nas這東西對(duì)于我這種買(mǎi)不起阿里云服務(wù)器的屌絲程序員真香。
條件
- 群暉或者黑群暉
- 阿里云申請(qǐng)的域名据途,需要備案
- 家里有公網(wǎng)ip(非固定绞愚,會(huì)經(jīng)常發(fā)生變化),電信的一般都有颖医,沒(méi)有的話可以向客服申請(qǐng)爽醋。其他寬帶請(qǐng)百度
- 路由器設(shè)置端口轉(zhuǎn)發(fā)或者DMZ主機(jī)
這種方式優(yōu)點(diǎn)很明顯
- 無(wú)需使用花生殼frp等做內(nèi)網(wǎng)穿透,完全免費(fèi)便脊,僅需阿里云域名費(fèi)用
- 速度取決于自家寬帶蚂四。比如我家千兆寬帶,上傳是百兆哪痰,實(shí)測(cè)公司下載文件可達(dá)12兆每秒
- 超級(jí)穩(wěn)定遂赠,一般不會(huì)出現(xiàn)問(wèn)題
缺點(diǎn)也很明顯
- 要有公網(wǎng)IP
- 無(wú)法使用80和443端口(被封),部署網(wǎng)站的話肯定需要帶端口號(hào)的
阿里云控制臺(tái)獲取到AccessKey ID
和Access Key Secret
晌杰,用于訪問(wèn)阿里云api
image
群暉中新建aliyun.sh文件跷睦,將下面的腳本拷貝進(jìn)去
#!/bin/sh
set -e
if [ $1 ]; then
ApiId=$1
fi
if [ $2 ]; then
ApiKey=$2
fi
if [ $3 ]; then
Domain=$3
fi
if [ -z "$ApiId" -o -z "$ApiKey" -o -z "$Domain" ]; then
echo "參數(shù)缺失"
exit 1
fi
if [ $4 ]; then
SubDomain=$4
fi
if [ -z "$SubDomain" ]; then
SubDomain="@"
fi
Nonce=$(date -u "+%N") # 有bug?
Timestamp=$(date -u "+%Y-%m-%dT%H%%3A%M%%3A%SZ") # SB 阿里云, 什么鬼時(shí)間格式
Nonce=$Timestamp
urlencode() {
local raw="$1";
local len="${#raw}"
local encoded=""
for i in `seq 1 $len`; do
local j=$((i+1))
local c=$(echo $raw | cut -c$i-$i)
case $c in [a-zA-Z0-9.~_-]) ;;
*)
c=$(printf '%%%02X' "'$c") ;;
esac
encoded="$encoded$c"
done
echo $encoded
}
# $1 = query string
getSignature() {
local encodedQuery=$(urlencode $1)
local message="GET&%2F&$encodedQuery"
local sig=$(echo -n "$message" | openssl dgst -sha1 -hmac "$ApiKey&" -binary | openssl base64)
echo $(urlencode $sig)
}
sendRequest() {
local sig=$(getSignature $1)
local result=$(wget -qO- --no-check-certificate --content-on-error "https://alidns.aliyuncs.com?$1&Signature=$sig")
echo $result
}
getRecordId() {
echo "獲取 $SubDomain.$Domain 的 IP..." >&2
local queryString="AccessKeyId=$ApiId&Action=DescribeSubDomainRecords&Format=JSON&SignatureMethod=HMAC-SHA1&SignatureNonce=$Nonce&SignatureVersion=1.0&SubDomain=$SubDomain.$Domain&Timestamp=$Timestamp&Type=A&Version=2015-01-09"
local result=$(sendRequest "$queryString")
local code=$(echo $result | sed 's/.*,"Code":"\([A-z]*\)",.*/\1/')
local recordId=$(echo $result | sed 's/.*,"RecordId":"\([0-9]*\)",.*/\1/')
if [ "$code" = "$result" ] && [ ! "$recordId" = "$result" ]; then
local ip=$(echo $result | sed 's/.*,"Value":"\([0-9\.]*\)",.*/\1/')
if [ "$ip" == "$NewIP" ]; then
echo "IP 無(wú)變化, 退出腳本..." >&2
echo "quit"
else
echo $recordId
fi
else
echo "null"
fi
}
# $1 = record ID, $2 = new IP
updateRecord() {
local queryString="AccessKeyId=$ApiId&Action=UpdateDomainRecord&DomainName=$Domain&Format=JSON&RR=$SubDomain&RecordId=$1&SignatureMethod=HMAC-SHA1&SignatureNonce=$Nonce&SignatureVersion=1.0&Timestamp=$Timestamp&Type=A&Value=$2&Version=2015-01-09"
local result=$(sendRequest $queryString)
local code=$(echo $result | sed 's/.*,"Code":"\([A-z]*\)",.*/\1/')
if [ "$code" = "$result" ]; then
echo "$SubDomain.$Domain 已指向 $NewIP." >&2
else
echo "更新失敗." >&2
echo $result >&2
fi
}
# $1 = new IP
addRecord() {
local queryString="AccessKeyId=$ApiId&Action=AddDomainRecord&DomainName=$Domain&Format=JSON&RR=$SubDomain&SignatureMethod=HMAC-SHA1&SignatureNonce=$Nonce&SignatureVersion=1.0&Timestamp=$Timestamp&Type=A&Value=$1&Version=2015-01-09"
local result=$(sendRequest $queryString)
local code=$(echo $result | sed 's/.*,"Code":"\([A-z]*\)",.*/\1/')
if [ "$code" = "$result" ]; then
echo "$SubDomain.$Domain 已指向 $NewIP." >&2
else
echo "添加失敗." >&2
echo $result >&2
fi
}
# Get new IP address
echo "獲取當(dāng)前 IP..."
NewIP=$(wget -qO- --no-check-certificate "http://members.3322.org/dyndns/getip")
echo "當(dāng)前 IP 為 $NewIP."
# Get record ID of sub domain
recordId=$(getRecordId)
if [ ! "$recordId" = "quit" ]; then
if [ "$recordId" = "null" ]; then
echo "域名記錄不存在, 添加 $SubDomain.$Domain 至 $NewIP..."
addRecord $NewIP
else
echo "域名記錄已存在, 更新 $SubDomain.$Domain 至 $NewIP..."
updateRecord $recordId $NewIP
fi
fi
此腳本我放在如下位置,可以根據(jù)自己需求更改
image
打開(kāi)群暉控制面板->計(jì)劃任務(wù)
image
新增任務(wù),截圖中的任務(wù)計(jì)劃為每天7:00-20:50分肋演,每10分鐘執(zhí)行一次
image
image
image
腳本編寫(xiě)格式如下
sh [sh腳本地址] [AccessKey ID] [Access Key] Secret [頂級(jí)域名] [二級(jí)域名]
舉例
sh /volume1/公用/ddns/aliyun.sh 9qJRYksHQeeeeek4 fNJGWee2IFyaUT5XvYeeyGXmeeiPre sout.com nas