id: f291358f61bc414e8bde95ae705372c7
parent_id: 
item_type: 1
item_id: 5f57a31cf9f346afaf0f47dff2420ed8
item_updated_time: 1764345468193
title_diff: "[{\"diffs\":[[1,\"真的安全？Cloudflare Worker部署VLESS翻牆代理的原理和proxyIP細\"]],\"start1\":0,\"start2\":0,\"length1\":0,\"length2\":45}]"
body_diff: "[{\"diffs\":[[1,\"<html>\\\r\\\n<head>\\\r\\\n  <title>真的安全？Cloudflare Worker部署VLESS翻牆代理的原理和proxyIP細節研究 - by Upsangel</title>\\\r\\\n  <basefont face=\\\"微软雅黑\\\" size=\\\"2\\\" />\\\r\\\n  <meta http-equiv=\\\"Content-Type\\\" content=\\\"text/html;charset=utf-8\\\" />\\\r\\\n  <meta name=\\\"exporter-version\\\" content=\\\"YXBJ Windows/608924 (zh-CN, DDL); Windows/10.0.0 (Win64); EDAMVersion=V2;\\\"/>\\\r\\\n  <style>\\\r\\\n\\tbody, td {\\\r\\\n\\t  font-family: 微软雅黑;\\\r\\\n\\t  font-size: 12pt;\\\r\\\n\\t}\\\r\\\n  </style>\\\r\\\n</head>\\\r\\\n<body>\\\r\\\n<a name=\\\"2119\\\"></a>\\\r\\\n<h1>真的安全？Cloudflare Worker部署VLESS翻牆代理的原理和proxyIP細節研究 - by Upsangel</h1>\\\r\\\n\\\r\\\n<div><span>\\\n  <div style=\\\"--en-clipped-content:simplified\\\">\\\n<div><br/></div><div style=\\\"font-size: 16px; display:block; min-width: 100%;\\\"> <div style=\\\"background-color:transparent;font:inherit;vertical-align:baseline;\\\"><div style=\\\"background-color:transparent;font:inherit;vertical-align:baseline;font-family:&quot;PT Serif&quot;;font-size:16px;line-height:1.5em;color:rgb(31, 9, 9);text-align:left;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;width:36em;z-index:200;padding-left:2em;padding-right:2em;margin-left:auto;margin-right:auto;position:relative;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;position:relative;margin-left:-25px;margin-right:25px;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;padding-top:0px;padding-bottom:9em;position:relative;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;position:relative;margin-bottom:0px;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\"><h1 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;border:0px;font:inherit;vertical-align:baseline;font-size:35px;font-weight:normal;line-height:35px;margin-bottom:20px;padding:0px;margin:0px;\\\">真的安全？Cloudflare Worker部署VLESS翻牆代理的原理和proxyIP細節研究</h1><div style=\\\"padding:0px;border:0px;font:inherit;vertical-align:baseline;position:relative;height:1em;line-height:1;text-align:center;margin:0px;padding-top:1.5em;padding-bottom:1.5em;margin-bottom:0px;\\\"><div style=\\\"padding:0px;border:0px;font:inherit;vertical-align:baseline;background:-webkit-linear-gradient(0deg, rgb(243, 242, 238) 1%, rgb(31, 9, 9) 50%, rgb(243, 242, 238) 99%);position:absolute;left:-4em;top:50%;z-index:10;width:100%;padding-left:4em;padding-right:4em;height:0.1em;opacity:0.5;margin:0px;margin-bottom:0px;\\\"><span style=\\\"font:inherit;position:absolute;left:-4em;top:50%;z-index:10;width:100%;padding-left:4em;padding-right:4em;height:0.1em;margin:0px;opacity:0.5;background:-webkit-linear-gradient(0deg, rgb(243, 242, 238) 1%, rgb(31, 9, 9) 50%, rgb(243, 242, 238) 99%);\\\"></span></div></div></div>\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;margin-bottom:1em;margin-top:1em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-top:1em;margin-bottom:0px;\\\"><img src=\\\":/6b34ede7f3de48d6bd082491b8d147c3\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"279\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"576\\\"/></div></div>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">小U上次分享自建VPN/代理翻牆已經是2017年（<a href=\\\"https://upsangel.com/router-2/tomato_softether_vpn_server_gfw_netgear-r6250/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">連WhatsApp都要翻墻？路由器刷固件架設SoftEther VPN Server翻墻的圖文攻略</a>），生活在牆外的我沒有翻牆的“剛需”，但是<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">祖國的春風在香港吹啊吹</span></strong>，又吹生了我對VPN翻牆的熱情。