惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google Online Security Blog
Google Online Security Blog
博客园_首页
酷 壳 – CoolShell
酷 壳 – CoolShell
Jina AI
Jina AI
博客园 - Franky
大猫的无限游戏
大猫的无限游戏
Hugging Face - Blog
Hugging Face - Blog
博客园 - 司徒正美
V
V2EX
雷峰网
雷峰网
云风的 BLOG
云风的 BLOG
V
Visual Studio Blog
F
Full Disclosure
Y
Y Combinator Blog
V
V2EX - 技术
Attack and Defense Labs
Attack and Defense Labs
S
Security @ Cisco Blogs
Schneier on Security
Schneier on Security
Microsoft Azure Blog
Microsoft Azure Blog
SecWiki News
SecWiki News
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
The GitHub Blog
The GitHub Blog
量子位
PCI Perspectives
PCI Perspectives
S
Secure Thoughts
D
Darknet – Hacking Tools, Hacker News & Cyber Security
AWS News Blog
AWS News Blog
Blog — PlanetScale
Blog — PlanetScale
爱范儿
爱范儿
K
Kaspersky official blog
B
Blog
A
Arctic Wolf
Hacker News: Ask HN
Hacker News: Ask HN
L
LangChain Blog
T
Tor Project blog
P
Privacy & Cybersecurity Law Blog
Recent Announcements
Recent Announcements
宝玉的分享
宝玉的分享
The Register - Security
The Register - Security
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
L
Lohrmann on Cybersecurity
D
Docker
A
About on SuperTechFans
H
Hackread – Cybersecurity News, Data Breaches, AI and More
Google DeepMind News
Google DeepMind News
The Last Watchdog
The Last Watchdog
S
Security Affairs
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
P
Privacy International News Feed
Simon Willison's Weblog
Simon Willison's Weblog

思有云 - IOIOX - 网络服务

群晖NAS反向代理 + 内网穿透 = 无需端口访问内网所有服务无需端口 - 思有云 群晖NAS内网穿透各套件独立门户系列教程 - Drive - 思有云 群晖NAS内网穿透各套件独立门户系列教程 - File Station - 思有云 群晖NAS网络服务 - docker 部署配置腾讯云 DNSPod DDNS 动态域名解析 - 思有云 群晖NAS网络服务 - docker 部署配置 Cloudflare DDNS 动态域名解析 - 思有云 群晖NAS使用 docker 部署 frps 实现直连内网远程办公 - 思有云 解决群晖NAS内网穿透后移动端DS File无法连接的问题 - 思有云 - IOIOX 群晖NAS内网穿透各套件独立门户系列教程 - Docker应用 - 思有云 群晖NAS内网穿透各套件独立门户系列教程 - Moments - 思有云
群晖NAS网络服务 - 原生 DDNS 部署配置 Cloudflare DDNS 动态域名解析 - 思有云
博主: Stille · 2026-02-04 · via 思有云 - IOIOX - 网络服务

DSM7.2 纯ipv6脚本见下文,
ipv6脚本原理:由于在群晖DDNS面板配置中,无法指定ipv6地址的获取,故通过读取群辉网卡中的ipv6地址,实现ddns中ipv6地址的设置;
所以在使用该脚本时,需注意修改 第20行代码“ip6fetch=$(ip -6 addr show ovs_eth0 | grep -oE "$ipv6Regex" | head -n 1 || true)”获取的ipv6地址是否是真正的公网ipv6地址,在测试时,可以通过 bash -x /sbin/cloudflareddns.sh 查看输出的ipv6地址是否是正确的公网ip;其中涉及网口(尤其是双网口设备)的选择、正则的匹配、正则匹配结果正确ip行的选择。
关键命令行解析:
通过linux 命令
ip -6 addr 可以获取所有网卡的ipv6地址;
show ovs_eth0 只显示第一个网口的信息(此处可以通过 ip -6 addr 显示的信息,决定是否修改 ovs_eth0的值,有可能网线插的另一个网口,可能需要修改为 ovs_eth1 ,也有可能网卡命名规则不是 ovs_xxx的形式,需要根据实际情况修改为正确的网卡名称)
| grep -oE "$ipv6Regex" 正则匹配显示网口的ipv6地址
| head -n 1 值获取正则匹配结果后的第一行信息(ipv6地址可能有多个,只能取一个作为DDNS的更新ip)

