906 lines
29 KiB
Bash
906 lines
29 KiB
Bash
#!/bin/sh
|
||
# 安装脚本 - POSIX sh 兼容
|
||
# Alpine 下自动安装 bash 和 openrc
|
||
if [ -f /etc/alpine-release ]; then
|
||
if ! command -v bash > /dev/null 2>&1; then
|
||
echo "Alpine 系统检测到，正在安装 bash..."
|
||
apk add --no-cache bash
|
||
fi
|
||
if ! command -v rc-service > /dev/null 2>&1; then
|
||
echo "正在安装 OpenRC..."
|
||
apk add --no-cache openrc
|
||
mkdir -p /run/openrc
|
||
touch /run/openrc/softlevel
|
||
fi
|
||
fi
|
||
|
||
cat > /root/port-forward.sh << 'EOF'
|
||
#!/bin/bash
|
||
|
||
# 端口转发管理脚本
|
||
# 使用 socat 实现端口转发（含自动重启监控）
|
||
# 支持 systemd (Debian/Ubuntu/CentOS) 和 OpenRC (Alpine)
|
||
|
||
SERVICE_PREFIX="port-forward"
|
||
WATCHDOG_SERVICE="port-forward-watchdog"
|
||
WATCHDOG_SCRIPT="/root/port-forward-watchdog.sh"
|
||
|
||
RED='\033[0;31m'
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
BLUE='\033[0;34m'
|
||
NC='\033[0m'
|
||
|
||
# ============================================
|
||
# 系统检测
|
||
# ============================================
|
||
|
||
detect_system() {
|
||
if [ -f /etc/alpine-release ]; then
|
||
OS="alpine"
|
||
elif [ -f /etc/debian_version ]; then
|
||
OS="debian"
|
||
else
|
||
OS="unknown"
|
||
fi
|
||
|
||
if command -v systemctl > /dev/null 2>&1 && systemctl --version > /dev/null 2>&1; then
|
||
INIT_SYS="systemd"
|
||
elif command -v rc-service > /dev/null 2>&1; then
|
||
INIT_SYS="openrc"
|
||
else
|
||
# Alpine 下尝试自动安装 OpenRC
|
||
if [ "$OS" = "alpine" ]; then
|
||
echo -e "${YELLOW}OpenRC 未安装，正在安装...${NC}"
|
||
apk add --no-cache openrc
|
||
mkdir -p /run/openrc
|
||
touch /run/openrc/softlevel
|
||
if command -v rc-service > /dev/null 2>&1; then
|
||
INIT_SYS="openrc"
|
||
fi
|
||
fi
|
||
if [ -z "$INIT_SYS" ]; then
|
||
echo -e "${RED}错误: 不支持的初始化系统（需要 systemd 或 OpenRC）${NC}"
|
||
exit 1
|
||
fi
|
||
fi
|
||
|
||
echo -e "${BLUE}系统: ${OS} | 初始化系统: ${INIT_SYS}${NC}"
|
||
}
|
||
|
||
# ============================================
|
||
# 包管理
|
||
# ============================================
|
||
|
||
check_deps() {
|
||
# Alpine 下确保 bash 已安装
|
||
if [ "$OS" = "alpine" ]; then
|
||
if ! command -v bash > /dev/null 2>&1; then
|
||
echo -e "${YELLOW}bash 未安装，正在安装...${NC}"
|
||
apk add --no-cache bash
|
||
fi
|
||
fi
|
||
|
||
if ! command -v socat > /dev/null 2>&1; then
|
||
echo -e "${YELLOW}socat 未安装，正在安装...${NC}"
|
||
if [ "$OS" = "alpine" ]; then
|
||
apk add --no-cache socat
|
||
else
|
||
apt update && apt install socat -y
|
||
fi
|
||
if [ $? -eq 0 ]; then
|
||
echo -e "${GREEN}socat 安装成功！${NC}"
|
||
else
|
||
echo -e "${RED}socat 安装失败，请手动安装${NC}"
|
||
exit 1
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# ============================================
|
||
# 服务管理抽象层
|
||
# ============================================
|
||
|
||
svc_create_forward() {
|
||
local svc_name=$1
|
||
local local_port=$2
|
||
local target_ip=$3
|
||
local target_port=$4
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
cat > /etc/systemd/system/${svc_name}.service << SERVICEEOF
|
||
[Unit]
|
||
Description=Port Forward ${local_port} to ${target_ip}:${target_port}
|
||
After=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
ExecStart=/usr/bin/socat TCP4-LISTEN:${local_port},reuseaddr,fork TCP4:${target_ip}:${target_port}
|
||
Restart=always
|
||
RestartSec=5
|
||
StartLimitInterval=0
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
SERVICEEOF
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
cat > /etc/init.d/${svc_name} << SERVICEEOF