昨晚花了一晚時間<a href=\\\"https://upsangel.com/security/vpn/%e5%88%a9%e7%94%a8cloudflare-worker%e9%83%a8%e7%bd%b2vless%e7%bf%bb%e7%89%86%e4%bb%a3%e7%90%86%e7%9a%84%e4%bb%a3%e7%a2%bc%e5%ad%b8%e7%bf%92%ef%bc%9azizifns-edgetunnel-repo/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">學習了Cloudflare Worker部署VLESS翻牆代理的代碼</a> ，今早順利根據網上的教程順利來跑起了VLESS轉發代理。如果你對VPN是否安全會有批判性思考，<span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\"><strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\">不是免費就9衝</strong></span>，那麼本文和大家分享幾個技術細節你很可能感興趣。</p>\\\n<a href=\\\"https://upsangel.com/security/vpn/cloudflare-worker-vless%e7%bf%bb%e7%89%86%e4%bb%a3%e7%90%86%e5%8e%9f%e7%90%86-proxyip%e7%b4%b0%e7%af%80%e7%a0%94%e7%a9%b6/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">閱讀全文: 真的安全？Cloudflare Worker部署VLESS翻牆代理的原理和proxyIP細節研究</a>\\\n\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\"><a href=\\\"https://upsangel.com/check/nord-vpn/\\\" style=\\\"color:rgb(6, 85, 136);border:0px;font:inherit;vertical-align:baseline;text-decoration:none;display:block;background-color:transparent;margin:0px;padding:0px;\\\" target=\\\"_blank\\\"></a></p><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-bottom:1em;margin-top:1em;\\\"><a href=\\\"https://upsangel.com/check/nord-vpn/\\\" style=\\\"color:rgb(6, 85, 136);border:0px;font:inherit;vertical-align:baseline;text-decoration:none;display:block;background-color:transparent;margin:0px;padding:0px;\\\" target=\\\"_blank\\\"><img src=\\\":/496858b7e457467792554a0ad5ac95e7\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"320\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"427\\\"/></a></div><p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\"></p>\\\n</div>\\\n<h2 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;font-size:30px;line-height:35px;margin-top:35px;margin-bottom:15px;\\\">Cloudflare Worker + VLESS的原理</h2>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">Cloudflare Worker上可以運行javascript，作爲一個serverless function，每天有十萬個10ms CPU time 的requests可以免費用。<a href=\\\"https://github.com/zizifn/edgetunnel/blob/main/src/worker-vless.js\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">z大寫的edgetunnel代碼</a>可以部署在Cloudflare Worker，爲數據包加添vlessheader信息，達到<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">vless代理轉發</span></strong>的目的。</p>\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;margin-bottom:1em;margin-top:1em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-top:1em;margin-bottom:0px;\\\"><img src=\\\":/6e6886c967e34a0cbaadb879715ffc0d\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"284\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"576\\\"/></div></div>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">由於Cloudflare在GFW國內某個程度能訪問，而<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\">CF Worker又能訪問GFW以外的信息</strong>，所以透過CF Worker來轉發的數據理論上就達到了<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">翻牆的效果</span></strong>。</p>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">詳細的部署方法可以參考：</p>\\\n\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">最關鍵的是下圖在Cloudflare上設置的Worker的代碼：</p>\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;margin-bottom:1em;margin-top:1em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-top:1em;margin-bottom:0px;\\\"><img src=\\\":/16efad48daa743bf96d860c095ad68de\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"279\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"576\\\"/></div></div>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">最值得深究的小U認爲是proxyIP的這個設定，爲什麼呢？</p>\\\n<h2 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;font-size:30px;line-height:35px;margin-top:35px;margin-bottom:15px;\\\">爲什麼還要proxyIP？