||
else:
|
||
self.wfile.write(f"FAIL_HTTP_{e.code}".encode('utf-8'))
|
||
except Exception as e:
|
||
# 连接超时、拒绝连接、无法解析等网络层错误
|
||
self.wfile.write(f"FAIL_NETWORK_VPS: {str(e)}".encode('utf-8'))
|
||
|
||
if __name__ == '__main__':
|
||
print(f"Netwiz Probe 正在运行 (监听端口: {LISTEN_PORT})...")
|
||
# 启动监听
|
||
server = HTTPServerV6(('::', LISTEN_PORT), ProbeHandler)
|
||
server.serve_forever()
|