|
||
#!/sbin/openrc-run
|
||
|
||
name="${svc_name}"
|
||
description="Port Forward ${local_port} to ${target_ip}:${target_port}"
|
||
command="/usr/bin/socat"
|
||
command_args="TCP4-LISTEN:${local_port},reuseaddr,fork TCP4:${target_ip}:${target_port}"
|
||
command_background=true
|
||
pidfile="/run/${svc_name}.pid"
|
||
|
||
depend() {
|
||
need net
|
||
}
|
||
SERVICEEOF
|
||
chmod +x /etc/init.d/${svc_name}
|
||
fi
|
||
}
|
||
|
||
svc_enable() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl enable ${svc_name} > /dev/null 2>&1
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rc-update add ${svc_name} default > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
svc_disable() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl disable ${svc_name} > /dev/null 2>&1
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rc-update del ${svc_name} default > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
svc_start() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl start ${svc_name}
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rc-service ${svc_name} start > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
svc_stop() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl stop ${svc_name} > /dev/null 2>&1
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rc-service ${svc_name} stop > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
svc_restart() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl restart ${svc_name}
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rc-service ${svc_name} restart > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
svc_is_active() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl is-active ${svc_name} 2>/dev/null
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
if rc-service ${svc_name} status 2>/dev/null | grep -q "started"; then
|
||
echo "active"
|
||
else
|
||
echo "inactive"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
svc_exists() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
[ -f "/etc/systemd/system/${svc_name}.service" ]
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
[ -f "/etc/init.d/${svc_name}" ]
|
||
fi
|
||
}
|
||
|
||
svc_delete() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
rm -f /etc/systemd/system/${svc_name}.service
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
rm -f /etc/init.d/${svc_name}
|
||
fi
|
||
}
|
||
|
||
svc_daemon_reload() {
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl daemon-reload
|
||
fi
|
||
}
|
||
|
||
svc_list_forward_names() {
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl list-units --all --type=service --no-pager | grep "${SERVICE_PREFIX}" | grep -v watchdog | grep -v daily | awk '{print $1}' | sed 's/.service$//'
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
ls /etc/init.d/${SERVICE_PREFIX}-* 2>/dev/null | grep -v watchdog | xargs -I{} basename {} 2>/dev/null
|
||
fi
|
||
}
|
||
|
||
svc_get_target() {
|
||
local svc_name=$1
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
grep ExecStart /etc/systemd/system/${svc_name}.service 2>/dev/null | sed -n 's/.*TCP4:\([^ ]*\).*/\1/p'
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
grep command_args /etc/init.d/${svc_name} 2>/dev/null | sed -n 's/.*TCP4:\([^ "]*\).*/\1/p'
|
||
fi
|
||
}
|
||
|
||
# ============================================
|
||
# 端口转发管理
|
||
# ============================================
|
||
|
||
add_single_forward() {
|
||