安全嗎？</h2>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">代碼中有一行神祕的proxyIP設定觸動小U Cybersecurity 的神經，網上教程建議設置爲：103.200.112.108。<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">這IP到底是誰</span></strong>？有什麼用？爲什麼需要？既然叫proxy，應該流量就應該是經過這些IP，教程中還要我們關閉加密設置？！這。。。第一反應是用WHOIS查找這些IP的擁有者：</p>\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;margin-bottom:1em;margin-top:1em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-top:1em;margin-bottom:0px;\\\"><img src=\\\":/c48b21a3042c41d0ab196d275094ba60\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"337\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"576\\\"/></div></div>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">感覺不安。既然是利用Cloudflare的Infrastructure進行轉發的VLESS代理，爲什麼還要繞道去第三方的IP做代理？？會不會只是GFW牆內的情況所以要設定這個proxyIP？</p>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">小U把proxyIP 設置爲空白，果然Cloudflare Worker的頁面就死了。唯有按圖索驥研究這個proxyIP到底幹什麼用的。</p>\\\n<h3 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-size:30px;line-height:35px;margin-top:35px;font-weight:normal;margin-bottom:15px;\\\">關於proxyIP的代碼分析</h3>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">細讀z大的代碼，發現proxyIP<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">並不是每次轉發都會用到</span></strong>，反而是“例外”的情況才會在<code style=\\\"font-size: 9pt; color: rgb(51, 51, 51); font-family: Monaco,Menlo,Consolas,Courier New,monospace,sans-serif\\\">retry()</code> 函數中調用。那到底是什麼情況呢？z大在代碼中其實有備註解釋：</p>\\\n<pre style=\\\"border-radius:4px;background-color: #fbfaf8;border: 1px solid rgba(0,0,0,.14902);color: #333;font-size: 12px;padding: 8px;font-family: Monaco,Menlo,Consolas,Courier New,monospace,sans-serif;box-sizing: border-box;\\\"><code style=\\\"font-size: 9pt; color: rgb(51, 51, 51); font-family: Monaco,Menlo,Consolas,Courier New,monospace,sans-serif\\\">// if the cf connect tcp socket have no incoming data, we retry to redirect ip</code></pre>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">很抱歉小U的英文能力沒能理解，按照上下文，z大把本地socket叫websocket，遠端的叫remotesocket或者tcp socket，那可能是遠端的tcp socket沒有返回數據，就重定向到ip？看代碼，ip指的就是proxyIP，那到底是把什麼重定向，那個proxyIP又爲什麼能解決問題？</p>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">唯有按圖索驥尋找這個proxyIP的資料，功夫不廢有心人，小U找到了 <a href=\\\"https://blog.piig.top/posts/10934/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">cloudflare worker搭建vless | Masheep (piig.top)</a> 作者也有探究這個proxyIP到底是什麼，他說：</p>\\\n<blockquote style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;quotes:none;margin-bottom:1.5em;font-style:italic;border-left:5px solid;margin-left:2em;padding-left:1em;\\\"><span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\">一些神奇的ip，可以无条件的转发所有cf流量<br/>如果上面的proxyip用不了了，可以替换成下面这些域名<br/>cdn-all.xn–b6gac.eu.org<br/>cdn.xn–b6gac.eu.org<br/>cdn-b100.xn–b6gac.eu.org<br/>edgetunnel.anycast.eu.org<br/>cdn.anycast.eu.org<br/>另外可以参考这个issues进行proxyip查找<br/>issues：<a href=\\\"https://github.com/zizifn/edgetunnel/issues/162\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">https://github.com/zizifn/edgetunnel/issues/162</a></p>\\\n<span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span></blockquote>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">這個#162issue幫我指引我到了正確的答案，z大在自己的repo issue中解釋到：</p>\\\n<blockquote style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;quotes:none;margin-bottom:1.5em;font-style:italic;border-left:5px solid;margin-left:2em;padding-left:1em;\\\"><span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\">由于cf bug，现在cf worker 不能直接访问cf 托管的网站。。所以需要配置一个中转ip。。。而有一些神奇的 ip，可以无条件转发所有 cf 的流量。</p>\\\n<span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span></blockquote>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">z大口中的“神奇的ip”，就是proxyIP。