diff --git a/debian9-x86_64.sh b/debian9-x86_64.sh index 5a66064..57a9ec1 100755 --- a/debian9-x86_64.sh +++ b/debian9-x86_64.sh @@ -44,6 +44,7 @@ if [ "$KERNEL" != "5.4" ]; then SOURCES="yes" fi NOINTERNET=${NOINTERNET:-no} +GRETUNNELS=${GRETUNNELS:-yes} REINSTALL=${REINSTALL:-yes} SPEEDTEST=${SPEEDTEST:-yes} IPERF=${IPERF:-yes} @@ -74,8 +75,8 @@ MLVPN_BINARY_VERSION="3.0.0+20211028.git.ddafba3" UBOND_VERSION="31af0f69ebb6d07ed9348dca2fced33b956cedee" OBFS_VERSION="486bebd9208539058e57e23a12f23103016e09b4" OBFS_BINARY_VERSION="0.0.5-1" -OMR_ADMIN_VERSION="f974719ddc902246ac0cd559372495ec23b262df" -OMR_ADMIN_BINARY_VERSION="0.9+20240324" +OMR_ADMIN_VERSION="21d071ebece556f3114c18ed9e86414ea6c85e1c" +OMR_ADMIN_BINARY_VERSION="0.11+20240704" #OMR_ADMIN_BINARY_VERSION="0.3+20220827" DSVPN_VERSION="3b99d2ef6c02b2ef68b5784bec8adfdd55b29b1a" DSVPN_BINARY_VERSION="0.1.4-2" @@ -202,7 +203,7 @@ fi # Force update key [ -f /etc/apt/sources.list.d/openmptcprouter.list ] && { echo "Update ${REPO} key" - apt-key del '2FDF 70C8 228B 7F04 42FE 59F6 608F D17B 2B24 D936' 2>&1 >/dev/null + apt-key del '2FDF 70C8 228B 7F04 42FE 59F6 608F D17B 2B24 D936' >/dev/null 2>&1 if [ "$CHINA" = "yes" ]; then #wget -O - https://gitee.com/ysurac/openmptcprouter-vps-debian/raw/main/openmptcprouter.gpg.key | apt-key add - wget https://gitlab.com/ysurac/openmptcprouter-vps-debian/raw/main/openmptcprouter.gpg.key -O /etc/apt/trusted.gpg.d/openmptcprouter.gpg @@ -431,12 +432,22 @@ if [ "$KERNEL" = "5.4" ] || [ "$KERNEL" = "5.15" ]; then rm -f /etc/grub.d/30_os-prober bash update-grub.sh ${KERNEL_VERSION}-mptcp bash update-grub.sh ${KERNEL_RELEASE} - [ -f /boot/grub/grub.cfg ] && sed -i 's/default="1>0"/default="0"/' /boot/grub/grub.cfg 2>&1 >/dev/null + [ -f /boot/grub/grub.cfg ] && sed -i 's/default="1>0"/default="0"/' /boot/grub/grub.cfg >/dev/null 2>&1 elif [ "$KERNEL" = "6.6" ] && [ "$ARCH" = "amd64" ]; then - wget https://dl.xanmod.org/archive.key -O /etc/apt/trusted.gpg.d/xanmod.gpg - echo 'deb http://deb.xanmod.org releases main' > /etc/apt/sources.list.d/xanmod-release.list - apt-get update - apt-get -y install linux-xanmod-x64v3 + # awk command from xanmod website + PSABI=$(awk 'BEGIN { while (!/flags/) if (getline < "/proc/cpuinfo" != 1) exit 1; if (/lm/&&/cmov/&&/cx8/&&/fpu/&&/fxsr/&&/mmx/&&/syscall/&&/sse2/) level = 1; if (level == 1 && /cx16/&&/lahf/&&/popcnt/&&/sse4_1/&&/sse4_2/&&/ssse3/) level = 2; if (level == 2 && /avx/&&/avx2/&&/bmi1/&&/bmi2/&&/f16c/&&/fma/&&/abm/&&/movbe/&&/xsave/) level = 3; if (level == 3 && /avx512f/&&/avx512bw/&&/avx512cd/&&/avx512dq/&&/avx512vl/) level = 4; if (level > 0) { print "x64v" level; exit level + 1 }; exit 1;}' | tr -d "\n") + KERNEL_VERSION="6.6.36" + KERNEL_REV="0~20240628.g36640c1" + wget -O /tmp/linux-image-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb ${VPSURL}kernel/linux-image-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb + wget -O /tmp/linux-headers-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb ${VPSURL}kernel/linux-headers-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb + echo "Install kernel linux-image-${KERNEL_VERSION}-${PSABI}-xanmod1 source release" + dpkg --force-all -i -B /tmp/linux-headers-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb + dpkg --force-all -i -B /tmp/linux-image-${KERNEL_VERSION}-${PSABI}-xanmod1_${KERNEL_VERSION}-${PSABI}-xanmod1-${KERNEL_REV}_amd64.deb + +# wget -qO - https://dl.xanmod.org/archive.key | gpg --batch --yes --dearmor -vo /usr/share/keyrings/xanmod-archive-keyring.gpg +# echo 'deb [signed-by=/usr/share/keyrings/xanmod-archive-keyring.gpg] http://deb.xanmod.org releases main' | tee /etc/apt/sources.list.d/xanmod-release.list +# apt-get update +# apt-get -y install linux-xanmod-lts-x64v3 [ -f /etc/default/grub ] && { sed -i "s@^\(GRUB_DEFAULT=\).*@\1\"0\"@" /etc/default/grub >/dev/null 2>&1 [ -f /boot/grub/grub.cfg ] && grub-mkconfig -o /boot/grub/grub.cfg >/dev/null 2>&1 @@ -444,14 +455,16 @@ elif [ "$KERNEL" = "6.6" ] && [ "$ARCH" = "amd64" ]; then elif [ "$KERNEL" = "6.6" ] && [ "$ID" = "debian" ]; then echo 'deb http://deb.debian.org/debian bookworm-backports main' > /etc/apt/sources.list.d/bookworm-backports.list apt-get update - apt-get -y install $(apt-cache search linux-image-amd64-6.6 | tail -n 1 | cut -d" " -f1) + latestkernel=$(apt-cache search linux-image-6.6 | grep -v headers | grep -v dbg | grep -v rt | tail -n 1 | cut -d" " -f1) + latestkernelheaders=$(echo $latestkernel | sed 's/image/headers/g') + apt-get -y install $latestkernel $latestkernelheaders [ -f /etc/default/grub ] && { sed -i "s@^\(GRUB_DEFAULT=\).*@\1\"0\"@" /etc/default/grub >/dev/null 2>&1 [ -f /boot/grub/grub.cfg ] && grub-mkconfig -o /boot/grub/grub.cfg >/dev/null 2>&1 } else if [ "$ID" = "ubuntu" ] && [ -z "$(uname -a | grep '6.1')" ]; then - apt-get -y install $(apt-cache search linux-image-unsigned-6.1.0 | tail -n 1 | cut -d" " -f1) + apt-get -y install $(apt-cache search linux-image-unsigned-6.1 | tail -n 1 | cut -d" " -f1) fi [ -f /etc/default/grub ] && { sed -i "s@^\(GRUB_DEFAULT=\).*@\1\"0\"@" /etc/default/grub >/dev/null 2>&1 @@ -468,7 +481,7 @@ if [ "$IPERF" = "yes" ]; then #apt-get -y -o Dpkg::Options::="--force-overwrite" install omr-iperf3 #chmod 644 /lib/systemd/system/iperf3.service echo "Install iperf3" - [ "$ARCH" = "amd64" ] && apt-get -y remove omr-iperf3 omr-libiperf0 2>&1 >/dev/null + [ "$ARCH" = "amd64" ] && apt-get -y remove omr-iperf3 omr-libiperf0 >/dev/null 2>&1 apt-get -y install iperf3 if [ ! -f "/etc/iperf3/private.pem" ]; then mkdir -p /etc/iperf3 @@ -487,6 +500,10 @@ if [ "$IPERF" = "yes" ]; then fi fi +rm -f /var/lib/dpkg/lock +rm -f /var/lib/dpkg/lock-frontend + + if [ "$KERNEL" != "5.4" ]; then echo "Compile and install mptcpize..." apt-get -y install --no-install-recommends build-essential @@ -515,8 +532,10 @@ if [ "$KERNEL" != "5.4" ]; then fi rm -rf iproute2 - echo "MPTCPize iperf3..." - mptcpize enable iperf3 2>&1 >/dev/null + if [ "$ID" = "debian" ]; then + echo "MPTCPize iperf3..." + mptcpize enable iperf3 >/dev/null 2>&1 + fi #if [ "$UPSTREAM6" = "yes" ]; then # apt-get -y install $(dpkg --get-selections | grep linux-image-6.1 | grep -v dbg | cut -f1)-dbg @@ -594,15 +613,15 @@ if [ "$SHADOWSOCKS" = "yes" ]; then #cd /tmp/shadowsocks-libev-${SHADOWSOCKS_VERSION} rm -f /var/lib/dpkg/lock rm -f /var/lib/dpkg/lock-frontend - mk-build-deps --install --tool "apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y" 2>&1 >/dev/null + mk-build-deps --install --tool "apt-get -o Debug::pkgProblemResolver=yes --no-install-recommends -y" >/dev/null 2>&1 rm -f /var/lib/dpkg/lock rm -f /var/lib/dpkg/lock-frontend - dpkg-buildpackage -b -us -uc 2>&1 >/dev/null + dpkg-buildpackage -b -us -uc >/dev/null 2>&1 rm -f /var/lib/dpkg/lock rm -f /var/lib/dpkg/lock-frontend cd /tmp #dpkg -i shadowsocks-libev_*.deb - dpkg -i omr-shadowsocks-libev_*.deb 2>&1 >/dev/null + dpkg -i omr-shadowsocks-libev_*.deb >/dev/null 2>&1 #mkdir -p /usr/lib/shadowsocks-libev #cp -f /tmp/shadowsocks-libev-${SHADOWSOCKS_VERSION}/src/*.ebpf /usr/lib/shadowsocks-libev #rm -rf /tmp/shadowsocks-libev-${SHADOWSOCKS_VERSION} @@ -789,6 +808,9 @@ if [ "$OMR_ADMIN" = "yes" ]; then [ "$NOINTERNET" = "yes" ] && { sed -i 's/"port": 65500,/"port": 65500,\n "internet": false,/' /etc/openmptcprouter-vps-admin/omr-admin-config.json } + [ "$GRETUNNELS" = "no" ] && { + sed -i 's/"port": 65500,/"port": 65500,\n "gre_tunnels": false,/' /etc/openmptcprouter-vps-admin/omr-admin-config.json + } chmod 644 /lib/systemd/system/omr-admin.service chmod 644 /lib/systemd/system/omr-admin-ipv6.service #[ "$(ip -6 a)" != "" ] && sed -i 's/0.0.0.0/::/g' /usr/local/bin/omr-admin.py @@ -797,8 +819,8 @@ if [ "$OMR_ADMIN" = "yes" ]; then } systemctl enable omr-admin.service if [ "$KERNEL" != "5.4" ]; then - mptcpize enable omr-admin.service 2>&1 >/dev/null - [ "$(ip -6 a)" != "" ] && mptcpize enable omr-admin-ipv6.service 2>&1 >/dev/null + mptcpize enable omr-admin.service >/dev/null 2>&1 + [ "$(ip -6 a)" != "" ] && mptcpize enable omr-admin-ipv6.service >/dev/null 2>&1 fi fi @@ -1374,7 +1396,7 @@ if [ "$OPENVPN" = "yes" ]; then make-cadir /etc/openvpn/ca fi cd /etc/openvpn/ca - ./easyrsa --batch init-pki 2>&1 >/dev/null + ./easyrsa --batch init-pki >/dev/null 2>&1 ./easyrsa --batch build-ca nopass EASYRSA_CERT_EXPIRE=3650 ./easyrsa --batch build-server-full server nopass EASYRSA_CERT_EXPIRE=3650 ./easyrsa --batch build-client-full "openmptcprouter" nopass @@ -1431,7 +1453,7 @@ if [ "$OPENVPN" = "yes" ]; then systemctl enable openvpn@tun0.service systemctl enable openvpn@tun1.service if [ "$KERNEL" != "5.4" ]; then - mptcpize enable openvpn@tun0 2>&1 >/dev/null + mptcpize enable openvpn@tun0 >/dev/null 2>&1 fi systemctl enable openvpn@bonding1.service systemctl enable openvpn@bonding2.service @@ -1551,7 +1573,7 @@ if [ "$DSVPN" = "yes" ]; then DSVPN_PASS=$(cat /etc/dsvpn/dsvpn0.key | tr -d "\n") fi if [ "$KERNEL" != "5.4" ]; then - mptcpize enable dsvpn-server@dsvpn0 2>&1 >/dev/null + mptcpize enable dsvpn-server@dsvpn0 >/dev/null 2>&1 fi fi @@ -1770,7 +1792,7 @@ if [ "$TLS" = "yes" ]; then #[ "$(shorewall status | grep stopped)" = "" ] && shorewall open all all tcp 443 curl https://get.acme.sh | sh systemctl -q restart shorewall - ~/.acme.sh/acme.sh --force --alpn --issue -d $VPS_DOMAIN --pre-hook 'shorewall open all all tcp 443 2>&1 >/dev/null' --post-hook 'shorewall close all all tcp 443 2>&1 >/dev/null' 2>&1 >/dev/null + ~/.acme.sh/acme.sh --force --alpn --issue -d $VPS_DOMAIN --pre-hook 'shorewall open all all tcp 443 >/dev/null 2>&1' --post-hook 'shorewall close all all tcp 443 >/dev/null 2>&1' >/dev/null 2>&1 set -e if [ -f /root/.acme.sh/$VPS_DOMAIN/$VPS_DOMAIN.cer ]; then rm -f /etc/openmptcprouter-vps-admin/cert.pem @@ -1818,7 +1840,7 @@ else fi if [ "$SOURCES" != "yes" ]; then - apt-get -y install omr-server=${OMR_VERSION} 2>&1 >/dev/null || true + apt-get -y install omr-server=${OMR_VERSION} >/dev/null 2>&1 || true rm -f /etc/openmtpcprouter-vps-admin/update-bin fi diff --git a/omr-service b/omr-service index d35b011..be312e1 100755 --- a/omr-service +++ b/omr-service @@ -7,13 +7,13 @@ _multipath() { for intf in `ls -1 /sys/class/net`; do if [ "$intf" != "bonding_masters" ]; then if ([ "$(ip a show dev lo | grep -v inet6 | grep global)" != "" ] && [ "$intf" = "lo" ]) || ([ "$intf" = "$NET_IFACE" ] && [ "$(ip a show dev lo | grep -v inet6 | grep global)" = "" ]); then - [ -f /proc/sys/net/mptcp/mptcp_enabled ] && [ "$(multipath $intf | tr -d '\n')" != "$intf is in default mode" ] && multipath $intf on 2>&1 >/dev/null + [ -f /proc/sys/net/mptcp/mptcp_enabled ] && [ "$(multipath $intf | tr -d '\n')" != "$intf is in default mode" ] && multipath $intf on >/dev/null 2>&1 [ -f /proc/sys/net/mptcp/enabled ] && [ "$(multipath $intf | tr -d '\n')" != "$intf is in signal mode" ] && { - multipath $intf signal 2>&1 >/dev/null - ip mptcp limits set subflows 8 add_addr_accepted 8 2>&1 >/dev/null + multipath $intf signal >/dev/null 2>&1 + ip mptcp limits set subflows 8 add_addr_accepted 8 >/dev/null 2>&1 } else - [ "$(multipath $intf | tr -d '\n')" != "$intf is deactivated" ] && multipath $intf off 2>&1 >/dev/null + [ "$(multipath $intf | tr -d '\n')" != "$intf is deactivated" ] && multipath $intf off >/dev/null 2>&1 fi fi done @@ -29,7 +29,7 @@ _glorytun_udp() { for intf in /etc/glorytun-udp/tun*; do [ "$(echo $intf | grep key)" = "" ] && /etc/glorytun-udp/post.sh ${intf} done - #ip link set mtu 9000 dev gt-udp-tun0 2>&1 >/dev/null + #ip link set mtu 9000 dev gt-udp-tun0 >/dev/null 2>&1 fi } @@ -48,12 +48,12 @@ _glorytun_tcp() { sleep 10 fi fi - #ip link set mtu 9000 dev gt-tun0 2>&1 >/dev/null + #ip link set mtu 9000 dev gt-tun0 >/dev/null 2>&1 fi } _dsvpn() { - [ -n "$(ip -6 r show 64:ff9b::/96 dev dsvpn0)" ] && ip -6 r del 64:ff9b::/96 dev dsvpn0 2>&1 >/dev/null + [ -n "$(ip -6 r show 64:ff9b::/96 dev dsvpn0)" ] && ip -6 r del 