echo -e "${GREEN}=== 添加单个端口转发 ===${NC}"
|
||
read -p "请输入本机监听端口: " local_port
|
||
read -p "请输入目标IP地址: " target_ip
|
||
read -p "请输入目标端口: " target_port
|
||
|
||
if [[ -z "$local_port" ]] || [[ -z "$target_ip" ]] || [[ -z "$target_port" ]]; then
|
||
echo -e "${RED}错误: 输入不能为空${NC}"; return 1
|
||
fi
|
||
|
||
local svc_name="${SERVICE_PREFIX}-${local_port}"
|
||
svc_create_forward "$svc_name" "$local_port" "$target_ip" "$target_port"
|
||
svc_daemon_reload
|
||
svc_enable "$svc_name"
|
||
svc_start "$svc_name"
|
||
|
||
if [ "$(svc_is_active $svc_name)" = "active" ]; then
|
||
echo -e "${GREEN}✓ 端口转发添加成功！${NC}"
|
||
echo -e "本机端口: ${local_port} -> 目标: ${target_ip}:${target_port}"
|
||
else
|
||
echo -e "${RED}✗ 端口转发添加失败${NC}"
|
||
fi
|
||
}
|
||
|
||
add_batch_forward() {
|
||
echo -e "${GREEN}=== 批量添加端口转发 ===${NC}"
|
||
read -p "请输入本机起始端口: " start_port
|
||
read -p "请输入本机结束端口: " end_port
|
||
read -p "请输入目标IP地址: " target_ip
|
||
read -p "请输入目标端口: " target_port
|
||
|
||
if [[ -z "$start_port" ]] || [[ -z "$end_port" ]] || [[ -z "$target_ip" ]] || [[ -z "$target_port" ]]; then
|
||
echo -e "${RED}错误: 输入不能为空${NC}"; return 1
|
||
fi
|
||
|
||
echo -e "${YELLOW}即将创建 $((end_port - start_port + 1)) 个端口转发...${NC}"
|
||
read -p "确认继续? (y/n): " confirm
|
||
if [[ "$confirm" != "y" ]]; then echo "操作已取消"; return; fi
|
||
|
||
for port in $(seq $start_port $end_port); do
|
||
local svc_name="${SERVICE_PREFIX}-${port}"
|
||
svc_create_forward "$svc_name" "$port" "$target_ip" "$target_port"
|
||
svc_enable "$svc_name"
|
||
svc_start "$svc_name"
|
||
echo -e "${GREEN}✓${NC} 端口 ${port} 转发已创建"
|
||
done
|
||
|
||
svc_daemon_reload
|
||
echo -e "${GREEN}批量端口转发添加完成！${NC}"
|
||
}
|
||
|
||
list_forwards() {
|
||
echo -e "${GREEN}=== 当前端口转发列表 ===${NC}"
|
||
echo ""
|
||
|
||
local services
|
||
services=$(svc_list_forward_names)
|
||
|
||
if [[ -z "$services" ]]; then
|
||
echo -e "${YELLOW}暂无端口转发${NC}"
|
||
else
|
||
printf "%-15s %-12s %-30s\n" "本机端口" "状态" "转发目标"
|
||
echo "--------------------------------------------------------"
|
||
|
||
for svc_name in $services; do
|
||
local port=$(echo $svc_name | sed "s/${SERVICE_PREFIX}-//g")
|
||
local status=$(svc_is_active $svc_name)
|
||
|
||
if [[ "$status" == "active" ]]; then
|
||
local status_color="${GREEN}运行中${NC}"
|
||
else
|
||
local status_color="${RED}已停止${NC}"
|
||
fi
|
||
|
||
local target=$(svc_get_target $svc_name)
|
||
printf "%-15s %-20b %-30s\n" "$port" "$status_color" "$target"
|
||
done
|
||
fi
|
||
|
||
echo ""
|
||
local watchdog_status=$(svc_is_active ${WATCHDOG_SERVICE})
|
||
if [[ "$watchdog_status" == "active" ]]; then
|
||
echo -e "🛡️ Watchdog: ${GREEN}运行中（自动重启已开启）${NC}"
|
||
else
|
||
echo -e "🛡️ Watchdog: ${RED}未运行${NC}（菜单 8 可启动）"
|
||
fi
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
local timer_status=$(systemctl is-active port-forward-daily.timer 2>/dev/null)
|
||
if [[ "$timer_status" == "active" ]]; then
|
||
local next=$(systemctl list-timers port-forward-daily.timer --no-pager 2>/dev/null | awk 'NR==2{print $1, $2}')
|
||
echo -e "⏰ 定时重启: ${GREEN}已开启${NC}，下次: ${YELLOW}${next}${NC}"
|
||
else
|
||
echo -e "⏰ 定时重启: ${RED}未开启${NC}（菜单 9 可设置）"
|
||
fi
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
if crontab -l 2>/dev/null | grep -q "port-forward-daily-restart"; then
|
||
local cron_time=$(crontab -l 2>/dev/null | grep "port-forward-daily-restart" | awk '{printf "%02d:%02d", $2, $1}')
|
||
echo -e "⏰ 定时重启: ${GREEN}已开启${NC}，时间: ${YELLOW}每天 ${cron_time}${NC}"
|
