Cloudflare 优选 IP 与 WARP 实战：免费加速、防封锁与多场景应用

# 下载 CloudflareST
# GitHub: https://github.com/XIU2/CloudflareSpeedTest

# Linux
wget https://github.com/XIU2/CloudflareSpeedTest/releases/download/v2.2.5/CloudflareST_linux_amd64.tar.gz
tar -xzvf CloudflareST_linux_amd64.tar.gz
chmod +x CloudflareST

# macOS
wget https://github.com/XIU2/CloudflareSpeedTest/releases/download/v2.2.5/CloudflareST_darwin_amd64.zip
unzip CloudflareST_darwin_amd64.zip
chmod +x CloudflareST

# Windows
# 下载 CloudflareST_windows_amd64.zip 并解压

# 默认测试（延时 + 下载测速）
./CloudflareST

# 输出示例：
# IP              已发送  已接收  丢包率  平均发送时间  下载速度 (MB/s)
# 104.16.123.1    4       4       0.00    142.15         8.32
# 172.64.155.1    4       4       0.00    156.32         7.85
# ...

# 只测试延时，不测速（快速）
./CloudflareST -dn 0

# 测试指定数量的 IP（默认 200 个）
./CloudflareST -n 500

# 测速线程数（默认 200）
./CloudflareST -t 100

# 测速时长（秒，每个 IP 测试 10 秒）
./CloudflareST -dt 10

# 输出到文件
./CloudflareST -o result.csv

# 指定下载测速 URL
./CloudflareST -url https://speed.cloudflare.com/__down?bytes=100000000

# 过滤指定延迟范围（ms）
./CloudflareST -tl 200 -tll 50
# 只保留延迟在 50-200ms 之间的 IP

# 过滤指定速度范围（MB/s）
./CloudflareST -sl 5
# 只保留下载速度大于 5MB/s 的 IP

# 输出结果数量
./CloudflareST -p 10
# 显示前 10 个最优结果

./CloudflareST \
  -n 500 \
  -t 200 \
  -dn 10 \
  -dt 5 \
  -tl 200 \
  -tll 30 \
  -sl 5 \
  -p 20 \
  -o result.csv \
  -url https://speed.cloudflare.com/__down?bytes=200000000

# 参数说明：
# -n 500      ：延时测试 500 个 IP
# -t 200      ：200 个并发线程
# -dn 10      ：下载测速 10 个 IP
# -dt 5       ：每个 IP 测速 5 秒
# -tl 200     ：延迟上限 200ms
# -tll 30     ：延迟下限 30ms
# -sl 5       ：速度下限 5MB/s
# -p 20       ：输出前 20 个结果
# -o result.csv：结果保存到文件

# 下载 cf-ddns
git clone https://github.com/timothymcassey/cloudflare-ddns.git
cd cloudflare-ddns

# 配置
cp config.json.example config.json

# 编辑配置
cat > config.json << 'EOF'
{
  "cloudflare": {
    "email": "your-email@example.com",
    "api_key": "your-api-key",
    "zone_id": "your-zone-id"
  },
  "records": [
    {
      "name": "cf.example.com",
      "type": "A",
      "ttl": 60
    }
  ],
  "preferred_ip_script": "/path/to/CloudflareST"
}
EOF

# 运行
python3 cf-ddns.py

#!/usr/bin/env python3
# cf-optimizer.py - Cloudflare 优选 IP API 服务

import subprocess
import json
from http.server import HTTPServer, BaseHTTPRequestHandler
from datetime import datetime

class CFHandler(BaseHTTPRequestHandler):
    def do_GET(self):
        if self.path == '/api/optimised-ip':
            # 运行优选脚本
            result = subprocess.run(
                ['./CloudflareST', '-dn', '0', '-p', '1', '-o', 'result.csv'],
                capture_output=True, text=True
            )

            # 解析结果
            with open('result.csv', 'r') as f:
                lines = f.readlines()
                if len(lines) > 1:
                    ip = lines[1].split(',')[0]
                    latency = lines[1].split(',')[5]

                    response = {
                        'ip': ip,
                        'latency': latency,
                        'timestamp': datetime.now().isoformat(),
                        'status': 'success'
                    }
                else:
                    response = {'status': 'error', 'message': 'No result'}

            self.send_response(200)
            self.send_header('Content-type', 'application/json')
            self.end_headers()
            self.wfile.write(json.dumps(response).encode())

        elif self.path == '/api/best-ips':
            # 返回多个优选 IP
            result = subprocess.run(
                ['./CloudflareST', '-dn', '0', '-p', '10', '-o', 'result.csv'],
                capture_output=True, text=True
            )

            ips = []
            with open('result.csv', 'r') as f:
                lines = f.readlines()
                for line in lines[1:11]:  # 前 10 个
                    parts = line.split(',')
                    if len(parts) > 5:
                        ips.append({
                            'ip': parts[0],
                            'latency': parts[5],
                            'speed': parts[9] if len(parts) > 9 else 'N/A'
                        })

            response = {
                'ips': ips,
                'count': len(ips),
                'timestamp': datetime.now().isoformat()
            }

            self.send_response(200)
            self.send_header('Content-type', 'application/json')
            self.end_headers()
            self.wfile.write(json.dumps(response).encode())

        else:
            self.send_response(404)
            self.end_headers()

if __name__ == '__main__':
    server = HTTPServer(('0.0.0.0', 8080), CFHandler)
    print('CF Optimizer API running on http://0.0.0.0:8080')
    server.serve_forever()

