|
|
| (13 intermediate revisions by 3 users not shown) |
| Line 1: |
Line 1: |
| <languages/> | | <languages/> |
| <div lang="en" dir="ltr" class="mw-content-ltr">
| | '''[https://github.com/MetaCubeX/mihomo/tree/Alpha mihomo]'''（原名clash-meta）是广泛使用的反审查代理工具。 |
| '''[https://github.com/MetaCubeX/mihomo/tree/Alpha mihomo]''' <span lang="en" dir="ltr">(formerly known as clash-meta), is a widely-used anti-censorship proxy application.</span> | |
| </div>
| |
|
| |
|
| 在NixOS上启用mihomo服务：
| | 在 NixOS 上启用 mihomo 服务： |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr">
| |
| <syntaxhighlight lang="nix"> | | <syntaxhighlight lang="nix"> |
| services.mihomo = { | | services.mihomo = { |
| Line 14: |
Line 11: |
| }; | | }; |
| </syntaxhighlight> | | </syntaxhighlight> |
| </div> | | |
| | <span id="TUN_Mode"></span> |
| | === TUN 模式 === |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr"> | | <div lang="en" dir="ltr" class="mw-content-ltr"> |
| === <span lang="en" dir="ltr">TUN Mode</span> === | | NOTICE: The [https://search.nixos.org/options?channel=unstable&show=services.mihomo.tunMode&from=0&size=50&sort=relevance&type=packages&query=mihomo tunMode option] in NixOS module only grants necessary permissions for the service. To actually enable TUN, you need to edit the '''configFile'''. See [https://wiki.metacubex.one/config/inbound/listeners/tun/?h=tun official documentation]. |
| </div> | | </div> |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr"> | | <span id="Troubleshooting"></span> |
| <span lang="en" dir="ltr">NOTICE: The [https://search.nixos.org/options?channel=unstable&show=services.mihomo.tunMode&from=0&size=50&sort=relevance&type=packages&query=mihomo tunMode option] in NixOS module only grants necessary permissions for the service. To actually enable TUN, you need to edit the '''configFile'''. See [https://wiki.metacubex.one/config/inbound/listeners/tun/?h=tun official documentation].</span> | | === 故障排除 === |
| </div>
| |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr"> | | 如果在使用透明代理时遇到问题： |
| === <span lang="en" dir="ltr">Troubleshooting</span> ===
| | * 使用 <code>dmesg</code> 检查内核日志 |
| </div> | | * 如果看到大量关于特定网络设备的 refuse 消息： |
| | ** NixOS 默认启用了防火墙，关掉防火墙再尝试 |
| | ** 如关掉防火墙后问题解决得到解决，可以依次尝试： |
| | *** 将 tun 设备添加到 <code>trustedInterfaces</code> |
| | *** 禁用 <code>checkReversePath</code> |
| | * 如果看到大量关于特定端口的 refuse 消息： |
| | ** 如果你正在使用 tproxy 透明代理，尝试在防火墙中允许 tproxy 端口。 |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr">
| | <span id="See_also"></span> |
| <span lang="en" dir="ltr">If encountering issues with transparent proxy:</span> | | == 更多参考 == |
| * <span lang="en" dir="ltr">Check kernel logs with <code>dmesg</code></span>
| |
| * <span lang="en" dir="ltr">If seeing massive "refuse" messages for specific network devices:</span>
| |
| ** <span lang="en" dir="ltr">NixOS enables firewall by default, try disabling firewall</span>
| |
| ** <span lang="en" dir="ltr">If problem is solved, try sequentially:</span>
| |
| *** <span lang="en" dir="ltr">Add tun device to <code>trustedInterfaces</code></span>
| |
| *** <span lang="en" dir="ltr">Disable <code>checkReversePath</code></span>
| |
| * <span lang="en" dir="ltr">If seeing massive "refuse" messages for specific ports:</span>
| |
| ** <span lang="en" dir="ltr">Try allow the tproxy port in firewall if you're trying tproxy transparent proxy.</span>
| |
| </div>
| |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr"> | | <div lang="en" dir="ltr" class="mw-content-ltr"> |
| == <span lang="en" dir="ltr">See also</span> ==
| | * [https://blog.nyaw.xyz/nixos-inwall-install NixOS installation and usage under a censored network (zh-cn)] |
| </div> | | </div> |
|
| |
|
| <div lang="en" dir="ltr" class="mw-content-ltr">
| | [[Category:Applications]] |
| * [https://blog.nyaw.xyz/nixos-inwall-install <span lang="en" dir="ltr">NixOS installation and usage under a censored network (zh-cn)</span>]
| | [[Category:Networking]] |
| </div>
| |