||
else
|
||
echo -e "⏰ 定时重启: ${RED}未开启${NC}（菜单 9 可设置）"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
restart_single_forward() {
|
||
echo -e "${GREEN}=== 重启单个端口转发 ===${NC}"
|
||
read -p "请输入要重启的本机端口: " port
|
||
|
||
local svc_name="${SERVICE_PREFIX}-${port}"
|
||
if ! svc_exists "$svc_name"; then
|
||
echo -e "${RED}错误: 端口 ${port} 的转发不存在${NC}"; return 1
|
||
fi
|
||
|
||
svc_restart "$svc_name"
|
||
sleep 1
|
||
if [ "$(svc_is_active $svc_name)" = "active" ]; then
|
||
echo -e "${GREEN}✓ 端口 ${port} 重启成功！${NC}"
|
||
else
|
||
echo -e "${RED}✗ 重启失败${NC}"
|
||
fi
|
||
}
|
||
|
||
restart_all_forwards() {
|
||
echo -e "${GREEN}=== 重启所有端口转发 ===${NC}"
|
||
read -p "确认重启所有转发? (y/n): " confirm
|
||
if [[ "$confirm" != "y" ]]; then echo "操作已取消"; return; fi
|
||
|
||
local services
|
||
services=$(svc_list_forward_names)
|
||
|
||
if [[ -z "$services" ]]; then
|
||
echo -e "${YELLOW}暂无端口转发${NC}"; return
|
||
fi
|
||
|
||
local failed=0 success=0
|
||
for svc_name in $services; do
|
||
local port=$(echo $svc_name | sed "s/${SERVICE_PREFIX}-//g")
|
||
svc_restart "$svc_name"
|
||
sleep 0.5
|
||
if [ "$(svc_is_active $svc_name)" = "active" ]; then
|
||
echo -e "${GREEN}✓${NC} 端口 ${port} 重启成功"; ((success++))
|
||
else
|
||
echo -e "${RED}✗${NC} 端口 ${port} 重启失败"; ((failed++))
|
||
fi
|
||
done
|
||
|
||
echo ""
|
||
echo -e "重启完成：${GREEN}成功 ${success} 个${NC}，${RED}失败 ${failed} 个${NC}"
|
||
}
|
||
|
||
# ============================================
|
||
# Watchdog 自动重启监控
|
||
# ============================================
|
||
|
||
install_watchdog() {
|
||
echo -e "${BLUE}=== 安装 Watchdog 自动监控 ===${NC}"
|
||
read -p "请输入检查间隔（秒，默认30）: " interval
|
||
interval=${interval:-30}
|
||
|
||
cat > ${WATCHDOG_SCRIPT} << WATCHEOF
|
||
#!/bin/bash
|
||
# Port Forward Watchdog - 支持 systemd 和 OpenRC
|
||
LOG_FILE="/var/log/port-forward-watchdog.log"
|
||
SERVICE_PREFIX="port-forward"
|
||
|
||
if command -v systemctl &> /dev/null && systemctl --version &> /dev/null 2>&1; then
|
||
W_INIT="systemd"
|
||
elif command -v rc-service &> /dev/null; then
|
||
W_INIT="openrc"
|
||
else
|
||
echo "Unsupported init system" >> \$LOG_FILE
|
||
exit 1
|
||
fi
|
||
|
||
log() {
|
||
echo "\$(date '+%Y-%m-%d %H:%M:%S') \$1" | tee -a \$LOG_FILE
|
||
}
|
||
|
||
w_list_services() {
|
||
if [ "\$W_INIT" = "systemd" ]; then
|
||
systemctl list-units --all --type=service --no-pager | grep \${SERVICE_PREFIX} | grep -v watchdog | grep -v daily | awk '{print \$1}' | sed 's/.service\$//'
|
||
elif [ "\$W_INIT" = "openrc" ]; then
|
||
ls /etc/init.d/\${SERVICE_PREFIX}-* 2>/dev/null | grep -v watchdog | xargs -I{} basename {} 2>/dev/null
|
||
fi
|
||
}
|
||
|
||
w_is_active() {
|
||
if [ "\$W_INIT" = "systemd" ]; then
|
||
systemctl is-active \$1 2>/dev/null
|
||
elif [ "\$W_INIT" = "openrc" ]; then
|
||
if rc-service \$1 status 2>/dev/null | grep -q "started"; then
|
||
echo "active"
|
||
else
|
||
echo "inactive"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
w_restart() {
|
||
if [ "\$W_INIT" = "systemd" ]; then
|
||
systemctl restart \$1
|
||
elif [ "\$W_INIT" = "openrc" ]; then
|
||
rc-service \$1 restart > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
log "=== Watchdog 启动，检查间隔: ${interval}秒，初始化系统: \$W_INIT ==="
|
||
|
||
while true; do
|
||
services=\$(w_list_services)
|
||
|
||
for service in \$services; do
|
||
status=\$(w_is_active \$service)
|
||
if [[ "\$status" != "active" ]]; then
|
||
log "⚠ 检测到 \$service 异常（状态: \$status），正在重启..."