# 运行 API 服务
pip install flask
python3 cf-optimizer.py

# 测试
curl http://localhost:8080/api/optimised-ip
# {"ip": "104.16.123.1", "latency": "142.15", ...}

curl http://localhost:8080/api/best-ips
# {"ips": [...], "count": 10, ...}

# 将优选 IP 用于代理节点
# 在客户端配置中，将 server 替换为优选 IP
# SNI 保持原域名不变

# Clash Meta 配置示例
proxies:
  - name: "CF-Optimized"
    type: vless
    server: 104.16.123.1  # 优选 IP
    port: 443
    uuid: your-uuid
    servername: proxy.example.com  # SNI 保持原域名
    network: ws
    ws-opts:
      path: /secretpath
      headers:
        Host: proxy.example.com  # Host 头保持原域名
    tls: true

# 定时运行优选，更新所有设备
# crontab -e
0 */6 * * * /path/to/CloudflareST -o /path/to/result.csv -dn 0 -p 1

# 脚本自动更新客户端配置
#!/bin/bash
# update-cf-ip.sh
BEST_IP=$(head -2 /path/to/result.csv | tail -1 | cut -d',' -f1)
sed -i "s/server: .*/server: $BEST_IP/" /path/to/clash/config.yaml
systemctl restart clash

# 安装 WARP 客户端
# Linux (Debian/Ubuntu)
curl -fsSL https://pkg.cloudflareclient.com/pubkey.gpg | gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ $(lsb_release -cs) main" | tee /etc/apt/sources.list.d/cloudflare-client.list
apt update
apt install cloudflare-warp

# macOS
brew install --cask cloudflare-warp

# Windows
# 下载 https://1.1.1.1/ 并安装

# 注册设备
warp-cli registration new

# 连接
warp-cli connect

# 查看状态
warp-cli status
# 输出：Status update: Connected

# 断开
warp-cli disconnect

# 1. WARP 模式（默认）：所有流量走 WARP
warp-cli mode warp

# 2. WARP+ 模式（付费，更快）
warp-cli mode warp
# 需要 WARP+ 订阅或使用 referral 链接获取

# 3. 代理模式（只代理指定流量）
warp-cli mode proxy
# 本地监听 socks5://127.0.0.1:40000

# 4. DoH 模式（只加密 DNS）
warp-cli mode doh

# 获取 WARP WireGuard 配置
# 方法一：使用 warp-reg 脚本
git clone https://github.com/cmj2002/warp-reg.git
cd warp-reg
python3 warp-reg.py

# 输出：
# [Interface]
# PrivateKey = xxxxxxxx
# Address = 172.16.0.2/32
# Address = 2606:4700:110::xxxx/128
# DNS = 1.1.1.1
# MTU = 1280
#
# [Peer]
# PublicKey = bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
# Endpoint = 162.159.192.1:2408
# AllowedIPs = 0.0.0.0/0
# AllowedIPs = ::/0

# 保存为 WireGuard 配置文件
cat > /etc/wireguard/warp.conf << 'EOF'
[Interface]
PrivateKey = 你的私钥
Address = 172.16.0.2/32
Address = 2606:4700:110::xxxx/128
DNS = 1.1.1.1
MTU = 1280

[Peer]
PublicKey = bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
Endpoint = 162.159.192.1:2408
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/0
EOF

# 启动 WARP
wg-quick up warp

# 验证
curl ifconfig.me
# 应显示 Cloudflare 的 IP

# 停止
wg-quick down warp

# 方法一：使用 referral 链接
# 在手机 App 中分享你的 referral 链接
# 每邀请一人获得 1GB WARP+ 流量

# 方法二：使用脚本自动刷流量
# GitHub: https://github.com/yyuueexxiinngg/warp-plus-bot

# 方法三：使用 Telegram Bot
# 搜索 @generatewarpplusbot

{
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "wireguard",
      "tag": "warp",
      "server": "162.159.192.1",
      "server_port": 2408,
      "local_address": ["172.16.0.2/32", "2606:4700:110::xxxx/128"],
      "private_key": "你的WARP私钥",
      "peer_public_key": "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=",
      "mtu": 1280
    }
  ],
  "route": {
    "rules": [
      {
        "domain_suffix": ["openai.com", "chatgpt.com"],
        "outbound": "warp"
      },
      {
        "domain_suffix": ["netflix.com"],
        "outbound": "warp"
      }
    ],
    "final": "direct"
  }
}