64:ff9b::/96 dev dsvpn0 >/dev/null 2>&1 if [ -f /etc/openmptcprouter-vps-admin/current-vpn ] && [ "$(cat /etc/openmptcprouter-vps-admin/current-vpn)" = "dsvpn" ]; then localip="$(cat /etc/dsvpn/dsvpn0 | grep LOCALTUNIP | cut -d '=' -f2)" [ -z "$localip" ] && localip="10.255.251.1" @@ -62,7 +62,7 @@ _dsvpn() { logger -t "OMR-Service" "No answer from VPN client end, restart DSVPN" systemctl restart dsvpn-server@dsvpn0 fi - #ip link set mtu 9000 dev dsvpn0 2>&1 >/dev/null + #ip link set mtu 9000 dev dsvpn0 >/dev/null 2>&1 fi } @@ -96,8 +96,8 @@ _v2ray() { _wireguard() { if [ -n "$(systemctl -a | grep 'wg')" ]; then - [ -z "$(ip a show dev wg0 | grep '10.255.247.1')" ] && ip a add 10.255.247.1/24 dev wg0 2>&1 >/dev/null - [ -z "$(ip a show dev client-wg0 | grep '10.255.246.1')" ] && ip a add 10.255.246.1/24 dev client-wg0 2>&1 >/dev/null + [ -z "$(ip a show dev wg0 | grep '10.255.247.1')" ] && ip a add 10.255.247.1/24 dev wg0 >/dev/null 2>&1 + [ -z "$(ip a show dev client-wg0 | grep '10.255.246.1')" ] && ip a add 10.255.246.1/24 dev client-wg0 >/dev/null 2>&1 fi } @@ -119,7 +119,7 @@ _lan_route() { while IFS=$"\n" read -r d; do if [ "$d" != "" ]; then network=$(ipcalc -n $d | grep Network | awk '{print $2}') - [ -n "$network" ] && [ -z "$(ip r show $network via $vpnremoteip)" ] && ip r replace $network via $vpnremoteip 2>&1 >/dev/null + [ -n "$network" ] && [ -z "$(ip r show $network via $vpnremoteip)" ] && ip r replace $network via $vpnremoteip >/dev/null 2>&1 fi done fi @@ -135,11 +135,11 @@ _gre_tunnels() { . "$(readlink -f "$intf")" iface="$(basename $intf)" if [ "$(ip tunnel show $iface 2>/dev/null | awk '{print $4}')" != "$OMR_ADDR" ]; then - [ -n "$(ip tunnel show $iface 2>/dev/null)" ] && ip tunnel del $iface 2>&1 >/dev/null - ip tunnel add $iface mode gre local $INTFADDR remote $OMR_ADDR 2>&1 >/dev/null - ip link set $iface up 2>&1 >/dev/null - ip addr add $LOCALIP dev $iface 2>&1 >/dev/null - ip route add $NETWORK dev $iface onlink 2>&1 >/dev/null + [ -n "$(ip tunnel show $iface 2>/dev/null)" ] && ip tunnel del $iface >/dev/null 2>&1 + ip tunnel add $iface mode gre local $INTFADDR remote $OMR_ADDR >/dev/null 2>&1 + ip link set $iface up >/dev/null 2>&1 + ip addr add $LOCALIP dev $iface >/dev/null 2>&1 + ip route add $NETWORK dev $iface onlink >/dev/null 2>&1 fi fi done @@ -148,33 +148,33 @@ _gre_tunnels() { _openvpn_bonding() { if [ "$(ip link show ovpnbonding1)" != "" ] && ([ "$(ip link show ovpnbonding1 | grep SLAVE)" = "" ] || [ "$(ip link show omr-bonding | grep DOWN)" != "" ] || [ "$(ip link show | grep ovpnbonding | grep -c SLAVE | tr -d '\n')" != "8" ]); then - echo 0 > /sys/class/net/omr-bonding/bonding/mode 2>&1 >/dev/null - ip link set ovpnbonding1 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding1 up 2>&1 >/dev/null - ip link set ovpnbonding2 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding2 up 2>&1 >/dev/null - ip link set ovpnbonding3 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding3 