|
||
w_restart \$service
|
||
sleep 2
|
||
new_status=\$(w_is_active \$service)
|
||
if [[ "\$new_status" == "active" ]]; then
|
||
log "✓ \$service 重启成功"
|
||
else
|
||
log "✗ \$service 重启失败，状态: \$new_status"
|
||
fi
|
||
fi
|
||
done
|
||
|
||
sleep ${interval}
|
||
done
|
||
WATCHEOF
|
||
|
||
chmod +x ${WATCHDOG_SCRIPT}
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
cat > /etc/systemd/system/${WATCHDOG_SERVICE}.service << SERVICEEOF
|
||
[Unit]
|
||
Description=Port Forward Watchdog - Auto Restart Monitor
|
||
After=network.target
|
||
|
||
[Service]
|
||
Type=simple
|
||
ExecStart=/bin/bash ${WATCHDOG_SCRIPT}
|
||
Restart=always
|
||
RestartSec=10
|
||
StartLimitInterval=0
|
||
|
||
[Install]
|
||
WantedBy=multi-user.target
|
||
SERVICEEOF
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
cat > /etc/init.d/${WATCHDOG_SERVICE} << SERVICEEOF
|
||
#!/sbin/openrc-run
|
||
|
||
name="${WATCHDOG_SERVICE}"
|
||
description="Port Forward Watchdog - Auto Restart Monitor"
|
||
command="/bin/bash"
|
||
command_args="${WATCHDOG_SCRIPT}"
|
||
command_background=true
|
||
pidfile="/run/${WATCHDOG_SERVICE}.pid"
|
||
|
||
depend() {
|
||
need net
|
||
}
|
||
SERVICEEOF
|
||
chmod +x /etc/init.d/${WATCHDOG_SERVICE}
|
||
fi
|
||
|
||
svc_daemon_reload
|
||
svc_enable "${WATCHDOG_SERVICE}"
|
||
svc_start "${WATCHDOG_SERVICE}"
|
||
|
||
if [ "$(svc_is_active ${WATCHDOG_SERVICE})" = "active" ]; then
|
||
echo -e "${GREEN}✓ Watchdog 安装成功！${NC}"
|
||
echo -e " 检查间隔: ${interval} 秒"
|
||
echo -e " 日志位置: /var/log/port-forward-watchdog.log"
|
||
echo -e " 实时日志: tail -f /var/log/port-forward-watchdog.log"
|
||
else
|
||
echo -e "${RED}✗ Watchdog 启动失败${NC}"
|
||
fi
|
||
}
|
||
|
||
uninstall_watchdog() {
|
||
read -p "确认卸载 Watchdog? (y/n): " confirm
|
||
if [[ "$confirm" != "y" ]]; then echo "操作已取消"; return; fi
|
||
|
||
svc_stop "${WATCHDOG_SERVICE}"
|
||
svc_disable "${WATCHDOG_SERVICE}"
|
||
svc_delete "${WATCHDOG_SERVICE}"
|
||
rm -f ${WATCHDOG_SCRIPT}
|
||
svc_daemon_reload
|
||
echo -e "${GREEN}✓ Watchdog 已卸载${NC}"
|
||
}
|
||
|
||
# ============================================
|
||
# 定时每日重启
|
||
# ============================================
|
||
|
||
install_daily_restart() {
|
||
echo -e "${BLUE}=== 设置每日定时重启 ===${NC}"
|
||
read -p "请输入每天重启时间（小时，0-23，默认4点）: " hour
|
||
hour=${hour:-4}
|
||
read -p "请输入分钟（0-59，默认0分）: " minute
|
||
minute=${minute:-0}
|
||
|
||
if ! [[ "$hour" =~ ^[0-9]+$ ]] || [[ $hour -gt 23 ]]; then
|
||
echo -e "${RED}错误: 小时必须为 0-23${NC}"; return 1
|
||
fi
|
||
if ! [[ "$minute" =~ ^[0-9]+$ ]] || [[ $minute -gt 59 ]]; then
|
||
echo -e "${RED}错误: 分钟必须为 0-59${NC}"; return 1
|
||
fi
|
||
|
||
# 创建重启脚本（内嵌初始化系统检测）
|
||
cat > /root/port-forward-daily-restart.sh << DAILYEOF
|
||
#!/bin/bash
|
||
# 每日定时重启所有端口转发服务 - 支持 systemd 和 OpenRC
|
||
LOG_FILE="/var/log/port-forward-daily.log"
|
||
|
||
if command -v systemctl &> /dev/null && systemctl --version &> /dev/null 2>&1; then
|
||
D_INIT="systemd"
|
||
elif command -v rc-service &> /dev/null; then
|
||
D_INIT="openrc"
|
||
fi
|
||
|
||
log() {
|
||
echo "\$(date '+%Y-%m-%d %H:%M:%S') \$1" | tee -a \$LOG_FILE
|
||
}
|
||
|
||
d_list_services() {
|
||
if [ "\$D_INIT" = "systemd" ]; then
|
||
systemctl list-units --all --type=service --no-pager | grep port-forward | grep -v watchdog | grep -v daily | awk '{print \$1}' | sed 's/.service\$//'
