安装Docker

官方：

1
curl -fsSL https://get.docker.com | bash -s docker

阿里云：

1
curl -fsSL https://get.docker.com | bash -s docker --mirror Aliyun

安装面板

3x-ui

1
bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

s-ui(推荐)

1
bash <(curl -Ls https://raw.githubusercontent.com/alireza0/s-ui/master/install.sh)

h-ui

1
bash <(curl -fsSL https://raw.githubusercontent.com/jonssonyan/h-ui/main/install.sh)

流媒体解锁

1
bash <(curl -L -s raw.githubusercontent.com/lmc999/RegionRestrictionCheck/main/check.sh)

安装ZTNET面板

1
2
apt update && apt install -y sudo curl lsb-release
curl -s http://install.ztnet.network | sudo bash

安装ZeroTier

1
2
curl -s https://install.zerotier.com | sudo bash
cd /var/lib/zerotier-one/ && rm -rf planet && wget https://zt.0n.ink/api/planet && service zerotier-one restart

关闭IPv6

临时关闭

1
sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1 && sudo sysctl -w net.ipv6.conf.default.disable_ipv6=1

永久关闭

1
echo -e "net.ipv6.conf.all.disable_ipv6=1\nnet.ipv6.conf.default.disable_ipv6=1\nnet.ipv6.conf.lo.disable_ipv6=1" >> /etc/sysctl.conf && sysctl -p

FRRouting + WireGuard BGP配置

1
sudo apt install frr wireguard
1
2
3
4
5
vim /etc/frr/daemons

ospfd = yes

service frr restart
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
# 启用 NAT
sudo iptables -t nat -A POSTROUTING -o $WAN_IF -j MASQUERADE

# 允许转发
sudo iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i $ZT_IF -o $WAN_IF -j ACCEPT

# 安装 iptables-persistent 使规则持久化
sudo apt-get install iptables-persistent
sudo netfilter-persistent save

#开启IPv4转发
echo net.ipv4.ip_forward=1 > /etc/sysctl.conf

sysctl -p
1
vtysh

国际互联区

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
router bgp 64501 
 bgp bestpath as-path multipath-relax
 maximum-paths 4
 bgp router-id 100.64.1.254
 neighbor 100.64.1.1 remote-as 64502
 neighbor 100.64.1.2 remote-as 64503
 neighbor 100.64.1.3 remote-as 64504
 neighbor 100.64.1.4 remote-as 64505
 network 100.64.1.254/32

 address-family ipv4 unicast
  neighbor 100.64.1.1 route-map PERMIT_ALL in
  neighbor 100.64.1.1 route-map PERMIT_ALL out
  neighbor 100.64.1.2 route-map PERMIT_ALL in
  neighbor 100.64.1.2 route-map PERMIT_ALL out
  neighbor 100.64.1.3 route-map PERMIT_ALL in
  neighbor 100.64.1.3 route-map PERMIT_ALL out
  neighbor 100.64.1.4 route-map PERMIT_ALL in
  neighbor 100.64.1.4 route-map PERMIT_ALL out
  neighbor 100.64.1.1 activate
  neighbor 100.64.1.2 activate
  neighbor 100.64.1.3 activate
  neighbor 100.64.1.4 activate
  neighbor 100.64.1.1 default-originate
  neighbor 100.64.1.2 default-originate
  neighbor 100.64.1.3 default-originate
  neighbor 100.64.1.4 default-originate
 exit-address-family
 en

configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
router bgp 64502 
 bgp bestpath as-path multipath-relax
 maximum-paths 4
 bgp router-id 100.64.1.1
 neighbor 100.64.1.254 remote-as 64501
 neighbor 100.64.1.2 remote-as 64503
 neighbor 100.64.1.3 remote-as 64504
 neighbor 100.64.1.4 remote-as 64505
 network 100.64.1.1/32

 address-family ipv4 unicast
  neighbor 100.64.1.254 route-map PERMIT_ALL in
  neighbor 100.64.1.254 route-map PERMIT_ALL out
  neighbor 100.64.1.2 route-map PERMIT_ALL in
  neighbor 100.64.1.2 route-map PERMIT_ALL out
  neighbor 100.64.1.3 route-map PERMIT_ALL in
  neighbor 100.64.1.3 route-map PERMIT_ALL out
  neighbor 100.64.1.4 route-map PERMIT_ALL in
  neighbor 100.64.1.4 route-map PERMIT_ALL out
  neighbor 100.64.1.254 activate
  neighbor 100.64.1.2 activate
  neighbor 100.64.1.3 activate
  neighbor 100.64.1.4 activate
  neighbor 100.64.1.254 default-originate
  neighbor 100.64.1.2 default-originate
  neighbor 100.64.1.3 default-originate
  neighbor 100.64.1.4 default-originate
 exit-address-family
 en

configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
router bgp 64503 
 bgp bestpath as-path multipath-relax
 maximum-paths 4
 bgp router-id 100.64.1.2
 neighbor 100.64.1.254 remote-as 64501
 neighbor 100.64.1.1 remote-as 64502
 neighbor 100.64.1.3 remote-as 64504
 neighbor 100.64.1.4 remote-as 64505
 network 100.64.1.2/32

 address-family ipv4 unicast
  neighbor 100.64.1.254 route-map PERMIT_ALL in
  neighbor 100.64.1.254 route-map PERMIT_ALL out
  neighbor 100.64.1.1 route-map PERMIT_ALL in
  neighbor 100.64.1.1 route-map PERMIT_ALL out
  neighbor 100.64.1.3 route-map PERMIT_ALL in
  neighbor 100.64.1.3 route-map PERMIT_ALL out
  neighbor 100.64.1.4 route-map PERMIT_ALL in
  neighbor 100.64.1.4 route-map PERMIT_ALL out
  neighbor 100.64.1.254 activate
  neighbor 100.64.1.1 activate
  neighbor 100.64.1.3 activate
  neighbor 100.64.1.4 activate
  neighbor 100.64.1.254 default-originate
  neighbor 100.64.1.1 default-originate
  neighbor 100.64.1.3 default-originate
  neighbor 100.64.1.4 default-originate
 exit-address-family
 en

configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
router bgp 64504 
 bgp bestpath as-path multipath-relax
 maximum-paths 4
 bgp router-id 100.64.1.3
 neighbor 100.64.1.254 remote-as 64501
 neighbor 100.64.1.1 remote-as 64502
 neighbor 100.64.1.2 remote-as 64503
 neighbor 100.64.1.4 remote-as 64505
 network 100.64.1.3/32

 address-family ipv4 unicast
  neighbor 100.64.1.254 route-map PERMIT_ALL in
  neighbor 100.64.1.254 route-map PERMIT_ALL out
  neighbor 100.64.1.1 route-map PERMIT_ALL in
  neighbor 100.64.1.1 route-map PERMIT_ALL out
  neighbor 100.64.1.2 route-map PERMIT_ALL in
  neighbor 100.64.1.2 route-map PERMIT_ALL out
  neighbor 100.64.1.4 route-map PERMIT_ALL in
  neighbor 100.64.1.4 route-map PERMIT_ALL out
  neighbor 100.64.1.254 activate
  neighbor 100.64.1.1 activate
  neighbor 100.64.1.2 activate
  neighbor 100.64.1.4 activate
  neighbor 100.64.1.254 default-originate
  neighbor 100.64.1.1 default-originate
  neighbor 100.64.1.2 default-originate
  neighbor 100.64.1.4 default-originate
 exit-address-family
 en

configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
router bgp 64505 
 bgp bestpath as-path multipath-relax
 maximum-paths 4
 bgp router-id 100.64.1.4
 neighbor 100.64.1.254 remote-as 64501
 neighbor 100.64.1.1 remote-as 64502
 neighbor 100.64.1.2 remote-as 64503
 neighbor 100.64.1.3 remote-as 64504
 network 100.64.1.4/32

 address-family ipv4 unicast
  neighbor 100.64.1.254 route-map PERMIT_ALL in
  neighbor 100.64.1.254 route-map PERMIT_ALL out
  neighbor 100.64.1.1 route-map PERMIT_ALL in
  neighbor 100.64.1.1 route-map PERMIT_ALL out
  neighbor 100.64.1.2 route-map PERMIT_ALL in
  neighbor 100.64.1.2 route-map PERMIT_ALL out
  neighbor 100.64.1.3 route-map PERMIT_ALL in
  neighbor 100.64.1.3 route-map PERMIT_ALL out
  neighbor 100.64.1.254 activate
  neighbor 100.64.1.1 activate
  neighbor 100.64.1.2 activate
  neighbor 100.64.1.3 activate
  neighbor 100.64.1.254 default-originate
  neighbor 100.64.1.1 default-originate
  neighbor 100.64.1.2 default-originate
  neighbor 100.64.1.3 default-originate
 exit-address-family
 en

中国互联区

1
2
3
4
5
6
configure terminal
ip prefix-list ALLOW_ALL seq 5 permit 0.0.0.0/0 le 32
route-map PERMIT_ALL permit 10
 match ip address prefix-list ALLOW_ALL
 router bgp 64599
 bgp bestpath as-path multipath-relax

查看bgp状况

1
show ip bgp summary