Giter Club home page Giter Club logo

Comments (7)

wangyu- avatar wangyu- commented on August 18, 2024 3

都装在虚拟机里也要加吗?都装在虚拟机里,你应该是不能用redirect-gateway的,所以不加。那个仅限于需要使用openvpn的redirect-gateway选项的人。

还有方便提供一下你的路由表route信息吗?

我这个运行在树莓派上,对你帮助不大。不过既然你想看,我贴给你就是了:

pi@raspberrypi:~ $ ip route
default via 192.168.200.1 dev eth0  metric 202
10.222.2.0/24 via 10.222.2.5 dev tun100
10.222.2.5 dev tun100  proto kernel  scope link  src 10.222.2.6
192.168.100.0/24 dev wlan0  proto kernel  scope link  src 192.168.100.1
192.168.200.0/24 dev eth0  proto kernel  scope link  src 192.168.200.205  metric 202

root@raspberrypi:/home/pi# ip route show table lanvpn
default via 10.222.2.5 dev tun100
unreachable default  metric 2
throw 10.222.0.0/16
throw 192.168.0.0/16

root@raspberrypi:/home/pi# ip rule
0:      from all lookup local
30001:  from 192.168.100.128/26 lookup lanvpn
30002:  from 192.168.100.192/26 lookup lanvpn2
32766:  from all lookup main
32767:  from all lookup default

pi@raspberrypi:~ $ ifconfig
eth0      Link encap:Ethernet  HWaddr b8:27:eb:1f:05:85
          inet addr:192.168.200.205  Bcast:192.168.200.255  Mask:255.255.255.0
          inet6 addr: fe80::9a5d:1529:f914:79de/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:295470621 errors:0 dropped:55 overruns:0 frame:0
          TX packets:211176564 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1142843583 (1.0 GiB)  TX bytes:4026763285 (3.7 GiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:501618665 errors:0 dropped:0 overruns:0 frame:0
          TX packets:501618665 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1
          RX bytes:287062310452 (267.3 GiB)  TX bytes:287062310452 (267.3 GiB)

tun100    Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.222.2.6  P-t-P:10.222.2.5  Mask:255.255.255.255
          inet6 addr: fe80::3dac:c1e5:3e26:1ade/64 Scope:Link
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:100833075 errors:0 dropped:0 overruns:0 frame:0
          TX packets:50452376 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:4000
          RX bytes:87634640893 (81.6 GiB)  TX bytes:5435328076 (5.0 GiB)

wlan0     Link encap:Ethernet  HWaddr b8:27:eb:4a:50:d0
          inet addr:192.168.100.1  Bcast:192.168.100.255  Mask:255.255.255.0
          inet6 addr: fe80::ba27:ebff:fe4a:50d0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:132173579 errors:0 dropped:141 overruns:0 frame:0
          TX packets:169907366 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:2890675634 (2.6 GiB)  TX bytes:3856708752 (3.5 GiB)

root@raspberrypi:/home/pi# iptables-save
# Generated by iptables-save v1.4.21 on Mon Oct 23 14:21:00 2017
*filter
:INPUT ACCEPT [88468421:59803882244]
:FORWARD ACCEPT [26064453:20635973257]
:OUTPUT ACCEPT [88460854:59729887541]
:udp2rawDwrW_f6ddb804_C0 - [0:0]
-A INPUT -s 44.55.66.77/32 -p tcp -m tcp --sport 9966 -j udp2rawDwrW_f6ddb804_C0
-A udp2rawDwrW_f6ddb804_C0 -j DROP
COMMIT
# Completed on Mon Oct 23 14:21:00 2017
# Generated by iptables-save v1.4.21 on Mon Oct 23 14:21:00 2017
*nat
:PREROUTING ACCEPT [226067295:189482051229]
:INPUT ACCEPT [48065:4571743]
:OUTPUT ACCEPT [55141:4063178]
:POSTROUTING ACCEPT [55141:4063178]
-A POSTROUTING -s 192.168.100.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 192.168.100.0/24 -o tun100 -j MASQUERADE
COMMIT
# Completed on Mon Oct 23 14:21:00 2017

树莓派是我的路由器。网络相关的全部配置都贴给你了。

from udpspeeder.

wangyu- avatar wangyu- commented on August 18, 2024 2

你在连客户端openvpn前先 输入 ”sudo ip route add 你服务器ip via 192.168.1.1“ ,让udpspeeder流量不走vpn

嗯,如果用了redirect-gateway的话是需要加这条规则的。我刚刚在UDPspeeder+Openvpn教程里,加入了这个提醒。

==update==
哦,不是。对于楼主,不用加这条规则,因为楼主的UDPspeeder client是运行在同一子网下的树莓派上的,子网的流量不会被OpenVPN劫持。

其他人注意一下,如果需要OpenVPN和UDPspeeder运行在同一台机器上需要加。

from udpspeeder.

wangyu- avatar wangyu- commented on August 18, 2024

服务器端需要开启 ipforward,还要设置nat规则。

客户端需要设置好路由表(不过openvpn有选项可以自动设置这个)

具体细节去网上Google一下吧,既然都连通了,剩下的问题就是纯openvpn相关的了。

from udpspeeder.

otkmaster avatar otkmaster commented on August 18, 2024

你在连客户端openvpn前先 输入 ”sudo ip route add 你服务器ip via 192.168.1.1“ ,让udpspeeder流量不走vpn

from udpspeeder.

QiXianPu avatar QiXianPu commented on August 18, 2024

其他人注意一下,如果OpenVPN和UDPspeeder运行在同一台机器上需要加

都装在虚拟机里也要加吗?

还有方便提供一下开启vpn和udpspeeder后你的路由表route信息吗?

谢谢

from udpspeeder.

raphael008 avatar raphael008 commented on August 18, 2024

服务器端需要开启 ipforward,还要设置nat规则。
客户端需要设置好路由表(不过openvpn有选项可以自动设置这个)
具体细节去网上Google一下吧,既然都连通了,剩下的问题就是纯openvpn相关的了。

谢谢,正在troubleshooting中😂

from udpspeeder.

raphael008 avatar raphael008 commented on August 18, 2024

终于解决了...,测试下来应该是openvpn的配置问题,奉劝各位一句:巭孬嫑乱改配置。

from udpspeeder.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.