|
||
elif [ "\$D_INIT" = "openrc" ]; then
|
||
ls /etc/init.d/port-forward-* 2>/dev/null | grep -v watchdog | xargs -I{} basename {} 2>/dev/null
|
||
fi
|
||
}
|
||
|
||
d_is_active() {
|
||
if [ "\$D_INIT" = "systemd" ]; then
|
||
systemctl is-active \$1 2>/dev/null
|
||
elif [ "\$D_INIT" = "openrc" ]; then
|
||
if rc-service \$1 status 2>/dev/null | grep -q "started"; then
|
||
echo "active"
|
||
else
|
||
echo "inactive"
|
||
fi
|
||
fi
|
||
}
|
||
|
||
d_restart() {
|
||
if [ "\$D_INIT" = "systemd" ]; then
|
||
systemctl restart \$1
|
||
elif [ "\$D_INIT" = "openrc" ]; then
|
||
rc-service \$1 restart > /dev/null 2>&1
|
||
fi
|
||
}
|
||
|
||
log "=== 开始每日定时重启（\$D_INIT）==="
|
||
services=\$(d_list_services)
|
||
|
||
success=0; failed=0
|
||
for service in \$services; do
|
||
d_restart \$service
|
||
sleep 1
|
||
if [[ "\$(d_is_active \$service)" == "active" ]]; then
|
||
log "✓ \$service 重启成功"
|
||
((success++))
|
||
else
|
||
log "✗ \$service 重启失败"
|
||
((failed++))
|
||
fi
|
||
done
|
||
|
||
log "=== 重启完成：成功 \${success} 个，失败 \${failed} 个 ==="
|
||
DAILYEOF
|
||
|
||
chmod +x /root/port-forward-daily-restart.sh
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
cat > /etc/systemd/system/port-forward-daily.service << SERVICEEOF
|
||
[Unit]
|
||
Description=Port Forward Daily Restart
|
||
After=network.target
|
||
|
||
[Service]
|
||
Type=oneshot
|
||
ExecStart=/bin/bash /root/port-forward-daily-restart.sh
|
||
SERVICEEOF
|
||
|
||
cat > /etc/systemd/system/port-forward-daily.timer << TIMEREOF
|
||
[Unit]
|
||
Description=Port Forward Daily Restart Timer
|
||
Requires=port-forward-daily.service
|
||
|
||
[Timer]
|
||
OnCalendar=*-*-* ${hour}:${minute}:00
|
||
Persistent=true
|
||
|
||
[Install]
|
||
WantedBy=timers.target
|
||
TIMEREOF
|
||
|
||
systemctl daemon-reload
|
||
systemctl enable port-forward-daily.timer
|
||
systemctl start port-forward-daily.timer
|
||
|
||
if systemctl is-active port-forward-daily.timer > /dev/null 2>&1; then
|
||
echo -e "${GREEN}✓ 每日定时重启设置成功！${NC}"
|
||
printf " 重启时间: 每天 %02d:%02d\n" $hour $minute
|
||
echo -e " 日志位置: /var/log/port-forward-daily.log"
|
||
echo ""
|
||
echo -e " 下次执行时间:"
|
||
systemctl list-timers port-forward-daily.timer --no-pager | tail -2
|
||
else
|
||
echo -e "${RED}✗ 定时器启动失败${NC}"
|
||
fi
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
# Alpine 下使用 cron 实现定时任务
|
||
if ! command -v crond &> /dev/null && ! pgrep crond > /dev/null 2>&1; then
|
||
echo -e "${YELLOW}正在安装 cron 服务...${NC}"
|
||
apk add --no-cache dcron
|
||
rc-service dcron start > /dev/null 2>&1
|
||
rc-update add dcron default > /dev/null 2>&1
|
||
fi
|
||
|
||
# 移除旧条目并添加新条目
|
||
crontab -l 2>/dev/null | grep -v "port-forward-daily-restart" | crontab - 2>/dev/null
|
||
(crontab -l 2>/dev/null; echo "${minute} ${hour} * * * /bin/bash /root/port-forward-daily-restart.sh") | crontab -
|
||
|
||
echo -e "${GREEN}✓ 每日定时重启设置成功！${NC}"
|
||
printf " 重启时间: 每天 %02d:%02d\n" $hour $minute
|
||
echo -e " 日志位置: /var/log/port-forward-daily.log"
|
||
fi
|
||
}
|
||
|
||
uninstall_daily_restart() {
|
||
read -p "确认取消每日定时重启? (y/n): " confirm
|
||
if [[ "$confirm" != "y" ]]; then echo "操作已取消"; return; fi
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
systemctl stop port-forward-daily.timer 2>/dev/null
|
||
