Assume your router has been flashed with openwrt.
Use Windows browser to access 192.168.1.1. Openwrt luci will then show up and prompt you to setup a password for root. Follow accordingly and save your password for root.
Logout and login openwrt luci with root again.
System>>System
Timezone - Asia/Hong Kong
Click<<Save/Apply>>
At Windows DOS prompt, run ssh client
e.g. ssh root@192.168.1.1 to access openwrt command shell to install ddns package
After installation is complete, type
reboot -f <<ENTER>>
to reboot router
After router reboots , use Windows browser to access 192.168.1.1 openwrt luci and login again.
Services >> Dynamic DNS
To add DDNS entry,
type dynu_ipv4, click <<Add>>, then
Basic Settings
DDNS Service provider [IPv4] - dynu.com
Lookup Hostname - testhost.ddnsfree.com
Domain - testhost.ddnsfree.com
Username - dynu_id
Password - dynu_pwd
Enabled - check
Click <<Save/Apply>>
Reboot router and verify
1) DDNS of testhost.ddnsfree.com can be updated with your router's WAN ip properly
2) Router time can be updated with local time
Download V2ray package(e.g. v2ray-core_4.20.0-1_mipsel_24kc.ipk) for your router at https://github.com/kuoruan/openwrt-v2ray/releases to PC.
Rename v2ray-core_4.20.0-1_mipsel_24kc.ipk to v2ray.ipk
Update on 4-Aug-2020:
You can also try the mini-versions, (e.g. v2ray-core-mini_4.26.0-2_mipsel_24kc.ipk) and enjoy the benefit of substantial reduction in package size. This mini version was also found working on Newifi 3 D2.
Run WINSCP to login router with
New Site
1) File protocol - SCP
2) Host Name - 192.168.1.1
3) Port Number - 22
4) User Name/Password - root / <root password>
You can use Save button to create a site profile for future re-use
After login, use WINSCP to upload v2ray.ipk to /tmp/tmp on the router. Ensure "Transfer mode" is binary at <Transfer Settings>
Run SSH client, e.g. ssh root@192.168.1.1 to access openwrt command shell.
cd /tmp/tmp <<ENTER>>
opkg update <<ENTER>>
opkg install v2ray.ipk <<ENTER>>
The v2ray package is rather huge and therefore be patient to wait for the linux command prompt to turn up again. Normally it will take 5 to 10 minutes to complete the installation.
After installation is complete, type
reboot -f <<ENTER>>
to reboot router
Assume v2ray server uses the following parameters
1) port = 8443
2) protocol = vmess
3) uuid = c50bf28e-98cd-a351-b8d5-d60d56c376c7
4) network = ws
5) path = /vpath
6) host = testhost.ddnsfree.com
your v2ray.json file should have
{
"inbounds": [
{
"port": 8443,
"protocol": "vmess",
"allocate": {
"strategy": "always"
},
"settings": {
"clients": [
{
"id": "c50bf28e-98cd-a351-b8d5-d60d56c376c7",
"alterId": 64,
"security": "auto",
"level": 0
}
]
},
"streamSettings": {
"network":"ws",
"wsSettings": {
"connectionReuse": true,
"path": "/vpath",
"headers": {
"Host": "testhost.ddnsfree.com"
}
}
}
}
],
"outbounds": [
{
"protocol": "freedom",
"settings": {}
}
]
}
複製代碼
Use WINSCP to access the router and create the v2ray.json at /etc/config
At openwrt command shell, type
opkg update <<ENTER>>
opkg install lighttpd-mod-openssl <<ENTER>>
opkg install lighttpd-mod-proxy <<ENTER>>
opkg install lighttpd-mod-redirect <<ENTER>>
After installation is complete, edit lighttpd configuration file (/etc/lighttpd/lighttpd.conf) with WINSCP
Note
1) Conflicting with luci (using port 80), default installation of lighttpd uses port 80 and therefore it may not be able to launch properly. To resolve, lighttpd server port MUST be changed to run at a port other than 80 (e.g. 8080).
2) Suppose using the attached simple webpage (index.html,css/style.css). Use WinSCP to create folders /www/webproj and /www/webproj/css. Copy index.html to /www/webproj and style.css to /www/webproj/css
Alternative download site for log-in.zip https://gofile.io/?c=8ejjcJ
3) Assume v2ray server configuration using path = "/vpath"
4) Assume the files ca_bundle.crt, server.crt and server.key are placed at /www/ssl/,
at the same folder,
cat server.key server.crt > lighttpd.pem <<ENTER>>
to generate the .pem file for lighttpd
Be careful.. The latest version 2.8.3.1 (Nov 2019) acme was found with some problems to get the certificate. Some workaround is needed to make it work.
At openwrt command shell, type
opkg update <<ENTER>>
opkg install luci-app-acme <<ENTER>>
opkg install acme-dnsapi <<ENTER>>
The latest version 2.8.3.1 (Nov 2019) acme was found to install package wget-nossl which will make the api script stop working. After installation of luci-app-acme and acme-dnsapi, the following extra steps are needed as workaround.
opkg update
opkg remove --force-depends wget-nossl
opkg upgrade wget
複製代碼
Note - The below sample uses API approach.
Collect the API credentials from DDNS provider, e.g.
At https://www.dynu.com/en-US/ControlPanel/APICredentials
copy the credentials, e.g.
Client ID
39a7a033-c129-55b0-a013-b511150ace22
Secret
7hcYY7JSbSNa2RQcQh1fcJY5cp8YMg
At openwrt luci, Services>>ACME certs
State directory - /etc/acme
Account email - any email other than the default email, e.g. your email
Enabled - check
Use staging server - uncheck
Key length - 2048
Domain names - testhost.ddnsfree.com
DNS API - dns_dynu
DNS API credentials - Dynu_ClientId="39a7a033-c129-55b0-a013-b511150ace22"
Dynu_Secret="7hcYY7JSbSNa2RQcQh1fcJY5cp8YMg"
If you are using MT7621 router, e.g. newifi 3 d2,
you can enable hardware flow offloading at Firewall>>General Settings to improve throughput/performance.
3) You need to change the WAN port MAC address before your router can get a new WAN ip. Corresponding scripting and automation can be found via google.
4) You can also install email client package, e.g.msmtp, ssmtp to send your renewed WAN ip as email to your webmail. Even when DDNS is not working, you still can know your router IP from the Email. Corresponding scripting and automation can also be found via google.
... and possibly some other automations.
All up to your imagination...
發表於 2019-7-17 13:07
| 