# 1. 优选 WARP 的 Endpoint IP
./CloudflareST -url https://speed.cloudflare.com/__down?bytes=100000000 -tl 200 -p 5

# 2. 使用优选 IP 替换 WARP Endpoint
cat > /etc/wireguard/warp.conf << 'EOF'
[Interface]
PrivateKey = 你的私钥
Address = 172.16.0.2/32
Address = 2606:4700:110::xxxx/128
DNS = 1.1.1.1
MTU = 1280

[Peer]
PublicKey = bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=
Endpoint = 104.16.123.1:2408  # 优选 IP
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/0
EOF

# 3. 启动
wg-quick up warp

# 4. 测试延迟
ping -c 10 162.159.192.1
# 对比优选前后延迟

{
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "socks",
      "tag": "warp",
      "settings": {
        "servers": [
          {
            "address": "127.0.0.1",
            "port": 40000
          }
        ]
      }
    }
  ],
  "routing": {
    "rules": [
      {
        "type": "field",
        "domain": ["openai.com", "chatgpt.com", "netflix.com"],
        "outboundTag": "warp"
      },
      {
        "type": "field",
        "network": "tcp,udp",
        "outboundTag": "direct"
      }
    ]
  }
}

# 启动 WARP 代理模式
warp-cli mode proxy
# 本地监听 socks5://127.0.0.1:40000

# 启动 xray
xray -c /etc/xray/config.json

// sing-box 配置 - 流媒体分流
{
  "outbounds": [
    {
      "type": "wireguard",
      "tag": "warp",
      "server": "162.159.192.1",
      "server_port": 2408,
      "local_address": ["172.16.0.2/32"],
      "private_key": "你的WARP私钥",
      "peer_public_key": "bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo=",
      "mtu": 1280
    },
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "rules": [
      {
        "domain_suffix": [
          "netflix.com",
          "nflxvideo.net",
          "nflximg.net",
          "nflxext.com"
        ],
        "outbound": "warp"
      },
      {
        "domain_suffix": ["openai.com", "chatgpt.com", "oaistatic.com"],
        "outbound": "warp"
      },
      {
        "domain_suffix": ["disneyplus.com", "disney-plus.net"],
        "outbound": "warp"
      }
    ],
    "final": "direct"
  }
}

# 1. 安装 WireGuard
opkg update
opkg install wireguard-tools luci-proto-wireguard

# 2. 配置 WARP 接口
# 在 OpenWrt 后台：
# 网络 → 接口 → 添加新接口
# 名称：warp
# 协议：WireGuard

# 3. 配置
uci set network.warp=interface
uci set network.warp.proto='wireguard'
uci set network.warp.private_key='你的WARP私钥'
uci set network.warp.addresses='172.16.0.2/32'
uci commit network

# 4. 配置 Peer
uci add network wireguard_warp
uci set network.@wireguard_warp[0].public_key='bmXOC+F1FxEMF9dyiK2H5/1SUtzH0JuVo51h2wPfgyo='
uci set network.@wireguard_warp[0].endpoint_host='162.159.192.1'
uci set network.@wireguard_warp[0].endpoint_port='2408'
uci set network.@wireguard_warp[0].allowed_ips='0.0.0.0/0'
uci set network.@wireguard_warp[0].persistent_keepalive='25'
uci commit network

# 5. 配置防火墙
uci set firewall.warp=zone
uci set firewall.warp.name='warp'
uci set firewall.warp.input='REJECT'
uci set firewall.warp.forward='ACCEPT'
uci set firewall.warp.output='ACCEPT'
uci set firewall.warp.masq='1'
uci set firewall.warp.mtu_fix='1'
uci set firewall.warp.network='warp'
uci commit firewall

# 6. 配置策略路由（国内直连，国外走 WARP）
# 安装 mwan3 或使用 ip-rule
ip route add default dev warp table 100
ip rule add fwmark 0x1 table 100

