v2ray如何让出站流量走tun设备 #1062

cncherisher · 2021-06-12T04:50:05Z

cncherisher
Jun 12, 2021

我的vps上安装了openvpn客户端并连接上了另一台openvpn服务器

# ifconfig tun0
tun0: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST>  mtu 1500
        inet 10.211.1.33  netmask 255.255.255.255  destination 10.211.1.34
        inet6 fe80::2b6:ef70:4910:e226  prefixlen 64  scopeid 0x20<link>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
        RX packets 806  bytes 259876 (253.7 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 39  bytes 2316 (2.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

#  curl --interface tun0 yahoo.co.jp
<HTML>
<HEAD>
<TITLE>Document Has Moved</TITLE>
</HEAD>

<BODY BGCOLOR="white" FGCOLOR="black">
<H1>Document Has Moved</H1>
<HR>

<FONT FACE="Helvetica,Arial"><B>
Description: The document you requested has moved to a new location.  The new location is "https://www.yahoo.co.jp/".
</B></FONT>
<HR>
</BODY>

配置文件已设置为route-nopull
现在需求是让v2ray的出站走这个tun设备
4.39配置为

    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
{
	"type": "field",
	"domain": [
		".jp"
	],
	"outboundTag": "vpngate"
},
{
	"type": "field",
	"ip": [
		"geoip:jp"
	],
	"outboundTag": "vpngate"
},
        ]
    }

 "outbounds": [
		{
            "protocol": "freedom"
        },
                {
	   "sendThrough": "10.211.1.33",
            "protocol": "freedom",
			"tag": "vpngate"
        }

使用v2ray代理访问yahoo.co.jp失败

2021/06/12 04:46:15 [Info] [2458412462] app/dispatcher: taking detour [vpngate] for [tcp:yahoo.co.jp:80]
2021/06/12 04:46:15 [Info] [2458412462] proxy/freedom: opening connection to tcp:yahoo.co.jp:80
2021/06/12 04:46:15 [Info] [2458412462] transport/internet/tcp: dialing TCP to tcp:yahoo.co.jp:80
2021/06/12 04:46:15 127.0.0.1:62626 accepted tcp:yahoo.co.jp:80 [vpngate]
2021/06/12 04:46:47 [Info] [4294128880] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2021/06/12 04:46:47 [Info] [4294128880] app/proxyman/inbound: connection ends > proxy/trojan: connection ends > proxy/trojan: failed to write response > io: read/write on closed pipe
2021/06/12 04:46:51 [Info] [2214430484] app/proxyman/inbound: connection ends > proxy/vless/inbound: fallback ends > context canceled
2021/06/12 04:46:51 [Info] [792242191] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2021/06/12 04:46:53 [Info] [2172534440] transport/internet/tcp: dialing TCP to tcp:yahoo.co.jp:80
2021/06/12 04:46:59 [Info] [2172534440] transport/internet/tcp: dialing TCP to tcp:yahoo.co.jp:80
2021/06/12 04:46:47 [Info] [2458412462] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: failed to open connection to tcp:yahoo.co.jp:80 > common/retry: [dial tcp 10.211.1.33:0->183.79.135.206:80: connect: connection timed out dial tcp 10.211.1.33:0->182.22.59.229:80: connect: connection timed out dial tcp 10.211.1.33:0->183.79.135.206:80: connect: connection timed out] > common/retry: all retry attempts failed
2021/06/12 04:46:47 [Info] [2458412462] app/proxyman/inbound: connection ends > proxy/trojan: connection ends > proxy/trojan: failed to write response > io: read/write on closed pipe

Answered by jphilll

Nov 23, 2021

我找到一个可用方案。

先在 VPS 上运行以下命令：

ip rule add from x.x.x.x table 128      # x.x.x.x  是 VPS 的公网 IP 地址
ip route add table 128 to y.y.y.y/y dev ethX      # y.y.y.y/y 是 VPS 的公网 IP 地址的子网, ethX 是 VPS 的公网网卡名
ip route add table 128 default via z.z.z.z      # z.z.z.z 是 VPS 的默认网关地址

OpenVPN 部分配置 .ovpn（不要设置 route-nopull ）：

client
dev tun
proto tcp
remote ***.***
#route-nopull # 注释掉 route-nopull

V2Ray Server 部分配置config.json：

"outbounds": [
    {
        "sendThrough": "0.0.0.0",      # 直接从 `0.0.0.0` 网卡出站
        "protocol":"freedom",
        "settings":{
            "domainStrategy":"UseIP"
        },
        "tag":"direct"
    }
]

View full answer

jphilll · 2021-11-23T14:09:20Z

jphilll
Nov 23, 2021

我找到一个可用方案。

先在 VPS 上运行以下命令：

ip rule add from x.x.x.x table 128      # x.x.x.x  是 VPS 的公网 IP 地址
ip route add table 128 to y.y.y.y/y dev ethX      # y.y.y.y/y 是 VPS 的公网 IP 地址的子网, ethX 是 VPS 的公网网卡名
ip route add table 128 default via z.z.z.z      # z.z.z.z 是 VPS 的默认网关地址

OpenVPN 部分配置 .ovpn（不要设置 route-nopull ）：

client
dev tun
proto tcp
remote ***.***
#route-nopull # 注释掉 route-nopull

V2Ray Server 部分配置config.json：

"outbounds": [
    {
        "sendThrough": "0.0.0.0",      # 直接从 `0.0.0.0` 网卡出站
        "protocol":"freedom",
        "settings":{
            "domainStrategy":"UseIP"
        },
        "tag":"direct"
    }
]

1 reply

jphilll Nov 23, 2021

Source: https://serverfault.com/questions/659955/allowing-ssh-on-a-server-with-an-active-openvpn-client

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

v2ray如何让出站流量走tun设备 #1062

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

v2ray如何让出站流量走tun设备 #1062

Uh oh!

cncherisher Jun 12, 2021

Replies: 1 comment · 1 reply

Uh oh!

jphilll Nov 23, 2021

Uh oh!

jphilll Nov 23, 2021

cncherisher
Jun 12, 2021

Replies: 1 comment 1 reply

jphilll
Nov 23, 2021