而這個“cf bug”其實是Cloudflare的“有意爲之”，<a href=\\\"https://developers.cloudflare.com/workers/runtime-apis/tcp-sockets/#considerations\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">Cloudflare已在網誌上說</a>：</p>\\\n<blockquote style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;quotes:none;margin-bottom:1.5em;font-style:italic;border-left:5px solid;margin-left:2em;padding-left:1em;\\\"><span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\">Outbound TCP sockets to Cloudflare IP ranges are temporarily blocked, but will be re-enabled shortly.</p>\\\n<span style=\\\"font:inherit;quotes:none;font-style:italic;\\\"></span></blockquote>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">也就是說<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">CF Worker是不能訪問CF自家的IP</span></strong>，是不是很不可思議？而z大的代碼就考慮到這一點，如果出現遠端TCP不返回數據（例如遠端的IP是CF自家的IP），就會觸發 <code style=\\\"font-size: 9pt; color: rgb(51, 51, 51); font-family: Monaco,Menlo,Consolas,Courier New,monospace,sans-serif\\\">retry()</code> 函數，把TCP包再發給proxyIP retry，讓proxyIP丟回給CF的目的IP。</p>\\\n<h2 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;font-size:30px;line-height:35px;margin-top:35px;margin-bottom:15px;\\\">驗證proxyIP的工作原理</h2>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">如果proxyIP只是在訪問Cloudflare IP時候<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">觸發的failsafe</span></strong>，那麼如果一個網站不是Cloudflare host/proxy/edge-caching/namesever等等的話，應該能夠正常的訪問才對。那什麼網站不會用Cloudflare？自然是Cloudflare的競爭者，例如AWS的Cloudfront。所以上AWS應該不會有任何問題，把proxyIP去掉上AWS果然正常：</p>\\\n<div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;margin-bottom:1em;margin-top:1em;\\\"><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;text-align:center;margin-top:1em;margin-bottom:0px;\\\"><img src=\\\":/a1a282703a85418794b02d458800cc8b\\\" type=\\\"image/png\\\" data-filename=\\\"Image.png\\\" height=\\\"302\\\" style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;display:block;max-width:100%;\\\" width=\\\"576\\\"/></div></div>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">Google也有自己一套CDN，不需要經過proxy轉發，所以也解釋了爲什麼YouTuber測試CF Worker+Vless的看YouTube速度這麼快的原因。</p>\\\n<h2 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;font-size:30px;line-height:35px;margin-top:35px;margin-bottom:15px;\\\">ProxyIP的問題</h2>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">由於有大量網站都是利用CLOUDFLARE CDN的，導致z大的這套組合拳會經常調用proxyIP。引申的問題有：</p>\\\n<h3 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-size:30px;line-height:35px;margin-top:35px;font-weight:normal;margin-bottom:15px;\\\">安全性問題</h3>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">z大的vless轉發script似乎只有幫數據包套vlessHeader，並<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">不是傳統VPN那樣上加密</span></strong>。這樣的情況把數據轉發不知道背後是誰運營的proxyIP放心嗎？</p>\\\n<h3 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-size:30px;line-height:35px;margin-top:35px;font-weight:normal;margin-bottom:15px;\\\">速度問題</h3>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">這些proxyIP能提供的轉發速度不是無限的，單個IP也不知道有沒有地域優化，導致<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">ping值和速度都受限制</span></strong>。</p>\\\n<h3 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-size:30px;line-height:35px;margin-top:35px;font-weight:normal;margin-bottom:15px;\\\">能用多久？</h3>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">我在網上搜到能用的這種“神奇的ip”就那麼幾個，就算撇開<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">安全性</span></strong>，如果沒有了這種“神奇的ip”，Cloudflare又不重開Worker訪問自家IP的權限的話，那麼這整套所謂“不需VPS 永久免費的Cloudflare VPN“就瞬間崩塌。</p>\\\n<h3 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-size:30px;line-height:35px;margin-top:35px;font-weight:normal;margin-bottom:15px;\\\">20230818更新：ProxyIP和CF反向代理IP的詳細解釋</h3>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">Youtuber不良林在這個視頻的5:30秒左右開始說明“CF反代IP“也就是我們多次提到的”Proxy IP”的用途。