也可以通过linux命令打印输出的ipv6地址,若不正确,需自行调整
ip -6 addr show ovs_eth0 | grep -oE "(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]).){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]).){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))" || true

!/bin/bashcopyright:https://raw.githubusercontent.com/joshuaavalon/SynologyCloudflareDDNS/master/cloudflareddns.sh

set -e;
ipv6Regex="(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]).){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]).){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))"
ipv6="true"

proxy="true"ask for existing proxy, don't override it <.<DSM Config

username="$1"
password="$2"
hostname="$3"
ipAddr="$4"
recType6="AAAA"

Fetch and filter IPv6, if Synology won't provide it

if [[ $ipv6 = "true" ]]; then

# ip6fetch=$(ip -6 addr show eth0 | grep -oP "$ipv6Regex" || true)
# Look out: `ip -6 addr show {your ipv6 network card} [filter your one ipv6 addr] `
ip6fetch=$(ip -6 addr show ovs_eth0 | grep -oE "$ipv6Regex" | head -n 1 || true)
# ip6Addr=$(if [ -z "$ip6fetch" ]; then echo ""; else echo "${ip6fetch:0:$((${#ip6fetch})) - 7}"; fi) # in case of NULL, echo NULL
# Look out: ip6Addr final output your public ipv6 addr
ip6Addr=$(if [ -z "$ip6fetch" ]; then echo ""; else echo "${ip6fetch}"; fi) # in case of NULL, echo NULL
if [[ -z "$ip6Addr" ]]; then
    ipv6="false";     # if only ipv4 is available
    echo "not obtain ipv6 addr";
    exit 1;
fi

else

echo "not obtain ipv6 addr";
exit 1;

fi

above only, if IPv4 and/or IPv6 is provided

listDnsv6Api="https://api.cloudflare.com/client/v4/zones/${username}/dns_records?type=${recType6}&name=${hostname}" # if only IPv4 is provided

resv6=$(curl -s -X GET "$listDnsv6Api" -H "Authorization: Bearer $password" -H "Content-Type:application/json");
resSuccess=$(echo "$resv6" | jq -r ".success")

if [[ $resSuccess != "true" ]]; then

echo "badauth";
exit 1;

fi

recordIdv6=$(echo "$resv6" | jq -r ".result[0].id");
recordIpv6=$(echo "$resv6" | jq -r ".result[0].content");
recordProxv6=$(echo "$resv6" | jq -r ".result[0].proxied");

API-Calls for creating DNS-Entries

createDnsApi="https://api.cloudflare.com/client/v4/zones/${username}/dns_records" # does also work for IPv6

API-Calls for update DNS-Entries

updateDnsApi="https://api.cloudflare.com/client/v4/zones/${username}/dns_records/${recordId}" # for IPv4 or if provided IPv6
update6DnsApi="https://api.cloudflare.com/client/v4/zones/${username}/dns_records/${recordIdv6}" # if only IPv4 is provided

if [[ $recordIpv6 = "$ip6Addr" ]]; then

echo "nochg";
exit 0;

fi

if [[ $recordIdv6 = "null" ]]; then

# IPv6 Record not exists
proxy="false"; # new entry, enable proxy by default
res6=$(curl -s -X POST "$createDnsApi" -H "Authorization: Bearer $password" -H "Content-Type:application/json" --data "{\"type\":\"$recType6\",\"name\":\"$hostname\",\"content\":\"$ip6Addr\",\"proxied\":$proxy}");

else

# IPv6 Record exists
res6=$(curl -s -X PUT "$update6DnsApi" -H "Authorization: Bearer $password" -H "Content-Type:application/json" --data "{\"type\":\"$recType6\",\"name\":\"$hostname\",\"content\":\"$ip6Addr\",\"proxied\":$recordProxv6}");

fi;
res6Success=$(echo "$res6" | jq -r ".success");

if [[ $res6Success = "true" ]]; then

echo "good";

else

echo "badauth";

fi