# 7. 重启网络
/etc/init.d/network restart

# 在 VPS 上配置 WARP 作为出口
# 用于解锁 ChatGPT、Netflix 等

# 1. 安装 WireGuard
apt install wireguard

# 2. 获取 WARP 配置
python3 warp-reg.py > /etc/wireguard/warp.conf

# 3. 启动 WARP
wg-quick up warp

# 4. 配置 sing-box 使用 WARP
# (参考前面的 sing-box 配置)

# 5. 测试
curl --interface warp ifconfig.me
# 应显示 Cloudflare 的 IP

#!/bin/bash
# warp-optimizer.sh - WARP 优选 IP 脚本

# 1. 优选 Cloudflare IP
cd /path/to/CloudflareST
./CloudflareST -dn 0 -tl 200 -p 1 -o result.csv

# 2. 获取最优 IP
BEST_IP=$(head -2 result.csv | tail -1 | cut -d',' -f1)
echo "最优 IP: $BEST_IP"

# 3. 更新 WARP 配置
sed -i "s/Endpoint = .*/Endpoint = $BEST_IP:2408/" /etc/wireguard/warp.conf

# 4. 重启 WARP
wg-quick down warp
wg-quick up warp

# 5. 验证
echo "WARP 状态："
wg show warp
echo ""
echo "出口 IP："
curl --interface warp ifconfig.me

# 6. 设置定时任务（每 6 小时优选一次）
# crontab -e
# 0 */6 * * * /path/to/warp-optimizer.sh

# crontab -e

# 每 6 小时优选一次
0 */6 * * * /path/to/warp-optimizer.sh >> /var/log/warp-optimizer.log 2>&1

# 每天凌晨 3 点全面测速
0 3 * * * /path/to/CloudflareST -dn 10 -dt 10 -tl 200 -p 20 -o /var/log/cf-best-ips.csv

# 每小时检查 WARP 连接
0 * * * * /usr/bin/wg show warp > /dev/null 2>&1 || wg-quick up warp

#!/usr/bin/env python3
# monitor-warp.py - WARP 监控脚本

import subprocess
import time
import json
from datetime import datetime

def check_warp():
    """检查 WARP 状态"""
    result = subprocess.run(['wg', 'show', 'warp'], capture_output=True, text=True)
    return result.returncode == 0

def get_warp_ip():
    """获取 WARP 出口 IP"""
    result = subprocess.run(
        ['curl', '--interface', 'warp', '-s', 'ifconfig.me'],
        capture_output=True, text=True, timeout=10
    )
    return result.stdout.strip()

def test_latency():
    """测试延迟"""
    result = subprocess.run(
        ['ping', '-c', '5', '1.1.1.1'],
        capture_output=True, text=True, timeout=30
    )
    # 解析平均延迟
    for line in result.stdout.split('\n'):
        if 'avg' in line:
            return line.split('=')[1].strip()
    return 'N/A'

def main():
    while True:
        status = {
            'timestamp': datetime.now().isoformat(),
            'warp_connected': check_warp(),
            'warp_ip': get_warp_ip() if check_warp() else 'N/A',
            'latency': test_latency()
        }

        print(json.dumps(status, indent=2))

        # 如果断开，自动重连
        if not status['warp_connected']:
            subprocess.run(['wg-quick', 'up', 'warp'])

        time.sleep(60)  # 每分钟检查一次

if __name__ == '__main__':
    main()

# 检查 WireGuard 状态
wg show

# 检查接口
ip addr show warp

# 检查路由
ip route show table main | grep warp

# 查看日志
journalctl -u wg-quick@warp

# 常见原因：
# 1. 私钥配置错误
# 2. Endpoint 不可达
# 3. 防火墙阻止 UDP 2408
# 4. MTU 设置不当

# 解决：
# 1. 重新获取 WARP 配置
python3 warp-reg.py

# 2. 检查 UDP 连通性
nc -zuv 162.159.192.1 2408

# 3. 调整 MTU
sed -i 's/MTU = 1280/MTU = 1360/' /etc/wireguard/warp.conf

# 检查网络连通性
ping 104.16.123.1

# 检查测速 URL
curl -I https://speed.cloudflare.com/__down?bytes=100000000

# 更换测速 URL
./CloudflareST -url https://cf.los9.me/upload

# 检查防火墙
iptables -L -n | grep DROP

# 解决：
# 1. 使用 -dn 0 只测延迟
# 2. 更换测速 URL
# 3. 关闭防火墙测试

# 检查出口 IP
curl --interface warp ifconfig.me

# 检查 IP 归属地
curl --interface warp https://ipinfo.io

# 如果显示国内 IP，说明 WARP 没生效

# 重新注册 WARP
warp-cli registration delete
warp-cli registration new

# 或重新获取 WireGuard 配置
python3 warp-reg.py

# 优选 WARP Endpoint
./CloudflareST -tl 200 -p 5

# 使用优选 IP 替换 Endpoint
# 编辑 /etc/wireguard/warp.conf

# 调整 MTU
# 尝试 1280 / 1360 / 1380 / 1420
sed -i 's/MTU = .*/MTU = 1360/' /etc/wireguard/warp.conf
wg-quick down warp && wg-quick up warp

# 测速
curl --interface warp -o /dev/null -s -w "%{speed_download}\n" \
  https://speed.cloudflare.com/__down?bytes=100000000