Realm端口转发

1
2
3
4
5
6
7

sudo mkdir -p /root/realm && \
curl -s https://api.github.com/repos/zhboner/realm/releases/latest | \
jq -r '.assets[] | select(.name | test("realm-x86_64-unknown-linux-gnu.tar.gz")) | .browser_download_url' | \
wget -O /root/realm/realm.tar.gz && \
sudo tar -xvf /root/realm/realm.tar.gz -C /root/realm && \
sudo chmod +x /root/realm/realm && \
sudo rm /root/realm/realm.tar.gz #可执行文件位于/root/realm

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

cat > /root/realm/config.toml <<EOF

[network]
no_tcp = false
use_udp = true

[[endpoints]]
listen = "[::]:443" #监听v6，你的中转机，端口自行修改，以下类似
remote = "0.0.0.0:443 #监听v4，你的落地机

[[endpoints]]
listen = "0.0.0.0:80" #监听v4，你的中转机
remote = "[::]:80#监听v6，你的落地机

EOF

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

cat > /etc/systemd/system/realm.service <<EOF
[Unit]
Description=realm
After=network-online.target
Wants=network-online.target systemd-networkd-wait-online.service

[Service]
Type=simple
User=root
Restart=on-failure
RestartSec=5s
DynamicUser=true
WorkingDirectory=/root
ExecStart=/root/realm/realm -c /root/realm/config.toml

[Install]
WantedBy=multi-user.target
EOF

1
2
3
4
5

systemctl daemon-reload
systemctl enable realm
systemctl start realm
systemctl restart realm
systemctl status realm