影片中還有教大家如何找到這些代理IP。</p>\\\n\\\n\\\n\\\n<h2 style=\\\"font-family:&quot;PT Serif&quot;;text-align:left;margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;font-size:30px;line-height:35px;margin-top:35px;margin-bottom:15px;\\\">瑕不掩瑜：CloudFlare VLESS方案評價</h2>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">雖然說道了現時的CF VLESS因爲proxyIP有各種問題，但是小U認爲CloudFlare+VLESS依然是現時<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">最容易上手、性能首屈一指的免費翻牆方案</span></strong>。即使proxyIP出了問題，還是能用他能上到一些非Cloudflare的大型的外部網站和APP，進行下一步的翻牆部署，不能不說是<strong style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-weight:bold;\\\"><span style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;font-style:unset;\\\">極佳的“翻牆起手式”</span></strong>。</p>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">關於VLESS on Cloudflare，小U還有幾個問題想研究/分享的：</p>\\\n<ul style=\\\"padding:0px;border:0px;font:inherit;vertical-align:baseline;margin:0px 0px 1.5em 1.5em;list-style:none;margin-top:-1em;list-style-type:none;\\\">\\\n<li style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;list-style-type:inherit;list-style-position:outside;\\\">Cloudflare 線路優選 / 優選IP是什麼一回事？</li>\\\n<li style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;list-style-type:inherit;list-style-position:outside;\\\">Cloudflare Warp / Warp+ 會是更好的方案嗎？</li>\\\n<li style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;list-style-type:inherit;list-style-position:outside;\\\">能不能像 Surfshark, NordVPN 那樣選擇出口IP的所在國家？</li>\\\n</ul>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">如有任何問題或想討論的，歡迎留言~</p>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;\\\">其他翻牆的方法請參考：</p>\\\n<ul style=\\\"padding:0px;border:0px;font:inherit;vertical-align:baseline;margin:0px 0px 1.5em 1.5em;list-style:none;margin-top:-1em;list-style-type:none;\\\">\\\n<li style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;list-style-type:inherit;list-style-position:outside;\\\"><a href=\\\"https://upsangel.com/security/vpn/%e5%8f%af%e7%94%a8%e7%9a%84%e7%bf%bb%e7%89%86%e6%95%99%e7%a8%8b/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">【再不看就失效了】三個可用的翻牆協議介紹和使用教程</a></li>\\\n</ul>\\\n<p style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:0px;\\\">p.s. 我發現Cloudflare Worker還有另一個功用：串接OpenAI的API實現<a href=\\\"https://upsangel.com/security/vpn/chatgpt-vpn-sorry-you-have-been-blocked-solutions/\\\" style=\\\"color:rgb(6, 85, 136);margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;text-decoration:none;\\\" target=\\\"_blank\\\">【ChatGPT】用VPN都“Sorry, you have been blocked”的解決方法</a></p>\\\n\\\n</div></div></div><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;margin-bottom:1.5em;position:absolute;top:-1000px;left:-1000px;\\\">Measure</div><div style=\\\"margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline;position:absolute;top:-1000px;left:-1000px;line-height:1;margin-bottom:0px;\\\">Measure</div></div></div></div></div></div></div></div>\\\n</div>\\\n</span>\\\n</div></body></html>\\u0000\"]],\"start1\":0,\"start2\":0,\"length1\":0,\"length2\":23790}]"
metadata_diff: {"new":{"id":"5f57a31cf9f346afaf0f47dff2420ed8","parent_id":"061de1401cfc4cfaadf6e74e015970e9","latitude":"0.00000000","longitude":"0.00000000","altitude":"0.0000","author":"","source_url":"","is_todo":0,"todo_due":0,"todo_completed":0,"source":"joplin-desktop","source_application":"net.cozic.joplin-desktop","application_data":"","order":1764345887590,"markup_language":2,"is_shared":0,"share_id":"","conflict_original_id":"","master_key_id":"","user_data":"","deleted_time":0},"deleted":[]}
encryption_cipher_text: 
encryption_applied: 0
updated_time: 2025-11-28T16:20:26.364Z
created_time: 2025-11-28T16:20:26.364Z
type_: 13