systemctl disable port-forward-daily.timer 2>/dev/null
|
||
rm -f /etc/systemd/system/port-forward-daily.timer
|
||
rm -f /etc/systemd/system/port-forward-daily.service
|
||
systemctl daemon-reload
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
crontab -l 2>/dev/null | grep -v "port-forward-daily-restart" | crontab - 2>/dev/null
|
||
fi
|
||
|
||
rm -f /root/port-forward-daily-restart.sh
|
||
echo -e "${GREEN}✓ 每日定时重启已取消${NC}"
|
||
}
|
||
|
||
view_daily_log() {
|
||
echo -e "${BLUE}=== 每日重启日志（最近30行）===${NC}"
|
||
if [[ -f "/var/log/port-forward-daily.log" ]]; then
|
||
tail -30 /var/log/port-forward-daily.log
|
||
echo ""
|
||
echo -e "${YELLOW}实时监控: tail -f /var/log/port-forward-daily.log${NC}"
|
||
else
|
||
echo -e "${YELLOW}日志不存在，定时重启可能未运行过${NC}"
|
||
fi
|
||
}
|
||
|
||
daily_restart_menu() {
|
||
while true; do
|
||
echo ""
|
||
echo -e "${BLUE}================================${NC}"
|
||
echo -e "${BLUE} ⏰ 每日定时重启管理${NC}"
|
||
echo -e "${BLUE}================================${NC}"
|
||
|
||
if [ "$INIT_SYS" = "systemd" ]; then
|
||
local timer_status=$(systemctl is-active port-forward-daily.timer 2>/dev/null)
|
||
if [[ "$timer_status" == "active" ]]; then
|
||
echo -e "当前状态: ${GREEN}● 已开启${NC}"
|
||
local next=$(systemctl list-timers port-forward-daily.timer --no-pager 2>/dev/null | awk 'NR==2{print $1, $2}')
|
||
echo -e "下次执行: ${YELLOW}${next}${NC}"
|
||
else
|
||
echo -e "当前状态: ${RED}● 未开启${NC}"
|
||
fi
|
||
elif [ "$INIT_SYS" = "openrc" ]; then
|
||
if crontab -l 2>/dev/null | grep -q "port-forward-daily-restart"; then
|
||
local cron_entry=$(crontab -l 2>/dev/null | grep "port-forward-daily-restart")
|
||
local cron_min=$(echo "$cron_entry" | awk '{print $1}')
|
||
local cron_hr=$(echo "$cron_entry" | awk '{print $2}')
|
||
echo -e "当前状态: ${GREEN}● 已开启${NC}"
|
||
printf "执行时间: ${YELLOW}每天 %02d:%02d${NC}\n" $cron_hr $cron_min
|
||
else
|
||
echo -e "当前状态: ${RED}● 未开启${NC}"
|
||
fi
|
||
fi
|
||
|
||
echo "--------------------------------"
|
||
echo "1. 设置每日定时重启"
|
||
echo "2. 立即手动执行一次重启"
|
||
echo "3. 查看重启日志"
|
||
echo "4. 取消每日定时重启"
|
||
echo "5. 返回上级菜单"
|
||
echo -e "${BLUE}================================${NC}"
|
||
read -p "请选择 [1-5]: " choice
|
||
|
||
case $choice in
|
||
1) install_daily_restart ;;
|
||
2)
|
||
echo -e "${YELLOW}正在手动执行重启...${NC}"
|
||
bash /root/port-forward-daily-restart.sh 2>/dev/null || \
|
||
restart_all_forwards
|
||
;;
|
||
3) view_daily_log ;;
|
||
4) uninstall_daily_restart ;;
|
||
5) return ;;
|
||
*) echo -e "${RED}无效选择${NC}" ;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
view_watchdog_log() {
|
||
echo -e "${BLUE}=== Watchdog 日志（最近50行）===${NC}"
|
||
if [[ -f "/var/log/port-forward-watchdog.log" ]]; then
|
||
tail -50 /var/log/port-forward-watchdog.log
|
||
echo ""
|
||
echo -e "${YELLOW}实时监控命令: tail -f /var/log/port-forward-watchdog.log${NC}"
|
||
else
|
||
echo -e "${YELLOW}日志不存在，Watchdog 可能未启动${NC}"
|
||
fi
|
||
}
|
||
|
||
watchdog_menu() {
|
||
while true; do
|
||
echo ""
|
||
echo -e "${BLUE}================================${NC}"
|
||
echo -e "${BLUE} 🛡️ Watchdog 自动重启管理${NC}"
|
||
echo -e "${BLUE}================================${NC}"
|
||
|
||
local w_status=$(svc_is_active ${WATCHDOG_SERVICE})
|
||
if [[ "$w_status" == "active" ]]; then
|
||
echo -e "当前状态: ${GREEN}● 运行中${NC}"
|
||
else
|
||