up 2>&1 >/dev/null - ip link set ovpnbonding4 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding4 up 2>&1 >/dev/null - ip link set ovpnbonding5 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding5 up 2>&1 >/dev/null - ip link set ovpnbonding6 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding6 up 2>&1 >/dev/null - ip link set ovpnbonding7 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding7 up 2>&1 >/dev/null - ip link set ovpnbonding8 master omr-bonding 2>&1 >/dev/null - ip link set ovpnbonding8 up 2>&1 >/dev/null - ip link set omr-bonding up mtu 1440 2>&1 >/dev/null - ip a add 10.255.248.1 dev omr-bonding 2>&1 >/dev/null - ip r add 10.255.248.0/24 dev omr-bonding 2>&1 >/dev/null - ip r add 10.255.248.2 dev omr-bonding src 10.255.248.1 2>&1 >/dev/null + echo 0 > /sys/class/net/omr-bonding/bonding/mode >/dev/null 2>&1 + ip link set ovpnbonding1 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding1 up >/dev/null 2>&1 + ip link set ovpnbonding2 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding2 up >/dev/null 2>&1 + ip link set ovpnbonding3 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding3 up >/dev/null 2>&1 + ip link set ovpnbonding4 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding4 up >/dev/null 2>&1 + ip link set ovpnbonding5 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding5 up >/dev/null 2>&1 + ip link set ovpnbonding6 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding6 up >/dev/null 2>&1 + ip link set ovpnbonding7 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding7 up >/dev/null 2>&1 + ip link set ovpnbonding8 master omr-bonding >/dev/null 2>&1 + ip link set ovpnbonding8 up >/dev/null 2>&1 + ip link set omr-bonding up mtu 1440 >/dev/null 2>&1 + ip a add 10.255.248.1 dev omr-bonding >/dev/null 2>&1 + ip r add 10.255.248.0/24 dev omr-bonding >/dev/null 2>&1 + ip r add 10.255.248.2 dev omr-bonding src 10.255.248.1 >/dev/null 2>&1 fi } -sysctl -p /etc/sysctl.d/90-shadowsocks.conf 2>&1 >/dev/null -modprobe bonding 2>&1 >/dev/null -ip link add omr-bonding type bond 2>&1 >/dev/null +sysctl -p /etc/sysctl.d/90-shadowsocks.conf >/dev/null 2>&1 +modprobe bonding >/dev/null 2>&1 +ip link add omr-bonding type bond >/dev/null 2>&1 #[ -n "$(uname -r | grep '6.1')" ] && { # stap -g /usr/share/systemtap-mptcp/mptcp-app.stap 2>&1 & #} diff --git a/openvpn-tun0.6.1.conf b/openvpn-tun0.6.1.conf index 0aff68b..6198b64 100644 --- a/openvpn-tun0.6.1.conf +++ b/openvpn-tun0.6.1.conf @@ -8,7 +8,7 @@ proto tcp-server port 65301 persist-tun persist-key -duplicate-cn +#duplicate-cn verb 3 server 10.255.252.0 255.255.255.0 ca /etc/openvpn/ca/pki/ca.crt diff --git a/openvpn-tun1.6.1.conf b/openvpn-tun1.6.1.conf index a89b527..ada8114 100644 --- a/openvpn-tun1.6.1.conf +++ b/openvpn-tun1.6.1.conf @@ -25,5 +25,5 @@ tls-version-min 1.2 push "route 10.255.250.1 255.255.255.255" client-config-dir ccd #ifconfig-pool-persist ccd/ipp_udp.txt -fast-io +#fast-io passtos