echo -e "当前状态: ${RED}● 未运行${NC}"
|
||
fi
|
||
|
||
echo "--------------------------------"
|
||
echo "1. 安装并启动 Watchdog"
|
||
echo "2. 停止 Watchdog"
|
||
echo "3. 启动 Watchdog"
|
||
echo "4. 查看 Watchdog 日志"
|
||
echo "5. 卸载 Watchdog"
|
||
echo "6. 返回主菜单"
|
||
echo -e "${BLUE}================================${NC}"
|
||
read -p "请选择 [1-6]: " choice
|
||
|
||
case $choice in
|
||
1) install_watchdog ;;
|
||
2) svc_stop "${WATCHDOG_SERVICE}" && echo -e "${GREEN}✓ Watchdog 已停止${NC}" ;;
|
||
3) svc_start "${WATCHDOG_SERVICE}" && echo -e "${GREEN}✓ Watchdog 已启动${NC}" ;;
|
||
4) view_watchdog_log ;;
|
||
5) uninstall_watchdog ;;
|
||
6) return ;;
|
||
*) echo -e "${RED}无效选择${NC}" ;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
delete_forward() {
|
||
echo -e "${GREEN}=== 删除端口转发 ===${NC}"
|
||
read -p "请输入要删除的本机端口: " port
|
||
|
||
local svc_name="${SERVICE_PREFIX}-${port}"
|
||
if ! svc_exists "$svc_name"; then
|
||
echo -e "${RED}错误: 端口 ${port} 的转发不存在${NC}"; return 1
|
||
fi
|
||
|
||
svc_stop "$svc_name"
|
||
svc_disable "$svc_name"
|
||
svc_delete "$svc_name"
|
||
svc_daemon_reload
|
||
echo -e "${GREEN}✓ 端口 ${port} 的转发已删除${NC}"
|
||
}
|
||
|
||
delete_batch_forward() {
|
||
echo -e "${GREEN}=== 批量删除端口转发 ===${NC}"
|
||
read -p "请输入起始端口: " start_port
|
||
read -p "请输入结束端口: " end_port
|
||
|
||
echo -e "${YELLOW}即将删除端口 ${start_port}-${end_port} 的转发...${NC}"
|
||
read -p "确认继续? (y/n): " confirm
|
||
if [[ "$confirm" != "y" ]]; then echo "操作已取消"; return; fi
|
||
|
||
for port in $(seq $start_port $end_port); do
|
||
local svc_name="${SERVICE_PREFIX}-${port}"
|
||
if svc_exists "$svc_name"; then
|
||
svc_stop "$svc_name"
|
||
svc_disable "$svc_name"
|
||
svc_delete "$svc_name"
|
||
echo -e "${GREEN}✓${NC} 端口 ${port} 的转发已删除"
|
||
fi
|
||
done
|
||
|
||
svc_daemon_reload
|
||
echo -e "${GREEN}批量删除完成！${NC}"
|
||
}
|
||
|
||
main_menu() {
|
||
while true; do
|
||
echo ""
|
||
echo -e "${GREEN}================================${NC}"
|
||
echo -e "${GREEN} 端口转发管理脚本${NC}"
|
||
echo -e "${GREEN} (${INIT_SYS} | ${OS})${NC}"
|
||
echo -e "${GREEN}================================${NC}"
|
||
echo "1. 添加单个端口转发"
|
||
echo "2. 批量添加端口转发"
|
||
echo "3. 查看所有转发"
|
||
echo "4. 重启单个端口转发"
|
||
echo "5. 重启所有端口转发"
|
||
echo "6. 删除单个端口转发"
|
||
echo "7. 批量删除端口转发"
|
||
echo -e "8. 🛡️ Watchdog 自动重启管理"
|
||
echo -e "9. ⏰ 每日定时重启管理"
|
||
echo "0. 退出"
|
||
echo -e "${GREEN}================================${NC}"
|
||
read -p "请选择操作 [0-9]: " choice
|
||
|
||
case $choice in
|
||
1) add_single_forward ;;
|
||
2) add_batch_forward ;;
|
||
3) list_forwards ;;
|
||
4) restart_single_forward ;;
|
||
5) restart_all_forwards ;;
|
||
6) delete_forward ;;
|
||
7) delete_batch_forward ;;
|
||
8) watchdog_menu ;;
|
||
9) daily_restart_menu ;;
|
||
0) echo "退出脚本"; exit 0 ;;
|
||
*) echo -e "${RED}无效选择，请重新输入${NC}" ;;
|
||
esac
|
||
done
|
||
}
|
||
|
||
# 确保使用 bash 执行
|
||
if [ -z "$BASH_VERSION" ]; then
|
||
if command -v bash > /dev/null 2>&1; then
|
||
exec bash "$0" "$@"
|
||
else
|
||
echo "错误: 需要 bash 来运行此脚本"
|
||
exit 1
|
||
fi
|
||
fi
|
||
|
||
if [[ $EUID -ne 0 ]]; then
|
||
echo -e "${RED}此脚本必须以 root 权限运行${NC}"
|
||
exit 1
|
||
fi
|
||
|
||
detect_system
|
||
check_deps
|
||
main_menu
|
||
EOF
|
||
|
||
chmod +x /root/port-forward.sh
|
||
echo -e "\033[0;32m脚本已创建成功！\033[0m"
|
||
echo "运行命令: bash /root/port-forward.sh" |